Edit tour

Windows Analysis Report
https://metamaeasskelog.webflow.io/

Overview

General Information

Sample URL:	https://metamaeasskelog.webflow.io/
Analysis ID:	1643680
Infos:

Detection

HTMLPhisher

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

AI detected landing page (webpage, office document or email)

AI detected suspicious URL

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5740 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2052 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2236,i,15774150710409604469,17605322898154356825,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6636 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://metamaeasskelog.webflow.io/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://metamaeasskelog.webflow.io/

Avira URL Cloud: detection malicious, Label: phishing

Phishing

Yara detected HtmlPhish64

Source: Yara match

File source: 0.0.pages.csv, type: HTML

AI detected landing page (webpage, office document or email)

Source: https://metamaeasskelog.webflow.io/

Joe Sandbox AI: Page contains button: 'Download for' Source: '0.0.pages.csv'

AI detected suspicious URL

Source: https://metamaeasskelog.webflow.io

Joe Sandbox AI: The URL 'metamaeasskelog.webflow.io' appears to be attempting to mimic 'metamask.io', a known cryptocurrency wallet service. The visual similarity is achieved through character substitution and reordering, such as 'metamaeasskelog' which closely resembles 'metamask'. The use of 'webflow.io' as a domain extension is a legitimate platform for hosting websites, but in this context, it could be misleading. The structural similarity and the potential for user confusion due to the rearrangement of letters suggest a high likelihood of typosquatting. However, the use of 'webflow.io' could also indicate a legitimate use case if it were part of a marketing or development project, but without additional context, it leans towards a deceptive intent.

Source: https://metamaeasskelog.webflow.io/

HTTP Parser: Number of links: 0

Source: https://metamaeasskelog.webflow.io/

HTTP Parser: Title: MetaMask Login* - MetaMask - Blockchain Walle does not match URL

Source: https://posectsinsive.com/85e34939-443a-47dc-9e9e-5da8ae9aad3b

HTTP Parser: No favicon

Source: https://metamaeasskelog.webflow.io/

HTTP Parser: No <meta name="author".. found

Source: https://metamaeasskelog.webflow.io/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.251.40.196:443 -> 192.168.2.6:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.6:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.6:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.251.68:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.32.7.89:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.32.7.89:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.32.7.89:443 -> 192.168.2.6:49721 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.33.40.140
Source: unknown	TCP traffic detected without corresponding DNS query: 184.31.68.248
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: metamaeasskelog.webflow.ioConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6513a71f9ce90eda6bec4c4e/css/metamaeasskelog.webflow.66a951ca5.css HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://metamaeasskelog.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6513a71f9ce90eda6bec4c4e/js/webflow.24a563ff7.js HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://metamaeasskelog.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=6513a71f9ce90eda6bec4c4e HTTP/1.1Host: d3e54v103j8qbb.cloudfront.netConnection: keep-aliveOrigin: https://metamaeasskelog.webflow.iosec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://metamaeasskelog.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6513a71f9ce90eda6bec4c4e/6513a73b3764e81eba327986_meta_banner_ege.jpg HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://metamaeasskelog.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6513a71f9ce90eda6bec4c4e/6513a77dfec356d50dcae611_MetaMask%20webflow.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://metamaeasskelog.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6513a71f9ce90eda6bec4c4e/6513a73b3764e81eba327986_meta_banner_ege.jpg HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /6513a71f9ce90eda6bec4c4e/6513a77dfec356d50dcae611_MetaMask%20webflow.png HTTP/1.1Host: cdn.prod.website-files.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /85e34939-443a-47dc-9e9e-5da8ae9aad3b HTTP/1.1Host: posectsinsive.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://metamaeasskelog.webflow.io/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: posectsinsive.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://posectsinsive.com/85e34939-443a-47dc-9e9e-5da8ae9aad3bAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: posectsinsive.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: metamaeasskelog.webflow.io
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.website-files.com
Source: global traffic	DNS traffic detected: DNS query: d3e54v103j8qbb.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: posectsinsive.com

Source: chromecache_64.3.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_67.3.dr	String found in binary or memory: https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/6513a73b3764e81eba327986_meta_banner_ege
Source: chromecache_67.3.dr	String found in binary or memory: https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/6513a77dfec356d50dcae611_MetaMask%20webf
Source: chromecache_67.3.dr	String found in binary or memory: https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/css/metamaeasskelog.webflow.66a951ca5.cs
Source: chromecache_67.3.dr	String found in binary or memory: https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/js/webflow.24a563ff7.js
Source: chromecache_67.3.dr	String found in binary or memory: https://cdn.prod.website-files.com/img/webclip.png
Source: chromecache_67.3.dr	String found in binary or memory: https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6513a71f9ce90eda6bec4c4
Source: chromecache_64.3.dr	String found in binary or memory: https://github.com/bkwld/tram
Source: chromecache_67.3.dr	String found in binary or memory: https://posectsinsive.com/85e34939-443a-47dc-9e9e-5da8ae9aad3b
Source: chromecache_66.3.dr, chromecache_71.3.dr, chromecache_68.3.dr	String found in binary or memory: https://reportfraud.ftc.gov/#/
Source: chromecache_67.3.dr	String found in binary or memory: https://webflow.com
Source: chromecache_66.3.dr, chromecache_71.3.dr, chromecache_68.3.dr	String found in binary or memory: https://www.sec.gov/tcr

Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49681
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49681 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703

Source: unknown	HTTPS traffic detected: 142.251.40.196:443 -> 192.168.2.6:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.6:49706 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.36.248:443 -> 192.168.2.6:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.161.117:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.33.251.68:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.160.117:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.32.7.89:443 -> 192.168.2.6:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.32.7.89:443 -> 192.168.2.6:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 45.32.7.89:443 -> 192.168.2.6:49721 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5740_691266243

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5740_691266243

Jump to behavior

Source: classification engine

Classification label: mal64.phis.win@24/19@14/7

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2236,i,15774150710409604469,17605322898154356825,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://metamaeasskelog.webflow.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2236,i,15774150710409604469,17605322898154356825,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	2 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://metamaeasskelog.webflow.io/	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://posectsinsive.com/favicon.ico	0%	Avira URL Cloud	safe
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6513a71f9ce90eda6bec4c4e	0%	Avira URL Cloud	safe
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6513a71f9ce90eda6bec4c4	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
d3e54v103j8qbb.cloudfront.net	13.33.251.68	true	false	high
cdn.prod.website-files.com	104.18.161.117	true	false	high
posectsinsive.com	45.32.7.89	true	false	high
www.google.com	142.251.40.196	true	false	high
metamaeasskelog.webflow.io	104.18.36.248	true	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/6513a77dfec356d50dcae611_MetaMask%20webflow.png	false		high
https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/css/metamaeasskelog.webflow.66a951ca5.css	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6513a71f9ce90eda6bec4c4e	false	Avira URL Cloud: safe	unknown
https://metamaeasskelog.webflow.io/	true		unknown
https://posectsinsive.com/85e34939-443a-47dc-9e9e-5da8ae9aad3b	false		unknown
https://posectsinsive.com/favicon.ico	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/6513a73b3764e81eba327986_meta_banner_ege.jpg	false		high
https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/js/webflow.24a563ff7.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.sec.gov/tcr	chromecache_66.3.dr, chromecache_71.3.dr, chromecache_68.3.dr	false		high
https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/6513a77dfec356d50dcae611_MetaMask%20webf	chromecache_67.3.dr	false		high
http://underscorejs.org	chromecache_64.3.dr	false		high
https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/css/metamaeasskelog.webflow.66a951ca5.cs	chromecache_67.3.dr	false		high
https://cdn.prod.website-files.com/img/webclip.png	chromecache_67.3.dr	false		high
https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/6513a73b3764e81eba327986_meta_banner_ege	chromecache_67.3.dr	false		high
https://reportfraud.ftc.gov/#/	chromecache_66.3.dr, chromecache_71.3.dr, chromecache_68.3.dr	false		high
https://github.com/bkwld/tram	chromecache_64.3.dr	false		high
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6513a71f9ce90eda6bec4c4	chromecache_67.3.dr	false	Avira URL Cloud: safe	unknown
https://webflow.com	chromecache_67.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.36.248	metamaeasskelog.webflow.io	United States	13335	CLOUDFLARENETUS	false
45.32.7.89	posectsinsive.com	United States	20473	AS-CHOOPAUS	false
104.18.160.117	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.161.117	cdn.prod.website-files.com	United States	13335	CLOUDFLARENETUS	false
142.251.40.196	www.google.com	United States	15169	GOOGLEUS	false
13.33.251.68	d3e54v103j8qbb.cloudfront.net	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1643680
Start date and time:	2025-03-20 01:24:51 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://metamaeasskelog.webflow.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@24/19@14/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe, TextInputHost.exe
Excluded IPs from analysis (whitelisted): 142.250.80.46, 142.251.32.99, 142.250.72.110, 172.253.62.84, 142.251.40.142, 142.251.40.174, 142.251.32.110, 23.210.73.17, 142.250.80.78, 142.250.65.206, 142.251.41.14, 199.232.210.172, 142.250.80.99, 142.250.176.195, 23.210.92.203, 184.31.69.3, 20.12.23.50
Excluded domains from analysis (whitelisted): fs.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, accounts.google.com, redirector.gvt1.com, slscr.update.microsoft.com, update.googleapis.com, ctldl.windowsupdate.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://metamaeasskelog.webflow.io/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (21487)
Category:	downloaded
Size (bytes):	37393
Entropy (8bit):	5.445369188716833
Encrypted:	false
SSDEEP:	768:55p9L796k8g5gTT3dflN5GJrU8Nkl5RpN5wEWZpuOusJHA:55p9L796lg5s5cCl5R5
MD5:	24A563FF7F33A526F1C5D98A4724B161
SHA1:	0A17FF5052DB690E6B85B142CAF2A2B8A1209BE3
SHA-256:	42EBE676344CE06CD4DF40F82E6CE5D899BDE9A89691EF37E8F732CABB70E1DA
SHA-512:	32484047F3A150B4FB6681B9C41569207783713C1D0791D2F68BC975B01AE70F06E276F3AC194CE16A44C21E339F38DF500E9677A087C7FDB64F0B1AC0F63DD7
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/js/webflow.24a563ff7.js
Preview:	./!. Webflow: Front-end site library. * @license MIT. * Inline scripts may access the api using an async handler:. * var Webflow = Webflow \|\| [];. * Webflow.push(readyFunction);. /..(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y.exports);var Pt=lt(()=>{window.tram=function(e){function y(t,n){var i=new J.Bare;return i.init(t,n)}function l(t){return t.replace(/[A-Z]/g,function(n){return"-"+n.toLowerCase()})}function A(t){var n=parseInt(t.slice(1),16),i=n>>16&255,r=n>>8&255,s=255&n;return[i,r,s]}function C(t,n,i){return"#"+(1<<24\|t<<16\|n<<8\|i).toString(16).slice(1)}function g(){}function L(t,n){B("Type warning: Expected: ["+t+"] Got: ["+typeof n+"] "+n)}function _(t,n,i){B("Units do not match ["+t+"]: "+n+", "+i)}function R(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.console.warn(t)}function U(t){for(var n=-1,i=t?t.l

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1651
Entropy (8bit):	7.841421469806404
Encrypted:	false
SSDEEP:	48:2KqmsQQ2bURcD4OaS2aBp62MaJk1tD6OSdp6sEsrc:2KqZQQnMBp6Ruk1tZSdp6sEs4
MD5:	E0816DE2CBA5092AD1F8810D76172621
SHA1:	09FD22CBEF1C3495E08507677356EDF9D646BE6D
SHA-256:	475939567FAE069CE4F7ACD0297EDE5FC37AA631F61E04E8B010A7B2E8974B3E
SHA-512:	17B92AB48B54E01DDAF0FC9E86FBAB2069155D87FF33CF9E182B394DD930E0ACE8C5C1C53C53D07E805071E01A54228AC362B4FE72D55C605BB5633580E2C0F4
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~.....sRGB.........IDATXG.Wwl.e.~....^.t.-..R....V.".2......#.TH...c...`..H@...."...e(H...Fk.VZ:(tp..o......#.?.%_..;........]6....{.@V,..U...0....N..)F....N..F.\|=O.66.J4....W.]{j]..8.!.M.xv.L."...v.[..Tm..@..."..C..fi~Q&.,..ci.4..n.....].T... C..G.<{.z..1.sf.l8vU...m...Y.j..x-.@q.zC.p.I...B~.......{.x;..h.....<.l.F.2P.*..M...o.o..+.]+".X<A[....B.S.I...Q!I.....^. I.z[qE...@..6t9..............E.W3..3)..!...4.......h.p.....9Su...F....1..KWo.S..\|MJ.P.AA..^eu...D.o..-..M....-............d#.%..H.....U%...P......k..5.......9...#@...L...Ho=(..I....Bx....\.mV~...HT!..\C-E $.>...gg.H..0...."`...l2...p.[...Q.c...x....#...t....Ef.nVX.7...IC....X.......6...W...a.`.H.[..'....Q....C....8...$F...y...~.i....J.....y%5.#.Z...N.M=.<...+..w.9/P...#.`.i..'=.d(........T..X.7..#D..X@...H.B....9....F7....tQ.......k.)B.d......h.:....!..'A.e..).M.HI.)h....Wt.Q8=(..O.6...j@...N'..N.. .-Q !cd..._..6.z....T...&...B..n..U..+..W.

