Edit tour

Windows Analysis Report
http://www.mrbeastcast.com/claim/

Overview

General Information

Sample URL:	http://www.mrbeastcast.com/claim/
Analysis ID:	1521850
Tags:	openphish
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Multi AV Scanner detection for domain / URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1992 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2668 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2032,i,4001843097184216137,3766743106433319023,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6844 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.mrbeastcast.com/claim/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://www.mrbeastcast.com/claim/

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Multi AV Scanner detection for domain / URL

Source: https://www.mrbeastcast.com/claim

Virustotal: Detection: 6%

Perma Link

Source: https://www.mrbeastcast.com/claim/	HTTP Parser: No favicon
Source: https://www.mrbeastcast.com/claim/	HTTP Parser: No favicon
Source: https://www.mrbeastcast.com/claim/	HTTP Parser: No favicon
Source: https://www.mrbeastcast.com/claim/	HTTP Parser: No favicon

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49754 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.5:49718 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49754 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.244.127
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /claim/ HTTP/1.1Host: www.mrbeastcast.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /claim/40532.45cfda0794123b4bec3c.css HTTP/1.1Host: www.mrbeastcast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mrbeastcast.com/claim/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /544a9f7.js HTTP/1.1Host: d17iy0164v753e.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mrbeastcast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /544a9f7.js HTTP/1.1Host: d17iy0164v753e.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /claim/83e99dbc7c072587a2f096e0bf526dd7.png HTTP/1.1Host: www.mrbeastcast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mrbeastcast.com/claim/40532.45cfda0794123b4bec3c.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /claim/a9009aaba5bfab576a517f6915b3c0b6.svg HTTP/1.1Host: www.mrbeastcast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mrbeastcast.com/claim/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/external/css_frontXF.css HTTP/1.1Host: d1ieffz9zqrn09.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mrbeastcast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/external/v2/htmlxf.4235458.ba3ad.0.js HTTP/1.1Host: d1ieffz9zqrn09.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mrbeastcast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /claim/568d4eaa150e7daa3b0b03bcde881aef.woff2 HTTP/1.1Host: www.mrbeastcast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.mrbeastcast.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.mrbeastcast.com/claim/40532.45cfda0794123b4bec3c.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /claim/8713b8a90bded5ae0c4872484f54fbde.woff2 HTTP/1.1Host: www.mrbeastcast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.mrbeastcast.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.mrbeastcast.com/claim/40532.45cfda0794123b4bec3c.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /claim/2d7928e1003804522e56efd448d4777b.woff2 HTTP/1.1Host: www.mrbeastcast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.mrbeastcast.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.mrbeastcast.com/claim/40532.45cfda0794123b4bec3c.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /claim/a9009aaba5bfab576a517f6915b3c0b6.svg HTTP/1.1Host: www.mrbeastcast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /claim/83e99dbc7c072587a2f096e0bf526dd7.png HTTP/1.1Host: www.mrbeastcast.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/clockers/CustomButton/cssXF.css HTTP/1.1Host: d1ieffz9zqrn09.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.mrbeastcast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/external/v2/htmlxf.4235458.ba3ad.0.js HTTP/1.1Host: d1ieffz9zqrn09.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: www.mrbeastcast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mrbeastcast.com/claim/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/external/check.php?it=4235458&time=1727577771502 HTTP/1.1Host: d1ieffz9zqrn09.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mrbeastcast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /claim HTTP/1.1Host: www.mrbeastcast.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.mrbeastcast.com/claim/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/external/check.php?it=4235458&time=1727577771502 HTTP/1.1Host: d1ieffz9zqrn09.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/external/check.php?it=4235458&time=1727577787689 HTTP/1.1Host: d1ieffz9zqrn09.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mrbeastcast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/external/check.php?it=4235458&time=1727577787689 HTTP/1.1Host: d1ieffz9zqrn09.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/external/check.php?it=4235458&time=1727577804032 HTTP/1.1Host: d1ieffz9zqrn09.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mrbeastcast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/external/check.php?it=4235458&time=1727577804032 HTTP/1.1Host: d1ieffz9zqrn09.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/external/check.php?it=4235458&time=1727577820188 HTTP/1.1Host: d1ieffz9zqrn09.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mrbeastcast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/external/check.php?it=4235458&time=1727577820188 HTTP/1.1Host: d1ieffz9zqrn09.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/external/check.php?it=4235458&time=1727577836505 HTTP/1.1Host: d1ieffz9zqrn09.cloudfront.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.mrbeastcast.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/external/check.php?it=4235458&time=1727577836505 HTTP/1.1Host: d1ieffz9zqrn09.cloudfront.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.mrbeastcast.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: d17iy0164v753e.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: d1ieffz9zqrn09.cloudfront.net

Source: chromecache_85.2.dr	String found in binary or memory: https://d17iy0164v753e.cloudfront.net/544a9f7.js
Source: chromecache_85.2.dr	String found in binary or memory: https://discord.gift/cFfZ-4vj3-qPFV-ftAq-u2pB-ygW3

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.5:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 2.19.244.127:443 -> 192.168.2.5:49718 version: TLS 1.2

Source: classification engine

Classification label: mal56.win@17/47@22/11

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2032,i,4001843097184216137,3766743106433319023,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.mrbeastcast.com/claim/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2032,i,4001843097184216137,3766743106433319023,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Accept

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://www.mrbeastcast.com/claim/	4%	Virustotal		Browse
http://www.mrbeastcast.com/claim/	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

Source	Detection	Scanner	Link
fp2e7a.wpc.phicdn.net	0%	Virustotal	Browse
www.google.com	0%	Virustotal	Browse
d1ieffz9zqrn09.cloudfront.net	0%	Virustotal	Browse
d17iy0164v753e.cloudfront.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://d17iy0164v753e.cloudfront.net/544a9f7.js	0%	Virustotal		Browse
https://www.mrbeastcast.com/claim	6%	Virustotal		Browse

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
d17iy0164v753e.cloudfront.net	18.66.92.205	true	false	0%, Virustotal, Browse	unknown
www.mrbeastcast.com	188.114.97.3	true	false		unknown
d1ieffz9zqrn09.cloudfront.net	108.138.24.29	true	false	0%, Virustotal, Browse	unknown
www.google.com	142.250.186.164	true	false	0%, Virustotal, Browse	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.mrbeastcast.com/claim/8713b8a90bded5ae0c4872484f54fbde.woff2	false		unknown
https://www.mrbeastcast.com/claim/83e99dbc7c072587a2f096e0bf526dd7.png	false		unknown
https://www.mrbeastcast.com/claim/a9009aaba5bfab576a517f6915b3c0b6.svg	false		unknown
https://www.mrbeastcast.com/claim/40532.45cfda0794123b4bec3c.css	false		unknown
https://d1ieffz9zqrn09.cloudfront.net/public/external/check.php?it=4235458&time=1727577787689	false		unknown
https://d1ieffz9zqrn09.cloudfront.net/public/external/check.php?it=4235458&time=1727577836505	false		unknown
https://d1ieffz9zqrn09.cloudfront.net/public/external/v2/htmlxf.4235458.ba3ad.0.js	false		unknown
https://www.mrbeastcast.com/claim/568d4eaa150e7daa3b0b03bcde881aef.woff2	false		unknown
https://www.mrbeastcast.com/claim/	false		unknown
https://d1ieffz9zqrn09.cloudfront.net/public/external/check.php?it=4235458&time=1727577771502	false		unknown
https://d1ieffz9zqrn09.cloudfront.net/public/external/css_frontXF.css	false		unknown
https://www.mrbeastcast.com/claim	false	6%, Virustotal, Browse	unknown
https://www.mrbeastcast.com/favicon.ico	false		unknown
https://www.mrbeastcast.com/claim/2d7928e1003804522e56efd448d4777b.woff2	false		unknown
https://d17iy0164v753e.cloudfront.net/544a9f7.js	false	0%, Virustotal, Browse	unknown
https://d1ieffz9zqrn09.cloudfront.net/public/external/check.php?it=4235458&time=1727577804032	false		unknown
https://d1ieffz9zqrn09.cloudfront.net/public/clockers/CustomButton/cssXF.css	false		unknown
https://d1ieffz9zqrn09.cloudfront.net/public/external/check.php?it=4235458&time=1727577820188	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://discord.gift/cFfZ-4vj3-qPFV-ftAq-u2pB-ygW3	chromecache_85.2.dr	false		unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
108.138.24.29	d1ieffz9zqrn09.cloudfront.net	United States	16509	AMAZON-02US	false
108.138.24.174	unknown	United States	16509	AMAZON-02US	false
18.66.92.123	unknown	United States	3	MIT-GATEWAYSUS	false
18.66.92.205	d17iy0164v753e.cloudfront.net	United States	3	MIT-GATEWAYSUS	false
216.58.206.68	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.97.3	www.mrbeastcast.com	European Union	13335	CLOUDFLARENETUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false
108.138.24.111	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521850
Start date and time:	2024-09-29 04:41:47 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 18s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.mrbeastcast.com/claim/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@17/47@22/11
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.163, 216.58.212.142, 64.233.167.84, 34.104.35.123, 20.12.23.50, 93.184.221.240, 192.229.221.95, 20.3.187.198, 40.69.42.241, 172.217.18.3
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://www.mrbeastcast.com/claim/ Model: jbxai	{ "brand":["Nitro"], "contains_trigger_text":true, "trigger_text":"You've been gifted Nitro", "prominent_button_name":"I accept", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.mrbeastcast.com/claim/ Model: jbxai	{ "brand":["Nitro"], "contains_trigger_text":true, "trigger_text":"You've been gifted Nitro", "prominent_button_name":"I accept", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://www.mrbeastcast.com/claim/ Model: jbxai	{ "brand":["Nitro"], "contains_trigger_text":false, "trigger_text":"You've been gifted Nitro Once you accept you will have Nitro for 1 month.", "prominent_button_name":"I accept", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 01:42:42 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9764825877997336
Encrypted:	false
SSDEEP:	48:8YdKT2qhHpidAKZdA19ehwiZUklqehuy+3:8tDpZy
MD5:	CB0EEE9466BAC2B804C124FF2CB93430
SHA1:	27EA75C007832CE63C616D763C8556AE4A4FBA5B
SHA-256:	D76E370F6FB3AD4F8E5E6F9CB26D9C6973A894A97DC41B354F304BC31631055D
SHA-512:	91D80955BD8C353E4D65B6320023C0F35DBE9DA18639D48DA7ADFE4E47FCC161065896762B49A44F1F197DB588473D54427D7F35B2F164C7A27534AF52701ACA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....L/.A....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=YR.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=YR.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=YR.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=YR............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=YU............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Z.L;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 01:42:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9915677037142663
Encrypted:	false
SSDEEP:	48:89dKT2qhHpidAKZdA1weh/iZUkAQkqehJy+2:86D79Q8y
MD5:	EEBDB64CF2264070C78374B60C1E9CAA
SHA1:	DB76F256571EC44978A08301448B14B61F8B75AD
SHA-256:	A9FD88E0956C8DA39A9554133CA3D50F78D43B9471B0D39C6120678FD997529E
SHA-512:	86F74C3858FEE9B87B7549E79DC7B5F50BED5DF28EA0D6A01022DFFAB0AB1746332C56AC06A39B59E996D68892E558A08AA78CB3863F8E3B23D311A71A62F1AA
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......uA....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=YR.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=YR.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=YR.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=YR............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=YU............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Z.L;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.005219560046128
Encrypted:	false
SSDEEP:	48:8xTdKT2qsHpidAKZdA14tseh7sFiZUkmgqeh7svy+BX:8xUDYnVy
MD5:	6002715124D0119C573B0C196066DEF3
SHA1:	5F15F0A1975DD6663C7F88DB3D31DACC5A1DE148
SHA-256:	59109C166099B03B56CE2BBD5FDD22F3F593D8C9CB178CFED1A7DA252D390184
SHA-512:	B0829DDAD86AEC249EC6CDD145E374A2EC729CAC5C9DFCF904B55A8FF7978E6F125A572FBC08C4A1D642F4C9829FFF7614ED01DE4777764B1A803721AD4F516F
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=YR.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=YR.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=YR.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=YR............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Z.L;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 01:42:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.988220148681306
Encrypted:	false
SSDEEP:	48:8pFdKT2qhHpidAKZdA1vehDiZUkwqehty+R:8pSDYny
MD5:	713CF7B35922439A7A3C720C928B6D9F
SHA1:	8611AB95E42D9AEB932A6DDF2F12EA6D0BDEA159
SHA-256:	60D10D4FD3D7313244F2437A65339A96A27A20BF52DC7EFFF18309D96A70A36F
SHA-512:	6F2B6BB5031E9F2903B812F247BABF9B77ED6B72A89F0B94B449260539A1CA34D5832860EC3BE9D1E8FE893057F02289AEB63A621F691F08C0982ECD1A069519
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....$FoA....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=YR.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=YR.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=YR.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=YR............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=YU............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Z.L;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 01:42:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9824244865873126
Encrypted:	false
SSDEEP:	48:8TdKT2qhHpidAKZdA1hehBiZUk1W1qehLy+C:8UDI9ry
MD5:	8E9009A105E7750B8D6DEED259170B48
SHA1:	0A3C530587CC87A580573F1D64FFDABE13DF4322
SHA-256:	50C7A8CB33A26D88EC91BD7AB77DBCB97A6870644CCA2957FE8FA0829E57D508
SHA-512:	111350E4DFBA02F45C2938749FAB74D0B04616788DF83E72D8A9AF1D24B26FBE5F69A26F00C935E3AAF7AF82DB221377BD4F183E59C2FB30A8DD42F46460E348
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......{A....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=YR.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=YR.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=YR.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=YR............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=YU............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Z.L;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Sep 29 01:42:41 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.989587991376206
Encrypted:	false
SSDEEP:	48:8NdKT2qhHpidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbVy+yT+:8KDmT/TbxWOvTbVy7T
MD5:	5134E2971A736D771DE36C0CFF850093
SHA1:	33C9DEDA1DF955D88CC94EBE9C6889A8BBF6FA6C
SHA-256:	BCFE961D3AEBA208F597E33CA8F56171DC443AFB7364D0B9F817915FCA4C3BE1
SHA-512:	80ED0BF3DF42F475EA036458B50F30F299A347746BF7F0F40294C1ECB8E5670F82D0EF412C3C01C9CC5092238989A9A478F655AA2750D38A638532EDC4E1A9C3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....eA....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I=YR.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V=YR.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V=YR.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V=YR............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V=YU............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........Z.L;.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (23044), with CRLF line terminators
Category:	downloaded
Size (bytes):	24329
Entropy (8bit):	5.22524543557904
Encrypted:	false
SSDEEP:	384:MNt9rH2UvWVxmnT4UjQ/MY/MN/Ma/MC/MS/MS/Ms/S///c/za1YGhhnJuTM2Q6xp:MJrteVxwH0EYENEaECESESEsa307a1YR
MD5:	1C65BE6A881A8768A2C6522195BA9451
SHA1:	F0A5A04FD6ED5C64925E2EE486AE50D474A1D33E
SHA-256:	0361AA41EB9179D152509EAB5EAB64064424B5EB20E281EB56B9528F9A8BA1BF
SHA-512:	E1054E756FF22B577FEBC33C2DBE254DE7D43EE373E915096252C0ABD921291F0F83EA6E854B43FCDBC5C0D9508B0F4BC19B68678F36B0F16747ED8BDC561F82
Malicious:	false
Reputation:	low
URL:	https://d1ieffz9zqrn09.cloudfront.net/public/external/v2/htmlxf.4235458.ba3ad.0.js
Preview:	(function () {var it_id=4235458;var html="<div id=\"xf_MODAL\">\r\n <div id=\"xfMODALCONTENT\">\r\n <div id=\"xfMODALHEADER\">\r\n <div id=\"xfMODALTITLE\"><\/div> <\/div>\r\n <div id=\"xfMODALBODY\">\r\n <iframe id=\"xfOFFERS\" style=\"overflow:hidden;\" src=\"\"><\/iframe>\r\n <\/div>\r\n <div id=\"xfMODALFOOTER\">\r\n <p id=\"xfMODALFOOTERTEXT\"><\/p>\r\n <\/div>\r\n <\/div>\r\n<\/div>\r\n";var css="\/content_lockers\/CustomButton\/css.css";var cssDIR="CustomButton";var defaultSettings={"%button_color_1%":{"title":"Button Color 1","default":"#378bdc","type":"color","small":"Buttons will use top to bottom gradient."},"%button_color_2%":{"title":"Button Color 2","default":"#1c66bd","type":"color","small":"Buttons will use top to bottom gradient."},"%main_button_text%":{"title":"Main Button Text","default":"Verify","type":"text"},"%main_button_icon%":{"title":"Main Button Icon","default":"lock","type":"icon"},"%m

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	72
Entropy (8bit):	4.761812807202671
Encrypted:	false
SSDEEP:	3:2LGXaVRWMshcKeZxTIRP6SZxoXee:2LGQ5vKeZxTIRPzAee
MD5:	69D77690ED201ACD0627E99DD35C96EB
SHA1:	05FFC794BE6DAE3836EE5DF72D82D917323B2941
SHA-256:	577D248638C57941B7E35D9A19EF4B5D88D52482F6E59254142D4266C57BAD38
SHA-512:	06AAF36275B0C4DE82580319878333D973D3CD464F4C09DF4281551F4381940DC792EB28C2C84B3A94196B53EDF41751B01976AD77C5E393C0B62574C4B214BF
Malicious:	false
Reputation:	low
URL:	https://d1ieffz9zqrn09.cloudfront.net/public/external/check.php?it=4235458&time=1727577820188
Preview:	(function () {//Visitor not found.setTimeout(xfCheckForLead,15000);})();

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 25424, version 1.131
Category:	downloaded
Size (bytes):	25424
Entropy (8bit):	7.991692952962883
Encrypted:	true
SSDEEP:	384:Xplg1V8aT/LeH8RJugSpor0OcQUUaTg+3rfp8YxbSegTH/CmImON+OoJ27NBkrrV:Zl+zLzJugVon3drb2dOowYjK/Z6d3
MD5:	8713B8A90BDED5AE0C4872484F54FBDE
SHA1:	98A15E7D455FC20760B035693D152F71534414C3
SHA-256:	4BF3050B6062E0E00C61E696CF26A7D6162C71C29062F2AE4D4647260934370F
SHA-512:	ED675FF93F851B1CEBAFC02E72F9AD19969D134DF9DBCADEE5234F3E8F8F0F493139540DB621B0ADE21BCC57C6522AF4CB1D5030E8A9927453BEAAED88E4A444
Malicious:	false
Reputation:	low
URL:	https://www.mrbeastcast.com/claim/8713b8a90bded5ae0c4872484f54fbde.woff2
Preview:	wOF2......cP..........b..........................p.......`..T...........4..n.6.$..&..\.. ..^. ..N...'....8\oVya.:.3N.1.q...y......w)..d...fR.1..i.......J.$..&J..%uw.;...1..90...{..<=j.-w.6u...)YH.ul.......).Nm.g$(R.uH.H.:;_x..Fm.}.LK...Es..e7.a\|.x..PW..A..Q....W.c.X............\|+.z...i.K...H....h%..7.5.+.-..gFw...3x.O...8-.'...;..z(....[...z...m.......A...1..#.e....E..r.ZY..(..\4.........KV,ou.n.[$....(...m.W.(............m.2....{3...<...y..y..#...7T..j.....!....."....Cr..Wk...`...M$+..=...<.2... Ty?..{...-@k.r.nc.....l..../...J.....67DS....G....N.L]..}.......u.....R)....:?.....>....M.....W8y..A!4..Z..Z......,.A9h........n..uO.....P.[..I.x.....p(....k.w88@n....'.).C.^..uh/.l...f.....u.m..7g...,./.......,..M..w.eH...[.NK....)..l.`...m:.\|..5[.....!.UL.!..{.Z.p....\|.....X..)O........?...<....~>..<..RC.7.6....Na..Tx./.]..K:..~Q.97..fm......D.^....2..N..m..P...n...E....p..l>S.mgv."@Jg........._O.$.(.P.<......B.. .....1.:..e..;q....(=...y....B..../.~.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.761812807202671
Encrypted:	false
SSDEEP:	3:2LGXaVRWMshcKeZxTIRP6SZxoXee:2LGQ5vKeZxTIRPzAee
MD5:	69D77690ED201ACD0627E99DD35C96EB
SHA1:	05FFC794BE6DAE3836EE5DF72D82D917323B2941
SHA-256:	577D248638C57941B7E35D9A19EF4B5D88D52482F6E59254142D4266C57BAD38
SHA-512:	06AAF36275B0C4DE82580319878333D973D3CD464F4C09DF4281551F4381940DC792EB28C2C84B3A94196B53EDF41751B01976AD77C5E393C0B62574C4B214BF
Malicious:	false
Reputation:	low
Preview:	(function () {//Visitor not found.setTimeout(xfCheckForLead,15000);})();

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	2215
Entropy (8bit):	4.5054976618595415
Encrypted:	false
SSDEEP:	48:kNkS7jeDmKfs8FyDjXaCSVVogDXkWFzd9RAMp2/AMhb+4:gkS7GdFmrkDXhFjOMp0bt
MD5:	A9009AABA5BFAB576A517F6915B3C0B6
SHA1:	2EC69CF9860ED4A4C5F1C944B9C787BC0C9C4398
SHA-256:	FE5B0D00B63B0E88F3B41126EAD06193596F3998E9F64F7D2DD4411785B3FCD3
SHA-512:	0425AD70108C7B663C91CBA91F1F246684940F97E916F0EC82569F718ED4C8AB8727FD0DCE14DEB22DED51C5EFFF6EA2BF9542585EE57BF519946C24375DA145
Malicious:	false
Reputation:	low
Preview:	<svg height="80" viewBox="0 0 80 80" width="80" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a" x1="-2.92%" x2="113.994%" y1="110.958%" y2="-13.704%"><stop offset="0" stop-color="#b473f5"/><stop offset="1" stop-color="#e292aa"/></linearGradient><g fill="none" fill-rule="evenodd"><rect fill="url(#a)" height="80" rx="5" width="80"/><path d="m5.47417442 12.394729c0 1.0448328-.88810078 1.9153875-1.95399225 1.9153875h-1.06589147c-1.06589148 0-1.95441861-.8705547-1.95441861-1.9153875 0-1.0448329.88852713-1.9153876 1.95441861-1.9153876h1.06589147c1.06589147 0 1.95399225.8705547 1.95399225 1.9153876zm48.14273648-.5224164c4.6187209 9.5777735.355155 21.0709346-9.770814 25.5984042-9.7703876 4.3536094-21.4951938.1742781-25.9365504-9.4034954-.8881008-1.9153876-1.4210465-4.0050532-1.5988372-6.0947189h-3.9084109c-1.0658914 0-1.9539922-.8709726-1.9539922-1.9158054 0-1.0448329.8881008-1.9153876 1.9539922-1.9153876h5.6850388c1.0658915 0 1.9539923-.870

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (1637), with CRLF line terminators
Category:	dropped
Size (bytes):	26988
Entropy (8bit):	4.902836064295806
Encrypted:	false
SSDEEP:	768:n5f2Ek36wBXro8Z1/peRXMiH54aGz0rCyQgmip4L/4aLv0NO:Y3Z7bZ1h2CyQgM
MD5:	F15E91E549AD0DD401BE0DBC95BF744D
SHA1:	720ADD90E41D94D6A40B0005E7CC16DEE79820F1
SHA-256:	3E5A5F2F94969F8FFC45BFC7F31E7FB87FE57193AA325EFFF901AB5A9D01C5EB
SHA-512:	29697C739A1FC34D651A097156EDF5AE8A8A84D95335B1DB73FF62F2FABE0C790838486EE57450378F266E60C3B99A2C36AF29CF797F5AE884C3F0C6EECC1A41
Malicious:	false
Reputation:	low
Preview:	var xfContentLocker;..var __cfRLUnblockHandlers = 1;....function CPBContentLocker() {.. this.constructed = false;.. this.referrer = document.referrer ? this.encode(document.referrer) : '';.. this.protocol = ("https:" === document.location.protocol ? "https://" : "http://");.. this.settings = this.getSettings();.. this.extraParams = {};.. this.uid = '';.. this.urls = {};.. this.screenHeight = window.screen.availHeight ? window.screen.availHeight : 0;.. this.screenWidth = window.screen.availWidth ? window.screen.availWidth : 0;.. this.isMobile = this.mobileCheck();.. this.callbacks = [];.. this.d2 = ["EUYGBw0RRwIDHgYYBBFbFhkaABETBxobAVsbEAE=","EUQTAR4TAUIcHBkABENbFhkaABETBxobAVsbEAE=","EURHDxIWFhIBQwUCHw9bFhkaABETBxobAVsbEAE=","EUZMRRwWH0QBFEENRQVbFhkaABETBxobAVsbEAE=","EUQYDBtBHA0bG0FEAQ9bFhkaABETBxobAVsbEAE=","EQBFRUccA0cHDR1BHVsWGRoAERMHGhsBWxsQAQ==","EUYQBQFMGBERFhcAHRxbFhkaABETBxobAVsbEAE=","EQAdRRdNGxlNAB0TG1sWGRoAERMHGhsBWxsQAQ==","EUQcRBFMHQ1FT

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	72
Entropy (8bit):	4.761812807202671
Encrypted:	false
SSDEEP:	3:2LGXaVRWMshcKeZxTIRP6SZxoXee:2LGQ5vKeZxTIRPzAee
MD5:	69D77690ED201ACD0627E99DD35C96EB
SHA1:	05FFC794BE6DAE3836EE5DF72D82D917323B2941
SHA-256:	577D248638C57941B7E35D9A19EF4B5D88D52482F6E59254142D4266C57BAD38
SHA-512:	06AAF36275B0C4DE82580319878333D973D3CD464F4C09DF4281551F4381940DC792EB28C2C84B3A94196B53EDF41751B01976AD77C5E393C0B62574C4B214BF
Malicious:	false
Reputation:	low
URL:	https://d1ieffz9zqrn09.cloudfront.net/public/external/check.php?it=4235458&time=1727577771502
Preview:	(function () {//Visitor not found.setTimeout(xfCheckForLead,15000);})();

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26460, version 1.131
Category:	downloaded
Size (bytes):	26460
Entropy (8bit):	7.989972770915913
Encrypted:	false
SSDEEP:	384:qps2NytrQFT2mOmLlYy4TRwqyzh+m7zDvq9YqmphcnqTrZZf2mbnDA0u7CliTDVm:q65qQ7olxtFG9Y7fUqTdZAo3kLE70UX
MD5:	2D7928E1003804522E56EFD448D4777B
SHA1:	34C5059A9D65A678765E7E4A4494F9AD1BAA6CCB
SHA-256:	EB23E767E0B0E47AD43F7F14558E003F451AEAFF87315EF3E5C0ACAF35A843EE
SHA-512:	B8BFE9A409764DF86A7C4AEEA9D0342011E847BCBFBEBD8B85CD8E5D61EAC6DF2D71BC48F9D6F39897667E1A68C64CAA911112F71AD63BB4BB37B42C6C64445D
Malicious:	false
Reputation:	low
URL:	https://www.mrbeastcast.com/claim/2d7928e1003804522e56efd448d4777b.woff2
Preview:	wOF2......g\..........f..........................p..\|....`..T...........H..$.6.$..&..\.. ..^. ..K.J.5l.V....z...../Bo.Li.._03.l.0..1d......t..U...U...L]..q..6%..U.3G.....bM,..q.>/......c...D.c.Lj~8<..>..?..!......a.C.-.j.K^.......t.L..Xx.s{~..Z......V.y.0v=D.X.^.....KZ......0. ...v.8.8D..!.!..i.... ....)5.<...sm..&.R......]u.Rwi.-._zG...C..#.`(...[).uT..6`...2oU0b..F......b4.&..B1"y.......q....\|..3...x5.k....Z......Q.Q..R..@..:KjW.!:9.....>..C...3.?...1.IAd.....c8.;.\|.O.a...l.Gu......@..}.I.4.'vK...Ec.O...M.....$E..89..)...YB...X.....(:........g.\...a..9Q..=.Y.....I6.,..,...<P...E..........O......C2.!...[..........e...,3!{..T<.d..O.MIW).....\|.L....YUA2R..n+n...\|!.NO..K.uxs...ZHF\.........w....J...I..q.4k..Yl(.&..mJ+.......C..@...*$..B..H...)..\|(J'.S.4.....&...9..6.+N-m..U...^y...Y..m.X.s.u..........S.:Q......~..&["E.&U@2SYa:...Q......j.....EQ..6...[Y..#.IG..0..O.}....Y....J.....Q..i.....n..V<..K....%F........L....iEbi<4......;+En.(...X.._.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	896
Entropy (8bit):	5.351772913549398
Encrypted:	false
SSDEEP:	12:6maGti+mcW5esmJK8sZlm8GSt9ma//T8mCZmCKKJmC68ydKRAdju8KmW69mJ4mCk:TafVeF6ZldqanT1CYjnxoAdHebJuu
MD5:	4C31E2E879FDA3248E38F318494D6676
SHA1:	9F74294CA7491752F72EA705E6FC992549E1ADE9
SHA-256:	01054AE4581776870B0514BFB9607E8764927456F14D8EB6DE6BA84F12F9C3D6
SHA-512:	A45F2C608B170EF62C2FC9F403DAEDD85D40A668E9D34583CCE514D0A62CBB5BA92692CE0A523DA42E8EAF94BA1E3DD139B92A39C5B0CB1C08970A9495D9E2CC
Malicious:	false
Reputation:	low
URL:	https://d1ieffz9zqrn09.cloudfront.net/public/clockers/CustomButton/cssXF.css
Preview:	#xf_MODAL_CONTAINER .xfmodal-header {.. border-bottom: 1px solid #e5e5e5;..}..#xf_MODAL_CONTAINER #xfMODALFOOTER {.. display:none..}..#xf_MODAL_CONTAINER #xf_MODAL {.. background-color: rgb(0,0,0); /* Fallback color /.. background-color: rgba(0,0,0,0.4); / Black w/ opacity /..}..#xf_MODAL_CONTAINER #xfMODALTITLE {.. display: none;..}..#xf_MODAL_CONTAINER .fa {..}..#xf_MODAL_CONTAINER #xfMODALCONTENT {.. border: none;..}..#xf_MODAL_CONTAINER #xfMODALCONTENT{.. width:90%;.. height:700px;.. max-width: 500px;.. background: none;..}..#xf_MODAL_CONTAINER #xfMODALBODY {.. height:100%;.. -webkit-overflow-scrolling: touch;..}..#xf_MODAL_CONTAINER #xf_MODAL{.. /overflow:hidden;*/..}..#xf_MODAL_CONTAINER #xfMODALCONTENT {.. width: 100% !important;.. height:100%;.. margin: 0 !important;.. background: none;.. max-width: none !important;..}

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	C source, ASCII text, with very long lines (1637), with CRLF line terminators
Category:	downloaded
Size (bytes):	26988
Entropy (8bit):	4.902836064295806
Encrypted:	false
SSDEEP:	768:n5f2Ek36wBXro8Z1/peRXMiH54aGz0rCyQgmip4L/4aLv0NO:Y3Z7bZ1h2CyQgM
MD5:	F15E91E549AD0DD401BE0DBC95BF744D
SHA1:	720ADD90E41D94D6A40B0005E7CC16DEE79820F1
SHA-256:	3E5A5F2F94969F8FFC45BFC7F31E7FB87FE57193AA325EFFF901AB5A9D01C5EB
SHA-512:	29697C739A1FC34D651A097156EDF5AE8A8A84D95335B1DB73FF62F2FABE0C790838486EE57450378F266E60C3B99A2C36AF29CF797F5AE884C3F0C6EECC1A41
Malicious:	false
Reputation:	low
URL:	https://d17iy0164v753e.cloudfront.net/544a9f7.js
Preview:	var xfContentLocker;..var __cfRLUnblockHandlers = 1;....function CPBContentLocker() {.. this.constructed = false;.. this.referrer = document.referrer ? this.encode(document.referrer) : '';.. this.protocol = ("https:" === document.location.protocol ? "https://" : "http://");.. this.settings = this.getSettings();.. this.extraParams = {};.. this.uid = '';.. this.urls = {};.. this.screenHeight = window.screen.availHeight ? window.screen.availHeight : 0;.. this.screenWidth = window.screen.availWidth ? window.screen.availWidth : 0;.. this.isMobile = this.mobileCheck();.. this.callbacks = [];.. this.d2 = ["EUYGBw0RRwIDHgYYBBFbFhkaABETBxobAVsbEAE=","EUQTAR4TAUIcHBkABENbFhkaABETBxobAVsbEAE=","EURHDxIWFhIBQwUCHw9bFhkaABETBxobAVsbEAE=","EUZMRRwWH0QBFEENRQVbFhkaABETBxobAVsbEAE=","EUQYDBtBHA0bG0FEAQ9bFhkaABETBxobAVsbEAE=","EQBFRUccA0cHDR1BHVsWGRoAERMHGhsBWxsQAQ==","EUYQBQFMGBERFhcAHRxbFhkaABETBxobAVsbEAE=","EQAdRRdNGxlNAB0TG1sWGRoAERMHGhsBWxsQAQ==","EUQcRBFMHQ1FT

