Edit tour

Windows Analysis Report
http://steephan2003.github.io/

Overview

General Information

Sample URL:	http://steephan2003.github.io/
Analysis ID:	1520340
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Yara detected HtmlPhish64

Phishing site detected (based on logo match)

Detected clear text password fields (password is not hidden)

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 568 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 3808 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2008,i,11914359049453020221,13615553556127594117,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6472 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://steephan2003.github.io/" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

HTTP traffic detected: HTTP/1.1 404 Not FoundConnection: closeContent-Length: 9379Server: GitHub.comContent-Type: text/html; charset=utf-8permissions-policy: interest-cohort=()Access-Control-Allow-Origin: *Strict-Transport-Security: max-age=31556952ETag: "64d39a40-24a3"Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'x-proxy-cache: MISSX-GitHub-Request-Id: 59FB:277281:353E87:3BD558:66F650B8Accept-Ranges: bytesAge: 0Date: Fri, 27 Sep 2024 06:29:12 GMTVia: 1.1 varnishX-Served-By: cache-ewr-kewr1740038-EWRX-Cache: MISSX-Cache-Hits: 0X-Timer: S1727418553.818304,VS0,VE31Vary: Accept-EncodingX-Fastly-Request-ID: ba73af22291d0bede6a13a0188fbf21043179563

Source: chromecache_47.4.dr	String found in binary or memory: https://githubstatus.com
Source: chromecache_47.4.dr	String found in binary or memory: https://help.github.com/pages/
Source: chromecache_47.4.dr	String found in binary or memory: https://twitter.com/githubstatus

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50534
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50426 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 50534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49698 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50425
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49698
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50426
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50425 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.7:49718 version: TLS 1.2

Source: classification engine

Classification label: mal68.phis.win@18/13@8/4

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2008,i,11914359049453020221,13615553556127594117,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://steephan2003.github.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2008,i,11914359049453020221,13615553556127594117,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: agree

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://steephan2003.github.io/	100%	Avira URL Cloud	phishing
http://steephan2003.github.io/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://twitter.com/githubstatus	0%	Avira URL Cloud	safe
https://steephan2003.github.io/style.css	100%	Avira URL Cloud	phishing
https://steephan2003.github.io/fb2.png	100%	Avira URL Cloud	phishing
https://help.github.com/pages/	0%	Avira URL Cloud	safe
https://githubstatus.com	0%	Avira URL Cloud	safe
https://steephan2003.github.io/favicon.ico	100%	Avira URL Cloud	phishing

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
www.google.com	216.58.206.68	true	false	unknown
steephan2003.github.io	185.199.110.153	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://steephan2003.github.io/	true		unknown
https://steephan2003.github.io/index.html	true		unknown
https://steephan2003.github.io/	true		unknown
https://steephan2003.github.io/fb2.png	true	Avira URL Cloud: phishing	unknown
https://steephan2003.github.io/style.css	true	Avira URL Cloud: phishing	unknown
https://steephan2003.github.io/favicon.ico	true	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://githubstatus.com	chromecache_47.4.dr	false	Avira URL Cloud: safe	unknown
https://help.github.com/pages/	chromecache_47.4.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/githubstatus	chromecache_47.4.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.199.110.153	steephan2003.github.io	Netherlands	54113	FASTLYUS	false
216.58.206.68	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520340
Start date and time:	2024-09-27 08:28:07 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 23s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://steephan2003.github.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	15
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@18/13@8/4
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://steephan2003.github.io/index.html

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.3, 142.250.184.206, 173.194.76.84, 34.104.35.123, 172.217.18.10, 172.217.18.106, 142.250.186.42, 216.58.206.74, 142.250.185.74, 216.58.212.138, 172.217.16.138, 142.250.181.234, 142.250.185.106, 142.250.186.106, 142.250.186.74, 172.217.16.202, 142.250.184.202, 216.58.206.42, 142.250.186.138, 142.250.186.170, 20.114.59.183, 199.232.210.172, 40.69.42.241, 13.85.23.206, 93.184.221.240, 142.250.186.67
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, time.windows.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, glb.cws.prod.dcat.dsp.trafficmanager.net, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://steephan2003.github.io/

Input	Output
URL: https://steephan2003.github.io/ Model: jbxai	{ "brand":["facebook"], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Sign Up", "text_input_field_labels":["First name", "Surname", "Mobile number or email address", "Password", "Confirm Password", "Gender", "Birthday", "Day", "Month", "Year"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://steephan2003.github.io/ Model: jbxai

{
"brand":["facebook"],
"contains_trigger_text":false,
"trigger_text":"",
"prominent_button_name":"Sign Up",
"text_input_field_labels":["First name",
"Surname",
"Mobile number or email address",
"Password",
"Confirm Password",
"Gender",
"Birthday",
"Day",
"Month",
"Year"],
"pdf_icon_visible":false,
"has_visible_captcha":false,
"has_urgent_text":false,
"has_visible_qrcode":false}

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (3909)
Category:	downloaded
Size (bytes):	9379
Entropy (8bit):	6.039920236951935
Encrypted:	false
SSDEEP:	192:Iwnb1iC9OA9XXMa9bYnr7JMkrALQDUnulGVopLAGCALQD6vnglET31iCLL3d:rB8HN3DUulGmmv3D6vglETliCfN
MD5:	C1F9838A645648CB3B25359F7890A288
SHA1:	0CF12D25140E329BCB4C304FEEFCE63F8F0BA7B3
SHA-256:	B620507312C5E97566A3C6CFAF99144FEFC18A0DA7D941401DFA0F5F58FB0368
SHA-512:	385898EC5D1CE3D13E8169945128724F6717CC35CEC01D642B90046F7E03DD28A688771CA84EA53B81C8EF8CEC8C1E28012C37732B80D1278A233468514A13F3
Malicious:	false
Reputation:	low
URL:	https://steephan2003.github.io/favicon.ico
Preview:	<!DOCTYPE html>.<html>. <head>. <meta http-equiv="Content-type" content="text/html; charset=utf-8">. <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'">. <title>Page not found · GitHub Pages</title>. <style type="text/css" media="screen">. body {. background-color: #f1f1f1;. margin: 0;. font-family: "Helvetica Neue", Helvetica, Arial, sans-serif;. }.. .container { margin: 50px auto 40px auto; width: 600px; text-align: center; }.. a { color: #4183c4; text-decoration: none; }. a:hover { text-decoration: underline; }.. h1 { width: 800px; position:relative; left: -100px; letter-spacing: -1px; line-height: 60px; font-size: 60px; font-weight: 100; margin: 0px 0 50px 0; text-shadow: 0 1px 0 #fff; }. p { color: rgba(0, 0, 0, 0.5); margin: 20px 0; line-height: 1.6; }.. ul { list-style: none; margin: 25px 0; padding: 0; }. li { d

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 947 x 351, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	162994
Entropy (8bit):	7.988033840724363
Encrypted:	false
SSDEEP:	3072:booNIqBlaGmPQHFNI0EN/xxcEX+oZ1ChDRQAalMIcl5lctfzD:booNlajmFQbaEXPggA2MWtfP
MD5:	68DF426F298C755B8B8E6B926CE8C0A8
SHA1:	7546879A746FE8AA84C6ABB668F9192BDE7CA09C
SHA-256:	7FF2033D21322A305843DB33A42C5984920D829D7FFD3A559059E9789F61DEA0
SHA-512:	84CE138667FF719C0D7214644CB741641739B0392977FE39B5583BFE7015504D377CBE8FD5B25272340336A089E5C8F72D96BD7A8D3BD423042051591BEC87E7
Malicious:	false
Reputation:	low
URL:	https://steephan2003.github.io/fb2.png
Preview:	.PNG........IHDR......._.............sRGB.........gAMA......a.....pHYs..........o.d....IDATx^....l.q..Zd..V...@.$@p..l.["...=3gz...3...W..gz$.$."E..7,.V...z..\c_..3s...../..T......s......p8...?%...E\U.<..7\U.<oy>.Ll:..qT.W..s..J.E.$..."]~.....,E).......[...s...X.\|Mu.....E.$.z.pUyS..z<.).b=.....$.,..x...H..%J<...G..'......@.U..kc#......9}..R.Y09.K.(Q.D..%.c..l...8.....WTDXq{........U].I.%...W.I.:3..d].D..%J.(.<..RT\.'.7e9..U....3%dA!...#]/.W.7.Ui.....U..y.....e......~.i.....x.yS..z.....I.MY..q...(3r=...l....sW.B...".Y..<\y..+~=}......&..,...l<c?..........y.U.M.....,..(.........yS....J.(......jW...R.\......%J.(Q.D....;.%J<o.4N?.HS.j]>b.w..(Q.D..%J<.(...%J.(Q.D..%J.(..TfK.(Q.D..%J.(Q..s.R.-Q.D..%J.(Q.D......x..S.....n..-...=+..7..w.\|..:....v..p_.B.]./.H9.-.%..VB0.L.b..$...yX.uq.......[,....ov=...f.V..(f7.k..u......R.._.....d.qq.T.}...9..7w..x]..{.q.."..X......a..2.5......@q=,.3.#...\.a...........2.G.wA.p..N.RX,`.]...W...e=..ky..

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	2284
Entropy (8bit):	4.760381897051469
Encrypted:	false
SSDEEP:	48:0phO6FNflPgi2nr1eFj2ERHv65oi0/0CcKRtWFPwxz:Eh1FllYi2r1eVbRHv65o3ZxRtCIxz
MD5:	C84EFAC781493D151763EA86354CC1A2
SHA1:	B3507767FEFB595CBB8F11B4511E5D28F25FDF2D
SHA-256:	7EDF5368C360146B968C2A8727713C92F9233202B819B0ED97E6620679D2B5FC
SHA-512:	BC481E6881EF01B11F6E0EC29D340CD3EBB6A4BC9833736E931945E040391D5B81C3F281CCAAE056C9A4315FCAA0C44A01255C227515E644DE65CCF021AA3C6D
Malicious:	false
Reputation:	low
URL:	https://steephan2003.github.io/style.css
Preview:	.header{.. background-color: #3b5998;.. width: 100%;.. height: 85px;..}..body{.. margin: 0;.. font-family: helvetica neue,helvetica,arial,sans-serif;..}...logo{.. width: 50%;.. padding-top: 35px;.. float: left..}...login{.. width: 50%;.. float: left;.. padding-top: 10px;..}...logo-text{.. color: white;.. text-decoration: none;.. font-size: 40px;.. font-weight: bold;.. margin-left:150px;..}...login-settings{.. color: white;.. font-size: 11px;..}...submit-btn{.. background-color:#3b5998;.. color: white;.. border-color: #9cb4d8;.. cursor: pointer;..}...submit-btn:hover{.. background-color:#032c84;..}...main-body{.. background: linear-gradient(white,#d3d8e8);.. width: 100%;.. height: 600px;..}.....imgside{.. width: 50%;.. padding-left: 50px;.. float: left;..}...details{.. width: 40%;.. float: left;.. padding-top: 0px;.. margin-left: 60px;..}...para{.. font-size: 20px;.. font-weight: bol

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	128
Entropy (8bit):	4.567734420933131
Encrypted:	false
SSDEEP:	3:WZoS8/Z5k2N6DthGDthGDthGDthGDthllkKxlkKUxt1:WZoS8/Z7N6GGGGllDxlDgt1
MD5:	94257D2910C71567A63305866194A1A3
SHA1:	DDCCAD448566A675DFC6DCE47FBBFAC91487379F
SHA-256:	703BF46E66151406BFC0B47F28A444E8CA3E2984B996799BE8B722FD1D3B8DE8
SHA-512:	67D1D3A0F87F6B11A8D86A216EA37FF4214145BFAA44CFFFB781F44673CBA60A9F8A7007F12400DF176BE714D2D9ADCE85FDD8F8C1FE0F38DFC95F95CBB5D3E0
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzQSFwk29O07-aJIgBIFDZFhlU4SBQ2RYZVOEkEJtzSk6xg2hEESBQ2RYZVOEgUNkWGVThIFDZFhlU4SBQ2RYZVOEgUNkWGVThIFDfOgT60SBQ3zoE-tEgUNgZDxfA==?alt=proto
Preview:	ChIKBw2RYZVOGgAKBw2RYZVOGgAKSAoHDZFhlU4aAAoHDZFhlU4aAAoHDZFhlU4aAAoHDZFhlU4aAAoHDZFhlU4aAAoHDfOgT60aAAoHDfOgT60aAAoHDYGQ8XwaAA==

