Loading Joe Sandbox Report ...

Edit tour

Windows Analysis Report
http://unusualactivityaccountpages12.github.io/

Overview

General Information

Sample URL:	http://unusualactivityaccountpages12.github.io/
Analysis ID:	1521028
Infos:

Detection

HTMLPhisher

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Suricata IDS alerts for network traffic

Yara detected HtmlPhish64

Phishing site detected (based on logo match)

Form action URLs do not match main URL

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Suspicious form URL found

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 3668 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3504 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2272,i,6953573050607460099,9853339588741042032,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6784 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://unusualactivityaccountpages12.github.io/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

ET PHISHING Request for Possible Account Phishing Hosted on Github.io

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-09-28T03:19:00.279297+0200	2027244	1	Potential Corporate Privacy Violation	192.168.2.5	49711	185.199.108.153	443	TCP
2024-09-28T03:19:00.944973+0200	2027244	1	Potential Corporate Privacy Violation	192.168.2.5	49714	185.199.108.153	443	TCP
2024-09-28T03:19:00.958982+0200	2027244	1	Potential Corporate Privacy Violation	192.168.2.5	49715	185.199.108.153	443	TCP
2024-09-28T03:19:04.672165+0200	2027244	1	Potential Corporate Privacy Violation	192.168.2.5	49721	185.199.108.153	443	TCP
2024-09-28T03:19:05.520396+0200	2027244	1	Potential Corporate Privacy Violation	192.168.2.5	49722	185.199.109.153	443	TCP

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://unusualactivityaccountpages12.github.io/

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://unusualactivityaccountpages12.github.io/

LLM: Score: 9 Reasons: The URL 'unusualactivityaccountpages12.github.io' does not match the legitimate domain 'facebook.com'., The domain 'github.io' is a common domain used for hosting static websites and is not associated with Facebook., The subdomain 'unusualactivityaccountpages12' is suspicious and not related to Facebook., The input fields 'Email address or phone number' and 'Password' are typical for phishing attempts targeting Facebook users. DOM: 0.0.pages.csv

Yara detected HtmlPhish64

Source: Yara match

File source: 0.0.pages.csv, type: HTML

Phishing site detected (based on logo match)

Source: https://unusualactivityaccountpages12.github.io/

Matcher: Template: facebook matched

Source: https://unusualactivityaccountpages12.github.io/

HTTP Parser: Form action: https://barubaruajadeh.000webhostapp.com/input.php github 000webhostapp

Source: https://unusualactivityaccountpages12.github.io/

HTTP Parser: Number of links: 1

Source: https://unusualactivityaccountpages12.github.io/

HTTP Parser: Title: Community Standard does not match URL

Source: https://unusualactivityaccountpages12.github.io/

HTTP Parser: Form action: https://barubaruajadeh.000webhostapp.com/input.php

Source: https://unusualactivityaccountpages12.github.io/

HTTP Parser: <input type="password" .../> found

Source: https://unusualactivityaccountpages12.github.io/

HTTP Parser: No <meta name="author".. found

Source: https://unusualactivityaccountpages12.github.io/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49720 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 2027244 - Severity 1 - ET PHISHING Request for Possible Account Phishing Hosted on Github.io : 192.168.2.5:49711 -> 185.199.108.153:443
Source: Network traffic	Suricata IDS: 2027244 - Severity 1 - ET PHISHING Request for Possible Account Phishing Hosted on Github.io : 192.168.2.5:49721 -> 185.199.108.153:443
Source: Network traffic	Suricata IDS: 2027244 - Severity 1 - ET PHISHING Request for Possible Account Phishing Hosted on Github.io : 192.168.2.5:49722 -> 185.199.109.153:443
Source: Network traffic	Suricata IDS: 2027244 - Severity 1 - ET PHISHING Request for Possible Account Phishing Hosted on Github.io : 192.168.2.5:49714 -> 185.199.108.153:443
Source: Network traffic	Suricata IDS: 2027244 - Severity 1 - ET PHISHING Request for Possible Account Phishing Hosted on Github.io : 192.168.2.5:49715 -> 185.199.108.153:443

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: unusualactivityaccountpages12.github.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/cross/hidden.css HTTP/1.1Host: unusualactivityaccountpages12.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://unusualactivityaccountpages12.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /css/cross/hidden_2.css HTTP/1.1Host: unusualactivityaccountpages12.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://unusualactivityaccountpages12.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /rsrc.php/v3/yW/r/AFgIDquDCzO.png HTTP/1.1Host: static.xx.fbcdn.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://unusualactivityaccountpages12.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: unusualactivityaccountpages12.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://unusualactivityaccountpages12.github.io/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /img/favicon.ico HTTP/1.1Host: unusualactivityaccountpages12.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: unusualactivityaccountpages12.github.ioConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: unusualactivityaccountpages12.github.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingx-fatal-request: static.xx.fbcdn.netEdge-Control: cache-maxage=10mPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTtiming-allow-origin: *reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/"report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"}content-security-policy: default-src data: blob: 'self';script-src *.facebook.com *.fbcdn.net *.facebook.net 127.0.0.1:* blob: data: 'self' 'unsafe-inline' https://*.google-analytics.com *.google.com;style-src 'unsafe-inline';connect-src *.facebook.com facebook.com *.fbcdn.net *.facebook.net wss://*.facebook.com:* wss://*.whatsapp.com:* wss://*.fbcdn.net attachment.fbsbx.com ws://localhost:* blob: *.cdninstagram.com 'self' https://*.google-analytics.com;img-src data: blob: 'self' https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script';document-policy: force-load-at-top

Source: chromecache_65.2.dr	String found in binary or memory: https://barubaruajadeh.000webhostapp.com/input.php
Source: chromecache_65.2.dr	String found in binary or memory: https://static.xx.fbcdn.net/rsrc.php/v3/yW/r/AFgIDquDCzO.png");

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49720 version: TLS 1.2

Source: classification engine

Classification label: mal76.phis.win@17/17@10/8

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2272,i,6953573050607460099,9853339588741042032,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://unusualactivityaccountpages12.github.io/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2272,i,6953573050607460099,9853339588741042032,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: continue
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: continue

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk			Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://unusualactivityaccountpages12.github.io/	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
scontent.xx.fbcdn.net	157.240.253.1	true	false		unknown
www.google.com	142.250.186.132	true	false		unknown
unusualactivityaccountpages12.github.io	185.199.110.153	true	true		unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false		unknown
static.xx.fbcdn.net	unknown	unknown	false		unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://static.xx.fbcdn.net/rsrc.php/v3/yW/r/AFgIDquDCzO.png	false		unknown
https://unusualactivityaccountpages12.github.io/img/favicon.ico	true		unknown
http://unusualactivityaccountpages12.github.io/	true		unknown
https://unusualactivityaccountpages12.github.io/css/cross/hidden_2.css	true		unknown
https://unusualactivityaccountpages12.github.io/	true		unknown
https://unusualactivityaccountpages12.github.io/css/cross/hidden.css	true		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://barubaruajadeh.000webhostapp.com/input.php	chromecache_65.2.dr	false		unknown
https://static.xx.fbcdn.net/rsrc.php/v3/yW/r/AFgIDquDCzO.png");	chromecache_65.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
185.199.109.153	unknown	Netherlands		54113	FASTLYUS	true
239.255.255.250	unknown	Reserved		unknown	unknown	false
157.240.253.1	scontent.xx.fbcdn.net	United States		32934	FACEBOOKUS	false
142.250.186.132	www.google.com	United States		15169	GOOGLEUS	false
185.199.108.153	unknown	Netherlands		54113	FASTLYUS	true
185.199.110.153	unusualactivityaccountpages12.github.io	Netherlands		54113	FASTLYUS	true

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521028
Start date and time:	2024-09-28 03:18:02 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://unusualactivityaccountpages12.github.io/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.win@17/17@10/8
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.250.185.78, 142.251.168.84, 34.104.35.123, 142.250.186.74, 142.250.184.202, 142.250.185.202, 172.217.23.106, 216.58.206.42, 142.250.184.234, 142.250.181.234, 142.250.185.74, 142.250.186.138, 216.58.212.170, 142.250.185.234, 142.250.185.106, 142.250.185.138, 142.250.186.170, 172.217.16.202, 142.250.185.170, 20.114.59.183, 93.184.221.240, 192.229.221.95, 52.165.164.15, 172.217.16.195
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://unusualactivityaccountpages12.github.io/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://unusualactivityaccountpages12.github.io/ Model: jbxai	{ "brand":["facebook"], "contains_trigger_text":false, "trigger_text":"Your account will soon be deactivated because someone has reported your account as violating copyright.", "prominent_button_name":"Continue", "text_input_field_labels":["Email address or phone number", "Password"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":true, "has_visible_qrcode":false}

URL: https://unusualactivityaccountpages12.github.io/ Model: jbxai	{ "phishing_score":9, "brands":"facebook", "legit_domain":"facebook.com", "classification":"wellknown", "reasons":["The URL 'unusualactivityaccountpages12.github.io' does not match the legitimate domain 'facebook.com'.", "The domain 'github.io' is a common domain used for hosting static websites and is not associated with Facebook.", "The subdomain 'unusualactivityaccountpages12' is suspicious and not related to Facebook.", "The input fields 'Email address or phone number' and 'Password' are typical for phishing attempts targeting Facebook users."], "brand_matches":[false], "url_match":false, "brand_input":"facebook", "input_fields":"Email address or phone number, Password"}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 00:18:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9764254460290185
Encrypted:	false
SSDEEP:	48:8HdEjT84x0fHZZidAKZdA19ehwiZUklqehJy+3:8evxSrCy
MD5:	D67481C6B7DB74B13672A8440444DE00
SHA1:	FEC1DEA4014A87FF1E580D0D62D97C37EDF154EA
SHA-256:	B9EE7063A5E055601CF832DB0E7A62B8CDBF52114AD29BD672319DB1C4155557
SHA-512:	BF196DBEC329B354058E4846C33082388A9AAEFAFD890C93976E75A61C77051D85253E11081FBFDAA73F3774D7516332AC6B665784C125434C09A6E5C2291785
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...../.eD...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y\.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y\.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y\.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y\............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V<Y`............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............J.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 00:18:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9940698002882935
Encrypted:	false
SSDEEP:	48:8FdEjT84x0fHZZidAKZdA1weh/iZUkAQkqehyy+2:8AvxSZ9Qjy
MD5:	A35A2DD6C14B36F45A33D38540AF9D09
SHA1:	9027B80AF7236D9D4A1C01EC8E98710A65423404
SHA-256:	070A0E3161343505DC86B6A863F782062C5E56BBF3B2785F7EBA71C871BFCCF8
SHA-512:	738FC9D189BF8445BB9C4964C8C740577215323345434B1600789E0196F74AD0F55A6FBA73B98B10C5EB685F9F5CE613E48EF54E90BDB27EDCCD5C389712B137
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......eD...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y\.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y\.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y\.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y\............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V<Y`............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............J.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.006336153095797
Encrypted:	false
SSDEEP:	48:8xRdEjT84sHZZidAKZdA14tseh7sFiZUkmgqeh7sky+BX:8x8v6pnmy
MD5:	5E2B96351251DF8849AD0855B8714B93
SHA1:	4CAF2D6DD7D1941E64808C142369EBCE3C685FBE
SHA-256:	C19D94308A1EA815972EA01F83D4631B3453056C6B5345D3B61766E9C5067D7B
SHA-512:	C22AAE1B373C3525AE73FF01ECA238AA7811D865FA16369A208028B24D9C71350BAB5981F13A36786682748824A5E825853A3A85C1F497A9C6B9BAE4D35D1E31
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y\.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y\.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y\.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y\............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............J.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 00:18:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9916203714997036
Encrypted:	false
SSDEEP:	48:8RdEjT84x0fHZZidAKZdA1vehDiZUkwqeh+y+R:88vxS68y
MD5:	9B86DB9497515CA4D5EA9058DAF81CB4
SHA1:	BE93471E13E889BA58C5D1810A1539C3EA421B1C
SHA-256:	47EDDE7F2737BCBEA0564AF7DBB1BF808144FEE79AFA241561C9D15F78494C22
SHA-512:	DB3E72B499EC9C9C77FCB9058143C6E9FA481708EFFFF1C3E962C89B9986AA3EC4C96E29B86AAF421B4AEB6D27832AB26847889B32767D49E31334C1DEB1744F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....9.eD...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y\.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y\.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y\.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y\............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V<Y`............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............J.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 00:18:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9793787192407923
Encrypted:	false
SSDEEP:	48:89ldEjT84x0fHZZidAKZdA1hehBiZUk1W1qeh4y+C:89gvxS69Yy
MD5:	0C2C6F5F920F97C862633B74D7658FC8
SHA1:	BE892DA729748358D52B8D27927BF6FD81434A0D
SHA-256:	68F98FCB64B0D21BD38D4604CB697D48FAC11751F3D2634131BC3851E1216ED2
SHA-512:	77BDAE162B7B67DAF8E13B1C629981EFF711FDC8C911B5934AF12B395232010D6BA5861AD09F561EED5BC268A1ED3C52A48C454CD1BA169591A7D5FB99037FFF
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....'..eD...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y\.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y\.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y\.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y\............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V<Y`............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............J.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Sep 28 00:18:58 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9888604707141666
Encrypted:	false
SSDEEP:	48:8+dEjT84x0fHZZidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbmy+yT+:8NvxSET/TbxWOvTbmy7T
MD5:	C6FDDD1B16E3A6238A305C3CCDFCA2B4
SHA1:	0F0F84F74A381FDE6281698410F99FF8FD575A87
SHA-256:	4FADB38AE0AE3621C850C23311C843BA2BA5C12BDB297A82E3E1B508F67638E6
SHA-512:	4EDD8ACC7D8A2C0EC783BAB6432D89249FE4B95429F803A0D5322605C8988F140D2136FFD3856EAA4CA8F3AA124C74516C1BCBF785CFA8BBC365E709C38AD08F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....f.dD...N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I<Y\.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V<Y\.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V<Y\.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V<Y\............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V<Y`............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............J.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 60

