Edit tour

Windows Analysis Report
https://binidotocyles.pages.dev/

Overview

General Information

Sample URL:	https://binidotocyles.pages.dev/
Analysis ID:	1521944
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected BlockedWebSite

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2120 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2160,i,16399321779183125140,8074604450007266210,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://binidotocyles.pages.dev/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_44	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security
0.1.pages.csv	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected BlockedWebSite

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_44, type: DROPPED

Source: https://binidotocyles.pages.dev/	HTTP Parser: No favicon
Source: https://binidotocyles.pages.dev/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: binidotocyles.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/styles/cf.errors.css HTTP/1.1Host: binidotocyles.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://binidotocyles.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: binidotocyles.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://binidotocyles.pages.dev/cdn-cgi/styles/cf.errors.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: binidotocyles.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://binidotocyles.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: binidotocyles.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: binidotocyles.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: binidotocyles.pages.dev
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_47.2.dr, chromecache_46.2.dr	String found in binary or memory: https://coinlib.io/
Source: chromecache_47.2.dr, chromecache_46.2.dr	String found in binary or memory: https://widget.coinlib.io/widget?type=horizontal_v2&theme=dark&pref_coin_id=1505&invert_
Source: chromecache_44.2.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_44.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49749 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@16/10@6/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2160,i,16399321779183125140,8074604450007266210,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://binidotocyles.pages.dev/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2160,i,16399321779183125140,8074604450007266210,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
binidotocyles.pages.dev	172.66.44.58	true	false	unknown
www.google.com	142.250.185.100	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://binidotocyles.pages.dev/favicon.ico	false	unknown
https://binidotocyles.pages.dev/	false	unknown
https://binidotocyles.pages.dev/cdn-cgi/styles/cf.errors.css	false	unknown
https://binidotocyles.pages.dev/cdn-cgi/images/icon-exclamation.png?1376755637	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://www.cloudflare.com/learning/access-management/phishing-attack/	chromecache_44.2.dr	false	unknown
https://widget.coinlib.io/widget?type=horizontal_v2&theme=dark&pref_coin_id=1505&invert_	chromecache_47.2.dr, chromecache_46.2.dr	false	unknown
https://coinlib.io/	chromecache_47.2.dr, chromecache_46.2.dr	false	unknown
https://www.cloudflare.com/5xx-error-landing	chromecache_44.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.100	www.google.com	United States	15169	GOOGLEUS	false
172.66.44.58	binidotocyles.pages.dev	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1521944
Start date and time:	2024-09-29 06:12:42 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 15s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://binidotocyles.pages.dev/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@16/10@6/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 142.250.185.174, 64.233.167.84, 34.104.35.123, 4.245.163.56, 93.184.221.240, 20.3.187.198, 192.229.221.95, 52.165.164.15, 40.69.42.241, 142.250.185.227
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, clientservices.googleapis.com, ctldl.windowsupdate.com, wu.azureedge.net, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://binidotocyles.pages.dev/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://binidotocyles.pages.dev/ Model: jbxai	{ "brand":["Cloudflare"], "contains_trigger_text":false, "trigger_text":"unknown", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://binidotocyles.pages.dev/ Model: jbxai	{ "brand":["Cloudflare"], "contains_trigger_text":false, "trigger_text":"unknown", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 44

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (394)
Category:	downloaded
Size (bytes):	4394
Entropy (8bit):	5.091816641525209
Encrypted:	false
SSDEEP:	96:1j9jwIjYjUDK/D5DMF+BOisfA2ZLimMrR49PaQxJbGD:1j9jhjYjIK/Vo+tsxZOmMrO9ieJGD
MD5:	D6A26CAD4AF386C77C378F033363B4BC
SHA1:	502427E0172711E8F861221381E188E2F32C4585
SHA-256:	09323E3E3F92275AAFF3C5E7068BC4DCA284B464DADF78A826198FF6738FBA57
SHA-512:	63FAD4BC58D0F23D3DF76814D31B809C172235A30832AA946442BEA348624B0436F505370878186428C1C68E288AC5ACC6868391C39091613E82DEDD728EDD17
Malicious:	false
Reputation:	low
URL:	https://binidotocyles.pages.dev/
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Suspected phishing site \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded

Chrome Cache Entry: 45

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2700)
Category:	dropped
Size (bytes):	16839
Entropy (8bit):	5.477287285689336
Encrypted:	false
SSDEEP:	192:J9S9ZOF5Rgq0npypHMDhRz8tyUNRBmC6tG2fEckb33T2VRNgYC0bWb5QU:XAOFYDnFRzy9NRICOG2f1K33KVRNNnwX
MD5:	93B367A3FA48A6D0315A38DD2CB83952
SHA1:	D684C649FAE04EBF7FDCB71067BD6C88C2DDD035
SHA-256:	158453241D22FB21BA063A633DBE09A579B95B13B7CDE4CD669ED3AF2E99ECF4
SHA-512:	6C7DF36263DD45946A034960E8C78CAD08FFC16F07D30FC334EB1ADD75F4549ABDA3EE165833ECD6413F414E3B35856A1E8A700264E71A6D1663856A41158DE7
Malicious:	false
Reputation:	low
Preview:	<!DOCTYPE html><html lang="en"><head>. <meta charset="utf-8">.. <script src="/f09fe6-54646267397b91f48f9.js"></script>.. <link rel="shortcut icon" href="favicon.png">. <meta name="language" content="en">. <meta name="viewport" content="width=device-width,initial-scale=1">. <meta name="theme-color" content="#000000">. <meta name="title" content="Decentralized Dapps - We are unifying Web3 by providing best-in-class, self-custodial, and multichain support">. <meta name="description" content="We are unifying Web3 by providing best-in-class, self-custodial, and multichain support">. <link rel="manifest" href="manifest.json">. <title>Decentralized Dapps - We are unifying Web3 by providing best-in-class, self-custodial, and multichain support</title>. <link href="static/css/2.14dca502.chunk.css" rel="stylesheet">. <link href="static/css/main.e94723d5.chunk.css" rel="stylesheet">. <link href="static/css/index.css" rel="stylesheet">... <script charset="U

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2700)
Category:	downloaded
Size (bytes):	16839
Entropy (8bit):	5.477287285689336
Encrypted:	false
SSDEEP:	192:J9S9ZOF5Rgq0npypHMDhRz8tyUNRBmC6tG2fEckb33T2VRNgYC0bWb5QU:XAOFYDnFRzy9NRICOG2f1K33KVRNNnwX
MD5:	93B367A3FA48A6D0315A38DD2CB83952
SHA1:	D684C649FAE04EBF7FDCB71067BD6C88C2DDD035
SHA-256:	158453241D22FB21BA063A633DBE09A579B95B13B7CDE4CD669ED3AF2E99ECF4
SHA-512:	6C7DF36263DD45946A034960E8C78CAD08FFC16F07D30FC334EB1ADD75F4549ABDA3EE165833ECD6413F414E3B35856A1E8A700264E71A6D1663856A41158DE7
Malicious:	false
Reputation:	low
URL:	https://binidotocyles.pages.dev/favicon.ico
Preview:	<!DOCTYPE html><html lang="en"><head>. <meta charset="utf-8">.. <script src="/f09fe6-54646267397b91f48f9.js"></script>.. <link rel="shortcut icon" href="favicon.png">. <meta name="language" content="en">. <meta name="viewport" content="width=device-width,initial-scale=1">. <meta name="theme-color" content="#000000">. <meta name="title" content="Decentralized Dapps - We are unifying Web3 by providing best-in-class, self-custodial, and multichain support">. <meta name="description" content="We are unifying Web3 by providing best-in-class, self-custodial, and multichain support">. <link rel="manifest" href="manifest.json">. <title>Decentralized Dapps - We are unifying Web3 by providing best-in-class, self-custodial, and multichain support</title>. <link href="static/css/2.14dca502.chunk.css" rel="stylesheet">. <link href="static/css/main.e94723d5.chunk.css" rel="stylesheet">. <link href="static/css/index.css" rel="stylesheet">... <script charset="U

