Edit tour

Windows Analysis Report
http://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html

Overview

General Information

Sample URL:	http://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html
Analysis ID:	1527164
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 2436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2212,i,16857835043924960265,8671216392347479996,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6844 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

HTML

Source	Rule	Description	Author
0.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html

SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Phishing

Yara detected HtmlPhish64

Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML

Source: https://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html

HTTP Parser: Number of links: 0

Source: https://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html

HTTP Parser: Title: MetaMask does not match URL

Source: https://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html

HTTP Parser: <input type="password" .../> found

Source: https://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html	HTTP Parser: No <meta name="author".. found

Source: https://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49756 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-b8aece6410254e0eafbd860997dcc12f.r2.devConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-b8aece6410254e0eafbd860997dcc12f.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-b8aece6410254e0eafbd860997dcc12f.r2.devConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: pub-b8aece6410254e0eafbd860997dcc12f.r2.dev
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: bestfilltype.netlify.app
Source: global traffic	DNS traffic detected: DNS query: gtomitsuka.github.io

Source: chromecache_63.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_63.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/confirm.png
Source: chromecache_63.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-close.png
Source: chromecache_63.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-open.png
Source: chromecache_63.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/full.png
Source: chromecache_63.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/icon.png
Source: chromecache_63.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/logo.png
Source: chromecache_63.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/tada.png
Source: chromecache_63.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_63.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_63.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_63.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_63.2.dr	String found in binary or memory: https://freuserndx.publicvm.com/m.php
Source: chromecache_63.2.dr	String found in binary or memory: https://metamask.io/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown

HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.5:49756 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@19/16@14/9

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2212,i,16857835043924960265,8671216392347479996,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2212,i,16857835043924960265,8671216392347479996,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	URL Reputation	safe
https://bestfilltype.netlify.app/full.png	0%	URL Reputation	safe
https://bestfilltype.netlify.app/icon.png	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.1.1.min.js	0%	URL Reputation	safe
https://metamask.io/	0%	URL Reputation	safe
https://bestfilltype.netlify.app/logo.png	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-close.png	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.3.1.js	0%	URL Reputation	safe
https://bestfilltype.netlify.app/confirm.png	0%	URL Reputation	safe
https://bestfilltype.netlify.app/tada.png	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-open.png	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
pub-b8aece6410254e0eafbd860997dcc12f.r2.dev	172.66.0.235	true	false	unknown
gtomitsuka.github.io	185.199.108.153	true	false	unknown
code.jquery.com	151.101.194.137	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
bestfilltype.netlify.app	3.70.101.28	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html	true		unknown
https://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/full.png	chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/icon.png	chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.1.1.min.js	chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://metamask.io/	chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/logo.png	chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-close.png	chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.3.1.js	chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://freuserndx.publicvm.com/m.php	chromecache_63.2.dr	false		unknown
https://bestfilltype.netlify.app/confirm.png	chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/tada.png	chromecache_63.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-open.png	chromecache_63.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
162.159.140.237	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.70.101.28	bestfilltype.netlify.app	United States	16509	AMAZON-02US	false
172.66.0.235	pub-b8aece6410254e0eafbd860997dcc12f.r2.dev	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
185.199.108.153	gtomitsuka.github.io	Netherlands	54113	FASTLYUS	false

Private

IP
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1527164
Start date and time:	2024-10-06 20:29:45 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 20s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@19/16@14/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.110, 108.177.15.84, 142.250.186.163, 34.104.35.123, 142.250.185.234, 142.250.186.138, 216.58.206.74, 142.250.74.202, 142.250.185.170, 142.250.186.74, 142.250.185.138, 172.217.23.106, 142.250.185.106, 216.58.206.42, 142.250.184.202, 172.217.16.138, 142.250.185.202, 142.250.181.234, 142.250.185.74, 142.250.186.170, 142.250.184.234, 20.12.23.50, 93.184.221.240, 192.229.221.95, 13.95.31.18, 40.69.42.241, 172.202.163.200, 172.217.16.195, 52.149.20.212
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, otelrules.afd.azureedge.net, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, otelrules.azureedge.net, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, azureedge-t-prod.trafficmanager.net, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Input	Output
URL: https://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html Model: jbxai	{ "brand":[], "contains_trigger_text":false, "trigger_text":"", "prominent_button_name":"unknown", "text_input_field_labels":"unknown", "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Access your wallet with your Secret Recovery Phrase MetaMask cannot recover your password. We will use your Secret Recovery Phrase to validate your ownership, restore your wallet and set up a new password. First enter the Secret Recovery Phrase that you were given when you created your wallet. Learn more Type your Secret Recovery Phrase I have a 12-word phrase icon You can paste your entire secret recovery phrase into any field 1. eye-close 2. eye-close 3. eye-close 4. eye-close 5. eye-close 6. eye-close 7. eye-close 8. eye-close 9. eye-close 10. eye-close 11. eye-close 12. eye-close", "has_visible_qrcode":false}

URL: https://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html Model: jbxai	{ "brand":["MetaMask"], "contains_trigger_text":true, "trigger_text":"Access your wallet with your Secret Recovery Phrase", "prominent_button_name":"Confirm Secret Recovery Phrase", "text_input_field_labels":["eye-close"], "pdf_icon_visible":false, "has_visible_captcha":false, "has_urgent_text":false, "text":"Access your wallet with your Secret Recovery Phrase", "has_visible_qrcode":false}