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	dropped
Size (bytes):	5430
Entropy (8bit):	2.6465732373896285
Encrypted:	false
SSDEEP:	24:Es5ed8vZa+/kffJTyN5J5iXSvjDxatgFFjiZq1MJUikeVgl2fwFfBaTzh4mpCbak:2fq3OqXAzh4jaJV9HxG8Q
MD5:	3E764F0F737767B30A692FAB1DE3CE49
SHA1:	58FA0755A8EE455819769EE0E77C23829BF488DD
SHA-256:	88AE5454A7C32C630703440849D35C58F570D8EECC23C071DBE68D63CE6A40D7
SHA-512:	2831536A2CA9A2562B7BE1053DF21C2ED51807C9D332878CF349DC0B718D09EEB587423B488C415672C89E42D98D9A9218FACE1FCF8E773492535CB5BD67E278
Malicious:	false
Reputation:	low
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 61

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (38068), with CRLF line terminators
Category:	downloaded
Size (bytes):	573319
Entropy (8bit):	5.283389625089064
Encrypted:	false
SSDEEP:	3072:+XwLX/myWHo/Rbd/o5eqGFQDqSQuStayCpp0uz1QN+1KIo6U9U2VLTNzJnUz:Yw2oZx/oMQuSQuStaDp0uz0TNz+
MD5:	DFD1DBC0CE36FE3DBBBC28BBE82D7FDF
SHA1:	96DFAF86FB27BC36C1B604051FB422B3E67B507D
SHA-256:	84AC2481A5E38D5A974CE16F8D55DC322D38F6E021E4A45A9580091FB0AA6BD3
SHA-512:	C01D4A299FDE02F8CB59F5BE11EBCDBAF935B416A03387FEE0E2CB6A1E22FEC78CD7F3D9AE7F7D7AE723E93F977803365870E21762763D11F5861951CF5FC9DE
Malicious:	false
Reputation:	low
URL:	https://unusualactivityaccountpages12.github.io/css/cross/hidden_2.css
Preview:	form{margin:0;padding:0}label{color:#606770;cursor:default;font-weight:600;vertical-align:middle}label input{font-weight:normal}textarea,.inputtext,.inputpassword{-webkit-appearance:none;border:1px solid #ccd0d5;border-radius:0;margin:0;padding:3px}textarea{max-width:100%}select{border:1px solid #ccd0d5;padding:2px}input,select,textarea{background-color:#fff;color:#1c1e21}.inputtext,.inputpassword{padding-bottom:4px}.inputtext:invalid,.inputpassword:invalid{box-shadow:none}.inputradio{margin:0 5px 0 0;padding:0;vertical-align:middle}.inputcheckbox{border:0;vertical-align:middle}.inputbutton,.inputsubmit{background-color:#4267b2;border-color:#DADDE1 #0e1f5b #0e1f5b #d9dfea;border-style:solid;border-width:1px;color:#fff;padding:2px 15px 3px 15px;text-align:center}.inputaux{background:#ebedf0;border-color:#EBEDF0 #666 #666 #e7e7e7;color:#000}.inputsearch{background:#FFFFFF url(/rsrc.php/v3/yL/r/unHwF9CkMyM.png) no-repeat left 4px;padding-left:17px}..html{touch-action:manipulation}body{bac

Chrome Cache Entry: 62

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.2359263506290326
Encrypted:	false
SSDEEP:	3:QQinP90NY:+P1
MD5:	7CD44B2C77526F4FA4CC7FC0BB388924
SHA1:	46A26A23C8384B55BDC9012212BD4F82C341FB12
SHA-256:	803331C1A11F7BD2503BB16AA5F3EE4A448D7D47D003B371F485B3042222C283
SHA-512:	92F2005F088F928320C07487F26A293AB96107A94A2E0611262B9E30200C8FB9FE612D541737CE587C95C53BA89E43F3476CFED333301AB4E8BBDB03084D94DB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISFwmkTC4GhBOevhIFDXhvEhkSBQ3Fk8Qk?alt=proto
Preview:	ChIKBw14bxIZGgAKBw3Fk8QkGgA=

Chrome Cache Entry: 63

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (11259)
Category:	downloaded
Size (bytes):	12478
Entropy (8bit):	5.214344826279296
Encrypted:	false
SSDEEP:	384:aX7UtcW0mvWQWLiW0mvWQWkm/g0yWqKq8Rr8UUrH9I3qqhO:a7ycW0mvWQWWW0mvWQWkmYoqxA3qqhO
MD5:	03965AB9D90C48DDB7EA74C84EE32422
SHA1:	7879531FE445D83F96C360427BA13E39FD3B9E6B
SHA-256:	BFE5CD76647E20B420DA958C1A6D56EAA9D452584A76981CE897AEA8A0D163B4
SHA-512:	A1225BC339AC05BD61AD5ADB05EB46B8A2C89C65AE6A81A064A63794B1B3B857BE4157B5669DFF3A75BA06C26C32C497225CB4F3BA3BC669EED6CC15623914C9
Malicious:	false
Reputation:	low
URL:	https://unusualactivityaccountpages12.github.io/css/cross/hidden.css
Preview:	.x1lkfr7t{font-size:14px}..Gar1i5{border-top: 1px solid #dddfe2;padding: 10px 0px 10px 0px;}..rot0o{margin-top: 6px;font-size: 14px;font-weight: 400;color: #000000;font-family: Segoe UI Historic, Segoe UI, Helvetica, Arial, sans-serif;line-height: 1.1765;}..KolM4x{width: 100%;display: flex;box-sizing: border-box;padding-top: 6px;}..inPUt1{width: 100%;color: rgba(0,0,0,.85);font-size: 14px;border-radius: 6px;border-color: rgba(0,0,0,.15);border-width: 1px;padding: 11px;border-style: solid;}..inPUt1err{width: 100%;color: rgba(0,0,0,.85);font-size: 14px;border-radius: 6px;border-color: rgb(255 0 0);border-width: 1px;padding: 11px;border-style: solid;}..KolM4xBir{width: 100%;display: flex;box-sizing: border-box;margin-bottom: 37px;}..inPUt2{color: rgba(0,0,0,.85);font-size: 14px;border-radius: 6px;border-color: rgba(0,0,0,.15);border-width: 1px;padding: 10px;border-style: solid;}..spCBir{margin-right: 5px;}..BirT3X{margin-top: 5px;margin-left: 3px;margin-bottom: 1px;font-size: 14px;color:

Chrome Cache Entry: 64

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 2 icons, 16x16, 32 bits/pixel, 32x32, 32 bits/pixel
Category:	downloaded
Size (bytes):	5430
Entropy (8bit):	2.6465732373896285
Encrypted:	false
SSDEEP:	24:Es5ed8vZa+/kffJTyN5J5iXSvjDxatgFFjiZq1MJUikeVgl2fwFfBaTzh4mpCbak:2fq3OqXAzh4jaJV9HxG8Q
MD5:	3E764F0F737767B30A692FAB1DE3CE49
SHA1:	58FA0755A8EE455819769EE0E77C23829BF488DD
SHA-256:	88AE5454A7C32C630703440849D35C58F570D8EECC23C071DBE68D63CE6A40D7
SHA-512:	2831536A2CA9A2562B7BE1053DF21C2ED51807C9D332878CF349DC0B718D09EEB587423B488C415672C89E42D98D9A9218FACE1FCF8E773492535CB5BD67E278
Malicious:	false
Reputation:	low
URL:	https://unusualactivityaccountpages12.github.io/img/favicon.ico
Preview:	............ .h...&... .... .........(....... ..... ..........................................h. .f...............f...g...d.@.........................`...e...f...f...............f...f...f...e...p...............`...f...f...f...f...............f...f...f...f...f...p...........e...f...f...f...f...............f...f...f...f...f...e.......d.@.f...f...f...f...f...............f...f...f...f...f...f...h. .e...f...f...f....U..........................y'..f...f...f...g...f...f...f...f...............................U..f...f...f...f...f...f...f...f..................................f...f...f...f...f...f...f...f...f...f...............f...f...f...f...f...f...f...f...f...f...f...f...f...............p...f...f...f...f...f...f...f...f...f...f...f...f...................d...U..f...f...f...e...h. .f...f...f...f...f....d......................f...f...f...h.@.....f...f...f...f...f...f....t.................f...f...f...........p...f...f...f...f...f...f...f...f...f...f...f...f...`...............p...f...f...f...f

Chrome Cache Entry: 65

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (55670), with CRLF line terminators
Category:	downloaded
Size (bytes):	335895
Entropy (8bit):	5.394176155861614
Encrypted:	false
SSDEEP:	6144:zX+SeSPCuCs3pseSEdHEtSBYRIcHyJekXDNKKXQBdIs8hKUUDx3nrn:zX+S5PCuXpsD7tBwYJ
MD5:	65B3CF02D3BFD714A8D1C99B579D95A5
SHA1:	A1BDB8714994C393F46D6D63FC893E552386E5D0
SHA-256:	576FE8E3088FAD3B5E63BC05C776A293F5AE80CDF79C20F143710E76D4C3FEFC
SHA-512:	742A1E0746757AD3DC231FC9F5ECD80479ECC16C0563746F0DC9FBAE26A938BEB44D186D4055F238816B33744C16534DC8AD06D2C7FFE222675FB28246A81710
Malicious:	false
Reputation:	low
URL:	https://unusualactivityaccountpages12.github.io/
Preview:	<html class="__fb-light-mode" lang="en"><head><title>Community Standard</title>.. <link rel="icon" type="image/png" href="img/favicon.ico">.. <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=2,shrink-to-fit=no">.. <meta name="color-scheme" content="light">.. <meta name="theme-color" content="#FFFFFF">.. <link type="text/css" rel="stylesheet" href="css/cross/hidden.css">.. <link type="text/css" rel="stylesheet" href="css/cross/hidden_2.css">.. <style nonce=""></style>.. <style nonce="">.twbca1pg{border-bottom:solid 1px var(--fds-spectrum-teal-dark-1)}.twhas466{border-right:solid 2px}.ut7o74af{border-top:2px solid transparent}.uz2wizr7{border-bottom:2px dashed var(--divider)}.v7lbagvl{border-right:3px dashed var(--media-inner-border)}.w5o66jgc{border-bottom:5px solid transparent}.w7og4mts{border-right:2px solid var(--media-inner-border)}.xxtls0x7{border-left:solid transparent}.a1yigdvo{border-botto

Static File Info

⊘No static file info

Network Behavior

Suricata IDS Alerts

Timestamp	SID	Signature	Severity	Source IP	Source Port	Dest IP	Dest Port	Protocol
2024-09-28T03:19:00.279297+0200	2027244	ET PHISHING Request for Possible Account Phishing Hosted on Github.io	1	192.168.2.5	49711	185.199.108.153	443	TCP
2024-09-28T03:19:00.944973+0200	2027244	ET PHISHING Request for Possible Account Phishing Hosted on Github.io	1	192.168.2.5	49714	185.199.108.153	443	TCP
2024-09-28T03:19:00.958982+0200	2027244	ET PHISHING Request for Possible Account Phishing Hosted on Github.io	1	192.168.2.5	49715	185.199.108.153	443	TCP
2024-09-28T03:19:04.672165+0200	2027244	ET PHISHING Request for Possible Account Phishing Hosted on Github.io	1	192.168.2.5	49721	185.199.108.153	443	TCP
2024-09-28T03:19:05.520396+0200	2027244	ET PHISHING Request for Possible Account Phishing Hosted on Github.io	1	192.168.2.5	49722	185.199.109.153	443	TCP