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24050)
Category:	downloaded
Size (bytes):	24051
Entropy (8bit):	4.941039417164537
Encrypted:	false
SSDEEP:	192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk
MD5:	5E8C69A459A691B5D1B9BE442332C87D
SHA1:	F24DD1AD7C9080575D92A9A9A2C42620725EF836
SHA-256:	84E3C77025ACE5AF143972B4A40FC834DCDFD4E449D4B36A57E62326F16B3091
SHA-512:	6DB74B262D717916DE0B0B600EEAD2CC6A10E52A9E26D701FAE761FCBC931F35F251553669A92BE3B524F380F32E62AC6AD572BEA23C78965228CE9EFB92ED42
Malicious:	false
Reputation:	low
URL:	https://binidotocyles.pages.dev/cdn-cgi/styles/cf.errors.css
Preview:	#cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapper del,#cf-wrapper details,#cf-wrapper dfn,#cf-wrapper div,#cf-wrapper dl,#cf-wrapper dt,#cf-wrapper em,#cf-wrapper embed,#cf-wrapper fieldset,#cf-wrapper figcaption,#cf-wrapper figure,#cf-wrapper footer,#cf-wrapper form,#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3,#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper header,#cf-wrapper hgroup,#cf-wrapper html,#cf-wrapper i,#cf-wrapper iframe,#cf-wrapper img,#cf-wrapper label,#cf-wrapper legend,#cf-wrapper li,#cf-wrapper mark,#cf-wrapper menu,#cf-wrapper nav,#cf-wrapper object,#cf-wrapper ol,#cf-wrapper output,#cf-wrapper p,#cf-wrapper pre,#cf-wrapper s,#cf-wrapper samp,#cf-wrapper section,#cf-wrapper small,#cf-wrapper span,#cf-wrapper strike,#cf-wrapper strong,#cf-wrapper sub,#cf-w