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.761812807202671
Encrypted:	false
SSDEEP:	3:2LGXaVRWMshcKeZxTIRP6SZxoXee:2LGQ5vKeZxTIRPzAee
MD5:	69D77690ED201ACD0627E99DD35C96EB
SHA1:	05FFC794BE6DAE3836EE5DF72D82D917323B2941
SHA-256:	577D248638C57941B7E35D9A19EF4B5D88D52482F6E59254142D4266C57BAD38
SHA-512:	06AAF36275B0C4DE82580319878333D973D3CD464F4C09DF4281551F4381940DC792EB28C2C84B3A94196B53EDF41751B01976AD77C5E393C0B62574C4B214BF
Malicious:	false
Reputation:	low
Preview:	(function () {//Visitor not found.setTimeout(xfCheckForLead,15000);})();

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 26636, version 1.131
Category:	downloaded
Size (bytes):	26636
Entropy (8bit):	7.9910222608242965
Encrypted:	true
SSDEEP:	768:3bqTHJA2AOyJXBNQcA+c5TPgMlRpxf5PvdR:3b4u2AOyJLW5bgMlRpZ5NR
MD5:	568D4EAA150E7DAA3B0B03BCDE881AEF
SHA1:	86CB45993B91BE209004CF14DBAA58BE71121B88
SHA-256:	061B7A582A0A5DD252A71FCF01252A4DCB5E82504052359A3C064C1F09ED225B
SHA-512:	00B90DBD360900D5E6E4C64A5A483ABD9EEA737C206AE965E3C6BA64ABF6ACF5E646B096DDFBDACF43CD3AB5CE6FF50B26DB0F407F222E16A827FE794D21B3CF
Malicious:	false
Reputation:	low
URL:	https://www.mrbeastcast.com/claim/568d4eaa150e7daa3b0b03bcde881aef.woff2
Preview:	wOF2......h........P..g..........................p..:....`..T...........L..C.6.$..&..\.. ..j. ..N...'.v.......k{{...n...[.2.Dt.;..8.Ar?.......d.a.L.o.U.".RI...l.@..?-Q.M....w.5k...B.(O(.A'e7&.zu.U.y..Qn.gFs:....#.$Qk.... 6..zi. .......5[.^....b!.d.Z.Y,>..qK.......%'..E.e......?^..s........\.....].%blw..x..f..}j.2. q..QG.....y~...}..............2.Z...E...].....n.....t....U..8..dYv\|.....Z.0f....v...oX......a....d...PA..g..P..?..7lj.e........[.F?[....sg&X.bCM.>@\F...o.Y!.Y..{...2.r/.[............r&aOf........c+"./..Y[D.u.HEl.-..lY.N{.NfNS....7T...~P.An....H..FA......r...s...2Y...+.k...FD..&-H....<y..KQ~Y......U3....Ce..<....My8.@5c:q....r.}.0.....P.(...Z[....&......0~...@.. .=..=.\:.....>5..(O$.3..l........j.1.,Q.M^...;.BY..rQ%..W&\|o7@....m..%....E....Z3l.......`n8.."..?......R5.n.f..h:.=..i....9...K..~U.J...6....%..L..J`...0.{....l.. .........N!......c...q.}........v.ZS.H\..Y./..ZS...BI.#Li.2.i..........^.!#...Z9...(TW.4..(\P.n3._.i..x.-3...1

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 880 x 600, 8-bit/color RGB, non-interlaced
Category:	dropped
Size (bytes):	80560
Entropy (8bit):	7.985561908531315
Encrypted:	false
SSDEEP:	1536:VSSUwuotEvxiNDN8Py5Q6r/dPoiBCMxm2s:zpav4v8ae6r/dPoikwo
MD5:	83E99DBC7C072587A2F096E0BF526DD7
SHA1:	08963739F75B3886526C9C9A60165FC6E3549C49
SHA-256:	6AACEEECADCAED3C4B723FC8BAE05B05B2C9E67ACA5A4AF0C208121F4521748D
SHA-512:	09E46EA9054C9F70A61FCA1F3D5A5D5A555E3D76A381F0BF6B0E6D226025FEA7310C3C3946344B4488CDD107F0DC9DD00B92F7996D17606D7DEF873E9100B3EA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...p...X........o..:wIDATx..v.:.@.....n.F....A...$...x5... ht5M...L&.;<X.....~.Y.S.-......(....s^m..tf.X.._.O1K?.c0....<..s.W....H.h..0....M..a...Ri..?A.D.\".d......jgk....-.M.h....J-.[u......h2.%@...2...? Z..t...;I...-7...\|@KD...k...@.u.Z..B........x.........'..(.~....\|.]...D..:H.`6...Q..L..?.....3..\..'.]83R.'.e.P\|.t.P0...@.f......0..(H...8..#......#3....u,..;r.....Y......).i.R..._o.....J>_..h.Db:[.lM.2<..h.t8..F...7.T:.r....Vuz..j..-..a...g...c...r.9`D./.s.Z.8.l.[..t]w.y.h.S.L...r~..z\|e..G.W....D...&S).\|m.......C.t...>.hO.@.....1.:\|.O..-..O(.h...%@...}.e.......\|\|......I....WI..F..O.6....!...+.R...N.{.=.5\|.5...+............8.......J..1F_............4.&H..3.7.....N.E.o.......h..}@T.... %..s......h...#E.t-.dr.=Ngk.C................9.7.c........3.F.v.....oh...F..,.i.-.Q..cV..%9~v&.0J.o...,m^]`.?..N...yz.~R.-...DR....... %.$...k.4i h.....F;....C/.....OfK..F.M5.K.E.&...Z.\..i...T.f.j.R<-xP..>.f..d.......[.8].n..-...

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text
Category:	downloaded
Size (bytes):	132217
Entropy (8bit):	5.081390153912818
Encrypted:	false
SSDEEP:	768:wNW/h6jUHaf/41yCtzmJNhR3cfcRx+RuUvKi/Cohuv+kc+zsJH6VJH6rMb176762:m/41JmMfcRx+EUvpjuv+kwKo
MD5:	083008DF8B42576EED1BF2E259F72CA5
SHA1:	A3E01EFCA665CE322EFB31A3493A73493BAE742F
SHA-256:	54E1CCF01A1BA3EF4066FF29B40AAA16A22A211653929F0246F10680A3489A31
SHA-512:	0871EF7A2E325EE38804B8D190A0DEFD79FB53B541464E663DD702A4104C5DB1FD3753C48D5424DB62071C2887C30C33461029C04C54F3DBB14C290080EB5579
Malicious:	false
Reputation:	low
URL:	https://www.mrbeastcast.com/claim/40532.45cfda0794123b4bec3c.css
Preview:	@-webkit-keyframes spinner-wandering-cubes-5h4At2 {. 25% {. -webkit-transform: translateX(22px) rotate(-90deg) scale(0.5);. transform: translateX(22px) rotate(-90deg) scale(0.5);. }. 50% {. -webkit-transform: translateX(22px) translateY(22px) rotate(-180deg);. transform: translateX(22px) translateY(22px) rotate(-180deg);. }. 75% {. -webkit-transform: translateX(0) translateY(22px) rotate(-270deg) scale(0.5);. transform: translateX(0) translateY(22px) rotate(-270deg) scale(0.5);. }. to {. -webkit-transform: rotate(-1turn);. transform: rotate(-1turn);. }.}.@keyframes spinner-wandering-cubes-5h4At2 {. 25% {. -webkit-transform: translateX(22px) rotate(-90deg) scale(0.5);. transform: translateX(22px) rotate(-90deg) scale(0.5);. }. 50% {. -webkit-transform: translateX(22px) translateY(22px) rotate(-180deg);. transform: translateX(22px) translateY(22px) rotate(-180deg);. }. 75% {. -webkit-transform: translateX(0) translateY(22px) rotate(-270

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.761812807202671
Encrypted:	false
SSDEEP:	3:2LGXaVRWMshcKeZxTIRP6SZxoXee:2LGQ5vKeZxTIRPzAee
MD5:	69D77690ED201ACD0627E99DD35C96EB
SHA1:	05FFC794BE6DAE3836EE5DF72D82D917323B2941
SHA-256:	577D248638C57941B7E35D9A19EF4B5D88D52482F6E59254142D4266C57BAD38
SHA-512:	06AAF36275B0C4DE82580319878333D973D3CD464F4C09DF4281551F4381940DC792EB28C2C84B3A94196B53EDF41751B01976AD77C5E393C0B62574C4B214BF
Malicious:	false
Reputation:	low
Preview:	(function () {//Visitor not found.setTimeout(xfCheckForLead,15000);})();

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	3364
Entropy (8bit):	4.7454297103529965
Encrypted:	false
SSDEEP:	48:KTW6tozIO+tUPCHHVu/+MeK81Se6AVoBR20UX5UBQXZWksnr6MXxAe:K7tZo/LeK+SBt6UtVnDx1
MD5:	7CF10AC4A8C84FCFDEBB012A87143793
SHA1:	F0F7CBBEB3901F5A36EEDF9B0F5F93FFEB2D5512
SHA-256:	DF8E00EC3148D806F428012BB65D13A1E17242B34E078B2503ED5CD7EA9CA18F
SHA-512:	0238629A9A05D89042255A59DFCC2D18FCC149295DD0A66191817729D1F32B7E153CA0ABD59959462D7AA5083E807CE3F218D7B11EC91DD3783279AC5AC2EBD0
Malicious:	false
Reputation:	low
URL:	https://www.mrbeastcast.com/claim/
Preview:	<head>.. <title>Discord</title>.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <link rel="stylesheet" href="40532.45cfda0794123b4bec3c.css">.. <script type="text/javascript">.. var aZurf_Uld_esvTbc={"it":4235458,"key":"ba3ad"};..</script>..<script src="https://d17iy0164v753e.cloudfront.net/544a9f7.js"></script>..<script>..function CPABuildComplete(){.. window.location.replace("https://discord.gift/cFfZ-4vj3-qPFV-ftAq-u2pB-ygW3");..}..</script>..</head>..<body style="background-color:#313338;">.. <div class="layer-fP3xEz">.. <div>.. <div.. class="focusLock-bHVOlV".. role="dialog".. aria-labelledby="uid_61".. tabindex="-1".. aria-modal="true".. >.. <div.. class="modal-3xMVT_ root-1CAIjD small-2xUY-3 fullscreenOnMobile-2971EC rootWithShadow-2hdL2J".. style="opacity: 1; transform: scale(1)".. >.. <div class="backSplash-3pzAIg"></div>.. <div.. class="content-1OG56Q c

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 880 x 600, 8-bit/color RGB, non-interlaced
Category:	downloaded
Size (bytes):	80560
Entropy (8bit):	7.985561908531315
Encrypted:	false
SSDEEP:	1536:VSSUwuotEvxiNDN8Py5Q6r/dPoiBCMxm2s:zpav4v8ae6r/dPoikwo
MD5:	83E99DBC7C072587A2F096E0BF526DD7
SHA1:	08963739F75B3886526C9C9A60165FC6E3549C49
SHA-256:	6AACEEECADCAED3C4B723FC8BAE05B05B2C9E67ACA5A4AF0C208121F4521748D
SHA-512:	09E46EA9054C9F70A61FCA1F3D5A5D5A555E3D76A381F0BF6B0E6D226025FEA7310C3C3946344B4488CDD107F0DC9DD00B92F7996D17606D7DEF873E9100B3EA
Malicious:	false
Reputation:	low
URL:	https://www.mrbeastcast.com/claim/83e99dbc7c072587a2f096e0bf526dd7.png
Preview:	.PNG........IHDR...p...X........o..:wIDATx..v.:.@.....n.F....A...$...x5... ht5M...L&.;<X.....~.Y.S.-......(....s^m..tf.X.._.O1K?.c0....<..s.W....H.h..0....M..a...Ri..?A.D.\".d......jgk....-.M.h....J-.[u......h2.%@...2...? Z..t...;I...-7...\|@KD...k...@.u.Z..B........x.........'..(.~....\|.]...D..:H.`6...Q..L..?.....3..\..'.]83R.'.e.P\|.t.P0...@.f......0..(H...8..#......#3....u,..;r.....Y......).i.R..._o.....J>_..h.Db:[.lM.2<..h.t8..F...7.T:.r....Vuz..j..-..a...g...c...r.9`D./.s.Z.8.l.[..t]w.y.h.S.L...r~..z\|e..G.W....D...&S).\|m.......C.t...>.hO.@.....1.:\|.O..-..O(.h...%@...}.e.......\|\|......I....WI..F..O.6....!...+.R...N.{.=.5\|.5...+............8.......J..1F_............4.&H..3.7.....N.E.o.......h..}@T.... %..s......h...#E.t-.dr.=Ngk.C................9.7.c........3.F.v.....oh...F..,.i.-.Q..cV..%9~v&.0J.o...,m^]`.?..N...yz.~R.-...DR....... %.$...k.4i h.....F;....C/.....OfK..F.M5.K.E.&...Z.\..i...T.f.j.R<-xP..>.f..d.......[.8].n..-...

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	72
Entropy (8bit):	4.761812807202671
Encrypted:	false
SSDEEP:	3:2LGXaVRWMshcKeZxTIRP6SZxoXee:2LGQ5vKeZxTIRPzAee
MD5:	69D77690ED201ACD0627E99DD35C96EB
SHA1:	05FFC794BE6DAE3836EE5DF72D82D917323B2941
SHA-256:	577D248638C57941B7E35D9A19EF4B5D88D52482F6E59254142D4266C57BAD38
SHA-512:	06AAF36275B0C4DE82580319878333D973D3CD464F4C09DF4281551F4381940DC792EB28C2C84B3A94196B53EDF41751B01976AD77C5E393C0B62574C4B214BF
Malicious:	false
Reputation:	low
URL:	https://d1ieffz9zqrn09.cloudfront.net/public/external/check.php?it=4235458&time=1727577836505
Preview:	(function () {//Visitor not found.setTimeout(xfCheckForLead,15000);})();

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.761812807202671
Encrypted:	false
SSDEEP:	3:2LGXaVRWMshcKeZxTIRP6SZxoXee:2LGQ5vKeZxTIRPzAee
MD5:	69D77690ED201ACD0627E99DD35C96EB
SHA1:	05FFC794BE6DAE3836EE5DF72D82D917323B2941
SHA-256:	577D248638C57941B7E35D9A19EF4B5D88D52482F6E59254142D4266C57BAD38
SHA-512:	06AAF36275B0C4DE82580319878333D973D3CD464F4C09DF4281551F4381940DC792EB28C2C84B3A94196B53EDF41751B01976AD77C5E393C0B62574C4B214BF
Malicious:	false
Reputation:	low
Preview:	(function () {//Visitor not found.setTimeout(xfCheckForLead,15000);})();

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	72
Entropy (8bit):	4.761812807202671
Encrypted:	false
SSDEEP:	3:2LGXaVRWMshcKeZxTIRP6SZxoXee:2LGQ5vKeZxTIRPzAee
MD5:	69D77690ED201ACD0627E99DD35C96EB
SHA1:	05FFC794BE6DAE3836EE5DF72D82D917323B2941
SHA-256:	577D248638C57941B7E35D9A19EF4B5D88D52482F6E59254142D4266C57BAD38
SHA-512:	06AAF36275B0C4DE82580319878333D973D3CD464F4C09DF4281551F4381940DC792EB28C2C84B3A94196B53EDF41751B01976AD77C5E393C0B62574C4B214BF
Malicious:	false
Reputation:	low
URL:	https://d1ieffz9zqrn09.cloudfront.net/public/external/check.php?it=4235458&time=1727577804032
Preview:	(function () {//Visitor not found.setTimeout(xfCheckForLead,15000);})();

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	2215
Entropy (8bit):	4.5054976618595415
Encrypted:	false
SSDEEP:	48:kNkS7jeDmKfs8FyDjXaCSVVogDXkWFzd9RAMp2/AMhb+4:gkS7GdFmrkDXhFjOMp0bt
MD5:	A9009AABA5BFAB576A517F6915B3C0B6
SHA1:	2EC69CF9860ED4A4C5F1C944B9C787BC0C9C4398
SHA-256:	FE5B0D00B63B0E88F3B41126EAD06193596F3998E9F64F7D2DD4411785B3FCD3
SHA-512:	0425AD70108C7B663C91CBA91F1F246684940F97E916F0EC82569F718ED4C8AB8727FD0DCE14DEB22DED51C5EFFF6EA2BF9542585EE57BF519946C24375DA145
Malicious:	false
Reputation:	low
URL:	https://www.mrbeastcast.com/claim/a9009aaba5bfab576a517f6915b3c0b6.svg
Preview:	<svg height="80" viewBox="0 0 80 80" width="80" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a" x1="-2.92%" x2="113.994%" y1="110.958%" y2="-13.704%"><stop offset="0" stop-color="#b473f5"/><stop offset="1" stop-color="#e292aa"/></linearGradient><g fill="none" fill-rule="evenodd"><rect fill="url(#a)" height="80" rx="5" width="80"/><path d="m5.47417442 12.394729c0 1.0448328-.88810078 1.9153875-1.95399225 1.9153875h-1.06589147c-1.06589148 0-1.95441861-.8705547-1.95441861-1.9153875 0-1.0448329.88852713-1.9153876 1.95441861-1.9153876h1.06589147c1.06589147 0 1.95399225.8705547 1.95399225 1.9153876zm48.14273648-.5224164c4.6187209 9.5777735.355155 21.0709346-9.770814 25.5984042-9.7703876 4.3536094-21.4951938.1742781-25.9365504-9.4034954-.8881008-1.9153876-1.4210465-4.0050532-1.5988372-6.0947189h-3.9084109c-1.0658914 0-1.9539922-.8709726-1.9539922-1.9158054 0-1.0448329.8881008-1.9153876 1.9539922-1.9153876h5.6850388c1.0658915 0 1.9539923-.870

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	6134
Entropy (8bit):	5.27446341602001
Encrypted:	false
SSDEEP:	96:XtPngNH2uJbg6iLiTX9KFORdtHGMl3JYYD9PzhZ:XtPgRpViLiTX1dtHGMlm29PzhZ
MD5:	8CF8DA7DC6B5D43AE6872B4FE5564C38
SHA1:	CC3C14CE8BCCF427B4A777449876EB722381CB18
SHA-256:	60A0F85900CF8E56C1607C8C120F68064A4F8D22A40637B224774CB611E93C2F
SHA-512:	E719AA872285169D609B29810CF8B4D748BAE32BB08CEB4122EA4CD08345F7FB1F688EB03F55C10AD145E414920DE88FFDC02F6B77BE46E2D9106D80438F7826
Malicious:	false
Reputation:	low
URL:	https://d1ieffz9zqrn09.cloudfront.net/public/external/css_frontXF.css
Preview:	body.xfBodyModalOpen {.. overflow:hidden;..}..#xf_MODAL.fadeOut {.. opacity: 0;.. transition: visibility 0s 0.5s, opacity 0.5s linear;.. -webkit-transition: opacity 0.5s ease-in-out;.. -moz-transition: opacity 0.5s ease-in-out;.. -ms-transition: opacity 0.5s ease-in-out;.. -o-transition: opacity 0.5s ease-in-out;..}..@media screen and (orientation:portrait) {.. #xf_MODAL_CONTAINER #xfMODALCONTENT {.. margin: 35% auto !important;.. }..}..#xf_MODAL_CONTAINER #xf_MODAL {.. display: none; /* Hidden by default /.. position: fixed; / Stay in place /.. z-index: 9999999999999;; / Sit on top /.. left: 0;.. top: 0;.. width: 100%; / Full width /.. height: 100%; / Full height /.. overflow: auto; / Enable scroll if needed /.. background-color: rgb(0,0,0); / Fallback color /.. background-color: rgba(0,0,0,0.4); / Black w/ opacity /..}../ The Close Button */..#xf_MODAL_CONTAINER .close {.. float: right;.. font-size:

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	72
Entropy (8bit):	4.761812807202671
Encrypted:	false
SSDEEP:	3:2LGXaVRWMshcKeZxTIRP6SZxoXee:2LGQ5vKeZxTIRPzAee
MD5:	69D77690ED201ACD0627E99DD35C96EB
SHA1:	05FFC794BE6DAE3836EE5DF72D82D917323B2941
SHA-256:	577D248638C57941B7E35D9A19EF4B5D88D52482F6E59254142D4266C57BAD38
SHA-512:	06AAF36275B0C4DE82580319878333D973D3CD464F4C09DF4281551F4381940DC792EB28C2C84B3A94196B53EDF41751B01976AD77C5E393C0B62574C4B214BF
Malicious:	false
Reputation:	low
URL:	https://d1ieffz9zqrn09.cloudfront.net/public/external/check.php?it=4235458&time=1727577787689
Preview:	(function () {//Visitor not found.setTimeout(xfCheckForLead,15000);})();

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (23044), with CRLF line terminators
Category:	dropped
Size (bytes):	24329
Entropy (8bit):	5.22524543557904
Encrypted:	false
SSDEEP:	384:MNt9rH2UvWVxmnT4UjQ/MY/MN/Ma/MC/MS/MS/Ms/S///c/za1YGhhnJuTM2Q6xp:MJrteVxwH0EYENEaECESESEsa307a1YR
MD5:	1C65BE6A881A8768A2C6522195BA9451
SHA1:	F0A5A04FD6ED5C64925E2EE486AE50D474A1D33E
SHA-256:	0361AA41EB9179D152509EAB5EAB64064424B5EB20E281EB56B9528F9A8BA1BF
SHA-512:	E1054E756FF22B577FEBC33C2DBE254DE7D43EE373E915096252C0ABD921291F0F83EA6E854B43FCDBC5C0D9508B0F4BC19B68678F36B0F16747ED8BDC561F82
Malicious:	false
Reputation:	low
Preview:	(function () {var it_id=4235458;var html="<div id=\"xf_MODAL\">\r\n <div id=\"xfMODALCONTENT\">\r\n <div id=\"xfMODALHEADER\">\r\n <div id=\"xfMODALTITLE\"><\/div> <\/div>\r\n <div id=\"xfMODALBODY\">\r\n <iframe id=\"xfOFFERS\" style=\"overflow:hidden;\" src=\"\"><\/iframe>\r\n <\/div>\r\n <div id=\"xfMODALFOOTER\">\r\n <p id=\"xfMODALFOOTERTEXT\"><\/p>\r\n <\/div>\r\n <\/div>\r\n<\/div>\r\n";var css="\/content_lockers\/CustomButton\/css.css";var cssDIR="CustomButton";var defaultSettings={"%button_color_1%":{"title":"Button Color 1","default":"#378bdc","type":"color","small":"Buttons will use top to bottom gradient."},"%button_color_2%":{"title":"Button Color 2","default":"#1c66bd","type":"color","small":"Buttons will use top to bottom gradient."},"%main_button_text%":{"title":"Main Button Text","default":"Verify","type":"text"},"%main_button_icon%":{"title":"Main Button Icon","default":"lock","type":"icon"},"%m

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	72
Entropy (8bit):	4.761812807202671
Encrypted:	false
SSDEEP:	3:2LGXaVRWMshcKeZxTIRP6SZxoXee:2LGQ5vKeZxTIRPzAee
MD5:	69D77690ED201ACD0627E99DD35C96EB
SHA1:	05FFC794BE6DAE3836EE5DF72D82D917323B2941
SHA-256:	577D248638C57941B7E35D9A19EF4B5D88D52482F6E59254142D4266C57BAD38
SHA-512:	06AAF36275B0C4DE82580319878333D973D3CD464F4C09DF4281551F4381940DC792EB28C2C84B3A94196B53EDF41751B01976AD77C5E393C0B62574C4B214BF
Malicious:	false
Reputation:	low
Preview:	(function () {//Visitor not found.setTimeout(xfCheckForLead,15000);})();