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	dropped
Size (bytes):	3963
Entropy (8bit):	4.62502051879877
Encrypted:	false
SSDEEP:	96:Iz97yxaJTX88ZfizfsI1C8x/g14qJm+hGRLer:Iz97yxaJTM8ZfEsI1Ckg14R+cLer
MD5:	B42FF9000901494E683E1A8D0727EC5B
SHA1:	210CC36BB25DC83838BE4BD959664D23599D0A9A
SHA-256:	61DD262EB5697D96B0F85518FEF6526FB3CD7D62A81003A24DF589E651AD52D8
SHA-512:	D102B3C3D9BB0C59BEA25E50FBE3A18D0E69632C7B85B159E6B7B0F065C8A00B4F94ECA8F5FE576407CA7069C2B975542B510469E12AFE1432D1C82413359AB6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Crypto Scam Alert</title>. <style>. body {. font-family: sans-serif;. margin: 20px;. line-height: 1.6;. }. h1 {. color: red;. }. .warning {. background-color: yellow;. padding: 10px;. margin-bottom: 20px;. border: 1px solid orange;. }. .report-info {. margin-top: 20px;. }. ul {. list-style-type: disc;. margin-left: 20px;. }.. </style>.</head>.<body>.. <h1>Crypto Scam Alert</h1>.. <div class="warning">. <h2>Beware of Crypto Scams!</h2>. <p>The world of cryptocurrency is exciting, but it's also rife with scams. Protect yourself by staying informed and being cautious. Never invest more than you can afford to lose.</p>. </div>.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2458), with no line terminators
Category:	downloaded
Size (bytes):	2461
Entropy (8bit):	5.342300139328802
Encrypted:	false
SSDEEP:	48:YTVAy1+UjCdXXzbKyLgnC4iGba2oK0vb+XKvKbfKNtKHK/KJgQzKK8:OAy/kXjb7LTdvbbvOfWtKW6RN8
MD5:	D961329639366510EE62456B3AFD6BD2
SHA1:	705BDC76AEA45A54977ECF6CDD3B87DABC3AB790
SHA-256:	23D374A10E68EB55C948945BAEE192CCDC6C4DE7BC71250CAF5397CEA04C3632
SHA-512:	AE0AE11FE2AF781F99A5E2999EC7AAA97C15A6F575A46F72265AF194FD50266AC71C729B6C4F59F750D1CBDB8015E8A1DD728F82236C058FBBF4E5858DC04661
Malicious:	false
Reputation:	low
URL:	https://metamaeasskelog.webflow.io/
Preview:	<!DOCTYPE html> This site was created in Webflow. https://webflow.com --> Last Published: Wed Sep 27 2023 03:55:27 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="metamaeasskelog.webflow.io" data-wf-page="6513a71f9ce90eda6bec4c51" data-wf-site="6513a71f9ce90eda6bec4c4e"><head><meta charset="utf-8"/><title>MetaMask. Login* - MetaMask - Blockchain Walle</title><meta content="MetaMask regularly releases updates to fix ...The login process involves three primary steps: installation, account creation, and login. By following these steps, users can ." name="description"/><meta content="width=device-width, initial-scale=1" name="viewport"/><meta content="Webflow" name="generator"/><link href="https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/css/metamaeasskelog.webflow.66a951ca5.css" rel="stylesheet" type="text/css"/><script type="text/javascript">!function(o,c){var n=c.documentElement,t=" w-mod-";n.className+=t+"js",("ontouchstart"in o\|\|o.DocumentTouch&&c

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3963
Entropy (8bit):	4.62502051879877
Encrypted:	false
SSDEEP:	96:Iz97yxaJTX88ZfizfsI1C8x/g14qJm+hGRLer:Iz97yxaJTM8ZfEsI1Ckg14R+cLer
MD5:	B42FF9000901494E683E1A8D0727EC5B
SHA1:	210CC36BB25DC83838BE4BD959664D23599D0A9A
SHA-256:	61DD262EB5697D96B0F85518FEF6526FB3CD7D62A81003A24DF589E651AD52D8
SHA-512:	D102B3C3D9BB0C59BEA25E50FBE3A18D0E69632C7B85B159E6B7B0F065C8A00B4F94ECA8F5FE576407CA7069C2B975542B510469E12AFE1432D1C82413359AB6
Malicious:	false
Reputation:	low
URL:	https://posectsinsive.com/85e34939-443a-47dc-9e9e-5da8ae9aad3b
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Crypto Scam Alert</title>. <style>. body {. font-family: sans-serif;. margin: 20px;. line-height: 1.6;. }. h1 {. color: red;. }. .warning {. background-color: yellow;. padding: 10px;. margin-bottom: 20px;. border: 1px solid orange;. }. .report-info {. margin-top: 20px;. }. ul {. list-style-type: disc;. margin-left: 20px;. }.. </style>.</head>.<body>.. <h1>Crypto Scam Alert</h1>.. <div class="warning">. <h2>Beware of Crypto Scams!</h2>. <p>The world of cryptocurrency is exciting, but it's also rife with scams. Protect yourself by staying informed and being cautious. Never invest more than you can afford to lose.</p>. </div>.

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6], baseline, precision 8, 1377x668, components 3
Category:	downloaded
Size (bytes):	104561
Entropy (8bit):	7.236106219252631
Encrypted:	false
SSDEEP:	3072:XSzJ1wmdQRXDLA2g5VkZ5/Wjad1ey2GGt:CzJmmapDc2g5mD/Rd0HGGt
MD5:	01030FCAC9B9AD136CE8285E64EEDD4A
SHA1:	29C841D2676528A27FE08941DFA25AFBB33EE741
SHA-256:	AD634A64D9A4949C1D523FFD6E4796F45A7BE15865D2AB1638F8E09FD0DCD2E1
SHA-512:	79DC2FD9A5575F1928FA011F1850414C1A961FC558BCA4D923A95CBD100258B8A22E9F33FA48742EED216E2C278A0321FD5FB47CB24C193F6BA10B1097ED700A
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/6513a73b3764e81eba327986_meta_banner_ege.jpg
Preview:	......JFIF.....`.`....$.Exif..MM.*.............&...b.............1.....&.....2...........i.....................V...F....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JPEG image data, JFIF standard 1.01, resolution (DPI), density 96x96, segment length 16, Exif Standard: [TIFF image data, big-endian, direntries=6], baseline, precision 8, 1377x668, components 3
Category:	dropped
Size (bytes):	104561
Entropy (8bit):	7.236106219252631
Encrypted:	false
SSDEEP:	3072:XSzJ1wmdQRXDLA2g5VkZ5/Wjad1ey2GGt:CzJmmapDc2g5mD/Rd0HGGt
MD5:	01030FCAC9B9AD136CE8285E64EEDD4A
SHA1:	29C841D2676528A27FE08941DFA25AFBB33EE741
SHA-256:	AD634A64D9A4949C1D523FFD6E4796F45A7BE15865D2AB1638F8E09FD0DCD2E1
SHA-512:	79DC2FD9A5575F1928FA011F1850414C1A961FC558BCA4D923A95CBD100258B8A22E9F33FA48742EED216E2C278A0321FD5FB47CB24C193F6BA10B1097ED700A
Malicious:	false
Reputation:	low
Preview:	......JFIF.....`.`....$.Exif..MM.*.............&...b.............1.....&.....2...........i.....................V...F....................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text
Category:	downloaded
Size (bytes):	3963
Entropy (8bit):	4.62502051879877
Encrypted:	false
SSDEEP:	96:Iz97yxaJTX88ZfizfsI1C8x/g14qJm+hGRLer:Iz97yxaJTM8ZfEsI1Ckg14R+cLer
MD5:	B42FF9000901494E683E1A8D0727EC5B
SHA1:	210CC36BB25DC83838BE4BD959664D23599D0A9A
SHA-256:	61DD262EB5697D96B0F85518FEF6526FB3CD7D62A81003A24DF589E651AD52D8
SHA-512:	D102B3C3D9BB0C59BEA25E50FBE3A18D0E69632C7B85B159E6B7B0F065C8A00B4F94ECA8F5FE576407CA7069C2B975542B510469E12AFE1432D1C82413359AB6
Malicious:	false
Reputation:	low
URL:	https://posectsinsive.com/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">.<head>. <meta charset="UTF-8">. <meta name="viewport" content="width=device-width, initial-scale=1.0">. <title>Crypto Scam Alert</title>. <style>. body {. font-family: sans-serif;. margin: 20px;. line-height: 1.6;. }. h1 {. color: red;. }. .warning {. background-color: yellow;. padding: 10px;. margin-bottom: 20px;. border: 1px solid orange;. }. .report-info {. margin-top: 20px;. }. ul {. list-style-type: disc;. margin-left: 20px;. }.. </style>.</head>.<body>.. <h1>Crypto Scam Alert</h1>.. <div class="warning">. <h2>Beware of Crypto Scams!</h2>. <p>The world of cryptocurrency is exciting, but it's also rife with scams. Protect yourself by staying informed and being cautious. Never invest more than you can afford to lose.</p>. </div>.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (2587)
Category:	downloaded
Size (bytes):	37178
Entropy (8bit):	5.233392678257781
Encrypted:	false
SSDEEP:	768:oSh7f7A1ReqMrFyF54mkxWaIi1aUuF9ZlNF+FJFGFI9fmV/3P0mq1izJVmI:oSe1Req44UYcDoT/fC1q
MD5:	66A951CA5B058D80438F557E5B055A21
SHA1:	98B78E0340EAAD9FA184E8776D1BBB2393D4AADD
SHA-256:	85A78AE27FC4DAD59836C2D3A2F38FAF48F33B990875DD018239AE86BB326939
SHA-512:	885BBD469AEF736FD043F8E43B46767223EE842C4ADD53DF672EC8FE7B7A4B63858E404EA4F7C0DC67C498424E5F34E3B65B021E2921C496B244CEDE90BAED3D
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/css/metamaeasskelog.webflow.66a951ca5.css
Preview:	html {. -ms-text-size-adjust: 100%;. -webkit-text-size-adjust: 100%;. font-family: sans-serif;.}..body {. margin: 0;.}..article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary {. display: block;.}..audio, canvas, progress, video {. vertical-align: baseline;. display: inline-block;.}..audio:not([controls]) {. height: 0;. display: none;.}..[hidden], template {. display: none;.}..a {. background-color: rgba(0, 0, 0, 0);.}..a:active, a:hover {. outline: 0;.}..abbr[title] {. border-bottom: 1px dotted;.}..b, strong {. font-weight: bold;.}..dfn {. font-style: italic;.}..h1 {. margin: .67em 0;. font-size: 2em;.}..mark {. color: #000;. background: #ff0;.}..small {. font-size: 80%;.}..sub, sup {. vertical-align: baseline;. font-size: 75%;. line-height: 0;. position: relative;.}..sup {. top: -.5em;.}..sub {. bottom: -.25em;.}..img {. border: 0;.}..svg:not(:root) {. overflow: hidden;.}..figure {. margin: 1em 40px;.}..hr {.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 32 x 32, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1651
Entropy (8bit):	7.841421469806404
Encrypted:	false
SSDEEP:	48:2KqmsQQ2bURcD4OaS2aBp62MaJk1tD6OSdp6sEsrc:2KqZQQnMBp6Ruk1tZSdp6sEs4
MD5:	E0816DE2CBA5092AD1F8810D76172621
SHA1:	09FD22CBEF1C3495E08507677356EDF9D646BE6D
SHA-256:	475939567FAE069CE4F7ACD0297EDE5FC37AA631F61E04E8B010A7B2E8974B3E
SHA-512:	17B92AB48B54E01DDAF0FC9E86FBAB2069155D87FF33CF9E182B394DD930E0ACE8C5C1C53C53D07E805071E01A54228AC362B4FE72D55C605BB5633580E2C0F4
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/6513a77dfec356d50dcae611_MetaMask%20webflow.png
Preview:	.PNG........IHDR... ... .....szz.....pHYs...........~.....sRGB.........IDATXG.Wwl.e.~....^.t.-..R....V.".2......#.TH...c...`..H@...."...e(H...Fk.VZ:(tp..o......#.?.%_..;........]6....{.@V,..U...0....N..)F....N..F.\|=O.66.J4....W.]{j]..8.!.M.xv.L."...v.[..Tm..@..."..C..fi~Q&.,..ci.4..n.....].T... C..G.<{.z..1.sf.l8vU...m...Y.j..x-.@q.zC.p.I...B~.......{.x;..h.....<.l.F.2P.*..M...o.o..+.]+".X<A[....B.S.I...Q!I.....^. I.z[qE...@..6t9..............E.W3..3)..!...4.......h.p.....9Su...F....1..KWo.S..\|MJ.P.AA..^eu...D.o..-..M....-............d#.%..H.....U%...P......k..5.......9...#@...L...Ho=(..I....Bx....\.mV~...HT!..\C-E $.>...gg.H..0...."`...l2...p.[...Q.c...x....#...t....Ef.nVX.7...IC....X.......6...W...a.`.H.[..'....Q....C....8...$F...y...~.i....J.....y%5.#.Z...N.M=.<...+..w.9/P...#.`.i..'=.d(........T..X.7..#D..X@...H.B....9....F7....tQ.......k.)B.d......h.:....!..'A.e..).M.HI.)h....Wt.Q8=(..O.6...j@...N'..N.. .-Q !cd..._..6.z....T...&...B..n..U..+..W.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65451)
Category:	downloaded
Size (bytes):	89476
Entropy (8bit):	5.2896589255084425
Encrypted:	false
SSDEEP:	1536:AjExXUqrnxDjoXEZxkMV4SYSt0zvDD6ip3h8cApwEjOPrBeU6QLiTFbc0QlQvakF:AYh8eip3huuf6IidlrvakdtQ47GK1
MD5:	DC5E7F18C8D36AC1D3D4753A87C98D0A
SHA1:	C8E1C8B386DC5B7A9184C763C88D19A346EB3342
SHA-256:	F7F6A5894F1D19DDAD6FA392B2ECE2C5E578CBF7DA4EA805B6885EB6985B6E3D
SHA-512:	6CB4F4426F559C06190DF97229C05A436820D21498350AC9F118A5625758435171418A022ED523BAE46E668F9F8EA871FEAB6AFF58AD2740B67A30F196D65516
Malicious:	false
Reputation:	low
URL:	https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6513a71f9ce90eda6bec4c4e
Preview:	/! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /.!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery requires a window with a document");return t(e)}:t(e)}("undefined"!=typeof window?window:this,function(C,e){"use strict";var t=[],r=Object.getPrototypeOf,s=t.slice,g=t.flat?function(e){return t.flat.call(e)}:function(e){return t.concat.apply([],e)},u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},E=C.document,c={type:!0,src:!0,nonce:!0,noModule:!0};function b(e,t,n){var r,i,o=(n=n\|\|E).createElement("script");if(o.text=e,t)for(r in c)(i=t[r]\|\|t.getAttribute&&t.getAttribute(r))&&o.setAttribute(r,i);n.head.appendChild(o).parentNode.removeChild(o)}function w(e){return null==e?e+"":"o