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
Reputation:	low
URL:	https://binidotocyles.pages.dev/cdn-cgi/images/icon-exclamation.png?1376755637
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 06:13:26.949110985 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 29, 2024 06:13:36.558500051 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 29, 2024 06:13:38.573211908 CEST	49735	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:38.573277950 CEST	443	49735	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:38.573352098 CEST	49735	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:38.573642969 CEST	49736	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:38.573719978 CEST	443	49736	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:38.573771954 CEST	49736	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:38.573934078 CEST	49735	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:38.573968887 CEST	443	49735	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:38.574224949 CEST	49736	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:38.574248075 CEST	443	49736	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.070302963 CEST	443	49735	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.070656061 CEST	49735	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.070708990 CEST	443	49735	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.071710110 CEST	443	49735	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.071793079 CEST	49735	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.072892904 CEST	49735	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.072918892 CEST	49735	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.072988033 CEST	443	49735	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.072997093 CEST	49735	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.073054075 CEST	49735	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.073333025 CEST	49737	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.073381901 CEST	443	49737	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.073481083 CEST	49737	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.073802948 CEST	49737	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.073815107 CEST	443	49737	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.090996981 CEST	443	49736	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.091290951 CEST	49736	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.091332912 CEST	443	49736	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.092329025 CEST	443	49736	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.092432022 CEST	49736	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.092747927 CEST	49736	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.092761040 CEST	49736	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.092799902 CEST	443	49736	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.092811108 CEST	49736	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.092863083 CEST	49736	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.093099117 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.093141079 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.093260050 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.093543053 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.093554020 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.097603083 CEST	49739	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:13:39.097645044 CEST	443	49739	142.250.185.100	192.168.2.4
Sep 29, 2024 06:13:39.097717047 CEST	49739	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:13:39.097934961 CEST	49739	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:13:39.097944975 CEST	443	49739	142.250.185.100	192.168.2.4
Sep 29, 2024 06:13:39.553678036 CEST	443	49737	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.554071903 CEST	49737	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.554097891 CEST	443	49737	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.554996014 CEST	443	49737	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.555073977 CEST	49737	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.556109905 CEST	49737	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.556207895 CEST	443	49737	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.556334019 CEST	49737	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.556343079 CEST	443	49737	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.558621883 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.558815002 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.558825016 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.559767962 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.559851885 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.560762882 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.560821056 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.606628895 CEST	49737	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.606628895 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.606694937 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.651196003 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.688999891 CEST	443	49737	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.689047098 CEST	443	49737	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.689218998 CEST	49737	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.689243078 CEST	443	49737	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.692548990 CEST	443	49737	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.692749977 CEST	49737	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.692769051 CEST	443	49737	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.693392038 CEST	443	49737	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.693449974 CEST	49737	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.694005013 CEST	49737	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.694022894 CEST	443	49737	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.704736948 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.751419067 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.801454067 CEST	443	49739	142.250.185.100	192.168.2.4
Sep 29, 2024 06:13:39.802376032 CEST	49739	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:13:39.802397966 CEST	443	49739	142.250.185.100	192.168.2.4
Sep 29, 2024 06:13:39.803306103 CEST	443	49739	142.250.185.100	192.168.2.4
Sep 29, 2024 06:13:39.803379059 CEST	49739	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:13:39.820621967 CEST	49739	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:13:39.820848942 CEST	443	49739	142.250.185.100	192.168.2.4
Sep 29, 2024 06:13:39.835922956 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.835968018 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.835990906 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.836014986 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.836034060 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.836036921 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.836051941 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.836101055 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.836101055 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.836896896 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.837053061 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.837104082 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.837124109 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.837791920 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.837862015 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.837874889 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.867966890 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.868067026 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.868091106 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.873718977 CEST	49739	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:13:39.873752117 CEST	443	49739	142.250.185.100	192.168.2.4
Sep 29, 2024 06:13:39.923444033 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.923548937 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.923582077 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.923608065 CEST	49739	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:13:39.923970938 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.924005032 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.924026966 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.924047947 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.924087048 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.924096107 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.924133062 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:39.924173117 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.962282896 CEST	49738	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:39.962310076 CEST	443	49738	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:40.307779074 CEST	49742	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:40.307822943 CEST	443	49742	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:40.307877064 CEST	49742	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:40.308536053 CEST	49742	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:40.308547974 CEST	443	49742	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:40.816057920 CEST	443	49742	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:40.825408936 CEST	49742	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:40.825423956 CEST	443	49742	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:40.826447010 CEST	443	49742	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:40.826514959 CEST	49742	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:40.834372997 CEST	49742	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:40.834388018 CEST	49742	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:40.834424019 CEST	443	49742	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:40.834434032 CEST	49742	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:40.834470034 CEST	49742	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:40.834980965 CEST	49743	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:40.835026026 CEST	443	49743	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:40.835084915 CEST	49743	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:40.835654020 CEST	49743	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:40.835664988 CEST	443	49743	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:41.351645947 CEST	443	49743	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:41.361650944 CEST	49743	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:41.361696005 CEST	443	49743	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:41.362180948 CEST	443	49743	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:41.364563942 CEST	49743	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:41.364645004 CEST	443	49743	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:41.365021944 CEST	49743	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:41.411403894 CEST	443	49743	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:41.519968033 CEST	443	49743	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:41.520051003 CEST	443	49743	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:41.520139933 CEST	49743	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:41.521375895 CEST	49743	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:41.521421909 CEST	443	49743	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:41.891279936 CEST	49744	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:41.891426086 CEST	443	49744	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:41.891511917 CEST	49744	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:41.891880035 CEST	49744	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:41.891916990 CEST	443	49744	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:41.962924957 CEST	49745	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:41.962981939 CEST	443	49745	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:41.963217020 CEST	49745	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:41.963619947 CEST	49745	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:41.963634014 CEST	443	49745	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:42.014048100 CEST	49746	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:42.014153957 CEST	443	49746	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:42.014331102 CEST	49746	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:42.018014908 CEST	49746	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:42.018055916 CEST	443	49746	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:42.393959045 CEST	443	49744	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:42.448585033 CEST	49744	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.489495039 CEST	443	49745	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:42.539350986 CEST	49745	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.715442896 CEST	49744	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.715523005 CEST	443	49744	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:42.715692043 CEST	49745	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.715732098 CEST	443	49745	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:42.716696024 CEST	443	49744	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:42.716710091 CEST	443	49744	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:42.716773033 CEST	49744	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.717417002 CEST	49744	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.717490911 CEST	49744	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.717490911 CEST	443	49744	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:42.717588902 CEST	49744	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.717621088 CEST	443	49744	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:42.717647076 CEST	49744	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.717740059 CEST	49744	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.718230963 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.718283892 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:42.718463898 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.718914986 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.718936920 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:42.720163107 CEST	443	49745	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:42.720241070 CEST	49745	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.720930099 CEST	49745	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.720977068 CEST	49745	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.721149921 CEST	49745	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.721170902 CEST	443	49745	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:42.721247911 CEST	49745	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.721645117 CEST	49748	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.721690893 CEST	443	49748	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:42.721873999 CEST	49748	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.730145931 CEST	49748	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:42.730180025 CEST	443	49748	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:42.769680977 CEST	443	49746	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:42.769790888 CEST	49746	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:42.788815022 CEST	49746	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:42.788868904 