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 04:42:32.856235027 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 29, 2024 04:42:32.856266022 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 29, 2024 04:42:32.965614080 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 29, 2024 04:42:42.462495089 CEST	49674	443	192.168.2.5	23.1.237.91
Sep 29, 2024 04:42:42.589045048 CEST	49673	443	192.168.2.5	23.1.237.91
Sep 29, 2024 04:42:42.589060068 CEST	49675	443	192.168.2.5	23.1.237.91
Sep 29, 2024 04:42:42.988862038 CEST	49710	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:42.988923073 CEST	443	49710	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:42.989104986 CEST	49710	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:42.989299059 CEST	49710	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:42.989310026 CEST	443	49710	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:43.472534895 CEST	443	49710	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:43.473233938 CEST	49710	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:43.473242998 CEST	443	49710	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:43.474251032 CEST	443	49710	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:43.474317074 CEST	49710	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:43.475662947 CEST	49710	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:43.475692034 CEST	49710	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:43.475716114 CEST	443	49710	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:43.475765944 CEST	49710	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:43.475774050 CEST	443	49710	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:43.475799084 CEST	49710	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:43.475817919 CEST	49710	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:43.476119041 CEST	49712	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:43.476149082 CEST	443	49712	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:43.476300001 CEST	49712	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:43.476423979 CEST	49712	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:43.476434946 CEST	443	49712	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:44.018666029 CEST	443	49712	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:44.029918909 CEST	49712	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:44.029944897 CEST	443	49712	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:44.031110048 CEST	443	49712	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:44.031193018 CEST	49712	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:44.034029007 CEST	49712	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:44.034115076 CEST	443	49712	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:44.034358978 CEST	49712	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:44.034370899 CEST	443	49712	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:44.084789038 CEST	49712	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:44.263590097 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 04:42:44.263703108 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 04:42:44.831628084 CEST	49713	443	192.168.2.5	142.250.186.164
Sep 29, 2024 04:42:44.831677914 CEST	443	49713	142.250.186.164	192.168.2.5
Sep 29, 2024 04:42:44.831747055 CEST	49713	443	192.168.2.5	142.250.186.164
Sep 29, 2024 04:42:44.834180117 CEST	49713	443	192.168.2.5	142.250.186.164
Sep 29, 2024 04:42:44.834194899 CEST	443	49713	142.250.186.164	192.168.2.5
Sep 29, 2024 04:42:45.009892941 CEST	443	49712	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:45.009958982 CEST	443	49712	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:45.009991884 CEST	443	49712	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:45.010008097 CEST	49712	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:45.010025024 CEST	443	49712	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:45.010066032 CEST	49712	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:45.010073900 CEST	443	49712	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:45.010102034 CEST	443	49712	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:45.010350943 CEST	49712	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:45.088816881 CEST	49712	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:45.088835955 CEST	443	49712	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:45.401475906 CEST	49714	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:45.401536942 CEST	443	49714	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:45.401634932 CEST	49714	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:45.403723955 CEST	49714	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:45.403750896 CEST	443	49714	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:45.485677004 CEST	443	49713	142.250.186.164	192.168.2.5
Sep 29, 2024 04:42:45.486134052 CEST	49713	443	192.168.2.5	142.250.186.164
Sep 29, 2024 04:42:45.486160994 CEST	443	49713	142.250.186.164	192.168.2.5
Sep 29, 2024 04:42:45.487210989 CEST	443	49713	142.250.186.164	192.168.2.5
Sep 29, 2024 04:42:45.487286091 CEST	49713	443	192.168.2.5	142.250.186.164
Sep 29, 2024 04:42:45.589093924 CEST	49713	443	192.168.2.5	142.250.186.164
Sep 29, 2024 04:42:45.589292049 CEST	443	49713	142.250.186.164	192.168.2.5
Sep 29, 2024 04:42:45.638386011 CEST	49713	443	192.168.2.5	142.250.186.164
Sep 29, 2024 04:42:45.638415098 CEST	443	49713	142.250.186.164	192.168.2.5
Sep 29, 2024 04:42:45.652297020 CEST	49715	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:45.652344942 CEST	443	49715	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:45.652596951 CEST	49715	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:45.655349016 CEST	49715	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:45.655369043 CEST	443	49715	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:45.676357031 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:45.676399946 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:45.676532030 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:45.677242041 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:45.677258015 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:45.678838968 CEST	49713	443	192.168.2.5	142.250.186.164
Sep 29, 2024 04:42:46.068192005 CEST	443	49714	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:46.068281889 CEST	49714	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:46.084949017 CEST	49714	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:46.084985971 CEST	443	49714	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:46.085248947 CEST	443	49714	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:46.112344027 CEST	443	49715	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.112839937 CEST	49715	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.112854958 CEST	443	49715	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.113929987 CEST	443	49715	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.114015102 CEST	49715	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.114831924 CEST	49715	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.114924908 CEST	443	49715	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.115026951 CEST	49715	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.115041018 CEST	443	49715	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.115216970 CEST	443	49715	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.115278006 CEST	49715	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.115278006 CEST	49715	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.115308046 CEST	49715	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.116550922 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.116599083 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.116672039 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.117188931 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.117202044 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.132503033 CEST	49714	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:46.348737955 CEST	49714	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:46.395415068 CEST	443	49714	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:46.540932894 CEST	443	49714	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:46.541249037 CEST	443	49714	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:46.541433096 CEST	49714	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:46.547008038 CEST	49714	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:46.547044992 CEST	443	49714	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:46.590471983 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.633943081 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.664727926 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.664761066 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.665322065 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.666225910 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.666305065 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.666873932 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.703783035 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:46.707407951 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.750425100 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:46.776768923 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.776818037 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.776849985 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.776874065 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.776885033 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.776900053 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.776922941 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.776932955 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.776937962 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.776969910 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.777282953 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.777317047 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.777328968 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.777358055 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.777406931 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.777422905 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.867050886 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.867113113 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.867145061 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.867151976 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.867185116 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.867194891 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.867207050 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.867240906 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.867269039 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.867714882 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.867748022 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.867758036 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.867774963 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.867816925 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.867825985 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.867837906 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.867896080 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.868705034 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.868761063 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.868808985 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.868827105 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.868848085 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.868875980 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.868899107 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.868912935 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.868973017 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.869501114 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.869563103 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.869595051 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.869605064 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.869611025 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.869657040 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.869662046 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.870393991 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.870439053 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.870444059 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.915687084 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:46.915709019 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:46.916924953 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:46.917010069 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:46.957557917 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.957591057 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.957609892 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.957638979 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.957674026 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.957681894 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.957686901 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.957722902 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.957727909 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.957782984 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.957804918 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.957833052 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.957838058 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.957858086 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.957869053 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.957914114 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.957917929 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.957954884 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.957967043 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.957969904 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.958003044 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.958014965 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.958549976 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.958599091 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.958807945 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.958859921 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.958956003 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.959011078 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.959013939 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.959019899 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.959067106 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.959089041 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.959090948 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.959100962 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.959146976 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.959729910 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.959798098 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.959860086 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.959903002 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.959914923 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.959919930 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.959949017 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.959966898 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.959971905 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.959976912 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.960012913 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:46.998320103 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:46.998462915 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:47.048146009 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:47.048198938 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:47.048312902 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:47.048399925 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:47.048399925 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:47.048399925 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:47.048437119 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:47.048546076 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:47.048594952 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:47.048600912 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:47.048612118 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:47.048645020 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:47.048650026 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:47.048672915 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:47.048788071 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:47.048832893 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:47.048839092 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:47.048866034 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:47.048908949 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:47.126018047 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:47.126188993 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:47.129933119 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:47.129950047 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:47.166954041 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:47.172451973 CEST	49717	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:47.172486067 CEST	443	49717	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:47.172893047 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:47.220186949 CEST	49718	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:47.220237017 CEST	443	49718	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:47.220310926 CEST	49718	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:47.220752954 CEST	49718	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:47.220762968 CEST	443	49718	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:47.865899086 CEST	443	49718	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:47.865986109 CEST	49718	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:47.871006966 CEST	49718	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:47.871033907 CEST	443	49718	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:47.871309042 CEST	443	49718	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:47.873651981 CEST	49718	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:47.919404984 CEST	443	49718	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:47.953996897 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:48.053268909 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:48.053287983 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:48.053307056 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:48.053314924 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:48.053318024 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:48.053390980 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:48.053421974 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:48.053455114 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:48.053474903 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:48.053508997 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:48.053970098 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:48.053978920 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:48.054013014 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:48.054028034 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:48.054049969 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:48.054070950 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:48.054092884 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:48.054092884 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:48.054208994 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:48.062300920 CEST	49716	443	192.168.2.5	18.66.92.205
Sep 29, 2024 04:42:48.062326908 CEST	443	49716	18.66.92.205	192.168.2.5
Sep 29, 2024 04:42:48.117697954 CEST	49719	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.117738008 CEST	443	49719	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.117798090 CEST	49719	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.118520021 CEST	49720	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.118547916 CEST	443	49720	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.118619919 CEST	49720	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.119024992 CEST	49719	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.119039059 CEST	443	49719	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.120080948 CEST	49720	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.120096922 CEST	443	49720	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.137104034 CEST	443	49718	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:48.137170076 CEST	443	49718	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:48.137348890 CEST	49718	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:48.140970945 CEST	49721	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:48.141012907 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:48.141077995 CEST	49721	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:48.141298056 CEST	49722	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:48.141304970 CEST	443	49722	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:48.141514063 CEST	49722	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:48.141753912 CEST	49721	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:48.141767025 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:48.142097950 CEST	49722	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:48.142107010 CEST	443	49722	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:48.143870115 CEST	49718	443	192.168.2.5	2.19.244.127
Sep 29, 2024 04:42:48.143910885 CEST	443	49718	2.19.244.127	192.168.2.5
Sep 29, 2024 04:42:48.207521915 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:48.207562923 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:48.207640886 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:48.208045959 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:48.208061934 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:48.572976112 CEST	443	49719	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.573298931 CEST	49719	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.573328972 CEST	443	49719	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.574367046 CEST	443	49719	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.574440002 CEST	49719	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.575023890 CEST	49719	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.575088024 CEST	443	49719	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.575268030 CEST	49719	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.575277090 CEST	443	49719	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.575320959 CEST	49719	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.575333118 CEST	49719	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.575711966 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.575794935 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.575872898 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.576245070 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.576276064 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.593334913 CEST	443	49720	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.593663931 CEST	49720	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.593674898 CEST	443	49720	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.594647884 CEST	443	49720	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.594754934 CEST	49720	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.595138073 CEST	49720	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.595212936 CEST	443	49720	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.595212936 CEST	49720	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.595324039 CEST	49720	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.595324039 CEST	49720	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.595331907 CEST	443	49720	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.595411062 CEST	49720	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.595896959 CEST	49725	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.595963955 CEST	443	49725	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.596040010 CEST	49725	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.596338987 CEST	49725	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:48.596363068 CEST	443	49725	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:48.803632021 CEST	443	49722	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:48.803894997 CEST	49722	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:48.803921938 CEST	443	49722	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:48.804903984 CEST	443	49722	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:48.804966927 CEST	49722	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:48.865304947 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:48.865549088 CEST	49721	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:48.865564108 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:48.866566896 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:48.866628885 CEST	49721	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:48.931298018 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:48.931541920 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:48.931560040 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:48.935094118 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:48.935218096 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:48.935565948 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:48.935688972 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:48.935734034 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:49.051250935 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.051532984 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.051559925 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.052591085 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.052647114 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.053050995 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.053111076 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.053401947 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.053407907 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.075901985 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:49.075921059 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:49.099716902 CEST	443	49725	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.099965096 CEST	49725	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.099997044 CEST	443	49725	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.100987911 CEST	443	49725	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.101052046 CEST	49725	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.101423979 CEST	49725	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.101485014 CEST	443	49725	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.101641893 CEST	49725	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.101650953 CEST	443	49725	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.174875021 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.188174009 CEST	49725	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.188189030 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:49.201226950 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.201280117 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.201309919 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.201354027 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.201359034 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.201369047 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.201409101 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.201416016 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.201456070 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.201546907 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.201948881 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.202008963 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.202017069 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.205848932 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.205885887 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.205929041 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.205939054 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.206006050 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.232605934 CEST	443	49725	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.232769012 CEST	443	49725	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.232820988 CEST	49725	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.232841969 CEST	443	49725	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.232866049 CEST	443	49725	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.232918978 CEST	49725	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.233839989 CEST	49725	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.233855963 CEST	443	49725	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.292265892 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.292335033 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.292362928 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.292395115 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.292418003 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.292422056 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.292432070 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.292470932 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.292470932 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.292478085 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.292516947 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.292522907 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.292553902 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.292588949 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.292617083 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.292635918 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.292640924 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.292661905 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.292890072 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.292933941 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.292937994 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.292972088 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.293001890 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.293032885 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.293052912 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.293056965 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.293073893 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.293096066 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.293131113 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.293135881 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.293840885 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.293874979 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.293899059 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.293904066 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.293946028 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.293951035 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.390106916 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.390146017 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.390177965 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.390256882 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.390312910 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.390342951 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.390433073 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.390440941 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.390486002 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.390502930 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.390736103 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.390789032 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.390799999 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.390841961 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.390847921 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.390894890 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.390906096 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.390964985 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.391347885 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.391355038 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.391413927 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.391693115 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.391747952 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.391777992 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.391839027 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.391849995 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.391874075 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.391896009 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.391927004 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.458609104 CEST	49726	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.458676100 CEST	443	49726	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.458755016 CEST	49726	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.526477098 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:49.536300898 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:49.536314011 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:49.536355972 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:49.536376953 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:49.536385059 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:49.536427975 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:49.536451101 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:49.536474943 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:49.536495924 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:49.536495924 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:49.550391912 CEST	49726	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.550429106 CEST	443	49726	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.585161924 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:49.614062071 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:49.614075899 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:49.614101887 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:49.614109993 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:49.614126921 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:49.614177942 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:49.614211082 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:49.614304066 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:49.672764063 CEST	49722	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:49.673139095 CEST	443	49722	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:49.673156023 CEST	49721	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:49.673297882 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:49.673713923 CEST	49722	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:49.673732042 CEST	443	49722	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:49.673813105 CEST	49721	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:49.673823118 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:49.705121040 CEST	49724	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.705153942 CEST	443	49724	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.721005917 CEST	49721	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:49.730429888 CEST	49727	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.730460882 CEST	443	49727	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.730513096 CEST	49727	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.731235027 CEST	49728	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.731287956 CEST	443	49728	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.731450081 CEST	49728	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.731925011 CEST	49723	443	192.168.2.5	18.66.92.123
Sep 29, 2024 04:42:49.731939077 CEST	443	49723	18.66.92.123	192.168.2.5
Sep 29, 2024 04:42:49.733290911 CEST	49727	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.733305931 CEST	443	49727	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.733943939 CEST	49728	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.733961105 CEST	443	49728	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.808926105 CEST	49722	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:49.854737043 CEST	49729	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.854785919 CEST	443	49729	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.854892015 CEST	49729	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.855451107 CEST	49729	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.855473042 CEST	443	49729	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.878866911 CEST	49730	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.878906965 CEST	443	49730	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:49.878988028 CEST	49730	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.879623890 CEST	49730	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:49.879635096 CEST	443	49730	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.009182930 CEST	443	49726	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.009809971 CEST	49726	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.009851933 CEST	443	49726	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.010878086 CEST	443	49726	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.010953903 CEST	49726	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.011528969 CEST	49726	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.011606932 CEST	443	49726	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.011617899 CEST	49726	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.011708975 CEST	49726	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.011722088 CEST	443	49726	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.011750937 CEST	49726	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.011763096 CEST	49726	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.012226105 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.012258053 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.012320042 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.012525082 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.012532949 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.159574986 CEST	443	49722	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.159605980 CEST	443	49722	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.159615040 CEST	443	49722	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.159652948 CEST	443	49722	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.159668922 CEST	49722	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:50.159699917 CEST	443	49722	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.159739971 CEST	49722	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:50.160059929 CEST	443	49722	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.160136938 CEST	443	49722	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.160206079 CEST	49722	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:50.165704966 CEST	49722	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:50.165726900 CEST	443	49722	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.165745974 CEST	49722	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:50.165771008 CEST	49722	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:50.167887926 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.167915106 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.168019056 CEST	49721	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:50.168028116 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.172717094 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.172725916 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.172781944 CEST	49721	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:50.172790051 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.195672035 CEST	443	49727	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.197607994 CEST	443	49728	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.198046923 CEST	49728	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.198064089 CEST	443	49728	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.198421001 CEST	49727	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.198482037 CEST	443	49727	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.199201107 CEST	443	49728	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.199279070 CEST	49728	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.199583054 CEST	443	49727	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.199652910 CEST	49727	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.200097084 CEST	49728	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.200133085 CEST	49728	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.200160027 CEST	443	49728	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.200325966 CEST	443	49728	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.200383902 CEST	49728	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.200453997 CEST	49728	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.200473070 CEST	443	49728	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.200481892 CEST	49728	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.200757980 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.200766087 CEST	49728	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.200817108 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.200937986 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.201689005 CEST	49727	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.201720953 CEST	49727	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.201760054 CEST	49727	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.201775074 CEST	443	49727	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.201931953 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.201950073 CEST	443	49727	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.201962948 CEST	49727	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.201977015 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.202012062 CEST	49727	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.202035904 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.202358007 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.202384949 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.202614069 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.202630043 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.227402925 CEST	49721	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:50.318203926 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.318217039 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.318295956 CEST	49721	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:50.323575020 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.323582888 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.323662996 CEST	49721	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:50.323689938 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.323704004 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.323766947 CEST	49721	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:50.325762987 CEST	49721	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:50.325783014 CEST	443	49721	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.327747107 CEST	443	49729	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.335850954 CEST	443	49730	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.375890970 CEST	49730	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.399344921 CEST	49730	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.399363995 CEST	443	49730	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.399607897 CEST	49729	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.399619102 CEST	443	49729	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.400377989 CEST	443	49730	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.400451899 CEST	49730	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.400870085 CEST	443	49729	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.400887012 CEST	443	49729	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.400943995 CEST	49729	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.401078939 CEST	49730	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.401141882 CEST	443	49730	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.401160002 CEST	49730	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.401237011 CEST	49730	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.401245117 CEST	443	49730	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.401253939 CEST	49730	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.401288986 CEST	49730	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.401741982 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.401776075 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.401931047 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.402496099 CEST	49729	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.402513027 CEST	49729	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.402549028 CEST	49729	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.402569056 CEST	443	49729	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.402626038 CEST	49729	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.403028011 CEST	49735	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.403095961 CEST	443	49735	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.403250933 CEST	49735	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.403539896 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.403554916 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.403779984 CEST	49735	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.403809071 CEST	443	49735	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.406379938 CEST	49736	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:50.406414032 CEST	443	49736	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.406466961 CEST	49736	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:50.407030106 CEST	49736	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:50.407042027 CEST	443	49736	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:50.426088095 CEST	49737	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:50.426132917 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:50.426203966 CEST	49737	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:50.426453114 CEST	49737	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:50.426467896 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:50.486481905 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.506381989 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.506396055 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.507497072 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.507579088 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.509706020 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.509762049 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.509996891 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.510001898 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.623409986 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.637924910 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.637983084 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.638098001 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.638129950 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.638137102 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.638175964 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.638180017 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.638225079 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.638262033 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.638266087 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.638319016 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.638371944 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.638375044 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.638638973 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.638694048 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.638699055 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.642731905 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.642810106 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.642815113 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.667808056 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.672331095 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.672384024 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.673460007 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.673548937 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.678014994 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.682202101 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.682367086 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.682380915 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.682400942 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.682584047 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.682612896 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.683509111 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.683582067 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.684091091 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.684156895 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.684216976 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.728574038 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.728615046 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.728635073 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.728641987 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.728723049 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.728730917 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.728741884 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.728837013 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.728882074 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.728920937 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.728925943 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.728950977 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.728984118 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.729028940 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.731400013 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.735697031 CEST	49731	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.735712051 CEST	443	49731	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.735913992 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.735927105 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.777857065 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.790786982 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.791282892 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.791428089 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.791547060 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.791599035 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.791610956 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.791781902 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.791789055 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.791910887 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.791951895 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.791959047 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.792076111 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.792171001 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.792236090 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.792243004 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.792602062 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.792607069 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.828149080 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.828205109 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.828273058 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.828296900 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.828320026 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.828332901 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.830845118 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.830882072 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.830929995 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.830935955 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.830949068 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.830991983 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.831003904 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.831029892 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.831046104 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.831051111 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.831105947 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.836235046 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.864943027 CEST	443	49735	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.865287066 CEST	49735	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.865304947 CEST	443	49735	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.869474888 CEST	443	49735	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.869576931 CEST	49735	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.870242119 CEST	49735	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.870311022 CEST	443	49735	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.870585918 CEST	49735	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.870593071 CEST	443	49735	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.879471064 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.879565001 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.879573107 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.879688978 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.879795074 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.879837990 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.879844904 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.879905939 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.880026102 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.880170107 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.880220890 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.880227089 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.880306959 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.880357981 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.880362988 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.880465031 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.880601883 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.881026030 CEST	49732	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.881043911 CEST	443	49732	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.883126020 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.890252113 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.890626907 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.890642881 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.891660929 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.891730070 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.894864082 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.894922972 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.895243883 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.895251989 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.913690090 CEST	49735	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.918973923 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.919065952 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.919096947 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.919137001 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.919151068 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.919194937 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.919441938 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.919641018 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.919677973 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.919687986 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.919693947 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.919730902 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.919735909 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.919760942 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.919816017 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.920447111 CEST	49733	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.920459986 CEST	443	49733	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.996514082 CEST	443	49735	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.996567965 CEST	443	49735	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.996643066 CEST	49735	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.996654034 CEST	443	49735	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:50.996709108 CEST	49735	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.997498035 CEST	49735	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:50.997548103 CEST	443	49735	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.007636070 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.033982992 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.034054041 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.034091949 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.034126043 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.034126997 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.034147024 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.034171104 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.034223080 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.034266949 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.034286976 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.034990072 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.035024881 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.035058975 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.035065889 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.035329103 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.039246082 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.039319992 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.039401054 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.039410114 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.117383003 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.122769117 CEST	443	49736	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:51.123234034 CEST	49736	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:51.123251915 CEST	443	49736	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:51.123626947 CEST	443	49736	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:51.124207020 CEST	49736	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:51.124268055 CEST	443	49736	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:51.124501944 CEST	49736	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:51.126262903 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.126411915 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.126467943 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.126487017 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.126596928 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.126725912 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.126737118 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.126987934 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.127037048 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.127073050 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.127087116 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.127095938 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.127106905 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.127630949 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.127687931 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.127691031 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.127701998 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.127744913 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.127751112 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.127809048 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.127851009 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.127857924 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.128541946 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.128583908 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.128607035 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.128614902 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.128649950 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.128663063 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.128670931 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.128709078 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.129367113 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.129432917 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.129487991 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.129499912 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.165498972 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.167403936 CEST	443	49736	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:51.176997900 CEST	49737	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:51.177026987 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.178138018 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.178265095 CEST	49737	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:51.178642035 CEST	49737	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:51.178719044 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.178776979 CEST	49737	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:51.178783894 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.218878984 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.218925953 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.218967915 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.218970060 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.219007969 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.219017982 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.219041109 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.219129086 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.219136953 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.219180107 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.219189882 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.219314098 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.219584942 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.219593048 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.219638109 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.219645023 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.219667912 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.219690084 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.219696999 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.219708920 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.219724894 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.219755888 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.219760895 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.219803095 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.220535994 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.220577955 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.220592976 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.220598936 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.220629930 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.220638037 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.220657110 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.220706940 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.221111059 CEST	49734	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.221127987 CEST	443	49734	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.226331949 CEST	49737	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:51.550503016 CEST	443	49736	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:51.550584078 CEST	443	49736	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:51.550676107 CEST	49736	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:51.553606033 CEST	49736	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:51.553628922 CEST	443	49736	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:51.565917015 CEST	49742	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.565982103 CEST	443	49742	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.566087961 CEST	49742	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.566489935 CEST	49742	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:51.566504002 CEST	443	49742	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:51.602904081 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.602930069 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.602936983 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.603004932 CEST	49737	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:51.603041887 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.648004055 CEST	49737	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:51.693926096 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.693938971 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.693985939 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.694001913 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.694014072 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.694020033 CEST	49737	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:51.694056988 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.694073915 CEST	49737	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:51.694082975 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.694108009 CEST	49737	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:51.694181919 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:51.694237947 CEST	49737	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:51.695359945 CEST	49737	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:51.695379019 CEST	443	49737	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:52.038866043 CEST	443	49742	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:52.047282934 CEST	49742	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.047336102 CEST	443	49742	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:52.048398972 CEST	443	49742	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:52.048505068 CEST	49742	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.049026012 CEST	49742	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.049038887 CEST	49742	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.049103975 CEST	49742	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.049109936 CEST	443	49742	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:52.049180031 CEST	49742	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.065578938 CEST	49744	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.065639973 CEST	443	49744	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:52.065752983 CEST	49744	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.066032887 CEST	49744	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.066049099 CEST	443	49744	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:52.354346991 CEST	49745	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:52.354458094 CEST	443	49745	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:52.354578972 CEST	49745	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:52.354866982 CEST	49745	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:52.354902029 CEST	443	49745	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:52.523233891 CEST	443	49744	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:52.523613930 CEST	49744	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.523643017 CEST	443	49744	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:52.523972988 CEST	443	49744	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:52.524532080 CEST	49744	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.524609089 CEST	443	49744	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:52.524801970 CEST	49744	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.567408085 CEST	443	49744	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:52.809766054 CEST	443	49744	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:52.809834957 CEST	443	49744	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:52.809894085 CEST	49744	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.810652018 CEST	49744	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.810673952 CEST	443	49744	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:52.813051939 CEST	49746	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.813124895 CEST	443	49746	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:52.813215971 CEST	49746	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.813599110 CEST	49746	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:52.813625097 CEST	443	49746	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.087217093 CEST	443	49745	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:53.087572098 CEST	49745	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:53.087632895 CEST	443	49745	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:53.087995052 CEST	443	49745	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:53.088346958 CEST	49745	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:53.088424921 CEST	443	49745	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:53.088526964 CEST	49745	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:53.131407022 CEST	443	49745	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:53.266374111 CEST	443	49746	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.280908108 CEST	49746	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.280966997 CEST	443	49746	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.282052040 CEST	443	49746	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.282130957 CEST	49746	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.288945913 CEST	49746	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.288984060 CEST	49746	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.289038897 CEST	443	49746	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.289230108 CEST	443	49746	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.289280891 CEST	49746	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.289319038 CEST	443	49746	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.289354086 CEST	49746	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.289354086 CEST	49746	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.289401054 CEST	49746	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.289840937 CEST	49747	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.289895058 CEST	443	49747	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.289962053 CEST	49747	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.290400028 CEST	49747	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.290416002 CEST	443	49747	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.515197992 CEST	443	49745	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:53.515276909 CEST	443	49745	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:53.515341043 CEST	49745	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:53.521922112 CEST	49745	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:42:53.521964073 CEST	443	49745	108.138.24.29	192.168.2.5
Sep 29, 2024 04:42:53.527997971 CEST	49749	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:53.528037071 CEST	443	49749	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:53.528100967 CEST	49749	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:53.528357983 CEST	49749	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:53.528367043 CEST	443	49749	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:53.773109913 CEST	443	49747	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.773499012 CEST	49747	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.773529053 CEST	443	49747	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.774537086 CEST	443	49747	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.774662971 CEST	49747	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.774991035 CEST	49747	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.775057077 CEST	443	49747	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.775557041 CEST	49747	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.775564909 CEST	443	49747	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.913217068 CEST	49747	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.936065912 CEST	443	49747	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.936188936 CEST	443	49747	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.936532021 CEST	49747	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.936852932 CEST	49747	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.936868906 CEST	443	49747	188.114.97.3	192.168.2.5
Sep 29, 2024 04:42:53.936933994 CEST	49747	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:53.936960936 CEST	49747	443	192.168.2.5	188.114.97.3
Sep 29, 2024 04:42:54.254065990 CEST	443	49749	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:54.255229950 CEST	49749	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:54.255239010 CEST	443	49749	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:54.255620003 CEST	443	49749	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:54.256463051 CEST	49749	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:54.256517887 CEST	443	49749	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:54.257258892 CEST	49749	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:54.303394079 CEST	443	49749	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:54.683517933 CEST	443	49749	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:54.683599949 CEST	443	49749	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:54.683689117 CEST	49749	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:54.698873043 CEST	49749	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:42:54.698898077 CEST	443	49749	108.138.24.174	192.168.2.5
Sep 29, 2024 04:42:55.099134922 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 04:42:55.099463940 CEST	49703	443	192.168.2.5	23.1.237.91
Sep 29, 2024 04:42:55.100111008 CEST	49754	443	192.168.2.5	23.1.237.91
Sep 29, 2024 04:42:55.100162029 CEST	443	49754	23.1.237.91	192.168.2.5
Sep 29, 2024 04:42:55.100241899 CEST	49754	443	192.168.2.5	23.1.237.91
Sep 29, 2024 04:42:55.100554943 CEST	49754	443	192.168.2.5	23.1.237.91
Sep 29, 2024 04:42:55.100573063 CEST	443	49754	23.1.237.91	192.168.2.5
Sep 29, 2024 04:42:55.103997946 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 04:42:55.104180098 CEST	443	49703	23.1.237.91	192.168.2.5
Sep 29, 2024 04:42:55.416821957 CEST	443	49713	142.250.186.164	192.168.2.5
Sep 29, 2024 04:42:55.416877031 CEST	443	49713	142.250.186.164	192.168.2.5
Sep 29, 2024 04:42:55.416937113 CEST	49713	443	192.168.2.5	142.250.186.164
Sep 29, 2024 04:42:55.686212063 CEST	443	49754	23.1.237.91	192.168.2.5
Sep 29, 2024 04:42:55.686310053 CEST	49754	443	192.168.2.5	23.1.237.91
Sep 29, 2024 04:42:57.153223991 CEST	49713	443	192.168.2.5	142.250.186.164
Sep 29, 2024 04:42:57.153243065 CEST	443	49713	142.250.186.164	192.168.2.5
Sep 29, 2024 04:43:08.542262077 CEST	49757	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:08.542293072 CEST	443	49757	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:08.542690039 CEST	49757	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:08.542964935 CEST	49757	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:08.542978048 CEST	443	49757	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:09.291659117 CEST	443	49757	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:09.291982889 CEST	49757	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:09.291999102 CEST	443	49757	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:09.292329073 CEST	443	49757	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:09.292818069 CEST	49757	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:09.292818069 CEST	49757	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:09.292872906 CEST	443	49757	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:09.335758924 CEST	49757	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:09.872112036 CEST	443	49757	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:09.872723103 CEST	443	49757	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:09.872829914 CEST	49757	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:09.873447895 CEST	49757	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:09.873466969 CEST	443	49757	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:09.878313065 CEST	49758	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:09.878351927 CEST	443	49758	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:09.878478050 CEST	49758	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:09.878835917 CEST	49758	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:09.878849983 CEST	443	49758	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:10.592578888 CEST	443	49758	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:10.593199968 CEST	49758	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:10.593223095 CEST	443	49758	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:10.593549013 CEST	443	49758	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:10.594613075 CEST	49758	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:10.594677925 CEST	443	49758	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:10.595212936 CEST	49758	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:10.635406971 CEST	443	49758	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:11.017828941 CEST	443	49758	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:11.017940044 CEST	443	49758	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:11.018048048 CEST	49758	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:11.018852949 CEST	49758	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:11.018881083 CEST	443	49758	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:14.840607882 CEST	443	49754	23.1.237.91	192.168.2.5
Sep 29, 2024 04:43:14.840718031 CEST	49754	443	192.168.2.5	23.1.237.91
Sep 29, 2024 04:43:24.884876966 CEST	49759	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:24.885015011 CEST	443	49759	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:24.885116100 CEST	49759	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:24.885457993 CEST	49759	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:24.885494947 CEST	443	49759	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:25.598820925 CEST	443	49759	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:25.599191904 CEST	49759	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:25.599245071 CEST	443	49759	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:25.599611998 CEST	443	49759	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:25.599971056 CEST	49759	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:25.600047112 CEST	443	49759	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:25.600172043 CEST	49759	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:25.643448114 CEST	443	49759	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:26.023799896 CEST	443	49759	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:26.023904085 CEST	443	49759	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:26.024667025 CEST	49759	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:26.024981022 CEST	49759	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:26.025027037 CEST	443	49759	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:26.028614998 CEST	49760	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:26.028683901 CEST	443	49760	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:26.028887987 CEST	49760	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:26.029048920 CEST	49760	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:26.029066086 CEST	443	49760	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:26.755028009 CEST	443	49760	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:26.755419970 CEST	49760	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:26.755445004 CEST	443	49760	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:26.755723000 CEST	443	49760	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:26.756160975 CEST	49760	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:26.756160975 CEST	49760	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:26.756201982 CEST	443	49760	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:26.803695917 CEST	49760	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:27.351206064 CEST	443	49760	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:27.351285934 CEST	443	49760	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:27.351345062 CEST	49760	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:27.352210999 CEST	49760	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:27.352235079 CEST	443	49760	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:41.040920019 CEST	49763	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:41.040987968 CEST	443	49763	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:41.041131020 CEST	49763	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:41.041476965 CEST	49763	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:41.041492939 CEST	443	49763	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:41.755898952 CEST	443	49763	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:41.756247044 CEST	49763	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:41.756284952 CEST	443	49763	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:41.756563902 CEST	443	49763	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:41.757081032 CEST	49763	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:41.757138968 CEST	443	49763	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:41.757296085 CEST	49763	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:41.799396992 CEST	443	49763	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:42.332061052 CEST	443	49763	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:42.332133055 CEST	443	49763	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:42.332884073 CEST	49763	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:42.333102942 CEST	49763	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:42.333113909 CEST	443	49763	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:42.337783098 CEST	49764	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:42.337831020 CEST	443	49764	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:42.338093042 CEST	49764	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:42.338304996 CEST	49764	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:42.338325977 CEST	443	49764	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:43.057832956 CEST	443	49764	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:43.059146881 CEST	49764	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:43.059170008 CEST	443	49764	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:43.059674978 CEST	443	49764	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:43.063626051 CEST	49764	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:43.063724041 CEST	443	49764	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:43.063853979 CEST	49764	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:43.111401081 CEST	443	49764	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:43.635273933 CEST	443	49764	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:43.635509968 CEST	443	49764	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:43.635610104 CEST	49764	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:43.636483908 CEST	49764	443	192.168.2.5	108.138.24.174
Sep 29, 2024 04:43:43.636501074 CEST	443	49764	108.138.24.174	192.168.2.5
Sep 29, 2024 04:43:45.280730963 CEST	49765	443	192.168.2.5	216.58.206.68
Sep 29, 2024 04:43:45.280802011 CEST	443	49765	216.58.206.68	192.168.2.5
Sep 29, 2024 04:43:45.280884027 CEST	49765	443	192.168.2.5	216.58.206.68
Sep 29, 2024 04:43:45.281203985 CEST	49765	443	192.168.2.5	216.58.206.68
Sep 29, 2024 04:43:45.281234026 CEST	443	49765	216.58.206.68	192.168.2.5
Sep 29, 2024 04:43:46.003680944 CEST	443	49765	216.58.206.68	192.168.2.5
Sep 29, 2024 04:43:46.004343033 CEST	49765	443	192.168.2.5	216.58.206.68
Sep 29, 2024 04:43:46.004367113 CEST	443	49765	216.58.206.68	192.168.2.5
Sep 29, 2024 04:43:46.004703999 CEST	443	49765	216.58.206.68	192.168.2.5
Sep 29, 2024 04:43:46.008179903 CEST	49765	443	192.168.2.5	216.58.206.68
Sep 29, 2024 04:43:46.008258104 CEST	443	49765	216.58.206.68	192.168.2.5
Sep 29, 2024 04:43:46.054225922 CEST	49765	443	192.168.2.5	216.58.206.68
Sep 29, 2024 04:43:55.872422934 CEST	443	49765	216.58.206.68	192.168.2.5
Sep 29, 2024 04:43:55.872509003 CEST	443	49765	216.58.206.68	192.168.2.5
Sep 29, 2024 04:43:55.872570992 CEST	49765	443	192.168.2.5	216.58.206.68
Sep 29, 2024 04:43:56.895317078 CEST	49765	443	192.168.2.5	216.58.206.68
Sep 29, 2024 04:43:56.895363092 CEST	443	49765	216.58.206.68	192.168.2.5
Sep 29, 2024 04:43:57.385447025 CEST	49767	443	192.168.2.5	108.138.24.111
Sep 29, 2024 04:43:57.385485888 CEST	443	49767	108.138.24.111	192.168.2.5
Sep 29, 2024 04:43:57.385586023 CEST	49767	443	192.168.2.5	108.138.24.111
Sep 29, 2024 04:43:57.385937929 CEST	49767	443	192.168.2.5	108.138.24.111
Sep 29, 2024 04:43:57.385955095 CEST	443	49767	108.138.24.111	192.168.2.5
Sep 29, 2024 04:43:58.123637915 CEST	443	49767	108.138.24.111	192.168.2.5
Sep 29, 2024 04:43:58.124002934 CEST	49767	443	192.168.2.5	108.138.24.111
Sep 29, 2024 04:43:58.124072075 CEST	443	49767	108.138.24.111	192.168.2.5
Sep 29, 2024 04:43:58.124437094 CEST	443	49767	108.138.24.111	192.168.2.5
Sep 29, 2024 04:43:58.124947071 CEST	49767	443	192.168.2.5	108.138.24.111
Sep 29, 2024 04:43:58.124947071 CEST	49767	443	192.168.2.5	108.138.24.111
Sep 29, 2024 04:43:58.125549078 CEST	443	49767	108.138.24.111	192.168.2.5
Sep 29, 2024 04:43:58.178966045 CEST	49767	443	192.168.2.5	108.138.24.111
Sep 29, 2024 04:43:58.552567959 CEST	443	49767	108.138.24.111	192.168.2.5
Sep 29, 2024 04:43:58.552670002 CEST	443	49767	108.138.24.111	192.168.2.5
Sep 29, 2024 04:43:58.552856922 CEST	49767	443	192.168.2.5	108.138.24.111
Sep 29, 2024 04:43:58.553754091 CEST	49767	443	192.168.2.5	108.138.24.111
Sep 29, 2024 04:43:58.553778887 CEST	443	49767	108.138.24.111	192.168.2.5
Sep 29, 2024 04:43:58.569356918 CEST	49768	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:58.569432020 CEST	443	49768	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:58.569716930 CEST	49768	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:58.570053101 CEST	49768	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:58.570075989 CEST	443	49768	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:59.295141935 CEST	443	49768	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:59.295514107 CEST	49768	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:59.295582056 CEST	443	49768	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:59.296063900 CEST	443	49768	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:59.296499968 CEST	49768	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:59.296591997 CEST	443	49768	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:59.296736956 CEST	49768	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:59.343401909 CEST	443	49768	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:59.724795103 CEST	443	49768	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:59.724891901 CEST	443	49768	108.138.24.29	192.168.2.5
Sep 29, 2024 04:43:59.724973917 CEST	49768	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:59.726073980 CEST	49768	443	192.168.2.5	108.138.24.29
Sep 29, 2024 04:43:59.726119041 CEST	443	49768	108.138.24.29	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 04:42:40.546061039 CEST	53	65504	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:40.651745081 CEST	53	63308	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:41.673166990 CEST	53	64300	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:42.464451075 CEST	54663	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:42:42.464664936 CEST	53804	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:42:42.703006983 CEST	53	53804	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:42.705204010 CEST	53	54663	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:42.714915991 CEST	59880	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:42:42.715176105 CEST	52225	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:42:42.748963118 CEST	53	52225	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:42.988265991 CEST	53	59880	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:44.809355021 CEST	64330	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:42:44.809984922 CEST	61488	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:42:44.816013098 CEST	53	64330	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:44.816479921 CEST	53	61488	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:45.653213978 CEST	52726	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:42:45.653763056 CEST	54511	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:42:45.672034025 CEST	53	52726	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:45.675355911 CEST	53	54511	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:48.117125988 CEST	55849	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:42:48.117233038 CEST	55826	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:42:48.128483057 CEST	53	55849	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:48.137799025 CEST	53	55826	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:48.181292057 CEST	61387	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:42:48.181890011 CEST	60293	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:42:48.198849916 CEST	53	60293	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:48.206739902 CEST	53	61387	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:49.842607975 CEST	64027	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:42:49.842817068 CEST	65188	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:42:49.851356983 CEST	53	64027	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:49.851454020 CEST	53	65188	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:50.415762901 CEST	56790	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:42:50.415960073 CEST	56706	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:42:50.424562931 CEST	53	56706	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:50.425477028 CEST	53	56790	1.1.1.1	192.168.2.5
Sep 29, 2024 04:42:59.218072891 CEST	53	53618	1.1.1.1	192.168.2.5
Sep 29, 2024 04:43:18.218847990 CEST	53	52555	1.1.1.1	192.168.2.5
Sep 29, 2024 04:43:40.347223997 CEST	53	51451	1.1.1.1	192.168.2.5
Sep 29, 2024 04:43:40.859261990 CEST	53	60481	1.1.1.1	192.168.2.5
Sep 29, 2024 04:43:44.877401114 CEST	50756	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:43:44.877814054 CEST	63416	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:43:44.883939028 CEST	53	50756	1.1.1.1	192.168.2.5
Sep 29, 2024 04:43:44.884330988 CEST	53	63416	1.1.1.1	192.168.2.5
Sep 29, 2024 04:43:57.362214088 CEST	61242	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:43:57.362706900 CEST	51286	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:43:57.371984005 CEST	53	61242	1.1.1.1	192.168.2.5
Sep 29, 2024 04:43:57.384655952 CEST	53	51286	1.1.1.1	192.168.2.5
Sep 29, 2024 04:43:58.559504986 CEST	62684	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:43:58.559957027 CEST	57303	53	192.168.2.5	1.1.1.1
Sep 29, 2024 04:43:58.567799091 CEST	53	57303	1.1.1.1	192.168.2.5
Sep 29, 2024 04:43:58.568685055 CEST	53	62684	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 04:42:42.464451075 CEST	192.168.2.5	1.1.1.1	0x48e	Standard query (0)	www.mrbeastcast.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:42.464664936 CEST	192.168.2.5	1.1.1.1	0xe2e2	Standard query (0)	www.mrbeastcast.com	65	IN (0x0001)	false
Sep 29, 2024 04:42:42.714915991 CEST	192.168.2.5	1.1.1.1	0x3bc3	Standard query (0)	www.mrbeastcast.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:42.715176105 CEST	192.168.2.5	1.1.1.1	0x3204	Standard query (0)	www.mrbeastcast.com	65	IN (0x0001)	false
Sep 29, 2024 04:42:44.809355021 CEST	192.168.2.5	1.1.1.1	0xa2f9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:44.809984922 CEST	192.168.2.5	1.1.1.1	0xc32c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 04:42:45.653213978 CEST	192.168.2.5	1.1.1.1	0x282e	Standard query (0)	d17iy0164v753e.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:45.653763056 CEST	192.168.2.5	1.1.1.1	0x2b5b	Standard query (0)	d17iy0164v753e.cloudfront.net	65	IN (0x0001)	false
Sep 29, 2024 04:42:48.117125988 CEST	192.168.2.5	1.1.1.1	0xe528	Standard query (0)	d1ieffz9zqrn09.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:48.117233038 CEST	192.168.2.5	1.1.1.1	0x6c99	Standard query (0)	d1ieffz9zqrn09.cloudfront.net	65	IN (0x0001)	false
Sep 29, 2024 04:42:48.181292057 CEST	192.168.2.5	1.1.1.1	0xed9	Standard query (0)	d17iy0164v753e.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:48.181890011 CEST	192.168.2.5	1.1.1.1	0x6f0a	Standard query (0)	d17iy0164v753e.cloudfront.net	65	IN (0x0001)	false
Sep 29, 2024 04:42:49.842607975 CEST	192.168.2.5	1.1.1.1	0x9a0	Standard query (0)	www.mrbeastcast.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:49.842817068 CEST	192.168.2.5	1.1.1.1	0x4917	Standard query (0)	www.mrbeastcast.com	65	IN (0x0001)	false
Sep 29, 2024 04:42:50.415762901 CEST	192.168.2.5	1.1.1.1	0x14a2	Standard query (0)	d1ieffz9zqrn09.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:50.415960073 CEST	192.168.2.5	1.1.1.1	0xc848	Standard query (0)	d1ieffz9zqrn09.cloudfront.net	65	IN (0x0001)	false
Sep 29, 2024 04:43:44.877401114 CEST	192.168.2.5	1.1.1.1	0xcb34	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:43:44.877814054 CEST	192.168.2.5	1.1.1.1	0xc8d0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 04:43:57.362214088 CEST	192.168.2.5	1.1.1.1	0x6d14	Standard query (0)	d1ieffz9zqrn09.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:43:57.362706900 CEST	192.168.2.5	1.1.1.1	0xddb1	Standard query (0)	d1ieffz9zqrn09.cloudfront.net	65	IN (0x0001)	false
Sep 29, 2024 04:43:58.559504986 CEST	192.168.2.5	1.1.1.1	0x9300	Standard query (0)	d1ieffz9zqrn09.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:43:58.559957027 CEST	192.168.2.5	1.1.1.1	0x8a6c	Standard query (0)	d1ieffz9zqrn09.cloudfront.net	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 04:42:42.703006983 CEST	1.1.1.1	192.168.2.5	0xe2e2	No error (0)	www.mrbeastcast.com			65	IN (0x0001)	false
Sep 29, 2024 04:42:42.705204010 CEST	1.1.1.1	192.168.2.5	0x48e	No error (0)	www.mrbeastcast.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:42.705204010 CEST	1.1.1.1	192.168.2.5	0x48e	No error (0)	www.mrbeastcast.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:42.748963118 CEST	1.1.1.1	192.168.2.5	0x3204	No error (0)	www.mrbeastcast.com			65	IN (0x0001)	false
Sep 29, 2024 04:42:42.988265991 CEST	1.1.1.1	192.168.2.5	0x3bc3	No error (0)	www.mrbeastcast.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:42.988265991 CEST	1.1.1.1	192.168.2.5	0x3bc3	No error (0)	www.mrbeastcast.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:44.816013098 CEST	1.1.1.1	192.168.2.5	0xa2f9	No error (0)	www.google.com		142.250.186.164	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:44.816479921 CEST	1.1.1.1	192.168.2.5	0xc32c	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 04:42:45.672034025 CEST	1.1.1.1	192.168.2.5	0x282e	No error (0)	d17iy0164v753e.cloudfront.net		18.66.92.205	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:45.672034025 CEST	1.1.1.1	192.168.2.5	0x282e	No error (0)	d17iy0164v753e.cloudfront.net		18.66.92.61	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:45.672034025 CEST	1.1.1.1	192.168.2.5	0x282e	No error (0)	d17iy0164v753e.cloudfront.net		18.66.92.128	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:45.672034025 CEST	1.1.1.1	192.168.2.5	0x282e	No error (0)	d17iy0164v753e.cloudfront.net		18.66.92.123	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:48.128483057 CEST	1.1.1.1	192.168.2.5	0xe528	No error (0)	d1ieffz9zqrn09.cloudfront.net		108.138.24.29	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:48.128483057 CEST	1.1.1.1	192.168.2.5	0xe528	No error (0)	d1ieffz9zqrn09.cloudfront.net		108.138.24.174	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:48.128483057 CEST	1.1.1.1	192.168.2.5	0xe528	No error (0)	d1ieffz9zqrn09.cloudfront.net		108.138.24.101	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:48.128483057 CEST	1.1.1.1	192.168.2.5	0xe528	No error (0)	d1ieffz9zqrn09.cloudfront.net		108.138.24.111	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:48.206739902 CEST	1.1.1.1	192.168.2.5	0xed9	No error (0)	d17iy0164v753e.cloudfront.net		18.66.92.123	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:48.206739902 CEST	1.1.1.1	192.168.2.5	0xed9	No error (0)	d17iy0164v753e.cloudfront.net		18.66.92.128	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:48.206739902 CEST	1.1.1.1	192.168.2.5	0xed9	No error (0)	d17iy0164v753e.cloudfront.net		18.66.92.205	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:48.206739902 CEST	1.1.1.1	192.168.2.5	0xed9	No error (0)	d17iy0164v753e.cloudfront.net		18.66.92.61	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:49.851356983 CEST	1.1.1.1	192.168.2.5	0x9a0	No error (0)	www.mrbeastcast.com		188.114.97.3	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:49.851356983 CEST	1.1.1.1	192.168.2.5	0x9a0	No error (0)	www.mrbeastcast.com		188.114.96.3	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:49.851454020 CEST	1.1.1.1	192.168.2.5	0x4917	No error (0)	www.mrbeastcast.com			65	IN (0x0001)	false
Sep 29, 2024 04:42:50.425477028 CEST	1.1.1.1	192.168.2.5	0x14a2	No error (0)	d1ieffz9zqrn09.cloudfront.net		108.138.24.174	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:50.425477028 CEST	1.1.1.1	192.168.2.5	0x14a2	No error (0)	d1ieffz9zqrn09.cloudfront.net		108.138.24.111	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:50.425477028 CEST	1.1.1.1	192.168.2.5	0x14a2	No error (0)	d1ieffz9zqrn09.cloudfront.net		108.138.24.101	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:50.425477028 CEST	1.1.1.1	192.168.2.5	0x14a2	No error (0)	d1ieffz9zqrn09.cloudfront.net		108.138.24.29	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:42:54.318558931 CEST	1.1.1.1	192.168.2.5	0x7dc6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 04:42:54.318558931 CEST	1.1.1.1	192.168.2.5	0x7dc6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:43:08.499608994 CEST	1.1.1.1	192.168.2.5	0x7ce7	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 04:43:08.499608994 CEST	1.1.1.1	192.168.2.5	0x7ce7	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:43:33.452229977 CEST	1.1.1.1	192.168.2.5	0x472c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 04:43:33.452229977 CEST	1.1.1.1	192.168.2.5	0x472c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:43:44.883939028 CEST	1.1.1.1	192.168.2.5	0xcb34	No error (0)	www.google.com		216.58.206.68	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:43:44.884330988 CEST	1.1.1.1	192.168.2.5	0xc8d0	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 04:43:53.576508999 CEST	1.1.1.1	192.168.2.5	0xf55f	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 04:43:53.576508999 CEST	1.1.1.1	192.168.2.5	0xf55f	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:43:57.371984005 CEST	1.1.1.1	192.168.2.5	0x6d14	No error (0)	d1ieffz9zqrn09.cloudfront.net		108.138.24.111	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:43:57.371984005 CEST	1.1.1.1	192.168.2.5	0x6d14	No error (0)	d1ieffz9zqrn09.cloudfront.net		108.138.24.29	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:43:57.371984005 CEST	1.1.1.1	192.168.2.5	0x6d14	No error (0)	d1ieffz9zqrn09.cloudfront.net		108.138.24.174	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:43:57.371984005 CEST	1.1.1.1	192.168.2.5	0x6d14	No error (0)	d1ieffz9zqrn09.cloudfront.net		108.138.24.101	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:43:58.568685055 CEST	1.1.1.1	192.168.2.5	0x9300	No error (0)	d1ieffz9zqrn09.cloudfront.net		108.138.24.29	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:43:58.568685055 CEST	1.1.1.1	192.168.2.5	0x9300	No error (0)	d1ieffz9zqrn09.cloudfront.net		108.138.24.111	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:43:58.568685055 CEST	1.1.1.1	192.168.2.5	0x9300	No error (0)	d1ieffz9zqrn09.cloudfront.net		108.138.24.101	A (IP address)	IN (0x0001)	false
Sep 29, 2024 04:43:58.568685055 CEST	1.1.1.1	192.168.2.5	0x9300	No error (0)	d1ieffz9zqrn09.cloudfront.net		108.138.24.174	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