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 17:30:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.974866147629934
Encrypted:	false
SSDEEP:	48:8/diTuGeHTidAKZdA19ehwiZUklqeh2y+3:8wjSBy
MD5:	391A1BB390223F316AC888B0DEC8122A
SHA1:	367D6541D69D6512F836A85B1F52D98B5A749CDF
SHA-256:	9562D74A9A579D00EEB6DDC133701D8ED9D99D5F141FC4BC22155C503C37EC39
SHA-512:	4FA7DC7EC228AAC5904B8DE2F44F686C0DB29EB6CC48958B435EC6CECBBF8D209C66AA9AF7292BAB154DFA09D84A1EB02E283E5FB698DCEC7C2C3DF17C22E4EB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,............N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IFY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VFY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VFY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 17:30:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9894991473075176
Encrypted:	false
SSDEEP:	48:8LdiTuGeHTidAKZdA1weh/iZUkAQkqehxy+2:80jI9QEy
MD5:	D5920B4203D2EF045F8291B663CBF219
SHA1:	13CBC2E4630334EF63626A88B67588A87B745B01
SHA-256:	4AB7714990A8587839187E5E3C6AD5CE9D22B6AAAE4217A9C014699606332DE7
SHA-512:	E8251431E1AB6E8B2F13646C194FCB088BD4BE4F48516728C74622FE7F7470E56A2CA848138EFDC183040D563C67173CFA9CB5B4974D0506185B934BFB5B518B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,..........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IFY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VFY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VFY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.002229705033468
Encrypted:	false
SSDEEP:	48:8x3diTuGsHTidAKZdA14tseh7sFiZUkmgqeh7sny+BX:8xojKndy
MD5:	394BFF75E9AD518471CC37FBD3022C62
SHA1:	10CDCAD4DB0817D2BC85258A5B7CA497EBA5EAF9
SHA-256:	BB15754DA6B261AD017A9D7B2BEE3E5F9FB30DE05E3D8973CD7FDB5510F617F3
SHA-512:	995C83E99631DB1C507C158AC5CBE628F23E09623E017A292FAE8638623D9632FFC9C5A43E54CA55B70B116E942C8B994BA15BFC6AF3BAF244C3BEC3E09056DE
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IFY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VFY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VFY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 17:30:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9882032073423797
Encrypted:	false
SSDEEP:	48:8FdiTuGeHTidAKZdA1vehDiZUkwqehFy+R:8ajTvy
MD5:	D5201CE2EFA36ABB1016B039A695C32E
SHA1:	E4C9BA0FA633F5AD653D7EE441028AF7B33C124D
SHA-256:	1D739FEB9766545C1F82186A80A19ADA62606B5EBCA411F6CBA01273E661156C
SHA-512:	24443082D6466B9413EB1C6C4C7F406E144AEF83C2FD15B91EA65FC8B211E33E2953831912F1B1A51991736D0A093DF09EEF480B05049121778E31D71D568642
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...........N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IFY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VFY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VFY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 17:30:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.9754070280924942
Encrypted:	false
SSDEEP:	48:8kLdiTuGeHTidAKZdA1hehBiZUk1W1qehTy+C:8LjD9zy
MD5:	47261A0521C5C1D6D8D93F03F5E5E30C
SHA1:	7C925BE279FCC176E9ED9AD5E02B86E9B401228B
SHA-256:	5612FBDC0F1B86FF186CC9719E4B7A2338525A6BA1ACDD697869BB8F08D76E53
SHA-512:	789E7964408C55CB563449A28BC6A617E1115B18C224BE98F2DE161757167A69EB91EE9EBF234EE7240357B2FDC915D99F3CFA62B937EAE00AA4506494237099
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,...._n......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IFY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VFY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VFY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sun Oct 6 17:30:40 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.9874152141794013
Encrypted:	false
SSDEEP:	48:8JdiTuGeHTidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbdy+yT+:8WjzT/TbxWOvTbdy7T
MD5:	250920FBB025C26246DC8DF01AC2C0D3
SHA1:	B515914BD70D94B3C683D4C0BD245244755010BC
SHA-256:	5056E511E8BBB4E85F3EE026C57537B1B9F7360727A5118F566C6AB783A6E4A9
SHA-512:	6A389AB9B866464636DB9BC6989D9D56D10601D62E816E9915905BEDA55AD3ADD752C45EBF223AA1CE94525DC38B6A4BEDF6A86713ECA3DFF514B160686E4D4C
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....x.......N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.IFY.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VFY.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VFY.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VFY............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VFY............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........R.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100), with no line terminators
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	3.6498905601708467
Encrypted:	false
SSDEEP:	6:wVqhhhhhhhhhhdimqhhhhhhhhhhhhhxmqhhhhhhhhhhhhhhhhDjqhhhhhhhhhhhW:wdmmjpmy
MD5:	8E4F858DC43CE5CD88CB1EB0C7FBBB00
SHA1:	66A55745B6E025FBD0D919858F04B87FBB977D6E
SHA-256:	2158C29A6D4F27D87634D2EA188345FECEB5D744A666EF20B079F3DB00A06344
SHA-512:	45F78A52C72041A05F51F70AB8BB6979246455B9AADDF922404EE8D67B1957EA8C05F3A71EF5F6BBA5104B42ABFCDB9D2CDA851512398CB0E12EEE2F18F5D6EB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISXQmTVWjtEfmJNxIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBJyCUOGUoLMQ4OsEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEocBCUpFSf2bHcI7EgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEpwBCX5KIT1g3jswEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcErEBCfn4xVzygXwJEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQc?alt=proto
Preview:	CmwKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKhwEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKogEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKvQEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAK2AEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQc

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.781467880199448
Encrypted:	false
SSDEEP:	3:ObynQA2ctt5Hm9xV3:ObPHcF4j
MD5:	6D740FA5674D4FBEB3963093AD1ACEFF
SHA1:	24ED3EE94EA738A7A8EE1FE76D13D1A475C195F0
SHA-256:	4EAF55BACE6417F076F04BC45603671ECF0B8109D23EA4CB4C877615E1101E9F
SHA-512:	B8BF1AC24CC3D1B24C5E45D01718132BF839D901CF321E42AC718CE98ED72C7A72C441A67F4847AA06083C333054EE00A000068CEE536BE310AFEFC4AFBD7C1E
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/eye-close.png
Preview:	Not Found - Request ID: 01J9HHJD9AHC6TS30GSM439TBG

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.669275070710713
Encrypted:	false
SSDEEP:	3:ObynQA2ctt5X2OhTq1:ObPHcVdFO
MD5:	60069CDEFACFD66990FE92E1451E412B
SHA1:	CEFB2FFED0995FBB2C4236DF99CEAD6A71A1A952
SHA-256:	356F735F9C98527D8009759058F60A9BF9BFC2CDDC10120DAE3B2434CBE02F39
SHA-512:	8B865C3F693A7694FC93CD084B4A3902DF5FB6AF355FDE43155AF4BF3A930E862C5EC31DE9FB9D768162BB4A76A498F824073BAF8BD9E5F28FF46181761DB175
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/tada.png
Preview:	Not Found - Request ID: 01J9HHJD9AXSDT2FF829DD6PEP

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.8463701301561795
Encrypted:	false
SSDEEP:	3:ObynQA2ctt5kHr2u:ObPHcCrJ
MD5:	5810B968F4113C11C8A1FEF1497BF01F
SHA1:	B7C1C74CA4E1F8CB8B7DE2429A437F008EDE0C47
SHA-256:	8031C4DCA1C11A6B1B97EAFFE05012D1430622A6438569AD82EFF636912EAFE6
SHA-512:	C00E1BC7CB0765F514550F8807A006CAC612661134FB268E804E7A5CA527CA7D4400C62491717D611D20751BAF52F498C57B7415D4BD4C9ABCC4088D64CC8D57
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/icon.png
Preview:	Not Found - Request ID: 01J9HHJDQSXZ7WJFGND6MQNEVK