Total Packets: 258
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 20, 2025 01:25:43.506087065 CET	49672	443	192.168.2.6	204.79.197.203
Mar 20, 2025 01:25:43.818063021 CET	49672	443	192.168.2.6	204.79.197.203
Mar 20, 2025 01:25:44.427469015 CET	49672	443	192.168.2.6	204.79.197.203
Mar 20, 2025 01:25:45.630584002 CET	49672	443	192.168.2.6	204.79.197.203
Mar 20, 2025 01:25:48.036863089 CET	49672	443	192.168.2.6	204.79.197.203
Mar 20, 2025 01:25:52.085005045 CET	49678	443	192.168.2.6	20.42.65.91
Mar 20, 2025 01:25:52.397079945 CET	49678	443	192.168.2.6	20.42.65.91
Mar 20, 2025 01:25:52.438486099 CET	49703	443	192.168.2.6	142.251.40.196
Mar 20, 2025 01:25:52.438584089 CET	443	49703	142.251.40.196	192.168.2.6
Mar 20, 2025 01:25:52.438678980 CET	49703	443	192.168.2.6	142.251.40.196
Mar 20, 2025 01:25:52.438886881 CET	49703	443	192.168.2.6	142.251.40.196
Mar 20, 2025 01:25:52.438910961 CET	443	49703	142.251.40.196	192.168.2.6
Mar 20, 2025 01:25:52.636787891 CET	443	49703	142.251.40.196	192.168.2.6
Mar 20, 2025 01:25:52.636887074 CET	49703	443	192.168.2.6	142.251.40.196
Mar 20, 2025 01:25:52.638238907 CET	49703	443	192.168.2.6	142.251.40.196
Mar 20, 2025 01:25:52.638259888 CET	443	49703	142.251.40.196	192.168.2.6
Mar 20, 2025 01:25:52.638587952 CET	443	49703	142.251.40.196	192.168.2.6
Mar 20, 2025 01:25:52.693902969 CET	49703	443	192.168.2.6	142.251.40.196
Mar 20, 2025 01:25:52.850172997 CET	49672	443	192.168.2.6	204.79.197.203
Mar 20, 2025 01:25:52.996879101 CET	49678	443	192.168.2.6	20.42.65.91
Mar 20, 2025 01:25:54.206501961 CET	49678	443	192.168.2.6	20.42.65.91
Mar 20, 2025 01:25:54.210330963 CET	49706	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:25:54.210427999 CET	443	49706	104.18.36.248	192.168.2.6
Mar 20, 2025 01:25:54.210514069 CET	49706	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:25:54.210676908 CET	49706	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:25:54.210710049 CET	443	49706	104.18.36.248	192.168.2.6
Mar 20, 2025 01:25:54.237335920 CET	49707	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:25:54.237385988 CET	443	49707	104.18.36.248	192.168.2.6
Mar 20, 2025 01:25:54.237499952 CET	49707	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:25:54.237977982 CET	49707	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:25:54.237994909 CET	443	49707	104.18.36.248	192.168.2.6
Mar 20, 2025 01:25:54.407560110 CET	443	49706	104.18.36.248	192.168.2.6
Mar 20, 2025 01:25:54.407634020 CET	49706	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:25:54.412530899 CET	49706	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:25:54.412561893 CET	443	49706	104.18.36.248	192.168.2.6
Mar 20, 2025 01:25:54.412801981 CET	443	49706	104.18.36.248	192.168.2.6
Mar 20, 2025 01:25:54.413098097 CET	49706	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:25:54.431801081 CET	443	49707	104.18.36.248	192.168.2.6
Mar 20, 2025 01:25:54.431870937 CET	49707	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:25:54.432439089 CET	49707	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:25:54.432451010 CET	443	49707	104.18.36.248	192.168.2.6
Mar 20, 2025 01:25:54.432693958 CET	443	49707	104.18.36.248	192.168.2.6
Mar 20, 2025 01:25:54.460330963 CET	443	49706	104.18.36.248	192.168.2.6
Mar 20, 2025 01:25:54.477480888 CET	49707	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:25:54.684024096 CET	443	49706	104.18.36.248	192.168.2.6
Mar 20, 2025 01:25:54.684127092 CET	443	49706	104.18.36.248	192.168.2.6
Mar 20, 2025 01:25:54.684195995 CET	49706	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:25:54.684228897 CET	443	49706	104.18.36.248	192.168.2.6
Mar 20, 2025 01:25:54.684247971 CET	443	49706	104.18.36.248	192.168.2.6
Mar 20, 2025 01:25:54.684314966 CET	49706	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:25:54.685174942 CET	49706	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:25:54.685199022 CET	443	49706	104.18.36.248	192.168.2.6
Mar 20, 2025 01:25:54.799566984 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:54.799623966 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:54.799678087 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:54.799707890 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:54.799725056 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:54.799812078 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:54.799879074 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:54.799913883 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:54.799932003 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:54.799947023 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:54.806888103 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:54.806977034 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:54.807058096 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:54.807192087 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:54.807229042 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:54.999702930 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:54.999794960 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.000905037 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.000935078 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.001311064 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.001347065 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.001399994 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.001805067 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.002295971 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.002317905 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.002594948 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.002809048 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.044327974 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.044331074 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.244182110 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.244226933 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.244257927 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.244283915 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.244287014 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.244321108 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.244348049 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.244353056 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.244388103 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.244419098 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.244429111 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.244436026 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.244466066 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.244901896 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.244932890 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.244951963 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.244959116 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.245003939 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.245066881 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.245124102 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.245165110 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.245207071 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.245214939 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.245282888 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.246376991 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.246738911 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.246748924 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.246779919 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.246809959 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.246823072 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.246839046 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.246891022 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.246900082 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.246931076 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.246959925 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.246978045 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.246993065 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.247004986 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.247399092 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.247435093 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.247463942 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.247483969 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.247493982 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.247545004 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.247560024 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.247576952 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.247597933 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.247607946 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.247636080 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.247636080 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.247639894 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.247648954 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.247663975 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.247699022 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.247800112 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.248231888 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.248234034 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.248266935 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.248298883 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.248322010 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.248331070 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.248392105 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.248465061 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.248480082 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.248769999 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.248821974 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.248867035 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.248878956 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.248898029 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.248924971 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.248951912 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.248996019 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.249043941 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.249057055 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.249109030 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.249155045 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.249164104 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.249181032 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.249208927 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.249242067 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.249293089 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.249339104 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.249345064 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.249366045 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.249409914 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.249414921 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.249432087 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.249485970 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.249499083 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.249562025 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.249618053 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.249636889 CET	49711	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.249667883 CET	443	49711	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.250925064 CET	49710	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.250952959 CET	443	49710	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.296392918 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.296433926 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.296533108 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.296736002 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.296753883 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.397350073 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.397433996 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.398931026 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.398947001 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.399194002 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.399655104 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.444324017 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.491889954 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.502475023 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.502512932 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.502638102 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.502656937 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.596956015 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.596987009 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.597007990 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.597063065 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.597094059 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.597163916 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.613599062 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.613620043 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.613684893 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.613702059 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.613750935 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.613774061 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.688592911 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.688616037 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.688697100 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.688781023 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.688819885 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.688869953 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.731498957 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.731544018 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.731578112 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.731607914 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.731626987 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.731637955 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.731648922 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.731677055 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.731708050 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.731750965 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.731767893 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.731822968 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.731916904 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.731970072 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.732002020 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.732029915 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.732048035 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.732055902 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.732100010 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.732667923 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.732697964 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.732747078 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.732754946 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.732851982 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.732860088 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.733380079 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.733412027 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.733467102 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.733475924 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.733481884 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.733524084 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.733537912 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.733570099 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.733608961 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.733617067 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.733701944 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.733979940 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.734088898 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.734117985 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.734153986 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.734208107 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.734209061 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.734220028 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.734846115 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.734879017 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.734905958 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.734924078 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.734931946 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.734963894 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.735014915 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.735014915 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.735027075 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.735595942 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.735630035 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.735656023 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.735690117 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.735699892 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.735786915 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.736392021 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.736459970 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.736468077 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.736730099 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.736807108 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.736814022 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.778945923 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.786381006 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.786410093 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.786478043 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.786500931 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.786520958 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.786556005 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.786580086 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.786583900 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.786623001 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.786675930 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.786675930 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.786748886 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.792527914 CET	49712	443	192.168.2.6	13.33.251.68
Mar 20, 2025 01:25:55.792566061 CET	443	49712	13.33.251.68	192.168.2.6
Mar 20, 2025 01:25:55.916889906 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.916987896 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.917002916 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.917081118 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.917134047 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.917220116 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.917283058 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.917320967 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.917361021 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.917373896 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.917373896 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.917381048 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.917401075 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.917423010 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.917450905 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.917469978 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.917475939 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.917486906 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.917494059 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.917536020 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.917538881 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.917546988 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.917587042 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.917594910 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.917625904 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.917635918 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.917635918 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.917644024 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.917680025 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.917706966 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.917771101 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.918288946 CET	49713	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.918314934 CET	443	49713	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.966183901 CET	49714	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.966237068 CET	443	49714	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:55.966298103 CET	49714	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.966473103 CET	49714	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:55.966494083 CET	443	49714	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:56.037086010 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.037144899 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.037482023 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.039717913 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.039735079 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.159603119 CET	443	49714	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:56.159876108 CET	49714	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:56.159909010 CET	443	49714	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:56.160214901 CET	49714	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:56.160221100 CET	443	49714	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:56.233530045 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.233659983 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.327666998 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.327693939 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.328042030 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.358449936 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.400156975 CET	443	49714	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:56.400221109 CET	443	49714	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:56.400283098 CET	443	49714	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:56.400327921 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.400404930 CET	49714	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:56.400404930 CET	49714	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:56.470887899 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.471031904 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.471155882 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.471218109 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.471239090 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.471330881 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.471393108 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.471404076 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.471481085 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.471489906 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.471507072 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.471597910 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.471605062 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.471765995 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.471853018 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.471940994 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.471966028 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.471973896 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.471987963 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.472120047 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.472445011 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.472533941 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.472546101 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.472553968 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.472600937 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.472695112 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.472776890 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.472804070 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.472814083 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.473750114 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.473808050 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.473815918 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.473907948 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.473916054 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.473928928 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.474001884 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.474015951 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.474659920 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.474771023 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.474827051 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.474842072 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.474915981 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.474921942 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.474997044 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.475238085 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.475301027 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.475311041 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.475369930 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.475375891 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.475507975 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.475594044 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.475651979 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.475670099 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.475727081 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.475733995 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.476450920 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.476541042 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.476628065 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.476685047 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.476686001 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.476694107 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.477489948 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.477654934 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.477662086 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.528115988 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.563039064 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.563065052 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.563246965 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.563271046 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.563374043 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.563406944 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.563416004 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.563431025 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.563520908 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.564121962 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.564193010 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.564702988 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.564779043 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.564815998 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.565239906 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.565630913 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.565713882 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.565736055 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.565824986 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.566946030 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.567032099 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.567034960 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.567060947 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.567111015 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.567312956 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.567466021 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.567538977 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.569317102 CET	49714	443	192.168.2.6	104.18.161.117
Mar 20, 2025 01:25:56.569354057 CET	443	49714	104.18.161.117	192.168.2.6
Mar 20, 2025 01:25:56.573379040 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.574242115 CET	49715	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.574254990 CET	443	49715	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.606215000 CET	49678	443	192.168.2.6	20.42.65.91
Mar 20, 2025 01:25:56.612183094 CET	49716	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.612226009 CET	443	49716	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.612299919 CET	49716	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.612502098 CET	49716	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.612518072 CET	443	49716	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.797312975 CET	443	49716	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.797669888 CET	49716	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.797725916 CET	443	49716	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:56.797745943 CET	49716	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:56.797753096 CET	443	49716	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:57.034646988 CET	443	49716	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:57.034708977 CET	443	49716	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:57.034763098 CET	443	49716	104.18.160.117	192.168.2.6
Mar 20, 2025 01:25:57.034787893 CET	49716	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:57.034826040 CET	49716	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:57.035865068 CET	49716	443	192.168.2.6	104.18.160.117
Mar 20, 2025 01:25:57.035880089 CET	443	49716	104.18.160.117	192.168.2.6
Mar 20, 2025 01:26:01.412169933 CET	49678	443	192.168.2.6	20.42.65.91
Mar 20, 2025 01:26:02.459041119 CET	49672	443	192.168.2.6	204.79.197.203
Mar 20, 2025 01:26:02.631927967 CET	443	49703	142.251.40.196	192.168.2.6
Mar 20, 2025 01:26:02.631989956 CET	443	49703	142.251.40.196	192.168.2.6
Mar 20, 2025 01:26:02.632612944 CET	49703	443	192.168.2.6	142.251.40.196
Mar 20, 2025 01:26:02.700977087 CET	49703	443	192.168.2.6	142.251.40.196
Mar 20, 2025 01:26:02.701019049 CET	443	49703	142.251.40.196	192.168.2.6
Mar 20, 2025 01:26:04.588782072 CET	49719	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:04.588828087 CET	443	49719	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:04.588901997 CET	49719	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:04.589284897 CET	49719	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:04.589301109 CET	443	49719	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:04.590102911 CET	49720	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:04.590150118 CET	443	49720	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:04.590205908 CET	49720	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:04.590373993 CET	49720	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:04.590389967 CET	443	49720	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:04.788104057 CET	443	49719	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:04.788191080 CET	49719	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:04.791409016 CET	443	49720	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:04.791472912 CET	49720	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:04.792783976 CET	49719	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:04.792810917 CET	443	49719	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:04.793030977 CET	443	49719	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:04.793483973 CET	49720	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:04.793493032 CET	443	49720	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:04.793777943 CET	443	49720	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:04.794042110 CET	49719	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:04.835587025 CET	49720	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:04.836328030 CET	443	49719	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:04.975505114 CET	443	49719	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:04.975529909 CET	443	49719	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:04.975593090 CET	49719	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:04.975613117 CET	443	49719	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:04.975661993 CET	49719	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:04.977520943 CET	49719	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:04.977539062 CET	443	49719	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:05.096180916 CET	49720	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:05.136332989 CET	443	49720	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:05.188359022 CET	443	49720	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:05.188380003 CET	443	49720	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:05.188448906 CET	443	49720	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:05.188457966 CET	49720	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:05.188508987 CET	49720	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:05.213613033 CET	49720	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:05.213624954 CET	443	49720	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:05.324877977 CET	49721	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:05.324938059 CET	443	49721	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:05.325115919 CET	49721	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:05.325328112 CET	49721	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:05.325345993 CET	443	49721	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:05.517843962 CET	443	49721	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:05.517932892 CET	49721	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:05.518487930 CET	49721	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:05.518500090 CET	443	49721	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:05.518731117 CET	443	49721	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:05.519037008 CET	49721	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:05.564328909 CET	443	49721	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:05.711755037 CET	443	49721	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:05.711813927 CET	443	49721	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:05.711884022 CET	49721	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:05.711900949 CET	443	49721	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:05.711966991 CET	443	49721	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:05.712023020 CET	49721	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:05.713598013 CET	49721	443	192.168.2.6	45.32.7.89
Mar 20, 2025 01:26:05.713613033 CET	443	49721	45.32.7.89	192.168.2.6
Mar 20, 2025 01:26:09.427164078 CET	443	49707	104.18.36.248	192.168.2.6
Mar 20, 2025 01:26:09.427335978 CET	443	49707	104.18.36.248	192.168.2.6
Mar 20, 2025 01:26:09.427475929 CET	49707	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:26:10.697226048 CET	49707	443	192.168.2.6	104.18.36.248
Mar 20, 2025 01:26:10.697254896 CET	443	49707	104.18.36.248	192.168.2.6
Mar 20, 2025 01:26:11.023753881 CET	49678	443	192.168.2.6	20.42.65.91
Mar 20, 2025 01:26:34.149971962 CET	49687	443	192.168.2.6	23.33.40.140
Mar 20, 2025 01:26:34.150692940 CET	49688	80	192.168.2.6	23.210.92.207
Mar 20, 2025 01:26:34.150789022 CET	49689	80	192.168.2.6	184.31.68.248
Mar 20, 2025 01:26:52.398513079 CET	49727	443	192.168.2.6	142.251.40.196
Mar 20, 2025 01:26:52.398612022 CET	443	49727	142.251.40.196	192.168.2.6
Mar 20, 2025 01:26:52.398705959 CET	49727	443	192.168.2.6	142.251.40.196
Mar 20, 2025 01:26:52.398888111 CET	49727	443	192.168.2.6	142.251.40.196
Mar 20, 2025 01:26:52.398921013 CET	443	49727	142.251.40.196	192.168.2.6
Mar 20, 2025 01:26:52.600171089 CET	443	49727	142.251.40.196	192.168.2.6
Mar 20, 2025 01:26:52.603461981 CET	49727	443	192.168.2.6	142.251.40.196
Mar 20, 2025 01:26:52.603521109 CET	443	49727	142.251.40.196	192.168.2.6
Mar 20, 2025 01:27:02.530446053 CET	49686	80	192.168.2.6	23.210.92.207
Mar 20, 2025 01:27:02.533885956 CET	443	49681	2.23.227.215	192.168.2.6
Mar 20, 2025 01:27:02.533902884 CET	443	49681	2.23.227.215	192.168.2.6
Mar 20, 2025 01:27:02.533979893 CET	49681	443	192.168.2.6	2.23.227.215
Mar 20, 2025 01:27:02.534032106 CET	49681	443	192.168.2.6	2.23.227.215
Mar 20, 2025 01:27:02.600174904 CET	443	49727	142.251.40.196	192.168.2.6
Mar 20, 2025 01:27:02.600250006 CET	443	49727	142.251.40.196	192.168.2.6
Mar 20, 2025 01:27:02.600347042 CET	49727	443	192.168.2.6	142.251.40.196
Mar 20, 2025 01:27:02.620805979 CET	80	49686	23.210.92.207	192.168.2.6
Mar 20, 2025 01:27:02.620874882 CET	49686	80	192.168.2.6	23.210.92.207
Mar 20, 2025 01:27:02.696329117 CET	49727	443	192.168.2.6	142.251.40.196
Mar 20, 2025 01:27:02.696366072 CET	443	49727	142.251.40.196	192.168.2.6