www.mrbeastcast.com

https:

d17iy0164v753e.cloudfront.net

d1ieffz9zqrn09.cloudfront.net

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	188.114.97.3	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:44 UTC	668	OUT	GET /claim/ HTTP/1.1 Host: www.mrbeastcast.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:45 UTC	627	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:42:44 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding,User-Agent CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DXQ5b6HSZRAV41cvsDe55Xc0RUszClVwWs7VHydBomFESSMYedhHoIsieVMx%2Fa9zSytsHHvHXKy1BFnl18Wy%2B%2FfHz%2FRSuCyOkisqgr0m9jdbEc0m5T3P1m60sgs9JI%2FSdnNvtnoO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ca89f21a9728c54-EWR
2024-09-29 02:42:45 UTC	1369	IN	Data Raw: 64 32 34 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 69 73 63 6f 72 64 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 34 30 35 33 32 2e 34 35 63 66 64 61 30 37 39 34 31 32 33 62 34 62 65 63 33 63 2e 63 73 73 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 0d 0a 20 20 20 20 76 61 72 20 61 5a 75 72 66 5f 55 6c 64 5f 65 73 76 54 62 63 3d 7b 22 69 74 22 3a 34 32 33 Data Ascii: d24<head> <title>Discord</title> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <link rel="stylesheet" href="40532.45cfda0794123b4bec3c.css"> <script type="text/javascript"> var aZurf_Uld_esvTbc={"it":423
2024-09-29 02:42:45 UTC	1369	IN	Data Raw: 62 67 22 0d 0a 20 20 20 20 20 20 20 20 20 20 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 73 2d 33 4e 65 6d 62 58 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 76 67 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 6f 6c 65 3d 22 69 6d 67 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 63 6c 6f 73 65 49 63 6f 6e 2d 70 53 4a 44 46 7a 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3d 22 32 34 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3d 22 32 34 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: bg" > <div class="contents-3NembX"> <svg aria-hidden="true" role="img" class="closeIcon-pSJDFz" width="24" height="24"
2024-09-29 02:42:45 UTC	633	IN	Data Raw: 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 6f 6e 63 6c 69 63 6b 3d 22 5f 63 57 28 29 22 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 62 75 74 74 6f 6e 2d 65 6a 6a 5a 57 43 20 6c 6f 6f 6b 46 69 6c 6c 65 64 2d 31 48 32 4a 76 6a 20 63 6f 6c 6f 72 42 72 61 6e 64 2d 32 4d 33 4f 33 4e 20 73 69 7a 65 4d 65 64 69 75 6d 2d 32 6f 48 35 6d 67 20 67 72 6f 77 2d 32 54 34 6e 62 67 22 0d 0a 20 20 20 20 20 20 20 20 20 20 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 65 6e 74 73 2d 33 4e 65 6d 62 58 22 3e 49 20 61 63 63 65 70 74 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 2f Data Ascii: <button type="button" onclick="_cW()" class="button-ejjZWC lookFilled-1H2Jvj colorBrand-2M3O3N sizeMedium-2oH5mg grow-2T4nbg" > <div class="contents-3NembX">I accept</div> </
2024-09-29 02:42:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:46 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 02:42:46 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF70) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=136965 Date: Sun, 29 Sep 2024 02:42:46 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49717	188.114.97.3	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:46 UTC	579	OUT	GET /claim/40532.45cfda0794123b4bec3c.css HTTP/1.1 Host: www.mrbeastcast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mrbeastcast.com/claim/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:46 UTC	673	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:42:46 GMT Content-Type: text/css Content-Length: 132217 Connection: close Last-Modified: Sat, 10 Aug 2024 17:55:07 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3299 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=N4s%2BsAmL5zRI8Pv0vvXVhMHk0wqBuMKv8n2%2FClha7lBNUlMRxWZNVkr%2B6%2F5xhD4Hn%2BvDfqKtvbteLg6g3z8XN7hmGGdrd0fMGLtNiPZF7rZqW78p%2B4PJtGo7eoF%2Fpda6BQAAx3kC"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ca89f31fe6918b4-EWR
2024-09-29 02:42:46 UTC	696	IN	Data Raw: 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 6e 65 72 2d 77 61 6e 64 65 72 69 6e 67 2d 63 75 62 65 73 2d 35 68 34 41 74 32 20 7b 0a 20 20 32 35 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 32 70 78 29 20 72 6f 74 61 74 65 28 2d 39 30 64 65 67 29 20 73 63 61 6c 65 28 30 2e 35 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 32 70 78 29 20 72 6f 74 61 74 65 28 2d 39 30 64 65 67 29 20 73 63 61 6c 65 28 30 2e 35 29 3b 0a 20 20 7d 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 32 70 78 29 20 74 72 61 6e 73 6c 61 74 65 59 28 32 32 70 78 29 20 Data Ascii: @-webkit-keyframes spinner-wandering-cubes-5h4At2 { 25% { -webkit-transform: translateX(22px) rotate(-90deg) scale(0.5); transform: translateX(22px) rotate(-90deg) scale(0.5); } 50% { -webkit-transform: translateX(22px) translateY(22px)
2024-09-29 02:42:46 UTC	1369	IN	Data Raw: 65 67 29 20 73 63 61 6c 65 28 30 2e 35 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 32 70 78 29 20 72 6f 74 61 74 65 28 2d 39 30 64 65 67 29 20 73 63 61 6c 65 28 30 2e 35 29 3b 0a 20 20 7d 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 32 70 78 29 20 74 72 61 6e 73 6c 61 74 65 59 28 32 32 70 78 29 20 72 6f 74 61 74 65 28 2d 31 38 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 32 32 70 78 29 20 74 72 61 6e 73 6c 61 74 65 59 28 32 32 70 78 29 20 72 6f 74 61 74 65 28 2d 31 38 30 64 65 67 29 3b 0a 20 20 7d 0a 20 20 37 35 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e Data Ascii: eg) scale(0.5); transform: translateX(22px) rotate(-90deg) scale(0.5); } 50% { -webkit-transform: translateX(22px) translateY(22px) rotate(-180deg); transform: translateX(22px) translateY(22px) rotate(-180deg); } 75% { -webkit-tran
2024-09-29 02:42:46 UTC	1369	IN	Data Raw: 33 3b 0a 20 20 7d 0a 20 20 74 6f 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 7d 0a 40 6b 65 79 66 72 61 6d 65 73 20 73 70 69 6e 6e 65 72 2d 70 75 6c 73 69 6e 67 2d 65 6c 6c 69 70 73 69 73 2d 31 64 4b 2d 7a 78 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 31 3b 0a 20 20 7d 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 Data Ascii: 3; } to { -webkit-transform: scale(1); transform: scale(1); opacity: 1; }}@keyframes spinner-pulsing-ellipsis-1dK-zx { 0% { -webkit-transform: scale(1); transform: scale(1); opacity: 1; } 50% { -webkit-transform:
2024-09-29 02:42:46 UTC	1369	IN	Data Raw: 32 30 30 3b 0a 20 20 20 20 73 74 72 6f 6b 65 2d 64 61 73 68 6f 66 66 73 65 74 3a 20 2d 31 32 34 3b 0a 20 20 7d 0a 7d 0a 2e 64 65 73 61 74 75 72 61 74 65 2d 5f 54 77 66 33 75 2c 0a 5b 64 61 74 61 2d 61 63 63 65 73 73 69 62 69 6c 69 74 79 2a 3d 22 64 65 73 61 74 75 72 61 74 65 22 5d 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 66 69 6c 74 65 72 3a 20 73 61 74 75 72 61 74 65 28 76 61 72 28 2d 2d 73 61 74 75 72 61 74 69 6f 6e 2d 66 61 63 74 6f 72 2c 20 31 29 29 3b 0a 20 20 66 69 6c 74 65 72 3a 20 73 61 74 75 72 61 74 65 28 76 61 72 28 2d 2d 73 61 74 75 72 61 74 69 6f 6e 2d 66 61 63 74 6f 72 2c 20 31 29 29 3b 0a 7d 0a 2e 62 75 74 74 6f 6e 2d 65 6a 6a 5a 57 43 20 7b 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 Data Ascii: 200; stroke-dashoffset: -124; }}.desaturate-_Twf3u,[data-accessibility*="desaturate"] { -webkit-filter: saturate(var(--saturation-factor, 1)); filter: saturate(var(--saturation-factor, 1));}.button-ejjZWC { position: relative; display:
2024-09-29 02:42:46 UTC	1369	IN	Data Raw: 72 42 72 61 6e 64 2d 32 4d 33 4f 33 4e 3a 61 63 74 69 76 65 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 72 61 6e 64 2d 65 78 70 65 72 69 6d 65 6e 74 2d 36 30 30 29 3b 0a 7d 0a 2e 6c 6f 6f 6b 46 69 6c 6c 65 64 2d 31 48 32 4a 76 6a 2e 63 6f 6c 6f 72 42 72 61 6e 64 2d 32 4d 33 4f 33 4e 3a 64 69 73 61 62 6c 65 64 2c 0a 2e 6c 6f 6f 6b 46 69 6c 6c 65 64 2d 31 48 32 4a 76 6a 2e 63 6f 6c 6f 72 42 72 61 6e 64 2d 32 4d 33 4f 33 4e 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 22 74 72 75 65 22 5d 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 62 72 61 6e 64 2d 65 78 70 65 72 69 6d 65 6e 74 29 3b 0a 7d 0a 2e 6c 6f 6f 6b 46 69 6c 6c 65 64 2d 31 48 32 4a 76 6a 20 7b 0a 20 20 2d 77 65 Data Ascii: rBrand-2M3O3N:active { background-color: var(--brand-experiment-600);}.lookFilled-1H2Jvj.colorBrand-2M3O3N:disabled,.lookFilled-1H2Jvj.colorBrand-2M3O3N[aria-disabled="true"] { background-color: var(--brand-experiment);}.lookFilled-1H2Jvj { -we
2024-09-29 02:42:46 UTC	1369	IN	Data Raw: 61 72 2d 74 68 69 6e 2d 74 72 61 63 6b 29 3b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 69 6e 2d 74 72 61 63 6b 29 3b 0a 7d 0a 2e 74 68 69 6e 2d 52 6e 53 59 30 61 3a 3a 2d 77 65 62 6b 69 74 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 75 6d 62 20 7b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 70 61 64 64 69 6e 67 2d 62 6f 78 3b 0a 20 20 62 6f 72 64 65 72 3a 20 32 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0a 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 73 63 72 6f 6c 6c 62 61 72 2d 74 68 69 6e 2d 74 68 75 6d 62 29 3b 0a 20 20 6d 69 6e 2d 68 65 69 67 68 74 Data Ascii: ar-thin-track); border: 2px solid var(--scrollbar-thin-track);}.thin-RnSY0a::-webkit-scrollbar-thumb { background-clip: padding-box; border: 2px solid transparent; border-radius: 4px; background-color: var(--scrollbar-thin-thumb); min-height
2024-09-29 02:42:46 UTC	1369	IN	Data Raw: 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 32 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0a 20 20 6f 70 61 63 69 74 79 3a 20 30 2e 35 3b 0a 20 20 63 75 72 73 6f 72 3a 20 70 6f 69 6e 74 65 72 3b 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 33 70 78 3b 0a 20 20 63 6f 6c 6f 72 3a 20 76 61 72 28 2d 2d 69 6e 74 65 72 61 63 74 69 76 65 2d 6e 6f 72 6d 61 6c 29 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 20 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 0a 7d 0a 2e 63 6c 6f 73 65 2d 41 Data Ascii: ; -webkit-transition: opacity 0.2s ease-in-out; transition: opacity 0.2s ease-in-out; opacity: 0.5; cursor: pointer; border-radius: 3px; color: var(--interactive-normal); -webkit-box-sizing: content-box; box-sizing: content-box;}.close-A
2024-09-29 02:42:46 UTC	1369	IN	Data Raw: 65 62 6b 69 74 2d 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 0a 20 20 2d 6d 73 2d 66 6c 65 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 20 76 65 72 74 69 63 61 6c 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 2d 6d 73 2d 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 20 63 6f 6c 75 6d 6e 3b 0a 20 20 Data Ascii: ebkit-box; display: -ms-flexbox; display: flex; -webkit-box-pack: center; -ms-flex-pack: center; justify-content: center; -webkit-box-orient: vertical; -webkit-box-direction: normal; -ms-flex-direction: column; flex-direction: column;
2024-09-29 02:42:46 UTC	1369	IN	Data Raw: 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7d 0a 7d 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 63 61 6c 65 2d 62 6f 75 6e 63 65 2d 77 69 67 67 6c 65 2d 35 4f 57 32 70 73 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 29 20 72 6f 74 61 74 65 28 31 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 29 20 72 6f 74 61 74 65 28 31 30 64 65 67 29 3b 0a 20 20 7d 0a 20 20 33 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 33 29 20 72 6f 74 61 74 65 28 31 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 33 29 20 72 6f 74 61 74 65 28 31 30 Data Ascii: opacity: 0; }}@-webkit-keyframes scale-bounce-wiggle-5OW2ps { 0% { -webkit-transform: scale(0) rotate(10deg); transform: scale(0) rotate(10deg); } 30% { -webkit-transform: scale(1.3) rotate(10deg); transform: scale(1.3) rotate(10
2024-09-29 02:42:46 UTC	1369	IN	Data Raw: 2d 32 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 39 38 29 20 72 6f 74 61 74 65 28 2d 32 30 64 65 67 29 3b 0a 20 20 7d 0a 20 20 39 32 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 29 20 72 6f 74 61 74 65 28 2d 35 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 29 20 72 6f 74 61 74 65 28 2d 35 64 65 67 29 3b 0a 20 20 7d 0a 20 20 39 37 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 39 39 29 20 72 6f 74 61 74 65 28 2d 35 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 30 2e 39 39 29 20 72 6f 74 61 74 65 28 2d 35 64 65 67 Data Ascii: -20deg); transform: scale(0.98) rotate(-20deg); } 92% { -webkit-transform: scale(1.1) rotate(-5deg); transform: scale(1.1) rotate(-5deg); } 97% { -webkit-transform: scale(0.99) rotate(-5deg); transform: scale(0.99) rotate(-5deg

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	18.66.92.205	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:47 UTC	542	OUT	GET /544a9f7.js HTTP/1.1 Host: d17iy0164v753e.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mrbeastcast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:47 UTC	463	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 26988 Connection: close Last-Modified: Sun, 22 Sep 2024 12:20:01 GMT Server: AmazonS3 Date: Sun, 29 Sep 2024 02:42:48 GMT ETag: "f15e91e549ad0dd401be0dbc95bf744d" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 c387974a86541bbcc6c5141a85eeaf36.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: d4bg-OGvHpUXVR3Y59PRdsfq8wk7zDgtfbtw1Pchq_4C_JOCpyRcow==
2024-09-29 02:42:48 UTC	16384	IN	Data Raw: 76 61 72 20 78 66 43 6f 6e 74 65 6e 74 4c 6f 63 6b 65 72 3b 0d 0a 76 61 72 20 5f 5f 63 66 52 4c 55 6e 62 6c 6f 63 6b 48 61 6e 64 6c 65 72 73 20 3d 20 31 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 43 50 42 43 6f 6e 74 65 6e 74 4c 6f 63 6b 65 72 28 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 72 65 66 65 72 72 65 72 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 20 3f 20 74 68 69 73 2e 65 6e 63 6f 64 65 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 20 3a 20 27 27 3b 0d 0a 20 20 20 20 74 68 69 73 2e 70 72 6f 74 6f 63 6f 6c 20 3d 20 28 22 68 74 74 70 73 3a 22 20 3d 3d 3d 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f Data Ascii: var xfContentLocker;var __cfRLUnblockHandlers = 1;function CPBContentLocker() { this.constructed = false; this.referrer = document.referrer ? this.encode(document.referrer) : ''; this.protocol = ("https:" === document.location.protoco
2024-09-29 02:42:48 UTC	10604	IN	Data Raw: 67 73 5b 22 6e 75 6d 62 65 72 5f 6f 66 66 65 72 73 5f 72 65 71 75 69 72 65 64 22 5d 20 21 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 72 65 71 75 69 72 65 64 4c 65 61 64 73 20 3d 20 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 75 73 65 72 53 65 74 74 69 6e 67 73 5b 22 6e 75 6d 62 65 72 5f 6f 66 66 65 72 73 5f 72 65 71 75 69 72 65 64 22 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 74 68 69 73 2e 75 73 65 72 53 65 74 74 69 6e 67 73 5b 22 70 61 79 6f 75 74 5f 72 65 71 75 69 72 65 64 22 5d 20 21 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 72 65 71 75 69 72 65 64 50 6f 69 6e 74 73 20 Data Ascii: gs["number_offers_required"] != "undefined") { this.requiredLeads = parseInt(this.userSettings["number_offers_required"]); } if (typeof this.userSettings["payout_required"] != "undefined") { this.requiredPoints

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49718	2.19.244.127	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:47 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 02:42:48 UTC	535	IN	HTTP/1.1 200 OK Content-Type: application/octet-stream Last-Modified: Tue, 16 May 2017 22:58:00 GMT ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json X-Azure-Ref: 0WwMRYwAAAABe7whxSEuqSJRuLqzPsqCaTE9OMjFFREdFMTcxNQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=137015 Date: Sun, 29 Sep 2024 02:42:48 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 02:42:48 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49723	18.66.92.123	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:48 UTC	363	OUT	GET /544a9f7.js HTTP/1.1 Host: d17iy0164v753e.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:49 UTC	471	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 26988 Connection: close Last-Modified: Sun, 22 Sep 2024 12:20:01 GMT Server: AmazonS3 Date: Sun, 29 Sep 2024 02:42:48 GMT ETag: "f15e91e549ad0dd401be0dbc95bf744d" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 f4137273db9ae377298b8f8daf5b93f0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P2 X-Amz-Cf-Id: keQn9YvqYMXsOAOOZL1PX0kHs3kXX1y_q0G18b2l580siN1yoflFVA== Age: 2
2024-09-29 02:42:49 UTC	16384	IN	Data Raw: 76 61 72 20 78 66 43 6f 6e 74 65 6e 74 4c 6f 63 6b 65 72 3b 0d 0a 76 61 72 20 5f 5f 63 66 52 4c 55 6e 62 6c 6f 63 6b 48 61 6e 64 6c 65 72 73 20 3d 20 31 3b 0d 0a 0d 0a 66 75 6e 63 74 69 6f 6e 20 43 50 42 43 6f 6e 74 65 6e 74 4c 6f 63 6b 65 72 28 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 65 64 20 3d 20 66 61 6c 73 65 3b 0d 0a 20 20 20 20 74 68 69 73 2e 72 65 66 65 72 72 65 72 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 20 3f 20 74 68 69 73 2e 65 6e 63 6f 64 65 28 64 6f 63 75 6d 65 6e 74 2e 72 65 66 65 72 72 65 72 29 20 3a 20 27 27 3b 0d 0a 20 20 20 20 74 68 69 73 2e 70 72 6f 74 6f 63 6f 6c 20 3d 20 28 22 68 74 74 70 73 3a 22 20 3d 3d 3d 20 64 6f 63 75 6d 65 6e 74 2e 6c 6f 63 61 74 69 6f 6e 2e 70 72 6f 74 6f 63 6f Data Ascii: var xfContentLocker;var __cfRLUnblockHandlers = 1;function CPBContentLocker() { this.constructed = false; this.referrer = document.referrer ? this.encode(document.referrer) : ''; this.protocol = ("https:" === document.location.protoco
2024-09-29 02:42:49 UTC	10604	IN	Data Raw: 67 73 5b 22 6e 75 6d 62 65 72 5f 6f 66 66 65 72 73 5f 72 65 71 75 69 72 65 64 22 5d 20 21 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 72 65 71 75 69 72 65 64 4c 65 61 64 73 20 3d 20 70 61 72 73 65 49 6e 74 28 74 68 69 73 2e 75 73 65 72 53 65 74 74 69 6e 67 73 5b 22 6e 75 6d 62 65 72 5f 6f 66 66 65 72 73 5f 72 65 71 75 69 72 65 64 22 5d 29 3b 0d 0a 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 74 79 70 65 6f 66 20 74 68 69 73 2e 75 73 65 72 53 65 74 74 69 6e 67 73 5b 22 70 61 79 6f 75 74 5f 72 65 71 75 69 72 65 64 22 5d 20 21 3d 20 22 75 6e 64 65 66 69 6e 65 64 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 72 65 71 75 69 72 65 64 50 6f 69 6e 74 73 20 Data Ascii: gs["number_offers_required"] != "undefined") { this.requiredLeads = parseInt(this.userSettings["number_offers_required"]); } if (typeof this.userSettings["payout_required"] != "undefined") { this.requiredPoints