CEST	443	49746	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:42.789937019 CEST	443	49746	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:42.838776112 CEST	49746	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:42.874902964 CEST	49746	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:42.915401936 CEST	443	49746	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:43.069197893 CEST	443	49746	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:43.069282055 CEST	443	49746	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:43.069365025 CEST	49746	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:43.074599028 CEST	49746	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:43.074652910 CEST	443	49746	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:43.074712038 CEST	49746	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:43.074729919 CEST	443	49746	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:43.156039953 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:43.156105995 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:43.156176090 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:43.156501055 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:43.156517982 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:43.295114994 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.295578957 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.295650005 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.296689034 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.296767950 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.297333956 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.297399998 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.297605038 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.297621965 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.304311991 CEST	443	49748	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.304547071 CEST	49748	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.304575920 CEST	443	49748	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.305641890 CEST	443	49748	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.305706024 CEST	49748	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.306171894 CEST	49748	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.306237936 CEST	443	49748	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.306427002 CEST	49748	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.306436062 CEST	443	49748	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.338758945 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.354377031 CEST	49748	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.467828035 CEST	443	49748	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.467945099 CEST	443	49748	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.467993975 CEST	49748	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.469007015 CEST	49748	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.469021082 CEST	443	49748	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.535223961 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.535269976 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.535296917 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.535320044 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.535326958 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.535351038 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.535362005 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.535372019 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.535422087 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.539737940 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.539776087 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.539793015 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.539822102 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.539872885 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.539921999 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.555095911 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.555700064 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.555748940 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.555778027 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.604422092 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.627885103 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.628005981 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.628066063 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.629077911 CEST	49747	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.629117966 CEST	443	49747	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.636425972 CEST	49750	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.636475086 CEST	443	49750	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.636564970 CEST	49750	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.659503937 CEST	49750	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:43.659538031 CEST	443	49750	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:43.943593025 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:43.943676949 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:43.946830034 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:43.946841955 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:43.947122097 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:43.951111078 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:43.991416931 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:44.165777922 CEST	443	49750	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.166349888 CEST	49750	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.166378021 CEST	443	49750	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.167339087 CEST	443	49750	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.167417049 CEST	49750	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.168704987 CEST	49750	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.168730021 CEST	49750	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.168777943 CEST	443	49750	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.168932915 CEST	443	49750	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.168972015 CEST	49750	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.169146061 CEST	49750	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.169162035 CEST	443	49750	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.169169903 CEST	49750	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.169203997 CEST	49750	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.169892073 CEST	49751	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.169945955 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.170001030 CEST	49751	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.170466900 CEST	49751	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.170488119 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.247832060 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:44.247903109 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:44.247958899 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:44.250211954 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:44.250227928 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:44.250250101 CEST	49749	443	192.168.2.4	184.28.90.27
Sep 29, 2024 06:13:44.250256062 CEST	443	49749	184.28.90.27	192.168.2.4
Sep 29, 2024 06:13:44.661415100 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.661817074 CEST	49751	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.661848068 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.662201881 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.663563967 CEST	49751	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.663665056 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.663963079 CEST	49751	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.707443953 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.841845989 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.841908932 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.841948032 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.841969013 CEST	49751	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.842001915 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.842524052 CEST	49751	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.843502998 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.843581915 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.843607903 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.843632936 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.843655109 CEST	49751	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.843656063 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.843666077 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.843677998 CEST	49751	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.843703985 CEST	49751	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.843708038 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.887070894 CEST	49751	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.887080908 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.932368040 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.932483912 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:44.932519913 CEST	49751	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.932579041 CEST	49751	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.932837009 CEST	49751	443	192.168.2.4	172.66.44.58
Sep 29, 2024 06:13:44.932888031 CEST	443	49751	172.66.44.58	192.168.2.4
Sep 29, 2024 06:13:49.670834064 CEST	443	49739	142.250.185.100	192.168.2.4
Sep 29, 2024 06:13:49.670896053 CEST	443	49739	142.250.185.100	192.168.2.4
Sep 29, 2024 06:13:49.670943975 CEST	49739	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:13:49.872092962 CEST	49739	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:13:49.872122049 CEST	443	49739	142.250.185.100	192.168.2.4
Sep 29, 2024 06:14:39.141695976 CEST	49760	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:14:39.141758919 CEST	443	49760	142.250.185.100	192.168.2.4
Sep 29, 2024 06:14:39.141948938 CEST	49760	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:14:39.142436981 CEST	49760	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:14:39.142451048 CEST	443	49760	142.250.185.100	192.168.2.4
Sep 29, 2024 06:14:39.854577065 CEST	443	49760	142.250.185.100	192.168.2.4
Sep 29, 2024 06:14:39.855077028 CEST	49760	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:14:39.855107069 CEST	443	49760	142.250.185.100	192.168.2.4
Sep 29, 2024 06:14:39.855475903 CEST	443	49760	142.250.185.100	192.168.2.4
Sep 29, 2024 06:14:39.856364012 CEST	49760	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:14:39.856451035 CEST	443	49760	142.250.185.100	192.168.2.4
Sep 29, 2024 06:14:39.901551962 CEST	49760	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:14:43.261272907 CEST	49723	80	192.168.2.4	88.221.110.91
Sep 29, 2024 06:14:43.280396938 CEST	80	49723	88.221.110.91	192.168.2.4
Sep 29, 2024 06:14:43.280457020 CEST	49723	80	192.168.2.4	88.221.110.91
Sep 29, 2024 06:14:49.773571968 CEST	443	49760	142.250.185.100	192.168.2.4
Sep 29, 2024 06:14:49.773637056 CEST	443	49760	142.250.185.100	192.168.2.4
Sep 29, 2024 06:14:49.773713112 CEST	49760	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:14:51.702078104 CEST	49760	443	192.168.2.4	142.250.185.100
Sep 29, 2024 06:14:51.702112913 CEST	443	49760	142.250.185.100	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 06:13:36.765269041 CEST	53	52390	1.1.1.1	192.168.2.4
Sep 29, 2024 06:13:36.813708067 CEST	53	51135	1.1.1.1	192.168.2.4
Sep 29, 2024 06:13:37.815541029 CEST	53	58673	1.1.1.1	192.168.2.4
Sep 29, 2024 06:13:38.553106070 CEST	50221	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:13:38.553430080 CEST	60707	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:13:38.570760965 CEST	53	60707	1.1.1.1	192.168.2.4
Sep 29, 2024 06:13:38.572673082 CEST	53	50221	1.1.1.1	192.168.2.4
Sep 29, 2024 06:13:39.089849949 CEST	60379	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:13:39.090003014 CEST	54290	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:13:39.096527100 CEST	53	54290	1.1.1.1	192.168.2.4
Sep 29, 2024 06:13:39.096577883 CEST	53	60379	1.1.1.1	192.168.2.4
Sep 29, 2024 06:13:41.928865910 CEST	57703	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:13:41.929231882 CEST	64802	53	192.168.2.4	1.1.1.1
Sep 29, 2024 06:13:41.958343983 CEST	53	64802	1.1.1.1	192.168.2.4
Sep 29, 2024 06:13:41.960602045 CEST	53	57703	1.1.1.1	192.168.2.4
Sep 29, 2024 06:13:54.741127968 CEST	53	56450	1.1.1.1	192.168.2.4
Sep 29, 2024 06:13:54.841303110 CEST	138	138	192.168.2.4	192.168.2.255
Sep 29, 2024 06:14:13.706001997 CEST	53	59181	1.1.1.1	192.168.2.4
Sep 29, 2024 06:14:36.337116957 CEST	53	57868	1.1.1.1	192.168.2.4
Sep 29, 2024 06:14:36.682521105 CEST	53	52578	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 06:13:38.553106070 CEST	192.168.2.4	1.1.1.1	0xb55b	Standard query (0)	binidotocyles.pages.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:13:38.553430080 CEST	192.168.2.4	1.1.1.1	0x2ca0	Standard query (0)	binidotocyles.pages.dev	65	IN (0x0001)	false
Sep 29, 2024 06:13:39.089849949 CEST	192.168.2.4	1.1.1.1	0xd65b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:13:39.090003014 CEST	192.168.2.4	1.1.1.1	0x643a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 06:13:41.928865910 CEST	192.168.2.4	1.1.1.1	0x8beb	Standard query (0)	binidotocyles.pages.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:13:41.929231882 CEST	192.168.2.4	1.1.1.1	0x550c	Standard query (0)	binidotocyles.pages.dev	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 06:13:38.570760965 CEST	1.1.1.1	192.168.2.4	0x2ca0	No error (0)	binidotocyles.pages.dev			65	IN (0x0001)	false
Sep 29, 2024 06:13:38.572673082 CEST	1.1.1.1	192.168.2.4	0xb55b	No error (0)	binidotocyles.pages.dev		172.66.44.58	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:13:38.572673082 CEST	1.1.1.1	192.168.2.4	0xb55b	No error (0)	binidotocyles.pages.dev		172.66.47.198	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:13:39.096527100 CEST	1.1.1.1	192.168.2.4	0x643a	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 06:13:39.096577883 CEST	1.1.1.1	192.168.2.4	0xd65b	No error (0)	www.google.com		142.250.185.100	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:13:41.958343983 CEST	1.1.1.1	192.168.2.4	0x550c	No error (0)	binidotocyles.pages.dev			65	IN (0x0001)	false
Sep 29, 2024 06:13:41.960602045 CEST	1.1.1.1	192.168.2.4	0x8beb	No error (0)	binidotocyles.pages.dev		172.66.44.58	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:13:41.960602045 CEST	1.1.1.1	192.168.2.4	0x8beb	No error (0)	binidotocyles.pages.dev		172.66.47.198	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:13:52.249223948 CEST	1.1.1.1	192.168.2.4	0x46c0	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 06:13:52.249223948 CEST	1.1.1.1	192.168.2.4	0x46c0	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:14:09.862250090 CEST	1.1.1.1	192.168.2.4	0x2f7a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 06:14:09.862250090 CEST	1.1.1.1	192.168.2.4	0x2f7a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:14:28.816001892 CEST	1.1.1.1	192.168.2.4	0x96d6	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 06:14:28.816001892 CEST	1.1.1.1	192.168.2.4	0x96d6	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 06:14:49.710093021 CEST	1.1.1.1	192.168.2.4	0x7f5b	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 06:14:49.710093021 CEST	1.1.1.1	192.168.2.4	0x7f5b	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