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 20, 2025 01:25:48.485188007 CET	53	64499	1.1.1.1	192.168.2.6
Mar 20, 2025 01:25:48.491511106 CET	53	62890	1.1.1.1	192.168.2.6
Mar 20, 2025 01:25:49.242698908 CET	53	65065	1.1.1.1	192.168.2.6
Mar 20, 2025 01:25:49.395428896 CET	53	63387	1.1.1.1	192.168.2.6
Mar 20, 2025 01:25:52.335772991 CET	58679	53	192.168.2.6	1.1.1.1
Mar 20, 2025 01:25:52.336074114 CET	62935	53	192.168.2.6	1.1.1.1
Mar 20, 2025 01:25:52.427361012 CET	53	58679	1.1.1.1	192.168.2.6
Mar 20, 2025 01:25:52.427383900 CET	53	62935	1.1.1.1	192.168.2.6
Mar 20, 2025 01:25:54.111707926 CET	61522	53	192.168.2.6	1.1.1.1
Mar 20, 2025 01:25:54.111707926 CET	62272	53	192.168.2.6	1.1.1.1
Mar 20, 2025 01:25:54.208736897 CET	53	62272	1.1.1.1	192.168.2.6
Mar 20, 2025 01:25:54.209748030 CET	53	61522	1.1.1.1	192.168.2.6
Mar 20, 2025 01:25:54.705434084 CET	59128	53	192.168.2.6	1.1.1.1
Mar 20, 2025 01:25:54.705615044 CET	65413	53	192.168.2.6	1.1.1.1
Mar 20, 2025 01:25:54.706521034 CET	51456	53	192.168.2.6	1.1.1.1
Mar 20, 2025 01:25:54.706770897 CET	56644	53	192.168.2.6	1.1.1.1
Mar 20, 2025 01:25:54.798511028 CET	53	65413	1.1.1.1	192.168.2.6
Mar 20, 2025 01:25:54.799073935 CET	53	59128	1.1.1.1	192.168.2.6
Mar 20, 2025 01:25:54.802593946 CET	53	56644	1.1.1.1	192.168.2.6
Mar 20, 2025 01:25:54.806432962 CET	53	51456	1.1.1.1	192.168.2.6
Mar 20, 2025 01:25:55.923130989 CET	62285	53	192.168.2.6	1.1.1.1
Mar 20, 2025 01:25:55.923291922 CET	59844	53	192.168.2.6	1.1.1.1
Mar 20, 2025 01:25:56.017612934 CET	53	59844	1.1.1.1	192.168.2.6
Mar 20, 2025 01:25:56.036300898 CET	53	62285	1.1.1.1	192.168.2.6
Mar 20, 2025 01:26:04.435528994 CET	56479	53	192.168.2.6	1.1.1.1
Mar 20, 2025 01:26:04.435837030 CET	63087	53	192.168.2.6	1.1.1.1
Mar 20, 2025 01:26:04.536647081 CET	53	63087	1.1.1.1	192.168.2.6
Mar 20, 2025 01:26:04.587960958 CET	53	56479	1.1.1.1	192.168.2.6
Mar 20, 2025 01:26:05.217581034 CET	53233	53	192.168.2.6	1.1.1.1
Mar 20, 2025 01:26:05.217746019 CET	51125	53	192.168.2.6	1.1.1.1
Mar 20, 2025 01:26:05.323781967 CET	53	53233	1.1.1.1	192.168.2.6
Mar 20, 2025 01:26:05.323811054 CET	53	51125	1.1.1.1	192.168.2.6
Mar 20, 2025 01:26:06.324853897 CET	53	57097	1.1.1.1	192.168.2.6
Mar 20, 2025 01:26:25.223315001 CET	53	55703	1.1.1.1	192.168.2.6
Mar 20, 2025 01:26:47.572751045 CET	53	62574	1.1.1.1	192.168.2.6
Mar 20, 2025 01:26:48.070019007 CET	53	54134	1.1.1.1	192.168.2.6
Mar 20, 2025 01:26:49.977214098 CET	53	56495	1.1.1.1	192.168.2.6
Mar 20, 2025 01:26:50.169584990 CET	138	138	192.168.2.6	192.168.2.255

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 20, 2025 01:25:52.335772991 CET	192.168.2.6	1.1.1.1	0x6aeb	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:25:52.336074114 CET	192.168.2.6	1.1.1.1	0xe305	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 20, 2025 01:25:54.111707926 CET	192.168.2.6	1.1.1.1	0xace0	Standard query (0)	metamaeasskelog.webflow.io	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:25:54.111707926 CET	192.168.2.6	1.1.1.1	0x4a4d	Standard query (0)	metamaeasskelog.webflow.io	65	IN (0x0001)	false
Mar 20, 2025 01:25:54.705434084 CET	192.168.2.6	1.1.1.1	0x792	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:25:54.705615044 CET	192.168.2.6	1.1.1.1	0x1c99	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Mar 20, 2025 01:25:54.706521034 CET	192.168.2.6	1.1.1.1	0xbaed	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:25:54.706770897 CET	192.168.2.6	1.1.1.1	0x3dfe	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Mar 20, 2025 01:25:55.923130989 CET	192.168.2.6	1.1.1.1	0x4866	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:25:55.923291922 CET	192.168.2.6	1.1.1.1	0xc10b	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Mar 20, 2025 01:26:04.435528994 CET	192.168.2.6	1.1.1.1	0x5587	Standard query (0)	posectsinsive.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:26:04.435837030 CET	192.168.2.6	1.1.1.1	0x5262	Standard query (0)	posectsinsive.com	65	IN (0x0001)	false
Mar 20, 2025 01:26:05.217581034 CET	192.168.2.6	1.1.1.1	0xc67a	Standard query (0)	posectsinsive.com	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:26:05.217746019 CET	192.168.2.6	1.1.1.1	0xcd61	Standard query (0)	posectsinsive.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Mar 20, 2025 01:25:52.427361012 CET	1.1.1.1	192.168.2.6	0x6aeb	No error (0)	www.google.com	142.251.40.196	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:25:52.427383900 CET	1.1.1.1	192.168.2.6	0xe305	No error (0)	www.google.com		65	IN (0x0001)	false
Mar 20, 2025 01:25:54.208736897 CET	1.1.1.1	192.168.2.6	0x4a4d	No error (0)	metamaeasskelog.webflow.io		65	IN (0x0001)	false
Mar 20, 2025 01:25:54.209748030 CET	1.1.1.1	192.168.2.6	0xace0	No error (0)	metamaeasskelog.webflow.io	104.18.36.248	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:25:54.209748030 CET	1.1.1.1	192.168.2.6	0xace0	No error (0)	metamaeasskelog.webflow.io	172.64.151.8	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:25:54.798511028 CET	1.1.1.1	192.168.2.6	0x1c99	No error (0)	cdn.prod.website-files.com		65	IN (0x0001)	false
Mar 20, 2025 01:25:54.799073935 CET	1.1.1.1	192.168.2.6	0x792	No error (0)	cdn.prod.website-files.com	104.18.161.117	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:25:54.799073935 CET	1.1.1.1	192.168.2.6	0x792	No error (0)	cdn.prod.website-files.com	104.18.160.117	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:25:54.806432962 CET	1.1.1.1	192.168.2.6	0xbaed	No error (0)	d3e54v103j8qbb.cloudfront.net	13.33.251.68	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:25:54.806432962 CET	1.1.1.1	192.168.2.6	0xbaed	No error (0)	d3e54v103j8qbb.cloudfront.net	13.33.251.210	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:25:54.806432962 CET	1.1.1.1	192.168.2.6	0xbaed	No error (0)	d3e54v103j8qbb.cloudfront.net	13.33.251.140	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:25:54.806432962 CET	1.1.1.1	192.168.2.6	0xbaed	No error (0)	d3e54v103j8qbb.cloudfront.net	13.33.251.183	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:25:56.017612934 CET	1.1.1.1	192.168.2.6	0xc10b	No error (0)	cdn.prod.website-files.com		65	IN (0x0001)	false
Mar 20, 2025 01:25:56.036300898 CET	1.1.1.1	192.168.2.6	0x4866	No error (0)	cdn.prod.website-files.com	104.18.160.117	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:25:56.036300898 CET	1.1.1.1	192.168.2.6	0x4866	No error (0)	cdn.prod.website-files.com	104.18.161.117	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:26:04.587960958 CET	1.1.1.1	192.168.2.6	0x5587	No error (0)	posectsinsive.com	45.32.7.89	A (IP address)	IN (0x0001)	false
Mar 20, 2025 01:26:05.323781967 CET	1.1.1.1	192.168.2.6	0xc67a	No error (0)	posectsinsive.com	45.32.7.89	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