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 28, 2024 03:18:51.102077007 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 28, 2024 03:18:51.102082968 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 28, 2024 03:18:51.195812941 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 28, 2024 03:18:59.281712055 CEST	49709	80	192.168.2.5	185.199.110.153
Sep 28, 2024 03:18:59.281864882 CEST	49710	80	192.168.2.5	185.199.110.153
Sep 28, 2024 03:18:59.286592960 CEST	80	49709	185.199.110.153	192.168.2.5
Sep 28, 2024 03:18:59.286606073 CEST	80	49710	185.199.110.153	192.168.2.5
Sep 28, 2024 03:18:59.286679983 CEST	49709	80	192.168.2.5	185.199.110.153
Sep 28, 2024 03:18:59.286679983 CEST	49710	80	192.168.2.5	185.199.110.153
Sep 28, 2024 03:18:59.297755957 CEST	49709	80	192.168.2.5	185.199.110.153
Sep 28, 2024 03:18:59.302598000 CEST	80	49709	185.199.110.153	192.168.2.5
Sep 28, 2024 03:18:59.768241882 CEST	80	49709	185.199.110.153	192.168.2.5
Sep 28, 2024 03:18:59.799520969 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:18:59.799648046 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:18:59.799757004 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:18:59.800020933 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:18:59.800055981 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:18:59.809897900 CEST	49709	80	192.168.2.5	185.199.110.153
Sep 28, 2024 03:19:00.278937101 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.279297113 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.279330015 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.280369997 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.280595064 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.281647921 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.281729937 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.281932116 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.281939030 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.322213888 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.399490118 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.399555922 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.399585009 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.399610043 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.399693012 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.399761915 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.399794102 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.399817944 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.399857998 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.399871111 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.399871111 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.399871111 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.399871111 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.399899960 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.399940014 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.400707006 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.407164097 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.407290936 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.407313108 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.450634003 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.472218990 CEST	49714	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.472244978 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.472343922 CEST	49714	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.472840071 CEST	49714	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.472851038 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.473768950 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.473840952 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.473912001 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.474181890 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.474194050 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.491249084 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.491282940 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.491331100 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.491367102 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.491417885 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.491440058 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.491456032 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.491513014 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.581100941 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.581127882 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.581288099 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.581316948 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.581366062 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.581552982 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.581567049 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.581619024 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.581626892 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.581669092 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.583357096 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.583372116 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.583439112 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.583445072 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.583482981 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.585112095 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.585129976 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.585207939 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.585215092 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.585258961 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.672269106 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.672316074 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.672451019 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.672487020 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.672525883 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.672574043 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.672579050 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.672609091 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.672620058 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.672646046 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.672672033 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.673018932 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.673063040 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.673100948 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.673114061 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.673157930 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.673180103 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.674487114 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.674527884 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.674576998 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.674588919 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.674623966 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.674647093 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.711060047 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 28, 2024 03:19:00.711064100 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 28, 2024 03:19:00.720599890 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.720616102 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.720777035 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.720803976 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.720865011 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.762551069 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.762568951 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.762711048 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.762722969 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.762763977 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.763427973 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.763442993 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.763500929 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.763505936 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.763544083 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.763829947 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.763844013 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.763910055 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.763916016 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.763956070 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.763973951 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.764604092 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.764617920 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.764694929 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.764698982 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.764734983 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.765470982 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.765486002 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.765542984 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.765547991 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.765585899 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.765775919 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.765789032 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.765836000 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.765841007 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.765877008 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.766556978 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.766571045 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.766612053 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.766616106 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.766652107 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.804769993 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 28, 2024 03:19:00.811353922 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.811395884 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.811486006 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.811523914 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.811548948 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.811573029 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.853106976 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.853132963 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.853174925 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.853209972 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.853225946 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.853250980 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.853321075 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.853374004 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.853382111 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.853406906 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.853458881 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.928294897 CEST	49711	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.928342104 CEST	443	49711	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.943941116 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.944972992 CEST	49714	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.944993019 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.945508957 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.948527098 CEST	49714	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.948626995 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.952460051 CEST	49714	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.958285093 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.958981991 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.959018946 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.960210085 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.963866949 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.964046001 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:00.964740038 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:00.999402046 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.007412910 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.079757929 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.079843044 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.079874992 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.079895973 CEST	49714	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.079917908 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.079951048 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.079957962 CEST	49714	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.079963923 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.080013037 CEST	49714	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.080312967 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.080378056 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.080418110 CEST	49714	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.080424070 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.080847979 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.080895901 CEST	49714	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.080900908 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.086004019 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.086076021 CEST	49714	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.201020002 CEST	49714	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.201052904 CEST	443	49714	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.428813934 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.429020882 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.429049969 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.429071903 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.429085016 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.429122925 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.429146051 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.429548979 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.429577112 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.429589033 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.429593086 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.429629087 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.429632902 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.433775902 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.433805943 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.433816910 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.433820963 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.433856964 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.445566893 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.492425919 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.521615982 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.521680117 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.521703005 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.521734953 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.521740913 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.521750927 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.521773100 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.521820068 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.521857023 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.521862984 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.521965027 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.521992922 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.522001982 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.522007942 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.522046089 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.522049904 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.522530079 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.522558928 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.522568941 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.522572994 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.522610903 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.522655010 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.522699118 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.522725105 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.522749901 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.522753954 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.522795916 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.523411036 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.523463964 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.523495913 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.523504972 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.523510933 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.523545980 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.523550034 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.570446968 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.570461988 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.617008924 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.629204035 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.629219055 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.629240036 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.629246950 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.629268885 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.629383087 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.629398108 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.629470110 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.630109072 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.630116940 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.630137920 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.630160093 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.630244970 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.630253077 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.630290985 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.631856918 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.631874084 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.631980896 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.631985903 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.632030964 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.645860910 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.645879030 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.645977974 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.645987988 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.646033049 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.721824884 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.721851110 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.721925974 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.721940994 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.721976042 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.722537041 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.722575903 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.722693920 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.722697973 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.722733021 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.723020077 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.723032951 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.723076105 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.723081112 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.723109007 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.723124981 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.723870039 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.723885059 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.723922968 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.723927975 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.723965883 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.723980904 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.724795103 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.724814892 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.724857092 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.724860907 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.724889040 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.724905014 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.738367081 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.738393068 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.738476038 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.738488913 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.738533020 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.772804976 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.813898087 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.813920975 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.813994884 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.814003944 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.814038992 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.814233065 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.814269066 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.814291000 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.814296007 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.814325094 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.814344883 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.814614058 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.814630985 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.814683914 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.814688921 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.814722061 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.815095901 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.815125942 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.815157890 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.815162897 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.815191984 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.815212011 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.815684080 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.815699100 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.815767050 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.815772057 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.815807104 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.818769932 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.818789005 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.818840981 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.818846941 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.818886995 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.819233894 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.819263935 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.819289923 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.819295883 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.819323063 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.819336891 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.830874920 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.830892086 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.831018925 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.831026077 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.831186056 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.833700895 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.835069895 CEST	49716	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:19:01.835124016 CEST	443	49716	142.250.186.132	192.168.2.5