binidotocyles.pages.dev

https:

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	172.66.44.58	443	2120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:13:39 UTC	666	OUT	GET / HTTP/1.1 Host: binidotocyles.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:13:39 UTC	604	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 04:13:39 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kk3ORgASJsnkX092ZuHS7MgG9nDeEtVSgKiHK8k%2BQ1lpRSz3VqRzxQa8liUplUTAxk4AwSjd%2Fo7ztn%2BtfIUqq4qWgc5L6ombfyJsqmxDHuR9G5HJzUFBtvtUThN8wpYrkolYG8x6LGDiHw%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ca92452bb000f70-EWR
2024-09-29 04:13:39 UTC	765	IN	Data Raw: 31 31 32 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 112a<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-09-29 04:13:39 UTC	1369	IN	Data Raw: 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f 6e 20 28 29 Data Ascii: lesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', function ()
2024-09-29 04:13:39 UTC	1369	IN	Data Raw: 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 74 6f 6b 22 20 76 61 6c 75 65 3d 22 48 5f 4f 6c 4a 4a 2e 5a 45 62 6d 5f 56 52 59 30 46 64 7a 33 5a 46 46 57 31 77 50 71 7a 52 44 67 5f 59 6b 73 48 79 49 79 34 6d 34 2d 31 37 32 37 35 38 33 32 31 39 2d 30 2e 30 2e 31 2e 31 2d 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 2f 61 63 63 Data Ascii: phish-bypass" method="GET" enctype="text/plain"> <input type="hidden" name="atok" value="H_OlJJ.ZEbm_VRY0Fdz3ZFFW1wPqzRDg_YksHyIy4m4-1727583219-0.0.1.1-/"> <a href="https://www.cloudflare.com/learning/acc
2024-09-29 04:13:39 UTC	899	IN	Data Raw: 33 33 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d 6c 61 6e 64 Data Ascii: 33</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-land
2024-09-29 04:13:39 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49738	172.66.44.58	443	2120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:13:39 UTC	573	OUT	GET /cdn-cgi/styles/cf.errors.css HTTP/1.1 Host: binidotocyles.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://binidotocyles.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:13:39 UTC	411	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 04:13:39 GMT Content-Type: text/css Content-Length: 24051 Connection: close Last-Modified: Thu, 26 Sep 2024 09:13:11 GMT ETag: "66f525a7-5df3" Server: cloudflare CF-RAY: 8ca924537fd90c78-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sun, 29 Sep 2024 06:13:39 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-09-29 04:13:39 UTC	958	IN	Data Raw: 23 63 66 2d 77 72 61 70 70 65 72 20 61 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 62 62 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 72 74 69 63 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 73 69 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 69 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 6e 76 61 73 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 70 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 65 6e 74 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 69 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 6f 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 64 64 2c 23 63 66 2d 77 72 61 70 70 Data Ascii: #cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapp
2024-09-29 04:13:39 UTC	1369	IN	Data Raw: 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 6d 6d 61 72 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 61 62 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 66 6f 6f 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 65 61 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f Data Ascii: e,#cf-wrapper strong,#cf-wrapper sub,#cf-wrapper summary,#cf-wrapper sup,#cf-wrapper table,#cf-wrapper tbody,#cf-wrapper td,#cf-wrapper tfoot,#cf-wrapper th,#cf-wrapper thead,#cf-wrapper tr,#cf-wrapper tt,#cf-wrapper u,#cf-wrapper ul{margin:0;padding:0;bo
2024-09-29 04:13:39 UTC	1369	IN	Data Raw: 31 2e 35 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 34 36 2c 31 33 39 2c 33 31 2c 2e 33 29 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 73 65 63 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 65 6d Data Ascii: 1.5!important;text-decoration:none!important;letter-spacing:normal;-webkit-tap-highlight-color:rgba(246,139,31,.3);-webkit-font-smoothing:antialiased}#cf-wrapper .cf-section,#cf-wrapper section{background:0 0;display:block;margin-bottom:2em;margin-top:2em
2024-09-29 04:13:39 UTC	1369	IN	Data Raw: 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 74 77 6f 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 32 2e 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 32 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 Data Ascii: ld(2n),#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.four>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.two>.cf-column:nth-child(2n){padding-left:22.5px;padding-right:0}#cf-wrapper .cf-columns.cols-2>.cf-column:nth-chi
2024-09-29 04:13:39 UTC	1369	IN	Data Raw: 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 7b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 6e 2b 31 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 Data Ascii: ),#cf-wrapper .cf-columns.four>.cf-column:nth-child(odd){clear:none}#cf-wrapper .cf-columns.cols-4>.cf-column:first-child,#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(4n+1),#cf-wrapper .cf-columns.four>.cf-column:first-child,#cf-wrapper .cf-columns
2024-09-29 04:13:39 UTC	1369	IN	Data Raw: 30 3b 70 61 64 64 69 6e 67 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 23 63 66 2d 77 72 61 70 70 65 Data Ascii: 0;padding:0}#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3{font-weight:400}#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper strong{font-weight:600}#cf-wrapper h1{font-size:36px;line-height:1.2}#cf-wrapper h2{font-size:30px;line-height:1.3}#cf-wrappe
2024-09-29 04:13:39 UTC	1369	IN	Data Raw: 68 32 2b 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 6f 6c 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 63 6f 6c Data Ascii: h2+h4,#cf-wrapper h2+h5,#cf-wrapper h2+h6,#cf-wrapper h3+h5,#cf-wrapper h3+h6,#cf-wrapper h3+p,#cf-wrapper h4+p,#cf-wrapper h5+ol,#cf-wrapper h5+p,#cf-wrapper h5+ul{margin-top:.5em}#cf-wrapper .cf-btn{background-color:transparent;border:1px solid #999;col
2024-09-29 04:13:39 UTC	1369	IN	Data Raw: 3a 23 36 32 61 31 64 38 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 36 33 39 35 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 69 6d 70 6f 72 74 61 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 64 32 34 32 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 3a 68 6f 76 65 72 2c 23 Data Ascii: :#62a1d8;border:1px solid #163959;color:#fff}#cf-wrapper .cf-btn-danger,#cf-wrapper .cf-btn-error,#cf-wrapper .cf-btn-important{background-color:#bd2426;border-color:transparent;color:#fff}#cf-wrapper .cf-btn-danger:hover,#cf-wrapper .cf-btn-error:hover,#
2024-09-29 04:13:39 UTC	1369	IN	Data Raw: 61 63 65 3a 6e 6f 77 72 61 70 7d 23 63 66 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 6c 65 63 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 65 78 74 61 72 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 34 30 34 30 34 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 36 36 36 37 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 34 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e Data Ascii: ace:nowrap}#cf-wrapper input,#cf-wrapper select,#cf-wrapper textarea{background:#fff!important;border:1px solid #999!important;color:#404040!important;font-size:.86667em!important;line-height:1.24!important;margin:0 0 1em!important;max-width:100%!importan
2024-09-29 04:13:39 UTC	1369	IN	Data Raw: 3a 23 34 30 34 30 34 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 70 61 64 64 69 6e 67 3a 37 2e 35 70 78 20 31 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 20 2e 63 66 2d 63 6c 6f 73 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 2e 37 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 70 61 64 64 69 6e Data Ascii: :#404040;font-size:13px;padding:7.5px 15px;position:relative;vertical-align:middle;border-radius:2px}#cf-wrapper .cf-alert:empty{display:none}#cf-wrapper .cf-alert .cf-close{border:1px solid transparent;color:inherit;font-size:18.75px;line-height:1;paddin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49743	172.66.44.58	443	2120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:13:41 UTC	665	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: binidotocyles.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://binidotocyles.pages.dev/cdn-cgi/styles/cf.errors.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:13:41 UTC	409	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 04:13:41 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Thu, 26 Sep 2024 09:13:11 GMT ETag: "66f525a7-1c4" Server: cloudflare CF-RAY: 8ca9245e2f847cac-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sun, 29 Sep 2024 06:13:41 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-09-29 04:13:41 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49746	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:13:42 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 04:13:43 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=131480 Date: Sun, 29 Sep 2024 04:13:42 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49747	172.66.44.58	443	2120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:13:43 UTC	602	OUT	GET /favicon.ico HTTP/1.1 Host: binidotocyles.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://binidotocyles.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:13:43 UTC	739	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 04:13:43 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=6NUzodvYqOO06AFEATjD6mBgI%2BUvibGBvbpO0EVwcN5wvPyQzdE7sLTXIuUZQx1%2B986lSqgSidxLEfLgTDV49Cp5WPmRStTCNkamnMG6QZmZOLD1G7ZQS9FiJKloCy2GpgVLUqij4oV0eg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ca9246a2caf8c8a-EWR