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49724	188.114.97.3	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:49 UTC	661	OUT	GET /claim/83e99dbc7c072587a2f096e0bf526dd7.png HTTP/1.1 Host: www.mrbeastcast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mrbeastcast.com/claim/40532.45cfda0794123b4bec3c.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:49 UTC	665	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:42:49 GMT Content-Type: image/png Content-Length: 80560 Connection: close Last-Modified: Sat, 10 Aug 2024 17:55:07 GMT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3301 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=sm%2BPW9wxiYW8Tbcn0DNxMzQmLXas8W38HBtIumX0878pTSoKnqTWiglvgBjwK2Ru5EBYJwbo954g77Ojrq%2FX%2BtYDpr%2BWup%2Fv3vM2qgu9Y3ZrNWMMg6YYmQuMxVfbjOAP3FXYGyNN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ca89f41287443e6-EWR alt-svc: h3=":443"; ma=86400
2024-09-29 02:42:49 UTC	704	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 70 00 00 02 58 08 02 00 00 00 ac 00 93 6f 00 01 3a 77 49 44 41 54 78 01 ec 9c 87 76 a3 3a 10 40 13 f7 0a ee bd f7 6e 9c 46 de ff ff d8 bb 41 1b 85 a5 24 c2 de e2 78 35 87 93 e3 86 20 68 74 35 4d ba 0b 94 4c 26 b7 3b 3c 58 0f f6 f1 f4 f2 7e d8 86 59 be 53 10 2d f7 f7 f7 f3 c5 e6 28 9e 9e c2 c1 73 5e 6d 8e e9 74 66 b6 58 9f 1e 5f 15 4f 31 4b 3f ba 63 30 9a 8a b3 2e 3c 0e d6 73 2e 57 d0 dd a7 e5 0f 48 a1 68 ee 8f cf 82 30 db fd 83 a4 4d b3 d9 61 f8 c8 9f a5 52 69 d3 ac b8 3f 41 e2 8e 44 ba 5c 22 91 64 88 b9 81 c6 90 a9 d5 9b 6a 67 6b a0 c5 16 ab 2d 0f 4d 1d 68 cb d5 2e 95 4a 2d 96 5b 75 a0 15 8b a6 b8 dc 68 32 ff 25 40 db 1f 9f 32 99 ac ee be 3f 20 5a 0c b3 74 b4 de 81 b6 3b 49 a0 d5 1b 2d 37 be 98 e5 Data Ascii: PNGIHDRpXo:wIDATxv:@nFA$x5 ht5ML&;<X~YS-(s^mtfX_O1K?c0.<s.WHh0MaRi?AD\"djgk-Mh.J-[uh2%@2? Zt;I-7
2024-09-29 02:42:49 UTC	1369	IN	Data Raw: 9a fb c3 09 2a 15 34 9b 26 48 82 cb b9 33 aa 37 cf 84 f1 a6 00 a5 8a 4e 12 45 85 6f a3 d1 c2 a0 d4 f1 fb f3 a4 68 98 db 7d 40 54 fe e4 98 95 e3 c9 9c 20 25 b1 ab 73 13 eb 06 8e 96 07 68 87 e3 13 23 45 e5 74 2d 89 64 72 bd 3d 4e 67 6b a6 43 aa 9e 02 d3 ca bb cf 80 f6 8c e1 8e 8f 0d 15 e9 05 0f d0 98 14 39 b7 37 18 63 bb 04 b2 14 1c cd 16 9b 33 80 46 cb ad 76 cf 99 d1 aa e9 88 9e 9e 2e 6f 68 b6 bb b5 46 eb ee 2c a0 69 81 2d 81 51 f9 93 63 56 92 e9 25 39 7e 76 26 d0 30 4a f8 6f 1e a0 d1 2c 6d 5e 5d 60 b2 3f 98 1c 4e cf 9e c4 10 79 7a 91 7e 52 11 2d dd fe 08 44 52 03 14 a9 d0 07 da ca 20 25 a6 24 a6 09 b1 6b 86 34 69 20 68 ce c1 87 cc ac f5 46 3b 93 fd c9 da 43 2f f3 05 a3 dd e9 4f 66 4b ac d8 46 a3 4d 35 06 2a 4b c7 45 b2 26 89 06 d1 5a b9 5c a5 f7 69 07 a6 Data Ascii: 4&H37NEoh}@T %sh#Et-dr=NgkC97c3Fv.ohF,i-QcV%9~v&0Jo,m^]`?Nyz~R-DR %$k4i hF;C/OfKFM5KE&Z\i
2024-09-29 02:42:49 UTC	1369	IN	Data Raw: 9d 8d 75 0d d3 c4 a6 0c fc 77 b4 60 ae 5d 7f a5 16 fe 00 c5 c4 58 84 8c 08 4b 46 1f 7d a3 8c 98 7a 60 4e 1c 5f eb 7b 00 8d 02 76 67 c0 6b f2 9e 29 a8 b2 e8 f2 20 cd 88 cc df 9a b3 b1 3e 23 64 b1 fc a8 4f 17 06 9f 48 49 f7 06 a3 c0 75 f7 ee ba 49 54 56 84 01 f8 44 66 c6 b9 9f 6a bd 41 e3 a0 79 30 98 b8 f3 4a c7 1f dc 37 6e 2c d7 e0 af 1c 40 b4 a0 03 cc d0 62 a7 89 eb 17 22 f4 2c 53 63 23 02 92 aa 98 14 62 2c c8 ac 90 3b 49 74 78 1b 74 16 3e 58 d1 38 7f 63 0e 2d c4 02 c3 81 f6 12 15 68 ec f6 8c be d5 ea cd e5 7a f7 1e 89 74 01 6d 6b 51 2c 14 b8 d5 33 eb fa e5 6d d0 ef 50 8b f2 32 09 34 5e 60 71 56 ab 0d 1a cf 64 73 83 e1 94 66 dd 40 db 1d 6e 6d b7 bb 42 51 03 2d 58 88 7f bf 8d fa e2 f7 98 bf 28 bf 61 38 a0 cc 00 cd d9 43 10 65 0e 00 9a d8 8e 97 41 c7 3c 4e Data Ascii: uw`]XKF}z`N_{vgk) >#dOHIuITVDfjAy0J7n,@b",Sc#b,;Itxt>X8c-hztmkQ,3mP24^`qVdsf@nmBQ-X(a8CeA<N
2024-09-29 02:42:49 UTC	1369	IN	Data Raw: 11 59 ab d6 5a 84 8f 21 41 bb ce e5 25 68 42 88 77 02 e6 1a c3 dd 07 94 7e 6b e7 dd cf e1 d5 84 3e 74 5a 94 56 0d f1 58 de 91 bd 38 ac c3 39 3d 3b a7 ff a9 52 69 70 82 e7 4b 98 a2 f3 24 f4 b0 37 5b 3d 2d a0 7b 11 21 34 8e 83 b9 0f 7a b2 6b 41 fb e5 f7 74 53 2d 21 03 ca 0d 86 78 d6 08 1a 5f b5 1a 0b d1 64 25 48 5b 7a 41 23 ca 64 b9 a2 16 d0 bd 2b 84 10 94 60 68 eb 59 aa a1 24 0b e9 77 dc 34 88 b4 3d f1 3c 67 7f 70 8d 9e 52 da a6 3f 92 72 0f cf 46 b0 c8 89 dc 17 7a b8 9e 8a 41 63 a6 20 79 25 7c 27 cb 21 50 6a 46 20 a7 4f 29 49 ec 27 ad e7 52 08 21 d6 c3 81 74 7c b7 7b 41 e3 b1 c4 a9 8c 0c 26 67 82 96 25 a6 e4 90 7c 76 76 81 b2 2d 11 b4 e1 0d 3e 15 08 1a bd 92 74 4c 72 4f 58 d0 d0 3a 36 dc ba 77 86 10 42 d0 bb 13 2e 0f 11 08 12 cf f9 db 51 f4 d7 8e e3 76 76 Data Ascii: YZ!A%hBw~k>tZVX89=;RipK$7[=-{!4zkAtS-!x_d%H[zA#d+`hY$w4=<gpR?rFzAc y%\|'!PjF O)I'R!t\|{A&g%\|vv->tLrOX:6wB.Qvv
2024-09-29 02:42:49 UTC	1369	IN	Data Raw: 45 d0 82 d9 ac af 5b 8d f6 0b 21 84 ce eb a7 a7 e7 ec 11 69 b6 7a c3 ab 31 16 2a 36 18 fb e4 ab 12 ba 82 7b fc a6 63 96 da e1 33 85 4c 63 28 cd 4a 12 27 84 88 01 5a 98 74 7a 76 4e 04 d9 6c f7 31 13 c5 a8 e4 05 41 9b 7a 41 bb 63 a9 47 e5 51 d0 3e bb 88 08 21 84 c0 7f be 58 aa f6 07 d7 81 e6 fe 17 29 46 bc d8 68 4c 00 da ee 0e 7b 83 6b ae 72 b5 81 27 80 fb 17 08 21 c4 e9 d9 19 e9 c6 c1 f0 fb 4c d0 42 91 62 e4 cb 04 6d 80 9a a1 8a 3c 95 56 b4 0b 21 c4 3a a8 53 e3 10 c5 5a 23 64 f7 3e 42 10 89 7b 9f f7 f0 e3 22 85 69 f7 70 d9 63 83 fb a7 dc 18 8c 6e 58 9d ec de 10 21 84 1a 75 70 bc a3 96 3d 89 2c 68 93 bb b0 a0 3d 2c 11 b4 31 82 f6 8b c8 12 0b 2a 27 84 10 62 0e c4 91 d2 f6 f0 ea e6 69 31 dd af db e9 2f 9f 98 e4 63 58 73 d9 a2 34 1c dd d0 69 44 0e 12 2f 68 3e Data Ascii: E[!iz16{c3Lc(J'ZtzvNl1AzAcGQ>!X)FhL{kr'!LBbm<V!:SZ#d>B{"ipcnX!up=,h=,1'bi1/cXs4iD/h>
2024-09-29 02:42:49 UTC	1369	IN	Data Raw: a1 57 51 da 7e 10 34 cc d1 b4 10 fc 80 11 42 98 aa 9a 4d 1a 93 31 b9 dc 25 a7 7b a0 69 3d b5 60 24 8e 0d a4 99 5c 10 56 e2 f8 43 25 3a bc 32 67 eb cb 3c 84 a7 8b 6d 49 24 47 29 12 79 5f 0f fa 35 cd 01 ce 4e f9 42 08 e1 9b 26 bb fd 91 09 1a 65 93 4c 36 ef b5 6b ee 84 0c 1c 86 ad f4 f1 2d b4 4b 96 c7 de ee 51 d0 7e 71 0f 82 46 35 fc e3 53 c7 5a 36 57 30 09 4d a5 d2 ee 40 11 42 c8 1b 88 4a 90 45 84 88 69 b8 24 44 64 49 0d 72 d1 7a 83 76 f2 66 ab 4b 90 17 75 dd ed e6 63 3a 8b b3 93 d8 ff f2 43 fd 7b 03 cd 46 b4 46 d1 46 d9 68 76 9d 10 42 3c b5 3f 52 dd 36 41 63 38 26 5c bb a3 ca 91 c9 15 16 d3 e1 64 07 d1 16 64 87 47 bd 99 a0 21 ad e4 29 fd 79 98 d6 61 06 cf 11 b4 7a a3 e5 0e 11 21 84 6a 8b 26 be 5c 54 5b e6 5a c2 d9 76 58 ad 35 c2 cd 15 0c 27 32 6d 6d 7d 8d Data Ascii: WQ~4BM1%{i=`$\VC%:2g<mI$G)y_5NB&eL6k-KQ~qF5SZ6W0M@BJEi$DdIrzvfKuc:C{FFFhvB<?R6Ac8&\ddG!)yaz!j&\T[ZvX5'2mm}
2024-09-29 02:42:49 UTC	1369	IN	Data Raw: ff 39 fe c7 63 21 84 ac 82 6c c9 98 af fb a4 b3 39 66 bd 19 90 c4 8a 72 bd fe f2 cd 28 e9 db 1b 98 93 80 34 9d c5 ef e3 2a c8 ad 86 c5 97 57 c5 de 45 77 7c 08 21 c8 44 0e 46 3e 5f 88 5c fc e0 6c cc 7c f4 4c d0 be bf 2c 68 93 bb 7f 26 68 84 92 58 66 12 f5 86 6d 2e 6c 57 e4 01 b4 ee 08 21 04 95 14 fa d3 fd 90 35 92 6a 2a d6 0b a6 a4 5f 74 f9 69 77 87 76 a4 7e b3 8b 57 c8 1b 83 bd 48 f4 17 7b a3 bb a9 17 df df 37 93 07 96 7a 3b 21 c4 b1 ee ec f6 dd 90 28 db a3 a0 dd cf 04 ed c5 d3 2f 83 86 e6 49 f9 d6 82 76 fd 28 68 c8 69 a1 50 e2 86 f7 36 47 63 6d bb cf a1 20 84 50 bd db f4 74 ea 83 c8 88 aa 4a 76 d3 1e 12 f1 da 3e d3 c9 0b c3 89 83 97 6a 11 24 4d f7 95 4a dd ce f4 6c 8c 3c e6 a6 75 21 44 a1 38 ab 77 fb 00 11 61 d9 48 d0 fa 83 eb f1 ed 66 82 b6 7d a6 93 fd Data Ascii: 9c!l9fr(4WEw\|!DF>_\l\|L,h&hXfm.lW!5j_tiwv~WH{7z;!(/Iv(hiP6Gcm PtJv>j$MJl<u!D8waHf}
2024-09-29 02:42:49 UTC	1369	IN	Data Raw: dd f7 7d 45 14 77 05 45 01 75 b0 ff cf ef fd bf ae e7 4b aa cd d0 04 92 4b 76 c2 a9 4f 3e 3d f4 34 60 4c 6e ce ad e5 d4 a9 91 35 b4 b4 b8 64 c3 94 23 29 bd e4 5d b5 6e 64 b1 d3 ea ad c8 99 dd 2c b3 d6 1b 0b 35 a3 c9 63 38 85 b1 c1 17 a7 47 83 16 53 b1 f5 8d 4d 3c 42 a8 a8 84 a9 00 5a d7 19 d0 fe 84 d0 3f 80 86 7f 89 30 05 c5 13 80 38 38 e4 33 12 d0 88 5b 62 f7 17 cb 64 14 00 41 aa c8 65 06 a0 b1 50 b3 01 b4 8f 97 d7 6e ec f0 98 13 4b ab 4d 58 7a 05 44 b0 b8 86 74 cc 98 87 16 0f d0 f0 2f 99 9f 44 b9 98 dc df 08 61 37 9a 89 eb 7d 9c 18 3b 4c b0 10 a7 15 f9 1e de 6d 98 9b 3c e9 6d e1 7e f3 b5 03 59 98 ac ac 3f 13 2f 18 42 e1 62 8f c8 f5 71 0e 27 a7 b5 84 97 5e a6 3e 09 17 f9 f1 6c 26 8f 7d f2 cc 47 bf 33 30 fa 82 03 e0 de 4f dc d9 ad b6 5e 3c f2 9b db 47 6e Data Ascii: }EwEuKKvO>=4`Ln5d#)]nd,5c8GSM<BZ?0883[bdAePnKMXzDt/Da7};Lm<m~Y?/Bbq'^>l&}G30O^<Gn
2024-09-29 02:42:49 UTC	1369	IN	Data Raw: 45 9d 21 db ff 01 da fb d7 ce a0 02 b3 ec 04 68 69 cc 02 e9 72 42 8e 71 0c 5c 31 9c 5f ca 7c 9c ee 70 57 91 90 37 37 93 4f c9 92 cb 1f 76 3d 4a 53 07 5d 6b 52 56 e5 5c ed cc 35 80 ea 67 fc e6 59 31 da fb 28 74 a4 b8 a7 02 65 dc 26 47 40 b3 69 5e 84 c2 0c a7 1d 02 b4 3e 4d 60 f9 24 9e 65 92 b0 a0 9d 82 25 97 3f a0 bd 7b eb fc a2 de 20 65 55 4e 40 83 b5 6c a7 37 43 37 94 0a 2d 49 ba b4 01 ad eb 0e 68 d4 58 98 9a 43 69 65 18 d0 e8 dd 71 4d 7f e4 d9 f6 85 0e 30 4e 2e 74 4e 5e 8f fc 1a 3c 18 42 87 7c 4c 2a 0c c4 d3 b6 20 a7 c2 50 5c 87 e1 b9 67 3c f6 ce 7e 64 b7 71 f3 40 dc 59 7e c9 18 0a 05 33 34 cd 82 0d 03 59 dd 0c 04 35 5c c7 cc 5a 3b 24 51 4a 50 70 97 9d 2c 87 2b 20 93 d1 fb 62 9d 37 9d 5e 0c 40 eb 0d 33 37 a6 00 b4 eb 3b 52 92 64 ad ca df 11 bf 3b 4b 80 Data Ascii: E!hirBq\1_\|pW77Ov=JS]kRV\5gY1(te&G@i^>M`$e%?{ eUN@l7C7-IhXCieqM0N.tN^<B\|L* P\g<~dq@Y~34Y5\Z;$QJPp,+ b7^@37;Rd;K
2024-09-29 02:42:49 UTC	1369	IN	Data Raw: 73 f1 d0 38 22 30 7f 2a 29 7c ce 80 98 1b 59 66 ea fd b0 64 c8 44 72 8a 20 2f 2c c9 c6 cd 3d ff e4 73 81 7b 9f bf 91 9c 34 67 76 7d 7d dd f2 19 70 6b c2 21 18 a0 c1 55 af 70 52 dd b4 dc e3 cd 19 0a ae 18 43 64 2f 91 f9 82 5b 0f b8 13 f1 53 88 14 7b 5a 96 b5 4b 47 e0 07 42 15 c5 5e f7 98 33 fd 60 3a 90 40 cb 5d f4 c7 2f cb de ff 78 33 6c 27 7c 39 bf 17 b3 c5 28 05 3e b7 de df 7e 00 0d bd 5f 7c 4a 7c 1d 9b 2a 44 c0 cc 67 19 8f 16 ce a3 af b6 7e 10 13 74 07 37 22 29 a0 f5 87 01 ed cd 00 ed 09 40 bb 25 6e 19 00 da 9a 00 4d 96 03 a0 6d 81 69 45 69 4f f2 5c 8c 4d 07 de 9b a3 e9 e6 a1 19 a0 01 4d 84 67 46 eb f7 a2 e2 b5 cd 3f 80 76 37 dc ad d5 fd fc 0d 77 d6 1a f6 81 35 c3 31 3c 34 2b 79 87 56 bd 2f 93 3a 94 40 00 fe 22 5e 23 17 9d 33 b0 4c 24 81 3b 24 33 c4 80 Data Ascii: s8"0)\|YfdDr /,=s{4gv}}pk!UpRCd/[S{ZKGB^3`:@]/x3l'\|9(>~_\|J\|Dg~t7")@%nMmiEiO\MMgF?v7w51<4+yV/:@"^#3L$;$3

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49725	188.114.97.3	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:49 UTC	631	OUT	GET /claim/a9009aaba5bfab576a517f6915b3c0b6.svg HTTP/1.1 Host: www.mrbeastcast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mrbeastcast.com/claim/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:49 UTC	674	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:42:49 GMT Content-Type: image/svg+xml Content-Length: 2215 Connection: close Last-Modified: Sat, 10 Aug 2024 17:55:07 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3301 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DtEXVpLAVreXx2nX1%2BLbuPifLTBk8ntcsWeg1zGbJD3tsn0z0Ei4t%2BmkNx9PCQfgm9rhmTwKh3GqZNeM8Q8uGkEONj%2FIk8ebx8rZnXOATOYrnlNGo3F%2BP%2BbkEIKPtEePtFJXJLb%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ca89f415b75c459-EWR
2024-09-29 02:42:49 UTC	695	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 38 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 38 30 22 20 77 69 64 74 68 3d 22 38 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 61 22 20 78 31 3d 22 2d 32 2e 39 32 25 22 20 78 32 3d 22 31 31 33 2e 39 39 34 25 22 20 79 31 3d 22 31 31 30 2e 39 35 38 25 22 20 79 32 3d 22 2d 31 33 2e 37 30 34 25 22 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 62 34 37 33 66 35 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d Data Ascii: <svg height="80" viewBox="0 0 80 80" width="80" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a" x1="-2.92%" x2="113.994%" y1="110.958%" y2="-13.704%"><stop offset="0" stop-color="#b473f5"/><stop offset=
2024-09-29 02:42:49 UTC	1369	IN	Data Raw: 35 35 31 35 35 20 32 31 2e 30 37 30 39 33 34 36 2d 39 2e 37 37 30 38 31 34 20 32 35 2e 35 39 38 34 30 34 32 2d 39 2e 37 37 30 33 38 37 36 20 34 2e 33 35 33 36 30 39 34 2d 32 31 2e 34 39 35 31 39 33 38 2e 31 37 34 32 37 38 31 2d 32 35 2e 39 33 36 35 35 30 34 2d 39 2e 34 30 33 34 39 35 34 2d 2e 38 38 38 31 30 30 38 2d 31 2e 39 31 35 33 38 37 36 2d 31 2e 34 32 31 30 34 36 35 2d 34 2e 30 30 35 30 35 33 32 2d 31 2e 35 39 38 38 33 37 32 2d 36 2e 30 39 34 37 31 38 39 68 2d 33 2e 39 30 38 34 31 30 39 63 2d 31 2e 30 36 35 38 39 31 34 20 30 2d 31 2e 39 35 33 39 39 32 32 2d 2e 38 37 30 39 37 32 36 2d 31 2e 39 35 33 39 39 32 32 2d 31 2e 39 31 35 38 30 35 34 20 30 2d 31 2e 30 34 34 38 33 32 39 2e 38 38 38 31 30 30 38 2d 31 2e 39 31 35 33 38 37 36 20 31 2e 39 35 33 39 Data Ascii: 55155 21.0709346-9.770814 25.5984042-9.7703876 4.3536094-21.4951938.1742781-25.9365504-9.4034954-.8881008-1.9153876-1.4210465-4.0050532-1.5988372-6.0947189h-3.9084109c-1.0658914 0-1.9539922-.8709726-1.9539922-1.9158054 0-1.0448329.8881008-1.9153876 1.9539
2024-09-29 02:42:49 UTC	151	IN	Data Raw: 2e 33 34 38 31 33 38 33 2e 35 33 32 39 34 35 37 2d 2e 33 34 38 31 33 38 33 2e 37 31 30 33 31 30 31 2d 2e 33 34 38 31 33 38 33 68 36 2e 39 32 38 32 39 34 36 63 2e 33 35 35 35 38 31 33 2d 2e 31 37 34 32 37 38 31 2e 35 33 32 39 34 35 37 20 30 20 2e 37 31 30 37 33 36 34 2e 33 34 38 31 33 38 33 7a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 39 20 32 31 29 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: .3481383.5329457-.3481383.7103101-.3481383h6.9282946c.3555813-.1742781.5329457 0 .7107364.3481383z" fill="#fff" transform="translate(9 21)"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49722	108.138.24.29	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:49 UTC	577	OUT	GET /public/external/css_frontXF.css HTTP/1.1 Host: d1ieffz9zqrn09.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mrbeastcast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:50 UTC	471	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 6134 Connection: close Date: Sun, 29 Sep 2024 02:42:49 GMT Accept-Ranges: bytes Server: Apache/2.4.48 () OpenSSL/1.0.2k-fips PHP/7.4.11 Last-Modified: Thu, 17 Aug 2023 03:23:39 GMT ETag: "17f6-60315f0399d35" X-Cache: Miss from cloudfront Via: 1.1 62e7b24ca032b612bb93fa7f3437469c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: -g8v2EWu7Yw8eogfXqrA5i5Y_F9Ny4OfkKDAArgYRY8oPIX9oxooDA==
2024-09-29 02:42:50 UTC	5433	IN	Data Raw: 62 6f 64 79 2e 78 66 42 6f 64 79 4d 6f 64 61 6c 4f 70 65 6e 20 7b 0d 0a 20 20 20 20 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 0d 0a 7d 0d 0a 23 78 66 5f 4d 4f 44 41 4c 2e 66 61 64 65 4f 75 74 20 7b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 76 69 73 69 62 69 6c 69 74 79 20 30 73 20 30 2e 35 73 2c 20 6f 70 61 63 69 74 79 20 30 2e 35 73 20 6c 69 6e 65 61 72 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0d 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 0d 0a 20 20 20 20 2d 6d 73 2d 74 72 61 Data Ascii: body.xfBodyModalOpen { overflow:hidden;}#xf_MODAL.fadeOut { opacity: 0; transition: visibility 0s 0.5s, opacity 0.5s linear; -webkit-transition: opacity 0.5s ease-in-out; -moz-transition: opacity 0.5s ease-in-out; -ms-tra
2024-09-29 02:42:50 UTC	701	IN	Data Raw: 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 65 61 73 65 2d 69 6e 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 25 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 2d 6d 6f 7a 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 25 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 25 29 20 74 72 61 6e 73 6c 61 74 65 5a 28 30 29 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 28 30 25 29 20 Data Ascii: nsition-timing-function: ease-in; -webkit-transform: translate(0%) translateZ(0) rotate(0deg); -moz-transform: translate(0%) translateZ(0) rotate(0deg); -ms-transform: translate(0%) translateZ(0) rotate(0deg); transform: translate(0%)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49721	108.138.24.29	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:49 UTC	576	OUT	GET /public/external/v2/htmlxf.4235458.ba3ad.0.js HTTP/1.1 Host: d1ieffz9zqrn09.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mrbeastcast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:50 UTC	421	IN	HTTP/1.1 200 OK Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Date: Sun, 29 Sep 2024 02:42:50 GMT Server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11 X-Powered-By: PHP/7.4.11 X-Cache: Miss from cloudfront Via: 1.1 85ca8c4198fb707d10ecc2a784a315be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: Sk5acqIPkhBlG3cPDbPw2rkrKCLPkXEGJS_Oox08owgbNt3dkhisEA==
2024-09-29 02:42:50 UTC	5485	IN	Data Raw: 31 35 36 35 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 76 61 72 20 69 74 5f 69 64 3d 34 32 33 35 34 35 38 3b 76 61 72 20 68 74 6d 6c 3d 22 3c 64 69 76 20 69 64 3d 5c 22 78 66 5f 4d 4f 44 41 4c 5c 22 3e 5c 72 5c 6e 20 20 20 20 3c 64 69 76 20 69 64 3d 5c 22 78 66 4d 4f 44 41 4c 43 4f 4e 54 45 4e 54 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 5c 22 78 66 4d 4f 44 41 4c 48 45 41 44 45 52 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 5c 22 78 66 4d 4f 44 41 4c 54 49 54 4c 45 5c 22 3e 3c 5c 2f 64 69 76 3e 20 3c 5c 2f 64 69 76 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 5c 22 78 66 4d 4f 44 41 4c 42 4f 44 59 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 66 72 61 Data Ascii: 1565(function () {var it_id=4235458;var html="<div id=\"xf_MODAL\">\r\n <div id=\"xfMODALCONTENT\">\r\n <div id=\"xfMODALHEADER\">\r\n <div id=\"xfMODALTITLE\"><\/div> <\/div>\r\n <div id=\"xfMODALBODY\">\r\n <ifra
2024-09-29 02:42:50 UTC	8576	IN	Data Raw: 32 31 37 38 0d 0a 72 69 70 74 3e 5c 6e 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 5c 22 73 74 79 6c 65 73 68 65 65 74 5c 22 20 74 79 70 65 3d 5c 22 74 65 78 74 5c 2f 63 73 73 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 32 36 36 6b 65 79 39 34 38 66 67 31 37 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 5c 2f 74 68 65 6d 65 73 5c 2f 73 74 61 72 74 75 69 5c 2f 63 73 73 5c 2f 6c 69 62 5c 2f 63 6f 6c 6f 72 70 69 63 6b 65 72 5c 2f 63 73 73 5c 2f 63 6f 6c 6f 72 70 69 63 6b 65 72 2e 63 73 73 5c 22 3e 5c 6e 5c 6e 20 20 20 20 3c 21 2d 2d 20 4f 75 72 20 41 70 70 6c 69 63 61 74 69 6f 6e 27 73 20 43 53 53 20 73 74 79 6c 65 73 68 65 65 74 20 2d 2d 3e 5c 6e 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 5c 22 73 74 79 6c 65 73 68 65 65 74 5c 22 20 74 79 70 Data Ascii: 2178ript>\n <link rel=\"stylesheet\" type=\"text\/css\" href=\"https:\/\/d266key948fg17.cloudfront.net\/themes\/startui\/css\/lib\/colorpicker\/css\/colorpicker.css\">\n\n ... Our Application's CSS stylesheet -->\n <link rel=\"stylesheet\" typ
2024-09-29 02:42:50 UTC	5720	IN	Data Raw: 31 36 35 30 0d 0a 2d 6c 6f 63 6b 65 72 2d 62 6f 74 74 6f 6d 20 7b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 34 70 78 3b 20 7d 20 62 6f 64 79 2e 6d 6f 62 69 6c 65 20 23 6d 79 2d 6c 6f 63 6b 65 72 20 23 6d 79 2d 6c 6f 63 6b 65 72 2d 62 6f 74 74 6f 6d 20 7b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 31 36 70 78 3b 20 7d 20 62 6f 64 79 2e 6d 6f 62 69 6c 65 20 23 6d 79 2d 6c 6f 63 6b 65 72 20 23 6d 79 2d 6c 6f 63 6b 65 72 2d 62 6f 74 74 6f 6d 20 73 70 61 6e 20 7b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 20 7d 20 62 6f 64 79 2e 6d 6f 62 69 6c 65 20 23 6d 79 2d 6c 6f 63 6b 65 72 20 23 6d 79 2d 6c 6f 63 6b 65 72 2d 62 6f 74 74 6f 6d 20 73 70 61 6e 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 20 7d 20 62 6f 64 79 2e 6d 6f 62 69 Data Ascii: 1650-locker-bottom { padding-top: 4px; } body.mobile #my-locker #my-locker-bottom { padding-bottom: 16px; } body.mobile #my-locker #my-locker-bottom span { font-size: 13px; } body.mobile #my-locker #my-locker-bottom span { font-weight: bold; } body.mobi
2024-09-29 02:42:50 UTC	4580	IN	Data Raw: 31 31 64 63 0d 0a 79 2d 6c 6f 63 6b 65 72 2d 62 6f 64 79 2d 74 65 78 74 2d 74 6f 70 7b 5c 6e 20 20 20 20 20 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 5c 6e 20 20 7d 5c 6e 20 20 23 6d 79 2d 6c 6f 63 6b 65 72 20 23 6d 79 2d 6c 6f 63 6b 65 72 2d 74 6f 70 7b 5c 6e 20 20 20 20 20 20 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 20 21 69 6d 70 6f 72 74 61 6e 74 3b 5c 6e 20 20 7d 5c 6e 20 20 62 6f 64 79 2e 6d 6f 62 69 6c 65 20 23 6d 79 2d 6c 6f 63 6b 65 72 20 23 6d 79 2d 6c 6f 63 6b 65 72 2d 62 6f 64 79 2d 6f 66 66 65 72 73 20 23 6d 79 2d 6c 6f 63 6b 65 72 2d 62 6f 64 79 2d 6f 66 66 65 72 73 2d 6c 69 73 74 20 61 7b 5c 6e 20 20 20 20 20 20 66 6f 6e 74 2d 73 Data Ascii: 11dcy-locker-body-text-top{\n padding-top:0 !important;\n font-weight:700;\n }\n #my-locker #my-locker-top{\n margin-bottom:0 !important;\n }\n body.mobile #my-locker #my-locker-body-offers #my-locker-body-offers-list a{\n font-s
2024-09-29 02:42:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49731	188.114.97.3	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:50 UTC	635	OUT	GET /claim/568d4eaa150e7daa3b0b03bcde881aef.woff2 HTTP/1.1 Host: www.mrbeastcast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.mrbeastcast.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.mrbeastcast.com/claim/40532.45cfda0794123b4bec3c.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:50 UTC	672	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:42:50 GMT Content-Type: font/woff2 Content-Length: 26636 Connection: close Last-Modified: Sat, 10 Aug 2024 17:55:07 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3302 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6Ugqtl%2FQNU2bkWhI%2BVp%2B%2FlxwuQllwy4xNSFUwhfb7HmRYq7HLQWbpkrjoJqihDRizD0lbJf8aAt8ydgjPbO3WWV6sYFAlbiSknDatJx0K%2BnrAm6WnwDMIsITwBhGkNfl%2FS6Jhdzm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ca89f4a19980f9f-EWR
2024-09-29 02:42:50 UTC	697	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 68 0c 00 11 00 00 00 01 11 50 00 00 67 a9 00 01 00 83 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 70 1b e9 3a 1c 8b 08 06 60 00 8b 54 08 81 02 09 9c 15 11 08 0a 82 de 4c 82 b5 43 01 36 02 24 03 93 26 0b 89 5c 00 04 20 05 82 6a 07 20 0c 81 4e 1b bf f6 27 8c 76 bb 0f 12 f5 06 05 b6 6b 7b 7b 19 ae 98 6e 2e 0e b9 5b 95 32 c8 44 74 01 3b e6 06 38 0f 41 72 3f eb 8d 08 fe ff ff a4 e4 64 0c 61 15 4c ef 6f 99 55 87 22 db 94 52 49 18 09 99 6c c8 ac 40 a4 2a 98 3f 2d 51 8b 4d 09 e7 f7 d7 77 1f 35 6b ec c5 8e bd 42 c3 80 28 4f 28 ea 41 27 65 37 26 e7 7a 75 f9 55 02 79 bb e7 51 6e 2e 67 46 73 3a ec 0a 0f ad 23 d1 24 51 6b d7 03 05 87 20 36 8b c5 7a 69 aa 20 e3 be ce c3 8a 8f a8 b6 05 35 2a 5b f9 5e 9b 9d 93 c4 62 21 f1 Data Ascii: wOF2hPgp:`TLC6$&\ j N'vk{{n.[2Dt;8Ar?daLoU"RIl@?-QMw5kB(O(A'e7&zuUyQn.gFs:#$Qk 6zi 5[^b!
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: c5 26 b6 08 a8 9e 8c ab 30 7e d3 04 de 40 7f 98 20 02 3d ff d6 3d d0 5c 3a ad e3 02 f6 c7 3e 35 83 1e 28 4f 24 17 33 e6 f8 6c eb fb ad e5 ce 96 93 03 a1 6a dd 31 8f 2c 51 be 4d 5e 9d aa b2 3b 05 42 59 bf d7 96 72 51 25 ac c0 57 26 7c 6f 37 40 06 9c a3 84 6d d6 04 25 df fa 8a da 45 99 a7 ae fa 5a 33 6c c0 a1 0c 02 03 06 18 60 6e 38 c9 b6 a9 22 12 1e 3f ff a5 b3 ba fe af 52 35 12 6e cf a2 66 02 de 68 3a d2 9d 3d bd ef 8e 69 f7 86 e8 0d 39 ff fa f5 4b bf aa 7e 55 81 4a 12 94 02 36 12 c6 06 d4 b8 25 d1 01 4c 07 aa 4a 60 95 10 fd 30 f6 7b c3 e4 ec f1 6c 98 c9 20 cc 18 d3 11 bb 93 c3 e6 10 4e 21 86 e3 1e fb b8 a7 63 88 87 eb 71 df 7d 0f e7 85 ff af bd ce de f3 76 7f 5a 53 d8 48 5c 84 a4 59 f1 b3 a9 2f b4 e6 5a 53 0c 0e 8d 42 49 c6 23 4c 69 c2 32 08 69 e0 f9 ef Data Ascii: &0~@ ==\:>5(O$3lj1,QM^;BYrQ%W&\|o7@m%EZ3l`n8"?R5nfh:=i9K~UJ6%LJ`0{l N!cq}vZSH\Y/ZSBI#Li2i
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 53 c0 37 6b 39 41 4a 52 29 88 29 d5 4d 08 19 93 55 f4 45 9f f3 ba 2e 37 7b c7 63 6b 64 db 98 7b 27 8b 0a d7 09 b0 14 d4 e9 44 a4 9b 5d 76 84 bb 12 e1 8a 67 25 51 a3 98 55 56 6f 8a 04 5c 8e b0 14 36 76 91 12 7c a6 b3 92 07 b5 ce 0e 55 be de 8b b7 de af df ac 4f 92 be 03 13 26 89 26 64 c4 15 f7 88 30 d9 67 8d fe 45 fb 30 a9 05 33 56 0a 55 cb 02 cb 93 da 1c a8 23 52 04 78 92 40 98 c8 19 fa 74 89 41 24 34 f2 20 85 91 d2 a8 10 a9 af 8d 14 30 3b f5 75 1a 72 5f 4f 1a e3 bc be 87 e6 5c 56 ca b8 e6 79 7e 7b 8c 30 69 b6 8b a6 ae 62 be 4f 35 71 6a 54 2f 21 1b 3e 82 a8 57 58 95 ae 76 0c cd c8 f8 4f 18 17 1a c9 4e d4 ab a5 5c 78 d8 1d 94 5c 0f 0b a8 00 3c f9 7d 64 43 21 84 7c 4c 3e 2a a0 30 ac 3e 6f 2e 94 bb 6e 46 11 64 48 e1 0b db 0e 2a 38 41 a3 b5 f6 1d 1a b9 ba c2 Data Ascii: S7k9AJR))MUE.7{ckd{'D]vg%QUVo\6v\|UO&&d0gE03VU#Rx@tA$4 0;ur_O\Vy~{0ibO5qjT/!>WXvON\x\<}dC!\|L>0>o.nFdH8A
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: e3 42 a0 08 a5 3b 7b 06 7c 48 59 4f 06 8f 1a 15 dc b3 f9 ac 65 92 d8 a6 cf 20 34 92 3e 91 49 0c 43 ee b0 21 2f 03 49 fc 42 20 16 c1 7d 25 b8 36 ee f9 4c 76 33 d3 6b f4 af f3 5d 05 6d 65 d5 59 f3 f7 86 e4 3f 56 53 33 19 29 58 a1 27 4c 48 22 13 9f c9 51 6a ae 39 c9 a2 6e 36 6f 36 4a 77 09 b6 19 d9 0b b7 82 91 7d 57 9d d9 81 29 4a 9c 7d 34 28 2d 3c 42 93 c4 69 c1 44 e9 73 75 6d 34 0f ef 20 c9 b5 fb 89 67 40 14 a5 34 37 1b d0 e4 31 d9 bf 88 89 38 2a 6a 86 e4 93 c9 43 d8 90 b7 ed be e7 7e e6 ce 7b 8f 74 82 bf 71 24 c0 d8 9c 6b 7c 14 18 3c 06 91 0c 92 b0 52 17 bb 32 bd 57 db 02 a5 b0 c6 3e ed 59 cf eb e8 ff d8 08 3c c4 04 03 07 c1 98 bd e9 e2 84 51 2c 04 12 81 c4 c5 bb 48 c1 62 b2 40 a1 f4 42 11 7a 2a 1b f4 5a da e8 74 52 a6 96 89 73 67 64 ec b2 e4 4e e5 85 1e Data Ascii: B;{\|HYOe 4>IC!/IB }%6Lv3k]meY?VS3)X'LH"Qj9n6o6Jw}W)J}4(-<BiDsum4 g@4718jC~{tq$k\|<R2W>Y<Q,Hb@BzZtRsgdN
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 57 e7 1d e7 35 57 e1 cd 42 03 90 f8 9a 38 2f 81 3c 64 3a 63 16 ab f4 55 0d 78 fd c0 43 9d c7 aa b9 64 8a 28 f9 bf 08 c2 10 f8 07 8d d9 8b 6c ec 55 5f ff 15 d0 0e 25 d2 98 f9 9a d9 43 16 b2 6c 18 30 4a 68 cc 03 49 1a 40 dc 9a ee 52 59 85 55 b7 e7 74 71 fa a4 48 cf 54 60 e6 87 a8 18 a9 d8 e9 9d ba db ac bc 16 11 48 3b 22 06 80 0a 78 60 82 2d ec 15 37 9a a4 23 bc 91 72 f5 85 04 c0 ef af 2b bb 45 a0 91 2f 81 20 65 87 0a bb 2c 2d b2 e6 95 a6 e7 5d bb 73 5d 40 ca 9c f1 e0 80 03 8e 39 85 ce ea 54 a9 bd 26 36 aa fc c2 02 78 1d 0f ee f0 e1 d2 62 94 32 aa 19 c5 af a8 13 54 eb 56 2a 83 a9 6b 34 3c 2a 6e 63 4b 3d d8 13 87 d9 65 1e 50 6a 3a c8 75 67 4c 2b c0 be ed 8f e3 ef bc cb a5 00 79 16 dc 8c 85 4b 42 08 a1 85 8b e5 03 5c d5 a4 2f 42 d4 3e 7b da 8c 3a d2 0f a0 c1 Data Ascii: W5WB8/<d:cUxCd(lU_%Cl0JhI@RYUtqHT`H;"x`-7#r+E/ e,-]s]@9T&6xb2TVk4<ncK=ePj:ugL+yKB\/B>{:
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: cc 77 2c 02 ef 84 ef 3d ab 1c 61 47 ac 82 49 75 59 9b 7b 51 c2 36 ca 87 d2 bd 85 ba aa 97 fb 20 e7 bf fb d5 f3 ec 9c 70 d8 93 79 4a 0e f1 10 0e e6 a0 c1 1f ff 05 05 bf 14 81 8f fe de b6 c7 6d 4d 6d 93 db d6 c9 86 33 6d 79 6d 6c cb 6d 8a df 94 25 ad 4f db f8 ad 1f da fa 05 f0 47 4f df 2a 68 7d 04 e0 0f ff 0e e0 0f ff f5 f6 5f de fe e3 f6 26 00 7e ef b0 ff 70 e3 f0 8d 9a 1b 7d a8 89 90 1a e0 5b 2b da 64 b0 3f da ff 6b df bd 3d 00 b0 bf 5a c7 5e 0a 58 fc e6 76 0d e0 fa d1 eb c8 75 1c c4 af af e7 da 77 53 29 3c ac 6f bd 76 0c fc bf 55 58 e7 7a dd ed 3e 0c 36 7d 6f fa b6 1b 5d 19 46 a7 6a eb 64 d7 3a dd 99 71 30 85 69 74 61 d1 08 81 14 34 74 52 a4 32 ca e6 96 af 90 47 b1 32 13 4c 32 d9 74 d5 16 5a 69 95 f5 1a 6c eb 41 2d b5 4e d4 dd 95 38 ea 92 cb 6e 68 d5 e1 Data Ascii: w,=aGIuY{Q6 pyJmMm3mymlm%OGO*h}_&~p}[+d?k=Z^XvuwS)<ovUXz>6}o]Fjd:q0ita4tR2G2L2tZilA-N8nh
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 02 15 5f f3 8d 06 87 34 41 50 1d ac 56 8a 2d 6f b6 00 53 e9 91 48 9c b7 94 d2 cb 27 98 87 89 22 76 b7 13 68 9b a2 cf a9 29 27 46 51 14 f1 3c 9c 9b 84 35 71 65 42 55 0d 01 dc 3b 4c aa c5 1d 1e f8 5f fc d1 8c 7b 60 15 7d 14 78 1d 1e 48 81 91 42 63 8a 8c 2b 36 a1 c4 24 a5 26 2b 33 45 b9 a9 2a 4c 3b 1a 20 b6 78 93 72 f9 b2 13 04 35 e9 21 72 f2 c7 d3 15 52 d1 8f df 0b d7 8a 5d fc 79 b1 12 13 24 54 be 20 d5 d3 a7 04 1e 53 95 19 25 15 4a 8d d2 a0 b4 28 1d ca 1c a5 47 59 a0 2c d1 f3 75 60 c9 7f b5 21 59 61 64 58 d0 95 36 eb 5a 58 a6 4d 5d 0f e0 8e 4d 98 e4 28 f2 40 f8 70 d9 02 30 84 6b b3 92 e6 24 cf 97 8e a9 3a 4d 80 6d f2 98 2d d3 ce 46 f8 2d c6 ad 41 91 d2 74 3f bc b4 8b 65 3b 86 9a 00 6e ef 2e f0 ee 02 ba f7 30 01 a6 d8 e0 9d 22 85 4c ae e7 57 01 ff 04 00 ee Data Ascii: _4APV-oSH'"vh)'FQ<5qeBU;L_{`}xHBc+6$&+3E*L; xr5!rR]y$T S%J(GY,u`!YadX6ZXM]M(@p0k$:Mm-F-At?e;n.0"LW
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: c2 fc 3c d8 60 e1 76 22 1e 2c 94 33 b1 86 c9 21 3b c7 33 71 67 df e6 65 25 07 d1 4f 82 88 05 0d e8 37 fc e0 ff 59 c1 bf ac cb 7b a2 da a7 ba 3f 26 de af 2c 18 ca 2d ca bb ef f3 ba ab 73 da 4c 7a a9 3b 37 e5 19 7a 6e 00 d7 f1 09 98 bc 53 fb 34 22 1c 52 30 4f dd f1 8a 19 8f c3 af 4e 26 21 9b 49 67 2d 60 a0 e7 8f b7 42 36 58 40 15 1c 7f ce 00 25 3b 99 5e a6 f2 b8 63 b9 47 36 91 d0 36 48 95 1e c2 d0 61 d8 b0 4d 8e 23 d3 7a 99 81 0c ce 0c 29 7a 90 c1 a6 20 43 b5 70 db a5 4e b7 87 38 8e 1f 8f d3 f3 07 ba ac 4f 86 53 6c 64 b9 e4 10 1b 31 0e 7b 9e 47 be ef 0b d1 b3 1c 67 eb bb 0c 0a d4 dd 2b 69 60 4a e1 88 c3 49 94 1c a6 04 0e ca a3 d6 c3 d0 63 3f d4 47 f0 5a 9d ac 03 93 b8 cb c0 65 73 4e 96 4b c3 63 e3 20 99 1d 99 85 a9 3a f2 d6 45 6c d4 b6 ad 2b 3a 4a 8f 89 8e Data Ascii: <`v",3!;3qge%O7Y{?&,-sLz;7znS4"R0ON&!Ig-`B6X@%;^cG66HaM#z)z CpN8OSld1{Gg+i`JIc?GZesNKc :El+:J
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 0a f4 96 96 f2 ba d4 20 72 a8 85 01 56 1e 60 ca bf b5 a8 b2 26 48 4f e6 e0 0d a8 a7 88 1e c7 43 4f 21 38 df f6 a4 d3 64 86 be 4e a1 07 98 29 ae 71 a8 22 db f2 03 f3 b2 7f c7 c7 ee 77 a5 29 81 bf 46 f3 9e 35 a9 6e 87 9d d0 db d1 db 52 35 c1 fc 88 08 f2 48 d9 b9 dd b2 c1 22 96 0f c6 50 a7 51 7e e4 26 cb 4b 41 80 02 7a b4 54 2c 9e 17 24 38 af 21 bd 46 73 3d 0b 25 b5 79 5d 49 af 73 1a bd c6 92 03 e3 19 24 ea c9 88 89 f9 2c 57 53 5a b6 8f 82 ad 5b 71 5b 03 42 52 0c da 2b 8e a4 73 54 d7 65 5a 4c 31 48 07 0f 77 57 7a a6 f5 dd a8 e3 2a ca b5 4b 24 5b b6 c0 e6 59 10 70 44 9b 46 33 50 1c f3 04 72 88 e2 c1 11 83 83 bf 3e 0e e3 bf ea 06 82 ed 05 77 b6 ba 33 ab 81 36 b3 22 4a ca 3f 98 ce 49 16 38 c4 70 67 95 06 42 d1 ef 18 32 7c e0 b5 45 f5 49 e3 b3 4d be 37 36 6b 5d Data Ascii: rV`&HOCO!8dN)q"w)F5nR5H"PQ~&KAzT,$8!Fs=%y]Is$,WSZ[q[BR+sTeZL1HwWz*K$[YpDF3Pr>w36"J?I8pgB2\|EIM76k]
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: a7 02 d4 74 0a 5e 30 7b 28 1b fa c7 8c 19 7f 40 67 de b4 c3 25 1a 48 87 55 3c 58 cb 7c be 85 10 88 7a ec 97 81 bd a3 bb 76 d1 96 03 01 4f fd ac 79 f3 fa 3d b3 ef e3 41 54 46 54 30 b2 c0 43 8c da a3 c6 3c 90 55 85 ba 50 f8 01 52 55 3f b1 dd b3 7d 82 0f 49 9e 1c 9b 08 28 0f 65 04 33 ce 18 b0 06 ac 83 95 d5 e1 1a 01 f0 05 40 00 39 19 19 fb 24 20 bb 9a 18 48 44 be 82 2e b6 a8 b6 d5 87 75 c3 6b cd 1e 73 8f 02 2d b5 09 86 4d 25 a5 3c 27 ab b8 49 1b a9 ef 75 53 ca 31 0d c1 b1 3a a0 dd 15 2f 39 e7 c2 71 1b 21 10 4a 99 48 36 35 9b 8d 26 50 11 ed 95 ea 6a f5 1b 21 44 88 bc e9 31 44 0c 54 3a ec 43 18 d5 4f a5 13 18 29 e2 d5 5d 90 33 d5 ce b1 29 72 7d 5e 2c 82 ec 81 06 85 c7 0c 92 e0 27 d8 da de ab cd 93 f3 66 cf 0d a0 21 ea b1 08 36 15 b3 f6 71 5c 99 ad fd 1b 54 d3 Data Ascii: t^0{(@g%HU<X\|zvOy=ATFT0C<UPRU?}I(e3@9$ HD.uks-M%<'IuS1:/9q!JH65&Pj!D1DT:CO)]3)r}^,'f!6q\T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49732	188.114.97.3	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:50 UTC	635	OUT	GET /claim/8713b8a90bded5ae0c4872484f54fbde.woff2 HTTP/1.1 Host: www.mrbeastcast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.mrbeastcast.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.mrbeastcast.com/claim/40532.45cfda0794123b4bec3c.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:50 UTC	672	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:42:50 GMT Content-Type: font/woff2 Content-Length: 25424 Connection: close Last-Modified: Sat, 10 Aug 2024 17:55:07 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3302 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Rx%2BXdEIGfO3c4nJQegbNnc4Wys0RLgwD5HMoQU0U3iWq5iOzFTJoPQ%2BIr2ziJJP11HfaLQ%2BOWi86LC9G8iW8Upp1y7VKTcg5RcdZJMWlz0mi%2BZg7XN0JSURgLsReF%2FErRgz3ZT%2Bc"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ca89f4b189841ec-EWR
2024-09-29 02:42:50 UTC	697	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 63 50 00 11 00 00 00 01 0a 84 00 00 62 ef 00 01 00 83 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 70 1b e9 14 1c 8b 08 06 60 00 8b 54 08 81 02 09 9c 15 11 08 0a 82 d1 34 82 a7 6e 01 36 02 24 03 93 26 0b 89 5c 00 04 20 05 82 5e 07 20 0c 81 4e 1b b8 ef 27 98 9b ba aa 38 5c 6f 56 79 61 1f 3a ff 33 4e b8 31 dc b0 71 00 ed e1 79 81 c9 b6 c9 0d ba 03 77 29 a9 d5 bd 64 ff ff 7f 66 52 91 31 93 82 69 ba 01 0a 80 a8 fa 87 4a db 24 95 e1 26 4a aa 14 25 75 77 99 3b 1a 92 dd 31 c1 ae 39 30 16 17 cd a8 7b a1 d8 3c 3d 6a ad 2d 77 b5 36 75 e4 04 cb 29 59 48 96 75 6c b5 b7 06 91 e6 a5 e1 dc 29 83 4e 6d c4 67 24 28 52 c6 75 48 b8 48 10 3a 3b 5f 78 b3 b1 46 6d ed 7d c0 4c 4b e3 16 1f 45 73 15 1d 65 37 b6 61 7c 2a d9 bd 78 83 Data Ascii: wOF2cPbp`T4n6$&\ ^ N'8\oVya:3N1qyw)dfR1iJ$&J%uw;190{<=j-w6u)YHul)Nmg$(RuHH:;_xFm}LKEse7a\|*x
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 29 e7 43 88 5e bd 02 75 68 2f ea 9f 6c fe f2 1b 66 cc 02 c9 83 b0 a6 75 fb 6d ef fe 37 67 f9 bf 9d 2c fc 2f 15 f0 06 0c d7 05 96 2c db 0a 4d 93 1d 77 c7 65 48 ae f6 db 5b 09 4e 4b 84 8d c7 c3 29 10 d8 6c a3 60 07 03 cf 6d 3a 03 7c 00 82 35 5b 92 19 80 01 0c 21 93 55 4c 02 21 c8 8a 9f 7b f7 5a f4 70 e8 16 d4 10 7c b1 18 f8 1a 11 58 95 f3 29 4f 8a a6 bc a2 92 7f 98 c2 81 3f b9 e2 00 3c c0 e0 ff e1 7e 3e b0 df 8b 3c f7 ae 52 43 d3 37 f1 81 36 88 cd 7f d4 a5 4e 61 98 80 54 78 ea 2f 90 5d a0 80 4b 3a 0a 82 7e 51 ca 39 37 cc 19 66 6d d3 93 c2 96 ca d4 0e d1 44 d0 97 5e ef c0 df b2 9d 32 95 c9 4e 1b ed 6d 03 02 50 85 07 83 6e 02 af 0f 45 18 db 01 0e 70 80 03 6c 3e 53 ed 6d 67 76 b1 22 40 4a 67 e2 f4 0b e8 9c c4 bb 1f 14 1a dd 93 5f 4f f1 24 87 28 a7 50 e5 3c 98 Data Ascii: )C^uh/lfum7g,/,MweH[NK)l`m:\|5[!UL!{Zp\|X)O?<~><RC76NaTx/]K:~Q97fmD^2NmPnEpl>Smgv"@Jg_O$(P<
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: e9 d2 63 4e 65 d6 ba 45 a2 b9 38 9a f8 78 59 94 a8 92 3d c5 27 2a df 95 73 3d 40 b1 ae 03 ed b2 6d 20 39 30 c2 6f e8 56 f6 77 f9 f0 3c 83 f5 c6 6b 20 ae 71 7c 9b 9e 59 fb 7f 97 65 72 bc 32 5a 12 28 29 4f ed 04 9d d2 9a 70 15 2f a8 29 13 58 c3 5b 6f 2c 12 c8 72 59 25 50 ee d4 8a 43 26 86 4a 19 a2 61 51 67 59 27 7d cd 8d 3d a9 fe a2 72 49 6c 29 f9 52 5c 5f d5 0d 82 87 83 05 8e 66 56 3f e3 21 dd 01 46 8f 44 52 14 21 eb cf b2 d0 70 e4 6a 25 51 19 cc e5 d3 13 a5 e8 4b 58 cd 41 15 95 4a 4f a0 b9 99 dc 28 60 ad 2a 0d 4c 70 e1 8d 90 b9 5a 50 54 c4 34 e4 48 7a ab 22 c8 ae e5 7b 04 a7 60 4c 38 37 7a 71 2e 02 eb 54 13 d7 3a e2 1a a5 72 cb 4e e3 da d5 4b 09 1d 22 90 2f 54 46 aa 20 c2 ac 5c 7a 45 41 89 f3 17 b5 04 51 16 c6 bd b6 02 c9 22 1b 72 cf c5 5d c0 d2 21 3b c2 Data Ascii: cNeE8xY='s=@m 90oVw<k q\|Yer2Z()Op/)X[o,rY%PC&JaQgY'}=rIl)R\_fV?!FDR!pj%QKXAJO(`LpZPT4Hz"{`L87zq.T:rNK"/TF \zEAQ"r]!;
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: ce a8 68 35 d9 a0 40 36 78 c3 2d 9e 99 c1 60 57 a3 29 20 b7 ae 84 86 3d 7e 9d 2c ab 0d db b5 7a 17 e9 d7 7a 36 46 b4 2e a3 df 2b 76 92 0b 26 2c 03 84 8e 93 55 3a 50 12 4a 44 89 54 da 15 83 f0 c9 fe 5f c2 b0 d0 59 3a 30 4b 3b 02 81 8e 41 1d 0c 72 e5 97 f9 b2 fc 9a f7 a3 45 98 08 1f 11 e7 4b 5b 6c f9 31 e7 fc 65 65 c7 df 39 a7 70 ce 18 a3 c1 09 12 d9 8e ba ff 3a 37 10 b4 04 4b 36 9c 66 1b 8f f9 20 18 19 a4 c6 ca 09 20 96 7a f9 fd 67 3f 74 9c 72 c6 a3 6f 4f 91 f8 25 0e f0 37 ff 11 68 aa 95 c6 04 2b be 9e 84 b5 57 f3 e9 2e ae 89 b8 43 9c a9 2e ef 2b f4 b1 ff 24 10 92 8a 3e 21 3f f2 2b 48 b8 a4 f9 4a 51 81 19 04 09 6b 90 c9 06 4d b5 c6 91 71 8c c5 14 cb 88 30 32 ae 52 ba da a2 12 88 45 62 8c f3 6b bf e5 ff e4 8b eb e0 ca 29 12 47 5f c0 07 3c c3 ca 34 a2 29 a3 Data Ascii: h5@6x-`W) =~,zz6F.+v&,U:PJDT_Y:0K;ArEK[l1ee9p:7K6f zg?troO%7h+W.C.+$>!?+HJQkMq02REbk)G_<4)
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 4b 2e d1 25 b8 1a 9b ce a1 3b bb e7 5f 3c fa 1b 0d 27 fd ba 34 5f aa 50 db 6f 4b e4 97 fe c6 18 5e ed 6f 36 3f ec 6f 9a 14 2e de 46 74 29 8b ae aa 7d 94 67 61 b4 f0 88 1d 4f b6 9e 9c 4b 86 f4 50 23 ce f4 e4 bd e4 09 9c 61 a9 d3 ed 02 e8 1e 12 2d 6c 2b a8 b4 dd 0d a4 3e 86 6a 8b ed e1 8d 2a 9d ed b3 6b 38 f8 9c 7e 95 06 30 8d 4c bb 71 7e 7e 2d f6 5d f1 3e 5f 97 2c d9 8a c8 82 6c ba 4a 73 9e 69 51 64 26 8b 84 bb 05 b0 bd 18 d2 ba 9a 90 34 7c 4f df fb 51 9b c3 b7 c4 21 6a ea 05 10 69 bc eb b4 1d 2e e7 da 45 ce 63 b8 ab e5 90 9e 24 bb 1f e5 73 3a a4 67 d3 37 f1 6d 54 86 9f a3 a9 35 ee f7 a8 f6 84 ab ed 54 38 d2 c5 5e 3d 29 fc 9f 56 ad 54 69 d6 7c be b0 06 b3 2f 7b 39 cb 9b a3 ff bf 26 80 15 10 0c 08 07 c4 00 92 d0 1d 04 d0 55 c3 39 76 52 64 75 83 c1 45 35 3d Data Ascii: K.%;_<'4_PoK^o6?o.Ft)}gaOKP#a-l+>j*k8~0Lq~~-]>_,lJsiQd&4\|OQ!ji.Ec$s:g7mT5T8^=)VTi\|/{9&U9vRduE5=
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 43 96 86 9a 6a a6 8d c1 86 1a 66 94 89 a6 59 61 a5 b5 0a 30 6d b6 f6 ac 92 9e 4c db f7 6b ee b0 5b 6e 7b e0 89 32 2f bd f2 b6 30 52 92 86 0c c5 96 1c 2f 41 c2 24 a9 d2 96 9f bb e2 4a aa ea ab 25 f4 74 6a fa d1 fd 7e f6 a1 57 7d 0c 18 8f 3d e7 38 cd ee cf 45 d2 b3 c5 ac 74 fc 7d 42 7b 3a 36 f7 e2 c7 ea c1 3a 74 a4 39 fd d5 c5 8e 76 a9 9b 3c f1 14 bc 79 30 f2 e1 2f 56 88 30 51 6a 4b 91 26 5d a0 d6 ba 6b ab bd 81 ba 2e 08 03 e4 99 6e a6 59 d6 19 92 d2 25 47 9c 72 dd 05 d7 dc 70 cf 07 4f 95 7a 1b 87 ff 3e 12 e0 61 be 91 4b 29 2d 6e a4 05 53 74 a6 90 f4 19 2a 8d 9f 97 c1 15 12 47 79 b9 ca cf 1d 56 25 02 dc 67 71 97 dd 23 41 1e 8b f7 49 a8 67 a2 bd 93 e0 33 aa e7 2a f9 0e f0 8d cc 4f 52 3f 80 fe 50 f8 cd 14 0a 75 0b 41 2a 17 63 a1 a8 e9 1f 55 c1 c8 2c 1c 0d 42 Data Ascii: CjfYa0mLk[n{2/0R/A$J%tj~W}=8Et}B{:6:t9v<y0/V0QjK&]k.nY%GrpOz>aK)-nStGyV%gq#AIg3OR?PuA*cU,B
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 07 fe ad 6a c8 fb d6 29 81 dc 3d 00 3e 29 bd 6f 88 0a 4e 71 90 97 24 72 35 0a a2 ee 01 d0 63 00 e0 fb 6f 32 9d 07 d1 7f 69 bb a7 4b cd 11 d0 62 d4 fe 18 21 34 3f 89 6a 8e d1 dc 6a 6b 4e e8 90 47 59 ff d9 fc 29 32 0e f4 09 1a 9d 20 e4 fb 4c ef 42 fa 18 a9 eb 8f f0 fb 66 e8 cd 57 57 26 11 f9 d7 5f 8a ec 19 08 94 91 31 44 ec 29 d3 c4 b2 16 b6 35 55 be 3a 48 2d 05 da 34 41 1b f3 08 9a ba 0e 51 50 c7 98 00 5f 07 96 7c 76 eb 8f 88 5c cd 98 b9 3f 5d 8d ab 1b 6e 07 14 22 e5 99 63 32 0c a6 22 1f 59 2d 0c 79 e4 b5 69 16 c2 d0 09 79 c6 ae 53 c9 c2 4c d0 c2 70 67 cb 1e 8f 82 ca 45 92 0c e3 b4 11 2a 1c 12 db 22 4b 38 67 c0 44 13 60 92 d5 82 2f e2 bc 45 b6 a5 48 90 a4 16 08 c6 b8 59 19 4e c7 c9 51 75 0c 2c ec c0 90 89 f2 09 62 d2 4e ef 37 2c c3 54 48 ea 10 b8 41 ec c1 Data Ascii: j)=>)oNq$r5co2iKb!4?jjkNGY)2 LBfWW&_1D)5U:H-4AQP_\|v\?]n"c2"Y-yiySLpgE*"K8gD`/EHYNQu,bN7,THA
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 94 01 a6 2a 07 96 cb 54 f1 29 ac 94 cd c2 1d 50 cf a7 5a 85 6f 44 29 cd b1 9e 42 49 4f 93 63 d6 7a 6a 25 9e 4f b4 a4 0b 21 7a a9 14 a1 23 28 23 61 41 6a d0 cf 90 fb f0 58 a5 68 9c 11 0f 8d 29 34 35 8d 1a 35 f4 8d 3e fb 57 a3 d1 be ac ee 46 73 bf a2 24 67 ca 22 1a f4 3c 02 b7 37 d9 1e 23 07 91 1c 3b 57 9d 74 1f 03 27 97 81 29 ef 6a f9 2d 49 1a 7a ab e0 2b 66 52 ea 41 72 0c 64 62 69 ca 0e 9d c4 1d 8a 32 91 89 3b b9 92 71 7d b5 a6 69 e2 cf a1 76 9a 43 dc c3 3f d5 2c ce b9 23 25 4d 34 e5 31 87 dc ba c3 c4 a0 d6 d4 ae c9 00 18 21 81 9e 03 72 98 49 3c 22 84 33 e1 e8 f1 1e 0f bf c4 5a e3 5b 59 82 c1 9e 60 71 14 90 42 c5 b8 30 7e ca e6 69 86 4a aa 70 b9 ca 7f 62 96 83 16 96 12 64 c3 08 09 fa 81 de 2b c9 bd cf 29 05 c6 02 25 3c 24 23 e5 94 7e 43 c8 a6 30 97 62 88 Data Ascii: *T)PZoD)BIOczj%O!z#(#aAjXh)455>WFs$g"<7#;Wt')j-Iz+fRArdbi2;q}ivC?,#%M41!rI<"3Z[Y`qB0~iJpbd+)%<$#~C0b
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: a0 cf 69 a9 77 ce 8f 55 8d f3 46 76 51 b2 76 1e 55 49 a6 3d 34 bc 60 38 0a 82 d5 47 73 bd 2d 01 61 97 bb 91 61 8f 66 f5 27 77 ec 5d ae 7e a6 af ba bb 39 7c bd a0 a7 7a 87 31 d9 53 d3 cd 4e d6 5a f6 66 e8 63 94 ea 9d ea a1 da 01 6d 4a 36 7e ae 04 73 2b ba 65 ad 0c 24 42 70 80 46 7f 95 d9 c4 dd 69 08 f6 15 79 0a 5b 31 90 43 e7 cd 57 52 46 a7 ae 75 b0 6f 19 77 56 39 54 0b 94 3f ab 93 f8 8c 29 85 f4 87 ac 55 bb e0 bc 8a 45 88 17 25 fd 36 a8 16 58 33 e3 26 17 6c 3a 7e a6 55 c5 9a f8 d4 c0 11 34 c7 9b 17 f8 47 8c 30 18 c1 c2 9b 0c 65 62 35 33 75 50 37 5d 52 cc fe eb 11 06 02 7a 9e 19 72 c0 34 b2 96 7e a0 4e a8 5b e1 45 59 dc aa fb 8c 72 bf 56 ef 55 f2 3d 11 90 62 e6 e3 51 1e 93 5a e3 54 54 c3 fa 83 d8 55 07 85 60 d4 be 60 ce 25 e5 1b 36 f3 65 a9 0f 06 77 e3 6b Data Ascii: iwUFvQvUI=4`8Gs-aaf'w]~9\|z1SNZfcmJ6~s+e$BpFiy[1CWRFuowV9T?)UE%6X3&l:~U4G0eb53uP7]Rzr4~N[EYrVU=bQZTTU``%6ewk
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 5e 01 55 00 db 2a 69 7b 8a 88 f9 6e 7f ae 5d 95 b7 47 1c 6a 37 da 27 1f f7 1c d2 70 98 62 99 c9 f6 15 f2 a0 b5 aa c5 91 81 ca 1d 45 ec 4a 5b c1 4b ff 1c 5f d3 e7 c4 16 b3 f8 ee 8a bd 33 e6 bd cd f0 5b 54 90 ba b2 04 d4 c9 e0 8b 65 d0 de 6f aa b2 b4 55 59 fd 88 ef 6c 81 36 63 3e 6c 1b 29 19 fb e0 d4 12 9f a1 d5 14 1e fa 2d a7 cf a3 ac 47 46 9d 85 90 a6 5d 95 b5 5c 9b 8a 42 2d 1e 27 2d 83 0e f3 d1 92 70 43 9d 16 41 bb 19 99 0b d4 3a 0b 0a 24 a8 0f aa 6e bb 7e 53 73 33 23 9f e5 70 76 d9 f4 9b 83 ba 19 99 ce 0a 65 db ea 85 0b 45 b4 b2 12 9c 0c 63 5f 94 d2 1c a5 05 91 ac 40 a9 78 85 97 d6 e9 a8 e2 84 c3 29 17 48 12 c8 ea e1 24 99 4e 86 a3 ff 5a a0 a4 ea 36 35 f1 64 f3 ef d0 ea 20 5e 7f 12 d9 dc 38 92 61 f4 a1 54 d6 9c 89 9b 58 3a 79 17 d2 12 c9 70 16 32 d4 a8 Data Ascii: ^U*i{n]Gj7'pbEJ[K_3[TeoUYl6c>l)-GF]\B-'-pCA:$n~Ss3#pveEc_@x)H$NZ65d ^8aTX:yp2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49733	188.114.97.3	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:50 UTC	635	OUT	GET /claim/2d7928e1003804522e56efd448d4777b.woff2 HTTP/1.1 Host: www.mrbeastcast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.mrbeastcast.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.mrbeastcast.com/claim/40532.45cfda0794123b4bec3c.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:50 UTC	666	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:42:50 GMT Content-Type: font/woff2 Content-Length: 26460 Connection: close Last-Modified: Sat, 10 Aug 2024 17:55:07 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3302 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lHSMk0EWKsfe55s6fsRMwpRRIyDxU8s8gpfdYF4LJncXSyer7gBAsjz59Xak7kx8onZ81uqWaboKlmVlCLBhw7RFe%2B0soauQNFX4nLTfEisNPVdc903T3k%2BOfO2%2Fx6W9Mz41NVVm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ca89f4b4b5142e5-EWR
2024-09-29 02:42:50 UTC	703	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 67 5c 00 11 00 00 00 01 0e f0 00 00 66 f8 00 01 00 83 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 70 1b e9 7c 1c 8b 08 06 60 00 8b 54 08 81 02 09 9c 0c 11 08 0a 82 d9 48 82 b0 24 01 36 02 24 03 93 26 0b 89 5c 00 04 20 05 82 5e 07 20 0c 81 4b 1b 4a f4 35 6c 9b 56 b3 db c1 13 7a bd 7f 89 15 ca b8 2f 42 6f d6 4c 69 88 bf 5f 30 33 18 6c 1c 30 08 d4 31 64 ff ff 19 c9 89 0c 05 74 90 b4 55 a7 ff 84 55 92 12 0e 4c 5d 83 0a 71 a3 1c 36 25 05 17 55 ba 33 47 8a dc dd ab 8f d5 62 4d 2c ee b5 9b a5 71 2a 97 3e 2f 1b df 0b c1 c4 05 63 f4 0d ab 44 9c 63 0e 4c 6a 7e 38 3c f4 c9 3e 1a e6 3f 18 16 21 b3 d9 a6 d8 88 fe df e7 61 eb 43 8d 2d ad 6a f7 4b 5e f7 a7 ce 1f 0e bf de 74 bb 4c 07 8c 58 78 87 73 7b 7e aa fd 5a d8 c2 b6 Data Ascii: wOF2g\fp\|`TH$6$&\ ^ KJ5lVz/BoLi_03l01dtUUL]q6%U3GbM,q*>/cDcLj~8<>?!aC-jK^tLXxs{~Z
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 21 d0 4e 4f b3 d3 ac 4b d8 75 78 73 13 bb 9a 5a 48 46 5c 1a 10 80 8a fa ff df ab a6 db 77 ff c7 17 01 4a b2 81 c3 49 8c 99 71 e3 34 6b dc e5 59 6c 28 8e 26 a5 2a e3 6d 4a 2b 1f ef bf cf f7 df 7f ff 43 c4 07 40 a2 b0 82 2a 24 a0 82 42 e9 80 e4 48 c6 ff 00 29 00 a2 7c 28 4a 27 87 53 dc 34 93 e2 2e b7 ce 26 19 a2 ec 39 12 95 36 cd a5 2b 4e 2d 6d 95 93 55 b2 d8 d8 5e 79 99 a5 97 59 ad 93 6d b2 58 ee 73 f6 75 b1 0a c1 f7 fb bd da dc d9 80 be 53 a1 3a 51 95 11 2e c2 b5 ca c5 7e e0 13 26 5b 22 45 f8 26 55 40 32 53 59 61 3a fe e5 17 51 cb da eb de 8c be c9 6a b6 89 87 05 a0 45 51 00 f1 36 16 08 da 5b 59 d6 ff 23 c5 49 47 09 ad 30 d7 d8 4f ba 7d 15 d1 83 07 e8 59 df ea 9d ed ee 4a 80 ad e1 9a 1f f7 51 08 e3 92 69 ce ad 9c bb 9c b3 6e bf e6 56 3c 7f c9 4b e1 10 16 Data Ascii: !NOKuxsZHF\wJIq4kYl(&mJ+C@$BH)\|(J'S4.&96+N-mU^yYmXsuS:Q.~&["E&U@2SYa:QjEQ6[Y#IG0O}YJQinV<K
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 56 3f b8 8d 02 c1 6e f2 ea 3d 40 6f 64 02 e0 24 ce 2a a7 7c 3d 2f e5 e5 e6 1d 5b 5f 66 de 68 8c e9 e2 89 0d b0 f2 1d 93 ab 0a 14 c3 54 6f 5a 30 51 ea a7 16 06 41 c1 6e ba 42 b4 66 a0 90 5d 8a 38 95 06 19 6c ac 16 69 05 09 7c a4 10 34 22 13 04 bb 4c 2a 2e 08 37 9a c8 70 a6 0d 70 9a 3d a8 1f c4 de 1e 0d af 90 3e 5b f7 9c cf a2 da a0 d9 f3 cf b8 55 3b 91 2f fd db 83 9d 12 5d e8 1a 05 9d 1b d1 46 8c 95 72 3b fd 36 11 2c 29 07 22 36 11 40 26 73 80 3a de 11 fd 4f bb 61 8b 8a e9 d0 dd 84 a9 ef 9d 29 0d ae ce 91 4a 78 ae da 4a 13 11 a1 c4 8e ab 28 cb 21 b0 5c 64 6b 63 fe 50 92 1d 4c 5e 97 29 d4 29 49 d2 66 a1 52 a3 5a bb e0 fa e8 d5 0e 01 a6 d5 c4 8f 23 e7 14 29 12 90 5f eb 72 34 c9 b8 73 f9 d4 76 11 16 8e c9 d5 f4 04 e9 e9 3a d4 46 0f ac f2 a1 0e f8 13 6a 70 56 Data Ascii: V?n=@od$\|=/[_fhToZ0QAnBf]8li\|4"L.7pp=>[U;/]Fr;6,)"6@&s:Oa)JxJ(!\dkcPL^))IfRZ#)_r4sv:FjpV
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 50 f5 e3 0e 5b 14 7b 19 59 2f 17 cc 6b c0 5a 37 89 18 0b bb d7 e9 b5 8c 6d 5f 3b 23 d6 5e 65 fe b0 cb d0 ef 56 62 f5 a7 8a ee 23 5d dd f3 a6 51 4f f1 fe c2 7e 1b 76 82 68 eb 67 1c f9 93 38 36 ef dd 9c bf 8f 81 48 54 21 93 00 5e 17 e3 0d e3 2a 29 b7 45 2d 95 49 79 32 ab 5e bb b6 ea de b6 aa da 9f ec 0a e6 35 9c 13 ae 20 12 a9 29 ff 15 cc 53 06 9c 7a e0 86 a6 2e 6b 63 46 d9 77 93 76 33 af fc 36 83 d9 bc 92 c4 2d 38 47 f7 b7 97 3e 2b 74 c3 23 b5 5a 36 6a 35 27 f6 3d c9 44 56 cb 95 5a 7a 46 08 cb 2a 6e e4 52 46 a9 86 0c 41 09 e3 f9 90 19 50 12 0c 16 83 25 a7 38 c9 a1 5a da ff 20 8e 85 35 f1 95 3a d6 ca c9 c9 ca 15 56 a8 8c b2 9f 3f 97 4a d4 3c c2 1a 55 29 d6 b1 72 dd f5 66 d5 27 f1 87 a6 b2 e2 59 09 18 32 2c 09 8e 34 29 37 0e b2 3a 08 72 12 2a 5a 69 17 2b a2 Data Ascii: P[{Y/kZ7m_;#^eVb#]QO~vhg86HT!^)E-Iy2^5 )Sz.kcFwv36-8G>+t#Z6j5'=DVZzFnRFAP%8Z 5:V?J<U)rf'Y2,4)7:r*Zi+
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 9e ea 99 3b e8 09 de a2 d4 c0 48 21 85 d4 98 ea 62 48 aa 2d 68 b2 86 b5 86 93 eb bd ba 6b 3b ba 96 1c 90 0c 45 1b b5 59 51 88 42 a4 90 52 71 17 dd d2 e8 4a 60 d7 74 2f 97 65 19 81 51 26 97 8c 05 18 55 db 1d 6a a3 76 57 ff 5d 14 55 93 44 c3 7d 57 ec 1e 60 39 02 58 4b a9 02 15 ab 8a 45 ad 44 ad 44 05 d1 28 38 29 d8 a8 49 a2 95 d0 22 4a 32 64 2e 1c 67 2c 84 dc 61 f3 35 b2 6b f8 ba 17 60 d7 94 39 78 b1 45 5b d6 e3 d5 c2 6e 3c a1 79 77 9e 76 6e e0 83 11 42 48 43 7c ad 56 ef 42 9b 5d aa 00 e8 8e b6 39 bd d8 ed 3b 39 06 be bb 2f 4f 2f 84 6c 2c dd bc a5 cd 49 cb a2 85 d5 3b 5f ee af 3e 94 56 00 33 32 5d 30 0c c3 94 b0 62 bc 22 53 74 b6 11 87 49 57 67 75 a5 c0 32 06 b0 fd 5b 3b e1 e8 17 2a d1 b4 21 9a 56 cd f4 d8 3a b5 dd 25 43 6f 6b 60 35 65 ab e1 71 95 75 a3 cd Data Ascii: ;H!bH-hk;EYQBRqJ`t/eQ&UjvW]UD}W`9XKEDD(8)I"J2d.g,a5k`9xE[n<ywvnBHC\|VB]9;9/O/l,I;_>V32]0b"StIWgu2[;*!V:%Cok`5equ
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 53 5e 9b ad 3b b3 27 bf 96 a2 d7 e9 9d db ed 2b 88 e9 ef a1 25 b3 43 c2 dc eb ae 16 f5 62 ba 68 15 45 b1 fd a7 36 51 9c 2b 6e bb ba c6 de c3 fe 32 4c d8 94 b1 e5 c0 1c 08 a4 27 1b 78 75 ff 3d 3d e2 c8 47 ed 47 9b e8 8c ad f3 a1 1e dc c1 1e d4 41 c2 0f bf 70 f4 7e 88 18 7b e7 85 37 17 8e 5c a8 bf 20 6e 1b 27 4a 5d 2f 88 2e 20 25 eb f7 1a 9d f8 df 05 e5 a3 6f ce 57 00 df 4f 2e aa 1e dd 09 c2 77 bf 03 be fb eb b9 5f 9e fb f4 dc 26 80 af 1b fb 87 86 63 0d b3 1a 0a b8 71 88 c5 e0 c6 f2 aa 1e ea fb 3d d9 b3 bd d8 2b 2a eb eb ef c3 7e 00 1b 77 57 2f ba ee c1 6e 6f 77 00 d1 ee 6a 35 6e 7f ab ea 09 6e ec d6 d3 ff b7 0a 95 1f fb d4 ed be 2f b5 70 f9 dc dd ee f5 cf 42 c8 b7 3d ee 62 77 ba dc 95 45 50 8e f2 e4 e7 61 31 2c ac 1c 5c 8a b5 e7 57 26 a9 52 b5 3a dd f5 31 Data Ascii: S^;'+%CbhE6Q+n2L'xu==GGAp~{7\ n'J]/. %oWO.w_&cq=+*~wW/nowj5nn/pB=bwEPa1,\W&R:1
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 47 3b 74 3c 69 e6 2e 9b 17 60 15 91 e6 04 e4 de e8 79 ea f2 29 dc a5 6f 1d 72 d0 ea 59 29 e9 f8 34 0c 0e b1 00 29 57 d9 4a 93 63 5a 10 f0 38 68 aa 12 fd 9d 35 03 13 5b 43 22 b1 ff 4b 29 5d 36 f6 71 23 83 6d ef 7b 3a e6 d0 b2 36 0d b3 6a 14 fe 15 10 2e 1b 0b 37 61 cb 3d 71 ce 29 cf 3c 38 27 aa d9 1b 2d f9 3b 96 5f 69 c1 00 19 7e 2c a8 2e 10 6a 08 0c 35 05 8e 5a 82 40 6d 41 42 1d 41 46 5d 41 41 3d 41 45 7d 41 eb 2b 21 d0 2f 4a b9 ac ed 7b 41 49 7a 0e 14 f9 53 3d 6e 68 0a 5c 1f 6d 27 4d b9 eb f3 85 16 e2 06 cd 50 71 1b a9 9e 1f 1e 1b 9a 6a 22 a1 98 4a a8 94 ca a8 9c 1a 50 05 35 a4 46 b4 36 43 53 a0 b2 56 34 cb 0d 6c 14 d4 72 e6 b5 3e 35 6a f5 a9 bb 76 ce 11 d1 42 6b bd ed 85 b2 00 30 86 21 53 12 e7 25 aa 57 8e d5 8d e2 68 49 ce 53 b9 36 bc ed 6c 4b 71 d1 cb Data Ascii: G;t<i.`y)orY)4)WJcZ8h5[C"K)]6q#m{:6j.7a=q)<8'-;_i~,.j5Z@mABAF]AA=AE}A+!/J{AIzS=nh\m'MPqj"JP5F6CSV4lr>5jvBk0!S%WhIS6lKq
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 07 0f b9 70 85 23 ed 48 8a 58 ba fc e9 e0 4f 48 ca 38 76 8c 15 ab 19 48 f3 8d 88 8e a4 ad 1d bf f8 6b 10 e0 60 dd 6a 0a e0 80 80 76 97 6d ce 8b 54 46 65 b6 fc 34 3f 78 69 03 c7 75 20 28 a5 ca 0a dc 7b 84 f3 7b a0 28 24 95 25 39 93 43 c2 18 2a cb 32 49 95 39 c5 18 1c 3b eb 14 9f 71 7f 4f 08 21 41 48 46 9f ff 22 29 8e 1f 20 69 7a 8b f2 76 49 ce 33 b7 28 20 fb 48 2e ca f6 25 9b 90 ed 86 9a 18 30 d0 23 16 9c bc 00 07 4a d4 2a ad 08 82 6a 7d 2a a6 cb 60 c6 d3 49 da e2 29 24 14 16 e9 c9 7d 20 71 71 b6 84 cd 39 b2 9d ef 19 e8 75 45 8b f2 84 8c 0c 02 b9 4d a0 83 af 52 50 6a 79 4e 61 4c 67 7c d6 98 fa 5b 15 b6 d9 2a 33 e0 3c 5b 21 bb 99 44 55 8d 14 38 c5 39 61 f6 83 28 d1 84 57 32 c0 d4 c4 25 9f 1b a8 d1 25 8f a9 3e 90 55 76 c7 11 77 0b 0e 71 a9 ed 09 dc 91 ab 08 Data Ascii: p#HXOH8vHk`jvmTFe4?xiu ({{($%9C2I9;qO!AHF") izvI3( H.%0#Jj}`I)$} qq9uEMRPjyNaLg\|[3<[!DU89a(W2%%>Uvwq
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: b3 67 18 c9 68 f4 e0 52 9d f2 63 e5 ce fd 12 db 19 12 78 47 44 35 d6 2c f6 90 71 68 4c cc 7e b8 81 3b d3 fe 60 c9 65 6d 02 ec 1e 1f 65 55 4b 30 83 d7 14 76 96 49 a2 a8 d1 64 f5 e3 96 47 51 b9 db 3c 00 9c b1 1e 79 9f 87 c2 66 24 64 f7 aa 49 96 ce a4 7c 72 b6 6e c0 e3 fd b8 ea 7d 59 41 03 f9 ec d7 cc b7 b3 38 ae 1d 4e 7c 5b 24 65 d4 7c bf b1 06 a9 61 25 82 b5 8d c6 70 ad 8e e3 86 40 b5 f3 ac 42 a4 a4 ea a9 65 6f a3 8d d2 2c bf 96 24 99 d6 92 59 6b b8 99 25 6b 3e dd 54 d1 cf dc 42 3f b1 ea 35 cc 95 a0 e1 ca 13 a2 1a 5e 2f 7b 13 8e 27 e8 85 d7 f0 eb f3 30 6e 4b 31 78 f9 95 83 f3 73 42 08 c4 5c 06 85 9c 1a 02 a9 c8 d2 dc 30 a1 62 68 26 b3 f4 c2 ab 68 7e 72 97 66 d0 42 9d bf d5 5c c1 8a 90 53 a1 83 e2 31 f5 75 37 2c 8c 70 17 ed 35 3f d8 76 98 e3 d7 7a 27 30 25 Data Ascii: ghRcxGD5,qhL~;`emeUK0vIdGQ<yf$dI\|rn}YA8N\|[$e\|a%p@Beo,$Yk%k>TB?5^/{'0nK1xsB\0bh&h~rfB\S1u7,p5?vz'0%
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 47 ab 37 03 94 09 45 12 1e a7 80 7b 41 41 cd 52 4d d7 da 70 20 7e 85 fc eb df c9 e1 92 91 1a 4d f8 b9 10 d4 ae cc cc 33 58 fc 87 79 55 e9 d0 94 61 cf c0 91 b7 50 30 b1 7a 70 bd 59 ba a2 8a e1 7c 33 40 20 7d e0 7e 6b 47 d7 a6 4d 6c c3 56 ab 7f f4 a4 e9 d3 f7 f3 4f 0e c3 88 bb 6a 0e ea 23 ea 75 7a e2 1d 47 c3 92 0d 7d 5b 75 5b fb 78 20 7e 5f 60 bb aa 4f 0f 79 68 cf 05 dd 55 45 4d 5c 55 31 81 69 45 79 c2 20 3e 68 a7 ab 0e fa bf 95 32 ff 80 67 5a d4 eb 6a 86 eb d7 b5 18 0b 37 1b 5a 54 94 5d 4e 16 9b eb e6 b1 ea cd 3a 72 7d a9 58 48 2f c4 ad 9f 70 cc 02 a9 d1 0c 51 7c 77 63 b9 d5 20 50 eb 41 57 a6 2a 73 1a 60 aa e0 7e 88 eb d5 e1 db 3c 4c 57 38 a0 07 9c 2e a7 8a 0a 36 23 54 63 55 34 a2 60 9c 50 6d f6 6a 83 9f b6 06 0c f9 2e 80 f3 5b c0 3e de 79 31 73 01 1f 8f Data Ascii: G7E{AARMp ~M3XyUaP0zpY\|3@ }~kGMlVOj#uzG}[u[x ~_`OyhUEM\U1iEy >h2gZj7ZT]N:r}XH/pQ\|wc PAW*s`~<LW8.6#TcU4`Pmj.[>y1s

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49735	188.114.97.3	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:50 UTC	385	OUT	GET /claim/a9009aaba5bfab576a517f6915b3c0b6.svg HTTP/1.1 Host: www.mrbeastcast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:50 UTC	670	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:42:50 GMT Content-Type: image/svg+xml Content-Length: 2215 Connection: close Last-Modified: Sat, 10 Aug 2024 17:55:07 GMT Vary: Accept-Encoding,User-Agent Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3302 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HEEa1RXiy9GMqT4DfA4xMaYVW%2F0J82y4MpPxcRiXRJQe8%2B6I4oJJNJraca8CkRJmO%2FygT%2FJdpHbWoGsDtVEtu8XqebnCe58UFAcNnsHl8FCHxPaqHNZY5vf6JFgRhW2b1Uzn2AUr"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ca89f4c58696a58-EWR
2024-09-29 02:42:50 UTC	699	IN	Data Raw: 3c 73 76 67 20 68 65 69 67 68 74 3d 22 38 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 38 30 20 38 30 22 20 77 69 64 74 68 3d 22 38 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 3c 6c 69 6e 65 61 72 47 72 61 64 69 65 6e 74 20 69 64 3d 22 61 22 20 78 31 3d 22 2d 32 2e 39 32 25 22 20 78 32 3d 22 31 31 33 2e 39 39 34 25 22 20 79 31 3d 22 31 31 30 2e 39 35 38 25 22 20 79 32 3d 22 2d 31 33 2e 37 30 34 25 22 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d 22 30 22 20 73 74 6f 70 2d 63 6f 6c 6f 72 3d 22 23 62 34 37 33 66 35 22 2f 3e 3c 73 74 6f 70 20 6f 66 66 73 65 74 3d Data Ascii: <svg height="80" viewBox="0 0 80 80" width="80" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"><linearGradient id="a" x1="-2.92%" x2="113.994%" y1="110.958%" y2="-13.704%"><stop offset="0" stop-color="#b473f5"/><stop offset=
2024-09-29 02:42:50 UTC	1369	IN	Data Raw: 35 20 32 31 2e 30 37 30 39 33 34 36 2d 39 2e 37 37 30 38 31 34 20 32 35 2e 35 39 38 34 30 34 32 2d 39 2e 37 37 30 33 38 37 36 20 34 2e 33 35 33 36 30 39 34 2d 32 31 2e 34 39 35 31 39 33 38 2e 31 37 34 32 37 38 31 2d 32 35 2e 39 33 36 35 35 30 34 2d 39 2e 34 30 33 34 39 35 34 2d 2e 38 38 38 31 30 30 38 2d 31 2e 39 31 35 33 38 37 36 2d 31 2e 34 32 31 30 34 36 35 2d 34 2e 30 30 35 30 35 33 32 2d 31 2e 35 39 38 38 33 37 32 2d 36 2e 30 39 34 37 31 38 39 68 2d 33 2e 39 30 38 34 31 30 39 63 2d 31 2e 30 36 35 38 39 31 34 20 30 2d 31 2e 39 35 33 39 39 32 32 2d 2e 38 37 30 39 37 32 36 2d 31 2e 39 35 33 39 39 32 32 2d 31 2e 39 31 35 38 30 35 34 20 30 2d 31 2e 30 34 34 38 33 32 39 2e 38 38 38 31 30 30 38 2d 31 2e 39 31 35 33 38 37 36 20 31 2e 39 35 33 39 39 32 32 2d Data Ascii: 5 21.0709346-9.770814 25.5984042-9.7703876 4.3536094-21.4951938.1742781-25.9365504-9.4034954-.8881008-1.9153876-1.4210465-4.0050532-1.5988372-6.0947189h-3.9084109c-1.0658914 0-1.9539922-.8709726-1.9539922-1.9158054 0-1.0448329.8881008-1.9153876 1.9539922-
2024-09-29 02:42:50 UTC	147	IN	Data Raw: 31 33 38 33 2e 35 33 32 39 34 35 37 2d 2e 33 34 38 31 33 38 33 2e 37 31 30 33 31 30 31 2d 2e 33 34 38 31 33 38 33 68 36 2e 39 32 38 32 39 34 36 63 2e 33 35 35 35 38 31 33 2d 2e 31 37 34 32 37 38 31 2e 35 33 32 39 34 35 37 20 30 20 2e 37 31 30 37 33 36 34 2e 33 34 38 31 33 38 33 7a 22 20 66 69 6c 6c 3d 22 23 66 66 66 22 20 74 72 61 6e 73 66 6f 72 6d 3d 22 74 72 61 6e 73 6c 61 74 65 28 39 20 32 31 29 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: 1383.5329457-.3481383.7103101-.3481383h6.9282946c.3555813-.1742781.5329457 0 .7107364.3481383z" fill="#fff" transform="translate(9 21)"/></g></svg>

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49734	188.114.97.3	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:50 UTC	385	OUT	GET /claim/83e99dbc7c072587a2f096e0bf526dd7.png HTTP/1.1 Host: www.mrbeastcast.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:51 UTC	631	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 02:42:50 GMT Content-Type: image/png Content-Length: 80560 Connection: close Last-Modified: Sat, 10 Aug 2024 17:55:07 GMT Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 3302 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nZ2gfuRt%2FwhPRAuWE2uA95Xe5d%2FDmndpJOyoGgtNaJxda1Jp5XOrknvcJWiD%2BwoGq7BFZlXjxGJ2sE8Tho7XDHxMQxVafH0wnCEGVOW4JRLVHYIuPZX0wDMKVEIhIKF2ACsVtTSF"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8ca89f4c9b0c4309-EWR
2024-09-29 02:42:51 UTC	738	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 03 70 00 00 02 58 08 02 00 00 00 ac 00 93 6f 00 01 3a 77 49 44 41 54 78 01 ec 9c 87 76 a3 3a 10 40 13 f7 0a ee bd f7 6e 9c 46 de ff ff d8 bb 41 1b 85 a5 24 c2 de e2 78 35 87 93 e3 86 20 68 74 35 4d ba 0b 94 4c 26 b7 3b 3c 58 0f f6 f1 f4 f2 7e d8 86 59 be 53 10 2d f7 f7 f7 f3 c5 e6 28 9e 9e c2 c1 73 5e 6d 8e e9 74 66 b6 58 9f 1e 5f 15 4f 31 4b 3f ba 63 30 9a 8a b3 2e 3c 0e d6 73 2e 57 d0 dd a7 e5 0f 48 a1 68 ee 8f cf 82 30 db fd 83 a4 4d b3 d9 61 f8 c8 9f a5 52 69 d3 ac b8 3f 41 e2 8e 44 ba 5c 22 91 64 88 b9 81 c6 90 a9 d5 9b 6a 67 6b a0 c5 16 ab 2d 0f 4d 1d 68 cb d5 2e 95 4a 2d 96 5b 75 a0 15 8b a6 b8 dc 68 32 ff 25 40 db 1f 9f 32 99 ac ee be 3f 20 5a 0c b3 74 b4 de 81 b6 3b 49 a0 d5 1b 2d 37 be 98 e5 Data Ascii: PNGIHDRpXo:wIDATxv:@nFA$x5 ht5ML&;<X~YS-(s^mtfX_O1K?c0.<s.WHh0MaRi?AD\"djgk-Mh.J-[uh2%@2? Zt;I-7
2024-09-29 02:42:51 UTC	1369	IN	Data Raw: fb f3 a4 68 98 db 7d 40 54 fe e4 98 95 e3 c9 9c 20 25 b1 ab 73 13 eb 06 8e 96 07 68 87 e3 13 23 45 e5 74 2d 89 64 72 bd 3d 4e 67 6b a6 43 aa 9e 02 d3 ca bb cf 80 f6 8c e1 8e 8f 0d 15 e9 05 0f d0 98 14 39 b7 37 18 63 bb 04 b2 14 1c cd 16 9b 33 80 46 cb ad 76 cf 99 d1 aa e9 88 9e 9e 2e 6f 68 b6 bb b5 46 eb ee 2c a0 69 81 2d 81 51 f9 93 63 56 92 e9 25 39 7e 76 26 d0 30 4a f8 6f 1e a0 d1 2c 6d 5e 5d 60 b2 3f 98 1c 4e cf 9e c4 10 79 7a 91 7e 52 11 2d dd fe 08 44 52 03 14 a9 d0 07 da ca 20 25 a6 24 a6 09 b1 6b 86 34 69 20 68 ce c1 87 cc ac f5 46 3b 93 fd c9 da 43 2f f3 05 a3 dd e9 4f 66 4b ac d8 46 a3 4d 35 06 2a 4b c7 45 b2 26 89 06 d1 5a b9 5c a5 f7 69 07 a6 e8 ae 54 14 66 ac 6a ed a2 52 3c 2d 78 50 ab f5 3e b0 66 c3 d1 64 1b fd a7 8c 84 9f a9 5b ed 38 5d 9d Data Ascii: h}@T %sh#Et-dr=NgkC97c3Fv.ohF,i-QcV%9~v&0Jo,m^]`?Nyz~R-DR %$k4i hF;C/OfKFM5*KE&Z\iTfjR<-xP>fd[8]
2024-09-29 02:42:51 UTC	1369	IN	Data Raw: 4e 1c 5f eb 7b 00 8d 02 76 67 c0 6b f2 9e 29 a8 b2 e8 f2 20 cd 88 cc df 9a b3 b1 3e 23 64 b1 fc a8 4f 17 06 9f 48 49 f7 06 a3 c0 75 f7 ee ba 49 54 56 84 01 f8 44 66 c6 b9 9f 6a bd 41 e3 a0 79 30 98 b8 f3 4a c7 1f dc 37 6e 2c d7 e0 af 1c 40 b4 a0 03 cc d0 62 a7 89 eb 17 22 f4 2c 53 63 23 02 92 aa 98 14 62 2c c8 ac 90 3b 49 74 78 1b 74 16 3e 58 d1 38 7f 63 0e 2d c4 02 c3 81 f6 12 15 68 ec f6 8c be d5 ea cd e5 7a f7 1e 89 74 01 6d 6b 51 2c 14 b8 d5 33 eb fa e5 6d d0 ef 50 8b f2 32 09 34 5e 60 71 56 ab 0d 1a cf 64 73 83 e1 94 66 dd 40 db 1d 6e 6d b7 bb 42 51 03 2d 58 88 7f bf 8d fa e2 f7 98 bf 28 bf 61 38 a0 cc 00 cd d9 43 10 65 0e 00 9a d8 8e 97 41 c7 3c 4e 0c e8 5f f1 8d f5 62 ae dd fe 01 84 5d 7e a0 40 b8 2f 04 66 de d2 d0 8f 1f 70 14 2f d8 42 08 34 7f 02 Data Ascii: N_{vgk) >#dOHIuITVDfjAy0J7n,@b",Sc#b,;Itxt>X8c-hztmkQ,3mP24^`qVdsf@nmBQ-X(a8CeA<N_b]~@/fp/B4
2024-09-29 02:42:51 UTC	1369	IN	Data Raw: 5a 94 56 0d f1 58 de 91 bd 38 ac c3 39 3d 3b a7 ff a9 52 69 70 82 e7 4b 98 a2 f3 24 f4 b0 37 5b 3d 2d a0 7b 11 21 34 8e 83 b9 0f 7a b2 6b 41 fb e5 f7 74 53 2d 21 03 ca 0d 86 78 d6 08 1a 5f b5 1a 0b d1 64 25 48 5b 7a 41 23 ca 64 b9 a2 16 d0 bd 2b 84 10 94 60 68 eb 59 aa a1 24 0b e9 77 dc 34 88 b4 3d f1 3c 67 7f 70 8d 9e 52 da a6 3f 92 72 0f cf 46 b0 c8 89 dc 17 7a b8 9e 8a 41 63 a6 20 79 25 7c 27 cb 21 50 6a 46 20 a7 4f 29 49 ec 27 ad e7 52 08 21 d6 c3 81 74 7c b7 7b 41 e3 b1 c4 a9 8c 0c 26 67 82 96 25 a6 e4 90 7c 76 76 81 b2 2d 11 b4 e1 0d 3e 15 08 1a bd 92 74 4c 72 4f 58 d0 d0 3a 36 dc ba 77 86 10 42 d0 bb 13 2e 0f 11 08 12 cf f9 db 51 f4 d7 8e e3 76 76 e7 14 ce 4a 65 cc 7e 91 5a 32 8d c4 82 d8 06 51 09 42 7c f9 4e ca 3d 2c 19 ab d4 9a a8 30 a3 dc 48 2d Data Ascii: ZVX89=;RipK$7[=-{!4zkAtS-!x_d%H[zA#d+`hY$w4=<gpR?rFzAc y%\|'!PjF O)I'R!t\|{A&g%\|vv->tLrOX:6wB.QvvJe~Z2QB\|N=,0H-
2024-09-29 02:42:51 UTC	1369	IN	Data Raw: 82 7b fc a6 63 96 da e1 33 85 4c 63 28 cd 4a 12 27 84 88 01 5a 98 74 7a 76 4e 04 d9 6c f7 31 13 c5 a8 e4 05 41 9b 7a 41 bb 63 a9 47 e5 51 d0 3e bb 88 08 21 84 c0 7f be 58 aa f6 07 d7 81 e6 fe 17 29 46 bc d8 68 4c 00 da ee 0e 7b 83 6b ae 72 b5 81 27 80 fb 17 08 21 c4 e9 d9 19 e9 c6 c1 f0 fb 4c d0 42 91 62 e4 cb 04 6d 80 9a a1 8a 3c 95 56 b4 0b 21 c4 3a a8 53 e3 10 c5 5a 23 64 f7 3e 42 10 89 7b 9f f7 f0 e3 22 85 69 f7 70 d9 63 83 fb a7 dc 18 8c 6e 58 9d ec de 10 21 84 1a 75 70 bc a3 96 3d 89 2c 68 93 bb b0 a0 3d 2c 11 b4 31 82 f6 8b c8 12 0b 2a 27 84 10 62 0e c4 91 d2 f6 f0 ea e6 69 31 dd af db e9 2f 9f 98 e4 63 58 73 d9 a2 34 1c dd d0 69 44 0e 12 2f 68 3e c5 32 9a b2 78 b7 37 e2 f6 dc ea 11 0e f4 04 a9 a4 3c e9 58 32 4f d3 42 b1 5c 6b b4 5a ed 7e a5 52 b7 Data Ascii: {c3Lc(J'ZtzvNl1AzAcGQ>!X)FhL{kr'!LBbm<V!:SZ#d>B{"ipcnX!up=,h=,1*'bi1/cXs4iD/h>2x7<X2OB\kZ~R
2024-09-29 02:42:51 UTC	1369	IN	Data Raw: 0d a4 99 5c 10 56 e2 f8 43 25 3a bc 32 67 eb cb 3c 84 a7 8b 6d 49 24 47 29 12 79 5f 0f fa 35 cd 01 ce 4e f9 42 08 e1 9b 26 bb fd 91 09 1a 65 93 4c 36 ef b5 6b ee 84 0c 1c 86 ad f4 f1 2d b4 4b 96 c7 de ee 51 d0 7e 71 0f 82 46 35 fc e3 53 c7 5a 36 57 30 09 4d a5 d2 ee 40 11 42 c8 1b 88 4a 90 45 84 88 69 b8 24 44 64 49 0d 72 d1 7a 83 76 f2 66 ab 4b 90 17 75 dd ed e6 63 3a 8b b3 93 d8 ff f2 43 fd 7b 03 cd 46 b4 46 d1 46 d9 68 76 9d 10 42 3c b5 3f 52 dd 36 41 63 38 26 5c bb a3 ca 91 c9 15 16 d3 e1 64 07 d1 16 64 87 47 bd 99 a0 21 ad e4 29 fd 79 98 d6 61 06 cf 11 b4 7a a3 e5 0e 11 21 84 6a 8b 26 be 5c 54 5b e6 5a c2 d9 76 58 ad 35 c2 cd 15 0c 27 32 6d 6d 7d 8d 96 20 7c 9b 0b 95 e7 34 4f 34 d9 ee f4 dd 13 34 3f 11 53 12 04 5b da f2 c8 11 42 50 ad 66 03 8d 09 1a Data Ascii: \VC%:2g<mI$G)y_5NB&eL6k-KQ~qF5SZ6W0M@BJEi$DdIrzvfKuc:C{FFFhvB<?R6Ac8&\ddG!)yaz!j&\T[ZvX5'2mm} \|4O44?S[BPf
2024-09-29 02:42:51 UTC	1369	IN	Data Raw: 80 34 9d c5 ef e3 2a c8 ad 86 c5 97 57 c5 de 45 77 7c 08 21 c8 44 0e 46 3e 5f 88 5c fc e0 6c cc 7c f4 4c d0 be bf 2c 68 93 bb 7f 26 68 84 92 58 66 12 f5 86 6d 2e 6c 57 e4 01 b4 ee 08 21 04 95 14 fa d3 fd 90 35 92 6a 2a d6 0b a6 a4 5f 74 f9 69 77 87 76 a4 7e b3 8b 57 c8 1b 83 bd 48 f4 17 7b a3 bb a9 17 df df 37 93 07 96 7a 3b 21 c4 b1 ee ec f6 dd 90 28 db a3 a0 dd cf 04 ed c5 d3 2f 83 86 e6 49 f9 d6 82 76 fd 28 68 c8 69 a1 50 e2 86 f7 36 47 63 6d bb cf a1 20 84 50 bd db f4 74 ea 83 c8 88 aa 4a 76 d3 1e 12 f1 da 3e d3 c9 0b c3 89 83 97 6a 11 24 4d f7 95 4a dd ce f4 6c 8c 3c e6 a6 75 21 44 a1 38 ab 77 fb 00 11 61 d9 48 d0 fa 83 eb f1 ed 66 82 b6 7d a6 93 fd 8a 04 8e f6 22 11 64 86 87 4c d0 58 21 41 2f b8 3b 38 84 90 cd 04 b9 2e bc ca dc e6 5c 5c 24 b9 dc 61 Data Ascii: 4WEw\|!DF>_\l\|L,h&hXfm.lW!5j_tiwv~WH{7z;!(/Iv(hiP6Gcm PtJv>j$MJl<u!D8waHf}"dLX!A/;8.\\$a
2024-09-29 02:42:51 UTC	1369	IN	Data Raw: 4c 6e ce ad e5 d4 a9 91 35 b4 b4 b8 64 c3 94 23 29 bd e4 5d b5 6e 64 b1 d3 ea ad c8 99 dd 2c b3 d6 1b 0b 35 a3 c9 63 38 85 b1 c1 17 a7 47 83 16 53 b1 f5 8d 4d 3c 42 a8 a8 84 a9 00 5a d7 19 d0 fe 84 d0 3f 80 86 7f 89 30 05 c5 13 80 38 38 e4 33 12 d0 88 5b 62 f7 17 cb 64 14 00 41 aa c8 65 06 a0 b1 50 b3 01 b4 8f 97 d7 6e ec f0 98 13 4b ab 4d 58 7a 05 44 b0 b8 86 74 cc 98 87 16 0f d0 f0 2f 99 9f 44 b9 98 dc df 08 61 37 9a 89 eb 7d 9c 18 3b 4c b0 10 a7 15 f9 1e de 6d 98 9b 3c e9 6d e1 7e f3 b5 03 59 98 ac ac 3f 13 2f 18 42 e1 62 8f c8 f5 71 0e 27 a7 b5 84 97 5e a6 3e 09 17 f9 f1 6c 26 8f 7d f2 cc 47 bf 33 30 fa 82 03 e0 de 4f dc d9 ad b6 5e 3c f2 9b db 47 6e 44 2a 80 66 70 cc 57 81 a4 b5 8b 06 1b bc cf 37 0a 86 2e ad 97 f7 11 94 03 c4 09 d4 75 5b 62 9b 8c ec Data Ascii: Ln5d#)]nd,5c8GSM<BZ?0883[bdAePnKMXzDt/Da7};Lm<m~Y?/Bbq'^>l&}G30O^<GnD*fpW7.u[b
2024-09-29 02:42:51 UTC	1369	IN	Data Raw: 57 91 90 37 37 93 4f c9 92 cb 1f 76 3d 4a 53 07 5d 6b 52 56 e5 5c ed cc 35 80 ea 67 fc e6 59 31 da fb 28 74 a4 b8 a7 02 65 dc 26 47 40 b3 69 5e 84 c2 0c a7 1d 02 b4 3e 4d 60 f9 24 9e 65 92 b0 a0 9d 82 25 97 3f a0 bd 7b eb fc a2 de 20 65 55 4e 40 83 b5 6c a7 37 43 37 94 0a 2d 49 ba b4 01 ad eb 0e 68 d4 58 98 9a 43 69 65 18 d0 e8 dd 71 4d 7f e4 d9 f6 85 0e 30 4e 2e 74 4e 5e 8f fc 1a 3c 18 42 87 7c 4c 2a 0c c4 d3 b6 20 a7 c2 50 5c 87 e1 b9 67 3c f6 ce 7e 64 b7 71 f3 40 dc 59 7e c9 18 0a 05 33 34 cd 82 0d 03 59 dd 0c 04 35 5c c7 cc 5a 3b 24 51 4a 50 70 97 9d 2c 87 2b 20 93 d1 fb 62 9d 37 9d 5e 0c 40 eb 0d 33 37 a6 00 b4 eb 3b 52 92 64 ad ca df 11 bf 3b 4b 80 b6 88 27 c7 45 2e 8a b7 40 4a 12 d9 b5 e3 e3 b3 20 a0 9d d5 ea 25 72 28 6d aa 04 7a 54 a4 52 83 ff ea Data Ascii: W77Ov=JS]kRV\5gY1(te&G@i^>M`$e%?{ eUN@l7C7-IhXCieqM0N.tN^<B\|L* P\g<~dq@Y~34Y5\Z;$QJPp,+ b7^@37;Rd;K'E.@J %r(mzTR
2024-09-29 02:42:51 UTC	1369	IN	Data Raw: 81 7b 9f bf 91 9c 34 67 76 7d 7d dd f2 19 70 6b c2 21 18 a0 c1 55 af 70 52 dd b4 dc e3 cd 19 0a ae 18 43 64 2f 91 f9 82 5b 0f b8 13 f1 53 88 14 7b 5a 96 b5 4b 47 e0 07 42 15 c5 5e f7 98 33 fd 60 3a 90 40 cb 5d f4 c7 2f cb de ff 78 33 6c 27 7c 39 bf 17 b3 c5 28 05 3e b7 de df 7e 00 0d bd 5f 7c 4a 7c 1d 9b 2a 44 c0 cc 67 19 8f 16 ce a3 af b6 7e 10 13 74 07 37 22 29 a0 f5 87 01 ed cd 00 ed 09 40 bb 25 6e 19 00 da 9a 00 4d 96 03 a0 6d 81 69 45 69 4f f2 5c 8c 4d 07 de 9b a3 e9 e6 a1 19 a0 01 4d 84 67 46 eb f7 a2 e2 b5 cd 3f 80 76 37 dc ad d5 fd fc 0d 77 d6 1a f6 81 35 c3 31 3c 34 2b 79 87 56 bd 2f 93 3a 94 40 00 fe 22 5e 23 17 9d 33 b0 4c 24 81 3b 24 33 c4 80 7e a4 0a be 87 b5 ca 41 04 3b 57 0c d7 13 38 e6 ea 40 e6 78 8b 72 28 e9 75 28 6b 57 29 96 48 2e 81 f2 Data Ascii: {4gv}}pk!UpRCd/[S{ZKGB^3`:@]/x3l'\|9(>~_\|J\|*Dg~t7")@%nMmiEiO\MMgF?v7w51<4+yV/:@"^#3L$;$3~A;W8@xr(u(kW)H.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49736	108.138.24.29	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:51 UTC	584	OUT	GET /public/clockers/CustomButton/cssXF.css HTTP/1.1 Host: d1ieffz9zqrn09.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.mrbeastcast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:51 UTC	469	IN	HTTP/1.1 200 OK Content-Type: text/css Content-Length: 896 Connection: close Date: Sun, 29 Sep 2024 02:42:51 GMT Accept-Ranges: bytes Server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11 Last-Modified: Thu, 17 Aug 2023 03:34:44 GMT ETag: "380-6031617dd95f4" X-Cache: Miss from cloudfront Via: 1.1 ca339b9e98820e424be1609317fd0314.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: pBVXYlKIegeJf9IvTyJi2Tups37MkFpjYlTZxgtvXVDYBVXFgYB1aw==
2024-09-29 02:42:51 UTC	896	IN	Data Raw: 23 78 66 5f 4d 4f 44 41 4c 5f 43 4f 4e 54 41 49 4e 45 52 20 2e 78 66 6d 6f 64 61 6c 2d 68 65 61 64 65 72 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 35 65 35 65 35 3b 0d 0a 7d 0d 0a 23 78 66 5f 4d 4f 44 41 4c 5f 43 4f 4e 54 41 49 4e 45 52 20 23 78 66 4d 4f 44 41 4c 46 4f 4f 54 45 52 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 0d 0a 7d 0d 0a 23 78 66 5f 4d 4f 44 41 4c 5f 43 4f 4e 54 41 49 4e 45 52 20 23 78 66 5f 4d 4f 44 41 4c 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 28 30 2c 30 2c 30 29 3b 20 2f 2a 20 46 61 6c 6c 62 61 63 6b 20 63 6f 6c 6f 72 20 2a 2f 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 72 67 62 61 Data Ascii: #xf_MODAL_CONTAINER .xfmodal-header { border-bottom: 1px solid #e5e5e5;}#xf_MODAL_CONTAINER #xfMODALFOOTER { display:none}#xf_MODAL_CONTAINER #xf_MODAL { background-color: rgb(0,0,0); /* Fallback color */ background-color: rgba

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49737	108.138.24.174	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:51 UTC	397	OUT	GET /public/external/v2/htmlxf.4235458.ba3ad.0.js HTTP/1.1 Host: d1ieffz9zqrn09.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:51 UTC	421	IN	HTTP/1.1 200 OK Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Date: Sun, 29 Sep 2024 02:42:51 GMT Server: Apache/2.4.48 () OpenSSL/1.0.2k-fips PHP/7.4.11 X-Powered-By: PHP/7.4.11 X-Cache: Miss from cloudfront Via: 1.1 6f32a39163a1e36ace7a71a85e2d2884.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: SRdpVVll2jf1iWfVWPAqlErlXtMR7DbAxvyzJS_ZXWbOMFEd4djYCg==
2024-09-29 02:42:51 UTC	5485	IN	Data Raw: 31 35 36 35 0d 0a 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 76 61 72 20 69 74 5f 69 64 3d 34 32 33 35 34 35 38 3b 76 61 72 20 68 74 6d 6c 3d 22 3c 64 69 76 20 69 64 3d 5c 22 78 66 5f 4d 4f 44 41 4c 5c 22 3e 5c 72 5c 6e 20 20 20 20 3c 64 69 76 20 69 64 3d 5c 22 78 66 4d 4f 44 41 4c 43 4f 4e 54 45 4e 54 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 5c 22 78 66 4d 4f 44 41 4c 48 45 41 44 45 52 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 5c 22 78 66 4d 4f 44 41 4c 54 49 54 4c 45 5c 22 3e 3c 5c 2f 64 69 76 3e 20 3c 5c 2f 64 69 76 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 5c 22 78 66 4d 4f 44 41 4c 42 4f 44 59 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 66 72 61 Data Ascii: 1565(function () {var it_id=4235458;var html="<div id=\"xf_MODAL\">\r\n <div id=\"xfMODALCONTENT\">\r\n <div id=\"xfMODALHEADER\">\r\n <div id=\"xfMODALTITLE\"><\/div> <\/div>\r\n <div id=\"xfMODALBODY\">\r\n <ifra
2024-09-29 02:42:51 UTC	16384	IN	Data Raw: 34 34 34 30 0d 0a 72 69 70 74 3e 5c 6e 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 5c 22 73 74 79 6c 65 73 68 65 65 74 5c 22 20 74 79 70 65 3d 5c 22 74 65 78 74 5c 2f 63 73 73 5c 22 20 68 72 65 66 3d 5c 22 68 74 74 70 73 3a 5c 2f 5c 2f 64 32 36 36 6b 65 79 39 34 38 66 67 31 37 2e 63 6c 6f 75 64 66 72 6f 6e 74 2e 6e 65 74 5c 2f 74 68 65 6d 65 73 5c 2f 73 74 61 72 74 75 69 5c 2f 63 73 73 5c 2f 6c 69 62 5c 2f 63 6f 6c 6f 72 70 69 63 6b 65 72 5c 2f 63 73 73 5c 2f 63 6f 6c 6f 72 70 69 63 6b 65 72 2e 63 73 73 5c 22 3e 5c 6e 5c 6e 20 20 20 20 3c 21 2d 2d 20 4f 75 72 20 41 70 70 6c 69 63 61 74 69 6f 6e 27 73 20 43 53 53 20 73 74 79 6c 65 73 68 65 65 74 20 2d 2d 3e 5c 6e 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 5c 22 73 74 79 6c 65 73 68 65 65 74 5c 22 20 74 79 70 Data Ascii: 4440ript>\n <link rel=\"stylesheet\" type=\"text\/css\" href=\"https:\/\/d266key948fg17.cloudfront.net\/themes\/startui\/css\/lib\/colorpicker\/css\/colorpicker.css\">\n\n ... Our Application's CSS stylesheet -->\n <link rel=\"stylesheet\" typ
2024-09-29 02:42:51 UTC	1096	IN	Data Raw: 72 2d 62 6f 64 79 2d 74 65 78 74 2d 62 6f 74 74 6f 6d 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6c 6f 61 64 69 6e 67 2d 62 75 74 74 6f 6e 2d 6d 69 78 5c 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 6c 64 73 2d 64 75 61 6c 2d 72 69 6e 67 5c 22 3e 3c 5c 2f 64 69 76 3e 57 41 49 54 49 4e 47 20 46 4f 52 20 43 4f 4d 50 4c 45 54 49 4f 4e 2e 2e 2e 3c 5c 2f 64 69 76 3e 3c 5c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 3c 5c 2f 64 69 76 3e 5c 6e 20 20 20 20 20 20 20 20 3c 21 2d 2d 20 45 4e 44 3a 20 43 6f 6e 74 65 6e 74 20 4c 6f 63 6b 65 72 20 4f 66 66 65 72 73 20 2d 2d 3e 5c 6e 5c 6e 20 20 20 20 3c 5c 2f 64 69 76 3e 5c 6e 20 20 20 20 3c 21 2d 2d 20 45 4e 44 3a 20 43 6f 6e 74 65 6e 74 20 4c 6f 63 6b 65 72 20 42 6f 64 79 20 2d 2d 3e 5c 6e 5c 6e 20 20 20 20 3c Data Ascii: r-body-text-bottom\"><div class=\"loading-button-mix\"><div class=\"lds-dual-ring\"><\/div>WAITING FOR COMPLETION...<\/div><\/div>\n <\/div>\n ... END: Content Locker Offers -->\n\n <\/div>\n ... END: Content Locker Body -->\n\n <
2024-09-29 02:42:51 UTC	1387	IN	Data Raw: 35 36 34 0d 0a 6f 6f 67 6c 65 2e 63 6f 6d 22 2c 22 64 69 73 61 62 6c 65 5f 72 69 67 68 74 5f 63 6c 69 63 6b 22 3a 31 2c 22 65 73 63 61 70 65 5f 6b 65 79 5f 63 6c 6f 73 65 22 3a 30 7d 3b 76 61 72 20 64 6d 63 61 52 65 6d 6f 76 65 64 3d 30 3b 78 66 45 78 65 63 75 74 65 57 69 74 68 42 6f 64 79 28 29 3b 0d 0a 66 75 6e 63 74 69 6f 6e 20 78 66 45 78 65 63 75 74 65 57 69 74 68 42 6f 64 79 28 29 7b 0d 0a 20 20 20 20 69 66 28 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 29 7b 0d 0a 20 20 20 20 20 20 20 20 73 65 74 54 69 6d 65 6f 75 74 28 78 66 45 78 65 63 75 74 65 57 69 74 68 42 6f 64 79 2c 31 29 3b 0d 0a 20 20 20 20 20 20 20 20 72 Data Ascii: 564oogle.com","disable_right_click":1,"escape_key_close":0};var dmcaRemoved=0;xfExecuteWithBody();function xfExecuteWithBody(){ if(typeof document.getElementsByTagName("body")[0]=="undefined"){ setTimeout(xfExecuteWithBody,1); r
2024-09-29 02:42:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49744	188.114.97.3	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:52 UTC	600	OUT	GET /favicon.ico HTTP/1.1 Host: www.mrbeastcast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mrbeastcast.com/claim/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:52 UTC	649	IN	HTTP/1.1 302 Moved Temporarily Date: Sun, 29 Sep 2024 02:42:52 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: /claim Vary: User-Agent CF-Cache-Status: BYPASS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=x81A%2Fsq9TN0v6Znmv0NlTBRjcOp7TWdKjFrNPwFxCZH1dBWtjr1zUn1B%2FQk9%2BMqSn8u44G9iQfoaHjts4sHGk4MHbrN%2B69Rh%2FCOBYS6kJswGmA%2FA77w9%2BVzBYi%2BTPpPx0TEfwiR9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ca89f56dc618c87-EWR
2024-09-29 02:42:52 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49745	108.138.24.29	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:53 UTC	587	OUT	GET /public/external/check.php?it=4235458&time=1727577771502 HTTP/1.1 Host: d1ieffz9zqrn09.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mrbeastcast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:53 UTC	413	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 72 Connection: close Date: Sun, 29 Sep 2024 02:42:53 GMT X-Powered-By: PHP/7.4.11 Server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11 X-Cache: Miss from cloudfront Via: 1.1 d76db2cbee553c8bb2de7fd88a960646.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: i8u0AbF8VgJdxS-bvDJ4Mj6gIs79JeFta2K41pZ9mXpgFRmeFhNM9A==
2024-09-29 02:42:53 UTC	72	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 2f 2f 56 69 73 69 74 6f 72 20 6e 6f 74 20 66 6f 75 6e 64 0a 73 65 74 54 69 6d 65 6f 75 74 28 78 66 43 68 65 63 6b 46 6f 72 4c 65 61 64 2c 31 35 30 30 30 29 3b 7d 29 28 29 3b Data Ascii: (function () {//Visitor not foundsetTimeout(xfCheckForLead,15000);})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49747	188.114.97.3	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:53 UTC	594	OUT	GET /claim HTTP/1.1 Host: www.mrbeastcast.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.mrbeastcast.com/claim/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:53 UTC	654	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 29 Sep 2024 02:42:53 GMT Content-Type: text/html; charset=iso-8859-1 Transfer-Encoding: chunked Connection: close Location: http://www.mrbeastcast.com/claim/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=gfEHyfGsaYOTYfVK7oNt5kNI5vE9Uy2n25BZGXQndgu6C3WrXKddCkUHYkIZ7j5EjYa1NzAFrIM%2Bh4%2FyyXIqW8tMl4PS9PwegDEL1xHYY0y9RAU27wc95e5FyR6CtT1sEcpF%2FeHW"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ca89f5eaebc80d6-EWR
2024-09-29 02:42:53 UTC	248	IN	Data Raw: 66 32 0d 0a 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 6d 72 62 65 61 73 74 63 61 73 74 2e 63 6f 6d 2f 63 6c 61 69 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: f2<!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://www.mrbeastcast.com/claim/">here</a>.</p></body></html>
2024-09-29 02:42:53 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49749	108.138.24.174	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:42:54 UTC	408	OUT	GET /public/external/check.php?it=4235458&time=1727577771502 HTTP/1.1 Host: d1ieffz9zqrn09.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:42:54 UTC	413	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 72 Connection: close Date: Sun, 29 Sep 2024 02:42:54 GMT X-Powered-By: PHP/7.4.11 Server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11 X-Cache: Miss from cloudfront Via: 1.1 85ca8c4198fb707d10ecc2a784a315be.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: _4q_Pj1StqDTISlZheEUG7vm73ZTdoW602LMBCvkUJxileJM2A6rew==
2024-09-29 02:42:54 UTC	72	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 2f 2f 56 69 73 69 74 6f 72 20 6e 6f 74 20 66 6f 75 6e 64 0a 73 65 74 54 69 6d 65 6f 75 74 28 78 66 43 68 65 63 6b 46 6f 72 4c 65 61 64 2c 31 35 30 30 30 29 3b 7d 29 28 29 3b Data Ascii: (function () {//Visitor not foundsetTimeout(xfCheckForLead,15000);})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49757	108.138.24.29	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:43:09 UTC	587	OUT	GET /public/external/check.php?it=4235458&time=1727577787689 HTTP/1.1 Host: d1ieffz9zqrn09.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mrbeastcast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:43:09 UTC	413	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 72 Connection: close Date: Sun, 29 Sep 2024 02:43:09 GMT X-Powered-By: PHP/7.4.11 Server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11 X-Cache: Miss from cloudfront Via: 1.1 fa87f2173bfe5d35fd73cec71ab12a32.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: LHw5gP6Lp2uelzRl8avqVbG9pCkucSiBqbfDOPwGHaySJcC_dN8Itw==
2024-09-29 02:43:09 UTC	72	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 2f 2f 56 69 73 69 74 6f 72 20 6e 6f 74 20 66 6f 75 6e 64 0a 73 65 74 54 69 6d 65 6f 75 74 28 78 66 43 68 65 63 6b 46 6f 72 4c 65 61 64 2c 31 35 30 30 30 29 3b 7d 29 28 29 3b Data Ascii: (function () {//Visitor not foundsetTimeout(xfCheckForLead,15000);})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49758	108.138.24.174	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:43:10 UTC	408	OUT	GET /public/external/check.php?it=4235458&time=1727577787689 HTTP/1.1 Host: d1ieffz9zqrn09.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:43:11 UTC	413	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 72 Connection: close Date: Sun, 29 Sep 2024 02:43:10 GMT X-Powered-By: PHP/7.4.11 Server: Apache/2.4.46 () OpenSSL/1.0.2k-fips PHP/7.4.11 X-Cache: Miss from cloudfront Via: 1.1 8dc3ccc34d68ee81173fff2a80f72bde.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: EQou1_Rj1yZmN-PEjhSCymsNDHDiOfvM0FFVzgDLgQM7P81Lk27M2A==
2024-09-29 02:43:11 UTC	72	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 2f 2f 56 69 73 69 74 6f 72 20 6e 6f 74 20 66 6f 75 6e 64 0a 73 65 74 54 69 6d 65 6f 75 74 28 78 66 43 68 65 63 6b 46 6f 72 4c 65 61 64 2c 31 35 30 30 30 29 3b 7d 29 28 29 3b Data Ascii: (function () {//Visitor not foundsetTimeout(xfCheckForLead,15000);})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49759	108.138.24.29	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:43:25 UTC	587	OUT	GET /public/external/check.php?it=4235458&time=1727577804032 HTTP/1.1 Host: d1ieffz9zqrn09.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mrbeastcast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:43:26 UTC	413	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 72 Connection: close Date: Sun, 29 Sep 2024 02:43:25 GMT X-Powered-By: PHP/7.4.11 Server: Apache/2.4.46 () OpenSSL/1.0.2k-fips PHP/7.4.11 X-Cache: Miss from cloudfront Via: 1.1 4b69099d64ffa1fbe8adbe1235065a14.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: JJOJM8VPOsIMyaVBjHkjwYgBQqAjFZ1WZfKyYLt_4I_ppyo3e_CcQw==
2024-09-29 02:43:26 UTC	72	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 2f 2f 56 69 73 69 74 6f 72 20 6e 6f 74 20 66 6f 75 6e 64 0a 73 65 74 54 69 6d 65 6f 75 74 28 78 66 43 68 65 63 6b 46 6f 72 4c 65 61 64 2c 31 35 30 30 30 29 3b 7d 29 28 29 3b Data Ascii: (function () {//Visitor not foundsetTimeout(xfCheckForLead,15000);})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49760	108.138.24.174	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:43:26 UTC	408	OUT	GET /public/external/check.php?it=4235458&time=1727577804032 HTTP/1.1 Host: d1ieffz9zqrn09.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:43:27 UTC	413	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 72 Connection: close Date: Sun, 29 Sep 2024 02:43:27 GMT X-Powered-By: PHP/7.4.11 Server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11 X-Cache: Miss from cloudfront Via: 1.1 fde85e7daa13f95cf6b8f5fa09c62ef6.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: hItfwodSUVlXHa7HnGhU49DIBtV8YkTu0uvgQwCRXUF-Qne9CHbL_g==
2024-09-29 02:43:27 UTC	72	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 2f 2f 56 69 73 69 74 6f 72 20 6e 6f 74 20 66 6f 75 6e 64 0a 73 65 74 54 69 6d 65 6f 75 74 28 78 66 43 68 65 63 6b 46 6f 72 4c 65 61 64 2c 31 35 30 30 30 29 3b 7d 29 28 29 3b Data Ascii: (function () {//Visitor not foundsetTimeout(xfCheckForLead,15000);})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
25	192.168.2.5	49763	108.138.24.29	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:43:41 UTC	587	OUT	GET /public/external/check.php?it=4235458&time=1727577820188 HTTP/1.1 Host: d1ieffz9zqrn09.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mrbeastcast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:43:42 UTC	413	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 72 Connection: close Date: Sun, 29 Sep 2024 02:43:42 GMT X-Powered-By: PHP/7.4.11 Server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11 X-Cache: Miss from cloudfront Via: 1.1 62e7b24ca032b612bb93fa7f3437469c.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: IIHty1LpuhxR0zO_zu0IqpppbfPQFs_bdWfdubThXcfQmxzrOGc6Iw==
2024-09-29 02:43:42 UTC	72	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 2f 2f 56 69 73 69 74 6f 72 20 6e 6f 74 20 66 6f 75 6e 64 0a 73 65 74 54 69 6d 65 6f 75 74 28 78 66 43 68 65 63 6b 46 6f 72 4c 65 61 64 2c 31 35 30 30 30 29 3b 7d 29 28 29 3b Data Ascii: (function () {//Visitor not foundsetTimeout(xfCheckForLead,15000);})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
26	192.168.2.5	49764	108.138.24.174	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:43:43 UTC	408	OUT	GET /public/external/check.php?it=4235458&time=1727577820188 HTTP/1.1 Host: d1ieffz9zqrn09.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:43:43 UTC	413	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 72 Connection: close Date: Sun, 29 Sep 2024 02:43:43 GMT X-Powered-By: PHP/7.4.11 Server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11 X-Cache: Miss from cloudfront Via: 1.1 4dd80d99fd5d0f6baaaf5179cd921f72.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: 5Lv_sp_eWtZeV8TiS_YNoca6Q1VVnFZgC1NiXChrP0K4K-hCwFh3Jg==
2024-09-29 02:43:43 UTC	72	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 2f 2f 56 69 73 69 74 6f 72 20 6e 6f 74 20 66 6f 75 6e 64 0a 73 65 74 54 69 6d 65 6f 75 74 28 78 66 43 68 65 63 6b 46 6f 72 4c 65 61 64 2c 31 35 30 30 30 29 3b 7d 29 28 29 3b Data Ascii: (function () {//Visitor not foundsetTimeout(xfCheckForLead,15000);})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
27	192.168.2.5	49767	108.138.24.111	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:43:58 UTC	587	OUT	GET /public/external/check.php?it=4235458&time=1727577836505 HTTP/1.1 Host: d1ieffz9zqrn09.cloudfront.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.mrbeastcast.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:43:58 UTC	413	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 72 Connection: close Date: Sun, 29 Sep 2024 02:43:58 GMT X-Powered-By: PHP/7.4.11 Server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11 X-Cache: Miss from cloudfront Via: 1.1 93efd892a8e99dc59164afbee331cd56.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: ogwyk9166zgtrVBVVHDL0n1HOtPxVKyqU-FOfOiAE2_is1L7gJVVJw==
2024-09-29 02:43:58 UTC	72	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 2f 2f 56 69 73 69 74 6f 72 20 6e 6f 74 20 66 6f 75 6e 64 0a 73 65 74 54 69 6d 65 6f 75 74 28 78 66 43 68 65 63 6b 46 6f 72 4c 65 61 64 2c 31 35 30 30 30 29 3b 7d 29 28 29 3b Data Ascii: (function () {//Visitor not foundsetTimeout(xfCheckForLead,15000);})();

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
28	192.168.2.5	49768	108.138.24.29	443	2668	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 02:43:59 UTC	408	OUT	GET /public/external/check.php?it=4235458&time=1727577836505 HTTP/1.1 Host: d1ieffz9zqrn09.cloudfront.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 02:43:59 UTC	413	IN	HTTP/1.1 200 OK Content-Type: application/javascript Content-Length: 72 Connection: close Date: Sun, 29 Sep 2024 02:43:59 GMT X-Powered-By: PHP/7.4.11 Server: Apache/2.4.51 () OpenSSL/1.0.2k-fips PHP/7.4.11 X-Cache: Miss from cloudfront Via: 1.1 26f61e70ac4b967ea82841cbd2dc7cf0.cloudfront.net (CloudFront) X-Amz-Cf-Pop: FRA56-P7 X-Amz-Cf-Id: 6XioYib2DBUORhTI80gcKxgVujtr_YFr35clfKk9EgqeiyQshBtorQ==
2024-09-29 02:43:59 UTC	72	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 2f 2f 56 69 73 69 74 6f 72 20 6e 6f 74 20 66 6f 75 6e 64 0a 73 65 74 54 69 6d 65 6f 75 74 28 78 66 43 68 65 63 6b 46 6f 72 4c 65 61 64 2c 31 35 30 30 30 29 3b 7d 29 28 29 3b Data Ascii: (function () {//Visitor not foundsetTimeout(xfCheckForLead,15000);})();

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1992, Parent PID: 5592

General

Target ID:	0
Start time:	22:42:35
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2668, Parent PID: 1992

General

Target ID:	2
Start time:	22:42:38
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2032,i,4001843097184216137,3766743106433319023,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6844, Parent PID: 5592

General

Target ID:	3
Start time:	22:42:41
Start date:	28/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.mrbeastcast.com/claim/"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.mrbeastcast.com/claim/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Windows Analysis Report
http://www.mrbeastcast.com/claim/