Sep 28, 2024 03:19:01.835221052 CEST	49716	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:19:01.835587025 CEST	49716	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:19:01.835604906 CEST	443	49716	142.250.186.132	192.168.2.5
Sep 28, 2024 03:19:01.906501055 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.906538963 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.906718969 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.906769991 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.907079935 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.907079935 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.907090902 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.907155991 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.907167912 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.907174110 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.907223940 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.907433987 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.907454967 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.907530069 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.907533884 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.907682896 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.907699108 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.907743931 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.907748938 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.907783031 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.907922983 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.907936096 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.907979965 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.907985926 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.908016920 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.923449993 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.923479080 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.923639059 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.923639059 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.923654079 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.934401035 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.998909950 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.998928070 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.999073029 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.999083042 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.999171019 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.999186993 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.999316931 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.999329090 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.999352932 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.999352932 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.999358892 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.999377966 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.999624014 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.999638081 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.999674082 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.999684095 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.999701023 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.999875069 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.999886990 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:01.999928951 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:01.999933958 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:02.000123024 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:02.000135899 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:02.000180006 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:02.000185013 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:02.000233889 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:02.000272989 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:02.074280024 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:02.084441900 CEST	49715	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:02.084460020 CEST	443	49715	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:02.330274105 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:02.330307007 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:02.330570936 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:02.332287073 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:02.332300901 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:02.484055996 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 28, 2024 03:19:02.484165907 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 28, 2024 03:19:02.495275021 CEST	443	49716	142.250.186.132	192.168.2.5
Sep 28, 2024 03:19:02.495594978 CEST	49716	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:19:02.495608091 CEST	443	49716	142.250.186.132	192.168.2.5
Sep 28, 2024 03:19:02.496808052 CEST	443	49716	142.250.186.132	192.168.2.5
Sep 28, 2024 03:19:02.496876955 CEST	49716	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:19:02.516290903 CEST	49716	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:19:02.516556978 CEST	443	49716	142.250.186.132	192.168.2.5
Sep 28, 2024 03:19:02.558548927 CEST	49716	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:19:02.558559895 CEST	443	49716	142.250.186.132	192.168.2.5
Sep 28, 2024 03:19:02.602317095 CEST	49716	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:19:02.755486012 CEST	49718	443	192.168.2.5	157.240.253.1
Sep 28, 2024 03:19:02.755522013 CEST	443	49718	157.240.253.1	192.168.2.5
Sep 28, 2024 03:19:02.755578995 CEST	49718	443	192.168.2.5	157.240.253.1
Sep 28, 2024 03:19:02.756947994 CEST	49718	443	192.168.2.5	157.240.253.1
Sep 28, 2024 03:19:02.756961107 CEST	443	49718	157.240.253.1	192.168.2.5
Sep 28, 2024 03:19:02.985085011 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:02.985168934 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:03.000089884 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:03.000107050 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:03.000296116 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:03.041069984 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:03.124924898 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:03.167393923 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:03.311297894 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:03.311777115 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:03.311794043 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:03.311806917 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:03.311933041 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:03.311968088 CEST	443	49717	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:03.312006950 CEST	49717	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:03.374322891 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:03.374387980 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:03.374653101 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:03.375300884 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:03.375318050 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:03.423455000 CEST	443	49718	157.240.253.1	192.168.2.5
Sep 28, 2024 03:19:03.423801899 CEST	49718	443	192.168.2.5	157.240.253.1
Sep 28, 2024 03:19:03.423821926 CEST	443	49718	157.240.253.1	192.168.2.5
Sep 28, 2024 03:19:03.425009012 CEST	443	49718	157.240.253.1	192.168.2.5
Sep 28, 2024 03:19:03.425082922 CEST	49718	443	192.168.2.5	157.240.253.1
Sep 28, 2024 03:19:03.426798105 CEST	49718	443	192.168.2.5	157.240.253.1
Sep 28, 2024 03:19:03.426863909 CEST	443	49718	157.240.253.1	192.168.2.5
Sep 28, 2024 03:19:03.427192926 CEST	49718	443	192.168.2.5	157.240.253.1
Sep 28, 2024 03:19:03.427201033 CEST	443	49718	157.240.253.1	192.168.2.5
Sep 28, 2024 03:19:03.477261066 CEST	49718	443	192.168.2.5	157.240.253.1
Sep 28, 2024 03:19:03.882457972 CEST	443	49718	157.240.253.1	192.168.2.5
Sep 28, 2024 03:19:03.882657051 CEST	443	49718	157.240.253.1	192.168.2.5
Sep 28, 2024 03:19:03.882756948 CEST	443	49718	157.240.253.1	192.168.2.5
Sep 28, 2024 03:19:03.882781029 CEST	49718	443	192.168.2.5	157.240.253.1
Sep 28, 2024 03:19:03.882801056 CEST	49718	443	192.168.2.5	157.240.253.1
Sep 28, 2024 03:19:03.884001970 CEST	49718	443	192.168.2.5	157.240.253.1
Sep 28, 2024 03:19:03.884026051 CEST	443	49718	157.240.253.1	192.168.2.5
Sep 28, 2024 03:19:04.118241072 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:04.118379116 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:04.119931936 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:04.119941950 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:04.120186090 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:04.121357918 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:04.163403034 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:04.169243097 CEST	49721	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:04.169374943 CEST	443	49721	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:04.169837952 CEST	49721	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:04.170480013 CEST	49721	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:04.170516014 CEST	443	49721	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:04.393218040 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:04.393280029 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:04.393615961 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:04.671838999 CEST	443	49721	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:04.672164917 CEST	49721	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:04.672193050 CEST	443	49721	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:04.672564030 CEST	443	49721	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:04.672947884 CEST	49721	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:04.673006058 CEST	443	49721	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:04.673217058 CEST	49721	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:04.715445042 CEST	443	49721	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:04.732991934 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:04.733028889 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:04.733042955 CEST	49720	443	192.168.2.5	184.28.90.27
Sep 28, 2024 03:19:04.733050108 CEST	443	49720	184.28.90.27	192.168.2.5
Sep 28, 2024 03:19:04.813906908 CEST	443	49721	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:04.813987970 CEST	443	49721	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:04.814013958 CEST	443	49721	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:04.814049006 CEST	443	49721	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:04.814059973 CEST	49721	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:04.814088106 CEST	443	49721	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:04.814104080 CEST	49721	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:04.814126968 CEST	443	49721	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:04.814171076 CEST	49721	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:04.817369938 CEST	49721	443	192.168.2.5	185.199.108.153
Sep 28, 2024 03:19:04.817384958 CEST	443	49721	185.199.108.153	192.168.2.5
Sep 28, 2024 03:19:05.007905960 CEST	49722	443	192.168.2.5	185.199.109.153
Sep 28, 2024 03:19:05.007961988 CEST	443	49722	185.199.109.153	192.168.2.5
Sep 28, 2024 03:19:05.008028984 CEST	49722	443	192.168.2.5	185.199.109.153
Sep 28, 2024 03:19:05.008426905 CEST	49722	443	192.168.2.5	185.199.109.153
Sep 28, 2024 03:19:05.008445024 CEST	443	49722	185.199.109.153	192.168.2.5
Sep 28, 2024 03:19:05.495853901 CEST	443	49722	185.199.109.153	192.168.2.5
Sep 28, 2024 03:19:05.520395994 CEST	49722	443	192.168.2.5	185.199.109.153
Sep 28, 2024 03:19:05.520430088 CEST	443	49722	185.199.109.153	192.168.2.5
Sep 28, 2024 03:19:05.521683931 CEST	443	49722	185.199.109.153	192.168.2.5
Sep 28, 2024 03:19:05.521754026 CEST	49722	443	192.168.2.5	185.199.109.153
Sep 28, 2024 03:19:05.522592068 CEST	49722	443	192.168.2.5	185.199.109.153
Sep 28, 2024 03:19:05.522701979 CEST	443	49722	185.199.109.153	192.168.2.5
Sep 28, 2024 03:19:05.522950888 CEST	49722	443	192.168.2.5	185.199.109.153
Sep 28, 2024 03:19:05.522958040 CEST	443	49722	185.199.109.153	192.168.2.5
Sep 28, 2024 03:19:05.572551966 CEST	49722	443	192.168.2.5	185.199.109.153
Sep 28, 2024 03:19:05.626215935 CEST	443	49722	185.199.109.153	192.168.2.5
Sep 28, 2024 03:19:05.626274109 CEST	443	49722	185.199.109.153	192.168.2.5
Sep 28, 2024 03:19:05.626305103 CEST	443	49722	185.199.109.153	192.168.2.5
Sep 28, 2024 03:19:05.626324892 CEST	49722	443	192.168.2.5	185.199.109.153
Sep 28, 2024 03:19:05.626339912 CEST	443	49722	185.199.109.153	192.168.2.5
Sep 28, 2024 03:19:05.626352072 CEST	443	49722	185.199.109.153	192.168.2.5
Sep 28, 2024 03:19:05.626383066 CEST	49722	443	192.168.2.5	185.199.109.153
Sep 28, 2024 03:19:05.626425028 CEST	443	49722	185.199.109.153	192.168.2.5
Sep 28, 2024 03:19:05.626480103 CEST	49722	443	192.168.2.5	185.199.109.153
Sep 28, 2024 03:19:05.628328085 CEST	49722	443	192.168.2.5	185.199.109.153
Sep 28, 2024 03:19:05.628379107 CEST	443	49722	185.199.109.153	192.168.2.5
Sep 28, 2024 03:19:12.393728018 CEST	443	49716	142.250.186.132	192.168.2.5
Sep 28, 2024 03:19:12.393832922 CEST	443	49716	142.250.186.132	192.168.2.5
Sep 28, 2024 03:19:12.393914938 CEST	49716	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:19:13.901360989 CEST	49716	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:19:13.901398897 CEST	443	49716	142.250.186.132	192.168.2.5
Sep 28, 2024 03:19:44.289266109 CEST	49710	80	192.168.2.5	185.199.110.153
Sep 28, 2024 03:19:44.294161081 CEST	80	49710	185.199.110.153	192.168.2.5
Sep 28, 2024 03:19:44.773920059 CEST	49709	80	192.168.2.5	185.199.110.153
Sep 28, 2024 03:19:44.778887987 CEST	80	49709	185.199.110.153	192.168.2.5
Sep 28, 2024 03:19:59.955887079 CEST	49710	80	192.168.2.5	185.199.110.153
Sep 28, 2024 03:19:59.960956097 CEST	80	49710	185.199.110.153	192.168.2.5
Sep 28, 2024 03:19:59.961031914 CEST	49710	80	192.168.2.5	185.199.110.153
Sep 28, 2024 03:20:01.728643894 CEST	49734	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:20:01.728696108 CEST	443	49734	142.250.186.132	192.168.2.5
Sep 28, 2024 03:20:01.728859901 CEST	49734	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:20:01.729188919 CEST	49734	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:20:01.729202986 CEST	443	49734	142.250.186.132	192.168.2.5
Sep 28, 2024 03:20:02.378065109 CEST	443	49734	142.250.186.132	192.168.2.5
Sep 28, 2024 03:20:02.378587961 CEST	49734	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:20:02.378613949 CEST	443	49734	142.250.186.132	192.168.2.5
Sep 28, 2024 03:20:02.378937960 CEST	443	49734	142.250.186.132	192.168.2.5
Sep 28, 2024 03:20:02.379407883 CEST	49734	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:20:02.379483938 CEST	443	49734	142.250.186.132	192.168.2.5
Sep 28, 2024 03:20:02.430310965 CEST	49734	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:20:12.315491915 CEST	443	49734	142.250.186.132	192.168.2.5
Sep 28, 2024 03:20:12.315556049 CEST	443	49734	142.250.186.132	192.168.2.5
Sep 28, 2024 03:20:12.315706015 CEST	49734	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:20:14.094759941 CEST	49734	443	192.168.2.5	142.250.186.132
Sep 28, 2024 03:20:14.094789028 CEST	443	49734	142.250.186.132	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 28, 2024 03:18:57.712110996 CEST	53	57568	1.1.1.1	192.168.2.5
Sep 28, 2024 03:18:57.732867956 CEST	53	61131	1.1.1.1	192.168.2.5
Sep 28, 2024 03:18:58.704464912 CEST	53	56516	1.1.1.1	192.168.2.5
Sep 28, 2024 03:18:59.261420012 CEST	52500	53	192.168.2.5	1.1.1.1
Sep 28, 2024 03:18:59.261542082 CEST	53664	53	192.168.2.5	1.1.1.1
Sep 28, 2024 03:18:59.269658089 CEST	53	53664	1.1.1.1	192.168.2.5
Sep 28, 2024 03:18:59.270849943 CEST	53	52500	1.1.1.1	192.168.2.5
Sep 28, 2024 03:18:59.788558006 CEST	61261	53	192.168.2.5	1.1.1.1
Sep 28, 2024 03:18:59.788867950 CEST	55734	53	192.168.2.5	1.1.1.1
Sep 28, 2024 03:18:59.797271967 CEST	53	55734	1.1.1.1	192.168.2.5
Sep 28, 2024 03:18:59.797643900 CEST	53	61261	1.1.1.1	192.168.2.5
Sep 28, 2024 03:19:01.788084984 CEST	57597	53	192.168.2.5	1.1.1.1
Sep 28, 2024 03:19:01.788696051 CEST	51984	53	192.168.2.5	1.1.1.1
Sep 28, 2024 03:19:01.794823885 CEST	53	57597	1.1.1.1	192.168.2.5
Sep 28, 2024 03:19:01.795428038 CEST	53	51984	1.1.1.1	192.168.2.5
Sep 28, 2024 03:19:02.742564917 CEST	63723	53	192.168.2.5	1.1.1.1
Sep 28, 2024 03:19:02.747932911 CEST	54112	53	192.168.2.5	1.1.1.1
Sep 28, 2024 03:19:02.749082088 CEST	53	63723	1.1.1.1	192.168.2.5
Sep 28, 2024 03:19:02.754678965 CEST	53	54112	1.1.1.1	192.168.2.5
Sep 28, 2024 03:19:02.755621910 CEST	53	58919	1.1.1.1	192.168.2.5
Sep 28, 2024 03:19:04.974564075 CEST	49444	53	192.168.2.5	1.1.1.1
Sep 28, 2024 03:19:04.975605011 CEST	59791	53	192.168.2.5	1.1.1.1
Sep 28, 2024 03:19:04.983115911 CEST	53	49444	1.1.1.1	192.168.2.5
Sep 28, 2024 03:19:04.983695984 CEST	53	59791	1.1.1.1	192.168.2.5
Sep 28, 2024 03:19:15.798811913 CEST	53	51602	1.1.1.1	192.168.2.5
Sep 28, 2024 03:19:34.596581936 CEST	53	64525	1.1.1.1	192.168.2.5
Sep 28, 2024 03:19:57.239154100 CEST	53	51647	1.1.1.1	192.168.2.5
Sep 28, 2024 03:19:57.759322882 CEST	53	50902	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 28, 2024 03:18:59.261420012 CEST	192.168.2.5	1.1.1.1	0x39aa	Standard query (0)	unusualactivityaccountpages12.github.io	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:18:59.261542082 CEST	192.168.2.5	1.1.1.1	0x4555	Standard query (0)	unusualactivityaccountpages12.github.io	65	IN (0x0001)	false
Sep 28, 2024 03:18:59.788558006 CEST	192.168.2.5	1.1.1.1	0x57cd	Standard query (0)	unusualactivityaccountpages12.github.io	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:18:59.788867950 CEST	192.168.2.5	1.1.1.1	0x14a7	Standard query (0)	unusualactivityaccountpages12.github.io	65	IN (0x0001)	false
Sep 28, 2024 03:19:01.788084984 CEST	192.168.2.5	1.1.1.1	0x5d6c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:19:01.788696051 CEST	192.168.2.5	1.1.1.1	0x23e5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 28, 2024 03:19:02.742564917 CEST	192.168.2.5	1.1.1.1	0xe48	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:19:02.747932911 CEST	192.168.2.5	1.1.1.1	0x2bbc	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Sep 28, 2024 03:19:04.974564075 CEST	192.168.2.5	1.1.1.1	0xdca2	Standard query (0)	unusualactivityaccountpages12.github.io	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:19:04.975605011 CEST	192.168.2.5	1.1.1.1	0x665	Standard query (0)	unusualactivityaccountpages12.github.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 28, 2024 03:18:59.270849943 CEST	1.1.1.1	192.168.2.5	0x39aa	No error (0)	unusualactivityaccountpages12.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:18:59.270849943 CEST	1.1.1.1	192.168.2.5	0x39aa	No error (0)	unusualactivityaccountpages12.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:18:59.270849943 CEST	1.1.1.1	192.168.2.5	0x39aa	No error (0)	unusualactivityaccountpages12.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:18:59.270849943 CEST	1.1.1.1	192.168.2.5	0x39aa	No error (0)	unusualactivityaccountpages12.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:18:59.797643900 CEST	1.1.1.1	192.168.2.5	0x57cd	No error (0)	unusualactivityaccountpages12.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:18:59.797643900 CEST	1.1.1.1	192.168.2.5	0x57cd	No error (0)	unusualactivityaccountpages12.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:18:59.797643900 CEST	1.1.1.1	192.168.2.5	0x57cd	No error (0)	unusualactivityaccountpages12.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:18:59.797643900 CEST	1.1.1.1	192.168.2.5	0x57cd	No error (0)	unusualactivityaccountpages12.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:19:01.794823885 CEST	1.1.1.1	192.168.2.5	0x5d6c	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:19:01.795428038 CEST	1.1.1.1	192.168.2.5	0x23e5	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 28, 2024 03:19:02.749082088 CEST	1.1.1.1	192.168.2.5	0xe48	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 03:19:02.749082088 CEST	1.1.1.1	192.168.2.5	0xe48	No error (0)	scontent.xx.fbcdn.net		157.240.253.1	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:19:02.754678965 CEST	1.1.1.1	192.168.2.5	0x2bbc	No error (0)	static.xx.fbcdn.net	scontent.xx.fbcdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 03:19:02.754678965 CEST	1.1.1.1	192.168.2.5	0x2bbc	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Sep 28, 2024 03:19:02.754678965 CEST	1.1.1.1	192.168.2.5	0x2bbc	No error (0)	scontent.xx.fbcdn.net			65	IN (0x0001)	false
Sep 28, 2024 03:19:04.983115911 CEST	1.1.1.1	192.168.2.5	0xdca2	No error (0)	unusualactivityaccountpages12.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:19:04.983115911 CEST	1.1.1.1	192.168.2.5	0xdca2	No error (0)	unusualactivityaccountpages12.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:19:04.983115911 CEST	1.1.1.1	192.168.2.5	0xdca2	No error (0)	unusualactivityaccountpages12.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:19:04.983115911 CEST	1.1.1.1	192.168.2.5	0xdca2	No error (0)	unusualactivityaccountpages12.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:19:11.073362112 CEST	1.1.1.1	192.168.2.5	0x23b9	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 03:19:11.073362112 CEST	1.1.1.1	192.168.2.5	0x23b9	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:19:24.626028061 CEST	1.1.1.1	192.168.2.5	0xf970	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 03:19:24.626028061 CEST	1.1.1.1	192.168.2.5	0xf970	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:19:49.750844002 CEST	1.1.1.1	192.168.2.5	0xb004	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 03:19:49.750844002 CEST	1.1.1.1	192.168.2.5	0xb004	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 28, 2024 03:20:10.938251019 CEST	1.1.1.1	192.168.2.5	0xfa1a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 28, 2024 03:20:10.938251019 CEST	1.1.1.1	192.168.2.5	0xfa1a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