2024-09-29 04:13:43 UTC	630	IN	Data Raw: 34 31 63 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 0a 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 66 30 39 66 65 36 2d 35 34 36 34 36 32 36 37 33 39 37 62 39 31 66 34 38 66 39 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 66 61 76 69 63 6f 6e 2e 70 6e 67 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: 41c7<!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <script src="/f09fe6-54646267397b91f48f9.js"></script> <link rel="shortcut icon" href="favicon.png"> <meta name="language" content="en"> <meta name="viewport" content=
2024-09-29 04:13:43 UTC	1369	IN	Data Raw: 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 44 65 63 65 6e 74 72 61 6c 69 7a 65 64 20 44 61 70 70 73 20 2d 20 57 65 20 61 72 65 20 75 6e 69 66 79 69 6e 67 20 57 65 62 33 20 62 79 20 70 72 6f 76 69 64 69 6e 67 20 62 65 73 74 2d 69 6e 2d 63 6c 61 73 73 2c 20 73 65 6c 66 2d 63 75 73 74 6f 64 69 61 6c 2c 20 61 6e 64 20 6d 75 6c 74 69 63 68 61 69 6e 20 73 75 70 70 6f 72 74 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 73 74 61 74 69 63 2f 63 73 73 2f 32 2e 31 34 64 63 61 35 30 32 2e 63 68 75 6e 6b 2e 63 73 73 22 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 68 72 65 66 3d 22 73 74 61 74 69 63 2f 63 73 73 2f 6d 61 Data Ascii: nifest" href="manifest.json"> <title>Decentralized Dapps - We are unifying Web3 by providing best-in-class, self-custodial, and multichain support</title> <link href="static/css/2.14dca502.chunk.css" rel="stylesheet"> <link href="static/css/ma
2024-09-29 04:13:43 UTC	1369	IN	Data Raw: 65 3d 22 68 65 69 67 68 74 3a 34 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 3b 6d 61 72 67 69 6e 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 77 69 64 67 65 74 2e 63 6f 69 6e 6c 69 62 2e 69 6f 2f 77 69 64 67 65 74 3f 74 79 70 65 3d 68 6f 72 69 7a 6f 6e 74 61 6c 5f 76 32 26 61 6d 70 3b 74 68 65 6d 65 3d 64 61 72 6b 26 61 6d 70 3b 70 72 65 66 5f 63 6f 69 6e 5f 69 64 3d 31 35 30 35 26 61 6d 70 3b 69 6e 76 65 72 74 5f 68 6f 76 65 72 3d 6e 6f 22 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 33 36 70 78 22 20 73 63 72 6f 6c 6c 69 6e 67 3d 22 61 75 74 6f 22 20 6d 61 72 67 69 6e 77 69 64 74 68 3d 22 30 22 20 6d Data Ascii: e="height:40px;padding:0;margin:0;width:100%"> <iframe src="https://widget.coinlib.io/widget?type=horizontal_v2&theme=dark&pref_coin_id=1505&invert_hover=no" width="100%" height="36px" scrolling="auto" marginwidth="0" m
2024-09-29 04:13:43 UTC	1369	IN	Data Raw: 75 72 6e 20 74 5b 65 5d 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 74 5b 65 5d 3d 7b 69 3a 65 2c 6c 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 72 65 74 75 72 6e 20 6c 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 72 2c 72 2e 65 78 70 6f 72 74 73 2c 66 29 2c 72 2e 6c 3d 21 30 2c 72 2e 65 78 70 6f 72 74 73 7d 66 2e 6d 3d 6c 2c 66 2e 63 3d 74 2c 66 2e 64 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 2c 74 29 7b 66 2e 6f 28 65 2c 72 29 7c 7c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 74 7d 29 7d 2c 66 2e 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 Data Ascii: urn t[e].exports;var r=t[e]={i:e,l:!1,exports:{}};return l[e].call(r.exports,r,r.exports,f),r.l=!0,r.exports}f.m=l,f.c=t,f.d=function(e,r,t){f.o(e,r)\|\|Object.defineProperty(e,r,{enumerable:!0,get:t})},f.r=function(e){"undefined"!=typeof Symbol&&Symbol.toS
2024-09-29 04:13:43 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 2d 69 43 66 4d 4c 75 20 66 46 70 59 52 50 20 77 65 62 33 6d 6f 64 61 6c 2d 6d 6f 64 61 6c 2d 68 69 74 62 6f 78 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 2d 66 75 72 77 63 72 20 63 43 45 78 6b 7a 20 77 65 62 33 6d 6f 64 61 6c 2d 6d 6f 64 61 6c 2d 63 61 72 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 2d 65 43 49 6d 50 62 20 63 53 61 4a 61 65 20 77 65 62 33 6d 6f 64 61 6c 2d 70 72 6f 76 69 64 65 72 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div class="sc-iCfMLu fFpYRP web3modal-modal-hitbox"></div> <div class="sc-furwcr cCExkz web3modal-modal-card"> <div class="sc-eCImPb cSaJae web3modal-provider-wrapper">
2024-09-29 04:13:43 UTC	1369	IN	Data Raw: 67 4d 54 45 75 4e 69 30 78 4f 53 34 33 49 44 45 32 4c 6a 6b 74 4f 53 41 31 4c 6a 51 74 4d 6a 41 75 4d 79 41 78 4d 53 34 79 4c 54 4d 30 4c 6a 4d 67 4d 6a 41 75 4e 47 77 33 4c 6a 63 67 4d 54 45 75 4e 57 4d 78 4d 79 34 7a 4c 54 67 75 4f 43 41 79 4e 43 34 7a 4c 54 45 30 4c 6a 55 67 4d 7a 4d 75 4e 79 30 79 4d 43 34 78 49 44 6b 75 4e 53 30 31 4c 6a 63 67 4d 54 63 75 4f 43 30 78 4d 53 34 35 49 44 49 30 4c 6a 45 74 4d 6a 45 67 4e 69 34 7a 4c 54 6b 75 4e 43 41 78 4d 43 34 31 4c 54 49 78 4c 6a 59 67 4d 54 4d 75 4d 69 30 7a 4f 53 34 79 49 44 49 75 4e 79 30 78 4e 79 34 30 49 44 51 75 4d 53 30 30 4d 53 41 30 4c 6a 59 74 4e 7a 4d 75 4e 58 70 74 4c 54 59 78 4c 6a 63 67 4d 54 51 79 4c 6a 52 6a 4c 54 45 7a 4c 6a 6b 74 4f 53 34 7a 4c 54 49 31 4c 6a 4d 74 4d 54 55 75 4d 53 Data Ascii: gMTEuNi0xOS43IDE2LjktOSA1LjQtMjAuMyAxMS4yLTM0LjMgMjAuNGw3LjcgMTEuNWMxMy4zLTguOCAyNC4zLTE0LjUgMzMuNy0yMC4xIDkuNS01LjcgMTcuOC0xMS45IDI0LjEtMjEgNi4zLTkuNCAxMC41LTIxLjYgMTMuMi0zOS4yIDIuNy0xNy40IDQuMS00MSA0LjYtNzMuNXptLTYxLjcgMTQyLjRjLTEzLjktOS4zLTI1LjMtMTUuMS
2024-09-29 04:13:43 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 2d 67 73 44 4b 41 51 20 69 4b 7a 6b 57 71 20 77 65 62 33 6d 6f 64 61 6c 2d 70 72 6f 76 69 64 65 72 2d 6e 61 6d 65 22 3e 4d 65 74 61 6d 61 73 6b 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 2d 64 6b 50 74 52 4e 20 6b 46 49 54 57 7a 20 77 65 62 33 6d 6f 64 61 6c 2d 70 72 6f 76 69 64 65 72 2d 64 65 73 63 72 69 70 74 69 6f 6e 22 3e 43 6f 6e 6e 65 63 74 20 74 6f 20 79 6f 75 72 20 4d 65 74 61 6d 61 73 6b 20 57 61 6c 6c 65 74 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 Data Ascii: <div class="sc-gsDKAQ iKzkWq web3modal-provider-name">Metamask</div> <div class="sc-dkPtRN kFITWz web3modal-provider-description">Connect to your Metamask Wallet</div> </div
2024-09-29 04:13:43 UTC	1369	IN	Data Raw: 49 77 4e 54 63 67 4e 69 34 77 4e 54 45 77 4f 54 41 32 59 7a 49 75 4e 54 63 32 4e 6a 51 67 4d 69 34 31 4d 54 4d 35 4d 6a 45 34 49 44 49 75 4e 54 63 32 4e 6a 51 67 4e 69 34 31 4f 44 6b 33 4f 54 51 34 49 44 41 67 4f 53 34 78 4d 44 4d 33 4d 54 63 33 62 43 30 79 4d 53 34 79 4d 54 55 35 4f 54 67 67 4d 6a 41 75 4e 6a 6b 35 4e 54 63 31 4f 57 4d 74 4d 53 34 79 4f 44 67 7a 4d 6a 45 67 4d 53 34 79 4e 54 59 35 4e 6a 45 35 4c 54 4d 75 4d 7a 63 33 4d 53 41 78 4c 6a 49 31 4e 6a 6b 32 4d 54 6b 74 4e 43 34 32 4e 6a 55 30 4d 6a 45 67 4d 47 77 74 4f 43 34 31 4d 7a 51 33 4e 6a 59 74 4f 43 34 7a 4d 6a 63 77 4d 6a 41 31 59 79 30 7a 4e 53 34 35 4e 54 41 31 4e 7a 4d 74 4d 7a 55 75 4d 44 63 31 4e 44 6b 32 4d 69 30 35 4e 43 34 79 4d 7a 63 35 4e 6a 6b 74 4d 7a 55 75 4d 44 63 31 4e Data Ascii: IwNTcgNi4wNTEwOTA2YzIuNTc2NjQgMi41MTM5MjE4IDIuNTc2NjQgNi41ODk3OTQ4IDAgOS4xMDM3MTc3bC0yMS4yMTU5OTggMjAuNjk5NTc1OWMtMS4yODgzMjEgMS4yNTY5NjE5LTMuMzc3MSAxLjI1Njk2MTktNC42NjU0MjEgMGwtOC41MzQ3NjYtOC4zMjcwMjA1Yy0zNS45NTA1NzMtMzUuMDc1NDk2Mi05NC4yMzc5NjktMzUuMDc1N
2024-09-29 04:13:43 UTC	1369	IN	Data Raw: 67 4d 43 41 75 4d 44 41 77 4d 44 41 35 4e 53 30 75 4d 44 41 77 4d 44 41 35 4c 6a 41 77 4d 44 41 78 4f 44 49 74 4c 6a 41 77 4d 44 41 78 4f 43 34 77 4d 44 41 77 4d 6a 63 33 4c 53 34 77 4d 44 41 77 4d 6a 56 73 4e 6a 41 75 4e 44 49 32 4d 54 41 32 4e 53 30 31 4f 43 34 35 4e 54 67 79 4e 54 41 34 59 7a 49 75 4e 54 63 32 4e 54 67 78 4c 54 49 75 4e 54 45 7a 4f 54 67 67 4e 69 34 33 4e 54 51 78 4e 44 49 74 4d 69 34 31 4d 54 51 77 4e 7a 51 7a 49 44 6b 75 4d 7a 4d 77 4f 44 51 74 4c 6a 41 77 4d 44 49 78 4d 44 4d 75 4d 44 41 77 4d 44 4d 33 4c 6a 41 77 4d 44 41 7a 4e 54 51 75 4d 44 41 77 4d 44 63 79 4c 6a 41 77 4d 44 41 33 4d 44 6b 75 4d 44 41 77 4d 54 41 33 4c 6a 41 77 4d 44 45 77 4e 6a 4e 73 4e 6a 41 75 4e 44 49 35 4d 44 55 32 49 44 55 34 4c 6a 6b 31 4f 44 4d 31 4e 44 Data Ascii: gMCAuMDAwMDA5NS0uMDAwMDA5LjAwMDAxODItLjAwMDAxOC4wMDAwMjc3LS4wMDAwMjVsNjAuNDI2MTA2NS01OC45NTgyNTA4YzIuNTc2NTgxLTIuNTEzOTggNi43NTQxNDItMi41MTQwNzQzIDkuMzMwODQtLjAwMDIxMDMuMDAwMDM3LjAwMDAzNTQuMDAwMDcyLjAwMDA3MDkuMDAwMTA3LjAwMDEwNjNsNjAuNDI5MDU2IDU4Ljk1ODM1ND
2024-09-29 04:13:43 UTC	1369	IN	Data Raw: 33 4c 6e 63 7a 4c 6d 39 79 5a 79 38 79 4d 44 41 77 4c 33 4e 32 5a 79 49 67 65 47 31 73 62 6e 4d 36 65 47 78 70 62 6d 73 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 45 35 4f 54 6b 76 65 47 78 70 62 6d 73 69 50 67 6f 67 49 43 41 67 50 43 45 74 4c 53 42 48 5a 57 35 6c 63 6d 46 30 62 33 49 36 49 46 4e 72 5a 58 52 6a 61 43 41 31 4e 43 34 78 49 43 67 33 4e 6a 51 35 4d 43 6b 67 4c 53 42 6f 64 48 52 77 63 7a 6f 76 4c 33 4e 72 5a 58 52 6a 61 47 46 77 63 43 35 6a 62 32 30 67 4c 53 30 2b 43 69 41 67 49 43 41 38 64 47 6c 30 62 47 55 2b 51 32 39 70 62 6d 4a 68 63 32 55 67 56 32 46 73 62 47 56 30 49 46 4e 45 53 7a 77 76 64 47 6c 30 62 47 55 2b 43 69 41 67 49 43 41 38 5a 47 56 7a 59 7a 35 44 63 6d 56 68 64 47 56 6b 49 48 64 70 64 47 Data Ascii: 3LnczLm9yZy8yMDAwL3N2ZyIgeG1sbnM6eGxpbms9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGxpbmsiPgogICAgPCEtLSBHZW5lcmF0b3I6IFNrZXRjaCA1NC4xICg3NjQ5MCkgLSBodHRwczovL3NrZXRjaGFwcC5jb20gLS0+CiAgICA8dGl0bGU+Q29pbmJhc2UgV2FsbGV0IFNESzwvdGl0bGU+CiAgICA8ZGVzYz5DcmVhdGVkIHdpdG