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (339), with CRLF line terminators
Category:	downloaded
Size (bytes):	9943
Entropy (8bit):	4.076492840941168
Encrypted:	false
SSDEEP:	96:mIQIPVuDXjhCttYHW8tdCdtNtKt3t5t2tstpxtMt5tWtPoG:RPVuDTItMOdv0xz8Sbx6nwFV
MD5:	D2C5743F64F07C6DF6065AA7F54BD7EE
SHA1:	A7CD0B700D200686F799FC5B5944306A2F94B57B
SHA-256:	B499AC36D4919F320500E6E976BC38A1EB47CBAD20714E6C6754FDEFFB585AC5
SHA-512:	F08CEF7EADD6AA6A7ACEEC460EE95FC30903A4F8244E7844B5038E316E8E30E6B4FC6C5465BEBD3ABCE741378F241C3562FC41464AE6DB14AC20F0826AFFB9D1
Malicious:	false
Reputation:	low
URL:	https://steephan2003.github.io/index.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Facebook-log in or sign up</title>.. <link rel="stylesheet" href="style.css" type="text/css">..</head>..<body>.. <div class="container">.. <div class="header">.. <div class="logo">.. <a class="logo-text" href="index.html">facebook</a>.. </div>.. <div class="login">.. <form action="">.. <table class="login controls" style="margin-left: 115px;">.. <tr class="login-settings">.. <td>Email or Mobile number</td>.. <td style="padding-left: 4px;">Password</td>.. </tr>.. <tr>.. <td><input type="text"></td>.. <td style="padding-left: 4px;"><input type="text"></td>.. <td style="paddi

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 947 x 351, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	162994
Entropy (8bit):	7.988033840724363
Encrypted:	false
SSDEEP:	3072:booNIqBlaGmPQHFNI0EN/xxcEX+oZ1ChDRQAalMIcl5lctfzD:booNlajmFQbaEXPggA2MWtfP
MD5:	68DF426F298C755B8B8E6B926CE8C0A8
SHA1:	7546879A746FE8AA84C6ABB668F9192BDE7CA09C
SHA-256:	7FF2033D21322A305843DB33A42C5984920D829D7FFD3A559059E9789F61DEA0
SHA-512:	84CE138667FF719C0D7214644CB741641739B0392977FE39B5583BFE7015504D377CBE8FD5B25272340336A089E5C8F72D96BD7A8D3BD423042051591BEC87E7
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR......._.............sRGB.........gAMA......a.....pHYs..........o.d....IDATx^....l.q..Zd..V...@.$@p..l.["...=3gz...3...W..gz$.$."E..7,.V...z..\c_..3s...../..T......s......p8...?%...E\U.<..7\U.<oy>.Ll:..qT.W..s..J.E.$..."]~.....,E).......[...s...X.\|Mu.....E.$.z.pUyS..z<.).b=.....$.,..x...H..%J<...G..'......@.U..kc#......9}..R.Y09.K.(Q.D..%.c..l...8.....WTDXq{........U].I.%...W.I.:3..d].D..%J.(.<..RT\.'.7e9..U....3%dA!...#]/.W.7.Ui.....U..y.....e......~.i.....x.yS..z.....I.MY..q...(3r=...l....sW.B...".Y..<\y..+~=}......&..,...l<c?..........y.U.M.....,..(.........yS....J.(......jW...R.\......%J.(Q.D....;.%J<o.4N?.HS.j]>b.w..(Q.D..%J<.(...%J.(Q.D..%J.(..TfK.(Q.D..%J.(Q..s.R.-Q.D..%J.(Q.D......x..S.....n..-...=+..7..w.\|..:....v..p_.B.]./.H9.-.%..VB0.L.b..$...yX.uq.......[,....ov=...f.V..(f7.k..u......R.._.....d.qq.T.}...9..7w..x]..{.q.."..X......a..2.5......@q=,.3.#...\.a...........2.G.wA.p..N.RX,`.]...W...e=..ky..

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (339), with CRLF line terminators
Category:	downloaded
Size (bytes):	9943
Entropy (8bit):	4.076492840941168
Encrypted:	false
SSDEEP:	96:mIQIPVuDXjhCttYHW8tdCdtNtKt3t5t2tstpxtMt5tWtPoG:RPVuDTItMOdv0xz8Sbx6nwFV
MD5:	D2C5743F64F07C6DF6065AA7F54BD7EE
SHA1:	A7CD0B700D200686F799FC5B5944306A2F94B57B
SHA-256:	B499AC36D4919F320500E6E976BC38A1EB47CBAD20714E6C6754FDEFFB585AC5
SHA-512:	F08CEF7EADD6AA6A7ACEEC460EE95FC30903A4F8244E7844B5038E316E8E30E6B4FC6C5465BEBD3ABCE741378F241C3562FC41464AE6DB14AC20F0826AFFB9D1
Malicious:	false
Reputation:	low
URL:	https://steephan2003.github.io/
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>Facebook-log in or sign up</title>.. <link rel="stylesheet" href="style.css" type="text/css">..</head>..<body>.. <div class="container">.. <div class="header">.. <div class="logo">.. <a class="logo-text" href="index.html">facebook</a>.. </div>.. <div class="login">.. <form action="">.. <table class="login controls" style="margin-left: 115px;">.. <tr class="login-settings">.. <td>Email or Mobile number</td>.. <td style="padding-left: 4px;">Password</td>.. </tr>.. <tr>.. <td><input type="text"></td>.. <td style="padding-left: 4px;"><input type="text"></td>.. <td style="paddi