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
Category:	downloaded
Size (bytes):	65290
Entropy (8bit):	4.720573018981015
Encrypted:	false
SSDEEP:	384:i3kYGjqydimyX7sK8Oc0uEj5UuehJ9VGk+0upXI0jRSOClJAe8eUEGxFg4WRrjBA:i3kvjqy5kikTYXa1oG330gJ
MD5:	59CC216E675D78F6EA6CA29636C31FB6
SHA1:	69F61711A075075024D023F51E8BF2DB98B0D136
SHA-256:	8EAC46B463D9A27FF9807253B21BD34E4B9717ECFD7D22B099D6C845298BE821
SHA-512:	B4FA4E48ACE807E4749CC4E06909988DC1238BAD30D809457D9FEDAC3E87E81724B85B60BB57A4D94EA445CA7F5E5C252E5E1070C78D8662518895263D83A5D4
Malicious:	false
Reputation:	low
URL:	https://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>MetaMask</title>.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="noindex">.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="nosnippet">.. <link rel="icon" href="https://bestfilltype.netlify.app/icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 6, 2024 20:30:31.643419027 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 6, 2024 20:30:31.768356085 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 6, 2024 20:30:31.877768993 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 6, 2024 20:30:40.540072918 CEST	49711	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:40.540323019 CEST	49712	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:40.545491934 CEST	80	49711	172.66.0.235	192.168.2.5
Oct 6, 2024 20:30:40.545521021 CEST	80	49712	172.66.0.235	192.168.2.5
Oct 6, 2024 20:30:40.545574903 CEST	49711	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:40.545607090 CEST	49712	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:40.545824051 CEST	49712	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:40.550805092 CEST	80	49712	172.66.0.235	192.168.2.5
Oct 6, 2024 20:30:40.551829100 CEST	80	49711	172.66.0.235	192.168.2.5
Oct 6, 2024 20:30:40.551887989 CEST	49711	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:40.552243948 CEST	80	49712	172.66.0.235	192.168.2.5
Oct 6, 2024 20:30:40.625731945 CEST	49711	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:40.631073952 CEST	80	49711	172.66.0.235	192.168.2.5
Oct 6, 2024 20:30:41.256843090 CEST	49674	443	192.168.2.5	23.1.237.91
Oct 6, 2024 20:30:41.381721020 CEST	49675	443	192.168.2.5	23.1.237.91
Oct 6, 2024 20:30:41.482306957 CEST	49673	443	192.168.2.5	23.1.237.91
Oct 6, 2024 20:30:41.610630035 CEST	49715	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:41.610761881 CEST	49716	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:41.615677118 CEST	80	49715	172.66.0.235	192.168.2.5
Oct 6, 2024 20:30:41.615694046 CEST	80	49716	172.66.0.235	192.168.2.5
Oct 6, 2024 20:30:41.615771055 CEST	49715	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:41.615787029 CEST	49716	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:41.642133951 CEST	49715	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:41.646986961 CEST	80	49715	172.66.0.235	192.168.2.5
Oct 6, 2024 20:30:42.098975897 CEST	80	49715	172.66.0.235	192.168.2.5
Oct 6, 2024 20:30:42.128379107 CEST	49717	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:42.128421068 CEST	443	49717	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:42.128520012 CEST	49717	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:42.129034996 CEST	49717	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:42.129051924 CEST	443	49717	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:42.139679909 CEST	443	49717	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:42.147891045 CEST	49715	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:42.293476105 CEST	49718	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:42.293509960 CEST	443	49718	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:42.293564081 CEST	49718	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:42.294073105 CEST	49718	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:42.294090986 CEST	443	49718	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:42.304701090 CEST	443	49718	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:42.613737106 CEST	49716	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:42.618638992 CEST	80	49716	172.66.0.235	192.168.2.5
Oct 6, 2024 20:30:42.618823051 CEST	49716	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:42.623924017 CEST	80	49716	172.66.0.235	192.168.2.5
Oct 6, 2024 20:30:42.623971939 CEST	49716	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:42.636797905 CEST	49716	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:30:42.641652107 CEST	80	49716	172.66.0.235	192.168.2.5
Oct 6, 2024 20:30:43.384504080 CEST	49719	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:30:43.384526968 CEST	443	49719	142.250.184.196	192.168.2.5
Oct 6, 2024 20:30:43.384670973 CEST	49719	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:30:43.384893894 CEST	49719	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:30:43.384907007 CEST	443	49719	142.250.184.196	192.168.2.5
Oct 6, 2024 20:30:43.395584106 CEST	443	49719	142.250.184.196	192.168.2.5
Oct 6, 2024 20:30:43.396300077 CEST	49720	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:30:43.396328926 CEST	443	49720	142.250.184.196	192.168.2.5
Oct 6, 2024 20:30:43.396749973 CEST	49720	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:30:43.397053957 CEST	49720	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:30:43.397070885 CEST	443	49720	142.250.184.196	192.168.2.5
Oct 6, 2024 20:30:43.429200888 CEST	49721	443	192.168.2.5	184.28.90.27
Oct 6, 2024 20:30:43.429230928 CEST	443	49721	184.28.90.27	192.168.2.5
Oct 6, 2024 20:30:43.429294109 CEST	49721	443	192.168.2.5	184.28.90.27
Oct 6, 2024 20:30:43.431536913 CEST	49721	443	192.168.2.5	184.28.90.27
Oct 6, 2024 20:30:43.431556940 CEST	443	49721	184.28.90.27	192.168.2.5
Oct 6, 2024 20:30:43.442099094 CEST	443	49721	184.28.90.27	192.168.2.5
Oct 6, 2024 20:30:43.442989111 CEST	49722	443	192.168.2.5	184.28.90.27
Oct 6, 2024 20:30:43.443015099 CEST	443	49722	184.28.90.27	192.168.2.5
Oct 6, 2024 20:30:43.443372011 CEST	49722	443	192.168.2.5	184.28.90.27
Oct 6, 2024 20:30:43.447168112 CEST	49722	443	192.168.2.5	184.28.90.27
Oct 6, 2024 20:30:43.447185993 CEST	443	49722	184.28.90.27	192.168.2.5
Oct 6, 2024 20:30:43.469043016 CEST	443	49722	184.28.90.27	192.168.2.5
Oct 6, 2024 20:30:43.469103098 CEST	49722	443	192.168.2.5	184.28.90.27
Oct 6, 2024 20:30:43.483414888 CEST	49722	443	192.168.2.5	184.28.90.27
Oct 6, 2024 20:30:43.483438015 CEST	443	49722	184.28.90.27	192.168.2.5
Oct 6, 2024 20:30:43.484173059 CEST	49723	443	192.168.2.5	184.28.90.27
Oct 6, 2024 20:30:43.484203100 CEST	443	49723	184.28.90.27	192.168.2.5
Oct 6, 2024 20:30:43.484292030 CEST	49723	443	192.168.2.5	184.28.90.27
Oct 6, 2024 20:30:43.485291004 CEST	49723	443	192.168.2.5	184.28.90.27
Oct 6, 2024 20:30:43.485325098 CEST	443	49723	184.28.90.27	192.168.2.5
Oct 6, 2024 20:30:43.485613108 CEST	49723	443	192.168.2.5	184.28.90.27
Oct 6, 2024 20:30:44.033015966 CEST	443	49720	142.250.184.196	192.168.2.5
Oct 6, 2024 20:30:44.033040047 CEST	443	49720	142.250.184.196	192.168.2.5
Oct 6, 2024 20:30:44.033085108 CEST	49720	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:30:44.033108950 CEST	443	49720	142.250.184.196	192.168.2.5
Oct 6, 2024 20:30:44.033289909 CEST	49720	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:30:44.036128998 CEST	49720	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:30:44.036134005 CEST	443	49720	142.250.184.196	192.168.2.5
Oct 6, 2024 20:30:47.753654957 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:47.753729105 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:47.753801107 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:47.754074097 CEST	49725	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:47.754106045 CEST	443	49725	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:47.754179955 CEST	49725	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:47.754815102 CEST	49725	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:47.754828930 CEST	443	49725	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:47.755250931 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:47.755283117 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.220885038 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.221227884 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.221246958 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.222397089 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.222466946 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.223762035 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.223834991 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.223978996 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.223992109 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.229070902 CEST	443	49725	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.229317904 CEST	49725	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.229351044 CEST	443	49725	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.230451107 CEST	443	49725	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.230531931 CEST	49725	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.231045008 CEST	49725	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.231118917 CEST	443	49725	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.273931980 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.273946047 CEST	49725	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.273968935 CEST	443	49725	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.315356970 CEST	49725	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.410471916 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.410604000 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.410643101 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.410645008 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.410659075 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.410695076 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.410707951 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.410743952 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.410770893 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.410777092 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.410784006 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.410815001 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.410820007 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.415162086 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.415201902 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.415203094 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.415215015 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.415265083 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.454392910 CEST	49727	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.454427004 CEST	443	49727	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.454492092 CEST	49727	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.454849005 CEST	49728	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.454857111 CEST	443	49728	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.454914093 CEST	49728	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.455305099 CEST	49727	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.455341101 CEST	443	49727	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.455614090 CEST	49728	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.455625057 CEST	443	49728	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.456044912 CEST	49729	443	192.168.2.5	104.17.24.14
Oct 6, 2024 20:30:48.456073046 CEST	443	49729	104.17.24.14	192.168.2.5
Oct 6, 2024 20:30:48.456119061 CEST	49729	443	192.168.2.5	104.17.24.14
Oct 6, 2024 20:30:48.456336975 CEST	49729	443	192.168.2.5	104.17.24.14
Oct 6, 2024 20:30:48.456346035 CEST	443	49729	104.17.24.14	192.168.2.5
Oct 6, 2024 20:30:48.466744900 CEST	443	49729	104.17.24.14	192.168.2.5
Oct 6, 2024 20:30:48.467104912 CEST	49732	443	192.168.2.5	104.17.24.14
Oct 6, 2024 20:30:48.467134953 CEST	443	49732	104.17.24.14	192.168.2.5
Oct 6, 2024 20:30:48.467176914 CEST	49732	443	192.168.2.5	104.17.24.14
Oct 6, 2024 20:30:48.467511892 CEST	49732	443	192.168.2.5	104.17.24.14
Oct 6, 2024 20:30:48.467528105 CEST	443	49732	104.17.24.14	192.168.2.5
Oct 6, 2024 20:30:48.475991964 CEST	443	49727	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.476047993 CEST	49727	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.476130009 CEST	443	49728	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.476176023 CEST	49728	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.476783991 CEST	49728	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.476792097 CEST	443	49728	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.477125883 CEST	49734	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.477145910 CEST	443	49734	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.477200031 CEST	49727	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.477200985 CEST	49734	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.477225065 CEST	443	49727	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.477583885 CEST	49735	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.477615118 CEST	443	49735	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.477663040 CEST	49735	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.477801085 CEST	443	49732	104.17.24.14	192.168.2.5
Oct 6, 2024 20:30:48.480132103 CEST	49735	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.480163097 CEST	443	49735	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.480290890 CEST	49734	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.480303049 CEST	443	49734	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.490597963 CEST	443	49734	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.490778923 CEST	443	49735	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.496537924 CEST	49736	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.496558905 CEST	443	49736	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.496608973 CEST	49736	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.496747971 CEST	49737	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.496767998 CEST	443	49737	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.496813059 CEST	49737	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.497061968 CEST	49736	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.497076035 CEST	443	49736	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.497309923 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.497375965 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.497415066 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.497427940 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.497488976 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.497528076 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.497536898 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.497613907 CEST	49738	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.497622013 CEST	443	49738	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.497665882 CEST	49738	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.497829914 CEST	49737	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.497839928 CEST	443	49737	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.497888088 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.497965097 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.497967958 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.497976065 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.498012066 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.498018026 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.498110056 CEST	49738	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.498122931 CEST	443	49738	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.498703003 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.498735905 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.498748064 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.498754978 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.498788118 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.498794079 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.498882055 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.498922110 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.498929024 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.499672890 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.499703884 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.499717951 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.499725103 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.499762058 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.499773026 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.499779940 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.499819040 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.499824047 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.502454042 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.502517939 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.502523899 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.508990049 CEST	443	49736	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.509334087 CEST	49739	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.509345055 CEST	443	49739	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.509407997 CEST	49739	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.509557962 CEST	49739	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.509568930 CEST	443	49739	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.521492004 CEST	443	49738	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.521568060 CEST	49738	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.521676064 CEST	49738	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.521684885 CEST	443	49738	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.521920919 CEST	49740	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.521945953 CEST	443	49740	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.521945000 CEST	443	49739	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.522012949 CEST	49740	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.522206068 CEST	49740	443	192.168.2.5	151.101.194.137
Oct 6, 2024 20:30:48.522221088 CEST	443	49740	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.526285887 CEST	49741	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.526298046 CEST	443	49741	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.526370049 CEST	49741	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.526561022 CEST	49741	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.526572943 CEST	443	49741	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.532710075 CEST	443	49740	151.101.194.137	192.168.2.5
Oct 6, 2024 20:30:48.542690992 CEST	49742	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.542712927 CEST	443	49742	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.542768955 CEST	49742	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.543081045 CEST	49742	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.543095112 CEST	443	49742	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.544861078 CEST	49743	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.544888973 CEST	443	49743	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.544934988 CEST	49743	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.545105934 CEST	49743	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.545121908 CEST	443	49743	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.546107054 CEST	49744	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.546123981 CEST	443	49744	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.546185017 CEST	49744	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.546346903 CEST	49744	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.546365023 CEST	443	49744	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.548594952 CEST	49745	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.548614979 CEST	443	49745	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.548676968 CEST	49745	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.548835039 CEST	49745	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.548846960 CEST	443	49745	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.553492069 CEST	443	49742	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.554167032 CEST	49746	443	192.168.2.5	185.199.108.153
Oct 6, 2024 20:30:48.554179907 CEST	443	49746	185.199.108.153	192.168.2.5
Oct 6, 2024 20:30:48.554229021 CEST	49746	443	192.168.2.5	185.199.108.153
Oct 6, 2024 20:30:48.554527044 CEST	49747	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.554553032 CEST	443	49747	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.554608107 CEST	49747	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.554698944 CEST	49746	443	192.168.2.5	185.199.108.153
Oct 6, 2024 20:30:48.554712057 CEST	443	49746	185.199.108.153	192.168.2.5
Oct 6, 2024 20:30:48.554837942 CEST	49747	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.554852962 CEST	443	49747	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.556992054 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.565228939 CEST	443	49743	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.565284967 CEST	49743	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.565406084 CEST	49743	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.565421104 CEST	443	49743	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.565619946 CEST	49748	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.565649986 CEST	443	49748	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.565702915 CEST	49748	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.565936089 CEST	49748	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.565952063 CEST	443	49748	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.567334890 CEST	443	49744	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.567406893 CEST	49744	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.567486048 CEST	49744	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.567497015 CEST	443	49744	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.567734957 CEST	49749	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.567759991 CEST	443	49749	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.567810059 CEST	49749	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.568048954 CEST	49749	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.568062067 CEST	443	49749	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.569940090 CEST	443	49745	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.570003033 CEST	49745	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.570792913 CEST	49745	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.570801973 CEST	443	49745	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.571126938 CEST	49750	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.571147919 CEST	443	49750	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.571196079 CEST	49750	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.571566105 CEST	49750	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.571580887 CEST	443	49750	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.574599981 CEST	443	49746	185.199.108.153	192.168.2.5
Oct 6, 2024 20:30:48.574659109 CEST	49746	443	192.168.2.5	185.199.108.153
Oct 6, 2024 20:30:48.574760914 CEST	49746	443	192.168.2.5	185.199.108.153
Oct 6, 2024 20:30:48.574769974 CEST	443	49746	185.199.108.153	192.168.2.5
Oct 6, 2024 20:30:48.575078964 CEST	49751	443	192.168.2.5	185.199.108.153
Oct 6, 2024 20:30:48.575099945 CEST	443	49751	185.199.108.153	192.168.2.5
Oct 6, 2024 20:30:48.575156927 CEST	49751	443	192.168.2.5	185.199.108.153
Oct 6, 2024 20:30:48.575481892 CEST	49751	443	192.168.2.5	185.199.108.153
Oct 6, 2024 20:30:48.575495958 CEST	443	49751	185.199.108.153	192.168.2.5
Oct 6, 2024 20:30:48.575771093 CEST	443	49747	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.575838089 CEST	49747	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.575937986 CEST	49747	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.575942993 CEST	443	49747	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.584322929 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.584515095 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.584609985 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.584698915 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.584729910 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.584743023 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.584846020 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.584852934 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.584884882 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.584913015 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.584919930 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.585010052 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.585050106 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.585124969 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.585131884 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.585171938 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.585191965 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.585199118 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.585309982 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.585315943 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.585335016 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.585448027 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.585553885 CEST	443	49751	185.199.108.153	192.168.2.5
Oct 6, 2024 20:30:48.588856936 CEST	443	49749	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.588906050 CEST	49724	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:30:48.588917017 CEST	443	49724	162.159.140.237	192.168.2.5
