Evidence (Network Trace): Using strace -f -e trace=connect, it was confirmed that the binary attempts direct connections to external IPs (e.g., 104.26.x.x, 172.65.x.x) on port 443 instead of routing ...