Edit tour

Windows Analysis Report
https://uniboardarchive.pages.dev/

Overview

General Information

Sample URL:	https://uniboardarchive.pages.dev/
Analysis ID:	1520817
Infos:

Detection

HTMLPhisher

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected BlockedWebSite

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5544 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4900 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1988,i,13090722843338949686,5158679142210428948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6348 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://uniboardarchive.pages.dev/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_44	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security
0.1.pages.csv	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected BlockedWebSite

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_44, type: DROPPED

Source: https://uniboardarchive.pages.dev/	HTTP Parser: No favicon
Source: https://uniboardarchive.pages.dev/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: uniboardarchive.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/styles/cf.errors.css HTTP/1.1Host: uniboardarchive.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://uniboardarchive.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: uniboardarchive.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uniboardarchive.pages.dev/cdn-cgi/styles/cf.errors.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: uniboardarchive.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://uniboardarchive.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: uniboardarchive.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: uniboardarchive.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com

Source: chromecache_47.1.dr, chromecache_49.1.dr	String found in binary or memory: "https://www.linkedin.com/company/zenith-chain"><i class= equals www.linkedin.com (Linkedin)
Source: chromecache_47.1.dr, chromecache_49.1.dr	String found in binary or memory: <a href="https://www.facebook.com/zenithchain/"><i class= equals www.facebook.com (Facebook)
Source: chromecache_47.1.dr, chromecache_49.1.dr	String found in binary or memory: "https://www.linkedin.com/company/zenith-chain"><i class= equals www.linkedin.com (Linkedin)
Source: chromecache_47.1.dr, chromecache_49.1.dr	String found in binary or memory: <a href="https://www.facebook.com/zenithchain/"><i class= equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: uniboardarchive.pages.dev
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_47.1.dr, chromecache_49.1.dr	String found in binary or memory: http://www.fuzionx.io
Source: chromecache_47.1.dr, chromecache_49.1.dr	String found in binary or memory: https://blog.zenithchain.co
Source: chromecache_49.1.dr	String found in binary or memory: https://blog.zenithchain.co/
Source: chromecache_47.1.dr, chromecache_49.1.dr	String found in binary or memory: https://docs.zenithchain.co
Source: chromecache_47.1.dr, chromecache_49.1.dr	String found in binary or memory: https://docs.zenithchain.co/getting-started/how-to-get-zenith
Source: chromecache_49.1.dr	String found in binary or memory: https://github.com/Zenith-Chain/
Source: chromecache_49.1.dr	String found in binary or memory: https://t.me/zenithchainenglish
Source: chromecache_49.1.dr	String found in binary or memory: https://twitter.com/zenithchain_co
Source: chromecache_44.1.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_44.1.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/
Source: chromecache_47.1.dr, chromecache_49.1.dr	String found in binary or memory: https://www.fuzionx.io
Source: chromecache_49.1.dr	String found in binary or memory: https://www.linkedin.com/company/zenith-chain
Source: chromecache_49.1.dr	String found in binary or memory: https://www.reddit.com/r/zenithchain_co/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@16/10@6/6

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1988,i,13090722843338949686,5158679142210428948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://uniboardarchive.pages.dev/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1988,i,13090722843338949686,5158679142210428948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
www.google.com	172.217.16.132	true	false	unknown
uniboardarchive.pages.dev	188.114.96.3	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://uniboardarchive.pages.dev/cdn-cgi/images/icon-exclamation.png?1376755637	false	unknown
https://uniboardarchive.pages.dev/cdn-cgi/styles/cf.errors.css	false	unknown
https://uniboardarchive.pages.dev/	false	unknown
https://uniboardarchive.pages.dev/favicon.ico	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://www.cloudflare.com/learning/access-management/phishing-attack/	chromecache_44.1.dr	false	unknown
https://www.fuzionx.io	chromecache_47.1.dr, chromecache_49.1.dr	false	unknown
https://docs.zenithchain.co/getting-started/how-to-get-zenith	chromecache_47.1.dr, chromecache_49.1.dr	false	unknown
https://www.linkedin.com/company/zenith-chain	chromecache_49.1.dr	false	unknown
https://blog.zenithchain.co	chromecache_47.1.dr, chromecache_49.1.dr	false	unknown
https://github.com/Zenith-Chain/	chromecache_49.1.dr	false	unknown
https://www.reddit.com/r/zenithchain_co/	chromecache_49.1.dr	false	unknown
http://www.fuzionx.io	chromecache_47.1.dr, chromecache_49.1.dr	false	unknown
https://docs.zenithchain.co	chromecache_47.1.dr, chromecache_49.1.dr	false	unknown
https://t.me/zenithchainenglish	chromecache_49.1.dr	false	unknown
https://blog.zenithchain.co/	chromecache_49.1.dr	false	unknown
https://www.cloudflare.com/5xx-error-landing	chromecache_44.1.dr	false	unknown
https://twitter.com/zenithchain_co	chromecache_49.1.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	unknown	European Union	13335	CLOUDFLARENETUS	false
188.114.96.3	uniboardarchive.pages.dev	European Union	13335	CLOUDFLARENETUS	false
172.217.16.132	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1520817
Start date and time:	2024-09-28 00:12:10 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://uniboardarchive.pages.dev/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@16/10@6/6
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 142.250.185.78, 173.194.76.84, 34.104.35.123, 20.12.23.50, 93.184.221.240, 40.69.42.241, 192.229.221.95, 20.3.187.198, 216.58.206.67
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://uniboardarchive.pages.dev/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://uniboardarchive.pages.dev/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://uniboardarchive.pages.dev/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 44

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (394)
Category:	downloaded
Size (bytes):	4394
Entropy (8bit):	5.0747247892781555
Encrypted:	false
SSDEEP:	96:1j9jwIjYjUDK/D5DMF+BOisbA2ZLimsSrR49PaQxJbGD:1j9jhjYjIK/Vo+tsFZOmsSrO9ieJGD
MD5:	7CE8E087BEDF6FF15530E3B6061AFEBB
SHA1:	ECDA97F3BA0A2D3225B2A364AF066195E69B7709
SHA-256:	5398C4688167E2A90D75CD02912BCB53BC26CA8B72680FCBB47C150FABEFD6DD
SHA-512:	D8F4156F563F5964C8D1A419B7D1825C21FF0BA155E3E46B8F3A9994FD592EE83B6438B757859BD3A97FA3EC01FE7B78FD682E67BFF4C62826161AB9E18117DC
Malicious:	false
Reputation:	low
URL:	https://uniboardarchive.pages.dev/
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Suspected phishing site \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded

Chrome Cache Entry: 45

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24050)
Category:	downloaded
Size (bytes):	24051
Entropy (8bit):	4.941039417164537
Encrypted:	false
SSDEEP:	192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk
MD5:	5E8C69A459A691B5D1B9BE442332C87D
SHA1:	F24DD1AD7C9080575D92A9A9A2C42620725EF836
SHA-256:	84E3C77025ACE5AF143972B4A40FC834DCDFD4E449D4B36A57E62326F16B3091
SHA-512:	6DB74B262D717916DE0B0B600EEAD2CC6A10E52A9E26D701FAE761FCBC931F35F251553669A92BE3B524F380F32E62AC6AD572BEA23C78965228CE9EFB92ED42
Malicious:	false
Reputation:	low
URL:	https://uniboardarchive.pages.dev/cdn-cgi/styles/cf.errors.css
Preview:	#cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapper del,#cf-wrapper details,#cf-wrapper dfn,#cf-wrapper div,#cf-wrapper dl,#cf-wrapper dt,#cf-wrapper em,#cf-wrapper embed,#cf-wrapper fieldset,#cf-wrapper figcaption,#cf-wrapper figure,#cf-wrapper footer,#cf-wrapper form,#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3,#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper header,#cf-wrapper hgroup,#cf-wrapper html,#cf-wrapper i,#cf-wrapper iframe,#cf-wrapper img,#cf-wrapper label,#cf-wrapper legend,#cf-wrapper li,#cf-wrapper mark,#cf-wrapper menu,#cf-wrapper nav,#cf-wrapper object,#cf-wrapper ol,#cf-wrapper output,#cf-wrapper p,#cf-wrapper pre,#cf-wrapper s,#cf-wrapper samp,#cf-wrapper section,#cf-wrapper small,#cf-wrapper span,#cf-wrapper strike,#cf-wrapper strong,#cf-wrapper sub,#cf-w