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 27, 2024 08:28:59.443794966 CEST	49671	443	192.168.2.7	204.79.197.203
Sep 27, 2024 08:28:59.834441900 CEST	49674	443	192.168.2.7	104.98.116.138
Sep 27, 2024 08:28:59.834461927 CEST	49675	443	192.168.2.7	104.98.116.138
Sep 27, 2024 08:28:59.865684032 CEST	49672	443	192.168.2.7	104.98.116.138
Sep 27, 2024 08:29:04.256227970 CEST	49671	443	192.168.2.7	204.79.197.203
Sep 27, 2024 08:29:04.491156101 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 27, 2024 08:29:04.865703106 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 27, 2024 08:29:05.615695953 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 27, 2024 08:29:07.162475109 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 27, 2024 08:29:09.455024958 CEST	49674	443	192.168.2.7	104.98.116.138
Sep 27, 2024 08:29:09.455048084 CEST	49675	443	192.168.2.7	104.98.116.138
Sep 27, 2024 08:29:09.473462105 CEST	49672	443	192.168.2.7	104.98.116.138
Sep 27, 2024 08:29:09.843195915 CEST	49702	80	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:09.843346119 CEST	49703	80	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:09.848059893 CEST	80	49702	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:09.848087072 CEST	80	49703	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:09.848150969 CEST	49702	80	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:09.848192930 CEST	49703	80	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:09.848412991 CEST	49703	80	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:09.853182077 CEST	80	49703	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.245198965 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 27, 2024 08:29:10.310679913 CEST	80	49703	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.324016094 CEST	49706	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.324071884 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.324162006 CEST	49706	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.324582100 CEST	49706	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.324606895 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.448636055 CEST	49703	80	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.790014982 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.793870926 CEST	49706	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.793900013 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.794924021 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.794990063 CEST	49706	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.796149015 CEST	49706	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.796205044 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.796365023 CEST	49706	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.796374083 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.835702896 CEST	49706	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.923577070 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.923630953 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.923671007 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.923695087 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.923739910 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.923757076 CEST	49706	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.923757076 CEST	49706	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.923793077 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.924019098 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.924034119 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.924082994 CEST	49706	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.924093962 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.931696892 CEST	49706	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.931777954 CEST	443	49706	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.931852102 CEST	49706	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.978836060 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.978888988 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.979027987 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.979155064 CEST	49708	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.979207993 CEST	443	49708	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.979348898 CEST	49708	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.979914904 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.979916096 CEST	49708	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:10.979927063 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:10.979931116 CEST	443	49708	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.434526920 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.434560061 CEST	443	49708	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.435404062 CEST	49708	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.435417891 CEST	443	49708	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.435547113 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.435559988 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.436291933 CEST	443	49708	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.436703920 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.436836004 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.437271118 CEST	49708	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.437406063 CEST	443	49708	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.437586069 CEST	49708	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.438241005 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.438333035 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.438364029 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.483397961 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.483406067 CEST	443	49708	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.569262981 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.569298983 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.569322109 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.569348097 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.569432020 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.569432020 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.569454908 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.569638968 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.569783926 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.572779894 CEST	443	49708	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.572865963 CEST	443	49708	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.572942972 CEST	443	49708	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.572978973 CEST	49708	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.572978973 CEST	49708	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.573306084 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.574558973 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.574567080 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.576873064 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.576900005 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.576929092 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.576944113 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.576950073 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.577181101 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.637799025 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.656332970 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.656414032 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.656446934 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.656492949 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.656497002 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.656508923 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.656589031 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.656589985 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.656632900 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.656645060 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.656749964 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.656855106 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.656861067 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.657423973 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.657453060 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.657516956 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.657521963 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.657692909 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.657696962 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.659794092 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.659823895 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.659848928 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.659856081 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.659914017 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.659919024 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.663853884 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.663907051 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.663930893 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.663938999 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.663979053 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.664033890 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.664077044 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.664165974 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.664170027 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.664202929 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.664309025 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.664314032 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.744359970 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.744385958 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.744528055 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.744561911 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.744576931 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.744648933 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.745907068 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.745914936 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.745954990 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.745971918 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.746053934 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.746053934 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.746063948 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.748377085 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.748397112 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.748428106 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.748487949 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.748497963 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.748509884 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.751477003 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.751492023 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.751581907 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.751596928 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.759759903 CEST	49708	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.759783030 CEST	443	49708	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.777362108 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.825745106 CEST	443	49698	104.98.116.138	192.168.2.7
Sep 27, 2024 08:29:11.825836897 CEST	49698	443	192.168.2.7	104.98.116.138
Sep 27, 2024 08:29:11.830518961 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.830533028 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.830574989 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.830599070 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.830617905 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.830655098 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.831341028 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.831360102 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.831399918 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.831413984 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.831428051 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.832066059 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.832078934 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.832153082 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.832153082 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.832154036 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.832204103 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.832585096 CEST	49707	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.832606077 CEST	443	49707	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.849792004 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.849869967 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.849945068 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.850683928 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:11.850701094 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:11.879568100 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:29:11.879614115 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 27, 2024 08:29:11.879688978 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:29:11.879916906 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:29:11.879935026 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 27, 2024 08:29:12.273978949 CEST	49714	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.274019957 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.274162054 CEST	49714	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.274490118 CEST	49714	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.274502993 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.324619055 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.324997902 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.325017929 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.326560974 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.326630116 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.327182055 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.327264071 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.327548027 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.327560902 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.380963087 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.428498030 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.480271101 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.518872023 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.518886089 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.518925905 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.518943071 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.518959999 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.518965960 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.518985033 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.519004107 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.519025087 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.519045115 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.520082951 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.520092964 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.520123005 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.520140886 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.520162106 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.520169973 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.520189047 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.520205975 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.523540974 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.523561954 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.523622036 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.523639917 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.523670912 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.523689985 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.541609049 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 27, 2024 08:29:12.554735899 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:29:12.554752111 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 27, 2024 08:29:12.558186054 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 27, 2024 08:29:12.558264017 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:29:12.577935934 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:29:12.578195095 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 27, 2024 08:29:12.610537052 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.610559940 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.610625029 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.610646009 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.610693932 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.611582041 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.611613035 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.611639977 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.611664057 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.611682892 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.611697912 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.613373995 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.613394022 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.613426924 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.613437891 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.613457918 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.613470078 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.615067959 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.615088940 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.615140915 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.615153074 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.615180016 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.615191936 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.630474091 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:29:12.630487919 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 27, 2024 08:29:12.681144953 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:29:12.700995922 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.701025963 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.701096058 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.701117039 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.701149940 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.701160908 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.701828957 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.701855898 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.701920986 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.701932907 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.701972961 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.702497959 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.702541113 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.702558041 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.702565908 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.702596903 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.702610970 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.702630997 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.702723026 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.705446959 CEST	49710	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.705467939 CEST	443	49710	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.746581078 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.766313076 CEST	49714	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.766336918 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.767184019 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.767855883 CEST	49714	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.767990112 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.768177032 CEST	49714	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.811409950 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.897384882 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.897453070 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.897492886 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.897521973 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.897545099 CEST	49714	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.897569895 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.897586107 CEST	49714	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.906511068 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.906568050 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.906599998 CEST	49714	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.906614065 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.906649113 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:12.906656027 CEST	49714	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.906691074 CEST	49714	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.907815933 CEST	49714	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:12.907830000 CEST	443	49714	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:13.865454912 CEST	49671	443	192.168.2.7	204.79.197.203
Sep 27, 2024 08:29:15.202106953 CEST	49717	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:15.202164888 CEST	443	49717	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:15.202240944 CEST	49717	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:15.215555906 CEST	49717	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:15.215578079 CEST	443	49717	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:15.866509914 CEST	443	49717	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:15.866631985 CEST	49717	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:15.887293100 CEST	49717	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:15.887326956 CEST	443	49717	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:15.887721062 CEST	443	49717	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:15.927694082 CEST	49717	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:16.185534954 CEST	49717	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:16.201576948 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 27, 2024 08:29:16.227402925 CEST	443	49717	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:16.371999979 CEST	443	49717	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:16.372068882 CEST	443	49717	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:16.374711037 CEST	49717	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:16.413196087 CEST	49717	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:16.413196087 CEST	49717	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:16.413224936 CEST	443	49717	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:16.413234949 CEST	443	49717	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:16.518605947 CEST	49718	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:16.518649101 CEST	443	49718	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:16.518788099 CEST	49718	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:16.522587061 CEST	49718	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:16.522608042 CEST	443	49718	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:17.185014963 CEST	443	49718	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:17.185113907 CEST	49718	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:17.196739912 CEST	49718	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:17.196759939 CEST	443	49718	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:17.197000027 CEST	443	49718	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:17.248444080 CEST	49718	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:17.251848936 CEST	49718	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:17.299397945 CEST	443	49718	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:18.477611065 CEST	443	49718	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:18.477740049 CEST	443	49718	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:18.477807045 CEST	49718	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:18.478461981 CEST	49718	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:18.478482962 CEST	443	49718	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:18.478499889 CEST	49718	443	192.168.2.7	184.28.90.27
Sep 27, 2024 08:29:18.478507042 CEST	443	49718	184.28.90.27	192.168.2.7
Sep 27, 2024 08:29:20.278342962 CEST	49698	443	192.168.2.7	104.98.116.138
Sep 27, 2024 08:29:20.278775930 CEST	49719	443	192.168.2.7	104.98.116.138
Sep 27, 2024 08:29:20.278809071 CEST	443	49719	104.98.116.138	192.168.2.7
Sep 27, 2024 08:29:20.278930902 CEST	49719	443	192.168.2.7	104.98.116.138
Sep 27, 2024 08:29:20.279407024 CEST	49719	443	192.168.2.7	104.98.116.138
Sep 27, 2024 08:29:20.279422045 CEST	443	49719	104.98.116.138	192.168.2.7
Sep 27, 2024 08:29:20.283503056 CEST	443	49698	104.98.116.138	192.168.2.7
Sep 27, 2024 08:29:21.405436993 CEST	50424	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:21.410322905 CEST	53	50424	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:21.410409927 CEST	50424	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:21.410448074 CEST	50424	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:21.415396929 CEST	53	50424	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:21.475029945 CEST	50425	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:21.475084066 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:21.475234032 CEST	50425	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:21.476197958 CEST	50426	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:21.476216078 CEST	443	50426	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:21.476376057 CEST	50426	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:21.493202925 CEST	50426	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:21.493221998 CEST	443	50426	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:21.493601084 CEST	50425	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:21.493607044 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:21.859551907 CEST	53	50424	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:21.896372080 CEST	50424	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:21.901582003 CEST	53	50424	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:21.901654005 CEST	50424	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:21.951159000 CEST	443	50426	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:21.975764036 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:21.985368967 CEST	50426	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:21.985395908 CEST	443	50426	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:21.985652924 CEST	50425	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:21.985662937 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:21.985948086 CEST	443	50426	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:21.986042976 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:21.990741968 CEST	50425	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:21.990823030 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:21.994276047 CEST	50426	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:21.994450092 CEST	443	50426	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:21.994621038 CEST	50425	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:22.038822889 CEST	50426	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:22.039402962 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:22.114742994 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:22.114799976 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:22.114826918 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:22.114852905 CEST	50425	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:22.114859104 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:22.114872932 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:22.114933968 CEST	50425	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:22.115257978 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:22.115283012 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:22.115303993 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:22.115317106 CEST	50425	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:22.115331888 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:22.115403891 CEST	50425	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:22.116908073 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:22.116976023 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:22.117003918 CEST	50425	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:22.117208004 CEST	50425	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:22.120940924 CEST	50425	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:22.120968103 CEST	443	50425	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:22.439718962 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 27, 2024 08:29:22.439790010 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 27, 2024 08:29:22.439922094 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:29:23.343513966 CEST	49711	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:29:23.343544960 CEST	443	49711	216.58.206.68	192.168.2.7
Sep 27, 2024 08:29:28.114994049 CEST	49677	443	192.168.2.7	20.50.201.200
Sep 27, 2024 08:29:46.374937057 CEST	50430	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:46.379770041 CEST	53	50430	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:46.379968882 CEST	50430	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:46.379968882 CEST	50430	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:46.380029917 CEST	50430	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:46.387362957 CEST	53	50430	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:46.387377024 CEST	53	50430	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:46.849611044 CEST	53	50430	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:46.850159883 CEST	50430	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:46.855268955 CEST	53	50430	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:46.855405092 CEST	50430	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:54.850281000 CEST	49702	80	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:54.855211020 CEST	80	49702	185.199.110.153	192.168.2.7
Sep 27, 2024 08:29:55.318952084 CEST	49703	80	192.168.2.7	185.199.110.153
Sep 27, 2024 08:29:55.324062109 CEST	80	49703	185.199.110.153	192.168.2.7
Sep 27, 2024 08:30:03.051214933 CEST	443	49719	104.98.116.138	192.168.2.7
Sep 27, 2024 08:30:03.051300049 CEST	49719	443	192.168.2.7	104.98.116.138
Sep 27, 2024 08:30:07.006616116 CEST	50426	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:30:07.006635904 CEST	443	50426	185.199.110.153	192.168.2.7
Sep 27, 2024 08:30:11.013811111 CEST	50532	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:30:11.018682957 CEST	53	50532	1.1.1.1	192.168.2.7
Sep 27, 2024 08:30:11.018752098 CEST	50532	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:30:11.056292057 CEST	50532	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:30:11.061111927 CEST	53	50532	1.1.1.1	192.168.2.7
Sep 27, 2024 08:30:11.481352091 CEST	53	50532	1.1.1.1	192.168.2.7
Sep 27, 2024 08:30:11.517615080 CEST	50532	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:30:11.523116112 CEST	53	50532	1.1.1.1	192.168.2.7
Sep 27, 2024 08:30:11.523255110 CEST	50532	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:30:11.918692112 CEST	49702	80	192.168.2.7	185.199.110.153
Sep 27, 2024 08:30:11.918970108 CEST	50534	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:30:11.919030905 CEST	443	50534	216.58.206.68	192.168.2.7
Sep 27, 2024 08:30:11.922801018 CEST	50534	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:30:11.923428059 CEST	50534	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:30:11.923444033 CEST	443	50534	216.58.206.68	192.168.2.7
Sep 27, 2024 08:30:12.225218058 CEST	49702	80	192.168.2.7	185.199.110.153
Sep 27, 2024 08:30:12.624912024 CEST	80	49702	185.199.110.153	192.168.2.7
Sep 27, 2024 08:30:12.624941111 CEST	80	49702	185.199.110.153	192.168.2.7
Sep 27, 2024 08:30:12.624989986 CEST	49702	80	192.168.2.7	185.199.110.153
Sep 27, 2024 08:30:13.279979944 CEST	443	50534	216.58.206.68	192.168.2.7
Sep 27, 2024 08:30:13.286696911 CEST	50534	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:30:13.286721945 CEST	443	50534	216.58.206.68	192.168.2.7
Sep 27, 2024 08:30:13.287091970 CEST	443	50534	216.58.206.68	192.168.2.7
Sep 27, 2024 08:30:13.299712896 CEST	50534	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:30:13.299942017 CEST	443	50534	216.58.206.68	192.168.2.7
Sep 27, 2024 08:30:13.462678909 CEST	50534	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:30:22.687134027 CEST	50426	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:30:22.687241077 CEST	443	50426	185.199.110.153	192.168.2.7
Sep 27, 2024 08:30:22.687297106 CEST	50426	443	192.168.2.7	185.199.110.153
Sep 27, 2024 08:30:23.559983969 CEST	443	50534	216.58.206.68	192.168.2.7
Sep 27, 2024 08:30:23.560058117 CEST	443	50534	216.58.206.68	192.168.2.7
Sep 27, 2024 08:30:23.560280085 CEST	50534	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:30:24.108048916 CEST	50534	443	192.168.2.7	216.58.206.68
Sep 27, 2024 08:30:24.108094931 CEST	443	50534	216.58.206.68	192.168.2.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 27, 2024 08:29:07.931324005 CEST	53	59098	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:08.260981083 CEST	53	58891	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:09.344100952 CEST	53	52706	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:09.828577042 CEST	60842	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:09.828820944 CEST	64083	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:09.837507010 CEST	53	60842	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:09.837539911 CEST	53	64083	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:10.314376116 CEST	50847	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:10.314758062 CEST	51383	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:10.323168039 CEST	53	50847	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:10.323491096 CEST	53	51383	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:10.823556900 CEST	123	123	192.168.2.7	13.95.65.251
Sep 27, 2024 08:29:11.022708893 CEST	123	123	13.95.65.251	192.168.2.7
Sep 27, 2024 08:29:11.839351892 CEST	65516	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:11.839519024 CEST	50150	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:11.849095106 CEST	53	65516	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:11.849184036 CEST	53	50150	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:11.870990038 CEST	64176	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:11.871205091 CEST	49948	53	192.168.2.7	1.1.1.1
Sep 27, 2024 08:29:11.877654076 CEST	53	64176	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:11.878108978 CEST	53	49948	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:12.196477890 CEST	53	57104	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:21.404879093 CEST	53	52928	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:26.813097000 CEST	53	59683	1.1.1.1	192.168.2.7
Sep 27, 2024 08:29:46.374413013 CEST	53	64110	1.1.1.1	192.168.2.7
Sep 27, 2024 08:30:03.952389002 CEST	138	138	192.168.2.7	192.168.2.255
Sep 27, 2024 08:30:07.893240929 CEST	53	56751	1.1.1.1	192.168.2.7
Sep 27, 2024 08:30:08.624063015 CEST	53	59732	1.1.1.1	192.168.2.7
Sep 27, 2024 08:30:11.004827976 CEST	53	51870	1.1.1.1	192.168.2.7

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 27, 2024 08:29:09.828577042 CEST	192.168.2.7	1.1.1.1	0xa731	Standard query (0)	steephan2003.github.io	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:09.828820944 CEST	192.168.2.7	1.1.1.1	0x6c49	Standard query (0)	steephan2003.github.io	65	IN (0x0001)	false
Sep 27, 2024 08:29:10.314376116 CEST	192.168.2.7	1.1.1.1	0xb443	Standard query (0)	steephan2003.github.io	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:10.314758062 CEST	192.168.2.7	1.1.1.1	0xbf06	Standard query (0)	steephan2003.github.io	65	IN (0x0001)	false
Sep 27, 2024 08:29:11.839351892 CEST	192.168.2.7	1.1.1.1	0xd69b	Standard query (0)	steephan2003.github.io	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:11.839519024 CEST	192.168.2.7	1.1.1.1	0x659b	Standard query (0)	steephan2003.github.io	65	IN (0x0001)	false
Sep 27, 2024 08:29:11.870990038 CEST	192.168.2.7	1.1.1.1	0xc2ba	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:11.871205091 CEST	192.168.2.7	1.1.1.1	0x5bc3	Standard query (0)	www.google.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Sep 27, 2024 08:29:09.837507010 CEST	1.1.1.1	192.168.2.7	0xa731	No error (0)	steephan2003.github.io	185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:09.837507010 CEST	1.1.1.1	192.168.2.7	0xa731	No error (0)	steephan2003.github.io	185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:09.837507010 CEST	1.1.1.1	192.168.2.7	0xa731	No error (0)	steephan2003.github.io	185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:09.837507010 CEST	1.1.1.1	192.168.2.7	0xa731	No error (0)	steephan2003.github.io	185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:10.323168039 CEST	1.1.1.1	192.168.2.7	0xb443	No error (0)	steephan2003.github.io	185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:10.323168039 CEST	1.1.1.1	192.168.2.7	0xb443	No error (0)	steephan2003.github.io	185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:10.323168039 CEST	1.1.1.1	192.168.2.7	0xb443	No error (0)	steephan2003.github.io	185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:10.323168039 CEST	1.1.1.1	192.168.2.7	0xb443	No error (0)	steephan2003.github.io	185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:11.849095106 CEST	1.1.1.1	192.168.2.7	0xd69b	No error (0)	steephan2003.github.io	185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:11.849095106 CEST	1.1.1.1	192.168.2.7	0xd69b	No error (0)	steephan2003.github.io	185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:11.849095106 CEST	1.1.1.1	192.168.2.7	0xd69b	No error (0)	steephan2003.github.io	185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:11.849095106 CEST	1.1.1.1	192.168.2.7	0xd69b	No error (0)	steephan2003.github.io	185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:11.877654076 CEST	1.1.1.1	192.168.2.7	0xc2ba	No error (0)	www.google.com	216.58.206.68	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:11.878108978 CEST	1.1.1.1	192.168.2.7	0x5bc3	No error (0)	www.google.com		65	IN (0x0001)	false
Sep 27, 2024 08:29:21.859551907 CEST	1.1.1.1	192.168.2.7	0x1	No error (0)	bg.microsoft.map.fastly.net	199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:21.859551907 CEST	1.1.1.1	192.168.2.7	0x1	No error (0)	bg.microsoft.map.fastly.net	199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:36.841027975 CEST	1.1.1.1	192.168.2.7	0x7d18	No error (0)	bg.microsoft.map.fastly.net	199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:29:36.841027975 CEST	1.1.1.1	192.168.2.7	0x7d18	No error (0)	bg.microsoft.map.fastly.net	199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:30:24.018556118 CEST	1.1.1.1	192.168.2.7	0x792c	No error (0)	bg.microsoft.map.fastly.net	199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 27, 2024 08:30:24.018556118 CEST	1.1.1.1	192.168.2.7	0x792c	No error (0)	bg.microsoft.map.fastly.net	199.232.214.172	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

steephan2003.github.io

https:

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49703	185.199.110.153	80	3808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 08:29:09.848412991 CEST	437	OUT	GET / HTTP/1.1 Host: steephan2003.github.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 27, 2024 08:29:10.310679913 CEST	707	IN	HTTP/1.1 301 Moved Permanently Connection: keep-alive Content-Length: 162 Server: GitHub.com Content-Type: text/html permissions-policy: interest-cohort=() Location: https://steephan2003.github.io/ X-GitHub-Request-Id: D247:147E97:37E945:3E7EE4:66F650B4 Accept-Ranges: bytes Age: 0 Date: Fri, 27 Sep 2024 06:29:10 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740074-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727418550.254789,VS0,VE11 Vary: Accept-Encoding X-Fastly-Request-ID: bf13362d958831bf3328ce4fa9afe9e12e540aae Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Sep 27, 2024 08:29:55.318952084 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49702	185.199.110.153	80	3808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 27, 2024 08:29:54.850281000 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49706	185.199.110.153	443	3808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:29:10 UTC	665	OUT	GET / HTTP/1.1 Host: steephan2003.github.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:29:10 UTC	733	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9943 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Tue, 02 Jul 2024 10:28:14 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "6683d63e-26d7" expires: Fri, 27 Sep 2024 06:39:10 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 6C24:1EF659:35349D:3BCA5B:66F650B4 Accept-Ranges: bytes Age: 0 Date: Fri, 27 Sep 2024 06:29:10 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740035-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727418551.846351,VS0,VE32 Vary: Accept-Encoding X-Fastly-Request-ID: 5dc9bb628dc15aef8dcf46e3af7211757f36fcf0
2024-09-27 06:29:10 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 61 63 65 62 6f 6f 6b 2d 6c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Facebook-log in or sign up</title> <link rel="stylesheet" href="style.css" type="text/css">
2024-09-27 06:29:10 UTC	1378	IN	Data Raw: 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 64 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 61 62 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 62 6f 64 79 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 67 73 69 64 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 70 61 72 61 22 3e 46 61 63 65 62 Data Ascii: /a> </td> </tr> </table> </form> </div> </div> <div class="main-body"> <div class="imgside"> <p class="para">Faceb
2024-09-27 06:29:10 UTC	1378	IN	Data Raw: 6c 64 65 72 3d 22 43 6f 6e 66 69 72 6d 20 50 61 73 73 77 6f 72 64 22 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 77 69 64 74 68 3a 20 34 31 36 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 35 38 35 38 35 38 3b 22 3e 47 65 6e 64 65 72 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: lder="Confirm Password" style="margin-top: 10px;width: 416px;margin-bottom: 10px;"> </tr> <br> <label style="font-size: 20px;color:#585858;">Gender</label>
2024-09-27 06:29:10 UTC	1378	IN	Data Raw: 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 37 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 38 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 39 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 31 30 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 31 31 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: n> <option>7</option> <option>8</option> <option>9</option> <option>10</option> <option>11</option>
2024-09-27 06:29:10 UTC	1378	IN	Data Raw: 2d 6c 65 66 74 2d 77 69 64 74 68 3a 20 32 70 78 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 61 6c 69 63 65 62 6c 75 65 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 3e 4d 6f 6e 74 68 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 4a 61 6e 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 46 65 62 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e Data Ascii: -left-width: 2px;border-color: aliceblue;"> <option style="display: none;">Month</option> <option>Jan</option> <option>Feb</option> <option
2024-09-27 06:29:10 UTC	1378	IN	Data Raw: 69 67 6e 22 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 76 61 6c 75 65 3d 22 53 69 67 6e 20 55 70 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 63 6f 6c 6f 72 3a 20 72 67 62 28 39 34 2c 20 39 32 2c 20 39 32 29 3b 3b 22 3e 3c 61 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 33 62 35 39 39 38 3b 22 20 68 72 65 66 3d 22 69 6e 64 65 78 2e 68 74 6d 6c 22 3e 43 72 65 61 74 65 20 61 20 50 61 67 65 3c 2f 61 3e 20 66 6f 72 20 61 20 63 65 6c 65 62 72 69 74 79 2c 20 62 61 6e 64 20 6f Data Ascii: ign" type="submit" value="Sign Up"> <p style="margin-top: 25px;font-size: 14px;font-weight: bold;color: rgb(94, 92, 92);;"><a style="text-decoration: none;color:#3b5998;" href="index.html">Create a Page</a> for a celebrity, band o
2024-09-27 06:29:10 UTC	1378	IN	Data Raw: 6c 69 20 63 6c 61 73 73 3d 22 70 72 22 3e 56 69 64 65 6f 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 70 72 22 3e 50 6c 61 63 65 73 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 70 72 22 3e 47 61 6d 65 73 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 70 72 22 3e 4d 61 72 6b 65 74 70 6c 61 63 65 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 70 72 22 3e 4d 65 74 61 20 50 61 79 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 70 72 22 3e 4d 65 74 61 20 51 75 65 73 74 3c 2f 6c 69 3e 0d Data Ascii: li class="pr">Video</li> <li class="pr">Places</li> <li class="pr">Games</li> <li class="pr">Marketplace</li> <li class="pr">Meta Pay</li> <li class="pr">Meta Quest</li>
2024-09-27 06:29:10 UTC	297	IN	Data Raw: 61 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 33 37 33 37 33 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 35 70 78 3b 22 3e 4d 65 74 61 40 32 30 32 34 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 Data Ascii: a"> <li style="color: #737373; list-style-type: none; margin-right: 20px; font-family: inherit; font-size: 14px;padding-top: 25px;">Meta@2024</li> </div>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49708	185.199.110.153	443	3808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:29:11 UTC	552	OUT	GET /style.css HTTP/1.1 Host: steephan2003.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://steephan2003.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:29:11 UTC	730	IN	HTTP/1.1 200 OK Connection: close Content-Length: 2284 Server: GitHub.com Content-Type: text/css; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Tue, 02 Jul 2024 10:28:14 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "6683d63e-8ec" expires: Fri, 27 Sep 2024 06:39:11 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 831C:1B0A6:3BF3EA:4289F9:66F650B6 Accept-Ranges: bytes Age: 0 Date: Fri, 27 Sep 2024 06:29:11 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740056-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727418551.488418,VS0,VE41 Vary: Accept-Encoding X-Fastly-Request-ID: 13856c84ba99f24869b17c5a4b2db6b721071019
2024-09-27 06:29:11 UTC	1378	IN	Data Raw: 2e 68 65 61 64 65 72 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 33 62 35 39 39 38 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 38 35 70 78 3b 0d 0a 7d 0d 0a 62 6f 64 79 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 68 65 6c 76 65 74 69 63 61 20 6e 65 75 65 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 7d 0d 0a 2e 6c 6f 67 6f 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 35 30 25 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 33 35 70 78 3b 0d 0a 20 20 20 20 66 6c 6f 61 74 3a 20 6c 65 66 74 0d 0a 7d 0d 0a 2e 6c 6f 67 69 6e 7b 0d 0a 20 20 20 20 77 69 64 74 Data Ascii: .header{ background-color: #3b5998; width: 100%; height: 85px;}body{ margin: 0; font-family: helvetica neue,helvetica,arial,sans-serif;}.logo{ width: 50%; padding-top: 35px; float: left}.login{ widt
2024-09-27 06:29:11 UTC	906	IN	Data Raw: 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 61 6c 69 63 65 62 6c 75 65 3b 0d 0a 20 20 20 20 0d 0a 7d 0d 0a 2e 73 70 65 63 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 72 67 62 28 30 2c 20 30 2c 20 30 29 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 70 78 3b 0d 0a 0d 0a 7d 0d 0a 2e 70 61 72 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 67 72 65 79 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 7d 0d 0a 2e 73 69 67 6e 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 35 30 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 36 70 78 3b 0d Data Ascii: border-color: aliceblue; }.spec::placeholder { color: rgb(0, 0, 0); border: px;}.par{ font-size: 13px; color: grey; font-family: inherit;}.sign{ width: 150px; font-size: 20px; border-radius: 6px;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49707	185.199.110.153	443	3808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:29:11 UTC	596	OUT	GET /fb2.png HTTP/1.1 Host: steephan2003.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://steephan2003.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:29:11 UTC	721	IN	HTTP/1.1 200 OK Connection: close Content-Length: 162994 Server: GitHub.com Content-Type: image/png permissions-policy: interest-cohort=() Last-Modified: Tue, 02 Jul 2024 10:28:14 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "6683d63e-27cb2" expires: Fri, 27 Sep 2024 06:39:11 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 561A:1EF659:353521:3BCAF5:66F650B1 Accept-Ranges: bytes Age: 0 Date: Fri, 27 Sep 2024 06:29:11 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740042-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727418551.488630,VS0,VE37 Vary: Accept-Encoding X-Fastly-Request-ID: 8fdd935cf02000cf749f7aba6fb503ddf21296f8
2024-09-27 06:29:11 UTC	1378	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 b3 00 00 01 5f 08 06 00 00 00 9c 07 9b bf 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e ec fd 09 97 6c c9 71 df 09 5a 64 ec b9 be b5 56 00 05 a0 40 00 24 40 70 01 d8 6c aa 5b 22 d9 94 d4 a3 d3 3d 33 67 7a ce e9 0f 33 d4 f4 f4 57 ea d3 67 7a 24 b5 24 8a 22 45 0a 14 37 2c c4 56 a8 2a a0 f6 7a f5 96 5c 63 5f e6 ff 33 73 8f b8 11 19 91 2f f3 bd cc b7 54 dd 7f a6 c7 bd d7 17 73 f3 dd cc dd af df ca 70 38 9e 9a e0 3f 25 ac 92 ae 45 5c 55 de 3c c9 b8 9e 37 5c 55 de 3c 6f 79 3e 9d 4c 6c 3a 9d ba 71 54 2a fa 57 2a b8 fa 73 fc ac 4a d7 45 f1 24 f3 c6 e3 22 5d 7e 89 f4 cd e2 92 Data Ascii: PNGIHDR_sRGBgAMAapHYsodIDATx^lqZdV@$@pl["=3gz3Wgz$$"E7,Vz\c_3s/Tsp8?%E\U<7\U<oy>Ll:qTW*sJE$"]~
2024-09-27 06:29:11 UTC	1378	IN	Data Raw: d5 ff a0 17 79 16 01 b8 c5 cb ea ba 84 09 7f 45 84 ff 70 87 0c 61 3d 5d e1 bc 12 45 f2 15 b5 57 d9 c4 43 01 d4 bb 65 36 56 f1 e0 a1 67 3f 73 ac f2 1b 70 cf 71 7b 06 20 77 de ba 0f 3c cd e7 f2 be 2e 7e 02 9f 4e f3 aa b2 f0 88 64 9d e3 9b e5 f9 39 d9 5d 24 49 d8 a0 11 71 15 1d 83 a7 30 8b 88 bc 9d b7 b9 08 0b ff 0b c4 85 4c 73 91 ee 13 ed fb 73 bb 5a b0 9f f3 e0 61 0b 74 4e a7 81 f8 56 e7 6f 04 2d f0 90 e8 ac 43 91 74 78 c3 62 31 be e0 e1 34 8d 55 3c 84 df c5 f0 60 35 bf a7 e3 5a 87 75 3c ac 02 f1 9c 95 e6 45 ac e2 81 b0 39 ff 16 b1 9c b6 1c 17 f6 71 c5 f6 ec 3c 5f 06 61 f0 9e c3 12 bd f7 fd 4b 71 b9 c3 cc cc 11 51 f1 53 ac 33 61 bf c8 2f f7 d9 64 04 3d c2 15 f9 c7 44 d8 a2 5f 10 fe c3 2c 22 d2 8c ff a0 c3 a3 5b 2d e0 e1 7d bf 53 48 a4 96 f3 1b 04 dd 53 84 Data Ascii: yEpa=]EWCe6Vg?spq{ w<.~Nd9]$Iq0LssZatNVo-Ctxb14U<`5Zu<E9q<_aKqQS3a/d=D_,"[-}SHS
2024-09-27 06:29:11 UTC	1378	IN	Data Raw: af 88 35 f4 56 f2 40 f8 25 5e 89 8c 18 97 fd 82 55 a4 23 7c c1 c5 2b 74 36 8b 88 97 e2 d3 c3 23 e2 14 0f b2 38 fd 72 78 e2 89 8a bd 80 48 d7 79 58 58 99 37 82 e7 cb 72 22 d6 f8 5d 15 d1 da bc 5d 47 63 05 ce c7 03 ee 39 ae a2 5f fc ac 7a c1 fc bc 80 d6 fc c0 84 39 d6 d0 95 3f fc 9e f2 7d 8a df 35 c8 61 97 e3 23 bc c7 59 c0 1a 72 1e ff 72 78 61 15 0f 6b fd a6 eb 02 96 79 f0 5b c2 66 33 07 24 bd a3 7d 0c ac e6 01 36 8a 71 e1 2b 99 45 16 f4 b8 3a 6d ab b0 2e 6f 3c 21 cb 58 e1 d7 b1 c2 eb 2a 1e 56 c5 b5 0e eb 78 f0 f0 0b 34 88 e7 fc 7d f4 f9 71 31 ba f0 7b 2a bd fc 39 bf c9 62 1d 52 b8 e5 f0 0e 85 f7 f8 8a 58 43 6f 25 0f 84 5f ce 03 79 91 cf 95 f1 ad 24 bd cc 43 d9 f7 cf b1 22 a2 b5 79 bb 8e c6 0a 9c 8f 07 dc 73 5c 45 bf f8 29 fb 7e b0 8a 87 b5 7e d3 75 01 cb Data Ascii: 5V@%^U#\|+t6#8rxHyXX7r"]]Gc9_z9?}5a#Yrrxaky[f3$}6q+E:m.o<!XVx4}q1{9bRXCo%_y$C"ys\E)~~u