metamaeasskelog.webflow.io

cdn.prod.website-files.com

d3e54v103j8qbb.cloudfront.net

posectsinsive.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.6	49706	104.18.36.248	443	2052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 00:25:54 UTC	676	OUT	GET / HTTP/1.1 Host: metamaeasskelog.webflow.io Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 00:25:54 UTC	811	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 00:25:54 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Ray: 923113341a08c451-EWR CF-Cache-Status: HIT Age: 173375 Last-Modified: Sat, 15 Mar 2025 09:19:44 GMT content-security-policy: frame-ancestors 'self' https://.webflow.com http://.webflow.com http://*.webflow.io http://webflow.com https://webflow.com surrogate-control: max-age=2147483647 surrogate-key: metamaeasskelog.webflow.io 6513a71f9ce90eda6bec4c4e pageId:6513a71f9ce90eda6bec4c51 x-lambda-id: 3783ff83-3cc6-4e6d-bb33-c55886e68f73 vary: Accept-Encoding Set-Cookie: _cfuvid=xStyQIc9ilNJ_n6TE3AUhqyOommsoA9SIMKoovxGpjM-1742430354631-0.0.1.1-604800000; path=/; domain=.webflow.io; HttpOnly; Secure; SameSite=None Server: cloudflare alt-svc: h3=":443"; ma=86400
2025-03-20 00:25:54 UTC	558	IN	Data Raw: 39 39 64 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 21 2d 2d 20 54 68 69 73 20 73 69 74 65 20 77 61 73 20 63 72 65 61 74 65 64 20 69 6e 20 57 65 62 66 6c 6f 77 2e 20 68 74 74 70 73 3a 2f 2f 77 65 62 66 6c 6f 77 2e 63 6f 6d 20 2d 2d 3e 3c 21 2d 2d 20 4c 61 73 74 20 50 75 62 6c 69 73 68 65 64 3a 20 57 65 64 20 53 65 70 20 32 37 20 32 30 32 33 20 30 33 3a 35 35 3a 32 37 20 47 4d 54 2b 30 30 30 30 20 28 43 6f 6f 72 64 69 6e 61 74 65 64 20 55 6e 69 76 65 72 73 61 6c 20 54 69 6d 65 29 20 2d 2d 3e 3c 68 74 6d 6c 20 64 61 74 61 2d 77 66 2d 64 6f 6d 61 69 6e 3d 22 6d 65 74 61 6d 61 65 61 73 73 6b 65 6c 6f 67 2e 77 65 62 66 6c 6f 77 2e 69 6f 22 20 64 61 74 61 2d 77 66 2d 70 61 67 65 3d 22 36 35 31 33 61 37 31 66 39 63 65 39 30 65 64 61 36 62 65 63 34 63 Data Ascii: 99d<!DOCTYPE html>... This site was created in Webflow. https://webflow.com -->... Last Published: Wed Sep 27 2023 03:55:27 GMT+0000 (Coordinated Universal Time) --><html data-wf-domain="metamaeasskelog.webflow.io" data-wf-page="6513a71f9ce90eda6bec4c
2025-03-20 00:25:54 UTC	1369	IN	Data Raw: 73 65 20 73 74 65 70 73 2c 20 75 73 65 72 73 20 63 61 6e 20 e2 80 a6 22 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 2f 3e 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 57 65 62 66 6c 6f 77 22 20 6e 61 6d 65 3d 22 67 65 6e 65 72 61 74 6f 72 22 2f 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 35 31 33 61 37 31 66 39 63 65 39 30 65 64 61 36 62 65 63 34 63 34 65 2f 63 73 73 2f 6d 65 74 61 6d 61 65 61 73 73 6b 65 6c 6f 67 2e 77 65 62 66 6c 6f 77 Data Ascii: se steps, users can " name="description"/><meta content="width=device-width, initial-scale=1" name="viewport"/><meta content="Webflow" name="generator"/><link href="https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/css/metamaeasskelog.webflow
2025-03-20 00:25:54 UTC	541	IN	Data Raw: 61 33 32 37 39 38 36 5f 6d 65 74 61 5f 62 61 6e 6e 65 72 5f 65 67 65 2d 70 2d 31 30 38 30 2e 6a 70 67 20 31 30 38 30 77 2c 20 68 74 74 70 73 3a 2f 2f 63 64 6e 2e 70 72 6f 64 2e 77 65 62 73 69 74 65 2d 66 69 6c 65 73 2e 63 6f 6d 2f 36 35 31 33 61 37 31 66 39 63 65 39 30 65 64 61 36 62 65 63 34 63 34 65 2f 36 35 31 33 61 37 33 62 33 37 36 34 65 38 31 65 62 61 33 32 37 39 38 36 5f 6d 65 74 61 5f 62 61 6e 6e 65 72 5f 65 67 65 2e 6a 70 67 20 31 33 37 37 77 22 2f 3e 3c 2f 61 3e 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 64 33 65 35 34 76 31 30 33 6a 38 71 62 62 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 2f 6a 73 2f 6a 71 75 65 72 79 2d 33 2e 35 2e 31 2e 6d 69 6e 2e 64 63 35 65 37 66 31 38 63 38 2e 6a 73 3f 73 69 74 65 3d 36 35 31 33 61 37 Data Ascii: a327986_meta_banner_ege-p-1080.jpg 1080w, https://cdn.prod.website-files.com/6513a71f9ce90eda6bec4c4e/6513a73b3764e81eba327986_meta_banner_ege.jpg 1377w"/></a><script src="https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=6513a7
2025-03-20 00:25:54 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.6	49710	104.18.161.117	443	2052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 00:25:54 UTC	657	OUT	GET /6513a71f9ce90eda6bec4c4e/css/metamaeasskelog.webflow.66a951ca5.css HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://metamaeasskelog.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 00:25:55 UTC	614	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 00:25:55 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close x-amz-id-2: Zsxx0CwnuLNC9/+zZsprqlzH48bYc71LFcPNxbWIxvy8t+JbkSIFtI6EuqIe6ABBo71M2bsdFng= x-amz-request-id: 9VSHPQ6V3PQDQNY3 Last-Modified: Wed, 27 Sep 2023 03:55:29 GMT ETag: W/"b26795e5abeba9766201eb1a583ee59b" x-amz-server-side-encryption: AES256 Cache-Control: max-age=84600, must-revalidate x-amz-version-id: qYrJM3JkfgdsXuPp0UeM0LNQb7isVc.Y CF-Cache-Status: HIT Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 92311337c952c356-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 00:25:55 UTC	755	IN	Data Raw: 37 64 34 62 0d 0a 68 74 6d 6c 20 7b 0a 20 20 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 0a 62 6f 64 79 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 7d 0a 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6d 61 69 6e 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 2c 20 73 75 6d 6d 61 72 79 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a Data Ascii: 7d4bhtml { -ms-text-size-adjust: 100%; -webkit-text-size-adjust: 100%; font-family: sans-serif;}body { margin: 0;}article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block;}
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 0a 0a 73 75 62 2c 20 73 75 70 20 7b 0a 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 37 35 25 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 3b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 7d 0a 0a 73 75 70 20 7b 0a 20 20 74 6f 70 3a 20 2d 2e 35 65 6d 3b 0a 7d 0a 0a 73 75 62 20 7b 0a 20 20 62 6f 74 74 6f 6d 3a 20 2d 2e 32 35 65 6d 3b 0a 7d 0a 0a 69 6d 67 20 7b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 7d 0a 0a 73 76 67 3a 6e 6f 74 28 3a 72 6f 6f 74 29 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 7d 0a 0a 66 69 67 75 72 65 20 7b 0a 20 20 6d 61 72 67 69 6e 3a 20 31 65 6d 20 34 30 70 78 3b 0a 7d 0a 0a 68 72 20 7b 0a 20 20 62 6f Data Ascii: sub, sup { vertical-align: baseline; font-size: 75%; line-height: 0; position: relative;}sup { top: -.5em;}sub { bottom: -.25em;}img { border: 0;}svg:not(:root) { overflow: hidden;}figure { margin: 1em 40px;}hr { bo
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 3b 0a 7d 0a 0a 74 65 78 74 61 72 65 61 20 7b 0a 20 20 6f 76 65 72 66 6c 6f 77 3a 20 61 75 74 6f 3b 0a 7d 0a 0a 6f 70 74 67 72 6f 75 70 20 7b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 7d 0a 0a 74 61 62 6c 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 20 63 6f 6c 6c 61 70 73 65 3b 0a 20 20 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 74 64 2c 20 74 68 20 7b 0a 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 77 65 62 66 6c 6f 77 2d 69 63 6f 6e 73 3b 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 66 6f 6e 74 2d 74 74 66 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 Data Ascii: ;}textarea { overflow: auto;}optgroup { font-weight: bold;}table { border-collapse: collapse; border-spacing: 0;}td, th { padding: 0;}@font-face { font-family: webflow-icons; src: url("data:application/x-font-ttf;charset=utf-8
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 45 48 42 68 55 55 46 78 34 42 46 78 59 7a 41 67 42 71 58 56 36 4c 4b 43 67 6f 4b 49 74 65 58 57 70 71 58 56 36 4c 4b 43 67 6f 4b 49 74 65 58 57 70 56 53 6b 74 76 49 43 45 68 49 47 39 4c 53 6c 56 56 53 6b 74 76 49 43 45 68 49 47 39 4c 53 6c 56 41 4b 43 69 4c 58 6c 31 71 61 6c 31 65 69 79 67 6f 4b 43 69 4c 58 6c 31 71 61 6c 31 65 69 79 67 6f 5a 69 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 53 45 67 62 30 74 4b 56 56 56 4b 53 32 38 67 49 51 41 42 41 41 41 42 77 41 49 41 41 38 41 41 45 67 41 41 45 7a 51 33 50 67 45 33 4e 6a 4d 78 46 53 49 48 44 67 45 48 42 68 55 78 49 77 41 6f 4b 49 74 65 58 57 70 56 53 6b 74 76 49 43 46 6d 41 63 42 71 58 56 36 4c 4b 43 68 6d 49 53 42 76 53 30 70 56 41 41 41 41 41 67 41 41 2f 38 41 46 74 67 50 41 41 44 49 41 4f 67 41 41 41 Data Ascii: EHBhUUFx4BFxYzAgBqXV6LKCgoKIteXWpqXV6LKCgoKIteXWpVSktvICEhIG9LSlVVSktvICEhIG9LSlVAKCiLXl1qal1eiygoKCiLXl1qal1eiygoZiEgb0tKVVVKS28gISEgb0tKVVVKS28gIQABAAABwAIAA8AAEgAAEzQ3PgE3NjMxFSIHDgEHBhUxIwAoKIteXWpVSktvICFmAcBqXV6LKChmISBvS0pVAAAAAgAA/8AFtgPAADIAOgAAA
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 3d 3d 22 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 3b 0a 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 66 6f 6e 74 2d 73 74 79 6c 65 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 5b 63 6c 61 73 73 5e 3d 22 77 2d 69 63 6f 6e 2d 22 5d 2c 20 5b 63 6c 61 73 73 2a 3d 22 20 77 2d 69 63 6f 6e 2d 22 5d 20 7b 0a 20 20 73 70 65 61 6b 3a 20 6e 6f 6e 65 3b 0a 20 20 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 20 20 2d 6d 6f 7a 2d 6f 73 78 2d Data Ascii: AAAAAAAAAAAAAAAAAAAAAAAAAAA==") format("truetype"); font-weight: normal; font-style: normal;}[class^="w-icon-"], [class*=" w-icon-"] { speak: none; font-variant: normal; text-transform: none; -webkit-font-smoothing: antialiased; -moz-osx-
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 62 75 74 74 6f 6e 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 69 6e 68 65 72 69 74 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 38 39 38 65 63 3b 0a 20 20 62 6f 72 64 65 72 3a 20 30 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 30 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 39 70 78 20 31 35 70 78 3b 0a 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 0a 7d 0a 0a 69 6e 70 75 74 2e 77 2d 62 75 74 74 6f 6e 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 20 62 75 74 74 6f 6e 3b 0a 7d 0a 0a 68 74 Data Ascii: button { color: #fff; line-height: inherit; cursor: pointer; background-color: #3898ec; border: 0; border-radius: 0; padding: 9px 15px; text-decoration: none; display: inline-block;}input.w-button { -webkit-appearance: button;}ht
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 6c 6f 77 3a 20 76 69 73 69 62 6c 65 3b 0a 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2e 77 2d 77 65 62 66 6c 6f 77 2d 62 61 64 67 65 20 7b 0a 20 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 29 2c 20 30 20 31 70 78 20 33 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 29 3b 0a 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 32 31 34 37 34 38 33 36 34 37 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 20 20 63 6f 6c 6f 72 3a 20 23 61 61 61 64 62 30 20 21 Data Ascii: low: visible; transform: none;}.w-webflow-badge { white-space: nowrap; cursor: pointer; box-shadow: 0 0 0 1px rgba(0, 0, 0, .1), 0 1px 3px rgba(0, 0, 0, .1); visibility: visible !important; z-index: 2147483647 !important; color: #aaadb0 !
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 3a 20 32 30 70 78 3b 0a 7d 0a 0a 68 36 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 38 70 78 3b 0a 7d 0a 0a 70 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 30 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 7d 0a 0a 62 6c 6f 63 6b 71 75 6f 74 65 20 7b 0a 20 20 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 35 70 78 20 73 6f 6c 69 64 20 23 65 32 65 32 65 32 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 32 30 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 32 32 70 78 3b 0a Data Ascii: : 20px;}h6 { margin-top: 10px; font-size: 12px; line-height: 18px;}p { margin-top: 0; margin-bottom: 10px;}blockquote { border-left: 5px solid #e2e2e2; margin: 0 0 10px; padding: 10px 20px; font-size: 18px; line-height: 22px;
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 70 61 64 64 69 6e 67 3a 20 38 70 78 20 31 32 70 78 3b 0a 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 34 32 38 35 37 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 69 6e 70 75 74 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2c 20 2e 77 2d 73 65 6c 65 63 74 3a 2d 6d 6f 7a 2d 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0a 20 20 63 6f 6c 6f 72 3a 20 23 39 39 39 3b 0a 7d 0a 0a 2e 77 2d 69 Data Ascii: l-align: middle; background-color: #fff; border: 1px solid #ccc; margin-bottom: 10px; padding: 8px 12px; font-size: 14px; line-height: 1.42857; display: block;}.w-input:-moz-placeholder, .w-select:-moz-placeholder { color: #999;}.w-i
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 61 64 69 6f 3a 61 66 74 65 72 20 7b 0a 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0a 7d 0a 0a 2e 77 2d 72 61 64 69 6f 2d 69 6e 70 75 74 20 7b 0a 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 3b 0a 20 20 6d 61 72 67 69 6e 3a 20 33 70 78 20 30 20 30 20 2d 32 30 70 78 3b 0a 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 6e 6f 72 6d 61 6c 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 20 7b 0a 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 7d 0a 0a 2e 77 2d 66 69 6c 65 2d 75 70 6c 6f 61 64 2d 69 6e 70 75 74 20 7b 0a 20 20 77 69 64 74 68 3a 20 2e 31 70 78 3b 0a 20 20 68 65 69 67 68 74 3a 20 2e 31 70 78 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7a 2d 69 6e 64 65 78 3a 20 2d Data Ascii: adio:after { clear: both;}.w-radio-input { float: left; margin: 3px 0 0 -20px; line-height: normal;}.w-file-upload { margin-bottom: 10px; display: block;}.w-file-upload-input { width: .1px; height: .1px; opacity: 0; z-index: -

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.6	49711	104.18.161.117	443	2052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 00:25:54 UTC	625	OUT	GET /6513a71f9ce90eda6bec4c4e/js/webflow.24a563ff7.js HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://metamaeasskelog.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 00:25:55 UTC	621	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 00:25:55 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close x-amz-id-2: t9P14fKnDasOGYTNCnwqhRZC9egsWE/XYrcmEv83RZOsvaqAeaVFSJUhKUvP++fT5QC+glme47w= x-amz-request-id: HQZ7S760MX117W80 Last-Modified: Wed, 27 Sep 2023 03:55:29 GMT ETag: W/"a505becc886cdcc871c41d1db25b1402" x-amz-server-side-encryption: AES256 Cache-Control: max-age=84600, must-revalidate x-amz-version-id: RSNKswwuR608THq7YOoe1mjTAg9.PYGW CF-Cache-Status: HIT Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 92311337c9958c59-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 00:25:55 UTC	748	IN	Data Raw: 37 64 34 34 0d 0a 0a 2f 2a 21 0a 20 2a 20 57 65 62 66 6c 6f 77 3a 20 46 72 6f 6e 74 2d 65 6e 64 20 73 69 74 65 20 6c 69 62 72 61 72 79 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 4d 49 54 0a 20 2a 20 49 6e 6c 69 6e 65 20 73 63 72 69 70 74 73 20 6d 61 79 20 61 63 63 65 73 73 20 74 68 65 20 61 70 69 20 75 73 69 6e 67 20 61 6e 20 61 73 79 6e 63 20 68 61 6e 64 6c 65 72 3a 0a 20 2a 20 20 20 76 61 72 20 57 65 62 66 6c 6f 77 20 3d 20 57 65 62 66 6c 6f 77 20 7c 7c 20 5b 5d 3b 0a 20 2a 20 20 20 57 65 62 66 6c 6f 77 2e 70 75 73 68 28 72 65 61 64 79 46 75 6e 63 74 69 6f 6e 29 3b 0a 20 2a 2f 0a 0a 28 28 29 3d 3e 7b 76 61 72 20 6c 74 3d 28 65 2c 79 29 3d 3e 28 29 3d 3e 28 79 7c 7c 65 28 28 79 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 29 2e 65 78 70 6f 72 74 73 2c 79 29 2c 79 Data Ascii: 7d44/! Webflow: Front-end site library * @license MIT * Inline scripts may access the api using an async handler: * var Webflow = Webflow \|\| []; * Webflow.push(readyFunction); */(()=>{var lt=(e,y)=>()=>(y\|\|e((y={exports:{}}).exports,y),y
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 52 28 74 2c 6e 2c 69 29 7b 69 66 28 6e 21 3d 3d 76 6f 69 64 20 30 26 26 28 69 3d 6e 29 2c 74 3d 3d 3d 76 6f 69 64 20 30 29 72 65 74 75 72 6e 20 69 3b 76 61 72 20 72 3d 69 3b 72 65 74 75 72 6e 20 77 65 2e 74 65 73 74 28 74 29 7c 7c 21 58 74 2e 74 65 73 74 28 74 29 3f 72 3d 70 61 72 73 65 49 6e 74 28 74 2c 31 30 29 3a 58 74 2e 74 65 73 74 28 74 29 26 26 28 72 3d 31 65 33 2a 70 61 72 73 65 46 6c 6f 61 74 28 74 29 29 2c 30 3e 72 26 26 28 72 3d 30 29 2c 72 3d 3d 3d 72 3f 72 3a 69 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 65 74 2e 64 65 62 75 67 26 26 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 74 29 7d 66 75 6e 63 74 69 6f 6e 20 55 28 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2d 31 2c 69 3d 74 3f Data Ascii: unction R(t,n,i){if(n!==void 0&&(i=n),t===void 0)return i;var r=i;return we.test(t)\|\|!Xt.test(t)?r=parseInt(t,10):Xt.test(t)&&(r=1e3*parseFloat(t)),0>r&&(r=0),r===r?r:i}function B(t){et.debug&&window&&window.console.warn(t)}function U(t){for(var n=-1,i=t?
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 69 65 72 28 30 2e 35 35 30 2c 20 30 2e 30 38 35 2c 20 30 2e 36 38 30 2c 20 30 2e 35 33 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 28 74 2f 3d 72 29 2a 74 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 35 30 2c 20 30 2e 34 36 30 2c 20 30 2e 34 35 30 2c 20 30 2e 39 34 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 28 74 2f 3d 72 29 2a 28 74 2d 32 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 71 75 61 64 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 35 35 2c 20 30 2e 30 33 30 2c 20 30 2e 35 31 35 2c 20 30 2e 39 35 35 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c Data Ascii: ier(0.550, 0.085, 0.680, 0.530)",function(t,n,i,r){return i(t/=r)t+n}],"ease-out-quad":["cubic-bezier(0.250, 0.460, 0.450, 0.940)",function(t,n,i,r){return-i(t/=r)(t-2)+n}],"ease-in-out-quad":["cubic-bezier(0.455, 0.030, 0.515, 0.955)",function(t,n,i,
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 30 2c 20 30 2c 20 30 2e 37 34 35 2c 20 30 2e 37 31 35 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 2d 69 2a 4d 61 74 68 2e 63 6f 73 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 69 2b 6e 7d 5d 2c 22 65 61 73 65 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 33 39 30 2c 20 30 2e 35 37 35 2c 20 30 2e 35 36 35 2c 20 31 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 29 7b 72 65 74 75 72 6e 20 69 2a 4d 61 74 68 2e 73 69 6e 28 74 2f 72 2a 28 4d 61 74 68 2e 50 49 2f 32 29 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 73 69 6e 65 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 34 34 35 2c 20 30 2e 30 35 30 2c 20 30 2e 35 35 30 2c 20 30 2e 39 35 30 29 22 Data Ascii: 0, 0, 0.745, 0.715)",function(t,n,i,r){return-iMath.cos(t/r(Math.PI/2))+i+n}],"ease-out-sine":["cubic-bezier(0.390, 0.575, 0.565, 1)",function(t,n,i,r){return iMath.sin(t/r(Math.PI/2))+n}],"ease-in-out-sine":["cubic-bezier(0.445, 0.050, 0.550, 0.950)"
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 73 2b 31 29 2a 74 2b 73 29 2b 31 29 2b 6e 7d 5d 2c 22 65 61 73 65 2d 69 6e 2d 6f 75 74 2d 62 61 63 6b 22 3a 5b 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 38 30 2c 20 2d 30 2e 35 35 30 2c 20 30 2e 32 36 35 2c 20 31 2e 35 35 30 29 22 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 69 2c 72 2c 73 29 7b 72 65 74 75 72 6e 20 73 3d 3d 3d 76 6f 69 64 20 30 26 26 28 73 3d 31 2e 37 30 31 35 38 29 2c 28 74 2f 3d 72 2f 32 29 3c 31 3f 69 2f 32 2a 74 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2d 73 29 2b 6e 3a 69 2f 32 2a 28 28 74 2d 3d 32 29 2a 74 2a 28 28 28 73 2a 3d 31 2e 35 32 35 29 2b 31 29 2a 74 2b 73 29 2b 32 29 2b 6e 7d 5d 7d 2c 57 3d 7b 22 65 61 73 65 2d 69 6e 2d 62 61 63 6b 22 3a 22 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 36 30 30 2c Data Ascii: s+1)t+s)+1)+n}],"ease-in-out-back":["cubic-bezier(0.680, -0.550, 0.265, 1.550)",function(t,n,i,r,s){return s===void 0&&(s=1.70158),(t/=r/2)<1?i/2tt(((s=1.525)+1)t-s)+n:i/2((t-=2)t(((s=1.525)+1)*t+s)+2)+n}]},W={"ease-in-back":"cubic-bezier(0.600,
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 3b 72 65 74 75 72 6e 20 74 26 26 68 2e 62 69 6e 64 3f 74 2e 62 69 6e 64 28 58 29 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 58 2e 73 65 74 54 69 6d 65 6f 75 74 28 6e 2c 31 36 29 7d 7d 28 29 2c 63 74 3d 79 2e 6e 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 58 2e 70 65 72 66 6f 72 6d 61 6e 63 65 2c 6e 3d 74 26 26 28 74 2e 6e 6f 77 7c 7c 74 2e 77 65 62 6b 69 74 4e 6f 77 7c 7c 74 2e 6d 73 4e 6f 77 7c 7c 74 2e 6d 6f 7a 4e 6f 77 29 3b 72 65 74 75 72 6e 20 6e 26 26 68 2e 62 69 6e 64 3f 6e 2e 62 69 6e 64 28 74 29 3a 44 61 74 65 2e 6e 6f 77 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 2b 6e 65 77 20 44 61 74 65 7d 7d 28 29 2c 70 74 3d 50 28 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 77 2c 4f 29 7b 76 61 72 20 59 3d Data Ascii: ;return t&&h.bind?t.bind(X):function(n){X.setTimeout(n,16)}}(),ct=y.now=function(){var t=X.performance,n=t&&(t.now\|\|t.webkitNow\|\|t.msNow\|\|t.mozNow);return n&&h.bind?n.bind(t):Date.now\|\|function(){return+new Date}}(),pt=P(function(t){function n(w,O){var Y=
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 64 75 72 61 74 69 6f 6e 3a 77 2c 63 6f 6e 74 65 78 74 3a 74 68 69 73 2c 63 6f 6d 70 6c 65 74 65 3a 6f 7d 29 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 21 30 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 77 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 61 63 74 69 76 65 3f 28 74 68 69 73 2e 71 75 65 75 65 2e 70 75 73 68 28 7b 6f 70 74 69 6f 6e 73 3a 77 2c 61 72 67 73 3a 61 72 67 75 6d 65 6e 74 73 7d 29 2c 76 6f 69 64 28 74 68 69 73 2e 74 69 6d 65 72 2e 63 6f 6d 70 6c 65 74 65 3d 6f 29 29 3a 42 28 22 4e 6f 20 61 63 74 69 76 65 20 74 72 61 6e 73 69 74 69 6f 6e 20 74 69 6d 65 72 2e 20 55 73 65 20 73 74 61 72 74 28 29 20 6f 72 20 77 61 69 74 28 29 20 62 65 66 6f 72 65 20 74 68 65 6e 28 29 2e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 29 7b 69 66 28 74 68 69 73 2e 74 69 6d 65 Data Ascii: duration:w,context:this,complete:o}),this.active=!0)}function s(w){return this.active?(this.queue.push({options:w,args:arguments}),void(this.timer.complete=o)):B("No active transition timer. Use start() or wait() before then().")}function o(){if(this.time
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 77 2e 73 74 6f 70 28 29 7d 66 75 6e 63 74 69 6f 6e 20 54 74 28 77 2c 4f 29 7b 77 2e 73 65 74 28 4f 29 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 77 29 7b 74 68 69 73 2e 24 65 6c 2e 63 73 73 28 77 29 7d 66 75 6e 63 74 69 6f 6e 20 6f 74 28 77 2c 4f 29 7b 74 5b 77 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 3f 79 65 2e 63 61 6c 6c 28 74 68 69 73 2c 4f 2c 61 72 67 75 6d 65 6e 74 73 29 3a 28 74 68 69 73 2e 65 6c 26 26 4f 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 2c 74 68 69 73 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 77 2c 4f 29 7b 76 61 72 20 59 2c 4e 3d 74 68 69 73 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 3b 66 6f 72 28 59 3d 30 3b 4e 3e 59 3b 59 2b 2b 29 77 2e 61 70 70 6c Data Ascii: w.stop()}function Tt(w,O){w.set(O)}function ge(w){this.$el.css(w)}function ot(w,O){t[w]=function(){return this.children?ye.call(this,O,arguments):(this.el&&O.apply(this,arguments),this)}}function ye(w,O){var Y,N=this.children.length;for(Y=0;N>Y;Y++)w.appl
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 74 68 69 73 2e 65 6c 3d 6f 5b 30 5d 3b 76 61 72 20 63 3d 6d 5b 30 5d 3b 78 5b 32 5d 26 26 28 63 3d 78 5b 32 5d 29 2c 48 74 5b 63 5d 26 26 28 63 3d 48 74 5b 63 5d 29 2c 74 68 69 73 2e 6e 61 6d 65 3d 63 2c 74 68 69 73 2e 74 79 70 65 3d 78 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 3d 52 28 6d 5b 31 5d 2c 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2c 73 2e 64 75 72 61 74 69 6f 6e 29 2c 74 68 69 73 2e 65 61 73 65 3d 69 28 6d 5b 32 5d 2c 74 68 69 73 2e 65 61 73 65 2c 73 2e 65 61 73 65 29 2c 74 68 69 73 2e 64 65 6c 61 79 3d 52 28 6d 5b 33 5d 2c 74 68 69 73 2e 64 65 6c 61 79 2c 73 2e 64 65 6c 61 79 29 2c 74 68 69 73 2e 73 70 61 6e 3d 74 68 69 73 2e 64 75 72 61 74 69 6f 6e 2b 74 68 69 73 2e 64 65 6c 61 79 2c 74 68 69 73 2e 61 63 74 69 76 65 3d 21 31 2c 74 68 Data Ascii: this.el=o[0];var c=m[0];x[2]&&(c=x[2]),Ht[c]&&(c=Ht[c]),this.name=c,this.type=x[1],this.duration=R(m[1],this.duration,s.duration),this.ease=i(m[2],this.ease,s.ease),this.delay=R(m[3],this.delay,s.delay),this.span=this.duration+this.delay,this.active=!1,th
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 65 78 74 53 74 79 6c 65 3d 6e 75 6c 6c 2c 62 74 28 74 68 69 73 2e 65 6c 2c 74 68 69 73 2e 6e 61 6d 65 2c 74 68 69 73 2e 67 65 74 28 29 29 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 74 77 65 65 6e 3b 6f 26 26 6f 2e 63 6f 6e 74 65 78 74 26 26 6f 2e 64 65 73 74 72 6f 79 28 29 7d 2c 74 2e 63 6f 6e 76 65 72 74 3d 66 75 6e 63 74 69 6f 6e 28 6f 2c 6d 29 7b 69 66 28 6f 3d 3d 22 61 75 74 6f 22 26 26 74 68 69 73 2e 61 75 74 6f 29 72 65 74 75 72 6e 20 6f 3b 76 61 72 20 78 2c 4b 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 6e 75 6d 62 65 72 22 2c 63 3d 74 79 70 65 6f 66 20 6f 3d 3d 22 73 74 72 69 6e 67 22 3b 73 77 69 74 63 68 28 6d 29 7b 63 61 73 65 20 66 3a 69 66 28 4b 29 72 65 74 75 72 6e 20 6f 3b 69 66 28 63 26 26 6f 2e 72 65 70 6c 61 63 65 28 7a 2c 22 22 29 3d 3d 3d 22 22 29 Data Ascii: extStyle=null,bt(this.el,this.name,this.get()));var o=this.tween;o&&o.context&&o.destroy()},t.convert=function(o,m){if(o=="auto"&&this.auto)return o;var x,K=typeof o=="number",c=typeof o=="string";switch(m){case f:if(K)return o;if(c&&o.replace(z,"")==="")

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.6	49712	13.33.251.68	443	2052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 00:25:55 UTC	650	OUT	GET /js/jquery-3.5.1.min.dc5e7f18c8.js?site=6513a71f9ce90eda6bec4c4e HTTP/1.1 Host: d3e54v103j8qbb.cloudfront.net Connection: keep-alive Origin: https://metamaeasskelog.webflow.io sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://metamaeasskelog.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 00:25:55 UTC	617	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 89476 Connection: close Access-Control-Allow-Origin: * Access-Control-Allow-Methods: GET Access-Control-Max-Age: 3000 Last-Modified: Mon, 20 Jul 2020 17:53:02 GMT Accept-Ranges: bytes Server: AmazonS3 Date: Wed, 19 Mar 2025 16:25:15 GMT Cache-Control: max-age=84600, must-revalidate Etag: "dc5e7f18c8d36ac1d3d4753a87c98d0a" Via: 1.1 18ea14e618c57b64a442b054083b4ed6.cloudfront.net (CloudFront) Age: 28841 X-Cache: Hit from cloudfront X-Amz-Cf-Pop: JFK50-P10 X-Amz-Cf-Id: kMFjC4N0tiUorQgB22frBv6s8vqi258gWpF5QiXKsPtF_cIihpy8IA==
2025-03-20 00:25:55 UTC	15767	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 35 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 Data Ascii: /! jQuery v3.5.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQuery
2025-03-20 00:25:55 UTC	16384	IN	Data Raw: 2d 34 29 2c 78 3d 22 6f 66 2d 74 79 70 65 22 3d 3d 3d 65 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 67 26 26 30 3d 3d 3d 76 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 79 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 79 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e Data Ascii: -4),x="of-type"===e;return 1===g&&0===v?function(e){return!!e.parentNode}:function(e,t,n){var r,i,o,a,s,u,l=y!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(y){while(l){a=e;while(a=a[l])if(x?a.nodeN
2025-03-20 00:25:55 UTC	16384	IN	Data Raw: 45 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 45 2e 72 65 61 64 79 53 74 61 74 65 26 26 21 45 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 53 2e 72 65 61 64 79 29 3a 28 45 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 42 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 42 29 29 3b 76 61 72 20 24 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 77 28 6e 29 29 66 6f 72 28 73 20 69 6e 20 69 3d 21 30 2c 6e Data Ascii: E.readyState\|\|"loading"!==E.readyState&&!E.documentElement.doScroll?C.setTimeout(S.ready):(E.addEventListener("DOMContentLoaded",B),C.addEventListener("load",B));var $=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("object"===w(n))for(s in i=!0,n
2025-03-20 00:25:55 UTC	16384	IN	Data Raw: 2e 5f 65 76 61 6c 55 72 6c 26 26 21 75 2e 6e 6f 4d 6f 64 75 6c 65 26 26 53 2e 5f 65 76 61 6c 55 72 6c 28 75 2e 73 72 63 2c 7b 6e 6f 6e 63 65 3a 75 2e 6e 6f 6e 63 65 7c 7c 75 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 6f 6e 63 65 22 29 7d 2c 6c 29 3a 62 28 75 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 72 65 70 6c 61 63 65 28 6a 65 2c 22 22 29 2c 75 2c 6c 29 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 52 65 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 2c 69 3d 74 3f 53 2e 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 53 2e 63 6c 65 61 6e 44 61 74 61 28 76 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 Data Ascii: ._evalUrl&&!u.noModule&&S._evalUrl(u.src,{nonce:u.nonce\|\|u.getAttribute("nonce")},l):b(u.textContent.replace(je,""),u,l))}return n}function Re(e,t,n){for(var r,i=t?S.filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|S.cleanData(ve(r)),r.parentNode&&
2025-03-20 00:25:55 UTC	16384	IN	Data Raw: 74 3a 32 30 30 2c 5f 64 65 66 61 75 6c 74 3a 34 30 30 7d 2c 53 2e 66 6e 2e 64 65 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 72 65 74 75 72 6e 20 72 3d 53 2e 66 78 26 26 53 2e 66 78 2e 73 70 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 65 2c 72 29 3b 74 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 43 2e 63 6c 65 61 72 54 69 6d 65 6f 75 74 28 6e 29 7d 7d 29 7d 2c 72 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 2c 69 74 3d 45 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 65 6c 65 63 74 22 29 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 45 2e 63 72 65 61 74 Data Ascii: t:200,_default:400},S.fn.delay=function(r,e){return r=S.fx&&S.fx.speeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){var n=C.setTimeout(e,r);t.stop=function(){C.clearTimeout(n)}})},rt=E.createElement("input"),it=E.createElement("select").appendChild(E.creat
2025-03-20 00:25:55 UTC	8173	IN	Data Raw: 20 74 68 69 73 2e 70 61 72 65 6e 74 28 65 29 2e 6e 6f 74 28 22 62 6f 64 79 22 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 53 28 74 68 69 73 29 2e 72 65 70 6c 61 63 65 57 69 74 68 28 74 68 69 73 2e 63 68 69 6c 64 4e 6f 64 65 73 29 7d 29 2c 74 68 69 73 7d 7d 29 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 68 69 64 64 65 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 28 65 29 7d 2c 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2e 76 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 28 65 2e 6f 66 66 73 65 74 57 69 64 74 68 7c 7c 65 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7c 7c 65 2e 67 65 74 43 6c 69 65 6e 74 52 65 63 74 73 28 29 2e 6c 65 Data Ascii: this.parent(e).not("body").each(function(){S(this).replaceWith(this.childNodes)}),this}}),S.expr.pseudos.hidden=function(e){return!S.expr.pseudos.visible(e)},S.expr.pseudos.visible=function(e){return!!(e.offsetWidth\|\|e.offsetHeight\|\|e.getClientRects().le

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.6	49713	104.18.161.117	443	2052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 00:25:55 UTC	706	OUT	GET /6513a71f9ce90eda6bec4c4e/6513a73b3764e81eba327986_meta_banner_ege.jpg HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://metamaeasskelog.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 00:25:55 UTC	683	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 00:25:55 GMT Content-Type: image/jpeg Content-Length: 104561 Connection: close Cache-Control: max-age=31536000, must-revalidate Cf-Bgj: h2pri ETag: "01030fcac9b9ad136ce8285e64eedd4a" Last-Modified: Wed, 27 Sep 2023 03:53:35 GMT x-amz-id-2: QypdNllTQgpf73mtDKmMfBrh3ggm1sY50am5zmByjPzeJ3mK7/gljixBJuf5JATsaDc25X2dAc+gDHQ3MWWPGlQFQPM7OQ2F x-amz-request-id: YKTDEC2SCA7PZC51 x-amz-server-side-encryption: AES256 x-amz-version-id: pl_lL4p5TKpEE1aY81admOJlgYfXSVy3 CF-Cache-Status: HIT Age: 166082 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 9231133aef557ce4-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 00:25:55 UTC	686	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 24 f2 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 00 0b 00 02 00 00 00 26 00 00 08 62 01 12 00 03 00 00 00 01 00 01 00 00 01 31 00 02 00 00 00 26 00 00 08 88 01 32 00 02 00 00 00 14 00 00 08 ae 87 69 00 04 00 00 00 01 00 00 08 c2 ea 1c 00 07 00 00 08 0c 00 00 00 56 00 00 11 46 1c ea 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF``$ExifMM*&b1&2iVF
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 57 69 6e 64 6f 77 73 20 50 68 6f 74 6f 20 45 64 69 74 6f 72 20 31 30 2e 30 2e 31 30 30 31 31 2e 31 36 33 38 34 00 57 69 6e 64 6f 77 73 20 50 68 6f 74 6f 20 45 64 69 74 6f 72 20 31 30 2e 30 2e 31 30 30 31 31 2e 31 36 33 38 34 00 32 30 32 33 3a 30 37 3a 31 32 20 31 30 3a 34 31 3a 35 33 00 00 06 90 03 00 02 00 00 00 14 00 00 11 1c 90 04 00 02 00 00 00 14 00 00 11 30 92 91 00 02 00 00 00 03 37 30 00 00 Data Ascii: Windows Photo Editor 10.0.10011.16384Windows Photo Editor 10.0.10011.163842023:07:12 10:41:53070
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 Data Ascii: br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXY
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 75 27 15 3d dd a3 d9 c8 a8 ec ad b8 64 11 9f 52 3b fd 28 15 f5 b1 5e 8a 06 14 50 01 45 00 14 50 01 45 00 14 50 01 45 00 7a 0d 97 c3 e1 75 f0 ca 6d 77 64 c7 52 2a f7 51 28 75 db e4 21 01 b2 bd 49 3f 33 03 8c 61 6a 96 93 f0 ea ef 55 d3 f4 cb 91 7f 1c 4d a8 3a f9 69 e4 48 e1 50 c9 e5 ee 67 03 68 3b bb 13 fe 14 00 f8 3e 1d 9b bb 4b 8b db 5d 6e da 5b 2b 59 1a 19 e6 f2 d9 76 4a 19 15 50 03 c9 dc 5c 60 fb 1f 4a d9 8b e1 2c 56 f7 97 51 df eb 01 a2 8e 0b ad 8d 15 bb 86 f3 61 00 9f 94 8f 99 79 07 23 af 41 40 1c ee b3 e0 2b bd 17 45 8b 53 9a f6 17 42 d0 89 91 51 c7 96 25 5d c8 41 23 0f c0 e7 07 8a d8 93 e0 f6 b1 1a a3 b5 f5 a0 8e 57 d9 13 b1 20 31 69 15 23 cf a6 f0 db 87 b0 34 01 ab a4 7c 2e b0 b6 de da 95 c7 db 92 5f 2b ca 28 92 42 53 fd 29 21 7c 83 82 72 09 c7 e7 Data Ascii: u'=dR;(^PEPEPEzumwdR*Q(u!I?3ajUM:iHPgh;>K]n[+YvJP\`J,VQay#A@+ESBQ%]A#W 1i#4\|._+(BS)!\|r
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 75 d5 b4 d6 77 0d 04 eb b2 45 c1 23 20 f5 19 1d 3d 8d 7a 1f c1 6f f9 1a ee bf eb d4 ff 00 e8 42 b0 c4 ff 00 0a 46 b4 7f 88 8f 5f d5 7c 21 e1 fd 6b 71 bf d2 ad a5 76 eb 20 5d af ff 00 7d 0c 1a e0 b5 7f 81 d6 13 16 93 48 d4 a6 b7 63 c8 8a e0 6f 5f cc 60 ff 00 3a f2 29 63 a7 4b 47 aa 3b 2a 50 8c b5 5a 33 c6 f5 5d 32 e7 46 d5 2e 74 eb c4 d9 71 6e e5 1c 0e 9f 51 ec 47 35 4e bd c8 c9 49 29 2e a7 03 56 76 0a 29 88 28 a0 02 8a 00 28 a0 0f 57 d3 75 af 09 2d 87 85 ee 6f 6e ad 45 f6 9e 6d 00 64 59 bc e8 99 67 dc fb b8 d8 50 26 4f 1c e6 a2 33 7c 34 9a 2b 79 6e dc b3 3c f1 b4 c6 35 9b ce 2c 5d 8c a5 f8 db e5 e3 6e 36 fc d4 00 0b ef 05 7f 66 6a 9a 73 cb 64 a6 59 22 92 d8 5b 89 fe ce 26 11 4a 37 b6 e1 bb 68 2c 07 d4 83 c8 cd 4d 6f ac 78 1f 46 7b a9 b4 d1 66 f1 c9 a5 dc Data Ascii: uwE# =zoBF_\|!kqv ]}Hco_`:)cKG;*PZ3]2F.tqnQG5NI).Vv)((Wu-onEmdYgP&O3\|4+yn<5,]n6fjsdY"[&J7h,MoxF{f
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: f2 1e a7 a2 8f 40 3b 0a a1 57 08 28 45 46 3b 20 6d b7 76 14 55 08 28 a0 02 8a 00 28 a0 02 8a 00 ef fc 39 a1 58 cd a7 46 d2 79 3b de 2f 30 bc 80 11 93 db db 15 b4 7c 33 62 bc b4 ba 6e 39 c6 39 27 1f 87 1f 8e 2b ea 68 d1 a3 0a 71 5c 97 d1 6b 63 e5 2b 56 ad 3a 92 97 3d b5 7a 5c 53 e1 8b 15 1b 9a 5d 37 6f fb 20 93 ff 00 a0 d2 7f c2 3d a6 47 2a 97 16 b3 46 43 36 d8 57 e7 20 00 7b 8e 3a fe 86 af 92 93 da 9f e0 8c f9 eb 2f f9 79 f8 b2 a7 8b 7c 35 a5 5b 59 97 b5 f2 76 b4 6c ea f1 30 20 63 be 40 19 07 de bc c6 bc 2c 74 63 68 4d 46 cd ad bd 19 ee 65 b3 a8 e3 28 4d de cc 28 ae 03 d3 0a 28 00 a2 80 0a 28 00 a7 23 15 60 45 00 5c 78 26 08 c5 a4 42 00 c9 1e 68 3f d6 ab 7e 14 c4 23 36 38 15 1d 21 92 5b db cd 75 3a c3 6f 13 cb 2b 1c 2a 20 c9 35 77 52 d2 25 d2 ed ed 5e 69 Data Ascii: @;W(EF; mvU((9XFy;/0\|3bn99'+hq\kc+V:=z\S]7o =GFC6W {:/y\|5[Yvl0 c@,tchMFe(M(((#`E\x&Bh?~#68![u:o+ 5wR%^i
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 09 09 09 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 32 33 2d 30 37 2d 31 32 54 31 30 3a 32 30 3a 34 38 2e 37 30 30 3c 2f 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0d 0a 09 3c 2f 72 64 66 3a 52 44 46 3e 0d 0a 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <xmp:CreateDate>2023-07-12T10:20:48.700</xmp:CreateDate></rdf:Description></rdf:RDF></x:xmpmeta>
2025-03-20 00:25:55 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.6	49714	104.18.161.117	443	2052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 00:25:56 UTC	709	OUT	GET /6513a71f9ce90eda6bec4c4e/6513a77dfec356d50dcae611_MetaMask%20webflow.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://metamaeasskelog.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 00:25:56 UTC	657	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 00:25:56 GMT Content-Type: image/png Content-Length: 1651 Connection: close x-amz-id-2: m9uazh5DSy7Xk00STT+3Y+mVrE7lpNBnbmvvL49h27TAVnJXZldCUqNOOPMGfJE8zqLyTFVk11PzdDS6crTQzw== x-amz-request-id: Z4NS1925WCGSWQKQ Last-Modified: Wed, 27 Sep 2023 03:54:39 GMT ETag: "e0816de2cba5092ad1f8810d76172621" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: LKkvZwFPQsKTHUCECDbfu5JlItYXCG7r CF-Cache-Status: HIT Age: 140316 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 9231133f18fdd954-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 00:25:56 UTC	712	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 06 18 49 44 41 54 58 47 ed 57 77 6c 94 65 1c 7e be d9 db d7 5e 17 74 08 2d 94 d2 52 c4 02 ad 90 56 ab 22 a5 32 14 c5 1a 85 18 86 23 01 54 48 14 14 13 63 8c 11 95 60 14 c2 48 40 04 12 ad 04 22 10 a5 08 65 28 48 15 db 12 46 6b 81 56 5a 3a 28 74 70 ed ed bb 6f 9a ef ee da dc a2 8d 23 81 3f fc 25 5f f2 dd 3b 9e f7 f9 ad e7 fd 8e c0 5d 36 e2 2e 9f 8f 7b 8f 40 56 2c fd b8 55 16 ae dc 30 a3 fd bf 8c 4e b2 09 29 46 86 ce ac ef 14 4e 04 e2 86 46 80 7c 3d 4f df 36 36 81 4a 34 a8 a5 93 e5 57 f9 5d 7b 6a 5d 07 01 38 ff 21 19 4d e9 78 76 ee ac 4c d5 22 bb 93 9c 76 Data Ascii: PNGIHDR szzpHYs~sRGBIDATXGWwle~^t-RV"2#THc`H@"e(HFkVZ:(tpo#?%_;]6.{@V,U0N)FNF\|=O66J4W]{j]8!MxvL"v
2025-03-20 00:25:56 UTC	939	IN	Data Raw: 0e 37 12 98 91 49 43 1f e5 e3 1c 58 88 82 00 d8 1c be 1d 36 8f 8c a3 57 05 dc b4 c8 61 b5 60 f5 48 8d 5b cf d9 27 03 b0 de 89 00 51 9a a5 d9 9f 1e 43 cf 8d a2 81 f4 38 12 19 89 24 46 c5 13 90 79 c2 1b ea 7e d3 69 01 c6 df 09 4a 07 d8 fd 04 94 79 25 35 04 23 e3 5a b7 8c c6 4e 09 4d 3d 12 3c 02 d0 d4 2b 1c d8 77 d9 39 2f 50 cc c2 2e 23 13 60 f8 69 a5 a9 27 3d 8e 64 28 7f 8e 9d 2e c0 c3 05 07 54 ab 01 58 c6 37 c6 f1 80 23 44 ac a3 58 40 a3 f6 a7 48 82 42 82 9b f6 85 39 ae 07 b0 85 46 37 08 f9 d1 d1 74 51 f9 92 e8 9f fb 07 15 15 6b bf 29 42 10 64 af 1a fa 1e 02 a6 68 12 3a ad 8f bf dd 21 c3 dc 27 41 96 65 af ea 29 0f 4d 11 48 49 f2 29 68 bf cd de d9 57 74 b2 51 38 3d 28 81 8d 4f e9 36 bc fc a0 6a 40 8e 95 c5 4e 27 89 8e 4e 0e 82 20 c1 2d 51 20 21 63 64 12 0d Data Ascii: 7ICX6Wa`H['QC8$Fy~iJy%5#ZNM=<+w9/P.#`i'=d(.TX7#DX@HB9F7tQk)Bdh:!'Ae)MHI)hWtQ8=(O6j@N'N -Q !cd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.6	49715	104.18.160.117	443	2052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 00:25:56 UTC	459	OUT	GET /6513a71f9ce90eda6bec4c4e/6513a73b3764e81eba327986_meta_banner_ege.jpg HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 00:25:56 UTC	683	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 00:25:56 GMT Content-Type: image/jpeg Content-Length: 104561 Connection: close Cache-Control: max-age=31536000, must-revalidate Cf-Bgj: h2pri ETag: "01030fcac9b9ad136ce8285e64eedd4a" Last-Modified: Wed, 27 Sep 2023 03:53:35 GMT x-amz-id-2: QypdNllTQgpf73mtDKmMfBrh3ggm1sY50am5zmByjPzeJ3mK7/gljixBJuf5JATsaDc25X2dAc+gDHQ3MWWPGlQFQPM7OQ2F x-amz-request-id: YKTDEC2SCA7PZC51 x-amz-server-side-encryption: AES256 x-amz-version-id: pl_lL4p5TKpEE1aY81admOJlgYfXSVy3 CF-Cache-Status: HIT Age: 177122 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 9231133f8ac442bf-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 00:25:56 UTC	686	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff e1 24 f2 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 06 00 0b 00 02 00 00 00 26 00 00 08 62 01 12 00 03 00 00 00 01 00 01 00 00 01 31 00 02 00 00 00 26 00 00 08 88 01 32 00 02 00 00 00 14 00 00 08 ae 87 69 00 04 00 00 00 01 00 00 08 c2 ea 1c 00 07 00 00 08 0c 00 00 00 56 00 00 11 46 1c ea 00 00 00 08 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: JFIF``$ExifMM*&b1&2iVF
2025-03-20 00:25:56 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-03-20 00:25:56 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 57 69 6e 64 6f 77 73 20 50 68 6f 74 6f 20 45 64 69 74 6f 72 20 31 30 2e 30 2e 31 30 30 31 31 2e 31 36 33 38 34 00 57 69 6e 64 6f 77 73 20 50 68 6f 74 6f 20 45 64 69 74 6f 72 20 31 30 2e 30 2e 31 30 30 31 31 2e 31 36 33 38 34 00 32 30 32 33 3a 30 37 3a 31 32 20 31 30 3a 34 31 3a 35 33 00 00 06 90 03 00 02 00 00 00 14 00 00 11 1c 90 04 00 02 00 00 00 14 00 00 11 30 92 91 00 02 00 00 00 03 37 30 00 00 Data Ascii: Windows Photo Editor 10.0.10011.16384Windows Photo Editor 10.0.10011.163842023:07:12 10:41:53070
2025-03-20 00:25:56 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2025-03-20 00:25:56 UTC	1369	IN	Data Raw: 62 72 82 09 0a 16 17 18 19 1a 25 26 27 28 29 2a 34 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 5a 63 64 65 66 67 68 69 6a 73 74 75 76 77 78 79 7a 83 84 85 86 87 88 89 8a 92 93 94 95 96 97 98 99 9a a2 a3 a4 a5 a6 a7 a8 a9 aa b2 b3 b4 b5 b6 b7 b8 b9 ba c2 c3 c4 c5 c6 c7 c8 c9 ca d2 d3 d4 d5 d6 d7 d8 d9 da e1 e2 e3 e4 e5 e6 e7 e8 e9 ea f1 f2 f3 f4 f5 f6 f7 f8 f9 fa ff c4 00 1f 01 00 03 01 01 01 01 01 01 01 01 01 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 11 00 02 01 02 04 04 03 04 07 05 04 04 00 01 02 77 00 01 02 03 11 04 05 21 31 06 12 41 51 07 61 71 13 22 32 81 08 14 42 91 a1 b1 c1 09 23 33 52 f0 15 62 72 d1 0a 16 24 34 e1 25 f1 17 18 19 1a 26 27 28 29 2a 35 36 37 38 39 3a 43 44 45 46 47 48 49 4a 53 54 55 56 57 58 59 Data Ascii: br%&'()456789:CDEFGHIJSTUVWXYZcdefghijstuvwxyzw!1AQaq"2B#3Rbr$4%&'()56789:CDEFGHIJSTUVWXY
2025-03-20 00:25:56 UTC	1369	IN	Data Raw: 75 27 15 3d dd a3 d9 c8 a8 ec ad b8 64 11 9f 52 3b fd 28 15 f5 b1 5e 8a 06 14 50 01 45 00 14 50 01 45 00 14 50 01 45 00 7a 0d 97 c3 e1 75 f0 ca 6d 77 64 c7 52 2a f7 51 28 75 db e4 21 01 b2 bd 49 3f 33 03 8c 61 6a 96 93 f0 ea ef 55 d3 f4 cb 91 7f 1c 4d a8 3a f9 69 e4 48 e1 50 c9 e5 ee 67 03 68 3b bb 13 fe 14 00 f8 3e 1d 9b bb 4b 8b db 5d 6e da 5b 2b 59 1a 19 e6 f2 d9 76 4a 19 15 50 03 c9 dc 5c 60 fb 1f 4a d9 8b e1 2c 56 f7 97 51 df eb 01 a2 8e 0b ad 8d 15 bb 86 f3 61 00 9f 94 8f 99 79 07 23 af 41 40 1c ee b3 e0 2b bd 17 45 8b 53 9a f6 17 42 d0 89 91 51 c7 96 25 5d c8 41 23 0f c0 e7 07 8a d8 93 e0 f6 b1 1a a3 b5 f5 a0 8e 57 d9 13 b1 20 31 69 15 23 cf a6 f0 db 87 b0 34 01 ab a4 7c 2e b0 b6 de da 95 c7 db 92 5f 2b ca 28 92 42 53 fd 29 21 7c 83 82 72 09 c7 e7 Data Ascii: u'=dR;(^PEPEPEzumwdR*Q(u!I?3ajUM:iHPgh;>K]n[+YvJP\`J,VQay#A@+ESBQ%]A#W 1i#4\|._+(BS)!\|r
2025-03-20 00:25:56 UTC	1369	IN	Data Raw: 75 d5 b4 d6 77 0d 04 eb b2 45 c1 23 20 f5 19 1d 3d 8d 7a 1f c1 6f f9 1a ee bf eb d4 ff 00 e8 42 b0 c4 ff 00 0a 46 b4 7f 88 8f 5f d5 7c 21 e1 fd 6b 71 bf d2 ad a5 76 eb 20 5d af ff 00 7d 0c 1a e0 b5 7f 81 d6 13 16 93 48 d4 a6 b7 63 c8 8a e0 6f 5f cc 60 ff 00 3a f2 29 63 a7 4b 47 aa 3b 2a 50 8c b5 5a 33 c6 f5 5d 32 e7 46 d5 2e 74 eb c4 d9 71 6e e5 1c 0e 9f 51 ec 47 35 4e bd c8 c9 49 29 2e a7 03 56 76 0a 29 88 28 a0 02 8a 00 28 a0 0f 57 d3 75 af 09 2d 87 85 ee 6f 6e ad 45 f6 9e 6d 00 64 59 bc e8 99 67 dc fb b8 d8 50 26 4f 1c e6 a2 33 7c 34 9a 2b 79 6e dc b3 3c f1 b4 c6 35 9b ce 2c 5d 8c a5 f8 db e5 e3 6e 36 fc d4 00 0b ef 05 7f 66 6a 9a 73 cb 64 a6 59 22 92 d8 5b 89 fe ce 26 11 4a 37 b6 e1 bb 68 2c 07 d4 83 c8 cd 4d 6f ac 78 1f 46 7b a9 b4 d1 66 f1 c9 a5 dc Data Ascii: uwE# =zoBF_\|!kqv ]}Hco_`:)cKG;*PZ3]2F.tqnQG5NI).Vv)((Wu-onEmdYgP&O3\|4+yn<5,]n6fjsdY"[&J7h,MoxF{f
2025-03-20 00:25:56 UTC	1369	IN	Data Raw: f2 1e a7 a2 8f 40 3b 0a a1 57 08 28 45 46 3b 20 6d b7 76 14 55 08 28 a0 02 8a 00 28 a0 02 8a 00 ef fc 39 a1 58 cd a7 46 d2 79 3b de 2f 30 bc 80 11 93 db db 15 b4 7c 33 62 bc b4 ba 6e 39 c6 39 27 1f 87 1f 8e 2b ea 68 d1 a3 0a 71 5c 97 d1 6b 63 e5 2b 56 ad 3a 92 97 3d b5 7a 5c 53 e1 8b 15 1b 9a 5d 37 6f fb 20 93 ff 00 a0 d2 7f c2 3d a6 47 2a 97 16 b3 46 43 36 d8 57 e7 20 00 7b 8e 3a fe 86 af 92 93 da 9f e0 8c f9 eb 2f f9 79 f8 b2 a7 8b 7c 35 a5 5b 59 97 b5 f2 76 b4 6c ea f1 30 20 63 be 40 19 07 de bc c6 bc 2c 74 63 68 4d 46 cd ad bd 19 ee 65 b3 a8 e3 28 4d de cc 28 ae 03 d3 0a 28 00 a2 80 0a 28 00 a7 23 15 60 45 00 5c 78 26 08 c5 a4 42 00 c9 1e 68 3f d6 ab 7e 14 c4 23 36 38 15 1d 21 92 5b db cd 75 3a c3 6f 13 cb 2b 1c 2a 20 c9 35 77 52 d2 25 d2 ed ed 5e 69 Data Ascii: @;W(EF; mvU((9XFy;/0\|3bn99'+hq\kc+V:=z\S]7o =GFC6W {:/y\|5[Yvl0 c@,tchMFe(M(((#`E\x&Bh?~#68![u:o+ 5wR%^i
2025-03-20 00:25:56 UTC	1369	IN	Data Raw: 09 09 09 3c 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 32 30 32 33 2d 30 37 2d 31 32 54 31 30 3a 32 30 3a 34 38 2e 37 30 30 3c 2f 78 6d 70 3a 43 72 65 61 74 65 44 61 74 65 3e 3c 2f 72 64 66 3a 44 65 73 63 72 69 70 74 69 6f 6e 3e 0d 0a 09 3c 2f 72 64 66 3a 52 44 46 3e 0d 0a 3c 2f 78 3a 78 6d 70 6d 65 74 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <xmp:CreateDate>2023-07-12T10:20:48.700</xmp:CreateDate></rdf:Description></rdf:RDF></x:xmpmeta>
2025-03-20 00:25:56 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.6	49716	104.18.160.117	443	2052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 00:25:56 UTC	462	OUT	GET /6513a71f9ce90eda6bec4c4e/6513a77dfec356d50dcae611_MetaMask%20webflow.png HTTP/1.1 Host: cdn.prod.website-files.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 00:25:57 UTC	657	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 00:25:56 GMT Content-Type: image/png Content-Length: 1651 Connection: close x-amz-id-2: m9uazh5DSy7Xk00STT+3Y+mVrE7lpNBnbmvvL49h27TAVnJXZldCUqNOOPMGfJE8zqLyTFVk11PzdDS6crTQzw== x-amz-request-id: Z4NS1925WCGSWQKQ Last-Modified: Wed, 27 Sep 2023 03:54:39 GMT ETag: "e0816de2cba5092ad1f8810d76172621" x-amz-server-side-encryption: AES256 Cache-Control: max-age=31536000, must-revalidate x-amz-version-id: LKkvZwFPQsKTHUCECDbfu5JlItYXCG7r CF-Cache-Status: HIT Age: 177122 Accept-Ranges: bytes Access-Control-Allow-Origin: * Server: cloudflare CF-RAY: 923113431d523344-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 00:25:57 UTC	712	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 20 00 00 00 20 08 06 00 00 00 73 7a 7a f4 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 06 18 49 44 41 54 58 47 ed 57 77 6c 94 65 1c 7e be d9 db d7 5e 17 74 08 2d 94 d2 52 c4 02 ad 90 56 ab 22 a5 32 14 c5 1a 85 18 86 23 01 54 48 14 14 13 63 8c 11 95 60 14 c2 48 40 04 12 ad 04 22 10 a5 08 65 28 48 15 db 12 46 6b 81 56 5a 3a 28 74 70 ed ed bb 6f 9a ef ee da dc a2 8d 23 81 3f fc 25 5f f2 dd 3b 9e f7 f9 ad e7 fd 8e c0 5d 36 e2 2e 9f 8f 7b 8f 40 56 2c fd b8 55 16 ae dc 30 a3 fd bf 8c 4e b2 09 29 46 86 ce ac ef 14 4e 04 e2 86 46 80 7c 3d 4f df 36 36 81 4a 34 a8 a5 93 e5 57 f9 5d 7b 6a 5d 07 01 38 ff 21 19 4d e9 78 76 ee ac 4c d5 22 bb 93 9c 76 Data Ascii: PNGIHDR szzpHYs~sRGBIDATXGWwle~^t-RV"2#THc`H@"e(HFkVZ:(tpo#?%_;]6.{@V,U0N)FNF\|=O66J4W]{j]8!MxvL"v
2025-03-20 00:25:57 UTC	939	IN	Data Raw: 0e 37 12 98 91 49 43 1f e5 e3 1c 58 88 82 00 d8 1c be 1d 36 8f 8c a3 57 05 dc b4 c8 61 b5 60 f5 48 8d 5b cf d9 27 03 b0 de 89 00 51 9a a5 d9 9f 1e 43 cf 8d a2 81 f4 38 12 19 89 24 46 c5 13 90 79 c2 1b ea 7e d3 69 01 c6 df 09 4a 07 d8 fd 04 94 79 25 35 04 23 e3 5a b7 8c c6 4e 09 4d 3d 12 3c 02 d0 d4 2b 1c d8 77 d9 39 2f 50 cc c2 2e 23 13 60 f8 69 a5 a9 27 3d 8e 64 28 7f 8e 9d 2e c0 c3 05 07 54 ab 01 58 c6 37 c6 f1 80 23 44 ac a3 58 40 a3 f6 a7 48 82 42 82 9b f6 85 39 ae 07 b0 85 46 37 08 f9 d1 d1 74 51 f9 92 e8 9f fb 07 15 15 6b bf 29 42 10 64 af 1a fa 1e 02 a6 68 12 3a ad 8f bf dd 21 c3 dc 27 41 96 65 af ea 29 0f 4d 11 48 49 f2 29 68 bf cd de d9 57 74 b2 51 38 3d 28 81 8d 4f e9 36 bc fc a0 6a 40 8e 95 c5 4e 27 89 8e 4e 0e 82 20 c1 2d 51 20 21 63 64 12 0d Data Ascii: 7ICX6Wa`H['QC8$Fy~iJy%5#ZNM=<+w9/P.#`i'=d(.TX7#DX@HB9F7tQk)Bdh:!'Ae)MHI)hWtQ8=(O6j@N'N -Q !cd