unusualactivityaccountpages12.github.io

https:

static.xx.fbcdn.net

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49709	185.199.110.153	80	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 28, 2024 03:18:59.297755957 CEST	454	OUT	GET / HTTP/1.1 Host: unusualactivityaccountpages12.github.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Sep 28, 2024 03:18:59.768241882 CEST	727	IN	HTTP/1.1 301 Moved Permanently Connection: keep-alive Content-Length: 162 Server: GitHub.com Content-Type: text/html permissions-policy: interest-cohort=() Location: https://unusualactivityaccountpages12.github.io/ X-GitHub-Request-Id: 9FAF:23A7CB:17224B3:195067F:66F74C4A Accept-Ranges: bytes Age: 3384 Date: Sat, 28 Sep 2024 01:18:59 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740049-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1727486340.702015,VS0,VE1 Vary: Accept-Encoding X-Fastly-Request-ID: 2809466b0c823c3526c4dec6ba002a3d23d5b41f Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx</center></body></html>
Sep 28, 2024 03:19:44.773920059 CEST	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49710	185.199.110.153	80	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Sep 28, 2024 03:19:44.289266109 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49711	185.199.108.153	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:19:00 UTC	682	OUT	GET / HTTP/1.1 Host: unusualactivityaccountpages12.github.io Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:19:00 UTC	738	IN	HTTP/1.1 200 OK Connection: close Content-Length: 335895 Server: GitHub.com Content-Type: text/html; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 14 Jan 2024 16:23:50 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "65a40a96-52017" expires: Sat, 28 Sep 2024 01:29:00 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: EDA6:277281:13E933F:15F96C9:66F75984 Accept-Ranges: bytes Date: Sat, 28 Sep 2024 01:19:00 GMT Via: 1.1 varnish Age: 0 X-Served-By: cache-ewr-kewr1740040-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727486340.331685,VS0,VE19 Vary: Accept-Encoding X-Fastly-Request-ID: 165cbd2b93c613712c69ff4cd4c1303c790d7242
2024-09-28 01:19:00 UTC	1378	IN	Data Raw: 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 5f 5f 66 62 2d 6c 69 67 68 74 2d 6d 6f 64 65 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 43 6f 6d 6d 75 6e 69 74 79 20 53 74 61 6e 64 61 72 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 70 6e 67 22 20 68 72 65 66 3d 22 69 6d 67 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 32 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 Data Ascii: <html class="__fb-light-mode" lang="en"><head><title>Community Standard</title> <link rel="icon" type="image/png" href="img/favicon.ico"> <meta name="viewport" content="width=device-width,initial-scale=1,maximum-scale=2,shrink-to-fit=no"
2024-09-28 01:19:00 UTC	1378	IN	Data Raw: 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 64 73 2d 73 70 65 63 74 72 75 6d 2d 74 65 61 6c 2d 64 61 72 6b 2d 31 29 7d 2e 61 66 64 31 69 64 70 71 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 73 65 2d 67 72 61 70 65 29 7d 2e 61 66 64 7a 79 6c 35 61 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 31 29 7d 2e 61 66 77 6d 6c 32 75 69 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 31 29 7d 2e 61 66 78 73 70 39 6f 34 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 31 70 78 7d 2e 61 67 65 68 61 6e 32 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 30 7d 2e 61 67 Data Ascii: rder-bottom-color:var(--fds-spectrum-teal-dark-1)}.afd1idpq{border-top-color:var(--base-grape)}.afdzyl5a{border-right-color:var(--shadow-1)}.afwml2ui{border-bottom-color:var(--shadow-1)}.afxsp9o4{border-bottom-width:1px}.agehan2d{border-bottom-width:0}.ag
2024-09-28 01:19:00 UTC	1378	IN	Data Raw: 2e 6e 37 70 34 35 73 63 31 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 61 73 65 2d 63 68 65 72 72 79 29 7d 2e 6e 38 65 6a 33 6f 33 6c 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 77 69 64 74 68 3a 30 7d 2e 6e 61 6c 6d 36 33 6e 78 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 61 73 68 29 7d 2e 6e 63 77 6e 6a 76 64 70 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 62 75 74 74 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 6e 67 34 6f 65 73 39 77 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 61 63 63 65 6e 74 29 7d 2e 6e 69 78 7a 69 36 79 71 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 32 2e 37 35 70 78 Data Ascii: .n7p45sc1{border-top-color:var(--base-cherry)}.n8ej3o3l{border-right-width:0}.nalm63nx{border-bottom-color:var(--wash)}.ncwnjvdp{border-top-color:var(--secondary-button-background)}.ng4oes9w{border-top-color:var(--accent)}.nixzi6yq{border-top-width:2.75px
2024-09-28 01:19:00 UTC	1378	IN	Data Raw: 29 7d 2e 6f 6c 33 6f 39 69 7a 64 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 69 67 68 6c 69 67 68 74 2d 62 67 29 7d 2e 6f 6d 36 34 32 69 31 77 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 33 30 70 78 7d 2e 6f 6d 66 6a 36 75 35 78 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 7d 2e 6f 6d 75 36 72 6f 62 63 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 74 68 69 6e 7d 2e 6f 6e 61 30 75 76 71 30 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 23 31 61 31 61 31 61 7d 2e 6f 6f 6e 6d 32 73 72 6d 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 23 66 64 62 33 32 61 7d 2e 6f 6f 71 38 34 35 78 73 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 76 61 72 28 Data Ascii: )}.ol3o9izd{border-left-color:var(--highlight-bg)}.om642i1w{border-top-width:30px}.omfj6u5x{border-right-style:none}.omu6robc{border-left-width:thin}.ona0uvq0{border-top-color:#1a1a1a}.oonm2srm{border-right-color:#fdb32a}.ooq845xs{border-bottom-color:var(
2024-09-28 01:19:00 UTC	1378	IN	Data Raw: 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 72 37 70 35 73 35 32 7a 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 32 2e 37 35 70 78 7d 2e 72 39 6b 68 67 77 66 72 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 32 2e 35 70 78 7d 2e 72 62 79 71 37 72 67 35 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 61 73 68 29 7d 2e 72 65 39 32 67 78 69 35 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 77 69 64 74 68 3a 34 31 70 78 7d 2e 72 68 34 70 7a 63 6a 7a 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 76 61 72 28 2d 2d 61 6c 77 61 79 73 2d 77 68 69 74 65 29 2c 2e 33 29 7d 2e 72 68 35 37 31 6f 61 34 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 Data Ascii: :transparent}.r7p5s52z{border-left-width:2.75px}.r9khgwfr{border-top-width:2.5px}.rbyq7rg5{border-left-color:var(--wash)}.re92gxi5{border-top-width:41px}.rh4pzcjz{border-left-color:rgba(var(--always-white),.3)}.rh571oa4{border-bottom-color:var(--primary-t
2024-09-28 01:19:00 UTC	1378	IN	Data Raw: 6f 79 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 64 73 2d 67 72 65 65 6e 2d 35 35 29 7d 2e 74 34 6c 36 39 72 32 32 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 77 65 62 2d 77 61 73 68 29 7d 2e 74 35 31 73 34 71 73 32 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6d 65 64 69 61 2d 69 6e 6e 65 72 2d 62 6f 72 64 65 72 29 7d 2e 74 35 39 6f 77 39 64 37 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 70 72 65 73 73 65 64 29 7d 2e 74 35 66 6e 36 71 30 74 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 68 69 67 68 6c 69 67 68 74 2d 62 67 29 7d 2e 74 39 36 79 61 6d 71 34 Data Ascii: oy{border-left-color:var(--fds-green-55)}.t4l69r22{border-right-color:var(--web-wash)}.t51s4qs2{border-top-color:var(--media-inner-border)}.t59ow9d7{border-top-color:var(--primary-button-pressed)}.t5fn6q0t{border-bottom-color:var(--highlight-bg)}.t96yamq4
2024-09-28 01:19:00 UTC	1378	IN	Data Raw: 69 77 65 61 74 68 65 72 2c 4f 70 74 69 6d 69 73 74 69 63 20 44 69 73 70 6c 61 79 20 4c 69 67 68 74 2c 73 79 73 74 65 6d 2d 75 69 2c 73 61 6e 73 2d 73 65 72 69 66 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 61 31 63 63 65 65 36 66 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 38 34 70 78 7d 2e 61 31 72 6a 65 76 6e 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 66 64 73 2d 62 6c 61 63 6b 2d 61 6c 70 68 61 2d 38 30 29 7d 2e 61 31 77 66 70 39 6b 66 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 38 70 78 7d 2e 61 31 78 75 31 61 61 6f 7b 6d 61 78 2d 77 69 64 74 68 3a 63 61 6c 63 28 31 30 30 25 20 2d 20 76 61 72 28 2d 2d 6d 77 70 2d 6d 65 73 73 61 67 65 2d 6c 69 73 74 2d 61 63 74 69 6f 6e 73 2d 77 69 64 74 68 2c 36 32 70 78 29 20 2d 20 35 70 78 29 7d 2e Data Ascii: iweather,Optimistic Display Light,system-ui,sans-serif!important}.a1ccee6f{min-height:184px}.a1rjevna{background-color:var(--fds-black-alpha-80)}.a1wfp9kf{margin-left:88px}.a1xu1aao{max-width:calc(100% - var(--mwp-message-list-actions-width,62px) - 5px)}.
2024-09-28 01:19:00 UTC	1378	IN	Data Raw: 65 66 74 3a 6c 65 66 74 7d 0d 0a 20 20 20 20 20 20 20 20 2e 61 35 79 30 71 66 31 63 7b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 73 61 74 75 72 61 74 65 28 30 29 7d 0d 0a 20 20 20 20 20 20 20 20 2e 61 35 7a 6a 67 69 79 6b 7b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 6c 69 6e 65 61 72 7d 0d 0a 20 20 20 20 20 20 20 20 2e 6f 30 74 32 65 73 30 30 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 72 65 6d 7d 0d 0a 20 20 20 20 20 20 20 20 2e 6f 30 78 74 33 6e 38 62 7b 6d 61 78 2d 77 69 64 74 68 3a 34 38 30 70 78 7d 0d 0a 20 20 20 20 20 20 20 20 2e 6f 31 33 37 6d 6c 6b 77 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 33 70 78 7d 0d 0a 20 20 20 20 20 20 20 20 2e 61 36 34 7a 67 38 71 66 7b 6d 61 78 2d 77 69 64 74 68 3a 33 39 37 70 78 7d 2e Data Ascii: eft:left} .a5y0qf1c{-webkit-filter:saturate(0)} .a5zjgiyk{animation-timing-function:linear} .o0t2es00{font-size:1.3rem} .o0xt3n8b{max-width:480px} .o137mlkw{min-height:63px} .a64zg8qf{max-width:397px}.
2024-09-28 01:19:00 UTC	1378	IN	Data Raw: 64 74 68 3a 36 30 30 30 70 78 7d 2e 61 39 63 37 79 34 35 73 7b 62 6f 72 64 65 72 2d 74 6f 70 2d 6c 65 66 74 2d 72 61 64 69 75 73 3a 38 7d 2e 61 39 64 62 73 67 6c 65 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 37 34 38 70 78 7d 2e 61 39 6e 30 34 38 68 78 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 34 70 78 7d 2e 61 39 6e 64 6a 70 70 63 7b 77 69 64 74 68 3a 33 35 30 70 78 7d 2e 61 39 72 34 6c 73 31 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 31 38 30 64 65 67 2c 74 72 61 6e 73 70 61 72 65 6e 74 2c 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 31 29 20 31 32 2e 35 25 2c 76 61 72 28 2d 2d 61 6c 77 61 79 73 2d 64 61 72 6b 2d 6f 76 65 72 6c 61 79 29 29 7d 2e 61 39 74 78 64 79 67 67 7b 6d 61 72 67 69 6e 2d 72 69 67 Data Ascii: dth:6000px}.a9c7y45s{border-top-left-radius:8}.a9dbsgle{min-height:748px}.a9n048hx{padding-left:44px}.a9ndjppc{width:350px}.a9r4ls1a{background-image:linear-gradient(180deg,transparent,var(--shadow-1) 12.5%,var(--always-dark-overlay))}.a9txdygg{margin-rig
2024-09-28 01:19:00 UTC	1378	IN	Data Raw: 63 61 6c 63 28 31 30 30 76 77 20 2d 20 33 34 70 78 29 7d 2e 61 6b 76 34 31 64 78 38 7b 2d 2d 54 36 38 37 37 39 38 32 31 3a 30 20 32 70 78 20 34 70 78 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 31 29 2c 30 20 31 32 70 78 20 32 38 70 78 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 32 29 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 76 61 72 28 2d 2d 54 36 38 37 37 39 38 32 31 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 32 70 78 20 34 70 78 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 31 29 2c 30 20 31 32 70 78 20 32 38 70 78 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 32 29 7d 2e 61 6b 77 7a 36 69 39 6a 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 7d 2e 61 6b 7a 38 63 71 79 75 7b 6f 70 61 63 69 74 79 3a 2e 33 7d 2e 61 6b 7a 6e Data Ascii: calc(100vw - 34px)}.akv41dx8{--T68779821:0 2px 4px var(--shadow-1),0 12px 28px var(--shadow-2);-webkit-box-shadow:var(--T68779821);box-shadow:0 2px 4px var(--shadow-1),0 12px 28px var(--shadow-2)}.akwz6i9j{transition-duration:0s}.akz8cqyu{opacity:.3}.akzn