2024-09-27 06:29:11 UTC	1378	IN	Data Raw: 28 51 a2 44 89 12 25 4a 94 28 51 a2 c4 73 87 52 99 2d 51 a2 44 89 12 25 4a 94 28 51 a2 44 89 12 cf 1d 4a 65 b6 44 89 12 25 4a 94 28 51 a2 44 89 12 25 4a 3c 77 28 95 d9 12 25 4a 94 28 51 a2 44 89 12 25 4a 94 28 f1 dc a1 54 66 4b 94 28 51 a2 44 89 12 25 4a 94 28 51 a2 c4 73 87 52 99 2d 51 a2 44 89 12 25 4a 94 28 51 a2 44 89 12 cf 1d 4a 65 b6 44 89 12 25 4a 7c 06 30 4d e6 69 23 f3 b1 6c 2e 03 97 49 ab c4 55 a2 58 f2 65 89 95 28 51 a2 c4 a3 a3 d2 eb 4f ca 7e b4 44 89 12 25 4a 08 79 38 78 32 c3 c2 2c 96 a5 e8 2a 95 74 b3 04 f7 f6 c8 ac e5 80 4b c4 f5 b8 2a ba e9 aa 78 d6 f9 9d fd 9c 07 2b 3c 3a dd 55 94 cf 8f e0 41 bf ca bc 22 a5 9c 8e e5 3c c5 7a 6e 95 ef 1e 8f 87 12 b9 6c f3 35 83 7c 9d e7 2d ae 53 15 cc 44 56 53 99 0d 59 b0 b2 e0 3e 3c 28 3f 15 77 73 a4 42 Data Ascii: (QD%J(QsR-QD%J(QDJeD%J(QD%J<w(%J(QD%J(TfK(QD%J(QsR-QD%J(QDJeD%J\|0Mi#l.IUXe(QO~D%Jy8x2,tKx+<:UA"<znl5\|-SDVSY><(?wsB
2024-09-27 06:29:11 UTC	1378	IN	Data Raw: 8e b7 c7 e5 eb 22 74 9f 05 1e 9e 24 8a 7c c1 4b 7e be 2a be d6 e5 c3 2a 5c 05 0f 2b da bb e3 aa d2 bb 0a cb 79 40 dc ab e2 2f da 29 8c 07 83 f9 22 cf 52 34 f4 e7 ab a2 0e dc 78 c7 ae e8 27 09 7e dc 2a f1 fc a5 7f fd 84 7b 08 94 32 ee c7 7f 64 f4 48 30 19 77 c5 0f 37 b2 08 c1 15 45 58 7f 1b 12 b3 3d 7c 42 e1 d6 e9 01 0f ca 4f 58 b8 30 ea 34 64 05 4f 39 0c 76 fc 27 37 7e 63 e3 72 16 ba a5 60 8d 27 36 96 c0 2e 1d cb 36 36 aa 56 6f 64 c5 2a 23 c2 06 3c 62 fd e3 0a 81 b0 05 45 5f 45 60 3f a7 75 36 66 f9 9a b0 90 0f 4b 58 f0 3b e3 29 ee 73 7a c1 cc 7e 09 67 c6 b5 3a c8 12 08 4c be e7 7b 29 47 ba 0c 87 53 eb 0f 46 9e a7 38 3a 5d 32 d7 3d 42 d8 03 b8 3d f9 5c ab 29 bf 6b 35 ab a6 d5 f5 22 ef 8f 8e 75 09 58 a6 9d fd 89 bf 0a 35 03 77 78 ce 5b 9d 83 a7 49 54 9a 04 Data Ascii: "t$\|K~*\+y@/)"R4x'~{2dH0w7EX=\|BOX04dO9v'7~cr`'6.66Vod*#<bE_E`?u6fKX;)sz~g:L{)GSF8:]2=B=\)k5"uX5wx[IT
2024-09-27 06:29:11 UTC	1378	IN	Data Raw: 28 34 d3 6d 01 9e 2f 4b 08 1b ea 7a a4 07 04 bf 59 81 4a 99 c7 7f 0e 2e ab 28 77 14 c6 9c 1e 52 1b 91 e2 6f 2c b7 91 da c1 c8 95 2a ea 1a f5 bf 66 f5 3a 8a 15 93 25 91 66 94 ab 50 bc d4 66 14 67 a3 51 f7 b6 03 ad 55 fc 9e 95 b6 50 e2 46 33 7a a1 1c a7 c9 02 3c 51 4f f1 57 11 df ac 44 1f de b3 de cf ff c2 3a 6f ff a9 6d 0c de b5 46 73 68 b5 f6 54 8a ac da 40 b3 61 95 1a e7 1c 8f ac d7 19 59 f7 b0 ae f4 be 64 8d 9b bf 6e 0d 29 b4 ad 17 bf 62 f5 cd 1d d1 ae da 88 bc 11 b9 98 9c 98 af 82 ae 64 5f 58 e6 1f 7f b1 92 8a 89 40 ce b7 e8 d0 3e 17 fd e3 2e 43 3f 14 a9 d2 53 a4 2b 23 e7 6b 18 d1 16 83 d0 f6 38 e4 e6 14 f0 a3 2b b4 a3 fc aa 56 d3 d5 ff dc 2e d2 51 ab 73 4d 79 4e 40 dc f4 27 f6 3c dc 2c ee 79 f4 71 9b e2 29 5e 21 e2 b4 21 e2 56 85 40 8e c8 37 8f 64 09 Data Ascii: (4m/KzYJ.(wRo,*f:%fPfgQUPF3z<QOWD:omFshT@aYdn)bd_X@>.C?S+#k8+V.QsMyN@'<,yq)^!!V@7d
2024-09-27 06:29:11 UTC	1378	IN	Data Raw: 68 af 99 06 98 a5 cb 9f c8 d7 50 7e c9 ab c8 5f e5 3d a4 32 4d 01 37 da 76 3e ac ca 6d 9d 0e 3c 16 78 70 bb 64 9f ea 6d 80 72 9c 7a 5f d2 1f f4 bd 2f 03 f4 87 9b 9b 4d 6b b7 9a ae fc 26 92 1e 8e 90 4e 2d d1 0d da 73 b8 8f 44 3e 9c b2 bb 2c 75 1b ed 61 19 d0 49 b7 e7 c0 9c ff 40 44 73 01 02 6b b0 4c 37 76 e9 ac a0 ab fa 32 b3 2d 38 2f e7 c5 a3 e0 54 da 9c e4 e3 d3 7d 1c 64 9e 66 e9 cb f5 e0 12 d2 bb 1a d4 d1 74 bb 84 1c 27 3c 45 d6 5c 05 0f d1 46 8a e9 83 9f ab 4b ef 45 70 3a 6f 2e 87 af f3 d1 7d 6c 65 f6 d9 c8 c4 e0 69 81 97 28 e1 f4 70 15 58 5d a9 17 f3 03 0f 57 c5 c3 8a c8 9f 72 c7 32 c7 62 de 5c 5e 1d b9 08 dd ab e7 c1 29 5e 69 1d bb 08 60 ea c9 f1 52 ec 03 32 4e 67 c5 d5 f1 73 aa bd 9f 95 7e 67 55 6e c9 79 5e 7e 8b 82 ca e9 14 9d 8d 1c 34 87 83 27 16 Data Ascii: hP~_=2M7v>m<xpdmrz_/Mk&N-sD>,uaI@DskL7v2-8/T}dft'<E\FKEp:o.}lei(pX]Wr2b\^)^i`R2Ngs~gUny^~4'
2024-09-27 06:29:11 UTC	1378	IN	Data Raw: 58 85 20 7c 56 ce f0 83 d0 ce 41 3f 3c 37 9b 2d ab 4b 69 25 7c b7 d7 f3 55 3a 62 6f d4 1b 2e e4 23 d8 a0 1c ba bd 84 93 66 b3 e1 0a 70 9d c3 95 20 bc 84 65 bb 94 92 48 40 02 b7 ae 50 4b 89 25 5e d4 4a 57 cc d3 0a 81 0b 53 ac 8e ea 8a 2e cf b5 48 36 b2 0f 8b a5 b8 c8 37 77 24 d6 b8 e7 31 9e f0 0d b1 b8 22 5e 7a 98 a4 00 07 1f 53 4f 17 5b 53 c9 c3 22 3c 44 44 fc 5c c1 eb 92 12 89 fe 11 2b 96 d4 35 dd 2b bd be 75 5c f9 d1 68 c4 e9 b5 ae ac 91 d7 fa 23 2f 16 11 74 66 f6 e4 23 81 0b 42 f3 d3 85 b8 2e b0 40 59 91 56 ca 15 65 96 3a 8f 41 c9 60 b2 82 ba 5d 3c c4 89 f0 2e d4 2b a3 c8 b3 40 5c 7d f2 48 ed 67 79 cb ec d3 83 f8 42 e1 1c 49 99 fd e8 6d db ff f1 9f 59 ff 9d bf b4 56 e5 43 57 66 6b 3b f5 99 32 3b dd a8 da d8 5f 2d f0 1c b2 0d 57 66 7b 76 f4 89 da d9 8d Data Ascii: X \|VA?<7-Ki%\|U:bo.#fp eH@PK%^JWS.H67w$1"^zSO[S"<DD\+5+u\h#/tf#B.@YVe:A`]<.+@\}HgyBImYVCWfk;2;_-Wf{v
2024-09-27 06:29:11 UTC	1378	IN	Data Raw: 03 9e 7c b2 47 e5 e0 13 3e 3e 9e a8 7e e5 3e 59 f0 09 52 c6 14 f5 15 d0 18 8e 62 87 83 bf 6b ac 71 80 b0 ec 7e 98 29 b3 69 32 22 26 50 1f ce 6b 89 12 cf 1a 4a 65 b6 44 89 67 02 ab 9a e1 aa 41 e5 79 6b ae eb 06 c6 e5 74 3c 6c 00 7d 8c 74 8b b4 0b 20 69 90 ce 87 ce b8 00 90 a4 05 14 bd 58 ad 58 2f dc 64 cc 39 d1 5d 7a 08 3a e9 99 8b 9e b1 42 64 e2 3a f2 99 74 56 9a 86 b2 93 62 22 a1 c2 bf a3 e8 0a 66 28 20 44 11 c2 67 1c 00 05 32 7f c4 0f 07 08 31 28 cd d0 1a f4 51 66 59 29 95 42 97 fc 42 83 2d c8 ad 16 5b 8b e3 fd 59 67 48 58 16 c0 78 44 c0 75 57 e7 35 c0 ea d0 69 c8 35 29 b3 6c 5d ce e9 cb e1 66 d9 93 ed c3 96 9b 39 10 a8 d3 6d 11 9e 46 78 99 3d eb 5e 3f 91 e7 d9 21 c5 ed 74 23 9d c1 3b f7 ac 48 c5 27 55 66 65 1c 4c 3c 41 2c c7 17 7c 70 e5 2e 5c d7 f3 14 Data Ascii: \|G>>~>YRbkq~)i2"&PkJeDgAykt<l}t iXX/d9]z:Bd:tVb"f( Dg21(QfY)BB-[YgHXxDuW5i5)l]f9mFx=^?!t#;H'UfeL<A,\|p.\
2024-09-27 06:29:11 UTC	1378	IN	Data Raw: 0f bd 9a af ba 20 01 cd c5 90 55 65 17 8f 61 ef e9 f1 1b 42 64 f3 a8 58 0c eb c9 43 91 15 c7 4e 39 a5 c1 d3 e1 f1 3e 41 24 d6 72 ce 78 aa 51 66 f5 18 36 dc c8 c0 14 05 8c 80 18 0e 33 2b 47 b2 1b 49 f9 a4 8e f8 69 aa 54 58 d9 33 d1 c1 84 46 9e f0 58 c6 8c 86 c7 1e 57 2f cd 61 cf c6 87 9f 58 ff ce 2f ac ff f1 2f a4 04 bd 6f 93 ee 7d 9b 8c 3a 36 dd a8 db 46 eb 86 d5 77 5f b6 f6 ed 2f 58 fb e5 2f 59 f5 fa 2b 36 ad 6f 2a 6c ec 4a 08 de a1 b7 18 c7 93 01 f1 c8 78 7b 87 0d ea e8 ba b8 23 4f 73 19 cc b0 f4 b8 16 22 1b e5 b6 44 ff d4 a3 7b 5c 44 8e d7 cb 98 08 8b 91 e2 39 8c 97 1b 5e 20 e1 64 d4 d6 a4 cc 76 df fd 07 3b fa c1 ff 69 a3 3b 7f 67 ed ed 8e b5 6f aa df 69 ab 3e ab 0e 51 fc 59 99 75 3a a2 b1 21 2d 78 f8 a0 63 27 1f a8 7c b7 be 65 bb df fe 9f 6c e7 57 7e Data Ascii: UeaBdXCN9>A$rxQf63+GIiTX3FXW/aX//o}:6Fw_/X/Y+6o*lJx{#Os"D{\D9^ dv;i;goi>QYu:!-xc'\|elW~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49710	185.199.110.153	443	3808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:29:12 UTC	353	OUT	GET /fb2.png HTTP/1.1 Host: steephan2003.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:29:12 UTC	719	IN	HTTP/1.1 200 OK Connection: close Content-Length: 162994 Server: GitHub.com Content-Type: image/png permissions-policy: interest-cohort=() Last-Modified: Tue, 02 Jul 2024 10:28:14 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "6683d63e-27cb2" expires: Fri, 27 Sep 2024 06:39:11 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 561A:1EF659:353521:3BCAF5:66F650B1 Accept-Ranges: bytes Date: Fri, 27 Sep 2024 06:29:12 GMT Via: 1.1 varnish Age: 1 X-Served-By: cache-ewr-kewr1740030-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1727418552.378921,VS0,VE1 Vary: Accept-Encoding X-Fastly-Request-ID: 58a4b22ba23c8597a0d6e930bb2d39a47dfafdfb
2024-09-27 06:29:12 UTC	16384	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 b3 00 00 01 5f 08 06 00 00 00 9c 07 9b bf 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 ff a5 49 44 41 54 78 5e ec fd 09 97 6c c9 71 df 09 5a 64 ec b9 be b5 56 00 05 a0 40 00 24 40 70 01 d8 6c aa 5b 22 d9 94 d4 a3 d3 3d 33 67 7a ce e9 0f 33 d4 f4 f4 57 ea d3 67 7a 24 b5 24 8a 22 45 0a 14 37 2c c4 56 a8 2a a0 f6 7a f5 96 5c 63 5f e6 ff 33 73 8f b8 11 19 91 2f f3 bd cc b7 54 dd 7f a6 c7 bd d7 17 73 f3 dd cc dd af df ca 70 38 9e 9a e0 3f 25 ac 92 ae 45 5c 55 de 3c c9 b8 9e 37 5c 55 de 3c 6f 79 3e 9d 4c 6c 3a 9d ba 71 54 2a fa 57 2a b8 fa 73 fc ac 4a d7 45 f1 24 f3 c6 e3 22 5d 7e 89 f4 cd e2 92 Data Ascii: PNGIHDR_sRGBgAMAapHYsodIDATx^lqZdV@$@pl["=3gz3Wgz$$"E7,Vz\c_3s/Tsp8?%E\U<7\U<oy>Ll:qTW*sJE$"]~
2024-09-27 06:29:12 UTC	16384	IN	Data Raw: 34 df b5 c6 b5 d7 ac b9 fd ba 4d 86 bb d6 ef 0e d4 45 f4 ac 52 1d bb c2 cb 8a 6b 55 ed b1 d2 99 a8 5d 56 6d d2 bc 26 ff 2f 59 63 87 17 6c 5b a2 19 6d 92 13 90 3d b2 0b c0 f3 d6 19 9c 3f af 82 e7 bf 32 15 d6 29 27 9f dc aa c7 a1 51 94 c5 2c 5c 64 41 89 12 9f 2a 44 2b 89 bf 19 68 9b 6a c3 d9 78 dd 57 bb 9e aa cf c5 68 f8 b4 8d ba fa 28 8d b9 d5 9a da b0 cc 46 35 8c bf 36 90 ba 39 b0 40 b7 c4 63 a3 90 b5 25 4a 94 78 24 d0 27 c9 78 07 27 a1 d3 05 4f ae ea b9 b2 a0 16 ab 2f ab 15 59 ec 51 a4 f2 96 4e fc 3a 59 09 13 99 b6 3f 73 93 ee 9f 1b 64 fe b3 b9 30 94 6a 09 6c 28 5f f1 8e eb d8 bf d7 1a 9f d9 41 61 4a de 12 ce 2b 57 c5 10 35 0f 1c 79 5d b4 49 c0 4e 86 b8 fc 93 3e d3 91 06 2d 29 d1 0c 5c 0c 60 52 06 a4 d2 c9 63 52 e5 12 03 4e cf a9 85 f1 47 c7 9c 43 df 92 Data Ascii: 4MERkU]Vm&/Ycl[m=?2)'Q,\dA*D+hjxWh(F569@c%Jx$'x'O/YQN:Y?sd0jl(_AaJ+W5y]IN>-)\`RcRNGC
2024-09-27 06:29:12 UTC	16384	IN	Data Raw: c7 fd 79 81 5c 17 7d 05 3f a4 6d 64 a3 a3 7b d6 7b ef 07 76 f2 ee 7f b1 e9 f0 1d db ba 25 01 f6 f6 b6 55 b7 ea b3 0e 1f bf d5 8a 84 f2 0a 33 8d 47 36 3e 92 19 aa b3 dd ba e5 ab 25 92 f4 3c bf 3c 7d fa 61 d6 90 0e 95 ab a7 83 bf 74 75 7e dd ef f9 f9 3e 37 12 cd e8 5e 05 e2 74 bb 78 f6 d8 dd 8e a7 b9 5d 0c a8 ba d3 bf e7 0c 42 41 7e ce 59 90 69 f3 cc bd ae 6e 93 ec 7d ac 8e 5b c4 d1 e4 8f ff 64 99 e1 f4 fc c7 07 3e 78 c5 07 64 9c d7 25 ef fe 28 e2 93 51 d7 fa 0f 3e 50 39 fd c4 fa f7 df 95 5d df 2a aa 3b 71 c8 4d d5 c6 aa 57 d0 92 2e e3 e5 3c a2 ec f4 5f 91 0e 33 3c 92 52 f0 60 64 83 6e c3 c6 8d 1b 56 bf fe b2 d5 af bd 20 e5 82 19 62 85 97 ff a8 a7 08 e1 aa b3 29 4d 67 e1 54 ba 1e 03 b3 f2 ca 80 6f e8 c7 bf a0 27 cf 60 f9 54 c6 7a 3d c6 85 24 f2 cc 35 5c f3 Data Ascii: y\}?md{{v%U3G6>%<<}atu~>7^tx]BA~Yin}[d>xd%(Q>P9]*;qMW.<_3<R`dnV b)MgTo'`Tz=$5\
2024-09-27 06:29:12 UTC	16384	IN	Data Raw: 20 58 f6 7a 7d 37 80 81 89 6d 4a 08 96 be f2 93 98 f6 2c 23 bf 94 2a 1f 9e 64 cf ea a5 1f b0 a2 7b 66 86 eb ba d6 54 06 08 5f 0a 2a b7 b9 71 fb 0d 0d ba 15 cc 34 19 ec 65 14 36 4c 7a 96 9b 6f 9b e4 bd dd ae ca 5d f9 df 10 c1 cd 56 cd b6 5b 12 f6 74 dd 92 90 b7 d9 e0 54 48 56 75 c4 8b 22 99 f2 de 8e b8 43 0f 41 a1 f1 93 84 e5 8f d5 0e 5f 01 f3 77 0e 11 b4 99 cd 4e e5 a1 1f ee 48 67 5c c3 c4 ca ac fb f8 94 20 d7 c6 4f 53 9a a8 93 4a 19 ed 0e 89 8f ba 49 b9 7a 19 86 3b 70 77 d2 3f 6b 90 02 8f 34 62 77 f3 8b 6f c9 3b 3e ee 49 50 ec f9 b7 20 a5 1d 4a 10 dc b0 36 9f d7 68 c5 b7 22 e3 5d c6 aa 14 31 b6 f1 b1 ca 18 13 40 ac 08 b2 cd d5 4f d1 ed c5 29 ba d4 33 14 55 94 e0 86 c2 36 bd 1e a2 b8 aa 8e 4e 51 9a e5 4f 7d 09 88 9d 22 51 e3 bc e6 e9 39 ea 6a 08 88 1b 1c Data Ascii: Xz}7mJ,#d{fT_q4e6Lzo]V[tTHVu"CA_wNHg\ OSJIz;pw?k4bwo;>IP J6h"]1@O)3U6NQO}"Q9j
2024-09-27 06:29:12 UTC	16384	IN	Data Raw: c9 65 75 b3 00 00 ff f4 49 44 41 54 8c ce 3a 7e ea 03 e9 8a 20 ee bc 56 58 07 33 4e 7c e7 81 67 92 d4 bd a0 e0 5a fc 65 fa 40 c6 8f 51 0c 5f c6 50 26 5e bf c7 1f 3c ea 1c 64 bb 2c f2 72 09 2f 06 ac 9c 74 a5 e5 2e 61 09 4b 78 2c 98 33 cc 84 64 c0 a9 d0 d1 1b 98 bd 98 12 76 92 30 4c db 41 08 d1 73 0a 54 22 23 99 fa 13 03 71 64 7c 88 2b 9e 1c af fe c1 91 0d 28 fa 52 88 8f ba fd 38 96 31 db ed 4b 60 33 45 4f a8 6c 74 6a 71 6f 97 1d 52 3b c2 af 96 f1 54 e1 f2 6c c6 14 04 00 86 a9 d7 31 b9 f7 37 0d 4a 83 3c 63 a4 b1 b1 14 6b 65 3c 6d 4a 42 1a 61 81 4c a0 e7 96 51 c8 1c 55 75 00 07 43 f8 60 e4 62 70 15 e1 81 c0 4c 43 96 51 ed 91 9f 31 62 31 cc 10 88 44 88 cf 8c 21 f1 2c 50 d0 01 fc 1e ef fc 2d 7c 38 af 38 7e 02 54 69 15 c8 a0 55 c9 2d c4 43 fc f8 54 6e f5 84 20 Data Ascii: euIDAT:~ VX3N\|gZe@Q_P&^<d,r/t.aKx,3dv0LAsT"#qd\|+(R81K`3EOltjqoR;Tl17J<cke<mJBaLQUuC`bpLCQ1b1D!,P-\|88~TiU-CTn
2024-09-27 06:29:12 UTC	16384	IN	Data Raw: 1e 5a 55 f7 0b 90 65 9a 00 8d 16 51 4e ba 3b 9a 85 34 0a cc bf 5d 05 8b f1 de 16 10 65 a6 77 75 a2 d9 41 c1 28 0d f9 5f f5 ce c6 07 27 fd d8 3f ea 46 b7 3f 72 9d 25 92 35 29 bc ac 37 bc b3 bb 15 ed 76 dd ed 8c 4d a6 50 ee 1b 36 84 65 14 ab de 30 35 de a3 3f d0 71 85 8d cb f4 fc 44 f9 12 5e 04 57 1c e3 e3 fd 38 fe c9 5f c4 c1 0f ff 17 29 da 3f 8a 8d bb 32 52 3b 75 29 bf 52 ac 85 1f de b0 a3 f1 8f c2 37 19 4c a3 fb a1 14 eb f1 2b b1 f5 eb ff 87 d8 fd ce 1f c6 da ee 2b f2 95 46 37 34 79 12 cc 9e 04 20 09 cd 20 37 78 9a 64 1e 44 2b 76 d0 7d b0 df 8d 13 95 01 ca 3e d3 bc e1 61 18 59 3b 1e 85 6d 79 fa 25 eb 09 55 7a 8a 44 8d dd 56 fc a7 0b a5 de 2f 42 96 08 79 4d c3 c5 1d 75 ba a7 4e 50 d7 c8 7f f2 6c 46 fd 55 ce 2a 33 ae 1c 3b c6 e6 64 e6 3b 8a a2 51 6b a8 ee Data Ascii: ZUeQN;4]ewuA(_'?F?r%5)7vMP6e05?qD^W8_)?2R;u)R7L++F74y 7xdD+v}>aY;my%UzDV/ByMuNPlFU*3;d;Qk
2024-09-27 06:29:12 UTC	16384	IN	Data Raw: 34 ce d4 f8 a8 7d fc 7d 12 31 31 22 39 b2 e6 e4 78 18 47 5e 7b 3a b2 31 eb e3 92 d4 4e 68 3b 4c 61 de f0 34 46 36 4c a2 7c 4c 44 5d ab b2 72 d6 1e 9e 8e a1 0a 93 7e 73 24 0e a3 95 69 db 4c f1 66 2d bb 0d 90 2a 3e 76 9c f6 3b e1 87 52 be 22 5e c2 72 00 f0 f2 6e d1 4c f9 a7 bc a4 cc b3 d9 17 86 36 a3 ee 94 1d d3 a2 d3 90 ad d0 73 8c e5 e7 39 82 45 7c 40 f4 e2 73 05 54 1f 77 20 62 08 8c 54 67 44 3b 0c 1d 3a 51 a8 c3 a6 ab fc 70 c9 72 49 97 f1 2d 44 74 0e aa f2 bb 01 5c cf 73 ae 82 47 89 b7 ba 11 80 2f 06 4a 3a 9e 71 d9 a1 98 86 4b c6 9b 61 c4 ef 45 03 da 25 75 dd f4 d1 33 cb 05 18 8d a4 53 86 6f b4 4d 0c 36 36 87 43 0e 43 0a fc 66 1c 05 49 3f 5c 80 cb 79 28 e9 de 0c ae a2 81 de e9 cf 3c a7 2a b3 a4 6b ca cc f3 b0 e0 4f 79 27 32 3a dd 70 06 35 12 4c 43 66 61 Data Ascii: 4}}11"9xG^{:1Nh;La4F6L\|LD]r~s$iLf->v;R"^rnL6s9E\|@sTw bTgD;:QprI-Dt\sG/J:qKaE%u3SoM66CCfI?\y(<kOy'2:p5LCfa
2024-09-27 06:29:12 UTC	16384	IN	Data Raw: 70 ee fc 72 75 7d 0a 85 6e 95 31 ac d0 96 b4 57 ef 15 27 69 f1 e8 71 e5 10 96 b2 0a df 17 72 9e 46 6e 3c 5d 5a 65 02 05 98 f7 5d e5 81 e3 8f 8a 62 cf b7 c0 47 8d ab a3 f9 2f fe c5 bf fc 57 d5 7d 8d 1a 35 6e 38 b2 91 52 23 58 4d a3 81 91 9a c5 9a e1 56 5c f7 b6 03 9a 88 20 6e 8c 2e 20 09 4d 4c 36 33 ab c6 66 31 3a 89 f1 a7 3f 8d d1 c7 7f 19 f3 c9 af a2 b9 3d 8b ce 26 6b 1a d5 aa d1 c0 39 a8 b3 81 d1 b0 a1 e4 9e ce d4 a8 8d 75 d3 dc 8b fe bd 6f 44 f7 ce 7b 71 2a 61 db 0d a3 0c b1 70 bb 84 82 41 68 a0 a1 4f 41 9c 70 31 d9 b8 3a d9 55 fa 8b 59 76 5a 54 e1 a4 7d f5 fd 9f 32 67 fd ae 4c fa ad f1 fa b0 fa ee d4 d1 fc 40 65 bd 68 11 fc 10 e8 58 77 56 ea f3 8d 04 59 77 19 7f 76 30 b2 c4 a6 34 de e4 49 32 22 c2 31 82 63 6e 64 b2 0a d3 77 37 95 7e 35 de 10 b2 40 a1 Data Ascii: pru}n1W'iqrFn<]Ze]bG/W}5n8R#XMV\ n. ML63f1:?=&k9uoD{q*apAhOAp1:UYvZT}2gL@ehXwVYwv04I2"1cndw7~5@
2024-09-27 06:29:12 UTC	16384	IN	Data Raw: 60 b4 65 71 00 00 7c 96 49 44 41 54 c6 a7 21 d9 cd 0c a9 ab c6 64 4b c2 5a 5f 4a 6c 57 02 88 85 10 37 2e c9 d4 52 60 5c 31 c2 d7 01 62 5e 8e 8a ea 39 4d d5 50 a7 f5 59 a3 3f 2b 41 36 10 10 bb f2 bc 6e e4 0e 61 48 d9 83 17 43 17 8e 83 41 d0 23 7c a4 5f c7 81 5f fd 64 73 b2 32 fc 16 ca e4 53 c1 fa fd 2d 07 65 85 3f 0a 0c f7 26 0d 8d 5f 76 dc e4 bb e2 ce af 2a e4 0d fe 2c a0 55 ee 50 26 9b 6d 84 1e 94 1f bd d7 87 69 ea 3b 75 55 5e b7 37 39 c2 47 8a ac be df 81 84 30 04 b1 e3 81 14 12 8f 18 28 36 92 e0 cf 8a c0 24 41 99 00 b1 ac c0 37 5e c5 9f e0 2d f1 33 6a 80 80 58 76 32 f6 0b df ac 90 de 95 af c9 30 66 8f 7e 15 c7 3f ff 0f 71 f8 c3 ff 23 06 3f fb a3 58 3c f9 a1 14 ae 07 d1 db 1e 45 6f 7f 1e 9d 2d a6 ee 49 88 47 17 6b 6f 46 b3 b7 1b 0d 29 b3 a7 12 68 52 88 Data Ascii: `eq\|IDAT!dKZ_JlW7.R`\1b^9MPY?+A6naHCA#\|__ds2S-e?&_v*,UP&mi;uU^79G0(6$A7^-3jXv20f~?q#?X<Eo-IGkoF)hR
2024-09-27 06:29:12 UTC	15538	IN	Data Raw: c9 42 fe 76 c0 d5 6d 55 e1 56 49 87 0f 90 63 96 37 cc fd 82 ce 34 af 6b 5f 3a 62 7d 3c 6b f8 79 26 0c 5d 79 f6 ac b2 e3 18 fd ea 67 71 f8 57 ff 6b 8c 3e fb b7 d1 db 3d 8e cd 77 7b d1 64 1f 8f 25 32 7c 96 18 8d 0f 66 32 dd 68 f6 bf 1b 5b df fe c7 d1 ff e6 df 8f d6 ee 7b 92 07 24 b7 48 26 60 1a 89 b8 48 46 73 06 ce 80 af a4 83 d1 58 36 ad 62 97 65 36 d4 cc 8d f1 ec b0 c6 2b 46 ad cc d6 a8 71 43 e1 e9 b3 d2 d6 e0 f5 08 a0 b4 03 b0 72 46 6a 4e 1b 62 bc 1b 8b 58 30 ad f0 e8 41 2c 1e 7e 1c 73 09 c9 16 8e 8f 7f 11 31 fa b5 dc 1f 44 ab 3f 8f f6 76 33 9a bd 9c d2 04 4b 87 3b 33 45 31 19 87 54 5b a6 3c ce d4 20 0c a4 14 1e b2 cd 7d 2f 1a dd 0f a3 b9 ff 2d 09 c1 5f 93 42 fb 5e f4 ee be ef 73 df d8 64 e1 94 69 bc 55 e3 e0 b4 d0 68 11 6c b6 0a af 14 d9 f0 09 8a 8a 75 Data Ascii: BvmUVIc74k_:b}<ky&]ygqWk>=w{d%2\|f2h[{$H&`HFsX6be6+FqCrFjNbX0A,~s1D?v3K;3E1T[< }/-_B^sdiUhlu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49714	185.199.110.153	443	3808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:29:12 UTC	600	OUT	GET /favicon.ico HTTP/1.1 Host: steephan2003.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://steephan2003.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:29:12 UTC	733	IN	HTTP/1.1 404 Not Found Connection: close Content-Length: 9379 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "64d39a40-24a3" Content-Security-Policy: default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self' x-proxy-cache: MISS X-GitHub-Request-Id: 59FB:277281:353E87:3BD558:66F650B8 Accept-Ranges: bytes Age: 0 Date: Fri, 27 Sep 2024 06:29:12 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740038-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727418553.818304,VS0,VE31 Vary: Accept-Encoding X-Fastly-Request-ID: ba73af22291d0bede6a13a0188fbf21043179563
2024-09-27 06:29:12 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 53 65 63 75 72 69 74 79 2d 50 6f 6c 69 63 79 22 20 63 6f 6e 74 65 6e 74 3d 22 64 65 66 61 75 6c 74 2d 73 72 63 20 27 6e 6f 6e 65 27 3b 20 73 74 79 6c 65 2d 73 72 63 20 27 75 6e 73 61 66 65 2d 69 6e 6c 69 6e 65 27 3b 20 69 6d 67 2d 73 72 63 20 64 61 74 61 3a 3b 20 63 6f 6e 6e 65 63 74 2d 73 72 63 20 27 73 65 6c 66 27 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 50 Data Ascii: <!DOCTYPE html><html> <head> <meta http-equiv="Content-type" content="text/html; charset=utf-8"> <meta http-equiv="Content-Security-Policy" content="default-src 'none'; style-src 'unsafe-inline'; img-src data:; connect-src 'self'"> <title>P
2024-09-27 06:29:12 UTC	1378	IN	Data Raw: 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 20 32 29 2c 0a 20 20 20 20 20 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 31 39 32 64 70 69 29 2c 0a 20 20 20 20 20 20 6f 6e 6c 79 20 73 63 72 65 65 6e 20 61 6e 64 20 28 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 69 6e 2d 72 65 73 6f 6c 75 74 69 6f 6e 3a 20 32 64 70 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 2d 69 6d 67 2d 31 78 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 20 7d 0a 20 20 20 20 20 20 20 20 2e 6c 6f 67 6f 2d 69 6d 67 2d 32 78 20 7b 20 64 69 73 70 6c 61 79 3a 20 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 20 7d 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 23 73 75 Data Ascii: ice-pixel-ratio: 2), only screen and ( min-resolution: 192dpi), only screen and ( min-resolution: 2dppx) { .logo-img-1x { display: none; } .logo-img-2x { display: inline-block; } } #su
2024-09-27 06:29:12 UTC	1378	IN	Data Raw: 32 22 20 68 65 69 67 68 74 3d 22 33 32 22 20 74 69 74 6c 65 3d 22 22 20 61 6c 74 3d 22 22 20 73 72 63 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 43 41 41 41 41 41 67 43 41 59 41 41 41 42 7a 65 6e 72 30 41 41 41 41 47 58 52 46 57 48 52 54 62 32 5a 30 64 32 46 79 5a 51 42 42 5a 47 39 69 5a 53 42 4a 62 57 46 6e 5a 56 4a 6c 59 57 52 35 63 63 6c 6c 50 41 41 41 41 79 52 70 56 46 68 30 57 45 31 4d 4f 6d 4e 76 62 53 35 68 5a 47 39 69 5a 53 35 34 62 58 41 41 41 41 41 41 41 44 77 2f 65 48 42 68 59 32 74 6c 64 43 42 69 5a 57 64 70 62 6a 30 69 37 37 75 2f 49 69 42 70 5a 44 30 69 56 7a 56 4e 4d 45 31 77 51 32 56 6f 61 55 68 36 63 6d 56 54 65 6b 35 55 59 33 70 72 59 Data Ascii: 2" height="32" title="" alt="" src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAACAAAAAgCAYAAABzenr0AAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyRpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prY
2024-09-27 06:29:12 UTC	1378	IN	Data Raw: 2f 38 37 37 47 59 64 48 52 67 33 5a 6a 4d 58 46 78 65 70 51 4b 4e 53 36 73 4c 43 77 4a 78 71 4e 4e 75 46 70 69 4d 66 6a 56 73 34 5a 6a 55 61 2f 70 6d 6d 6a 65 44 36 56 6c 4a 53 38 4e 70 76 4e 54 34 51 51 37 6d 78 77 6a 53 73 4a 69 45 51 69 6d 2f 31 2b 2f 39 6c 67 4d 48 67 49 72 35 6f 68 75 78 47 31 57 43 77 39 56 71 76 31 63 6c 46 52 30 64 43 71 42 4f 44 45 6c 56 36 76 39 30 6f 67 45 44 6a 47 64 59 62 56 6a 58 68 70 61 65 6e 64 69 6f 71 4b 30 37 43 49 52 37 5a 41 71 45 34 39 50 54 30 39 42 50 4c 32 50 4d 67 54 42 79 51 47 73 59 69 5a 6c 51 44 34 75 4d 58 74 64 72 2b 4a 78 57 49 4e 68 67 49 4e 59 68 47 54 32 4d 73 4b 67 4d 72 6d 32 64 6e 5a 58 67 52 58 68 61 48 41 67 35 6a 45 4a 6f 64 55 41 48 78 75 78 34 4c 75 64 48 4a 45 39 52 64 45 64 41 2b 69 33 4a 75 Data Ascii: /877GYdHRg3ZjMXFxepQKNS6sLCwJxqNNuFpiMfjVs4ZjUa/pmmjeD6VlJS8NpvNT4QQ7mxwjSsJiEQim/1+/9lgMHgIr5ohuxG1WCw9Vqv1clFR0dCqBODElV6v90ogEDjGdYbVjXhpaendioqK07CIR7ZAqE49PT09BPL2PMgTByQGsYiZlQD4uMXtdr+JxWINhgINYhGT2MsKgMrm2dnZXgRXhaHAg5jEJodUAHxux4LudHJE9RdEdA+i3Ju
2024-09-27 06:29:12 UTC	1378	IN	Data Raw: 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 45 41 41 41 41 42 41 43 41 59 41 41 41 43 71 61 58 48 65 41 41 41 41 47 58 52 46 57 48 52 54 62 32 5a 30 64 32 46 79 5a 51 42 42 5a 47 39 69 5a 53 42 4a 62 57 46 6e 5a 56 4a 6c 59 57 52 35 63 63 6c 6c 50 41 41 41 41 79 52 70 56 46 68 30 57 45 31 4d 4f 6d 4e 76 62 53 35 68 5a 47 39 69 5a 53 35 34 62 58 41 41 41 41 41 41 41 44 77 2f 65 48 42 68 59 32 74 6c 64 43 42 69 5a 57 64 70 62 6a 30 69 37 37 75 2f 49 69 42 70 5a 44 30 69 56 7a 56 4e 4d 45 31 77 51 32 56 6f 61 55 68 36 63 6d 56 54 65 6b 35 55 59 33 70 72 59 7a 6c 6b 49 6a 38 2b 49 44 78 34 4f 6e 68 74 63 47 31 6c 64 47 45 67 65 47 31 73 62 6e 4d 36 65 44 30 69 59 57 52 76 59 6d 55 36 62 6e 4d 36 62 57 56 30 59 53 38 69 49 48 67 36 65 47 31 Data Ascii: Rw0KGgoAAAANSUhEUgAAAEAAAABACAYAAACqaXHeAAAAGXRFWHRTb2Z0d2FyZQBBZG9iZSBJbWFnZVJlYWR5ccllPAAAAyRpVFh0WE1MOmNvbS5hZG9iZS54bXAAAAAAADw/eHBhY2tldCBiZWdpbj0i77u/IiBpZD0iVzVNME1wQ2VoaUh6cmVTek5UY3prYzlkIj8+IDx4OnhtcG1ldGEgeG1sbnM6eD0iYWRvYmU6bnM6bWV0YS8iIHg6eG1
2024-09-27 06:29:12 UTC	1378	IN	Data Raw: 62 74 34 6d 65 73 56 6d 73 57 64 31 71 53 70 48 68 64 58 64 32 66 75 50 2f 41 66 63 70 75 74 35 2f 41 38 38 78 77 79 6d 63 64 42 67 4c 71 65 6e 70 36 46 75 52 79 75 57 56 34 7a 75 2f 76 37 35 39 51 79 57 42 6a 78 6f 7a 35 74 37 36 2b 2f 67 75 6e 30 39 6d 4b 35 78 46 79 61 6b 6f 43 41 50 53 61 54 43 61 7a 4e 70 76 4e 50 6f 59 56 62 68 36 4f 31 59 4b 47 52 46 30 75 31 33 73 4e 44 51 32 37 51 4d 7a 66 70 69 41 41 4b 6a 30 6c 6e 55 36 2f 67 42 56 66 41 5a 57 32 57 57 70 77 77 56 7a 79 30 49 67 50 33 47 37 33 46 70 6a 49 36 52 45 68 41 47 41 39 71 56 52 71 41 31 62 39 6d 56 6f 42 56 79 49 43 32 74 44 69 38 58 67 32 34 2b 64 55 7a 51 69 41 62 53 2f 73 37 4f 78 38 47 32 6f 2f 33 6d 4b 43 43 2b 5a 77 30 65 66 7a 50 51 45 66 63 56 6a 59 72 41 52 58 33 64 62 56 31 Data Ascii: bt4mesVmsWd1qSpHhdXd2fuP/Afcput5/A88xwymcdBgLqenp6FuRyuWV4zu/v759QyWBjxoz5t76+/gun09mK5xFyakoCAPSaTCazNpvNPoYVbh6O1YKGRF0u13sNDQ27QMzfpiAAKj0lnU6/gBVfAZW2WWpwwVzy0IgP3G73FpjI6REhAGA9qVRqA1b9mVoBVyIC2tDi8Xg24+dUzQiAbS/s7Ox8G2o/3mKCC+Zw0efzPQEfcVjYrARX3dbV1
2024-09-27 06:29:12 UTC	1111	IN	Data Raw: 50 41 4b 48 4c 45 37 52 64 77 75 59 4a 5a 6d 4e 77 7a 79 43 4d 6b 42 43 59 79 4b 52 4f 4a 42 4d 4a 6c 39 42 2f 50 58 58 43 6a 6a 6d 43 6d 44 4f 56 7a 48 33 66 69 50 70 4f 62 45 57 47 71 6f 4b 65 34 45 42 6c 38 76 31 68 6c 71 73 64 4c 76 64 32 33 6d 6b 78 48 4d 39 70 63 39 6b 4d 70 6d 6e 6f 39 48 6f 65 54 69 69 37 65 77 62 48 45 5a 50 50 78 31 7a 74 4c 53 31 74 56 33 41 6e 47 75 4d 6a 69 4e 6a 76 62 51 46 75 48 77 36 7a 44 6f 35 42 79 37 64 54 50 41 51 4e 42 67 4d 4c 72 52 61 72 54 6b 53 6c 73 31 6d 6e 77 54 37 75 77 70 39 76 69 72 78 39 51 7a 62 57 2f 48 75 56 2f 6a 35 64 2f 62 2b 36 6a 6e 69 4b 6c 6c 6c 50 38 6c 6b 65 4f 4e 4a 44 6b 2b 64 71 39 47 73 51 54 6e 43 34 66 42 31 68 65 4f 30 4b 34 37 48 77 65 37 57 64 44 72 39 6e 41 4b 67 58 77 4f 42 77 48 49 Data Ascii: PAKHLE7RdwuYJZmNwzyCMkBCYyKROJBMJl9B/PXXCjjmCmDOVzH3fiPpObEWGqoKe4EBl8v1hlqsdLvd23mkxHM9pc9kMpmno9HoeTii7ewbHEZPPx1ztLS1tV3AnGuMjiNjvbQFuHw6zDo5By7dTPAQNBgMLrRarTkSls1mnwT7uwp9virx9QzbW/HuV/j5d/b+6jniKlllP8lkeONJDk+dq9GsQTnC4fB1heO0K47Hwe7WdDr9nAKgXwOBwHI

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49717	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:29:16 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 06:29:16 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=37018 Date: Fri, 27 Sep 2024 06:29:16 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49718	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:29:17 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 06:29:18 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=36963 Date: Fri, 27 Sep 2024 06:29:17 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 06:29:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	50425	185.199.110.153	443	3808	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 06:29:21 UTC	655	OUT	GET /index.html HTTP/1.1 Host: steephan2003.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 06:29:22 UTC	732	IN	HTTP/1.1 200 OK Connection: close Content-Length: 9943 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Tue, 02 Jul 2024 10:28:14 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "6683d63e-26d7" expires: Fri, 27 Sep 2024 06:39:22 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 30FA:B4E6B:44E9EB:4DE41C:66F650C1 Accept-Ranges: bytes Age: 0 Date: Fri, 27 Sep 2024 06:29:22 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890026-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727418562.044895,VS0,VE20 Vary: Accept-Encoding X-Fastly-Request-ID: fbf928b213b86952479437815a4f7bdc80ef2a7e
2024-09-27 06:29:22 UTC	1378	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 46 61 63 65 62 6f 6f 6b 2d 6c 6f 67 20 69 6e 20 6f 72 20 73 69 67 6e 20 75 70 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 73 74 79 6c 65 2e 63 73 73 22 20 74 79 70 65 3d 22 74 65 78 74 2f 63 73 73 22 3e 0d Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Facebook-log in or sign up</title> <link rel="stylesheet" href="style.css" type="text/css">
2024-09-27 06:29:22 UTC	1378	IN	Data Raw: 2f 61 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 64 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 61 62 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 66 6f 72 6d 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 62 6f 64 79 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6d 67 73 69 64 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 63 6c 61 73 73 3d 22 70 61 72 61 22 3e 46 61 63 65 62 Data Ascii: /a> </td> </tr> </table> </form> </div> </div> <div class="main-body"> <div class="imgside"> <p class="para">Faceb
2024-09-27 06:29:22 UTC	1378	IN	Data Raw: 6c 64 65 72 3d 22 43 6f 6e 66 69 72 6d 20 50 61 73 73 77 6f 72 64 22 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 30 70 78 3b 77 69 64 74 68 3a 20 34 31 36 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 30 70 78 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 74 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 72 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 73 74 79 6c 65 3d 22 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 63 6f 6c 6f 72 3a 23 35 38 35 38 35 38 3b 22 3e 47 65 6e 64 65 72 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: lder="Confirm Password" style="margin-top: 10px;width: 416px;margin-bottom: 10px;"> </tr> <br> <label style="font-size: 20px;color:#585858;">Gender</label>
2024-09-27 06:29:22 UTC	1378	IN	Data Raw: 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 37 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 38 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 39 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 31 30 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 31 31 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: n> <option>7</option> <option>8</option> <option>9</option> <option>10</option> <option>11</option>
2024-09-27 06:29:22 UTC	1378	IN	Data Raw: 2d 6c 65 66 74 2d 77 69 64 74 68 3a 20 32 70 78 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 20 61 6c 69 63 65 62 6c 75 65 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 3e 4d 6f 6e 74 68 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 4a 61 6e 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 3e 46 65 62 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e Data Ascii: -left-width: 2px;border-color: aliceblue;"> <option style="display: none;">Month</option> <option>Jan</option> <option>Feb</option> <option
2024-09-27 06:29:22 UTC	1378	IN	Data Raw: 69 67 6e 22 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 76 61 6c 75 65 3d 22 53 69 67 6e 20 55 70 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 32 35 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 63 6f 6c 6f 72 3a 20 72 67 62 28 39 34 2c 20 39 32 2c 20 39 32 29 3b 3b 22 3e 3c 61 20 73 74 79 6c 65 3d 22 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 23 33 62 35 39 39 38 3b 22 20 68 72 65 66 3d 22 69 6e 64 65 78 2e 68 74 6d 6c 22 3e 43 72 65 61 74 65 20 61 20 50 61 67 65 3c 2f 61 3e 20 66 6f 72 20 61 20 63 65 6c 65 62 72 69 74 79 2c 20 62 61 6e 64 20 6f Data Ascii: ign" type="submit" value="Sign Up"> <p style="margin-top: 25px;font-size: 14px;font-weight: bold;color: rgb(94, 92, 92);;"><a style="text-decoration: none;color:#3b5998;" href="index.html">Create a Page</a> for a celebrity, band o
2024-09-27 06:29:22 UTC	1378	IN	Data Raw: 6c 69 20 63 6c 61 73 73 3d 22 70 72 22 3e 56 69 64 65 6f 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 70 72 22 3e 50 6c 61 63 65 73 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 70 72 22 3e 47 61 6d 65 73 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 70 72 22 3e 4d 61 72 6b 65 74 70 6c 61 63 65 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 70 72 22 3e 4d 65 74 61 20 50 61 79 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 63 6c 61 73 73 3d 22 70 72 22 3e 4d 65 74 61 20 51 75 65 73 74 3c 2f 6c 69 3e 0d Data Ascii: li class="pr">Video</li> <li class="pr">Places</li> <li class="pr">Games</li> <li class="pr">Marketplace</li> <li class="pr">Meta Pay</li> <li class="pr">Meta Quest</li>
2024-09-27 06:29:22 UTC	297	IN	Data Raw: 61 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 37 33 37 33 37 33 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 69 6e 68 65 72 69 74 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 32 35 70 78 3b 22 3e 4d 65 74 61 40 32 30 32 34 3c 2f 6c 69 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 Data Ascii: a"> <li style="color: #737373; list-style-type: none; margin-right: 20px; font-family: inherit; font-size: 14px;padding-top: 25px;">Meta@2024</li> </div>

Target ID:	2
Start time:	02:29:03
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	4
Start time:	02:29:05
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=2008,i,11914359049453020221,13615553556127594117,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	6
Start time:	02:29:08
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://steephan2003.github.io/"
Imagebase:	0x7ff6c4390000
File size:	3'242'272 bytes
MD5 hash:	5BBFA6CBDF4C254EB368D534F9E23C92
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: http://steephan2003.github.io/	Avira URL Cloud: detection malicious, Label: phishing
Source: http://steephan2003.github.io/	SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Source: https://steephan2003.github.io/style.css	Avira URL Cloud: Label: phishing
Source: https://steephan2003.github.io/fb2.png	Avira URL Cloud: Label: phishing
Source: https://steephan2003.github.io/favicon.ico	Avira URL Cloud: Label: phishing

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

Source: https://steephan2003.github.io/	Matcher: Template: facebook matched
Source: https://steephan2003.github.io/index.html	Matcher: Template: facebook matched

Source: global traffic	TCP traffic: 192.168.2.7:50430 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.7:50532 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.7:50424 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 104.98.116.138
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.50.201.200
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: steephan2003.github.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /style.css HTTP/1.1Host: steephan2003.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://steephan2003.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fb2.png HTTP/1.1Host: steephan2003.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steephan2003.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fb2.png HTTP/1.1Host: steephan2003.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: steephan2003.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://steephan2003.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: steephan2003.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: steephan2003.github.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: steephan2003.github.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://steephan2003.github.io/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 568, Parent PID: 6084

General

Chronological Activities

Analysis Process: chrome.exePID: 3808, Parent PID: 568

Windows Analysis Report
http://steephan2003.github.io/