Edit tour

Windows Analysis Report
http://smartreclaimdapp.pages.dev/

Overview

General Information

Sample URL:	http://smartreclaimdapp.pages.dev/
Analysis ID:	1522046
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected BlockedWebSite

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4564 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5820 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=2184,i,14472534721091695656,13827111411883342442,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6360 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://smartreclaimdapp.pages.dev/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_50	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security

HTML

Source	Rule	Description	Author	Strings
0.0.pages.csv	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security
0.1.pages.csv	JoeSecurity_BlockedWebSite	Yara detected BlockedWebSite	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

Phishing

Yara detected BlockedWebSite

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_50, type: DROPPED

Source: https://smartreclaimdapp.pages.dev/	HTTP Parser: No favicon
Source: https://smartreclaimdapp.pages.dev/	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: smartreclaimdapp.pages.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/styles/cf.errors.css HTTP/1.1Host: smartreclaimdapp.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://smartreclaimdapp.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: smartreclaimdapp.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://smartreclaimdapp.pages.dev/cdn-cgi/styles/cf.errors.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: smartreclaimdapp.pages.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://smartreclaimdapp.pages.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1Host: smartreclaimdapp.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: smartreclaimdapp.pages.devConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: smartreclaimdapp.pages.dev
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_48.2.dr, chromecache_46.2.dr	String found in binary or memory: https://coinlib.io/
Source: chromecache_48.2.dr, chromecache_46.2.dr	String found in binary or memory: https://simplecdnjs.pages.dev/1a573.da9ad4a725.js?v=1
Source: chromecache_48.2.dr, chromecache_46.2.dr	String found in binary or memory: https://widget.coinlib.io/widget?type=horizontal_v2&theme=dark&pref_coin_id=1505&invert_
Source: chromecache_50.2.dr	String found in binary or memory: https://www.cloudflare.com/5xx-error-landing
Source: chromecache_50.2.dr	String found in binary or memory: https://www.cloudflare.com/learning/access-management/phishing-attack/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2

Source: classification engine

Classification label: mal48.phis.win@17/10@8/5

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=2184,i,14472534721091695656,13827111411883342442,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://smartreclaimdapp.pages.dev/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=2184,i,14472534721091695656,13827111411883342442,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

⊘No Antivirus matches

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

⊘No Antivirus matches

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
smartreclaimdapp.pages.dev	172.66.47.87	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Reputation
https://smartreclaimdapp.pages.dev/	false	unknown
https://smartreclaimdapp.pages.dev/favicon.ico	false	unknown
https://smartreclaimdapp.pages.dev/cdn-cgi/styles/cf.errors.css	false	unknown
https://smartreclaimdapp.pages.dev/cdn-cgi/images/icon-exclamation.png?1376755637	false	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://www.cloudflare.com/learning/access-management/phishing-attack/	chromecache_50.2.dr	false	unknown
https://widget.coinlib.io/widget?type=horizontal_v2&theme=dark&pref_coin_id=1505&invert_	chromecache_48.2.dr, chromecache_46.2.dr	false	unknown
https://simplecdnjs.pages.dev/1a573.da9ad4a725.js?v=1	chromecache_48.2.dr, chromecache_46.2.dr	false	unknown
https://coinlib.io/	chromecache_48.2.dr, chromecache_46.2.dr	false	unknown
https://www.cloudflare.com/5xx-error-landing	chromecache_50.2.dr	false	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
172.66.47.87	smartreclaimdapp.pages.dev	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.4
192.168.2.6

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1522046
Start date and time:	2024-09-29 07:48:32 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://smartreclaimdapp.pages.dev/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@17/10@8/5
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 142.250.185.174, 142.251.168.84, 34.104.35.123, 13.85.23.86, 199.232.214.172, 192.229.221.95, 13.95.31.18, 13.85.23.206, 216.58.206.35
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://smartreclaimdapp.pages.dev/

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://smartreclaimdapp.pages.dev/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Learn More", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

URL: https://smartreclaimdapp.pages.dev/ Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"Learn More", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 45

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
Reputation:	low
URL:	https://smartreclaimdapp.pages.dev/cdn-cgi/images/icon-exclamation.png?1376755637
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Chrome Cache Entry: 46

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2652)
Category:	downloaded
Size (bytes):	18333
Entropy (8bit):	5.266537082344445
Encrypted:	false
SSDEEP:	384:wquKzNohgRzyKRICOG2f1K33XRNNnb6DO:wLoohWxOpf1qNb6DO
MD5:	9C270893BE0A1960D174A6009F4E41E4
SHA1:	9376304FF3FDE7DEAB88050235A0FF71E52CE042
SHA-256:	423126A38DE87902A8D80856B1E7C8A620FB9BB3E685DA96514CC25EAFD59212
SHA-512:	37B04E4BF3EE06B82FF785BCAFEC0975B91CC262E53CAF830827E59EF8FC24D8BCDB019DE4D9BF63233EE291C58FEF65705C2AF80E15B5039CEF447D67B83A53
Malicious:	false
Reputation:	low
URL:	https://smartreclaimdapp.pages.dev/favicon.ico
Preview:	<!doctype html>.<html lang="en">. .<meta http-equiv="content-type" content="text/html;charset=utf-8" />.<head>. <meta charset="utf-8" />. <link rel="shortcut icon" href="favicon.png" />. <meta name="language" content="en" />. <meta name="viewport" content="width=device-width,initial-scale=1" />. <meta name="theme-color" content="#000000" />. <meta. name="title". content="Decentralized Dapps - We are unifying Web3 by providing best-in-class, self-custodial, and multichain support". />. <meta. name="description". content="We are unifying Web3 by providing best-in-class, self-custodial, and multichain support". />. <link rel="manifest" href="manifest.json" />. <title>. Decentralized Dapps - We are unifying Web3 by providing best-in-class,. self-custodial, and multichain support. </title>. <link href="./static/css/2.14dca502.chunk.css" rel="stylesheet" />. <link href="./static/css/main.e94723d5.chunk.css" rel="stylesh

Chrome Cache Entry: 47

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (24050)
Category:	downloaded
Size (bytes):	24051
Entropy (8bit):	4.941039417164537
Encrypted:	false
SSDEEP:	192:VuR/6okgTQwq23gGM8lUR9YRGQ2BwoX6zp+1+nDT1FvxKSI7/UsV7MSE6XZ2dKzk:JwV+oUcoQJpdf1dxKSI7/Ue7ZX2qk
MD5:	5E8C69A459A691B5D1B9BE442332C87D
SHA1:	F24DD1AD7C9080575D92A9A9A2C42620725EF836
SHA-256:	84E3C77025ACE5AF143972B4A40FC834DCDFD4E449D4B36A57E62326F16B3091
SHA-512:	6DB74B262D717916DE0B0B600EEAD2CC6A10E52A9E26D701FAE761FCBC931F35F251553669A92BE3B524F380F32E62AC6AD572BEA23C78965228CE9EFB92ED42
Malicious:	false
Reputation:	low
URL:	https://smartreclaimdapp.pages.dev/cdn-cgi/styles/cf.errors.css
Preview:	#cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapper del,#cf-wrapper details,#cf-wrapper dfn,#cf-wrapper div,#cf-wrapper dl,#cf-wrapper dt,#cf-wrapper em,#cf-wrapper embed,#cf-wrapper fieldset,#cf-wrapper figcaption,#cf-wrapper figure,#cf-wrapper footer,#cf-wrapper form,#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3,#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper header,#cf-wrapper hgroup,#cf-wrapper html,#cf-wrapper i,#cf-wrapper iframe,#cf-wrapper img,#cf-wrapper label,#cf-wrapper legend,#cf-wrapper li,#cf-wrapper mark,#cf-wrapper menu,#cf-wrapper nav,#cf-wrapper object,#cf-wrapper ol,#cf-wrapper output,#cf-wrapper p,#cf-wrapper pre,#cf-wrapper s,#cf-wrapper samp,#cf-wrapper section,#cf-wrapper small,#cf-wrapper span,#cf-wrapper strike,#cf-wrapper strong,#cf-wrapper sub,#cf-w

Chrome Cache Entry: 48

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (2652)
Category:	dropped
Size (bytes):	18333
Entropy (8bit):	5.266537082344445
Encrypted:	false
SSDEEP:	384:wquKzNohgRzyKRICOG2f1K33XRNNnb6DO:wLoohWxOpf1qNb6DO
MD5:	9C270893BE0A1960D174A6009F4E41E4
SHA1:	9376304FF3FDE7DEAB88050235A0FF71E52CE042
SHA-256:	423126A38DE87902A8D80856B1E7C8A620FB9BB3E685DA96514CC25EAFD59212
SHA-512:	37B04E4BF3EE06B82FF785BCAFEC0975B91CC262E53CAF830827E59EF8FC24D8BCDB019DE4D9BF63233EE291C58FEF65705C2AF80E15B5039CEF447D67B83A53
Malicious:	false
Reputation:	low
Preview:	<!doctype html>.<html lang="en">. .<meta http-equiv="content-type" content="text/html;charset=utf-8" />.<head>. <meta charset="utf-8" />. <link rel="shortcut icon" href="favicon.png" />. <meta name="language" content="en" />. <meta name="viewport" content="width=device-width,initial-scale=1" />. <meta name="theme-color" content="#000000" />. <meta. name="title". content="Decentralized Dapps - We are unifying Web3 by providing best-in-class, self-custodial, and multichain support". />. <meta. name="description". content="We are unifying Web3 by providing best-in-class, self-custodial, and multichain support". />. <link rel="manifest" href="manifest.json" />. <title>. Decentralized Dapps - We are unifying Web3 by providing best-in-class,. self-custodial, and multichain support. </title>. <link href="./static/css/2.14dca502.chunk.css" rel="stylesheet" />. <link href="./static/css/main.e94723d5.chunk.css" rel="stylesh

Chrome Cache Entry: 49

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 54 x 54, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	452
Entropy (8bit):	7.0936408308765495
Encrypted:	false
SSDEEP:	12:6v/7EljW8E6Cl2SYh8SZM4tf70FSDvMXDxJp6ScFChY9:U8hCl2SIdZBtAFSDUX/ozIhK
MD5:	C33DE66281E933259772399D10A6AFE8
SHA1:	B9F9D500F8814381451011D4DCF59CD2D90AD94F
SHA-256:	F1591A5221136C49438642155691AE6C68E25B7241F3D7EBE975B09A77662016
SHA-512:	5834FB9D66F550E6CECFE484B7B6A14F3FCA795405DECE8E652BD69AD917B94B6BBDCDF7639161B9C07F0D33EABD3E79580446B5867219F72F4FC43FD43B98C3
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...6...6............3PLTE.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?.E?..".....tRNS.@0.`........ P.p`...../IDATx.....0...l..6....+...~yJ.F"....oE..L.3..[..i2..n.WyJ..z&.....F.......b....p~...\|:t5.m...fp.i./e....%.%...n.P...enV.....!...,.......E........t![HW.B.g.R.\^.e..o+........%.&-j..q...f@..o...]... ....u0.x..2K.+C..8.U.L.Y.[=.....y...o.tF..]M..U.,4..........a.>/.)....C3gNI.i...R.=....Q7..K......IEND.B`.

Chrome Cache Entry: 50

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (394)
Category:	downloaded
Size (bytes):	4394
Entropy (8bit):	5.08177556243886
Encrypted:	false
SSDEEP:	96:1j9jwIjYjUDK/D5DMF+BOis5A2ZLimOTrR49PaQxJbGD:1j9jhjYjIK/Vo+tszZOmOTrO9ieJGD
MD5:	C73354DAFD25A8A6709865F21A4F58F5
SHA1:	DA6B3082A50B2646AD69D8F0C53615D76124836A
SHA-256:	2FF005D90C62CAF202B9976E1C3B9DDDC9AA6776D71B9223AC396AB12B122705
SHA-512:	F945DFA74CF54D89B77DBB4505498F5B9D1445335417BC811A99B920DD69BF43BCD3A12D4815631EA88B125BC34E485BC060D5A43942B2A383925C00C802E912
Malicious:	false
Reputation:	low
URL:	https://smartreclaimdapp.pages.dev/
Preview:	<!DOCTYPE html>. [if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->. [if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->. [if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->. [if gt IE 8]> > <html class="no-js" lang="en-US"> <![endif]-->.<head>.<title>Suspected phishing site \| Cloudflare</title>.<meta charset="UTF-8" />.<meta http-equiv="Content-Type" content="text/html; charset=UTF-8" />.<meta http-equiv="X-UA-Compatible" content="IE=Edge" />.<meta name="robots" content="noindex, nofollow" />.<meta name="viewport" content="width=device-width,initial-scale=1" />.<link rel="stylesheet" id="cf_styles-css" href="/cdn-cgi/styles/cf.errors.css" />. [if lt IE 9]><link rel="stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]-->.<style>body{margin:0;padding:0}</style>... [if gte IE 10]> >.<script>. if (!navigator.cookieEnabled) {. window.addEventListener('DOMContentLoaded

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 07:49:26.286061049 CEST	49675	443	192.168.2.4	173.222.162.32
Sep 29, 2024 07:49:26.825882912 CEST	49735	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:26.825922966 CEST	443	49735	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:26.826006889 CEST	49735	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:26.826389074 CEST	49735	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:26.826400995 CEST	443	49735	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.300379992 CEST	443	49735	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.300797939 CEST	49735	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.300813913 CEST	443	49735	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.302393913 CEST	443	49735	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.302505016 CEST	49735	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.303616047 CEST	49735	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.303652048 CEST	49735	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.303705931 CEST	443	49735	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.303720951 CEST	49735	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.303775072 CEST	49735	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.304138899 CEST	49737	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.304184914 CEST	443	49737	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.304274082 CEST	49737	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.304467916 CEST	49737	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.304485083 CEST	443	49737	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.782871962 CEST	443	49737	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.783346891 CEST	49737	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.783355951 CEST	443	49737	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.784365892 CEST	443	49737	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.784437895 CEST	49737	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.785526991 CEST	49737	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.785583019 CEST	443	49737	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.785785913 CEST	49737	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.785792112 CEST	443	49737	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.833182096 CEST	49737	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.906677961 CEST	443	49737	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.906724930 CEST	443	49737	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.906757116 CEST	443	49737	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.906785965 CEST	443	49737	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.906837940 CEST	49737	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.906847954 CEST	443	49737	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.906874895 CEST	443	49737	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.906889915 CEST	49737	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.906932116 CEST	49737	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.970643044 CEST	49737	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.970663071 CEST	443	49737	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.973639011 CEST	49739	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.973683119 CEST	443	49739	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:27.973756075 CEST	49739	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.974162102 CEST	49739	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:27.974173069 CEST	443	49739	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:28.436814070 CEST	443	49739	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:28.480633974 CEST	49739	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:28.577054024 CEST	49739	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:28.577078104 CEST	443	49739	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:28.578370094 CEST	443	49739	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:28.578444004 CEST	49739	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:28.579679012 CEST	49739	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:28.579695940 CEST	49739	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:28.579746962 CEST	443	49739	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:28.579865932 CEST	49739	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:28.579881907 CEST	443	49739	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:28.579890966 CEST	49739	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:28.579946995 CEST	49739	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:28.618757010 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:28.618808985 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:28.618861914 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:28.619760990 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:28.619780064 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:28.717068911 CEST	49741	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:49:28.717099905 CEST	443	49741	142.250.186.68	192.168.2.4
Sep 29, 2024 07:49:28.717159986 CEST	49741	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:49:28.718131065 CEST	49741	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:49:28.718143940 CEST	443	49741	142.250.186.68	192.168.2.4
Sep 29, 2024 07:49:29.071293116 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.071594000 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.071623087 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.071960926 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.072886944 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.072953939 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.073642015 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.119405985 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.197031975 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.197091103 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.197120905 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.197139025 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.197155952 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.197191954 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.197194099 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.197205067 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.197238922 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.197546005 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.197860003 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.197910070 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.197921038 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.197954893 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.198009014 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.198015928 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.202018023 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.202068090 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.202079058 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.254554033 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.283030987 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.283111095 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.283143997 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.283164024 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.283191919 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.283233881 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.283235073 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.283246040 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.283294916 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.283303022 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.283335924 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.283374071 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.284785986 CEST	49740	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.284804106 CEST	443	49740	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.370270967 CEST	443	49741	142.250.186.68	192.168.2.4
Sep 29, 2024 07:49:29.410742044 CEST	49741	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:49:29.487759113 CEST	49741	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:49:29.487780094 CEST	443	49741	142.250.186.68	192.168.2.4
Sep 29, 2024 07:49:29.488934040 CEST	443	49741	142.250.186.68	192.168.2.4
Sep 29, 2024 07:49:29.489001989 CEST	49741	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:49:29.541918039 CEST	49742	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.541961908 CEST	443	49742	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.542015076 CEST	49742	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.544898033 CEST	49742	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:29.544920921 CEST	443	49742	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:29.545377970 CEST	49741	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:49:29.545489073 CEST	443	49741	142.250.186.68	192.168.2.4
Sep 29, 2024 07:49:29.599471092 CEST	49741	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:49:29.599483013 CEST	443	49741	142.250.186.68	192.168.2.4
Sep 29, 2024 07:49:29.647290945 CEST	49741	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:49:29.886147976 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:29.886183977 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:29.886703014 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:29.888974905 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:29.888991117 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:30.017765045 CEST	443	49742	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:30.018124104 CEST	49742	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:30.018137932 CEST	443	49742	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:30.019140005 CEST	443	49742	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:30.019659042 CEST	49742	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:30.019659042 CEST	49742	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:30.019721985 CEST	443	49742	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:30.019752979 CEST	49742	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:30.019752979 CEST	49742	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:30.019886971 CEST	443	49742	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:30.019911051 CEST	49742	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:30.020009041 CEST	49742	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:30.020245075 CEST	49744	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:30.020283937 CEST	443	49744	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:30.020498991 CEST	49744	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:30.020637989 CEST	49744	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:30.020647049 CEST	443	49744	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:30.519289017 CEST	443	49744	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:30.523188114 CEST	49744	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:30.523197889 CEST	443	49744	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:30.524303913 CEST	443	49744	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:30.524736881 CEST	49744	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:30.546945095 CEST	49744	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:30.547065020 CEST	443	49744	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:30.549530029 CEST	49744	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:30.549546957 CEST	443	49744	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:30.567610979 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:30.567809105 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:30.576354980 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:30.576369047 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:30.576612949 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:30.597114086 CEST	49744	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:30.628985882 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:30.663507938 CEST	443	49744	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:30.663588047 CEST	443	49744	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:30.663800955 CEST	49744	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:31.398303032 CEST	49744	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:31.398319960 CEST	443	49744	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:31.480201960 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:31.480849981 CEST	49747	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:31.480881929 CEST	443	49747	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:31.480943918 CEST	49747	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:31.481879950 CEST	49747	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:31.481894016 CEST	443	49747	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:31.527400017 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:31.669143915 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:31.669214964 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:31.669260025 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:31.671729088 CEST	49743	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:31.671749115 CEST	443	49743	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:31.714328051 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:31.714353085 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:31.714420080 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:31.714827061 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:31.714838982 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:31.944962025 CEST	443	49747	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:31.945415974 CEST	49747	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:31.945435047 CEST	443	49747	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:31.946327925 CEST	443	49747	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:31.946403027 CEST	49747	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:31.946862936 CEST	49747	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:31.946923018 CEST	443	49747	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:31.946988106 CEST	49747	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:31.947017908 CEST	49747	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:31.947027922 CEST	443	49747	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:31.947074890 CEST	49747	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:31.947074890 CEST	49747	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:31.947413921 CEST	49749	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:31.947452068 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:31.947635889 CEST	49749	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:31.947889090 CEST	49749	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:31.947901011 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.135804892 CEST	49750	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.135831118 CEST	443	49750	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.135982037 CEST	49750	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.136926889 CEST	49750	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.136943102 CEST	443	49750	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.353857040 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:32.353933096 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:32.403661966 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.404417038 CEST	49749	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.404433012 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.404738903 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.408983946 CEST	49749	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.409043074 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.409574032 CEST	49749	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.423192024 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:32.423207045 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:32.423489094 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:32.424794912 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:32.451406956 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.467412949 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:32.563330889 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.563381910 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.563411951 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.563445091 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.563458920 CEST	49749	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.563473940 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.563486099 CEST	49749	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.563518047 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.563556910 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.563585997 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.563595057 CEST	49749	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.563600063 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.563622952 CEST	49749	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.563926935 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.563968897 CEST	49749	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.563976049 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.600153923 CEST	443	49750	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.614099979 CEST	49749	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.614110947 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.619066000 CEST	49750	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.619076014 CEST	443	49750	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.619987011 CEST	443	49750	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.620040894 CEST	49750	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.630081892 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:32.630142927 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:32.630206108 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:32.634424925 CEST	49750	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.634495974 CEST	443	49750	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.634613037 CEST	49750	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.634619951 CEST	443	49750	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.634767056 CEST	443	49750	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.634793997 CEST	49750	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.634800911 CEST	443	49750	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.634818077 CEST	49750	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.635294914 CEST	49751	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.635349989 CEST	443	49751	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.635571957 CEST	49751	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.638154984 CEST	49751	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.638185024 CEST	443	49751	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.649094105 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.649136066 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.649141073 CEST	49749	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.649147034 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.649184942 CEST	49749	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.649189949 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.649234056 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.649270058 CEST	49749	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.700007915 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:32.700031042 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:32.700042009 CEST	49748	443	192.168.2.4	184.28.90.27
Sep 29, 2024 07:49:32.700047016 CEST	443	49748	184.28.90.27	192.168.2.4
Sep 29, 2024 07:49:32.715862989 CEST	49749	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.715876102 CEST	443	49749	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.741059065 CEST	49752	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.741079092 CEST	443	49752	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:32.741137028 CEST	49752	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.742012024 CEST	49752	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:32.742026091 CEST	443	49752	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.096198082 CEST	443	49751	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.096503973 CEST	49751	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.096533060 CEST	443	49751	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.097532988 CEST	443	49751	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.097594976 CEST	49751	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.098042011 CEST	49751	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.098109007 CEST	443	49751	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.098192930 CEST	49751	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.139439106 CEST	443	49751	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.145380974 CEST	49751	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.145431042 CEST	443	49751	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.192265034 CEST	49751	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.216094971 CEST	443	49752	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.216327906 CEST	49752	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.216341972 CEST	443	49752	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.217303991 CEST	443	49752	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.217363119 CEST	49752	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.217684031 CEST	49752	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.217695951 CEST	49752	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.217739105 CEST	443	49752	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.217784882 CEST	49752	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.217838049 CEST	49752	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.218092918 CEST	49753	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.218127012 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.218190908 CEST	49753	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.218388081 CEST	49753	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.218400955 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.229990005 CEST	443	49751	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.230057001 CEST	443	49751	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.230144978 CEST	49751	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.230784893 CEST	49751	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.230804920 CEST	443	49751	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.693416119 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.693624973 CEST	49753	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.693638086 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.693969011 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.694587946 CEST	49753	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.694650888 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.694855928 CEST	49753	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.735409021 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.865371943 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.865452051 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.865483999 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.865530014 CEST	49753	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.865547895 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.865617037 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.865652084 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.865659952 CEST	49753	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.865669012 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.865705967 CEST	49753	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.866102934 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.866142988 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.866146088 CEST	49753	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.866156101 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.866204977 CEST	49753	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.866210938 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.911012888 CEST	49753	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.956290007 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.956353903 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.956403017 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.956450939 CEST	49753	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.956465960 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.956497908 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:33.956535101 CEST	49753	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.956553936 CEST	49753	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.964461088 CEST	49753	443	192.168.2.4	172.66.47.87
Sep 29, 2024 07:49:33.964484930 CEST	443	49753	172.66.47.87	192.168.2.4
Sep 29, 2024 07:49:39.273607969 CEST	443	49741	142.250.186.68	192.168.2.4
Sep 29, 2024 07:49:39.273672104 CEST	443	49741	142.250.186.68	192.168.2.4
Sep 29, 2024 07:49:39.273740053 CEST	49741	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:49:39.392952919 CEST	49741	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:49:39.393011093 CEST	443	49741	142.250.186.68	192.168.2.4
Sep 29, 2024 07:50:28.757811069 CEST	49762	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:50:28.757855892 CEST	443	49762	142.250.186.68	192.168.2.4
Sep 29, 2024 07:50:28.757977962 CEST	49762	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:50:28.758301020 CEST	49762	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:50:28.758326054 CEST	443	49762	142.250.186.68	192.168.2.4
Sep 29, 2024 07:50:29.425684929 CEST	443	49762	142.250.186.68	192.168.2.4
Sep 29, 2024 07:50:29.438127041 CEST	49762	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:50:29.438139915 CEST	443	49762	142.250.186.68	192.168.2.4
Sep 29, 2024 07:50:29.438477039 CEST	443	49762	142.250.186.68	192.168.2.4
Sep 29, 2024 07:50:29.439711094 CEST	49762	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:50:29.439769983 CEST	443	49762	142.250.186.68	192.168.2.4
Sep 29, 2024 07:50:29.489552021 CEST	49762	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:50:33.778706074 CEST	49723	80	192.168.2.4	199.232.210.172
Sep 29, 2024 07:50:33.778795004 CEST	49724	80	192.168.2.4	199.232.210.172
Sep 29, 2024 07:50:33.784131050 CEST	80	49723	199.232.210.172	192.168.2.4
Sep 29, 2024 07:50:33.784199953 CEST	49723	80	192.168.2.4	199.232.210.172
Sep 29, 2024 07:50:33.784833908 CEST	80	49724	199.232.210.172	192.168.2.4
Sep 29, 2024 07:50:33.784960985 CEST	49724	80	192.168.2.4	199.232.210.172
Sep 29, 2024 07:50:39.328815937 CEST	443	49762	142.250.186.68	192.168.2.4
Sep 29, 2024 07:50:39.328886986 CEST	443	49762	142.250.186.68	192.168.2.4
Sep 29, 2024 07:50:39.329257965 CEST	49762	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:50:41.226612091 CEST	49762	443	192.168.2.4	142.250.186.68
Sep 29, 2024 07:50:41.226629972 CEST	443	49762	142.250.186.68	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 29, 2024 07:49:25.055634022 CEST	53	56525	1.1.1.1	192.168.2.4
Sep 29, 2024 07:49:25.056778908 CEST	53	57076	1.1.1.1	192.168.2.4
Sep 29, 2024 07:49:26.121929884 CEST	53	60654	1.1.1.1	192.168.2.4
Sep 29, 2024 07:49:26.792546034 CEST	64499	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:49:26.792706013 CEST	50795	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:49:26.802717924 CEST	53	64499	1.1.1.1	192.168.2.4
Sep 29, 2024 07:49:26.805120945 CEST	53	50795	1.1.1.1	192.168.2.4
Sep 29, 2024 07:49:26.813740969 CEST	54953	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:49:26.813941956 CEST	59773	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:49:26.825249910 CEST	53	59773	1.1.1.1	192.168.2.4
Sep 29, 2024 07:49:26.825290918 CEST	53	54953	1.1.1.1	192.168.2.4
Sep 29, 2024 07:49:28.704080105 CEST	63538	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:49:28.705194950 CEST	58695	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:49:28.710778952 CEST	53	63538	1.1.1.1	192.168.2.4
Sep 29, 2024 07:49:28.711672068 CEST	53	58695	1.1.1.1	192.168.2.4
Sep 29, 2024 07:49:32.123800993 CEST	61222	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:49:32.124125004 CEST	58525	53	192.168.2.4	1.1.1.1
Sep 29, 2024 07:49:32.134386063 CEST	53	58525	1.1.1.1	192.168.2.4
Sep 29, 2024 07:49:32.134622097 CEST	53	61222	1.1.1.1	192.168.2.4
Sep 29, 2024 07:49:43.310159922 CEST	53	56167	1.1.1.1	192.168.2.4
Sep 29, 2024 07:49:45.314614058 CEST	138	138	192.168.2.4	192.168.2.255
Sep 29, 2024 07:50:02.293565035 CEST	53	52441	1.1.1.1	192.168.2.4
Sep 29, 2024 07:50:24.104053020 CEST	53	64863	1.1.1.1	192.168.2.4
Sep 29, 2024 07:50:24.972975016 CEST	53	55098	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 29, 2024 07:49:26.792546034 CEST	192.168.2.4	1.1.1.1	0xe440	Standard query (0)	smartreclaimdapp.pages.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:49:26.792706013 CEST	192.168.2.4	1.1.1.1	0xfe79	Standard query (0)	smartreclaimdapp.pages.dev	65	IN (0x0001)	false
Sep 29, 2024 07:49:26.813740969 CEST	192.168.2.4	1.1.1.1	0x21c9	Standard query (0)	smartreclaimdapp.pages.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:49:26.813941956 CEST	192.168.2.4	1.1.1.1	0x8aae	Standard query (0)	smartreclaimdapp.pages.dev	65	IN (0x0001)	false
Sep 29, 2024 07:49:28.704080105 CEST	192.168.2.4	1.1.1.1	0x2501	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:49:28.705194950 CEST	192.168.2.4	1.1.1.1	0x18ba	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 29, 2024 07:49:32.123800993 CEST	192.168.2.4	1.1.1.1	0xe5dc	Standard query (0)	smartreclaimdapp.pages.dev	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:49:32.124125004 CEST	192.168.2.4	1.1.1.1	0xe5e	Standard query (0)	smartreclaimdapp.pages.dev	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Sep 29, 2024 07:49:26.802717924 CEST	1.1.1.1	192.168.2.4	0xe440	No error (0)	smartreclaimdapp.pages.dev		172.66.47.87	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:49:26.802717924 CEST	1.1.1.1	192.168.2.4	0xe440	No error (0)	smartreclaimdapp.pages.dev		172.66.44.169	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:49:26.805120945 CEST	1.1.1.1	192.168.2.4	0xfe79	No error (0)	smartreclaimdapp.pages.dev			65	IN (0x0001)	false
Sep 29, 2024 07:49:26.825249910 CEST	1.1.1.1	192.168.2.4	0x8aae	No error (0)	smartreclaimdapp.pages.dev			65	IN (0x0001)	false
Sep 29, 2024 07:49:26.825290918 CEST	1.1.1.1	192.168.2.4	0x21c9	No error (0)	smartreclaimdapp.pages.dev		172.66.47.87	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:49:26.825290918 CEST	1.1.1.1	192.168.2.4	0x21c9	No error (0)	smartreclaimdapp.pages.dev		172.66.44.169	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:49:28.710778952 CEST	1.1.1.1	192.168.2.4	0x2501	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:49:28.711672068 CEST	1.1.1.1	192.168.2.4	0x18ba	No error (0)	www.google.com			65	IN (0x0001)	false
Sep 29, 2024 07:49:32.134386063 CEST	1.1.1.1	192.168.2.4	0xe5e	No error (0)	smartreclaimdapp.pages.dev			65	IN (0x0001)	false
Sep 29, 2024 07:49:32.134622097 CEST	1.1.1.1	192.168.2.4	0xe5dc	No error (0)	smartreclaimdapp.pages.dev		172.66.47.87	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:49:32.134622097 CEST	1.1.1.1	192.168.2.4	0xe5dc	No error (0)	smartreclaimdapp.pages.dev		172.66.44.169	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:49:40.115240097 CEST	1.1.1.1	192.168.2.4	0xbec0	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:49:40.115240097 CEST	1.1.1.1	192.168.2.4	0xbec0	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:49:40.624386072 CEST	1.1.1.1	192.168.2.4	0xcc01	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 07:49:40.624386072 CEST	1.1.1.1	192.168.2.4	0xcc01	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:49:54.152904987 CEST	1.1.1.1	192.168.2.4	0x2c9d	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 07:49:54.152904987 CEST	1.1.1.1	192.168.2.4	0x2c9d	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:50:17.427258968 CEST	1.1.1.1	192.168.2.4	0x1513	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 07:50:17.427258968 CEST	1.1.1.1	192.168.2.4	0x1513	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Sep 29, 2024 07:50:37.544034004 CEST	1.1.1.1	192.168.2.4	0xd035	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Sep 29, 2024 07:50:37.544034004 CEST	1.1.1.1	192.168.2.4	0xd035	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

smartreclaimdapp.pages.dev

https:

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	172.66.47.87	443	5820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:49:27 UTC	669	OUT	GET / HTTP/1.1 Host: smartreclaimdapp.pages.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:49:27 UTC	608	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 05:49:27 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close X-Frame-Options: SAMEORIGIN Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Bnci%2BDwLkC4HghlHCOuxAW9qQjz9ssisetwjckmVYzTpRVSbAMQYEQuzQb9dmfwRtS9ZO4cpTggWUrlvOT6jPzXI1W5E8XYKzbe%2FEO1X1A5l2JWm4rB55UaMCfYyL%2B3mw86oRz0QHK2myZfIMA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ca9b0a91d74c47f-EWR
2024-09-29 05:49:27 UTC	761	IN	Data Raw: 31 31 32 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 21 2d 2d 5b 69 66 20 6c 74 20 49 45 20 37 5d 3e 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 36 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 37 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 20 20 20 20 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 6e 6f 2d 6a 73 20 69 65 38 20 6f 6c 64 69 65 22 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 20 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 21 2d 2d 5b 69 66 20 Data Ascii: 112a<!DOCTYPE html>...[if lt IE 7]> <html class="no-js ie6 oldie" lang="en-US"> <![endif]-->...[if IE 7]> <html class="no-js ie7 oldie" lang="en-US"> <![endif]-->...[if IE 8]> <html class="no-js ie8 oldie" lang="en-US"> <![endif]-->...[if
2024-09-29 05:49:27 UTC	1369	IN	Data Raw: 22 73 74 79 6c 65 73 68 65 65 74 22 20 69 64 3d 27 63 66 5f 73 74 79 6c 65 73 2d 69 65 2d 63 73 73 27 20 68 72 65 66 3d 22 2f 63 64 6e 2d 63 67 69 2f 73 74 79 6c 65 73 2f 63 66 2e 65 72 72 6f 72 73 2e 69 65 2e 63 73 73 22 20 2f 3e 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0a 3c 73 74 79 6c 65 3e 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 3c 2f 73 74 79 6c 65 3e 0a 0a 0a 3c 21 2d 2d 5b 69 66 20 67 74 65 20 49 45 20 31 30 5d 3e 3c 21 2d 2d 3e 0a 3c 73 63 72 69 70 74 3e 0a 20 20 69 66 20 28 21 6e 61 76 69 67 61 74 6f 72 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 20 7b 0a 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 27 2c 20 66 75 6e 63 74 69 6f Data Ascii: "stylesheet" id='cf_styles-ie-css' href="/cdn-cgi/styles/cf.errors.ie.css" /><![endif]--><style>body{margin:0;padding:0}</style>...[if gte IE 10]>...><script> if (!navigator.cookieEnabled) { window.addEventListener('DOMContentLoaded', functio
2024-09-29 05:49:27 UTC	1369	IN	Data Raw: 63 67 69 2f 70 68 69 73 68 2d 62 79 70 61 73 73 22 20 6d 65 74 68 6f 64 3d 22 47 45 54 22 20 65 6e 63 74 79 70 65 3d 22 74 65 78 74 2f 70 6c 61 69 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 68 69 64 64 65 6e 22 20 6e 61 6d 65 3d 22 61 74 6f 6b 22 20 76 61 6c 75 65 3d 22 55 54 47 6f 58 41 6f 55 73 59 36 4e 51 77 30 30 7a 46 63 45 69 6d 78 6a 38 68 36 43 51 65 50 61 6e 38 75 45 6a 6a 75 52 77 34 73 2d 31 37 32 37 35 38 38 39 36 37 2d 30 2e 30 2e 31 2e 31 2d 2f 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 6c 65 61 72 6e 69 6e 67 Data Ascii: cgi/phish-bypass" method="GET" enctype="text/plain"> <input type="hidden" name="atok" value="UTGoXAoUsY6NQw00zFcEimxj8h6CQePan8uEjjuRw4s-1727588967-0.0.1.1-/"> <a href="https://www.cloudflare.com/learning
2024-09-29 05:49:27 UTC	903	IN	Data Raw: 31 32 33 2e 33 33 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 73 65 70 61 72 61 74 6f 72 20 73 6d 3a 68 69 64 64 65 6e 22 3e 26 62 75 6c 6c 3b 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 63 66 2d 66 6f 6f 74 65 72 2d 69 74 65 6d 20 73 6d 3a 62 6c 6f 63 6b 20 73 6d 3a 6d 62 2d 31 22 3e 3c 73 70 61 6e 3e 50 65 72 66 6f 72 6d 61 6e 63 65 20 26 61 6d 70 3b 20 73 65 63 75 72 69 74 79 20 62 79 3c 2f 73 70 61 6e 3e 20 3c 61 20 72 65 6c 3d 22 6e 6f 6f 70 65 6e 65 72 20 6e 6f 72 65 66 65 72 72 65 72 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 35 78 78 2d 65 72 72 6f 72 2d Data Ascii: 123.33</span> <span class="cf-footer-separator sm:hidden">•</span> </span> <span class="cf-footer-item sm:block sm:mb-1"><span>Performance & security by</span> <a rel="noopener noreferrer" href="https://www.cloudflare.com/5xx-error-
2024-09-29 05:49:27 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49740	172.66.47.87	443	5820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:49:29 UTC	579	OUT	GET /cdn-cgi/styles/cf.errors.css HTTP/1.1 Host: smartreclaimdapp.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://smartreclaimdapp.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:49:29 UTC	411	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 05:49:29 GMT Content-Type: text/css Content-Length: 24051 Connection: close Last-Modified: Thu, 26 Sep 2024 09:13:11 GMT ETag: "66f525a7-5df3" Server: cloudflare CF-RAY: 8ca9b0b13a238cec-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sun, 29 Sep 2024 07:49:29 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-09-29 05:49:29 UTC	958	IN	Data Raw: 23 63 66 2d 77 72 61 70 70 65 72 20 61 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 62 62 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 72 74 69 63 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 61 73 69 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 69 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6c 6f 63 6b 71 75 6f 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 6e 76 61 73 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 61 70 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 65 6e 74 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 69 74 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 63 6f 64 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 64 64 2c 23 63 66 2d 77 72 61 70 70 Data Ascii: #cf-wrapper a,#cf-wrapper abbr,#cf-wrapper article,#cf-wrapper aside,#cf-wrapper b,#cf-wrapper big,#cf-wrapper blockquote,#cf-wrapper body,#cf-wrapper canvas,#cf-wrapper caption,#cf-wrapper center,#cf-wrapper cite,#cf-wrapper code,#cf-wrapper dd,#cf-wrapp
2024-09-29 05:49:29 UTC	1369	IN	Data Raw: 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 62 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 6d 6d 61 72 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 75 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 61 62 6c 65 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 62 6f 64 79 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 66 6f 6f 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 68 65 61 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 2c 23 63 66 2d 77 72 61 70 70 65 72 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 62 6f Data Ascii: e,#cf-wrapper strong,#cf-wrapper sub,#cf-wrapper summary,#cf-wrapper sup,#cf-wrapper table,#cf-wrapper tbody,#cf-wrapper td,#cf-wrapper tfoot,#cf-wrapper th,#cf-wrapper thead,#cf-wrapper tr,#cf-wrapper tt,#cf-wrapper u,#cf-wrapper ul{margin:0;padding:0;bo
2024-09-29 05:49:29 UTC	1369	IN	Data Raw: 31 2e 35 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 34 36 2c 31 33 39 2c 33 31 2c 2e 33 29 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 73 65 63 74 69 6f 6e 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 63 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 65 6d 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 65 6d Data Ascii: 1.5!important;text-decoration:none!important;letter-spacing:normal;-webkit-tap-highlight-color:rgba(246,139,31,.3);-webkit-font-smoothing:antialiased}#cf-wrapper .cf-section,#cf-wrapper section{background:0 0;display:block;margin-bottom:2em;margin-top:2em
2024-09-29 05:49:29 UTC	1369	IN	Data Raw: 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 74 77 6f 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 32 2e 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 32 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 Data Ascii: ld(2n),#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.four>.cf-column:nth-child(2n),#cf-wrapper .cf-columns.two>.cf-column:nth-child(2n){padding-left:22.5px;padding-right:0}#cf-wrapper .cf-columns.cols-2>.cf-column:nth-chi
2024-09-29 05:49:29 UTC	1369	IN	Data Raw: 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 6f 64 64 29 7b 63 6c 65 61 72 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 63 6f 6c 73 2d 34 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 6e 74 68 2d 63 68 69 6c 64 28 34 6e 2b 31 29 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 2e 66 6f 75 72 3e 2e 63 66 2d 63 6f 6c 75 6d 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 63 6f 6c 75 6d 6e 73 Data Ascii: ),#cf-wrapper .cf-columns.four>.cf-column:nth-child(odd){clear:none}#cf-wrapper .cf-columns.cols-4>.cf-column:first-child,#cf-wrapper .cf-columns.cols-4>.cf-column:nth-child(4n+1),#cf-wrapper .cf-columns.four>.cf-column:first-child,#cf-wrapper .cf-columns
2024-09-29 05:49:29 UTC	1369	IN	Data Raw: 30 3b 70 61 64 64 69 6e 67 3a 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 7d 23 63 66 2d 77 72 61 70 70 65 Data Ascii: 0;padding:0}#cf-wrapper h1,#cf-wrapper h2,#cf-wrapper h3{font-weight:400}#cf-wrapper h4,#cf-wrapper h5,#cf-wrapper h6,#cf-wrapper strong{font-weight:600}#cf-wrapper h1{font-size:36px;line-height:1.2}#cf-wrapper h2{font-size:30px;line-height:1.3}#cf-wrappe
2024-09-29 05:49:29 UTC	1369	IN	Data Raw: 68 32 2b 68 34 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 32 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 35 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 68 36 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 33 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 34 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 6f 6c 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 70 2c 23 63 66 2d 77 72 61 70 70 65 72 20 68 35 2b 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 35 65 6d 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 3b 63 6f 6c Data Ascii: h2+h4,#cf-wrapper h2+h5,#cf-wrapper h2+h6,#cf-wrapper h3+h5,#cf-wrapper h3+h6,#cf-wrapper h3+p,#cf-wrapper h4+p,#cf-wrapper h5+ol,#cf-wrapper h5+p,#cf-wrapper h5+ul{margin-top:.5em}#cf-wrapper .cf-btn{background-color:transparent;border:1px solid #999;col
2024-09-29 05:49:29 UTC	1369	IN	Data Raw: 3a 23 36 32 61 31 64 38 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 31 36 33 39 35 39 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 69 6d 70 6f 72 74 61 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 62 64 32 34 32 36 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 64 61 6e 67 65 72 3a 68 6f 76 65 72 2c 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 62 74 6e 2d 65 72 72 6f 72 3a 68 6f 76 65 72 2c 23 Data Ascii: :#62a1d8;border:1px solid #163959;color:#fff}#cf-wrapper .cf-btn-danger,#cf-wrapper .cf-btn-error,#cf-wrapper .cf-btn-important{background-color:#bd2426;border-color:transparent;color:#fff}#cf-wrapper .cf-btn-danger:hover,#cf-wrapper .cf-btn-error:hover,#
2024-09-29 05:49:29 UTC	1369	IN	Data Raw: 61 63 65 3a 6e 6f 77 72 61 70 7d 23 63 66 2d 77 72 61 70 70 65 72 20 69 6e 70 75 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 73 65 6c 65 63 74 2c 23 63 66 2d 77 72 61 70 70 65 72 20 74 65 78 74 61 72 65 61 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 21 69 6d 70 6f 72 74 61 6e 74 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 39 39 39 21 69 6d 70 6f 72 74 61 6e 74 3b 63 6f 6c 6f 72 3a 23 34 30 34 30 34 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 36 36 36 37 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 34 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 30 20 31 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e Data Ascii: ace:nowrap}#cf-wrapper input,#cf-wrapper select,#cf-wrapper textarea{background:#fff!important;border:1px solid #999!important;color:#404040!important;font-size:.86667em!important;line-height:1.24!important;margin:0 0 1em!important;max-width:100%!importan
2024-09-29 05:49:29 UTC	1369	IN	Data Raw: 3a 23 34 30 34 30 34 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 33 70 78 3b 70 61 64 64 69 6e 67 3a 37 2e 35 70 78 20 31 35 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 32 70 78 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 3a 65 6d 70 74 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 23 63 66 2d 77 72 61 70 70 65 72 20 2e 63 66 2d 61 6c 65 72 74 20 2e 63 66 2d 63 6c 6f 73 65 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 38 2e 37 35 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 70 61 64 64 69 6e Data Ascii: :#404040;font-size:13px;padding:7.5px 15px;position:relative;vertical-align:middle;border-radius:2px}#cf-wrapper .cf-alert:empty{display:none}#cf-wrapper .cf-alert .cf-close{border:1px solid transparent;color:inherit;font-size:18.75px;line-height:1;paddin

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49744	172.66.47.87	443	5820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:49:30 UTC	671	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: smartreclaimdapp.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://smartreclaimdapp.pages.dev/cdn-cgi/styles/cf.errors.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:49:30 UTC	409	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 05:49:30 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Thu, 26 Sep 2024 09:13:11 GMT ETag: "66f525a7-1c4" Server: cloudflare CF-RAY: 8ca9b0ba5ef143ad-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sun, 29 Sep 2024 07:49:30 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-09-29 05:49:30 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:49:31 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 05:49:31 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-neu-z1 Cache-Control: public, max-age=125731 Date: Sun, 29 Sep 2024 05:49:31 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49749	172.66.47.87	443	5820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:49:32 UTC	608	OUT	GET /favicon.ico HTTP/1.1 Host: smartreclaimdapp.pages.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://smartreclaimdapp.pages.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:49:32 UTC	749	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 05:49:32 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=NR5GyDIeyL2JfYzX9AZXdJekPV4%2B0WjzAmOIIVH2TRklbVAjDAFmNmvUzUltXsyiSupUmJyTb%2BgWMQ05hKqRIzSBbSzNMgorBheVDyGN0EuHbcE%2BO%2Fw9Hofz2Varjx3U7XrMr%2FrEibr8ddwpyA%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ca9b0c5fbb74321-EWR
2024-09-29 05:49:32 UTC	620	IN	Data Raw: 34 37 39 64 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 66 61 76 69 63 6f 6e 2e 70 6e 67 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 Data Ascii: 479d<!doctype html><html lang="en"> <meta http-equiv="content-type" content="text/html;charset=utf-8" /><head> <meta charset="utf-8" /> <link rel="shortcut icon" href="favicon.png" /> <meta name="language" content="en" /> <meta name
2024-09-29 05:49:32 UTC	1369	IN	Data Raw: 6c 61 73 73 2c 20 73 65 6c 66 2d 63 75 73 74 6f 64 69 61 6c 2c 20 61 6e 64 20 6d 75 6c 74 69 63 68 61 69 6e 20 73 75 70 70 6f 72 74 22 0a 20 20 20 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 61 6e 69 66 65 73 74 22 20 68 72 65 66 3d 22 6d 61 6e 69 66 65 73 74 2e 6a 73 6f 6e 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0a 20 20 20 20 20 20 44 65 63 65 6e 74 72 61 6c 69 7a 65 64 20 44 61 70 70 73 20 2d 20 57 65 20 61 72 65 20 75 6e 69 66 79 69 6e 67 20 57 65 62 33 20 62 79 20 70 72 6f 76 69 64 69 6e 67 20 62 65 73 74 2d 69 6e 2d 63 6c 61 73 73 2c 0a 20 20 20 20 20 20 73 65 6c 66 2d 63 75 73 74 6f 64 69 61 6c 2c 20 61 6e 64 20 6d 75 6c 74 69 63 68 61 69 6e 20 73 75 70 70 6f 72 74 0a 20 20 20 20 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 6c Data Ascii: lass, self-custodial, and multichain support" /> <link rel="manifest" href="manifest.json" /> <title> Decentralized Dapps - We are unifying Web3 by providing best-in-class, self-custodial, and multichain support </title> <l
2024-09-29 05:49:32 UTC	1369	IN	Data Raw: 20 20 20 20 62 6c 6f 63 6b 2d 73 69 7a 65 3a 20 36 32 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 32 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 65 61 74 75 72 65 2d 73 65 74 74 69 6e 67 73 3a 20 6e 6f 72 6d 61 6c 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 69 6e 73 65 74 20 30 20 2d 32 30 70 78 20 30 20 30 20 23 32 36 32 62 33 38 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 31 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: block-size: 62px; font-size: 12px; font-feature-settings: normal; text-size-adjust: 100%; box-shadow: inset 0 -20px 0 0 #262b38; padding: 1px; padding: 0;
2024-09-29 05:49:32 UTC	1369	IN	Data Raw: 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 32 36 62 37 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 31 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 43 72 79 70 74 6f 63 75 72 72 65 6e 63 79 20 50 72 69 63 65 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 26 6e 62 73 70 3b 62 79 20 43 6f 69 6e 6c 69 62 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e Data Ascii: font-weight: 500; color: #626b7f; text-decoration: none; font-size: 11px; " >Cryptocurrency Prices</a >  by Coinlib </div>
2024-09-29 05:49:32 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 6c 5b 65 5d 2e 63 61 6c 6c 28 72 2e 65 78 70 6f 72 74 73 2c 20 72 2c 20 72 2e 65 78 70 6f 72 74 73 2c 20 66 29 2c 20 28 72 2e 6c 20 3d 20 21 30 29 2c 20 72 2e 65 78 70 6f 72 74 73 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 28 66 2e 6d 20 3d 20 6c 29 2c 0a 20 20 20 20 20 20 20 20 20 20 28 66 2e 63 20 3d 20 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 28 66 2e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 2c 20 72 2c 20 74 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 2e 6f 28 65 2c 20 72 29 20 7c 7c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 20 72 2c 20 7b 0a 20 20 20 20 20 20 Data Ascii: }); return l[e].call(r.exports, r, r.exports, f), (r.l = !0), r.exports; } (f.m = l), (f.c = t), (f.d = function (e, r, t) { f.o(e, r) \|\| Object.defineProperty(e, r, {
2024-09-29 05:49:32 UTC	1369	IN	Data Raw: 20 20 20 28 66 2e 6e 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 72 20 3d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 20 26 26 20 65 2e 5f 5f 65 73 4d 6f 64 75 6c 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3f 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 2e 64 65 66 61 75 6c 74 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 65 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0a 20 20 20 20 20 Data Ascii: (f.n = function (e) { var r = e && e.__esModule ? function () { return e.default; } : function () { return e; };
2024-09-29 05:49:32 UTC	1369	IN	Data Raw: 2d 6e 61 6d 65 3d 22 54 72 75 73 74 20 57 61 6c 6c 65 74 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 2d 62 64 76 76 74 4c 20 66 71 6f 6e 4c 5a 20 77 65 62 33 6d 6f 64 61 6c 2d 70 72 6f 76 69 64 65 72 2d 69 63 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 72 63 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 73 76 67 2b 78 6d 6c 3b 62 61 73 65 36 34 2c 50 48 4e 32 5a 79 42 6c 62 6d 46 69 62 47 55 74 59 6d 46 6a 61 32 64 79 62 33 56 75 5a 44 30 69 62 6d 56 33 49 44 41 67 4d 43 41 78 4e 54 67 75 4f 43 41 78 4f 44 51 69 49 48 5a 70 5a 58 64 43 62 33 67 39 49 6a 41 67 4d Data Ascii: -name="Trust Wallet" > <div class="sc-bdvvtL fqonLZ web3modal-provider-icon"> <img src="data:image/svg+xml;base64,PHN2ZyBlbmFibGUtYmFja2dyb3VuZD0ibmV3IDAgMCAxNTguOCAxODQiIHZpZXdCb3g9IjAgM
2024-09-29 05:49:32 UTC	1369	IN	Data Raw: 7a 4d 79 34 32 4c 54 49 75 4e 69 30 78 4e 69 34 34 4c 54 4d 75 4f 53 30 7a 4f 53 34 30 4c 54 51 75 4e 53 30 33 4d 53 34 32 62 43 30 78 4d 79 34 35 4c 6a 4e 6a 4c 6a 55 67 4d 7a 49 75 4e 43 41 79 49 44 55 32 49 44 51 75 4e 69 41 33 4d 79 34 31 49 44 49 75 4e 79 41 78 4e 79 34 32 49 44 59 75 4f 43 41 79 4f 53 34 34 49 44 45 7a 4c 6a 45 67 4d 7a 6b 75 4d 69 41 32 4c 6a 4d 67 4f 53 34 78 49 44 45 30 4c 6a 59 67 4d 54 55 75 4d 79 41 79 4e 43 41 79 4d 53 41 35 4c 6a 51 67 4e 53 34 32 49 44 49 77 4c 6a 51 67 4d 54 45 75 4d 69 41 7a 4d 79 34 33 49 44 49 77 4c 6a 46 36 62 53 30 33 4e 69 34 79 4c 54 45 7a 4e 53 34 30 59 7a 6b 75 4d 79 41 77 49 44 51 31 4c 6a 4d 67 4d 53 34 32 49 44 63 32 4c 6a 59 74 4d 6a 49 75 4e 32 77 74 4f 43 34 30 4c 54 45 78 59 79 30 79 4e 79 Data Ascii: zMy42LTIuNi0xNi44LTMuOS0zOS40LTQuNS03MS42bC0xMy45LjNjLjUgMzIuNCAyIDU2IDQuNiA3My41IDIuNyAxNy42IDYuOCAyOS44IDEzLjEgMzkuMiA2LjMgOS4xIDE0LjYgMTUuMyAyNCAyMSA5LjQgNS42IDIwLjQgMTEuMiAzMy43IDIwLjF6bS03Ni4yLTEzNS40YzkuMyAwIDQ1LjMgMS42IDc2LjYtMjIuN2wtOC40LTExYy0yNy
2024-09-29 05:49:32 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 2d 65 43 49 6d 50 62 20 63 53 61 4a 61 65 20 77 65 62 33 6d 6f 64 61 6c 2d 70 72 6f 76 69 64 65 72 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 73 63 2d 68 4b 77 44 79 65 20 69 57 43 71 6f 51 20 77 65 62 33 6d 6f 64 61 6c 2d 70 72 6f 76 69 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 6e 61 6d 65 3d 22 57 61 6c 6c 65 74 43 6f 6e 6e 65 63 74 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 Data Ascii: </div> </div> <div class="sc-eCImPb cSaJae web3modal-provider-wrapper"> <div class="sc-hKwDye iWCqoQ web3modal-provider-container" data-name="WalletConnect" >
2024-09-29 05:49:32 UTC	1369	IN	Data Raw: 55 75 4d 44 63 31 4e 44 6b 32 4d 69 30 78 4d 7a 41 75 4d 54 67 34 4e 54 51 30 49 44 42 73 4c 54 6b 75 4d 54 51 77 4d 44 49 34 4d 69 41 34 4c 6a 6b 78 4e 7a 55 31 4d 54 6c 6a 4c 54 45 75 4d 6a 67 34 4d 7a 49 78 4e 79 41 78 4c 6a 49 31 4e 6a 6b 32 4d 44 6b 74 4d 79 34 7a 4e 7a 63 78 4d 44 45 32 49 44 45 75 4d 6a 55 32 4f 54 59 77 4f 53 30 30 4c 6a 59 32 4e 54 51 79 4d 44 67 67 4d 47 77 74 4d 6a 45 75 4d 6a 45 31 4f 54 6b 33 4d 79 30 79 4d 43 34 32 4f 54 6b 31 4e 7a 55 35 59 79 30 79 4c 6a 55 33 4e 6a 59 30 4d 44 4d 74 4d 69 34 31 4d 54 4d 35 4d 6a 49 35 4c 54 49 75 4e 54 63 32 4e 6a 51 77 4d 79 30 32 4c 6a 55 34 4f 54 63 35 4e 54 67 67 4d 43 30 35 4c 6a 45 77 4d 7a 63 78 4e 7a 64 36 62 54 49 7a 4d 43 34 30 4f 54 4d 30 4f 44 55 79 49 44 51 79 4c 6a 67 77 4f Data Ascii: UuMDc1NDk2Mi0xMzAuMTg4NTQ0IDBsLTkuMTQwMDI4MiA4LjkxNzU1MTljLTEuMjg4MzIxNyAxLjI1Njk2MDktMy4zNzcxMDE2IDEuMjU2OTYwOS00LjY2NTQyMDggMGwtMjEuMjE1OTk3My0yMC42OTk1NzU5Yy0yLjU3NjY0MDMtMi41MTM5MjI5LTIuNTc2NjQwMy02LjU4OTc5NTggMC05LjEwMzcxNzd6bTIzMC40OTM0ODUyIDQyLjgwO

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:49:32 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-29 05:49:32 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=125760 Date: Sun, 29 Sep 2024 05:49:32 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-29 05:49:32 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49751	172.66.47.87	443	5820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:49:33 UTC	396	OUT	GET /cdn-cgi/images/icon-exclamation.png?1376755637 HTTP/1.1 Host: smartreclaimdapp.pages.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:49:33 UTC	409	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 05:49:33 GMT Content-Type: image/png Content-Length: 452 Connection: close Last-Modified: Thu, 26 Sep 2024 09:13:11 GMT ETag: "66f525a7-1c4" Server: cloudflare CF-RAY: 8ca9b0ca68a142c1-EWR X-Frame-Options: DENY X-Content-Type-Options: nosniff Expires: Sun, 29 Sep 2024 07:49:33 GMT Cache-Control: max-age=7200 Cache-Control: public Accept-Ranges: bytes
2024-09-29 05:49:33 UTC	452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 36 00 00 00 36 08 03 00 00 00 bb 9b 9a ef 00 00 00 33 50 4c 54 45 c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f c1 45 3f ab b2 22 ed 00 00 00 11 74 52 4e 53 00 40 30 10 60 8f bf ff ef 7f af 9f df 20 50 cf 70 60 82 c8 9b 00 00 01 2f 49 44 41 54 78 01 bd d3 05 d2 b4 30 10 06 e1 8e 6c de c1 36 dc ff b2 9f 2b 95 c9 12 7e 79 4a 91 46 22 b8 c2 8b c8 80 94 6f 45 1f ac 4c 81 33 f2 ac 03 5b 1e 95 69 32 b5 94 6e 98 57 79 4a c4 91 8a 7a 26 9a 82 a9 af a4 46 95 f5 d0 1a fb 95 c7 62 bf b2 f2 e9 70 7e e3 a7 a0 df ee 7c 3a 74 35 f1 6d b3 b3 99 66 70 af 69 f2 2f 65 ef c7 fa 99 25 de 25 1b c9 b4 f0 6e d2 50 a6 ed fb 65 Data Ascii: PNGIHDR663PLTEE?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?E?"tRNS@0` Pp`/IDATx0l6+~yJF"oEL3[i2nWyJz&Fbp~\|:t5mfpi/e%%nPe

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49753	172.66.47.87	443	5820	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-09-29 05:49:33 UTC	361	OUT	GET /favicon.ico HTTP/1.1 Host: smartreclaimdapp.pages.dev Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-29 05:49:33 UTC	745	IN	HTTP/1.1 200 OK Date: Sun, 29 Sep 2024 05:49:33 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=0, must-revalidate referrer-policy: strict-origin-when-cross-origin x-content-type-options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ChhVVwWnTga1oeDWIGBuy6tc%2FN4yDOyS2CJQxG54FwHIxve1Au7ylV0%2BFhuk6d0tclk6gmfVbY9dDrtUgerVWK0Ha0RyGUNuKSh6NA0eteCowokIUOO%2By3tWFXYIDp7gblQal0Ml7AjbLBSLjQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Speculation-Rules: "/cdn-cgi/speculation" Server: cloudflare CF-RAY: 8ca9b0ce1d9c4393-EWR
2024-09-29 05:49:33 UTC	1369	IN	Data Raw: 34 37 39 64 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 20 2f 3e 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 66 61 76 69 63 6f 6e 2e 70 6e 67 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6c 61 6e 67 75 61 67 65 22 20 63 6f 6e 74 65 6e 74 3d 22 65 6e 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 Data Ascii: 479d<!doctype html><html lang="en"> <meta http-equiv="content-type" content="text/html;charset=utf-8" /><head> <meta charset="utf-8" /> <link rel="shortcut icon" href="favicon.png" /> <meta name="language" content="en" /> <meta name
2024-09-29 05:49:33 UTC	1369	IN	Data Raw: 69 70 74 3e 59 6f 75 20 6e 65 65 64 20 74 6f 20 65 6e 61 62 6c 65 20 4a 61 76 61 53 63 72 69 70 74 20 74 6f 20 72 75 6e 20 74 68 69 73 20 61 70 70 2e 3c 2f 6e 6f 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 65 6c 6f 61 64 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6c 65 61 72 2d 6c 6f 61 64 69 6e 67 20 6c 6f 61 64 69 6e 67 2d 65 66 66 65 63 74 2d 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 73 70 61 6e 3e 3c 2f 73 70 61 6e 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 68 65 61 64 65 72 20 69 64 3d 22 68 65 61 64 65 72 22 20 63 6c 61 73 73 3d 22 68 65 61 64 65 72 20 69 73 2d 66 69 78 65 64 20 69 73 2d 73 6d 61 6c 6c 22 Data Ascii: ipt>You need to enable JavaScript to run this app.</noscript> <div class="preloader"> <div class="clear-loading loading-effect-2"> <span></span> </div> </div> <header id="header" class="header is-fixed is-small"
2024-09-29 05:49:33 UTC	1369	IN	Data Raw: 20 20 20 20 20 62 6f 72 64 65 72 3d 22 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 79 6c 65 3d 22 62 6f 72 64 65 72 3a 20 30 3b 20 6d 61 72 67 69 6e 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 30 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 3c 2f 69 66 72 61 6d 65 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 74 79 6c 65 3d 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 36 32 36 62 37 66 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 34 70 78 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 Data Ascii: border="0" style="border: 0; margin: 0; padding: 0" ></iframe> </div> <div style=" color: #626b7f; line-height: 14px; font-weight: 400
2024-09-29 05:49:33 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 63 2e 70 75 73 68 2e 61 70 70 6c 79 28 63 2c 20 75 20 7c 7c 20 5b 5d 29 2c 20 61 28 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 61 28 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 65 2c 20 72 20 3d 20 30 3b 20 72 20 3c 20 63 2e 6c 65 6e 67 74 68 3b 20 72 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 20 28 76 61 72 20 74 20 3d 20 63 5b 72 5d 2c 20 6e 20 3d 20 21 30 2c 20 6f 20 3d 20 31 3b 20 6f 20 3c 20 74 2e 6c 65 6e 67 74 68 3b 20 6f 2b 2b 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 75 20 3d 20 74 5b 6f 5d 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 30 20 21 3d 3d 20 70 5b 75 5d 20 26 26 20 28 6e Data Ascii: return c.push.apply(c, u \|\| []), a(); } function a() { for (var e, r = 0; r < c.length; r++) { for (var t = c[r], n = !0, o = 1; o < t.length; o++) { var u = t[o]; 0 !== p[u] && (n
2024-09-29 05:49:33 UTC	1369	IN	Data Raw: 20 26 20 65 29 29 20 72 65 74 75 72 6e 20 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 34 20 26 20 65 20 26 26 20 22 6f 62 6a 65 63 74 22 20 3d 3d 20 74 79 70 65 6f 66 20 72 20 26 26 20 72 20 26 26 20 72 2e 5f 5f 65 73 4d 6f 64 75 6c 65 29 20 72 65 74 75 72 6e 20 72 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 28 66 2e 72 28 74 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 20 22 64 65 66 61 75 6c 74 22 2c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 6e 75 6d 65 72 61 62 6c 65 3a Data Ascii: & e)) return r; if (4 & e && "object" == typeof r && r && r.__esModule) return r; var t = Object.create(null); if ( (f.r(t), Object.defineProperty(t, "default", { enumerable:
2024-09-29 05:49:33 UTC	1369	IN	Data Raw: 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 2e 2f 73 74 61 74 69 63 2f 6a 73 2f 6d 61 69 6e 2e 30 62 64 37 33 36 64 64 2e 63 68 75 6e 6b 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 64 69 76 20 69 64 3d 22 57 45 42 33 5f 43 4f 4e 4e 45 43 54 5f 4d 4f 44 41 4c 5f 49 44 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 73 63 2d 6a 52 51 42 57 67 20 75 59 73 63 4d 20 77 65 62 33 6d 6f 64 61 6c 2d 6d 6f 64 61 6c 2d 6c 69 67 68 74 62 6f 78 22 0a 20 20 20 20 20 20 20 20 6f 66 66 73 65 74 3d 22 30 22 0a 20 20 20 20 20 20 20 20 6f 70 61 63 69 74 79 3d 22 30 2e 34 22 0a 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 Data Ascii: ipt> <script src="./static/js/main.0bd736dd.chunk.js"></script> <div id="WEB3_CONNECT_MODAL_ID" style="display: none"> <div class="sc-jRQBWg uYscM web3modal-modal-lightbox" offset="0" opacity="0.4" > <di
2024-09-29 05:49:33 UTC	1369	IN	Data Raw: 31 49 44 55 75 4d 79 41 78 4c 6a 55 67 4e 79 34 33 49 44 42 36 62 53 30 33 4d 69 34 30 4c 54 45 30 4f 43 34 78 64 69 30 32 4c 6a 6c 6a 4c 54 45 75 4f 53 41 77 4c 54 4d 75 4e 69 34 33 4c 54 51 75 4f 53 41 79 4c 6a 45 74 4d 53 34 7a 49 44 45 75 4d 79 30 79 49 44 4d 75 4d 53 30 79 49 44 56 36 62 54 59 34 4c 6a 45 74 4d 54 55 75 4f 47 4d 7a 4d 53 34 30 49 44 49 30 4c 6a 4d 67 4e 6a 63 75 4d 79 41 79 4d 69 34 33 49 44 63 32 4c 6a 63 67 4d 6a 49 75 4e 33 59 74 4d 54 4d 75 4f 47 4d 74 4f 53 34 34 49 44 41 74 4e 44 45 75 4d 53 41 78 4c 6a 49 74 4e 6a 67 75 4d 79 30 78 4f 53 34 35 65 6d 30 32 4f 53 34 34 49 44 45 31 4c 6a 64 6a 4c 53 34 31 49 44 4d 79 4c 6a 45 74 4d 53 34 35 49 44 55 30 4c 6a 67 74 4e 43 34 31 49 44 63 78 4c 6a 59 74 4d 69 34 32 49 44 45 32 4c 6a Data Ascii: 1IDUuMyAxLjUgNy43IDB6bS03Mi40LTE0OC4xdi02LjljLTEuOSAwLTMuNi43LTQuOSAyLjEtMS4zIDEuMy0yIDMuMS0yIDV6bTY4LjEtMTUuOGMzMS40IDI0LjMgNjcuMyAyMi43IDc2LjcgMjIuN3YtMTMuOGMtOS44IDAtNDEuMSAxLjItNjguMy0xOS45em02OS44IDE1LjdjLS41IDMyLjEtMS45IDU0LjgtNC41IDcxLjYtMi42IDE2Lj
2024-09-29 05:49:33 UTC	1369	IN	Data Raw: 61 4a 61 65 20 77 65 62 33 6d 6f 64 61 6c 2d 70 72 6f 76 69 64 65 72 2d 77 72 61 70 70 65 72 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6c 61 73 73 3d 22 73 63 2d 68 4b 77 44 79 65 20 69 57 43 71 6f 51 20 77 65 62 33 6d 6f 64 61 6c 2d 70 72 6f 76 69 64 65 72 2d 63 6f 6e 74 61 69 6e 65 72 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4d 65 74 61 6d 61 73 6b 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 63 2d 62 64 76 76 74 4c 20 66 71 6f 6e 4c 5a 20 77 65 62 33 6d 6f 64 61 6c 2d 70 72 6f 76 69 64 65 72 2d 69 63 6f 6e 22 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: aJae web3modal-provider-wrapper"> <div class="sc-hKwDye iWCqoQ web3modal-provider-container" data-name="Metamask" > <div class="sc-bdvvtL fqonLZ web3modal-provider-icon">
2024-09-29 05:49:33 UTC	1369	IN	Data Raw: 64 79 59 57 52 70 5a 57 35 30 50 6a 78 6e 49 47 5a 70 62 47 77 39 49 6d 35 76 62 6d 55 69 49 47 5a 70 62 47 77 74 63 6e 56 73 5a 54 30 69 5a 58 5a 6c 62 6d 39 6b 5a 43 49 2b 50 48 42 68 64 47 67 67 5a 44 30 69 62 54 49 31 4e 69 41 77 59 7a 45 30 4d 53 34 7a 4f 44 51 34 4f 54 59 67 4d 43 41 79 4e 54 59 67 4d 54 45 30 4c 6a 59 78 4e 54 45 77 4e 43 41 79 4e 54 59 67 4d 6a 55 32 63 79 30 78 4d 54 51 75 4e 6a 45 31 4d 54 41 30 49 44 49 31 4e 69 30 79 4e 54 59 67 4d 6a 55 32 4c 54 49 31 4e 69 30 78 4d 54 51 75 4e 6a 45 31 4d 54 41 30 4c 54 49 31 4e 69 30 79 4e 54 59 67 4d 54 45 30 4c 6a 59 78 4e 54 45 77 4e 43 30 79 4e 54 59 67 4d 6a 55 32 4c 54 49 31 4e 6e 6f 69 49 47 5a 70 62 47 77 39 49 6e 56 79 62 43 67 6a 59 53 6b 69 4c 7a 34 38 63 47 46 30 61 43 42 6b 50 Data Ascii: dyYWRpZW50PjxnIGZpbGw9Im5vbmUiIGZpbGwtcnVsZT0iZXZlbm9kZCI+PHBhdGggZD0ibTI1NiAwYzE0MS4zODQ4OTYgMCAyNTYgMTE0LjYxNTEwNCAyNTYgMjU2cy0xMTQuNjE1MTA0IDI1Ni0yNTYgMjU2LTI1Ni0xMTQuNjE1MTA0LTI1Ni0yNTYgMTE0LjYxNTEwNC0yNTYgMjU2LTI1NnoiIGZpbGw9InVybCgjYSkiLz48cGF0aCBkP
2024-09-29 05:49:33 UTC	1369	IN	Data Raw: 7a 4d 7a 41 34 4e 44 41 34 4c 6a 41 77 4d 44 41 35 4d 69 30 75 4d 44 41 77 4d 44 45 31 4d 53 30 75 4d 44 41 77 4d 44 45 30 4c 53 34 77 4d 44 41 77 4d 7a 41 35 4c 53 34 77 4d 44 41 77 4d 6a 6b 74 4c 6a 41 77 4d 44 41 30 4e 6a 63 74 4c 6a 41 77 4d 44 41 30 4e 6d 77 74 4f 44 55 75 4d 54 51 7a 4f 44 59 33 4e 7a 51 74 4f 44 4d 75 4d 44 63 78 4e 44 59 7a 59 79 30 79 4c 6a 55 33 4e 6a 59 7a 4f 54 49 34 4c 54 49 75 4e 54 45 7a 4f 54 49 78 4c 54 49 75 4e 54 63 32 4e 6a 4d 35 4d 6a 67 74 4e 69 34 31 4f 44 6b 33 4f 54 55 67 4d 43 30 35 4c 6a 45 77 4d 7a 63 78 4e 6a 4e 73 4d 54 67 75 4f 44 67 79 4d 7a 45 79 4e 6a 51 74 4d 54 67 75 4e 44 49 79 4e 6a 6b 31 4e 57 4d 79 4c 6a 55 33 4e 6a 59 7a 4f 54 4d 74 4d 69 34 31 4d 54 4d 35 4d 6a 49 79 49 44 59 75 4e 7a 55 30 4d 54 Data Ascii: zMzA4NDA4LjAwMDA5Mi0uMDAwMDE1MS0uMDAwMDE0LS4wMDAwMzA5LS4wMDAwMjktLjAwMDA0NjctLjAwMDA0NmwtODUuMTQzODY3NzQtODMuMDcxNDYzYy0yLjU3NjYzOTI4LTIuNTEzOTIxLTIuNTc2NjM5MjgtNi41ODk3OTUgMC05LjEwMzcxNjNsMTguODgyMzEyNjQtMTguNDIyNjk1NWMyLjU3NjYzOTMtMi41MTM5MjIyIDYuNzU0MT

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 4564, Parent PID: 3748

General

Target ID:	0
Start time:	01:49:20
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5820, Parent PID: 4564

General

Target ID:	2
Start time:	01:49:23
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2372 --field-trial-handle=2184,i,14472534721091695656,13827111411883342442,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6360, Parent PID: 3748

General

Target ID:	3
Start time:	01:49:26
Start date:	29/09/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://smartreclaimdapp.pages.dev/"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://smartreclaimdapp.pages.dev/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 45

Chrome Cache Entry: 46

Chrome Cache Entry: 47

Chrome Cache Entry: 48

Chrome Cache Entry: 49

Chrome Cache Entry: 50

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Behavior

System Behavior

Analysis Process: chrome.exePID: 4564, Parent PID: 3748

General

Chronological Activities

Analysis Process: chrome.exePID: 5820, Parent PID: 4564

General

Chronological Activities

Windows Analysis Report
http://smartreclaimdapp.pages.dev/