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	185.199.108.153	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:19:00 UTC	597	OUT	GET /css/cross/hidden.css HTTP/1.1 Host: unusualactivityaccountpages12.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://unusualactivityaccountpages12.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:19:01 UTC	756	IN	HTTP/1.1 200 OK Connection: close Content-Length: 12478 Server: GitHub.com Content-Type: text/css; charset=utf-8 permissions-policy: interest-cohort=() x-origin-cache: HIT Last-Modified: Sun, 14 Jan 2024 16:23:50 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "65a40a96-30be" expires: Sat, 28 Sep 2024 01:29:01 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 2304:115104:15C1FA1:17D225B:66F75984 Accept-Ranges: bytes Age: 0 Date: Sat, 28 Sep 2024 01:19:01 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740048-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727486341.002579,VS0,VE29 Vary: Accept-Encoding X-Fastly-Request-ID: 3c8a0e8c36e51d103cd0419dcc22c0265351a3c6
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 2e 78 31 6c 6b 66 72 37 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 7d 0a 2e 47 61 72 31 69 35 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 66 65 32 3b 70 61 64 64 69 6e 67 3a 20 31 30 70 78 20 30 70 78 20 31 30 70 78 20 30 70 78 3b 7d 0a 2e 72 6f 74 30 6f 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 36 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 53 65 67 6f 65 20 55 49 20 48 69 73 74 6f 72 69 63 2c 20 53 65 67 6f 65 20 55 49 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 31 37 36 35 3b Data Ascii: .x1lkfr7t{font-size:14px}.Gar1i5{border-top: 1px solid #dddfe2;padding: 10px 0px 10px 0px;}.rot0o{margin-top: 6px;font-size: 14px;font-weight: 400;color: #000000;font-family: Segoe UI Historic, Segoe UI, Helvetica, Arial, sans-serif;line-height: 1.1765;
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 32 39 34 31 3b 2d 2d 64 69 61 6c 6f 67 2d 73 69 7a 65 2d 6d 65 64 69 75 6d 2d 6d 61 78 2d 77 69 64 74 68 3a 37 30 30 70 78 3b 2d 2d 64 69 61 6c 6f 67 2d 73 69 7a 65 2d 6d 65 64 69 75 6d 2d 77 69 64 74 68 3a 31 30 30 25 3b 2d 2d 64 69 61 6c 6f 67 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 6d 61 78 2d 77 69 64 74 68 3a 35 34 38 70 78 3b 2d 2d 64 69 61 6c 6f 67 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 77 69 64 74 68 3a 31 30 30 25 3b 2d 2d 64 61 74 61 76 69 7a 2d 70 72 69 6d 61 72 79 2d 32 3a 72 67 62 28 31 33 34 2c 32 31 38 2c 32 35 35 29 3b 2d 2d 64 61 74 61 76 69 7a 2d 70 72 69 6d 61 72 79 2d 33 3a 72 67 62 28 39 35 2c 31 37 30 2c 32 35 35 29 3b 2d 2d 64 61 74 61 76 69 7a 2d 73 65 63 6f 6e 64 61 72 79 2d 31 3a 72 67 62 28 31 31 38 2c 36 32 2c 32 33 30 29 3b 2d 2d 64 Data Ascii: 2941;--dialog-size-medium-max-width:700px;--dialog-size-medium-width:100%;--dialog-size-small-max-width:548px;--dialog-size-small-width:100%;--dataviz-primary-2:rgb(134,218,255);--dataviz-primary-3:rgb(95,170,255);--dataviz-secondary-1:rgb(118,62,230);--d
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 65 72 3a 30 2e 37 35 3b 2d 2d 74 65 78 74 2d 69 6e 70 75 74 2d 6c 61 62 65 6c 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 2d 2d 74 65 78 74 2d 69 6e 70 75 74 2d 6c 61 62 65 6c 2d 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 39 34 31 3b 2d 2d 64 69 61 6c 6f 67 2d 73 69 7a 65 2d 6d 65 64 69 75 6d 2d 6d 61 78 2d 77 69 64 74 68 3a 37 30 30 70 78 3b 2d 2d 64 69 61 6c 6f 67 2d 73 69 7a 65 2d 6d 65 64 69 75 6d 2d 77 69 64 74 68 3a 31 30 30 25 3b 2d 2d 64 69 61 6c 6f 67 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 6d 61 78 2d 77 69 64 74 68 3a 35 34 38 70 78 3b 2d 2d 64 69 61 6c 6f 67 2d 73 69 7a 65 2d 73 6d 61 6c 6c 2d 77 69 64 74 68 3a 31 30 30 25 3b 2d 2d 64 61 74 61 76 69 7a 2d 70 72 69 6d 61 72 79 2d 32 3a 72 67 62 28 31 33 34 2c 32 31 38 2c 32 35 35 29 3b 2d Data Ascii: er:0.75;--text-input-label-font-weight:400;--text-input-label-line-height:1.2941;--dialog-size-medium-max-width:700px;--dialog-size-medium-width:100%;--dialog-size-small-max-width:548px;--dialog-size-small-width:100%;--dataviz-primary-2:rgb(134,218,255);-
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 35 35 2c 20 32 35 35 2c 20 30 2e 34 29 3b 2d 2d 66 64 73 2d 77 68 69 74 65 2d 61 6c 70 68 61 2d 35 30 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 35 29 3b 2d 2d 66 64 73 2d 77 68 69 74 65 2d 61 6c 70 68 61 2d 36 30 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 36 29 3b 2d 2d 66 64 73 2d 77 68 69 74 65 2d 61 6c 70 68 61 2d 38 30 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 38 29 3b 2d 2d 66 64 73 2d 79 65 6c 6c 6f 77 2d 32 30 3a 23 46 46 42 41 30 30 3b 2d 2d 61 63 63 65 6e 74 3a 23 30 38 36 36 46 46 3b 2d 2d 61 6c 77 61 79 73 2d 77 68 69 74 65 3a 23 46 46 46 46 46 46 3b 2d 2d 61 6c 77 61 79 73 2d 62 6c 61 63 6b 3a 62 6c 61 63 6b 3b 2d 2d 61 6c 77 61 79 73 2d 64 61 72 6b 2d 67 72 61 64 Data Ascii: 55, 255, 0.4);--fds-white-alpha-50:rgba(255, 255, 255, 0.5);--fds-white-alpha-60:rgba(255, 255, 255, 0.6);--fds-white-alpha-80:rgba(255, 255, 255, 0.8);--fds-yellow-20:#FFBA00;--accent:#0866FF;--always-white:#FFFFFF;--always-black:black;--always-dark-grad
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 73 28 39 36 25 29 20 63 6f 6e 74 72 61 73 74 28 31 30 31 25 29 3b 2d 2d 66 69 6c 74 65 72 2d 61 6c 77 61 79 73 2d 77 68 69 74 65 3a 69 6e 76 65 72 74 28 31 30 30 25 29 3b 2d 2d 66 69 6c 74 65 72 2d 64 69 73 61 62 6c 65 64 2d 69 63 6f 6e 3a 69 6e 76 65 72 74 28 38 30 25 29 20 73 65 70 69 61 28 36 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 32 30 25 29 20 68 75 65 2d 72 6f 74 61 74 65 28 31 37 33 64 65 67 29 20 62 72 69 67 68 74 6e 65 73 73 28 39 38 25 29 20 63 6f 6e 74 72 61 73 74 28 38 39 25 29 3b 2d 2d 66 69 6c 74 65 72 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 69 63 6f 6e 3a 69 6e 76 65 72 74 28 35 39 25 29 20 73 65 70 69 61 28 31 31 25 29 20 73 61 74 75 72 61 74 65 28 32 30 30 25 29 20 73 61 74 75 72 61 74 65 28 31 Data Ascii: s(96%) contrast(101%);--filter-always-white:invert(100%);--filter-disabled-icon:invert(80%) sepia(6%) saturate(200%) saturate(120%) hue-rotate(173deg) brightness(98%) contrast(89%);--filter-placeholder-icon:invert(59%) sepia(11%) saturate(200%) saturate(1
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 25 29 20 63 6f 6e 74 72 61 73 74 28 39 36 25 29 3b 2d 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 62 6c 75 65 3a 23 30 38 36 36 46 46 3b 2d 2d 67 6c 69 6d 6d 65 72 2d 73 70 69 6e 6e 65 72 2d 69 63 6f 6e 3a 23 36 35 36 37 36 42 3b 2d 2d 68 65 72 6f 2d 62 61 6e 6e 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 23 46 46 46 46 46 46 3b 2d 2d 68 6f 73 74 65 64 2d 76 69 65 77 2d 73 65 6c 65 63 74 65 64 2d 73 74 61 74 65 3a 23 45 42 46 35 46 46 3b 2d 2d 68 69 67 68 6c 69 67 68 74 2d 62 67 3a 23 45 37 46 33 46 46 3b 2d 2d 68 6f 76 65 72 2d 6f 76 65 72 6c 61 79 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 2d 2d 6c 69 73 74 2d 63 65 6c 6c 2d 63 68 65 76 72 6f 6e 3a 23 36 35 36 37 36 42 3b 2d 2d 6d 65 64 69 61 2d 68 6f 76 65 72 3a 72 67 62 61 28 36 38 2c 20 37 Data Ascii: %) contrast(96%);--focus-ring-blue:#0866FF;--glimmer-spinner-icon:#65676B;--hero-banner-background:#FFFFFF;--hosted-view-selected-state:#EBF5FF;--highlight-bg:#E7F3FF;--hover-overlay:rgba(0, 0, 0, 0.05);--list-cell-chevron:#65676B;--media-hover:rgba(68, 7
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 38 36 36 46 46 3b 2d 2d 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 3a 23 46 46 46 46 46 46 3b 2d 2d 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 70 72 65 73 73 65 64 3a 23 37 37 41 37 46 46 3b 2d 2d 70 72 69 6d 61 72 79 2d 62 75 74 74 6f 6e 2d 74 65 78 74 3a 23 46 46 46 46 46 46 3b 2d 2d 70 72 69 6d 61 72 79 2d 64 65 65 6d 70 68 61 73 69 7a 65 64 2d 62 75 74 74 6f 6e 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 23 45 42 46 35 46 46 3b 2d 2d 70 72 69 6d 61 72 79 2d 64 65 65 6d 70 68 61 73 69 7a 65 64 2d 62 75 74 74 6f 6e 2d 70 72 65 73 73 65 64 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 30 35 29 3b 2d 2d 70 72 69 6d 61 72 79 2d 64 65 65 6d 70 68 61 73 69 7a 65 64 2d 62 75 74 74 6f 6e 2d 70 72 65 73 73 Data Ascii: -background:#0866FF;--primary-button-icon:#FFFFFF;--primary-button-pressed:#77A7FF;--primary-button-text:#FFFFFF;--primary-deemphasized-button-background:#EBF5FF;--primary-deemphasized-button-pressed:rgba(0, 0, 0, 0.05);--primary-deemphasized-button-press
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 20 30 2c 20 30 2e 31 29 3b 2d 2d 73 68 61 64 6f 77 2d 32 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 3b 2d 2d 73 68 61 64 6f 77 2d 35 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 35 29 3b 2d 2d 73 68 61 64 6f 77 2d 38 3a 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 38 29 3b 2d 2d 73 68 61 64 6f 77 2d 69 6e 73 65 74 3a 72 67 62 61 28 32 35 35 2c 20 32 35 35 2c 20 32 35 35 2c 20 30 2e 35 29 3b 2d 2d 73 68 61 64 6f 77 2d 65 6c 65 76 61 74 65 64 3a 30 20 38 70 78 20 32 30 70 78 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 32 29 2c 20 30 20 32 70 78 20 34 70 78 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 2d 2d 73 68 61 64 6f 77 2d 70 65 72 73 69 73 74 65 6e 74 3a 30 70 78 20 30 70 78 20 31 32 70 78 20 72 Data Ascii: 0, 0.1);--shadow-2:rgba(0, 0, 0, 0.2);--shadow-5:rgba(0, 0, 0, 0.5);--shadow-8:rgba(0, 0, 0, 0.8);--shadow-inset:rgba(255, 255, 255, 0.5);--shadow-elevated:0 8px 20px 0 rgba(0, 0, 0, 0.2), 0 2px 4px 0 rgba(0, 0, 0, 0.1);--shadow-persistent:0px 0px 12px r
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 70 78 3b 2d 2d 62 75 74 74 6f 6e 2d 68 65 69 67 68 74 2d 6c 61 72 67 65 3a 34 30 70 78 3b 2d 2d 62 75 74 74 6f 6e 2d 68 65 69 67 68 74 2d 6d 65 64 69 75 6d 3a 33 36 70 78 3b 2d 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6c 61 72 67 65 3a 31 36 70 78 3b 2d 2d 62 75 74 74 6f 6e 2d 70 61 64 64 69 6e 67 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 6d 65 64 69 75 6d 3a 31 36 70 78 3b 2d 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 70 61 64 64 69 6e 67 2d 6c 61 72 67 65 3a 31 36 70 78 3b 2d 2d 62 75 74 74 6f 6e 2d 69 63 6f 6e 2d 70 61 64 64 69 6e 67 2d 6d 65 64 69 75 6d 3a 31 36 70 78 3b 2d 2d 62 75 74 74 6f 6e 2d 69 6e 6e 65 72 2d 69 63 6f 6e 2d 73 70 61 63 69 6e 67 2d 6c 61 72 67 65 3a 33 70 78 3b 2d 2d 62 75 74 74 6f 6e 2d 69 6e 6e 65 Data Ascii: px;--button-height-large:40px;--button-height-medium:36px;--button-padding-horizontal-large:16px;--button-padding-horizontal-medium:16px;--button-icon-padding-large:16px;--button-icon-padding-medium:16px;--button-inner-icon-spacing-large:3px;--button-inne
2024-09-28 01:19:01 UTC	76	IN	Data Raw: 70 74 69 6d 69 73 74 69 63 20 44 69 73 70 6c 61 79 20 42 6f 6c 64 2c 20 73 79 73 74 65 6d 2d 75 69 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 2d 2d 68 65 61 64 6c 69 6e 65 31 2d 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 3b Data Ascii: ptimistic Display Bold, system-ui, sans-serif;--headline1-font-size:1.75rem;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49715	185.199.108.153	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:19:00 UTC	599	OUT	GET /css/cross/hidden_2.css HTTP/1.1 Host: unusualactivityaccountpages12.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://unusualactivityaccountpages12.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:19:01 UTC	738	IN	HTTP/1.1 200 OK Connection: close Content-Length: 573319 Server: GitHub.com Content-Type: text/css; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 14 Jan 2024 16:23:50 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "65a40a96-8bf87" expires: Sat, 28 Sep 2024 01:29:01 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: C52B:19E0B5:15C44EC:180B09E:66F7597E Accept-Ranges: bytes Age: 0 Date: Sat, 28 Sep 2024 01:19:01 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890064-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727486341.015454,VS0,VE364 Vary: Accept-Encoding X-Fastly-Request-ID: 8318b81f3a20ab43d85afae72283a637560373c7
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 66 6f 72 6d 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 6c 61 62 65 6c 7b 63 6f 6c 6f 72 3a 23 36 30 36 37 37 30 3b 63 75 72 73 6f 72 3a 64 65 66 61 75 6c 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 6c 61 62 65 6c 20 69 6e 70 75 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 7d 74 65 78 74 61 72 65 61 2c 2e 69 6e 70 75 74 74 65 78 74 2c 2e 69 6e 70 75 74 70 61 73 73 77 6f 72 64 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 64 30 64 35 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 33 70 78 7d 74 65 78 74 61 72 Data Ascii: form{margin:0;padding:0}label{color:#606770;cursor:default;font-weight:600;vertical-align:middle}label input{font-weight:normal}textarea,.inputtext,.inputpassword{-webkit-appearance:none;border:1px solid #ccd0d5;border-radius:0;margin:0;padding:3px}textar
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 62 75 74 74 6f 6e 7b 6d 61 72 67 69 6e 3a 30 7d 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 69 6d 67 7b 62 6f 72 64 65 72 3a 30 7d 74 64 2c 74 64 2e 6c 61 62 65 6c 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 64 64 7b 63 6f 6c 6f 72 3a 23 30 30 30 7d 64 74 7b 63 6f 6c 6f 72 3a 23 36 30 36 37 37 30 7d 75 6c 7b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 61 62 62 72 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 68 72 7b 62 61 63 6b 67 72 6f 75 6e Data Ascii: sor:pointer;text-decoration:none}button{margin:0}a:hover{text-decoration:underline}img{border:0}td,td.label{text-align:left}dd{color:#000}dt{color:#606770}ul{list-style-type:none;margin:0;padding:0}abbr{border-bottom:none;text-decoration:none}hr{backgroun
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 2e 68 6f 6d 65 20 23 63 6f 6e 74 65 6e 74 2c 2e 73 65 61 72 63 68 20 23 63 6f 6e 74 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 36 30 30 70 78 7d 2e 55 49 53 74 61 6e 64 61 72 64 46 72 61 6d 65 5f 43 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 32 30 70 78 3b 77 69 64 74 68 3a 39 36 30 70 78 7d 2e 55 49 53 74 61 6e 64 61 72 64 46 72 61 6d 65 5f 43 6f 6e 74 65 6e 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 37 36 30 70 78 7d 2e 55 49 53 74 61 6e 64 61 72 64 46 72 61 6d 65 5f 53 69 64 65 62 61 72 41 64 73 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 77 69 64 74 68 3a 32 30 30 70 Data Ascii: .home #content,.search #content{min-height:600px}.UIStandardFrame_Container{margin:0 auto;padding-top:20px;width:960px}.UIStandardFrame_Content{float:left;margin:0;padding:0;width:760px}.UIStandardFrame_SidebarAds{float:right;margin:0;padding:0;width:200p
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 69 6e 3a 30 7d 2e 5f 37 31 70 6e 20 2e 5f 35 65 32 68 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 31 32 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 35 65 32 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6d 6d 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 29 3b 62 6f 72 64 65 72 3a 30 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 38 70 78 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 5f 37 31 70 6e 20 2e 5f 34 34 32 5f 7b 70 61 64 64 69 6e 67 2d 62 Data Ascii: in:0}._71pn ._5e2h{line-height:24px;padding:0 12px}._71pn ._5e2k{background-color:var(--comment-background);border:0;border-radius:18px;color:var(--secondary-text);font-size:12px;font-weight:600;height:24px;max-width:100%;padding:0}._71pn ._442_{padding-b
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 2e 5f 37 31 70 6e 20 2e 5f 34 73 78 67 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 33 5f 71 6c 7b 6d 61 72 67 69 6e 3a 30 7d 2e 5f 37 31 70 6e 20 2e 5f 33 5f 71 6d 7b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 73 61 74 75 72 61 74 65 28 30 29 3b 6d 61 72 67 69 6e 3a 32 70 78 20 30 20 30 20 33 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 33 5f 71 6f 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 36 39 34 77 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6d 61 72 67 69 6e 3a 30 20 31 36 70 78 20 34 70 78 20 31 36 70 78 3b 6d 69 6e 2d 68 65 69 67 68 74 3a Data Ascii: ._71pn ._4sxg{align-items:center;display:flex;margin-left:8px}._71pn ._3_ql{margin:0}._71pn ._3_qm{-webkit-filter:saturate(0);margin:2px 0 0 3px}._71pn ._3_qo{margin-left:8px}._71pn ._694w{align-items:center;display:flex;margin:0 16px 4px 16px;min-height:
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 5f 37 31 70 6e 20 2e 5f 32 2d 35 68 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 6c 61 63 65 68 6f 6c 64 65 72 2d 69 63 6f 6e 29 7d 2e 5f 37 31 70 6e 20 2e 5f 36 39 67 33 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 6f 6d 6d 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 5f 37 31 70 6e 20 2e 5f 31 33 78 6b 7b 70 61 64 64 69 6e 67 3a 34 70 78 20 31 36 70 78 7d 2e 5f 37 31 70 6e 20 2e 5f 31 6d 32 6c 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 37 68 6c 71 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 37 6d 74 67 7b 63 6f Data Ascii: ;vertical-align:middle}._71pn ._2-5h{color:var(--placeholder-icon)}._71pn ._69g3{background-color:var(--comment-background)}._71pn ._13xk{padding:4px 16px}._71pn ._1m2l{color:var(--secondary-text)}._71pn ._7hlq{color:var(--secondary-text)}._71pn ._7mtg{co
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 2d 64 61 72 6b 2d 6d 6f 64 65 20 2e 5f 37 31 70 6e 20 2e 5f 35 72 35 6e 7b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 76 61 72 28 2d 2d 66 69 6c 74 65 72 2d 70 72 69 6d 61 72 79 2d 69 63 6f 6e 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 35 6c 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 35 6d 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 73 65 63 6f 6e 64 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 39 79 2e 5f 34 2d 75 38 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 63 61 72 64 2d 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 72 39 79 2e 5f 34 2d 75 32 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 5f 37 31 70 6e 20 Data Ascii: -dark-mode ._71pn ._5r5n{-webkit-filter:var(--filter-primary-icon)}._71pn ._5r5l{color:var(--primary-text)}._71pn ._5r5m{color:var(--secondary-text)}._71pn ._5r9y._4-u8{background:var(--card-background)}._71pn ._5r9y._4-u2{border-color:transparent}._71pn
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 34 2d 69 30 2c 2e 5f 37 31 70 6e 20 2e 5f 34 2d 69 32 2c 2e 5f 37 31 70 6e 20 2e 5f 35 61 38 75 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 61 72 64 2d 62 61 63 6b 67 72 6f 75 6e 64 29 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 64 69 76 69 64 65 72 29 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 34 74 32 61 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 61 72 64 2d 62 61 63 6b 67 72 6f 75 6e 64 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 32 63 39 7b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 74 65 78 74 29 7d 2e 5f 37 31 70 6e 20 2e 5f 35 31 2d 75 20 2e 5f 35 30 7a 79 7b 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 Data Ascii: 4-i0,._71pn ._4-i2,._71pn ._5a8u{background-color:var(--card-background);border-color:var(--divider);color:var(--primary-text)}._71pn ._4t2a{background-color:var(--card-background)}._71pn ._52c9{color:var(--primary-text)}._71pn ._51-u ._50zy{-webkit-filte
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 68 35 2c 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 68 36 2c 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 70 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 7d 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 62 75 74 74 6f 6e 2c 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 69 6e 70 75 74 2c 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 6c 61 62 65 6c 2c 23 66 61 63 65 62 6f 6f 6b 20 2e 73 79 73 74 65 6d 2d 66 6f 6e 74 73 2d 2d 62 6f 64 79 20 73 65 6c 65 63 74 2c 23 66 61 63 65 62 6f 6f Data Ascii: -fonts--body h5,#facebook .system-fonts--body h6,#facebook .system-fonts--body p{font-family:inherit}#facebook .system-fonts--body button,#facebook .system-fonts--body input,#facebook .system-fonts--body label,#facebook .system-fonts--body select,#faceboo
2024-09-28 01:19:01 UTC	1378	IN	Data Raw: 61 64 6f 77 2d 69 6e 73 65 74 29 7d 2e 78 31 30 62 36 61 71 71 7b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 36 70 78 7d 2e 78 31 30 66 35 6e 77 63 7b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 31 70 78 20 76 61 72 28 2d 2d 73 68 61 64 6f 77 2d 31 29 7d 2e 78 31 30 6c 36 74 71 6b 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 78 31 30 77 36 74 39 37 7b 68 65 69 67 68 74 3a 33 32 70 78 7d 2e 78 31 30 77 68 39 62 69 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 78 31 30 77 6a 64 31 64 7b 68 65 69 67 68 74 3a 35 30 70 78 7d 2e 78 31 30 77 6c 74 36 32 7b 6f 76 65 72 66 6c 6f 77 2d 79 3a 68 69 64 64 65 6e 7d 2e 78 31 31 30 6c 73 6d 77 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 6c 65 66 74 2d 72 61 64 69 75 Data Ascii: adow-inset)}.x10b6aqq{padding-bottom:6px}.x10f5nwc{box-shadow:0 0 0 1px var(--shadow-1)}.x10l6tqk{position:absolute}.x10w6t97{height:32px}.x10wh9bi{margin-top:0!important}.x10wjd1d{height:50px}.x10wlt62{overflow-y:hidden}.x110lsmw{border-bottom-left-radiu