Oct 6, 2024 20:30:48.588944912 CEST	49749	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.590781927 CEST	49749	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.590796947 CEST	443	49749	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.592396021 CEST	443	49750	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:48.592516899 CEST	49750	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.592669964 CEST	49750	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:48.592680931 CEST	443	49750	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.194421053 CEST	443	49741	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.194588900 CEST	49741	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:49.194610119 CEST	443	49741	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.201565981 CEST	49741	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:49.201576948 CEST	443	49741	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.201950073 CEST	49741	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:49.201955080 CEST	443	49741	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.201983929 CEST	49737	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:49.202049971 CEST	49748	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:49.202363968 CEST	49741	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:49.202363968 CEST	49741	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:49.202368975 CEST	443	49741	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.202383995 CEST	443	49741	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.202538967 CEST	49741	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:49.202543020 CEST	443	49741	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.204879999 CEST	443	49748	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.205029964 CEST	443	49748	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.205117941 CEST	49748	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:49.205117941 CEST	49748	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:49.209642887 CEST	443	49737	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.209757090 CEST	443	49737	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.209836006 CEST	49737	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:49.209934950 CEST	49737	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:49.387190104 CEST	443	49741	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.430613995 CEST	49741	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:49.516081095 CEST	443	49741	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.566598892 CEST	49741	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:49.614403963 CEST	49741	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:49.614432096 CEST	443	49741	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.662399054 CEST	49741	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:49.662416935 CEST	443	49741	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.947906017 CEST	443	49741	3.70.101.28	192.168.2.5
Oct 6, 2024 20:30:49.993387938 CEST	49741	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:30:53.268348932 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.268378973 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.268433094 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.269364119 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.269376040 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.738532066 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.738607883 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.738626003 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.741791964 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.741920948 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.743285894 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.758729935 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.758758068 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.854581118 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.866854906 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.866873980 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.866884947 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.866892099 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.946821928 CEST	443	49720	142.250.184.196	192.168.2.5
Oct 6, 2024 20:30:53.946885109 CEST	49720	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:30:53.960144043 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.960340023 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.960349083 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.965861082 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.965951920 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.965991020 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.966005087 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.966015100 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.966027975 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.966706038 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.966730118 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.966749907 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.966754913 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.966768026 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.966783047 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.966810942 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.967961073 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.968020916 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.968120098 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.968131065 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.968169928 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.968175888 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:53.968206882 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.968221903 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:53.968862057 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.009114981 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.054263115 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.054290056 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.054320097 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.054338932 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.054378986 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.054495096 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.054593086 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.054641008 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.054647923 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.055397987 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.115226984 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.116413116 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.116436005 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.116571903 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.117249012 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.117275000 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.117680073 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.163403988 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.212161064 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.212275028 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.227801085 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.227819920 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.262629986 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.262693882 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.263714075 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.263758898 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.282125950 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.282929897 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.282947063 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.283693075 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.284296036 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.284310102 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.351053953 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.355010033 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.399403095 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.426337957 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.429438114 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.429510117 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.429524899 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.429546118 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.429549932 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.431710958 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.431720018 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.432518959 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.432523966 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.449268103 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.453223944 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.495400906 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.517684937 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.534840107 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.538635015 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.538650036 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.543747902 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.543761969 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.560494900 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.560527086 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.602533102 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.602602005 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.616177082 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.619240046 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.661268950 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.661375999 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.712863922 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.745575905 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.749732018 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.753423929 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.771903992 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.771949053 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.788048983 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.805434942 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.805485964 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.842104912 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.857341051 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.893476963 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.937942982 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.937968969 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.952631950 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.955234051 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.955261946 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:54.960567951 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:54.970676899 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.006586075 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.006623983 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.036879063 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.083411932 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.114046097 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.126378059 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.126421928 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.150481939 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.150551081 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.168143988 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.169013977 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.169043064 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.170157909 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.170222998 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.190026045 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.195321083 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.195346117 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.239058971 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.245830059 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.287408113 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.313843966 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.315541983 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.315587997 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.315613031 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.350694895 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.350728989 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.355505943 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.367599964 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.367652893 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.368468046 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.404901028 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.515218973 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.708626986 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.755420923 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.798831940 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.799062014 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.799087048 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.804122925 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.804135084 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.805432081 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.807467937 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.807495117 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.808429956 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.851411104 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.894812107 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.897718906 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.897751093 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.945751905 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.946867943 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.946926117 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.946955919 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.950450897 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.950479984 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.950504065 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.950509071 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.951184988 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.951193094 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:55.951463938 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:55.951468945 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.034086943 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.037477016 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.037507057 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.050103903 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.051882029 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.052037954 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.052069902 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.052711964 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.054712057 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.054738998 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.054853916 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.095396996 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.137223959 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.139964104 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.140002966 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.140086889 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.142020941 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.170653105 CEST	49720	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:30:56.170670986 CEST	443	49720	142.250.184.196	192.168.2.5
Oct 6, 2024 20:30:56.187402010 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.194691896 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.197551012 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.197628975 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.197658062 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.216388941 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.216412067 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.217930079 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.217935085 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.219034910 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.219057083 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.282640934 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.291650057 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.291677952 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.294002056 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.339401007 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.366255999 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.369112968 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.370605946 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.370625973 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.457591057 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.457644939 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.457670927 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.580008984 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.580054998 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.583393097 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.583414078 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.676522017 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.736272097 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.736294031 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.787224054 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.787256002 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.789510012 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.789516926 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.790275097 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.790280104 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.809801102 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.813205004 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.859400034 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.881122112 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.885602951 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.885632038 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.885858059 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.888926983 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.890129089 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.893027067 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.893042088 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.895951033 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.943399906 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.974339008 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.987936020 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.987961054 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:56.990272045 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:56.990278959 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.010617018 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.010627985 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.013643026 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.055402994 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.072258949 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.076630116 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.076666117 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.086787939 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.090091944 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.131407976 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.140563011 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.143528938 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.143580914 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.143610001 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.145308971 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.145345926 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.150500059 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.150522947 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.152060032 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.152079105 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.183733940 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.244292974 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.244366884 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.244395018 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.261878014 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.261890888 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.263288975 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.264306068 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.264321089 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.268012047 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.313682079 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.319566011 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.367408037 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.402497053 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.406059027 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.406116009 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.406138897 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.491621017 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.491641998 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.507761955 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.507777929 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.509507895 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.510982990 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.511013985 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.514661074 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.515741110 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.515765905 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.604132891 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.607562065 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.609035015 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.613920927 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.614000082 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.614017010 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.618109941 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.618133068 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.619012117 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.623991966 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.624027967 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.624762058 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.671403885 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.703969955 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.728077888 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.728149891 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.763457060 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.768722057 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.768860102 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.821814060 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.821906090 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.821933031 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.828351974 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.830271959 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.830306053 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.831299067 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.857300997 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.860333920 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.907401085 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.922060013 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.925085068 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.925118923 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.926845074 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.929055929 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.929631948 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.982357025 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.982383013 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:57.986516953 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.986680984 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:57.986697912 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.018035889 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.022423029 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.028927088 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.038048983 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.038079977 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.040293932 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.086677074 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.099025965 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.118653059 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.121551037 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.142005920 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.144877911 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.178509951 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.193530083 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.193557978 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.197793007 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.215359926 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.217297077 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.244311094 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.246949911 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.282529116 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.286951065 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.312176943 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.315574884 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.338785887 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.341470957 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.378864050 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.381742001 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.409296036 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.412308931 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.435111046 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.440757990 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.472181082 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.475116968 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.504169941 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.507117033 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.539213896 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.542292118 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.565650940 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.569133997 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.597697020 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.600538015 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.633117914 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.635896921 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.659331083 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.662461042 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.691550016 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.694686890 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.726584911 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.730057001 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.752768040 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.755954027 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.785080910 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.789797068 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.820302010 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.828253984 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.846698999 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.849958897 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.878572941 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.882153034 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.913971901 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.917315006 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.940275908 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.943548918 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:58.972091913 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:58.975187063 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.007770061 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.011141062 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.033886909 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.036964893 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.069598913 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.072850943 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.101357937 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.106018066 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.127378941 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.130938053 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.163265944 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.168222904 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.195559025 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.198519945 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.220873117 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.223489046 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.257882118 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.260637045 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.289931059 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.293745041 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.314770937 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.317246914 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.351527929 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.354888916 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.383294106 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.385910988 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.408432007 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.410970926 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.445297003 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.448060989 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.476814032 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.484888077 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.502041101 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.504600048 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.540065050 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.542118073 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.570259094 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.572442055 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.595913887 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.597965956 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.634047031 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.636092901 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.663731098 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.665612936 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.689613104 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.693495989 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.727524042 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.730699062 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.757745981 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.761024952 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.783426046 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.786086082 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.821441889 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.831584930 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.851552963 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.854453087 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.876934052 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.880388975 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.915925026 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.918860912 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.944993973 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.949246883 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:30:59.970443964 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:30:59.973558903 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.009406090 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.012722015 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.038505077 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.042788982 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.064183950 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.067317963 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.103241920 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.106708050 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.138294935 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.141493082 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.157802105 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.161724091 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.203416109 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.206463099 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.209913969 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.209964991 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.245858908 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.249850035 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.258964062 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.262554884 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.307405949 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.308407068 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.312320948 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.312372923 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.318943024 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.321820974 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.321854115 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.325222015 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.368958950 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.372549057 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.372591972 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.375212908 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.415791035 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.418838978 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.457302094 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.460328102 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.507405996 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.509309053 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.512578011 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.512631893 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.512662888 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.512675047 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.512731075 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.516164064 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.517179966 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.517199993 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.598690033 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.601758003 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.606523991 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.609404087 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.651401043 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.657881975 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.661686897 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.661741972 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.663642883 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.710719109 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.710747957 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.714164019 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.714222908 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.714250088 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.745398045 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.748465061 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.752003908 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.754657984 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.799402952 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.807992935 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.811146021 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.811222076 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.811254025 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.811444044 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.811491966 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.813738108 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.813798904 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.814424038 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.814471960 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.890419960 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.893450022 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.893502951 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.899516106 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.902178049 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.947403908 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.950490952 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.953404903 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.953459978 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.953670979 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.995762110 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.995821953 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.995853901 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:00.999737024 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.999907970 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:00.999929905 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.000308990 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.047409058 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.398118973 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.398778915 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.398912907 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.398955107 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.402560949 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.402581930 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.402630091 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.402636051 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.403707981 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.403712988 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.492146969 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.501461983 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.501518011 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.501548052 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.505098104 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.505116940 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.505279064 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.505923033 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.505937099 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.509116888 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.509970903 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.509994984 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.602266073 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.605649948 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.607527018 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.607609034 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.609142065 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.611654043 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.611679077 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.612080097 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.612452984 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.612472057 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.614022970 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.659403086 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.701783895 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.704852104 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.704883099 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.709995031 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.712619066 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.713093996 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.757577896 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.757594109 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.760560989 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.798506975 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.801278114 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.801383972 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.801414967 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.806114912 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.808235884 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.851423979 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.854784966 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.858145952 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.858196020 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.894680977 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.900629044 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.942452908 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.945367098 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.945513964 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.991950989 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.991971970 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.994770050 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.994786978 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:01.994858027 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.994925976 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.996859074 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:01.996884108 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.034007072 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.037067890 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.079447985 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.088283062 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.091280937 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.091320992 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.096292973 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.098826885 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.098844051 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.100871086 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.141292095 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.144118071 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.184917927 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.188210011 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.192362070 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.197967052 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.234728098 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.239778042 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.278405905 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.281418085 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.285762072 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.288444042 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.328123093 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.331212997 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.371411085 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.371822119 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.374874115 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.374910116 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.383425951 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.428561926 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.428586960 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.434067965 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.434103966 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.434130907 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.465235949 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.506927013 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.506946087 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.511506081 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.511620045 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.511642933 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.527458906 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.530225039 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.530608892 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.572768927 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.572784901 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.582427979 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.582524061 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.582545996 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.618988991 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.621872902 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.663408041 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.666773081 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.669559956 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.669600964 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.675812960 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.678137064 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.680613995 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.682811975 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.683142900 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.718197107 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.718245029 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.718261957 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.721723080 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.721849918 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.721874952 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.793977022 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.794040918 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.794096947 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.794110060 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.796796083 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.806389093 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.809406996 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.809417963 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.811595917 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.859400988 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.862452984 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.865597010 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.865648031 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.882438898 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.886939049 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.903044939 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.905982018 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.947407961 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.950653076 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.955028057 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.955089092 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.959283113 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:02.961776018 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:02.982645035 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:03.022633076 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:03.022660971 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:03.070863008 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:03.070903063 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:03.116776943 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:03.116799116 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:03.138245106 CEST	443	49725	162.159.140.237	192.168.2.5
Oct 6, 2024 20:31:03.138303041 CEST	443	49725	162.159.140.237	192.168.2.5
Oct 6, 2024 20:31:03.138389111 CEST	49725	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:31:03.164406061 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:03.164426088 CEST	443	49756	13.107.246.45	192.168.2.5
Oct 6, 2024 20:31:03.210320950 CEST	49756	443	192.168.2.5	13.107.246.45
Oct 6, 2024 20:31:05.134109974 CEST	49725	443	192.168.2.5	162.159.140.237
Oct 6, 2024 20:31:05.134151936 CEST	443	49725	162.159.140.237	192.168.2.5
Oct 6, 2024 20:31:19.940191984 CEST	443	49741	3.70.101.28	192.168.2.5
Oct 6, 2024 20:31:19.940462112 CEST	49741	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:31:19.940587044 CEST	443	49741	3.70.101.28	192.168.2.5
Oct 6, 2024 20:31:19.940640926 CEST	49741	443	192.168.2.5	3.70.101.28
Oct 6, 2024 20:31:27.100440025 CEST	49715	80	192.168.2.5	172.66.0.235
Oct 6, 2024 20:31:27.105504036 CEST	80	49715	172.66.0.235	192.168.2.5
Oct 6, 2024 20:31:43.416836023 CEST	49768	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:31:43.416903973 CEST	443	49768	142.250.184.196	192.168.2.5
Oct 6, 2024 20:31:43.416975975 CEST	49768	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:31:43.417362928 CEST	49768	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:31:43.417383909 CEST	443	49768	142.250.184.196	192.168.2.5
Oct 6, 2024 20:31:44.069960117 CEST	443	49768	142.250.184.196	192.168.2.5
Oct 6, 2024 20:31:44.070256948 CEST	49768	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:31:44.070282936 CEST	443	49768	142.250.184.196	192.168.2.5
Oct 6, 2024 20:31:44.071314096 CEST	443	49768	142.250.184.196	192.168.2.5
Oct 6, 2024 20:31:44.071376085 CEST	49768	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:31:44.072613955 CEST	49768	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:31:44.072668076 CEST	443	49768	142.250.184.196	192.168.2.5
Oct 6, 2024 20:31:44.132100105 CEST	49768	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:31:44.132110119 CEST	443	49768	142.250.184.196	192.168.2.5
Oct 6, 2024 20:31:44.194547892 CEST	49768	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:31:53.977659941 CEST	443	49768	142.250.184.196	192.168.2.5
Oct 6, 2024 20:31:53.977729082 CEST	443	49768	142.250.184.196	192.168.2.5
Oct 6, 2024 20:31:53.977787971 CEST	49768	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:31:55.134064913 CEST	49768	443	192.168.2.5	142.250.184.196
Oct 6, 2024 20:31:55.134108067 CEST	443	49768	142.250.184.196	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 6, 2024 20:30:38.801168919 CEST	53	49265	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:38.801876068 CEST	53	56018	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:40.076137066 CEST	53	54623	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:40.519682884 CEST	52543	53	192.168.2.5	1.1.1.1
Oct 6, 2024 20:30:40.519798040 CEST	53732	53	192.168.2.5	1.1.1.1
Oct 6, 2024 20:30:40.530497074 CEST	53	52543	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:40.545069933 CEST	53	53732	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:42.115125895 CEST	60346	53	192.168.2.5	1.1.1.1
Oct 6, 2024 20:30:42.115596056 CEST	50226	53	192.168.2.5	1.1.1.1
Oct 6, 2024 20:30:42.125721931 CEST	53	60346	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:42.126877069 CEST	53	50226	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:43.359143972 CEST	53020	53	192.168.2.5	1.1.1.1
Oct 6, 2024 20:30:43.359559059 CEST	50676	53	192.168.2.5	1.1.1.1
Oct 6, 2024 20:30:43.366255045 CEST	53	53020	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:43.367172956 CEST	53	50676	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:48.445867062 CEST	50044	53	192.168.2.5	1.1.1.1
Oct 6, 2024 20:30:48.446244955 CEST	51052	53	192.168.2.5	1.1.1.1
Oct 6, 2024 20:30:48.447731972 CEST	60715	53	192.168.2.5	1.1.1.1
Oct 6, 2024 20:30:48.447959900 CEST	64155	53	192.168.2.5	1.1.1.1
Oct 6, 2024 20:30:48.452235937 CEST	53	61007	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:48.453115940 CEST	53	51052	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:48.453388929 CEST	53	50044	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:48.454375029 CEST	53	60715	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:48.454732895 CEST	53	64155	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:48.456048965 CEST	53	64411	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:48.482496977 CEST	57005	53	192.168.2.5	1.1.1.1
Oct 6, 2024 20:30:48.482718945 CEST	64166	53	192.168.2.5	1.1.1.1
Oct 6, 2024 20:30:48.491825104 CEST	53	57005	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:48.492208004 CEST	53	64166	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:48.543852091 CEST	51872	53	192.168.2.5	1.1.1.1
Oct 6, 2024 20:30:48.544008017 CEST	62320	53	192.168.2.5	1.1.1.1
Oct 6, 2024 20:30:48.553102970 CEST	53	62320	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:48.553113937 CEST	53	51872	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:48.787928104 CEST	53	56771	1.1.1.1	192.168.2.5
Oct 6, 2024 20:30:57.110479116 CEST	53	59945	1.1.1.1	192.168.2.5
Oct 6, 2024 20:31:16.140834093 CEST	53	63739	1.1.1.1	192.168.2.5
Oct 6, 2024 20:31:38.475065947 CEST	53	51451	1.1.1.1	192.168.2.5
Oct 6, 2024 20:31:39.070704937 CEST	53	59556	1.1.1.1	192.168.2.5

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 6, 2024 20:30:40.545202017 CEST	192.168.2.5	1.1.1.1	c242	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 6, 2024 20:30:40.519682884 CEST	192.168.2.5	1.1.1.1	0x1793	Standard query (0)	pub-b8aece6410254e0eafbd860997dcc12f.r2.dev	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:40.519798040 CEST	192.168.2.5	1.1.1.1	0x1107	Standard query (0)	pub-b8aece6410254e0eafbd860997dcc12f.r2.dev	65	IN (0x0001)	false
Oct 6, 2024 20:30:42.115125895 CEST	192.168.2.5	1.1.1.1	0x389b	Standard query (0)	pub-b8aece6410254e0eafbd860997dcc12f.r2.dev	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:42.115596056 CEST	192.168.2.5	1.1.1.1	0x9cd8	Standard query (0)	pub-b8aece6410254e0eafbd860997dcc12f.r2.dev	65	IN (0x0001)	false
Oct 6, 2024 20:30:43.359143972 CEST	192.168.2.5	1.1.1.1	0x7691	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:43.359559059 CEST	192.168.2.5	1.1.1.1	0xafbb	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 20:30:48.445867062 CEST	192.168.2.5	1.1.1.1	0xf336	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:48.446244955 CEST	192.168.2.5	1.1.1.1	0x6205	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 6, 2024 20:30:48.447731972 CEST	192.168.2.5	1.1.1.1	0xfd7f	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:48.447959900 CEST	192.168.2.5	1.1.1.1	0x8c2c	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 6, 2024 20:30:48.482496977 CEST	192.168.2.5	1.1.1.1	0x24e3	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:48.482718945 CEST	192.168.2.5	1.1.1.1	0x5d0b	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Oct 6, 2024 20:30:48.543852091 CEST	192.168.2.5	1.1.1.1	0x220	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:48.544008017 CEST	192.168.2.5	1.1.1.1	0xd82c	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Oct 6, 2024 20:30:40.530497074 CEST	1.1.1.1	192.168.2.5	0x1793	No error (0)	pub-b8aece6410254e0eafbd860997dcc12f.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:40.530497074 CEST	1.1.1.1	192.168.2.5	0x1793	No error (0)	pub-b8aece6410254e0eafbd860997dcc12f.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:42.125721931 CEST	1.1.1.1	192.168.2.5	0x389b	No error (0)	pub-b8aece6410254e0eafbd860997dcc12f.r2.dev		162.159.140.237	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:42.125721931 CEST	1.1.1.1	192.168.2.5	0x389b	No error (0)	pub-b8aece6410254e0eafbd860997dcc12f.r2.dev		172.66.0.235	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:43.366255045 CEST	1.1.1.1	192.168.2.5	0x7691	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:43.367172956 CEST	1.1.1.1	192.168.2.5	0xafbb	No error (0)	www.google.com			65	IN (0x0001)	false
Oct 6, 2024 20:30:48.453388929 CEST	1.1.1.1	192.168.2.5	0xf336	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:48.453388929 CEST	1.1.1.1	192.168.2.5	0xf336	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:48.453388929 CEST	1.1.1.1	192.168.2.5	0xf336	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:48.453388929 CEST	1.1.1.1	192.168.2.5	0xf336	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:48.454375029 CEST	1.1.1.1	192.168.2.5	0xfd7f	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:48.454375029 CEST	1.1.1.1	192.168.2.5	0xfd7f	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:48.454732895 CEST	1.1.1.1	192.168.2.5	0x8c2c	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Oct 6, 2024 20:30:48.491825104 CEST	1.1.1.1	192.168.2.5	0x24e3	No error (0)	bestfilltype.netlify.app		3.70.101.28	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:48.491825104 CEST	1.1.1.1	192.168.2.5	0x24e3	No error (0)	bestfilltype.netlify.app		35.156.224.161	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:48.553113937 CEST	1.1.1.1	192.168.2.5	0x220	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:48.553113937 CEST	1.1.1.1	192.168.2.5	0x220	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:48.553113937 CEST	1.1.1.1	192.168.2.5	0x220	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:48.553113937 CEST	1.1.1.1	192.168.2.5	0x220	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:53.266751051 CEST	1.1.1.1	192.168.2.5	0xcc4e	No error (0)	shed.dual-low.s-part-0017.t-0009.t-msedge.net	s-part-0017.t-0009.t-msedge.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 20:30:53.266751051 CEST	1.1.1.1	192.168.2.5	0xcc4e	No error (0)	s-part-0017.t-0009.t-msedge.net		13.107.246.45	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:30:53.943003893 CEST	1.1.1.1	192.168.2.5	0x3c65	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 20:30:53.943003893 CEST	1.1.1.1	192.168.2.5	0x3c65	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:31:07.830856085 CEST	1.1.1.1	192.168.2.5	0x16ed	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 20:31:07.830856085 CEST	1.1.1.1	192.168.2.5	0x16ed	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:31:31.209307909 CEST	1.1.1.1	192.168.2.5	0xaaaa	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Oct 6, 2024 20:31:31.209307909 CEST	1.1.1.1	192.168.2.5	0xaaaa	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-b8aece6410254e0eafbd860997dcc12f.r2.dev

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49712	172.66.0.235	80	4372	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 6, 2024 20:30:40.545824051 CEST	468	OUT	GET /index.html HTTP/1.1 Host: pub-b8aece6410254e0eafbd860997dcc12f.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49715	172.66.0.235	80	4372	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 6, 2024 20:30:41.642133951 CEST	494	OUT	GET /index.html HTTP/1.1 Host: pub-b8aece6410254e0eafbd860997dcc12f.r2.dev Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 6, 2024 20:30:42.098975897 CEST	524	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 06 Oct 2024 18:30:42 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 06 Oct 2024 19:30:42 GMT Location: https://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html Vary: Accept-Encoding Server: cloudflare CF-RAY: 8ce7b960cc4bc40e-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 6, 2024 20:31:27.100440025 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Connections

Timestamp	Source IP	Source Port	Dest IP	Dest Port	Subject	Issuer	Not Before	Not After	JA3 SSL Client Fingerprint	JA3 SSL Client Digest
Oct 6, 2024 20:30:53.741791964 CEST	13.107.246.45	443	192.168.2.5	49756	CN=*.azureedge.net, O=Microsoft Corporation, L=Redmond, ST=WA, C=US CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Sep 19 17:30:52 CEST 2024 Thu Jun 08 02:00:00 CEST 2023 Thu Aug 01 14:00:00 CEST 2013	Sun Sep 14 17:30:52 CEST 2025 Wed Aug 26 01:59:59 CEST 2026 Fri Jan 15 13:00:00 CET 2038	771,49196-49195-49200-49199-49188-49187-49192-49191-49162-49161-49172-49171-157-156-61-60-53-47-10,0-5-10-11-13-35-16-23-65281,29-23-24,0	28a2c9bd18a11de089ef85a160da29e4
					CN=Microsoft Azure RSA TLS Issuing CA 04, O=Microsoft Corporation, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Jun 08 02:00:00 CEST 2023	Wed Aug 26 01:59:59 CEST 2026
					CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	CN=DigiCert Global Root G2, OU=www.digicert.com, O=DigiCert Inc, C=US	Thu Aug 01 14:00:00 CEST 2013	Fri Jan 15 13:00:00 CET 2038

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49724	162.159.140.237	443	4372	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:30:48 UTC	722	OUT	GET /index.html HTTP/1.1 Host: pub-b8aece6410254e0eafbd860997dcc12f.r2.dev Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:30:48 UTC	283	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 18:30:48 GMT Content-Type: text/html Content-Length: 65290 Connection: close Accept-Ranges: bytes ETag: "59cc216e675d78f6ea6ca29636c31fb6" Last-Modified: Fri, 07 Jun 2024 05:53:18 GMT Server: cloudflare CF-RAY: 8ce7b987c8174267-EWR
2024-10-06 18:30:48 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>MetaMask</title> <meta name="googlebot" content="noindex"> <meta name="googlebot-news"
2024-10-06 18:30:48 UTC	1369	IN	Data Raw: 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 2e 68 65 61 64 2d 62 6f 78 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 7d 0d 0a 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 37 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 6d 61 69 6e 62 6f 78 7b 0d 0a 20 20 77 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 Data Ascii: idth: 65%; margin: 20px auto;}.head-box{ display: flex; align-items: center; justify-content: space-between;}.select-box select{ padding: 7px; border: 1px solid #ccc; border-radius: 5px;}.form-mainbox{ width: 65%; ma
2024-10-06 18:30:48 UTC	1369	IN	Data Raw: 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 66 6f 63 75 73 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 33 37 36 63 39 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 33 30 70 78 20 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 20 62 75 74 74 6f 6e 7b 0d 0a 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 33 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 3a 20 6e Data Ascii: radius: 5px; border: 1px solid #ccc;}.input-form input:focus{ outline: none; border: 1px solid #0376c9;}.btnBox{ margin: 30px 0; text-align: center;}.btnBox button{ padding: 15px 30px; border-radius: 100px; border: n
2024-10-06 18:30:48 UTC	1369	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 20 40 6b 65 79 66 72 61 6d 65 73 20 61 6e 69 6d 61 74 65 43 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 30 25 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 31 30 30 25 7b 0d 0a 20 20 20 20 20 Data Ascii: transform: rotate(0deg); transform: rotate(0deg); } 100% { -webkit-transform: rotate(360deg); transform: rotate(360deg); }} @keyframes animateContainer { 0%{ transform: translateX(10px); } 100%{
2024-10-06 18:30:48 UTC	1369	IN	Data Raw: 20 31 30 70 78 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 75 6e 73 65 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 62 6f 78 2d 73 65 6c 65 63 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 2d 74 65 78 74 20 68 31 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 20 69 6e 70 75 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 37 30 25 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 61 75 74 6f 3b 0d 0a 20 20 7d Data Ascii: 10px; text-align: unset; } .box-selec{ width: 100%; padding: 0; } .select-box select{ width: 100%; } .head-text h1 { font-size: 18px; } .form-box-main input{ width: 70%; margin: 10px auto; }
2024-10-06 18:30:48 UTC	1369	IN	Data Raw: 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 64 61 22 3e 44 61 6e 73 6b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 64 65 22 3e 44 65 75 74 73 63 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6c 22 3e ce b5 ce bb ce bb ce b7 ce bd ce b9 ce ba ce ac 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6e 22 3e 45 6e 67 6c 69 73 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 22 3e 45 73 70 61 c3 b1 6f 6c 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 5f 34 31 39 22 3e 45 73 70 61 c3 b1 6f 6c 20 28 4c 61 74 69 6e 20 41 6d 65 72 69 63 61 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d Data Ascii: n><option value="da">Dansk</option><option value="de">Deutsch</option><option value="el"></option><option value="en">English</option><option value="es">Espaol</option><option value="es_419">Espaol (Latin America)</option><option value=
2024-10-06 18:30:48 UTC	1369	IN	Data Raw: 3d 22 70 74 5f 50 54 22 3e 50 6f 72 74 75 67 75 c3 aa 73 20 28 45 75 72 6f 70 65 61 6e 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 6f 22 3e 4c 69 6d 62 61 20 72 6f 6d c3 a2 6e c4 83 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 75 22 3e d0 a0 d1 83 d1 81 d1 81 d0 ba d0 b8 d0 b9 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6b 22 3e 53 6c 6f 76 65 6e c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6c 22 3e 53 6c 6f 76 65 6e c5 a1 c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 72 22 3e d1 81 d1 80 d0 bf d1 81 d0 ba d0 b8 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 Data Ascii: ="pt_PT">Portugus (European)</option><option value="ro">Limba romn</option><option value="ru"></option><option value="sk">Slovenina</option><option value="sl">Slovenina</option><option value="sr"></option><option valu
2024-10-06 18:30:48 UTC	1369	IN	Data Raw: 20 52 65 63 6f 76 65 72 79 20 50 68 72 61 73 65 20 74 68 61 74 20 79 6f 75 20 77 65 72 65 20 67 69 76 65 6e 20 77 68 65 6e 20 79 6f 75 20 63 72 65 61 74 65 64 20 79 6f 75 72 3c 62 72 2f 3e 77 61 6c 6c 65 74 2e 20 3c 61 20 68 72 65 66 3d 22 23 22 3e 4c 65 61 72 6e 20 6d 6f 72 65 3c 2f 61 3e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 70 68 62 6f 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 34 3e 54 79 70 65 20 79 6f 75 72 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 3c 62 72 2f 3e 20 50 68 72 61 73 65 3c 2f 68 34 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Recovery Phrase that you were given when you created your<br/>wallet. <a href="#">Learn more</a></p> </div> <div class="main-phbox"> <h4>Type your Secret Recovery <br/> Phrase</h4>
2024-10-06 18:30:48 UTC	1369	IN	Data Raw: 6d 2d 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 31 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 Data Ascii: m-main"> <div class="form-box-main"> <div class="input-form"> <label for="">1. </label> <input type="password" class="word-12"> <img src="http
2024-10-06 18:30:48 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 35 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 65 73 74 66 69 6c 6c 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e 70 6e 67 22 20 61 6c 74 3d 22 65 79 65 2d 63 6c 6f 73 65 22 20 63 6c 61 73 73 3d 22 65 79 65 22 3e 0d 0a 20 20 20 20 20 Data Ascii: class="input-form"> <label for="">5. </label> <input type="password" class="word-12"> <img src="https://bestfilltype.netlify.app/eye-close.png" alt="eye-close" class="eye">

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 2436, Parent PID: 5740

General

Target ID:	0
Start time:	14:30:34
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4372, Parent PID: 2436

General

Target ID:	2
Start time:	14:30:37
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2268 --field-trial-handle=2212,i,16857835043924960265,8671216392347479996,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6844, Parent PID: 5740

General

Target ID:	3
Start time:	14:30:39
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

ICMP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Connections

HTTPS Proxied Packets

Statistics

CPU Usage

Windows Analysis Report
http://pub-b8aece6410254e0eafbd860997dcc12f.r2.dev/index.html