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.6	49719	45.32.7.89	443	2052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 00:26:04 UTC	755	OUT	GET /85e34939-443a-47dc-9e9e-5da8ae9aad3b HTTP/1.1 Host: posectsinsive.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://metamaeasskelog.webflow.io/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 00:26:04 UTC	234	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 20 Mar 2025 00:26:04 GMT Content-Type: text/html Content-Length: 3963 Last-Modified: Tue, 04 Feb 2025 01:16:26 GMT Connection: close ETag: "67a16a6a-f7b" Accept-Ranges: bytes
2025-03-20 00:26:04 UTC	3963	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 72 79 70 74 6f 20 53 63 61 6d 20 41 6c 65 72 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Crypto Scam Alert</title> <style> body { font-family: sans-serif;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.6	49720	45.32.7.89	443	2052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 00:26:05 UTC	633	OUT	GET /favicon.ico HTTP/1.1 Host: posectsinsive.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://posectsinsive.com/85e34939-443a-47dc-9e9e-5da8ae9aad3b Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 00:26:05 UTC	234	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 20 Mar 2025 00:26:05 GMT Content-Type: text/html Content-Length: 3963 Last-Modified: Tue, 04 Feb 2025 01:16:26 GMT Connection: close ETag: "67a16a6a-f7b" Accept-Ranges: bytes
2025-03-20 00:26:05 UTC	3963	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 72 79 70 74 6f 20 53 63 61 6d 20 41 6c 65 72 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Crypto Scam Alert</title> <style> body { font-family: sans-serif;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.6	49721	45.32.7.89	443	2052	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-20 00:26:05 UTC	392	OUT	GET /favicon.ico HTTP/1.1 Host: posectsinsive.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 00:26:05 UTC	234	IN	HTTP/1.1 200 OK Server: nginx/1.22.1 Date: Thu, 20 Mar 2025 00:26:05 GMT Content-Type: text/html Content-Length: 3963 Last-Modified: Tue, 04 Feb 2025 01:16:26 GMT Connection: close ETag: "67a16a6a-f7b" Accept-Ranges: bytes
2025-03-20 00:26:05 UTC	3963	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 72 79 70 74 6f 20 53 63 61 6d 20 41 6c 65 72 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Crypto Scam Alert</title> <style> body { font-family: sans-serif;

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Click to jump to process

Target ID:	1
Start time:	20:25:44
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff63b000000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	20:25:46
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2236,i,15774150710409604469,17605322898154356825,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2268 /prefetch:3
Imagebase:	0x7ff63b000000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	12
Start time:	20:25:53
Start date:	19/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://metamaeasskelog.webflow.io/"
Imagebase:	0x7ff63b000000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Description:	Adversaries may abuse Internet browser extensions to establish persistent access to victim systems. Browser extensions or plugins are small programs that can add functionality and customize aspects of Internet browsers. They can be installed directly or through a browser's app store and generally have access and permissions to everything that the browser can access.
Tactics:	Persistence
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Process: Process Creation, Windows Registry: Windows Registry Key Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://metamaeasskelog.webflow.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 5740, Parent PID: 2920

General

Windows Analysis Report
https://metamaeasskelog.webflow.io/