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49717	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:19:03 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 01:19:03 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=228359 Date: Sat, 28 Sep 2024 01:19:03 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49718	157.240.253.1	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:19:03 UTC	634	OUT	GET /rsrc.php/v3/yW/r/AFgIDquDCzO.png HTTP/1.1 Host: static.xx.fbcdn.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://unusualactivityaccountpages12.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:19:03 UTC	1142	IN	HTTP/1.1 404 Not Found Vary: Accept-Encoding x-fatal-request: static.xx.fbcdn.net Edge-Control: cache-maxage=10m Pragma: no-cache Cache-Control: private, no-cache, no-store, must-revalidate Expires: Sat, 01 Jan 2000 00:00:00 GMT timing-allow-origin: * reporting-endpoints: permissions_policy="https://www.xx.facebook.com/ajax/browser_error_reports/" report-to: {"max_age":21600,"endpoints":[{"url":"https:\/\/www.xx.facebook.com\/ajax\/browser_error_reports\/"}],"group":"permissions_policy"} content-security-policy: default-src data: blob: 'self';script-src .facebook.com .fbcdn.net .facebook.net 127.0.0.1: blob: data: 'self' 'unsafe-inline' https://.google-analytics.com .google.com;style-src 'unsafe-inline';connect-src .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com:* wss://.whatsapp.com: wss://.fbcdn.net attachment.fbsbx.com ws://localhost: blob: .cdninstagram.com 'self' https://.google-analytics.com;img-src data: blob: 'self' https://*.google-analytics.com;block-all-mixed-content;upgrade-insecure-requests;require-trusted-types-for 'script'; document-policy: force-load-at-top
2024-09-28 01:19:03 UTC	1164	IN	Data Raw: 70 65 72 6d 69 73 73 69 6f 6e 73 2d 70 6f 6c 69 63 79 3a 20 61 63 63 65 6c 65 72 6f 6d 65 74 65 72 3d 28 29 2c 20 61 74 74 72 69 62 75 74 69 6f 6e 2d 72 65 70 6f 72 74 69 6e 67 3d 28 29 2c 20 61 75 74 6f 70 6c 61 79 3d 28 29 2c 20 62 6c 75 65 74 6f 6f 74 68 3d 28 29 2c 20 63 61 6d 65 72 61 3d 28 29 2c 20 63 68 2d 64 65 76 69 63 65 2d 6d 65 6d 6f 72 79 3d 28 29 2c 20 63 68 2d 64 6f 77 6e 6c 69 6e 6b 3d 28 29 2c 20 63 68 2d 64 70 72 3d 28 29 2c 20 63 68 2d 65 63 74 3d 28 29 2c 20 63 68 2d 72 74 74 3d 28 29 2c 20 63 68 2d 73 61 76 65 2d 64 61 74 61 3d 28 29 2c 20 63 68 2d 75 61 2d 61 72 63 68 3d 28 29 2c 20 63 68 2d 75 61 2d 62 69 74 6e 65 73 73 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 74 2d 68 65 69 67 68 74 3d 28 29 2c 20 63 68 2d 76 69 65 77 70 6f 72 Data Ascii: permissions-policy: accelerometer=(), attribution-reporting=(), autoplay=(), bluetooth=(), camera=(), ch-device-memory=(), ch-downlink=(), ch-dpr=(), ch-ect=(), ch-rtt=(), ch-save-data=(), ch-ua-arch=(), ch-ua-bitness=(), ch-viewport-height=(), ch-viewpor
2024-09-28 01:19:03 UTC	2994	IN	Data Raw: 50 72 6f 78 79 2d 53 74 61 74 75 73 3a 20 68 74 74 70 5f 72 65 71 75 65 73 74 5f 65 72 72 6f 72 3b 20 65 5f 70 72 6f 78 79 3d 22 41 63 4b 4c 45 67 65 42 6f 76 37 43 64 32 71 59 6f 6c 5a 75 51 44 2d 66 71 51 44 4a 67 70 35 47 47 42 78 68 59 72 36 33 6d 4c 59 73 4d 37 74 6a 37 47 48 45 7a 7a 36 52 65 64 4b 74 67 30 4e 4e 4f 50 4b 7a 37 75 78 44 51 52 4e 33 70 6a 38 31 54 56 74 52 22 3b 20 65 5f 66 62 5f 62 69 6e 61 72 79 76 65 72 73 69 6f 6e 3d 22 41 63 4a 76 65 4a 30 67 46 58 6d 4e 76 6a 59 4a 31 77 33 4a 74 76 64 77 42 79 6e 65 67 31 66 6b 57 79 4d 62 37 6c 61 64 4b 4f 77 53 76 50 69 6d 31 44 30 79 79 35 50 52 63 62 56 68 75 71 4b 53 70 42 4d 4e 31 56 33 2d 31 55 65 64 43 5f 50 4a 51 6b 6d 52 6a 50 4d 5f 30 53 58 68 44 71 57 38 61 34 63 22 3b 20 65 5f 66 Data Ascii: Proxy-Status: http_request_error; e_proxy="AcKLEgeBov7Cd2qYolZuQD-fqQDJgp5GGBxhYr63mLYsM7tj7GHEzz6RedKtg0NNOPKz7uxDQRN3pj81TVtR"; e_fb_binaryversion="AcJveJ0gFXmNvjYJ1w3JtvdwByneg1fkWyMb7ladKOwSvPim1D0yy5PRcbVhuqKSpBMN1V3-1UedC_PJQkmRjPM_0SXhDqW8a4c"; e_f