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	dropped
Size (bytes):	45968
Entropy (8bit):	4.303289623543889
Encrypted:	false
SSDEEP:	768:nHmxPBQYAe+vi+pmfyKLhPOaVTKoeO9Nvlx:MPBQYAe+lpmfd/9Ndx
MD5:	BCB8F72B33189FB9280F2B8E68E5820D
SHA1:	EEE4F86A29D2667D6A990C7D473BFF7F3ED91B55
SHA-256:	B55940CD3D690E0338C281C9DD84E46F1B13080D965011F2053A15BFDCCB217E
SHA-512:	76470AFF93EA2BBA3096867532380E7B90715C6CBB8BFE0176AFC800EB85A52F0C26EB2058B69828150B2301746AAD019862BBAEE8E1D1AAAF9AA60DF3C829C6
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html>.<html lang="en">..<head>...<script src=..."chrome-extension://jnlgamecbpmbajjfhmmmlhejkemejdma/static/js/inpage.js">...</script>...<meta charset="utf-8">...<link href="favicon.ico" rel="icon">...<meta name="viewport" content="width=device-width, initial-scale=1.0"/>....<script charset="UTF-8" type="text/javascript" src="./f65ab454-103a-41b4-91f5-10bb485acfa2.js"></script>.....<meta content="#000000" name="theme-color">...<meta content="Web site created using create-react-app" name="description">...<link href="logo192.png" rel="apple-touch-icon">...<link rel="stylesheet" href="./bootstrap.min.css">....<link data-n-g="" href="css/XxJ7UNiHeJk1.css" rel="stylesheet">...<link data-n-p="" href="css/oznEtbCQZB4d.css" rel="stylesheet">...<title>....Multichain...</title>...<link href="./static/css/main.63593c73.css" rel="stylesheet">......</head>..<body>...<div id="root">....<div>.....<div id="__next">......<div class="Layout_layout__M40r_">.......<div>........<header class="hea

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
Reputation:	low
URL:	https://uniboardarchive.pages.dev/cdn-cgi/images/icon-exclamation.png?1376755637
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text
Category:	downloaded
Size (bytes):	45968
Entropy (8bit):	4.303289623543889
Encrypted:	false
SSDEEP:	768:nHmxPBQYAe+vi+pmfyKLhPOaVTKoeO9Nvlx:MPBQYAe+lpmfd/9Ndx
MD5:	BCB8F72B33189FB9280F2B8E68E5820D
SHA1:	EEE4F86A29D2667D6A990C7D473BFF7F3ED91B55
SHA-256:	B55940CD3D690E0338C281C9DD84E46F1B13080D965011F2053A15BFDCCB217E
SHA-512:	76470AFF93EA2BBA3096867532380E7B90715C6CBB8BFE0176AFC800EB85A52F0C26EB2058B69828150B2301746AAD019862BBAEE8E1D1AAAF9AA60DF3C829C6
Malicious:	false
Reputation:	low
URL:	https://uniboardarchive.pages.dev/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">..<head>...<script src=..."chrome-extension://jnlgamecbpmbajjfhmmmlhejkemejdma/static/js/inpage.js">...</script>...<meta charset="utf-8">...<link href="favicon.ico" rel="icon">...<meta name="viewport" content="width=device-width, initial-scale=1.0"/>....<script charset="UTF-8" type="text/javascript" src="./f65ab454-103a-41b4-91f5-10bb485acfa2.js"></script>.....<meta content="#000000" name="theme-color">...<meta content="Web site created using create-react-app" name="description">...<link href="logo192.png" rel="apple-touch-icon">...<link rel="stylesheet" href="./bootstrap.min.css">....<link data-n-g="" href="css/XxJ7UNiHeJk1.css" rel="stylesheet">...<link data-n-p="" href="css/oznEtbCQZB4d.css" rel="stylesheet">...<title>....Multichain...</title>...<link href="./static/css/main.63593c73.css" rel="stylesheet">......</head>..<body>...<div id="root">....<div>.....<div id="__next">......<div class="Layout_layout__M40r_">.......<div>........<header class="hea

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 28, 2024 00:13:05.392288923 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 28, 2024 00:13:08.564321995 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:08.564410925 CEST	443	49735	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:08.564488888 CEST	49736	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:08.564526081 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:08.564546108 CEST	443	49736	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:08.565067053 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:08.565087080 CEST	443	49735	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:08.565290928 CEST	49736	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:08.565365076 CEST	49736	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:08.565376043 CEST	443	49736	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.029031038 CEST	443	49735	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.029407978 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.029437065 CEST	443	49735	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.033596992 CEST	443	49735	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.033726931 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.035064936 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.035095930 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.035172939 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.035305023 CEST	443	49735	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.035372972 CEST	49735	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.035626888 CEST	49737	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.035670042 CEST	443	49737	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.035729885 CEST	49737	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.035952091 CEST	49737	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.035963058 CEST	443	49737	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.039280891 CEST	443	49736	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.039889097 CEST	49736	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.039901018 CEST	443	49736	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.041363001 CEST	443	49736	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.041452885 CEST	49736	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.041850090 CEST	49736	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.041850090 CEST	49736	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.041908979 CEST	49736	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.041944981 CEST	443	49736	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.042017937 CEST	49736	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.042294025 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.042309999 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.042376041 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.042574883 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.042587042 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.513181925 CEST	443	49737	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.513883114 CEST	49737	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.513911963 CEST	443	49737	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.514990091 CEST	443	49737	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.515064955 CEST	49737	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.519795895 CEST	49737	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.519866943 CEST	443	49737	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.519989967 CEST	49737	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.520003080 CEST	443	49737	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.523765087 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.524195910 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.524207115 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.526863098 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.526923895 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.527692080 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.527827024 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.565268993 CEST	49737	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.574672937 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.574686050 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.626651049 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.627403021 CEST	443	49737	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.627450943 CEST	443	49737	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.627485037 CEST	443	49737	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.627495050 CEST	49737	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.627507925 CEST	443	49737	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.627551079 CEST	49737	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.627557039 CEST	443	49737	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.629112959 CEST	443	49737	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.629184008 CEST	49737	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.676203012 CEST	49737	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.676228046 CEST	443	49737	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:09.727721930 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:09.771403074 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.094211102 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.094275951 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.094315052 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.094372034 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.094376087 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.094399929 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.094412088 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.094438076 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.094475985 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.094497919 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.094504118 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.094537020 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.094571114 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.094579935 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.094593048 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.094609022 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.101620913 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.101663113 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.101670027 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.101679087 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.101727962 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.102556944 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.102643013 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.102715015 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.102757931 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.102761984 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.102772951 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.102793932 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.102855921 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.102900982 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.104643106 CEST	49738	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.104657888 CEST	443	49738	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.210725069 CEST	49741	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.210774899 CEST	443	49741	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.210899115 CEST	49741	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.211317062 CEST	49741	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.211332083 CEST	443	49741	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.676006079 CEST	443	49741	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.676294088 CEST	49741	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.676366091 CEST	443	49741	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.679915905 CEST	443	49741	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.680002928 CEST	49741	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.680433989 CEST	49741	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.680470943 CEST	49741	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.680566072 CEST	49741	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.680619955 CEST	443	49741	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.680697918 CEST	49741	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.680947065 CEST	49742	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.681009054 CEST	443	49742	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.681096077 CEST	49742	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.681308985 CEST	49742	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:10.681337118 CEST	443	49742	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:10.903079987 CEST	49744	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:13:10.903129101 CEST	443	49744	172.217.16.132	192.168.2.4
Sep 28, 2024 00:13:10.903227091 CEST	49744	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:13:10.903479099 CEST	49744	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:13:10.903491974 CEST	443	49744	172.217.16.132	192.168.2.4
Sep 28, 2024 00:13:11.156660080 CEST	443	49742	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.198378086 CEST	49742	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.281702995 CEST	49742	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.281729937 CEST	443	49742	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.282434940 CEST	443	49742	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.310726881 CEST	49742	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.310836077 CEST	443	49742	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.327553988 CEST	49742	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.371393919 CEST	443	49742	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.425584078 CEST	443	49742	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.425666094 CEST	443	49742	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.425820112 CEST	49742	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.429828882 CEST	49742	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.429848909 CEST	443	49742	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.447294950 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.447348118 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.447432041 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.447949886 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.447964907 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.523618937 CEST	49746	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:11.523658991 CEST	443	49746	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:11.523842096 CEST	49746	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:11.524444103 CEST	49746	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:11.524456024 CEST	443	49746	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:11.561140060 CEST	443	49744	172.217.16.132	192.168.2.4
Sep 28, 2024 00:13:11.561943054 CEST	49744	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:13:11.561963081 CEST	443	49744	172.217.16.132	192.168.2.4
Sep 28, 2024 00:13:11.563127041 CEST	443	49744	172.217.16.132	192.168.2.4
Sep 28, 2024 00:13:11.563188076 CEST	49744	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:13:11.567159891 CEST	49744	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:13:11.567239046 CEST	443	49744	172.217.16.132	192.168.2.4
Sep 28, 2024 00:13:11.612535954 CEST	49744	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:13:11.612597942 CEST	443	49744	172.217.16.132	192.168.2.4
Sep 28, 2024 00:13:11.657391071 CEST	49744	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:13:11.916671991 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.917315960 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.917351961 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.921096087 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.921164989 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.922249079 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.922342062 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.922435999 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.922483921 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.922501087 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.922506094 CEST	443	49745	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.922549963 CEST	49745	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.923218012 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.923269033 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.923326969 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.923605919 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:11.923624992 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:11.990225077 CEST	443	49746	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:11.991233110 CEST	49746	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:11.991281986 CEST	443	49746	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:11.992353916 CEST	443	49746	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:11.992439032 CEST	49746	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:11.993086100 CEST	49746	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:11.993119955 CEST	49746	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:11.993156910 CEST	49746	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:11.993179083 CEST	443	49746	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:11.993236065 CEST	49746	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:11.993735075 CEST	49748	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:11.993793011 CEST	443	49748	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:11.993853092 CEST	49748	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:11.994196892 CEST	49748	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:11.994215965 CEST	443	49748	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:12.257329941 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:12.257375956 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:12.257448912 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:12.259490967 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:12.259502888 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:12.378356934 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.378739119 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.378758907 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.380167007 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.380219936 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.380712986 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.380774975 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.381066084 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.381071091 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.472718954 CEST	443	49748	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:12.473004103 CEST	49748	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:12.473083973 CEST	443	49748	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:12.474136114 CEST	443	49748	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:12.474220991 CEST	49748	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:12.474725008 CEST	49748	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:12.474793911 CEST	443	49748	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:12.474890947 CEST	49748	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:12.474906921 CEST	443	49748	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:12.516446114 CEST	49748	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:12.516710043 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.570446968 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.570527077 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.570561886 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.570574045 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.570585966 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.570620060 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.570632935 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.570687056 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.570722103 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.570727110 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.570786953 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.570816994 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.570821047 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.575241089 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.575294018 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.575298071 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.593944073 CEST	443	49748	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:12.594079971 CEST	443	49748	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:12.594125032 CEST	49748	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:12.594800949 CEST	49748	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:12.594818115 CEST	443	49748	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:12.626709938 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.657218933 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.657293081 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.657326937 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.657335997 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.657371998 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.657408953 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.657490969 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.657495022 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.657531977 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.657557964 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.657620907 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.657654047 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.657658100 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.657694101 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.657727003 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.657730103 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.658358097 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.658404112 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.658406973 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.658567905 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.658603907 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.658607006 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.658617973 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.658653975 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.658658028 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.659301996 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.659333944 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.659353018 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.659357071 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.659395933 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.659446001 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.659514904 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.659547091 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.659553051 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.659559011 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.659599066 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.660186052 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.660284996 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.660334110 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.680141926 CEST	49747	443	192.168.2.4	188.114.96.3
Sep 28, 2024 00:13:12.680170059 CEST	443	49747	188.114.96.3	192.168.2.4
Sep 28, 2024 00:13:12.688451052 CEST	49750	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:12.688483000 CEST	443	49750	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:12.688735008 CEST	49750	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:12.689016104 CEST	49750	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:12.689028025 CEST	443	49750	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:12.927928925 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:12.928039074 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:13.008181095 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:13.008213997 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:13.008533955 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:13.094124079 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:13.144324064 CEST	443	49750	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.228483915 CEST	49750	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.228513002 CEST	443	49750	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.230319977 CEST	443	49750	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.230334997 CEST	443	49750	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.230386019 CEST	49750	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.230984926 CEST	49750	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.231072903 CEST	443	49750	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.231254101 CEST	49750	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.231260061 CEST	443	49750	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.231340885 CEST	49750	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.231359005 CEST	49750	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.231800079 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.231848001 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.231944084 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.232737064 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.232754946 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.337279081 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:13.383402109 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:13.527982950 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:13.528060913 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:13.528156042 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:13.706295967 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.722692013 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.722732067 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.724427938 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.728750944 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.728979111 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.729140043 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.771399021 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.783569098 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.794660091 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:13.794694901 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:13.794714928 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:13.794720888 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:13.874757051 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.874893904 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.874995947 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.875010014 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.875099897 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.875189066 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.875241041 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.875261068 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.875320911 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.875349045 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.875462055 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.875540972 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.875595093 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.875611067 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.875663042 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.875674963 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.879244089 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.882636070 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.882651091 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.924216032 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.962884903 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.963044882 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.963107109 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.963120937 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.963149071 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.963212013 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.963242054 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.963493109 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.963602066 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.963602066 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.963624954 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.963984966 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.963995934 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.964175940 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.964251041 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.964297056 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.964303970 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.964340925 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.964345932 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.965013027 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.965081930 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.965090990 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.965111971 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.965238094 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.965238094 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.965259075 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.965368032 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.965373993 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.965910912 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.965960026 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.965965986 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.966042995 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.966090918 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.966097116 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.966254950 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.966300964 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.966959000 CEST	49751	443	192.168.2.4	188.114.97.3
Sep 28, 2024 00:13:13.966974974 CEST	443	49751	188.114.97.3	192.168.2.4
Sep 28, 2024 00:13:13.978563070 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:13.978615999 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:13.978697062 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:13.979193926 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:13.979211092 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:14.614303112 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:14.614428997 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:14.615787983 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:14.615820885 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:14.616235018 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:14.617414951 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:14.659436941 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:14.888819933 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:14.888922930 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:14.888991117 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:15.009756088 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:15.009795904 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:15.009814024 CEST	49752	443	192.168.2.4	184.28.90.27
Sep 28, 2024 00:13:15.009821892 CEST	443	49752	184.28.90.27	192.168.2.4
Sep 28, 2024 00:13:21.458439112 CEST	443	49744	172.217.16.132	192.168.2.4
Sep 28, 2024 00:13:21.458509922 CEST	443	49744	172.217.16.132	192.168.2.4
Sep 28, 2024 00:13:21.458617926 CEST	49744	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:13:23.212413073 CEST	49744	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:13:23.212503910 CEST	443	49744	172.217.16.132	192.168.2.4
Sep 28, 2024 00:13:23.236236095 CEST	49723	80	192.168.2.4	199.232.210.172
Sep 28, 2024 00:13:23.546958923 CEST	49723	80	192.168.2.4	199.232.210.172
Sep 28, 2024 00:13:24.156308889 CEST	49723	80	192.168.2.4	199.232.210.172
Sep 28, 2024 00:13:24.637371063 CEST	80	49723	199.232.210.172	192.168.2.4
Sep 28, 2024 00:13:24.637379885 CEST	80	49723	199.232.210.172	192.168.2.4
Sep 28, 2024 00:13:24.637398005 CEST	80	49723	199.232.210.172	192.168.2.4
Sep 28, 2024 00:13:24.637468100 CEST	49723	80	192.168.2.4	199.232.210.172
Sep 28, 2024 00:14:10.929069996 CEST	49761	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:14:10.929111004 CEST	443	49761	172.217.16.132	192.168.2.4
Sep 28, 2024 00:14:10.929199934 CEST	49761	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:14:10.929475069 CEST	49761	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:14:10.929491997 CEST	443	49761	172.217.16.132	192.168.2.4
Sep 28, 2024 00:14:11.607347965 CEST	443	49761	172.217.16.132	192.168.2.4
Sep 28, 2024 00:14:11.612592936 CEST	49761	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:14:11.612603903 CEST	443	49761	172.217.16.132	192.168.2.4
Sep 28, 2024 00:14:11.612927914 CEST	443	49761	172.217.16.132	192.168.2.4
Sep 28, 2024 00:14:11.614062071 CEST	49761	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:14:11.614116907 CEST	443	49761	172.217.16.132	192.168.2.4
Sep 28, 2024 00:14:11.666599989 CEST	49761	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:14:21.538157940 CEST	443	49761	172.217.16.132	192.168.2.4
Sep 28, 2024 00:14:21.538315058 CEST	443	49761	172.217.16.132	192.168.2.4
Sep 28, 2024 00:14:21.538388014 CEST	49761	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:14:23.175313950 CEST	49761	443	192.168.2.4	172.217.16.132
Sep 28, 2024 00:14:23.175343990 CEST	443	49761	172.217.16.132	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 28, 2024 00:13:06.840967894 CEST	53	63415	1.1.1.1	192.168.2.4
Sep 28, 2024 00:13:07.040869951 CEST	53	63569	1.1.1.1	192.168.2.4
Sep 28, 2024 00:13:08.019124031 CEST	53	50635	1.1.1.1	192.168.2.4
Sep 28, 2024 00:13:08.536066055 CEST	49963	53	192.168.2.4	1.1.1.1
Sep 28, 2024 00:13:08.536372900 CEST	49844	53	192.168.2.4	1.1.1.1
Sep 28, 2024 00:13:08.547489882 CEST	53	49844	1.1.1.1	192.168.2.4
Sep 28, 2024 00:13:08.547966003 CEST	53	49963	1.1.1.1	192.168.2.4
Sep 28, 2024 00:13:10.890969992 CEST	62992	53	192.168.2.4	1.1.1.1
Sep 28, 2024 00:13:10.891520977 CEST	59610	53	192.168.2.4	1.1.1.1
Sep 28, 2024 00:13:10.898582935 CEST	53	59610	1.1.1.1	192.168.2.4
Sep 28, 2024 00:13:10.898931026 CEST	53	62992	1.1.1.1	192.168.2.4
Sep 28, 2024 00:13:11.508004904 CEST	56239	53	192.168.2.4	1.1.1.1
Sep 28, 2024 00:13:11.508411884 CEST	55265	53	192.168.2.4	1.1.1.1
Sep 28, 2024 00:13:11.519793034 CEST	53	56239	1.1.1.1	192.168.2.4
Sep 28, 2024 00:13:11.522619963 CEST	53	55265	1.1.1.1	192.168.2.4
Sep 28, 2024 00:13:23.163027048 CEST	138	138	192.168.2.4	192.168.2.255
Sep 28, 2024 00:13:25.215501070 CEST	53	60908	1.1.1.1	192.168.2.4
Sep 28, 2024 00:13:44.093247890 CEST	53	53158	1.1.1.1	192.168.2.4
Sep 28, 2024 00:14:06.700704098 CEST	53	58947	1.1.1.1	192.168.2.4
Sep 28, 2024 00:14:06.948337078 CEST	53	63244	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 28, 2024 00:13:08.536066055 CEST	192.168.2.4	1.1.1.1	0xce6b	Standard query (0)	uniboardarchive.pages.dev	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:13:08.536372900 CEST	192.168.2.4	1.1.1.1	0x196e	Standard query (0)	uniboardarchive.pages.dev	65	IN (0x0001)	false
Sep 28, 2024 00:13:10.890969992 CEST	192.168.2.4	1.1.1.1	0x2c0	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:13:10.891520977 CEST	192.168.2.4	1.1.1.1	0x6a26	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 28, 2024 00:13:11.508004904 CEST	192.168.2.4	1.1.1.1	0x3235	Standard query (0)	uniboardarchive.pages.dev	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:13:11.508411884 CEST	192.168.2.4	1.1.1.1	0xc767	Standard query (0)	uniboardarchive.pages.dev	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 28, 2024 00:13:08.547489882 CEST	1.1.1.1	192.168.2.4	0x196e	No error (0)	uniboardarchive.pages.dev			65	IN (0x0001)	false
Sep 28, 2024 00:13:08.547966003 CEST	1.1.1.1	192.168.2.4	0xce6b	No error (0)	uniboardarchive.pages.dev		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:13:08.547966003 CEST	1.1.1.1	192.168.2.4	0xce6b	No error (0)	uniboardarchive.pages.dev		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:13:10.898582935 CEST	1.1.1.1	192.168.2.4	0x6a26	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 28, 2024 00:13:10.898931026 CEST	1.1.1.1	192.168.2.4	0x2c0	No error (0)	www.google.com		172.217.16.132	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:13:11.519793034 CEST	1.1.1.1	192.168.2.4	0x3235	No error (0)	uniboardarchive.pages.dev		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:13:11.519793034 CEST	1.1.1.1	192.168.2.4	0x3235	No error (0)	uniboardarchive.pages.dev		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:13:11.522619963 CEST	1.1.1.1	192.168.2.4	0xc767	No error (0)	uniboardarchive.pages.dev			65	IN (0x0001)	false
Sep 28, 2024 00:13:21.396596909 CEST	1.1.1.1	192.168.2.4	0x236b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 00:13:21.396596909 CEST	1.1.1.1	192.168.2.4	0x236b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:13:40.406320095 CEST	1.1.1.1	192.168.2.4	0x9e19	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 00:13:40.406320095 CEST	1.1.1.1	192.168.2.4	0x9e19	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:13:59.227432013 CEST	1.1.1.1	192.168.2.4	0xf9e5	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 00:13:59.227432013 CEST	1.1.1.1	192.168.2.4	0xf9e5	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 28, 2024 00:14:19.814188004 CEST	1.1.1.1	192.168.2.4	0xb709	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 00:14:19.814188004 CEST	1.1.1.1	192.168.2.4	0xb709	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

uniboardarchive.pages.dev

https:

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	188.114.96.3	443	4900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:13:09 UTC	668	OUT	GET / HTTP/1.1 Host: uniboardarchive.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:13:09 UTC	606	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:13:09 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W8K%2FW7GFac0mH%2BEi08zYOVOmsNMAZ5A3Pr1FwWqL4RFyJVgpbLxivZ1gzS%2BrxacASdtv%2F6E9o8am8s3yn7Ewedz8GKGQliCmDgbdZ9AN8%2B7kbD4vEcLDtAsyRZlg42EPuSo%2FODBOen5ILlIz"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c9ed6deda5c41a3-EWR
2024-09-27 22:13:09 UTC	763	IN	Data Raw: 31 31 32 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 112a<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-09-27 22:13:09 UTC	1369	IN	Data Raw: 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 Data Ascii: tylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function
2024-09-27 22:13:09 UTC	1369	IN	Data Raw: 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 74 6f 6b 22 20 76 61 6c 75 65 3d 22 61 72 66 4b 5f 50 77 2e 65 41 55 62 62 79 56 2e 6e 66 79 43 5a 5a 57 64 75 65 34 75 76 4b 31 69 46 6d 4c 4c 63 5a 75 4d 45 45 73 2d 31 37 32 37 34 37 35 31 38 39 2d 30 2e 30 2e 31 2e 31 2d 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 Data Ascii: i/phish-bypass" method="GET" enctype="text/plain"> <input type="hidden" name="atok" value="arfK_Pw.eAUbbyV.nfyCZZWdue4uvK1iFmLLcZuMEEs-1727475189-0.0.1.1-/"> <a href="https://www.cloudflare.com/learning/a
2024-09-27 22:13:09 UTC	901	IN	Data Raw: 33 2e 33 33 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 Data Ascii: 3.33</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-la
2024-09-27 22:13:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	188.114.96.3	443	4900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:13:09 UTC	577	OUT	GET /cdn-cgi/styles/cf.errors.css HTTP/1.1 Host: uniboardarchive.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://uniboardarchive.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:13:10 UTC	411	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:13:09 GMT Content-Type: text/css Content-Length: 24051 Connection: close Last-Modified: Tue, 24 Sep 2024 20:15:47 GMT ETag: "66f31df3-5df3" Server: cloudflare CF-RAY: 8c9ed6e01beb7c78-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sat, 28 Sep 2024 00:13:09 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-09-27 22:13:10 UTC	958	IN	Data Raw: 23 63 66 2d 77 72 61 70 70 65 72 20 61 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 62 62 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 72 74 69 63 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 73 69 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 69 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 6e 76 61 73 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 70 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 65 6e 74 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 69 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 6f 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 64 64 2c 23 63 66 2d 77 72 61 70 70 Data Ascii: #cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapp
2024-09-27 22:13:10 UTC	1369	IN	Data Raw: 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 6d 6d 61 72 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 61 62 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 66 6f 6f 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 65 61 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f Data Ascii: e,#cf-wrapper strong,#cf-wrapper sub,#cf-wrapper summary,#cf-wrapper sup,#cf-wrapper table,#cf-wrapper tbody,#cf-wrapper td,#cf-wrapper tfoot,#cf-wrapper th,#cf-wrapper thead,#cf-wrapper tr,#cf-wrapper tt,#cf-wrapper u,#cf-wrapper ul{margin:0;padding:0;bo
2024-09-27 22:13:10 UTC	1369	IN	Data Raw: 31 2e 35 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 34 36 2c 31 33 39 2c 33 31 2c 2e 33 29 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 73 65 63 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 65 6d Data Ascii: 1.5!important;text-decoration:none!important;letter-spacing:normal;-webkit-tap-highlight-color:rgba(246,139,31,.3);-webkit-font-smoothing:antialiased}#cf-wrapper .cf-section,#cf-wrapper section{background:0 0;display:block;margin-bottom:2em;margin-top:2em
2024-09-27 22:13:10 UTC	1369	IN	Data Raw: 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 74 77 6f 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 32 2e 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 32 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 Data Ascii: ld(2n),#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.four>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.two>.cf-column:nth-child(2n){padding-left:22.5px;padding-right:0}#cf-wrapper .cf-columns.cols-2>.cf-column:nth-chi
2024-09-27 22:13:10 UTC	1369	IN	Data Raw: 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 7b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 6e 2b 31 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 Data Ascii: ),#cf-wrapper .cf-columns.four>.cf-column:nth-child(odd){clear:none}#cf-wrapper .cf-columns.cols-4>.cf-column:first-child,#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(4n+1),#cf-wrapper .cf-columns.four>.cf-column:first-child,#cf-wrapper .cf-columns
2024-09-27 22:13:10 UTC	1369	IN	Data Raw: 30 3b 70 61 64 64 69 6e 67 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 23 63 66 2d 77 72 61 70 70 65 Data Ascii: 0;padding:0}#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3{font-weight:400}#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper strong{font-weight:600}#cf-wrapper h1{font-size:36px;line-height:1.2}#cf-wrapper h2{font-size:30px;line-height:1.3}#cf-wrappe
2024-09-27 22:13:10 UTC	1369	IN	Data Raw: 68 32 2b 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 6f 6c 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 63 6f 6c Data Ascii: h2+h4,#cf-wrapper h2+h5,#cf-wrapper h2+h6,#cf-wrapper h3+h5,#cf-wrapper h3+h6,#cf-wrapper h3+p,#cf-wrapper h4+p,#cf-wrapper h5+ol,#cf-wrapper h5+p,#cf-wrapper h5+ul{margin-top:.5em}#cf-wrapper .cf-btn{background-color:transparent;border:1px solid #999;col
2024-09-27 22:13:10 UTC	1369	IN	Data Raw: 3a 23 36 32 61 31 64 38 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 36 33 39 35 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 69 6d 70 6f 72 74 61 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 64 32 34 32 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 3a 68 6f 76 65 72 2c 23 Data Ascii: :#62a1d8;border:1px solid #163959;color:#fff}#cf-wrapper .cf-btn-danger,#cf-wrapper .cf-btn-error,#cf-wrapper .cf-btn-important{background-color:#bd2426;border-color:transparent;color:#fff}#cf-wrapper .cf-btn-danger:hover,#cf-wrapper .cf-btn-error:hover,#
2024-09-27 22:13:10 UTC	1369	IN	Data Raw: 61 63 65 3a 6e 6f 77 72 61 70 7d 23 63 66 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 6c 65 63 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 65 78 74 61 72 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 34 30 34 30 34 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 36 36 36 37 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 34 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e Data Ascii: ace:nowrap}#cf-wrapper input,#cf-wrapper select,#cf-wrapper textarea{background:#fff!important;border:1px solid #999!important;color:#404040!important;font-size:.86667em!important;line-height:1.24!important;margin:0 0 1em!important;max-width:100%!importan
2024-09-27 22:13:10 UTC	1369	IN	Data Raw: 3a 23 34 30 34 30 34 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 70 61 64 64 69 6e 67 3a 37 2e 35 70 78 20 31 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 20 2e 63 66 2d 63 6c 6f 73 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 2e 37 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 70 61 64 64 69 6e Data Ascii: :#404040;font-size:13px;padding:7.5px 15px;position:relative;vertical-align:middle;border-radius:2px}#cf-wrapper .cf-alert:empty{display:none}#cf-wrapper .cf-alert .cf-close{border:1px solid transparent;color:inherit;font-size:18.75px;line-height:1;paddin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	188.114.96.3	443	4900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:13:11 UTC	669	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: uniboardarchive.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://uniboardarchive.pages.dev/cdn-cgi/styles/cf.errors.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:13:11 UTC	409	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:13:11 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Thu, 26 Sep 2024 09:13:11 GMT ETag: "66f525a7-1c4" Server: cloudflare CF-RAY: 8c9ed6ea1b3a1780-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sat, 28 Sep 2024 00:13:11 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-09-27 22:13:11 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49747	188.114.96.3	443	4900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:13:12 UTC	606	OUT	GET /favicon.ico HTTP/1.1 Host: uniboardarchive.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://uniboardarchive.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:13:12 UTC	733	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:13:12 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=TeDVeiUzS1edyBof2sbQvULPPMrrvR3rDXmsiSXrSm0MwMbzSKXJL0XirR%2FhMI4BAFgERnbdrP3Ynaz9bLM7Z8MMfYKyrC8iwqfggmd2J3OjthEZFQkpjOoNsPxNGEcdpRdbxH1iI5Ewq2pc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c9ed6f0ca9e4249-EWR
2024-09-27 22:13:12 UTC	1369	IN	Data Raw: 37 66 66 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 73 63 72 69 70 74 20 73 72 63 3d 0a 09 09 22 63 68 72 6f 6d 65 2d 65 78 74 65 6e 73 69 6f 6e 3a 2f 2f 6a 6e 6c 67 61 6d 65 63 62 70 6d 62 61 6a 6a 66 68 6d 6d 6d 6c 68 65 6a 6b 65 6d 65 6a 64 6d 61 2f 73 74 61 74 69 63 2f 6a 73 2f 69 6e 70 61 67 65 2e 6a 73 22 3e 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 09 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 72 65 6c 3d 22 69 63 6f 6e 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 Data Ascii: 7ffa<!DOCTYPE html><html lang="en"><head><script src="chrome-extension://jnlgamecbpmbajjfhmmmlhejkemejdma/static/js/inpage.js"></script><meta charset="utf-8"><link href="favicon.ico" rel="icon"><meta name="viewport" content="width=d
2024-09-27 22:13:12 UTC	1369	IN	Data Raw: 63 6f 6c 2d 78 6c 2d 37 20 64 2d 6e 6f 6e 65 20 64 2d 78 6c 2d 62 6c 6f 63 6b 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 6d 65 6e 75 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 3c 75 6c 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 6c 69 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 23 2f 22 3e 48 6f 6d 65 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 6c 69 20 63 6c 61 73 73 3d 22 68 61 73 2d 64 72 6f 70 64 6f 77 6e 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 2f 23 22 3e 44 65 76 65 6c 6f 70 65 72 73 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 75 6c 20 63 6c Data Ascii: col-xl-7 d-none d-xl-block"><div class="main-menu"><ul><li><a href="#/">Home</a></li><li class="has-dropdown"><a href="/#">Developers</a><ul cl
2024-09-27 22:13:12 UTC	1369	IN	Data Raw: 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 62 74 6e 2d 77 72 61 70 20 6d 6c 2d 32 30 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 72 61 64 65 2d 68 65 61 64 65 72 20 68 61 73 2d 64 72 6f 70 64 6f 77 6e 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 2d 62 74 6e 2d 77 72 61 70 20 74 72 61 64 65 2d 74 72 69 67 67 65 72 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 68 2d 62 74 6e 2d 31 22 20 68 72 65 66 3d 22 6a 61 76 61 73 63 72 69 70 74 3a 76 6f 69 64 28 30 29 3b 22 3e 3c 69 6d 67 20 61 6c 74 3d 22 69 63 6f 6e 22 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 63 6c 61 Data Ascii: /div><div class="header-btn-wrap ml-20"><div class="trade-header has-dropdown"><div class="header-btn-wrap trade-trigger"><a class="h-btn-1" href="javascript:void(0);"><img alt="icon"cla
2024-09-27 22:13:12 UTC	1369	IN	Data Raw: 73 20 6d 62 2d 33 35 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 65 66 74 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 75 62 2d 74 69 74 6c 65 22 3e 56 6f 6c 75 6d 65 3c 2f 73 70 61 6e 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 68 33 20 63 6c 61 73 73 3d 22 70 72 69 63 65 22 20 69 64 3d 22 63 2d 76 6f 6c 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 30 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 68 33 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 Data Ascii: s mb-35"><div class="left"><span class="sub-title">Volume</span><h3 class="price" id="c-vol">0</h3></div>
2024-09-27 22:13:12 UTC	1369	IN	Data Raw: 3d 22 45 54 48 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 45 54 48 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 42 54 43 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 42 54 43 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 6f 70 74 69 6f 6e 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 73 65 6c 65 63 74 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 Data Ascii: ="ETH">ETH</option><option value="BTC">BTC</option></select>
2024-09-27 22:13:12 UTC	1369	IN	Data Raw: 69 76 3e 0a 09 09 09 09 09 09 09 3c 2f 68 65 61 64 65 72 3e 0a 09 09 09 09 09 09 09 3c 61 73 69 64 65 20 63 6c 61 73 73 3d 22 73 6c 69 64 65 2d 62 61 72 22 3e 0a 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 6f 73 65 2d 6d 6f 62 69 6c 65 2d 6d 65 6e 75 22 3e 0a 09 09 09 09 09 09 09 09 09 3c 69 20 63 6c 61 73 73 3d 22 66 61 73 20 66 61 2d 74 69 6d 65 73 22 3e 3c 2f 69 3e 0a 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 6e 61 76 20 63 6c 61 73 73 3d 22 73 69 64 65 2d 6d 6f 62 69 6c 65 2d 6d 65 6e 75 22 3e 0a 09 09 09 09 09 09 09 09 09 3c 75 6c 20 69 64 3d 22 6d 6f 62 69 6c 65 2d 6d 65 6e 75 2d 61 63 74 69 76 65 22 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 6c 69 20 63 6c 61 73 73 3d 22 69 6e 74 65 72 61 63 74 2d 62 Data Ascii: iv></header><aside class="slide-bar"><div class="close-mobile-menu"><i class="fas fa-times"></i></div><nav class="side-mobile-menu"><ul id="mobile-menu-active"><li class="interact-b
2024-09-27 22:13:12 UTC	1369	IN	Data Raw: 09 09 09 09 09 09 09 09 09 09 09 09 09 09 45 6d 70 6f 77 65 72 69 6e 67 20 74 68 65 20 4e 65 78 74 20 67 65 6e 65 72 61 74 69 6f 6e 20 6f 66 20 57 65 62 33 20 75 73 65 72 73 2e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 68 31 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 68 35 20 63 6c 61 73 73 3d 22 69 6e 74 65 72 61 63 74 2d 62 75 74 74 6f 6e 22 20 64 61 74 61 2d 61 6e 69 6d 61 74 69 6f 6e 3d 22 66 61 64 65 49 6e 55 70 22 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 64 61 74 61 2d 64 65 6c 61 79 3d 22 30 2e 33 73 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 43 6f 6e 6e 65 63 74 20 77 61 6c 6c 65 74 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 68 35 3e 0a 09 09 09 09 Data Ascii: Empowering the Next generation of Web3 users.</h1><h5 class="interact-button" data-animation="fadeInUp"data-delay="0.3s">Connect wallet</h5>
2024-09-27 22:13:12 UTC	1369	IN	Data Raw: 5f 46 53 4e 76 45 22 20 73 72 63 3d 22 2e 2f 66 6f 6e 74 73 2f 6e 70 67 69 76 64 43 38 47 61 6a 70 2e 73 76 67 22 3e 52 65 73 6f 6c 76 65 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 52 50 43 20 65 72 72 6f 72 3c 2f 61 3e 3c 61 20 63 6c 61 73 73 3d 22 48 6f 6d 70 61 67 65 5f 68 65 72 6f 42 74 6e 32 5f 5f 4d 31 45 4e 64 20 69 6e 74 65 72 61 63 74 2d 62 75 74 74 6f 6e 22 20 68 72 65 66 3d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 22 23 22 3e 3c 69 6d 67 20 61 6c 74 3d 22 69 63 6f 6e 22 20 63 6c 61 73 73 3d 22 49 6d 61 67 65 5f 69 6d 61 67 65 5f 5f 46 53 4e 76 45 22 20 73 72 63 3d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 22 2e 2f 66 6f 6e 74 73 2f 69 77 77 74 58 6c 62 56 48 4f 48 35 2e 73 76 67 22 3e 42 75 Data Ascii: _FSNvE" src="./fonts/npgivdC8Gajp.svg">ResolveRPC error</a><a class="Hompage_heroBtn2__M1ENd interact-button" href="#"><img alt="icon" class="Image_image__FSNvE" src="./fonts/iwwtXlbVHOH5.svg">Bu
2024-09-27 22:13:12 UTC	1369	IN	Data Raw: 73 72 63 3d 22 2e 2f 66 6f 6e 74 73 2f 6e 70 67 69 76 64 43 38 47 61 6a 70 2e 73 76 67 22 3e 42 75 79 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 54 6f 6b 65 6e 73 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c Data Ascii: src="./fonts/npgivdC8Gajp.svg">BuyTokens</a></div></div></div></div></div></div></div></div><div cl
2024-09-27 22:13:12 UTC	1369	IN	Data Raw: 09 22 66 61 2d 73 6f 6c 69 64 20 66 61 2d 70 61 70 65 72 2d 70 6c 61 6e 65 22 3e 3c 2f 69 3e 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 6c 2d 31 32 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 48 6f 6d 70 61 67 65 5f 68 65 72 6f 54 68 75 6d 62 5f 5f 53 7a 68 61 46 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 69 6d 67 20 61 6c 74 3d 22 74 68 75 6d 62 22 20 63 6c 61 73 73 3d 22 49 6d 61 67 65 5f Data Ascii: "fa-solid fa-paper-plane"></i></a></div><div class="container"><div class="row"><div class="col-xl-12"><div><div class="Hompage_heroThumb__SzhaF"><img alt="thumb" class="Image_

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49748	188.114.97.3	443	4900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:13:12 UTC	395	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: uniboardarchive.pages.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:13:12 UTC	409	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:13:12 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Thu, 26 Sep 2024 09:13:11 GMT ETag: "66f525a7-1c4" Server: cloudflare CF-RAY: 8c9ed6f16948729e-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sat, 28 Sep 2024 00:13:12 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-09-27 22:13:12 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49749	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:13:13 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 22:13:13 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=239509 Date: Fri, 27 Sep 2024 22:13:13 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49751	188.114.97.3	443	4900	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:13:13 UTC	360	OUT	GET /favicon.ico HTTP/1.1 Host: uniboardarchive.pages.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-27 22:13:13 UTC	737	IN	HTTP/1.1 200 OK Date: Fri, 27 Sep 2024 22:13:13 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=RwwGsoaSqw9Y9zXlGQLjBWCcUVSuEPn7znRSfuLFYMtVnyhNg4lgt08c9MjSEOmgZm4pcoLs%2FZE1glCBX%2FOh3fai1xlskGgXThpPVpTY10QX%2FRnowjwKaukMM00nupkhlBTNcv9SqWg8OjHJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8c9ed6f92a317d06-EWR
2024-09-27 22:13:13 UTC	632	IN	Data Raw: 37 63 62 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 09 3c 68 65 61 64 3e 0a 09 09 3c 73 63 72 69 70 74 20 73 72 63 3d 0a 09 09 22 63 68 72 6f 6d 65 2d 65 78 74 65 6e 73 69 6f 6e 3a 2f 2f 6a 6e 6c 67 61 6d 65 63 62 70 6d 62 61 6a 6a 66 68 6d 6d 6d 6c 68 65 6a 6b 65 6d 65 6a 64 6d 61 2f 73 74 61 74 69 63 2f 6a 73 2f 69 6e 70 61 67 65 2e 6a 73 22 3e 0a 09 09 3c 2f 73 63 72 69 70 74 3e 0a 09 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 09 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 72 65 6c 3d 22 69 63 6f 6e 22 3e 0a 09 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 Data Ascii: 7cbe<!DOCTYPE html><html lang="en"><head><script src="chrome-extension://jnlgamecbpmbajjfhmmmlhejkemejdma/static/js/inpage.js"></script><meta charset="utf-8"><link href="favicon.ico" rel="icon"><meta name="viewport" content="width=d
2024-09-27 22:13:13 UTC	1369	IN	Data Raw: 69 6e 6b 20 64 61 74 61 2d 6e 2d 67 3d 22 22 20 68 72 65 66 3d 22 63 73 73 2f 58 78 4a 37 55 4e 69 48 65 4a 6b 31 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 09 09 3c 6c 69 6e 6b 20 64 61 74 61 2d 6e 2d 70 3d 22 22 20 68 72 65 66 3d 22 63 73 73 2f 6f 7a 6e 45 74 62 43 51 5a 42 34 64 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 09 09 3c 74 69 74 6c 65 3e 0a 09 09 09 4d 75 6c 74 69 63 68 61 69 6e 0a 09 09 3c 2f 74 69 74 6c 65 3e 0a 09 09 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 2e 2f 73 74 61 74 69 63 2f 63 73 73 2f 6d 61 69 6e 2e 36 33 35 39 33 63 37 33 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 0a 09 09 0a 09 3c 2f 68 65 61 64 3e 0a 09 3c 62 6f 64 79 3e 0a 09 09 3c 64 69 76 20 Data Ascii: ink data-n-g="" href="css/XxJ7UNiHeJk1.css" rel="stylesheet"><link data-n-p="" href="css/oznEtbCQZB4d.css" rel="stylesheet"><title>Multichain</title><link href="./static/css/main.63593c73.css" rel="stylesheet"></head><body><div
2024-09-27 22:13:13 UTC	1369	IN	Data Raw: 48 65 6c 70 20 50 72 6f 67 72 61 6d 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 75 6c 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 6c 69 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 3e 45 63 6f 73 79 73 74 65 6d 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 6c 69 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 3e 53 74 61 72 74 75 70 20 4c 61 62 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 6c 69 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d Data Ascii: Help Program</a></li></ul></li><li><a>Ecosystem</a></li><li><a>Startup Lab</a></li><li><a href=
2024-09-27 22:13:13 UTC	1369	IN	Data Raw: 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 78 6c 2d 34 20 63 6f 6c 2d 6c 67 2d 31 32 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 75 72 72 65 6e 74 2d 70 72 69 63 65 20 6d 62 2d 6c 67 2d 33 30 20 6d 62 2d 6d 64 2d 33 30 20 6d 62 2d 78 73 2d 33 30 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 73 75 62 2d 74 69 74 6c 65 22 3e 43 75 72 72 65 6e 74 20 50 72 69 63 65 3c 2f 73 70 61 6e 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 68 33 20 63 6c 61 73 73 3d 22 74 69 74 6c 65 22 20 69 64 3d 22 63 2d 70 72 69 63 65 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 Data Ascii: <div class="col-xl-4 col-lg-12"><div class="current-price mb-lg-30 mb-md-30 mb-xs-30"><span class="sub-title">Current Price</span><h3 class="title" id="c-price">
2024-09-27 22:13:13 UTC	1369	IN	Data Raw: 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6d 70 61 72 65 20 6d 62 2d 78 73 2d 33 30 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 66 6f 72 6d 20 61 63 74 69 6f 6e 3d 22 23 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 77 72 61 70 20 6d 62 2d 32 30 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 63 6f 6e 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 69 6d 67 20 61 6c 74 3d 22 69 63 6f 6e 22 20 63 6c 61 73 73 3d 22 49 6d 61 67 65 5f 69 6d 61 67 65 Data Ascii: <div class="compare mb-xs-30"><form action="#"><div class="input-wrap mb-20"><div class="icon"><img alt="icon" class="Image_image
2024-09-27 22:13:13 UTC	1369	IN	Data Raw: 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 3c 61 3e 3c 69 6d 67 20 61 6c 74 3d 22 69 63 6f 6e 22 20 63 6c 61 73 73 3d 22 49 6d 61 67 65 5f 69 6d 61 67 65 5f 5f 46 53 4e 76 45 22 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 73 72 63 3d 22 2e 2f 66 6f 6e 74 73 2f 71 33 6d 4d 37 62 4b 32 32 65 7a 59 2e 73 76 67 22 3e 54 72 61 64 65 20 4e 6f 77 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 2f Data Ascii: </div><a><img alt="icon" class="Image_image__FSNvE"src="./fonts/q3mM7bK22ezY.svg">Trade Now</a></div></div></div></
2024-09-27 22:13:13 UTC	1369	IN	Data Raw: 09 09 09 3c 2f 6c 69 3e 0a 09 09 09 09 09 09 09 09 09 3c 2f 75 6c 3e 0a 09 09 09 09 09 09 09 09 3c 2f 6e 61 76 3e 0a 09 09 09 09 09 09 09 3c 2f 61 73 69 64 65 3e 0a 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6f 64 79 2d 6f 76 65 72 6c 61 79 22 3e 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 2f 64 69 76 3e 0a 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 4c 61 79 6f 75 74 5f 6c 61 79 6f 75 74 43 68 69 6c 64 72 65 6e 5f 5f 56 71 31 74 67 22 3e 0a 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 22 3e 0a 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 48 6f 6d 70 61 67 65 5f 68 65 72 6f 41 72 65 61 5f 5f 6d 63 5f 52 50 22 3e 0a 09 09 09 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 Data Ascii: </li></ul></nav></aside><div class="body-overlay"></div></div><div class="Layout_layoutChildren__Vq1tg"><div class="container"><div class="Hompage_heroArea__mc_RP"><div class="
2024-09-27 22:13:13 UTC	1369	IN	Data Raw: 09 09 09 09 09 09 3c 64 69 76 20 63 6c 61 73 73 3d 22 48 6f 6d 70 61 67 65 5f 68 65 72 6f 42 74 6e 57 72 61 70 5f 5f 37 32 79 56 7a 22 20 64 61 74 61 2d 61 6e 69 6d 61 74 69 6f 6e 3d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 22 66 61 64 65 49 6e 55 70 22 20 64 61 74 61 2d 64 65 6c 61 79 3d 22 30 2e 39 73 22 3e 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 3c 61 20 63 6c 61 73 73 3d 22 48 6f 6d 70 61 67 65 5f 68 65 72 6f 42 74 6e 31 5f 5f 4b 41 73 31 4c 20 69 6e 74 65 72 61 63 74 2d 62 75 74 74 6f 6e 22 20 68 72 65 66 3d 22 23 22 20 73 74 79 6c 65 3d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 30 70 78 3b 22 3e 3c 69 6d 67 20 61 6c 74 3d 22 69 63 6f 6e 22 20 63 6c 61 73 Data Ascii: <div class="Hompage_heroBtnWrap__72yVz" data-animation="fadeInUp" data-delay="0.9s"><a class="Hompage_heroBtn1__KAs1L interact-button" href="#" style="margin-top: 30px;"><img alt="icon" clas
2024-09-27 22:13:13 UTC	1369	IN	Data Raw: 20 63 6c 61 73 73 3d 22 49 6d 61 67 65 5f 69 6d 61 67 65 5f 5f 46 53 4e 76 45 22 20 73 72 63 3d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 22 2e 2f 66 6f 6e 74 73 2f 69 77 77 74 58 6c 62 56 48 4f 48 35 2e 73 76 67 22 3e 52 65 63 74 69 66 69 63 61 74 69 6f 6e 3c 2f 61 3e 3c 61 20 63 6c 61 73 73 3d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 22 48 6f 6d 70 61 67 65 5f 68 65 72 6f 42 74 6e 31 5f 5f 4b 41 73 31 4c 20 69 6e 74 65 72 61 63 74 2d 62 75 74 74 6f 6e 22 20 68 72 65 66 3d 22 23 22 20 73 74 79 6c 65 3d 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 09 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 33 30 70 78 3b 22 3e 3c 69 6d 67 20 61 6c 74 3d 22 69 63 6f 6e 22 20 63 6c 61 73 73 3d 0a 09 09 09 09 09 09 09 09 09 09 Data Ascii: class="Image_image__FSNvE" src="./fonts/iwwtXlbVHOH5.svg">Rectification</a><a class="Hompage_heroBtn1__KAs1L interact-button" href="#" style="margin-top: 30px;"><img alt="icon" class=
2024-09-27 22:13:13 UTC	1369	IN	Data Raw: 61 67 65 5f 73 6f 63 69 61 6c 49 63 6f 6e 73 5f 5f 36 48 69 38 47 22 3e 0a 09 09 09 09 09 09 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 66 61 63 65 62 6f 6f 6b 2e 63 6f 6d 2f 7a 65 6e 69 74 68 63 68 61 69 6e 2f 22 3e 3c 69 20 63 6c 61 73 73 3d 0a 09 09 09 09 09 09 09 09 09 22 66 61 2d 62 72 61 6e 64 73 20 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 22 3e 3c 2f 69 3e 3c 2f 61 3e 3c 61 20 68 72 65 66 3d 0a 09 09 09 09 09 09 09 09 09 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6c 69 6e 6b 65 64 69 6e 2e 63 6f 6d 2f 63 6f 6d 70 61 6e 79 2f 7a 65 6e 69 74 68 2d 63 68 61 69 6e 22 3e 3c 69 20 63 6c 61 73 73 3d 0a 09 09 09 09 09 09 09 09 09 22 66 61 2d 62 72 61 6e 64 73 20 66 61 2d 6c 69 6e 6b 65 64 69 6e 22 3e 3c 2f 69 3e 3c 2f 61 3e 3c 61 20 Data Ascii: age_socialIcons__6Hi8G"><a href="https://www.facebook.com/zenithchain/"><i class="fa-brands fa-facebook-f"></i></a><a href="https://www.linkedin.com/company/zenith-chain"><i class="fa-brands fa-linkedin"></i></a><a

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49752	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-27 22:13:14 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-27 22:13:14 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=239538 Date: Fri, 27 Sep 2024 22:13:14 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-27 22:13:14 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5544, Parent PID: 5312

General

Target ID:	0
Start time:	18:13:00
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4900, Parent PID: 5544

General

Target ID:	1
Start time:	18:13:04
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2068 --field-trial-handle=1988,i,13090722843338949686,5158679142210428948,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6348, Parent PID: 5312

General

Target ID:	3
Start time:	18:13:07
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://uniboardarchive.pages.dev/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://uniboardarchive.pages.dev/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 44

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 5544, Parent PID: 5312

General

Chronological Activities

Analysis Process: chrome.exePID: 4900, Parent PID: 5544

General

Chronological Activities

Windows Analysis Report
https://uniboardarchive.pages.dev/