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49748	172.66.44.58	443	2120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:13:43 UTC	393	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: binidotocyles.pages.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:13:43 UTC	409	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 04:13:43 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Thu, 26 Sep 2024 09:13:11 GMT ETag: "66f525a7-1c4" Server: cloudflare CF-RAY: 8ca9246a3fa94263-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sun, 29 Sep 2024 06:13:43 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-09-29 04:13:43 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49749	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:13:43 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 04:13:44 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=131508 Date: Sun, 29 Sep 2024 04:13:44 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 04:13:44 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49751	172.66.44.58	443	2120	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 04:13:44 UTC	358	OUT	GET /favicon.ico HTTP/1.1 Host: binidotocyles.pages.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 04:13:44 UTC	747	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 04:13:44 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=W5rPXehPUbSc377H%2FihDEEFz%2BDi5pCpSJqUhsMvdhg08x1AeD3mlAW71nXwJ6Zy5rdJ8Es%2B0MljdOiZDws8O2jy07HND5%2F5c6Els0srqufwRkMp0QSqIsmg5mQPF%2F%2B0MFq9ArzNMYh63ew%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ca92472a891726f-EWR
2024-09-29 04:13:44 UTC	1369	IN	Data Raw: 34 31 63 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 0a 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2f 66 30 39 66 65 36 2d 35 34 36 34 36 32 36 37 33 39 37 62 39 31 66 34 38 66 39 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 66 61 76 69 63 6f 6e 2e 70 6e 67 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d Data Ascii: 41c7<!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <script src="/f09fe6-54646267397b91f48f9.js"></script> <link rel="shortcut icon" href="favicon.png"> <meta name="language" content="en"> <meta name="viewport" content=
2024-09-29 04:13:44 UTC	1369	IN	Data Raw: 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 65 6c 6f 61 64 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 2d 6c 6f 61 64 69 6e 67 20 6c 6f 61 64 69 6e 67 2d 65 66 66 65 63 74 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 68 65 61 64 65 72 20 69 64 3d 22 68 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 20 69 73 2d 66 69 78 65 64 20 69 73 2d 73 6d 61 6c 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6e 74 61 69 6e 65 72 2d 66 6c 75 69 64 Data Ascii: <div class="preloader"> <div class="clear-loading loading-effect-2"> <span></span> </div> </div> <header id="header" class="header is-fixed is-small"> <div class="container-fluid
2024-09-29 04:13:44 UTC	1369	IN	Data Raw: 65 6e 63 79 20 50 72 69 63 65 73 3c 2f 61 3e 26 6e 62 73 70 3b 62 79 20 43 6f 69 6e 6c 69 62 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 68 65 61 64 65 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 72 6f 6f 74 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 73 63 72 69 70 74 3e 21 66 75 6e 63 74 69 6f 6e 28 6c 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 65 29 7b 66 6f 72 28 76 61 72 20 72 2c 74 2c 6e 3d 65 5b 30 5d 2c 6f 3d 65 5b 31 5d 2c 75 3d 65 5b 32 5d 2c 66 3d 30 2c 69 3d 5b 5d 3b 66 3c 6e 2e 6c 65 6e 67 74 68 3b Data Ascii: ency Prices</a> by Coinlib</div> </div> </div> </header> <div id="root"></div> </div> <script>!function(l){function e(e){for(var r,t,n=e[0],o=e[1],u=e[2],f=0,i=[];f<n.length;
2024-09-29 04:13:44 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 66 2e 64 28 72 2c 22 61 22 2c 72 29 2c 72 7d 2c 66 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 72 29 7b 72 65 74 75 72 6e 20 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 72 29 7d 2c 66 2e 70 3d 22 69 6e 64 65 78 2e 68 74 6d 6c 22 3b 76 61 72 20 72 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 3d 77 69 6e 64 6f 77 2e 77 65 62 70 61 63 6b 4a 73 6f 6e 70 7c 7c 5b 5d 2c 6e 3d 72 2e 70 75 73 68 2e 62 69 6e 64 28 72 29 3b 72 2e 70 75 73 68 3d 65 2c 72 3d 72 2e 73 6c 69 63 65 28 29 3b 66 6f 72 28 76 61 72 20 6f 3d 30 3b 6f 3c 72 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 65 28 72 5b 6f 5d 29 3b 76 61 72 20 73 3d 6e Data Ascii: tion(){return e};return f.d(r,"a",r),r},f.o=function(e,r){return Object.prototype.hasOwnProperty.call(e,r)},f.p="index.html";var r=window.webpackJsonp=window.webpackJsonp\|\|[],n=r.push.bind(r);r.push=e,r=r.slice();for(var o=0;o<r.length;o++)e(r[o]);var s=n
2024-09-29 04:13:44 UTC	1369	IN	Data Raw: 6a 45 75 4d 79 41 33 4d 69 34 31 49 44 49 78 4c 6a 4d 74 4d 69 34 78 49 44 45 79 4f 53 34 78 4c 54 45 34 4c 6a 45 67 4d 54 45 78 4c 6a 6b 74 4e 7a 49 75 4e 53 41 78 4e 44 67 75 4d 53 30 31 4e 43 34 30 4c 54 4d 32 4c 6a 49 74 4e 7a 41 75 4d 79 30 78 4f 53 30 33 4d 69 34 30 4c 54 45 30 4f 43 34 78 49 44 6b 75 4e 53 41 77 49 44 51 7a 49 44 45 75 4e 43 41 33 4d 69 34 30 4c 54 49 78 4c 6a 4e 36 49 69 42 6d 61 57 78 73 50 53 49 6a 5a 6d 5a 6d 49 69 38 2b 50 48 42 68 64 47 67 67 5a 44 30 69 62 53 30 79 4e 7a 51 75 4e 69 30 7a 4e 44 4d 75 4e 79 41 30 4c 6a 49 74 4e 53 34 31 59 79 30 79 4c 6a 55 74 4d 53 34 35 4c 54 59 74 4d 53 34 35 4c 54 67 75 4e 53 41 77 65 6d 30 33 4d 69 34 31 49 44 49 78 4c 6a 4d 67 4e 69 34 35 4c 6a 46 6a 4d 43 30 78 4c 6a 6b 74 4c 6a 63 74 Data Ascii: jEuMyA3Mi41IDIxLjMtMi4xIDEyOS4xLTE4LjEgMTExLjktNzIuNSAxNDguMS01NC40LTM2LjItNzAuMy0xOS03Mi40LTE0OC4xIDkuNSAwIDQzIDEuNCA3Mi40LTIxLjN6IiBmaWxsPSIjZmZmIi8+PHBhdGggZD0ibS0yNzQuNi0zNDMuNyA0LjItNS41Yy0yLjUtMS45LTYtMS45LTguNSAwem03Mi41IDIxLjMgNi45LjFjMC0xLjktLjct
2024-09-29 04:13:44 UTC	1369	IN	Data Raw: 77 65 62 33 6d 6f 64 61 6c 2d 70 72 6f 76 69 64 65 72 2d 6e 61 6d 65 22 3e 54 72 75 73 74 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 2d 64 6b 50 74 52 4e 20 6b 46 49 54 57 7a 20 77 65 62 33 6d 6f 64 61 6c 2d 70 72 6f 76 69 64 65 72 2d 64 65 73 63 72 69 70 74 69 6f 6e 22 3e 43 6f 6e 6e 65 63 74 20 74 6f 20 79 6f 75 72 20 54 72 75 73 74 20 57 61 6c 6c 65 74 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: web3modal-provider-name">Trust</div> <div class="sc-dkPtRN kFITWz web3modal-provider-description">Connect to your Trust Wallet</div> </div> </div>
2024-09-29 04:13:44 UTC	1369	IN	Data Raw: 4c 6d 39 79 5a 79 38 79 4d 44 41 77 4c 33 4e 32 5a 79 49 67 65 47 31 73 62 6e 4d 36 65 47 78 70 62 6d 73 39 49 6d 68 30 64 48 41 36 4c 79 39 33 64 33 63 75 64 7a 4d 75 62 33 4a 6e 4c 7a 45 35 4f 54 6b 76 65 47 78 70 62 6d 73 69 50 6a 78 79 59 57 52 70 59 57 78 48 63 6d 46 6b 61 57 56 75 64 43 42 70 5a 44 30 69 59 53 49 67 59 33 67 39 49 6a 41 6c 49 69 42 6a 65 54 30 69 4e 54 41 6c 49 69 42 79 50 53 49 78 4d 44 41 6c 49 6a 34 38 63 33 52 76 63 43 42 76 5a 6d 5a 7a 5a 58 51 39 49 6a 41 69 49 48 4e 30 62 33 41 74 59 32 39 73 62 33 49 39 49 69 4d 31 5a 44 6c 6b 5a 6a 59 69 4c 7a 34 38 63 33 52 76 63 43 42 76 5a 6d 5a 7a 5a 58 51 39 49 6a 45 69 49 48 4e 30 62 33 41 74 59 32 39 73 62 33 49 39 49 69 4d 77 4d 44 5a 6d 5a 6d 59 69 4c 7a 34 38 4c 33 4a 68 5a 47 6c Data Ascii: Lm9yZy8yMDAwL3N2ZyIgeG1sbnM6eGxpbms9Imh0dHA6Ly93d3cudzMub3JnLzE5OTkveGxpbmsiPjxyYWRpYWxHcmFkaWVudCBpZD0iYSIgY3g9IjAlIiBjeT0iNTAlIiByPSIxMDAlIj48c3RvcCBvZmZzZXQ9IjAiIHN0b3AtY29sb3I9IiM1ZDlkZjYiLz48c3RvcCBvZmZzZXQ9IjEiIHN0b3AtY29sb3I9IiMwMDZmZmYiLz48L3JhZGl
2024-09-29 04:13:44 UTC	1369	IN	Data Raw: 6a 41 77 4d 44 41 79 4d 79 30 75 4d 44 41 77 4d 44 4d 7a 4c 53 34 77 4d 44 41 77 4d 7a 52 73 4c 54 59 77 4c 6a 51 79 4f 44 49 31 4e 69 30 31 4f 43 34 35 4e 54 63 30 4e 54 46 6a 4c 53 34 32 4e 44 51 78 4e 69 30 75 4e 6a 49 34 4e 44 67 78 4c 54 45 75 4e 6a 67 34 4e 54 55 74 4c 6a 59 79 4f 44 51 34 4d 53 30 79 4c 6a 4d 7a 4d 6a 63 78 49 44 41 74 4c 6a 41 77 4d 44 41 77 4e 43 34 77 4d 44 41 77 4d 44 51 74 4c 6a 41 77 4d 44 41 77 4f 43 34 77 4d 44 41 77 4d 44 63 74 4c 6a 41 77 4d 44 41 78 4d 69 34 77 4d 44 41 77 4d 54 46 73 4c 54 59 77 4c 6a 51 79 4e 6a 6b 32 4f 44 4d 67 4e 54 67 75 4f 54 55 33 4e 44 41 34 59 79 30 79 4c 6a 55 33 4e 6a 59 78 4e 44 45 67 4d 69 34 31 4d 54 4d 35 4e 44 63 74 4e 69 34 33 4e 54 51 78 4e 7a 51 32 49 44 49 75 4e 54 45 7a 4f 54 6b 74 Data Ascii: jAwMDAyMy0uMDAwMDMzLS4wMDAwMzRsLTYwLjQyODI1Ni01OC45NTc0NTFjLS42NDQxNi0uNjI4NDgxLTEuNjg4NTUtLjYyODQ4MS0yLjMzMjcxIDAtLjAwMDAwNC4wMDAwMDQtLjAwMDAwOC4wMDAwMDctLjAwMDAxMi4wMDAwMTFsLTYwLjQyNjk2ODMgNTguOTU3NDA4Yy0yLjU3NjYxNDEgMi41MTM5NDctNi43NTQxNzQ2IDIuNTEzOTkt
2024-09-29 04:13:44 UTC	1369	IN	Data Raw: 22 3e 53 63 61 6e 20 77 69 74 68 20 57 61 6c 6c 65 74 43 6f 6e 6e 65 63 74 20 74 6f 20 63 6f 6e 6e 65 63 74 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 2d 65 43 49 6d 50 62 20 63 53 61 4a 61 65 20 77 65 62 33 6d 6f 64 61 6c 2d 70 72 6f 76 69 64 65 72 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 2d 68 4b 77 44 79 65 20 69 57 43 71 6f 51 20 77 65 62 Data Ascii: ">Scan with WalletConnect to connect</div> </div> </div> <div class="sc-eCImPb cSaJae web3modal-provider-wrapper"> <div class="sc-hKwDye iWCqoQ web
2024-09-29 04:13:44 UTC	1369	IN	Data Raw: 6f 67 49 43 41 67 50 47 63 67 61 57 51 39 49 6c 42 68 5a 32 55 74 4d 53 49 67 63 33 52 79 62 32 74 6c 50 53 4a 75 62 32 35 6c 49 69 42 7a 64 48 4a 76 61 32 55 74 64 32 6c 6b 64 47 67 39 49 6a 45 69 49 47 5a 70 62 47 77 39 49 6d 35 76 62 6d 55 69 49 47 5a 70 62 47 77 74 63 6e 56 73 5a 54 30 69 5a 58 5a 6c 62 6d 39 6b 5a 43 49 2b 43 69 41 67 49 43 41 67 49 43 41 67 50 47 63 67 61 57 51 39 49 6d 4e 76 61 57 35 69 59 58 4e 6c 64 32 46 73 62 47 56 30 49 6a 34 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 50 47 63 67 61 57 51 39 49 6c 42 68 64 47 67 69 50 67 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 50 47 31 68 63 32 73 67 61 57 51 39 49 6d 31 68 63 32 73 74 4d 69 49 67 5a 6d 6c 73 62 44 30 69 64 32 68 70 64 47 55 69 50 67 6f 67 49 Data Ascii: ogICAgPGcgaWQ9IlBhZ2UtMSIgc3Ryb2tlPSJub25lIiBzdHJva2Utd2lkdGg9IjEiIGZpbGw9Im5vbmUiIGZpbGwtcnVsZT0iZXZlbm9kZCI+CiAgICAgICAgPGcgaWQ9ImNvaW5iYXNld2FsbGV0Ij4KICAgICAgICAgICAgPGcgaWQ9IlBhdGgiPgogICAgICAgICAgICAgICAgPG1hc2sgaWQ9Im1hc2stMiIgZmlsbD0id2hpdGUiPgogI

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1448, Parent PID: 5500

General

Target ID:	0
Start time:	00:13:31
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2120, Parent PID: 1448

General

Target ID:	2
Start time:	00:13:34
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2320 --field-trial-handle=2160,i,16399321779183125140,8074604450007266210,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6340, Parent PID: 5500

General

Target ID:	3
Start time:	00:13:37
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://binidotocyles.pages.dev/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://binidotocyles.pages.dev/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 44

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 1448, Parent PID: 5500

General

Chronological Activities

Analysis Process: chrome.exePID: 2120, Parent PID: 1448

General

Chronological Activities

Windows Analysis Report
https://binidotocyles.pages.dev/