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49720	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:19:04 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-28 01:19:04 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=228388 Date: Sat, 28 Sep 2024 01:19:04 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-28 01:19:04 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49721	185.199.108.153	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:19:04 UTC	638	OUT	GET /img/favicon.ico HTTP/1.1 Host: unusualactivityaccountpages12.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://unusualactivityaccountpages12.github.io/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:19:04 UTC	735	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5430 Server: GitHub.com Content-Type: image/vnd.microsoft.icon permissions-policy: interest-cohort=() Last-Modified: Sun, 14 Jan 2024 16:23:50 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "65a40a96-1536" expires: Sat, 28 Sep 2024 01:29:04 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: D5A2:147E97:1544B42:17550E8:66F75988 Accept-Ranges: bytes Age: 0 Date: Sat, 28 Sep 2024 01:19:04 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740056-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1727486345.726624,VS0,VE42 Vary: Accept-Encoding X-Fastly-Request-ID: 12a55e141bb37a5ccf1a7eab5e2147c895cd2e1b
2024-09-28 01:19:04 UTC	1378	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 a0 ff f3 ec cf ff ff ff ff ff ff ff ff ff 66 08 df ff 67 09 90 ff 64 08 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff Data Ascii: h& ( h ffgd@`efffffep`fffffff
2024-09-28 01:19:04 UTC	1378	IN	Data Raw: ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ec e0 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 07 ef ff 67 09 90 ff 68 08 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ec e0 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 df ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 Data Ascii: ffffegh `effffffffffeph fffff
2024-09-28 01:19:04 UTC	1378	IN	Data Raw: 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 79 27 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b2 83 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 67 08 9f ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 79 27 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d8 c1 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 07 cf ff 65 07 ef ff 66 08 ff ff 66 08 ff ff Data Ascii: ffffy'ffffffffgffffffffy'fffffffffeff
2024-09-28 01:19:04 UTC	1296	IN	Data Raw: ff 66 08 ff ff 66 08 ff ff 65 09 90 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff b3 84 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 9f 64 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 68 08 20 00 00 00 00 00 00 00 00 00 00 00 00 ff 66 07 8f ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff b3 84 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 9f 64 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 Data Ascii: ffeh fffffffffffdffffffh ffffffffffffdffff

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49722	185.199.109.153	443	3504	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-28 01:19:05 UTC	378	OUT	GET /img/favicon.ico HTTP/1.1 Host: unusualactivityaccountpages12.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-28 01:19:05 UTC	733	IN	HTTP/1.1 200 OK Connection: close Content-Length: 5430 Server: GitHub.com Content-Type: image/vnd.microsoft.icon permissions-policy: interest-cohort=() Last-Modified: Sun, 14 Jan 2024 16:23:50 GMT Access-Control-Allow-Origin: * Strict-Transport-Security: max-age=31556952 ETag: "65a40a96-1536" expires: Sat, 28 Sep 2024 01:29:04 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: D5A2:147E97:1544B42:17550E8:66F75988 Accept-Ranges: bytes Date: Sat, 28 Sep 2024 01:19:05 GMT Via: 1.1 varnish Age: 1 X-Served-By: cache-ewr-kewr1740064-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1727486346.574384,VS0,VE4 Vary: Accept-Encoding X-Fastly-Request-ID: 783ce1609aeb8ab791d20b018da210fc813d3737
2024-09-28 01:19:05 UTC	1378	IN	Data Raw: 00 00 01 00 02 00 10 10 00 00 01 00 20 00 68 04 00 00 26 00 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 8e 04 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 04 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 a0 ff f3 ec cf ff ff ff ff ff ff ff ff ff 66 08 df ff 67 09 90 ff 64 08 40 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff Data Ascii: h& ( h ffgd@`efffffep`fffffff
2024-09-28 01:19:05 UTC	1378	IN	Data Raw: ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ec e0 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 07 ef ff 67 09 90 ff 68 08 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 60 00 10 ff 65 07 90 ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff eb e0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ec e0 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 65 09 90 ff 70 10 10 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 df ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 Data Ascii: ffffegh `effffffffffeph fffff
2024-09-28 01:19:05 UTC	1378	IN	Data Raw: 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 79 27 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff b2 83 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 67 08 9f ff 66 07 cf ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 79 27 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff d8 c1 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 07 cf ff 65 07 ef ff 66 08 ff ff 66 08 ff ff Data Ascii: ffffy'ffffffffgffffffffy'fffffffffeff
2024-09-28 01:19:05 UTC	1296	IN	Data Raw: ff 66 08 ff ff 66 08 ff ff 65 09 90 00 00 00 00 00 00 00 00 ff 68 08 20 ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff b3 84 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 9f 64 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 68 08 20 00 00 00 00 00 00 00 00 00 00 00 00 ff 66 07 8f ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff b3 84 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 9f 64 ff ff 66 08 ff ff 66 08 ff ff 66 08 ff ff 66 08 Data Ascii: ffeh fffffffffffdffffffh ffffffffffffdffff

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3668, Parent PID: 5768

General

Target ID:	0
Start time:	21:18:51
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3504, Parent PID: 3668

General

Target ID:	2
Start time:	21:18:55
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2360 --field-trial-handle=2272,i,6953573050607460099,9853339588741042032,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6784, Parent PID: 5768

General

Target ID:	3
Start time:	21:18:58
Start date:	27/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://unusualactivityaccountpages12.github.io/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly