Create Interactive Tour

Linux Analysis Report
https://app.iiflsdi-app.com/landing.html

Overview

General Information

Sample URL:	https://app.iiflsdi-app.com/landing.html
Analysis ID:	1344098
Infos:

Detection

Score:	1
Range:	0 - 100
Whitelisted:	false

Signatures

Uses the "uname" system call to query kernel version information (possible evasion)

Queries the installed Ubuntu/CentOS release

Creates hidden files and/or directories

Classification

Analysis Advice

Some HTTP requests failed (404). It is likely that the sample will exhibit less behavior.

General Information

Joe Sandbox Version:	38.0.0 Ammolite
Analysis ID:	1344098
Start date and time:	2023-11-17 13:17:56 +01:00
Joe Sandbox Product:	CloudBasic
Overall analysis duration:	0h 5m 7s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://app.iiflsdi-app.com/landing.html
Analysis system description:	Ubuntu Linux 16.04 x64 (Kernel 4.4.0-116, Firefox 88.0, Document Viewer 3.18.2, LibreOffice 5.1.6.2, OpenJDK 1.8.0_171)
Analysis Mode:	default
Detection:	CLEAN
Classification:	clean1.lin@0/73@18/0

Warnings

Excluded IPs from analysis (whitelisted): 34.107.243.93, 23.38.189.226, 23.38.189.170
Excluded domains from analysis (whitelisted): a19.dscg10.akamai.net, ciscobinary.openh264.org, autopush.prod.mozaws.net, a17.rackcdn.com.mdc.edgesuite.net, aus5.mozilla.org, snippets.cdn.mozilla.net

Process Tree

system is lnxubuntu1

exo-open (PID: 4730, Parent: 4670, MD5: 39c5fa78f1cb3d950b9944f784018d3a) Arguments: exo-open https://app.iiflsdi-app.com/landing.html

exo-open New Fork (PID: 4737, Parent: 4730)

exo-open New Fork (PID: 4738, Parent: 4737)

exo-helper-1 (PID: 4738, Parent: 1656, MD5: c27a648e34ba5ce625d064af015be147) Arguments: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 --launch WebBrowser https://app.iiflsdi-app.com/landing.html

exo-helper-1 New Fork (PID: 4745, Parent: 4738)

sensible-browser (PID: 4745, Parent: 4738, MD5: a5909f49ad9c97574d2b4c49cc24905d) Arguments: /bin/sh /usr/bin/sensible-browser https://app.iiflsdi-app.com/landing.html

x-www-browser (PID: 4745, Parent: 4738, MD5: 42b33a4578e4a51d8a5d1010c466a9d7) Arguments: /bin/sh /usr/bin/x-www-browser https://app.iiflsdi-app.com/landing.html

x-www-browser New Fork (PID: 4746, Parent: 4745)

which (PID: 4746, Parent: 4745, MD5: e942f154ef9d9974366551d2d231d936) Arguments: /bin/sh /usr/bin/which /usr/bin/x-www-browser

firefox (PID: 4745, Parent: 4738, MD5: 9a5584c0c2c9ac6b1ba6296513075910) Arguments: /usr/lib/firefox/firefox https://app.iiflsdi-app.com/landing.html

firefox New Fork (PID: 4761, Parent: 4745)

firefox New Fork (PID: 4773, Parent: 4745)

firefox New Fork (PID: 4787, Parent: 4745)

lsb_release (PID: 4787, Parent: 4745, MD5: 18cba7de7bfedd0d9f027bd1c54cc2b2) Arguments: /usr/bin/python3 -Es /usr/bin/lsb_release -idrc

firefox New Fork (PID: 4807, Parent: 4745)

dbus-launch (PID: 4807, Parent: 4745, MD5: e4a469f27d130d783c21ce9c1c4456c3) Arguments: dbus-launch --autolaunch=11ced2f07072c6ae389b731c5cc84014 --binary-syntax --close-stderr

firefox New Fork (PID: 4871, Parent: 4745)

firefox New Fork (PID: 4872, Parent: 4871)

firefox (PID: 4871, Parent: 4745, MD5: 9a5584c0c2c9ac6b1ba6296513075910) Arguments: /usr/lib/firefox/firefox -contentproc -childID 1 -isForBrowser -prefsLen 1 -prefMapSize 172334 -parentBuildID 20190410113011 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appdir /usr/lib/firefox/browser 4745 true tab

firefox New Fork (PID: 4957, Parent: 4745)

firefox New Fork (PID: 4958, Parent: 4957)

firefox (PID: 4957, Parent: 4745, MD5: 9a5584c0c2c9ac6b1ba6296513075910) Arguments: /usr/lib/firefox/firefox -contentproc -childID 2 -isForBrowser -prefsLen 6061 -prefMapSize 172334 -parentBuildID 20190410113011 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appdir /usr/lib/firefox/browser 4745 true tab

firefox New Fork (PID: 4997, Parent: 4745)

firefox New Fork (PID: 4998, Parent: 4997)

firefox (PID: 4997, Parent: 4745, MD5: 9a5584c0c2c9ac6b1ba6296513075910) Arguments: /usr/lib/firefox/firefox -contentproc -childID 3 -isForBrowser -prefsLen 6934 -prefMapSize 172334 -parentBuildID 20190410113011 -greomni /usr/lib/firefox/omni.ja -appomni /usr/lib/firefox/browser/omni.ja -appdir /usr/lib/firefox/browser 4745 true tab

cleanup

Joe Sandbox Signatures

• Compliance
• Networking
• System Summary
• Persistence and Installation Behavior
• Malware Analysis System Evasion
• Language, Device and Operating System Detection

Click to jump to signature section

Show All Signature Results

There are no malicious signatures, click here to show all signatures.

Source: unknown

HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.20:58562 version: TLS 1.2

Source: global traffic	HTTP traffic detected: GET /landing.html HTTP/1.1Host: app.iiflsdi-app.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brConnection: keep-aliveUpgrade-Insecure-Requests: 1
Source: global traffic	HTTP traffic detected: GET /6/Firefox/66.0.3/20190410113011/Linux_x86_64-gcc3/en-US/release-cck-ubuntu/Linux%204.4.0-116-generic%20(GTK%203.18.9%2Clibpulse%208.0.0)/canonical/1.0/ HTTP/1.1Host: snippets.cdn.mozilla.netUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /css/buttons.css HTTP/1.1Host: app.iiflsdi-app.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://app.iiflsdi-app.com/landing.htmlConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /css/app.css HTTP/1.1Host: app.iiflsdi-app.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://app.iiflsdi-app.com/landing.htmlConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /css/font-awesome.min.css HTTP/1.1Host: app.iiflsdi-app.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://app.iiflsdi-app.com/landing.htmlConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /js/jquery.js HTTP/1.1Host: app.iiflsdi-app.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://app.iiflsdi-app.com/landing.htmlConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /js/bootstrap.min.js HTTP/1.1Host: app.iiflsdi-app.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://app.iiflsdi-app.com/landing.htmlConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /layer/layer.js HTTP/1.1Host: app.iiflsdi-app.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://app.iiflsdi-app.com/landing.htmlConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /js/hovertreewelcome.js HTTP/1.1Host: app.iiflsdi-app.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://app.iiflsdi-app.com/landing.htmlConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /js/bg_window.js HTTP/1.1Host: app.iiflsdi-app.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://app.iiflsdi-app.com/landing.htmlConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /us-west/bundles-pregen/Firefox/en-us/default.json HTTP/1.1Host: snippets.cdn.mozilla.netUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /js/jquery-1.7.1.min.js HTTP/1.1Host: app.iiflsdi-app.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://app.iiflsdi-app.com/landing.htmlConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /uploads/logo.png HTTP/1.1Host: app.iiflsdi-app.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: image/webp,/Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://app.iiflsdi-app.com/landing.htmlConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /layer/theme/default/layer.css?v=3.1.1 HTTP/1.1Host: app.iiflsdi-app.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: text/css,/;q=0.1Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brReferer: https://app.iiflsdi-app.com/landing.htmlConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /fonts/fontawesome-webfont.woff?v=4.2.0 HTTP/1.1Host: app.iiflsdi-app.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: application/font-woff2;q=1.0,application/font-woff;q=0.9,/;q=0.8Accept-Language: en-US,en;q=0.5Accept-Encoding: identityReferer: https://app.iiflsdi-app.com/css/font-awesome.min.cssConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: app.iiflsdi-app.comUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: image/webp,/Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brConnection: keep-alive
Source: global traffic	HTTP traffic detected: GET /update/3/GMP/66.0.3/20190410113011/Linux_x86_64-gcc3/null/release-cck-ubuntu/Linux%204.4.0-116-generic%20(GTK%203.18.9%2Clibpulse%208.0.0)/canonical/1.0/update.xml HTTP/1.1Host: aus5.mozilla.orgUser-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0Accept: /Accept-Language: en-US,en;q=0.5Accept-Encoding: gzip, deflate, brCache-Control: no-cachePragma: no-cacheConnection: keep-alive

Source: unknown

DNS traffic detected: queries for: app.iiflsdi-app.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 17 Nov 2023 12:18:40 GMTContent-Type: text/htmlTransfer-Encoding: chunkedConnection: closeCache-Control: max-age=14400CF-Cache-Status: HITAge: 131Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XghuiwCqMOxbS9kjuT%2FLCoBgm04EbQufn9bbEOQicX4%2BY0Ht8Rf31tM63LwGGcbY3mfxuSWaqzpJiXaDR%2Bw9yLKjn7SJABHnyakanMhczQIicGDQbPZxZ3zS38V1o%2FqOUHalFNxh"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8277eaeb4d342765-SEAalt-svc: h3=":443"; ma=86400

Source: unknown	Network traffic detected: HTTP traffic on port 56362 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56366 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56378
Source: unknown	Network traffic detected: HTTP traffic on port 56374 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56386
Source: unknown	Network traffic detected: HTTP traffic on port 56372 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56366
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56388
Source: unknown	Network traffic detected: HTTP traffic on port 56376 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42536 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58562
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56362
Source: unknown	Network traffic detected: HTTP traffic on port 56378 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42534 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56380
Source: unknown	Network traffic detected: HTTP traffic on port 56370 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56388 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56390 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 42516 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56386 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56380 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56368
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56374
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56376
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56370
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56392
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42516
Source: unknown	Network traffic detected: HTTP traffic on port 56368 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56372
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56394
Source: unknown	Network traffic detected: HTTP traffic on port 56394 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 56392 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42534
Source: unknown	Network traffic detected: HTTP traffic on port 58562 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 56390
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 42536

Source: cert9.db-journal.34.dr, cert9.db.34.dr	String found in binary or memory: http://crl.pki.goog/gsr2/gsr2.crl0?
Source: cert9.db-journal.34.dr, cert9.db.34.dr	String found in binary or memory: http://crl3.digicert.com/DigiCertGlobalRootCA.crl07
Source: cert9.db-journal.34.dr, cert9.db.34.dr	String found in binary or memory: http://crl4.digicert.com/DigiCertGlobalRootCA.crl0=
Source: F805D8CAE142D878D7FC013CCEEF913C38BE31EF.34.dr	String found in binary or memory: http://fontawesome.io
Source: F805D8CAE142D878D7FC013CCEEF913C38BE31EF.34.dr	String found in binary or memory: http://fontawesome.io/license
Source: ED61E2F0D410C8FEDA332B35EFCA69693965ECB1.34.dr	String found in binary or memory: http://getbootstrap.com)
Source: C15619A64BE15A33A26CE7F774E8B29B1E8CA560.34.dr	String found in binary or memory: http://layer.layui.com/
Source: cert9.db-journal.34.dr, cert9.db.34.dr	String found in binary or memory: http://ocsp.digicert.com0
Source: cert9.db-journal.34.dr, cert9.db.34.dr	String found in binary or memory: http://ocsp.pki.goog/gsr202
Source: places.sqlite-wal.34.dr	String found in binary or memory: http://wiki.ubuntu.com
Source: places.sqlite-wal.34.dr	String found in binary or memory: http://wiki.ubuntu.com/moc.utnubu.ikiw.
Source: 0FA16E4596296001A9857264129362F499572146.34.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: AF727B868551E00A242A12CA62A025A1D10352FE.34.dr	String found in binary or memory: http://www.baidu.com
Source: places.sqlite-wal.34.dr	String found in binary or memory: http://www.debian.org
Source: places.sqlite-wal.34.dr	String found in binary or memory: http://www.debian.org/gro.naibed.www.
Source: places.sqlite-wal.34.dr	String found in binary or memory: http://www.ubuntu.com
Source: places.sqlite-wal.34.dr	String found in binary or memory: http://www.ubuntu.com/moc.utnubu.www.
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://answers.launchpad.net
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://answers.launchpad.net/ubuntu/
Source: recovery.jsonlz4.tmp.34.dr	String found in binary or memory: https://app.iiflsdi-
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://app.iiflsdi-app.com
Source: 62334AFB83609B25B29CD81DDCF086F62EA668A8.34.dr	String found in binary or memory: https://app.iiflsdi-app.com/css/app.css
Source: 0FA16E4596296001A9857264129362F499572146.34.dr	String found in binary or memory: https://app.iiflsdi-app.com/css/buttons.css
Source: F805D8CAE142D878D7FC013CCEEF913C38BE31EF.34.dr	String found in binary or memory: https://app.iiflsdi-app.com/css/font-awesome.min.css
Source: 55F784984DEE175F073A757B0206338D613E4759.34.dr	String found in binary or memory: https://app.iiflsdi-app.com/js/bg_window.js
Source: ED61E2F0D410C8FEDA332B35EFCA69693965ECB1.34.dr	String found in binary or memory: https://app.iiflsdi-app.com/js/bootstrap.min.js
Source: 22B8925CE1CF856F212F1016775C0769E5778302.34.dr	String found in binary or memory: https://app.iiflsdi-app.com/js/hovertreewelcome.js
Source: 9C20A376592F45D3A3726BFFCDC4E4290F545200.34.dr	String found in binary or memory: https://app.iiflsdi-app.com/js/jquery-1.7.1.min.js
Source: 91CFD3D640EFE75C9C1AC26AC55F57F92C8FF418.34.dr	String found in binary or memory: https://app.iiflsdi-app.com/js/jquery.js
Source: AF727B868551E00A242A12CA62A025A1D10352FE.34.dr	String found in binary or memory: https://app.iiflsdi-app.com/landing.html
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://app.iiflsdi-app.com/landing.htmlIIFLSDImoc.ppa-idslfii.ppa.d
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://app.iiflsdi-app.com/landing.htmlmoc.ppa-idslfii.ppa.d
Source: C15619A64BE15A33A26CE7F774E8B29B1E8CA560.34.dr	String found in binary or memory: https://app.iiflsdi-app.com/layer/layer.js
Source: 34E309C940AAF78E945F6867A500183E0FA9FDA0.34.dr	String found in binary or memory: https://app.iiflsdi-app.com/layer/theme/default/layer.css?v=3.1.1
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://app.iiflsdi-app.comd
Source: AF727B868551E00A242A12CA62A025A1D10352FE.34.dr	String found in binary or memory: https://d3rmsr87u7t5y9.cloudfront.net/IIFLSDI.apk
Source: webext.sc.lz4.tmp.34.dr	String found in binary or memory: https://github.com/
Source: cert9.db-journal.34.dr, cert9.db.34.dr	String found in binary or memory: https://pki.goog/repository/0
Source: C389DE279BF5275924497D5B33D1F1900116E591.34.dr	String found in binary or memory: https://snippets.cdn.mozilla.net/us-west/bundles-pregen/Firefox/en-us/default.json
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://support.mozilla.org
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://support.mozilla.org/en-US/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=fire
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://support.mozilla.org/en-US/products/firefoxgro.allizom.troppus.
Source: cert9.db-journal.34.dr, cert9.db.34.dr	String found in binary or memory: https://www.digicert.com/CPS0
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://www.mozilla.org
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://www.mozilla.org/en-US/about/gro.allizom.www.
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://www.mozilla.org/en-US/contribute/gro.allizom.www.
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://www.mozilla.org/en-US/firefox/central/gro.allizom.www.
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://www.mozilla.org/en-US/privacy/firefox/Firefox
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://www.mozilla.org/media/img/mozorg/mozilla-256.4720741d4108.jpg
Source: places.sqlite-wal.34.dr	String found in binary or memory: https://www.mozilla.org/privacy/firefox/gro.allizom.www.

Source: unknown

HTTPS traffic detected: 35.244.181.201:443 -> 192.168.2.20:58562 version: TLS 1.2

Source: classification engine

Classification label: clean1.lin@0/73@18/0

Source: /usr/bin/exo-open (PID: 4730)	Directory: /home/james/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 (PID: 4738)	Directory: /home/james/.cache	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 (PID: 4738)	Directory: /home/james/.local	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 (PID: 4738)	Directory: /home/james/.config	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4745)	Directory: /home/james/.cache	Jump to behavior

Source: /usr/bin/exo-open (PID: 4730)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/x86_64-linux-gnu/xfce4/exo-1/exo-helper-1 (PID: 4738)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4745)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4773)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/bin/dbus-launch (PID: 4807)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4871)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4957)	Queries kernel information via 'uname':	Jump to behavior
Source: /usr/lib/firefox/firefox (PID: 4997)	Queries kernel information via 'uname':	Jump to behavior

Source: /usr/lib/firefox/firefox (PID: 4787)

Arguments: /usr/bin/lsb_release -> /usr/bin/python3 -Es /usr/bin/lsb_release -idrc

Jump to behavior

Mitre Att&ck Matrix

Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Exfiltration	Command and Control	Network Effects	Remote Service Effects	Impact	Resource Development	Reconnaissance
Valid Accounts	Windows Management Instrumentation	Path Interception	Path Interception	1 Hidden Files and Directories	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	Exfiltration Over Other Network Medium	1 Encrypted Channel	Exploit SS7 to Redirect Phone Calls/SMS	Remotely Wipe Data Without Authorization	Abuse Accessibility Features	Acquire Infrastructure	Gather Victim Identity Information
Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	Exfiltration Over Bluetooth	3 Non-Application Layer Protocol	SIM Card Swap	Obtain Device Cloud Backups	Network Denial of Service	Domains	Credentials
Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	Automated Exfiltration	4 Application Layer Protocol			Data Encrypted for Impact	DNS Server	Email Addresses
Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	Traffic Duplication	3 Ingress Tool Transfer			Data Destruction	Virtual Private Server	Employee Names

Malware Configuration

⊘No configs have been found

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Number of created Files
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://app.iiflsdi-app.com/landing.html	0%	Virustotal		Browse
https://app.iiflsdi-app.com/landing.html	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://app.iiflsdi-app.com/js/bootstrap.min.js	0%	Avira URL Cloud	safe
https://app.iiflsdi-app.com/fonts/fontawesome-webfont.woff?v=4.2.0	0%	Avira URL Cloud	safe
https://app.iiflsdi-app.com/layer/layer.js	0%	Avira URL Cloud	safe
https://pki.goog/repository/0	0%	Avira URL Cloud	safe
https://app.iiflsdi-app.com/layer/theme/default/layer.css?v=3.1.1	0%	Avira URL Cloud	safe
https://app.iiflsdi-app.com/css/app.css	0%	Avira URL Cloud	safe
https://pki.goog/repository/0	0%	Virustotal		Browse
https://app.iiflsdi-app.com/landing.htmlmoc.ppa-idslfii.ppa.d	0%	Avira URL Cloud	safe
https://app.iiflsdi-app.com/js/jquery.js	0%	Avira URL Cloud	safe
https://app.iiflsdi-app.com/landing.htmlIIFLSDImoc.ppa-idslfii.ppa.d	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
prod.balrog.prod.cloudops.mozgcp.net	35.244.181.201	true	false	unknown
app.iiflsdi-app.com	104.21.85.31	true	false	unknown
d228z91au11ukj.cloudfront.net	3.163.189.27	true	false	high
push.services.mozilla.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://app.iiflsdi-app.com/layer/layer.js	false	Avira URL Cloud: safe	unknown
https://app.iiflsdi-app.com/js/bootstrap.min.js	false	Avira URL Cloud: safe	unknown
https://app.iiflsdi-app.com/fonts/fontawesome-webfont.woff?v=4.2.0	false	Avira URL Cloud: safe	unknown
https://app.iiflsdi-app.com/layer/theme/default/layer.css?v=3.1.1	false	Avira URL Cloud: safe	unknown
https://app.iiflsdi-app.com/css/app.css	false	Avira URL Cloud: safe	unknown
https://app.iiflsdi-app.com/js/jquery.js	false	Avira URL Cloud: safe	unknown
https://app.iiflsdi-app.com/js/bg_window.js	false		unknown
https://app.iiflsdi-app.com/uploads/logo.png	false		unknown
https://app.iiflsdi-app.com/landing.html	false		unknown
https://app.iiflsdi-app.com/css/buttons.css	false		unknown
https://app.iiflsdi-app.com/js/jquery-1.7.1.min.js	false		unknown
https://app.iiflsdi-app.com/favicon.ico	false		unknown
https://app.iiflsdi-app.com/css/font-awesome.min.css	false		unknown
https://app.iiflsdi-app.com/js/hovertreewelcome.js	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://www.debian.org	places.sqlite-wal.34.dr	false		high
http://fontawesome.io	F805D8CAE142D878D7FC013CCEEF913C38BE31EF.34.dr	false		high
http://www.apache.org/licenses/LICENSE-2.0	0FA16E4596296001A9857264129362F499572146.34.dr	false		high
http://www.baidu.com	AF727B868551E00A242A12CA62A025A1D10352FE.34.dr	false		high
https://d3rmsr87u7t5y9.cloudfront.net/IIFLSDI.apk	AF727B868551E00A242A12CA62A025A1D10352FE.34.dr	false		high
http://www.debian.org/gro.naibed.www.	places.sqlite-wal.34.dr	false		high
https://support.mozilla.org/en-US/products/firefoxgro.allizom.troppus.	places.sqlite-wal.34.dr	false		high
http://www.ubuntu.com	places.sqlite-wal.34.dr	false		high
http://wiki.ubuntu.com/moc.utnubu.ikiw.	places.sqlite-wal.34.dr	false		high
https://pki.goog/repository/0	cert9.db-journal.34.dr, cert9.db.34.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
http://layer.layui.com/	C15619A64BE15A33A26CE7F774E8B29B1E8CA560.34.dr	false		high
https://answers.launchpad.net/ubuntu/	places.sqlite-wal.34.dr	false		high
https://app.iiflsdi-app.com/landing.htmlmoc.ppa-idslfii.ppa.d	places.sqlite-wal.34.dr	false	Avira URL Cloud: safe	unknown
http://www.ubuntu.com/moc.utnubu.www.	places.sqlite-wal.34.dr	false		high
http://fontawesome.io/license	F805D8CAE142D878D7FC013CCEEF913C38BE31EF.34.dr	false		high
https://app.iiflsdi-app.com/landing.htmlIIFLSDImoc.ppa-idslfii.ppa.d	places.sqlite-wal.34.dr	false	Avira URL Cloud: safe	unknown
https://support.mozilla.org/en-US/kb/customize-firefox-controls-buttons-and-toolbars?utm_source=fire	places.sqlite-wal.34.dr	false		high
https://answers.launchpad.net	places.sqlite-wal.34.dr	false		high
https://github.com/	webext.sc.lz4.tmp.34.dr	false		high
https://app.iiflsdi-app.comd	places.sqlite-wal.34.dr	false		unknown
http://getbootstrap.com)	ED61E2F0D410C8FEDA332B35EFCA69693965ECB1.34.dr	false		low
http://wiki.ubuntu.com	places.sqlite-wal.34.dr	false		high
https://app.iiflsdi-app.com	places.sqlite-wal.34.dr	false		unknown
https://support.mozilla.org	places.sqlite-wal.34.dr	false		high
http://crl.pki.goog/gsr2/gsr2.crl0?	cert9.db-journal.34.dr, cert9.db.34.dr	false		unknown
https://app.iiflsdi-	recovery.jsonlz4.tmp.34.dr	false		low

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
35.244.181.201	prod.balrog.prod.cloudops.mozgcp.net	United States	15169	GOOGLEUS	false
104.21.85.31	app.iiflsdi-app.com	United States	13335	CLOUDFLARENETUS	false
3.163.189.27	d228z91au11ukj.cloudfront.net	United States	16509	AMAZON-02US	false

Process:	/usr/lib/firefox/firefox
File Type:	very short file (no magic)
Category:	dropped
Size (bytes):	1
Entropy (8bit):	0.0
Encrypted:	false
SSDEEP:	3::
MD5:	93B885ADFE0DA089CDF634904FD59F71
SHA1:	5BA93C9DB0CFF93F52B521D7420E43F6EDA2784F
SHA-256:	6E340B9CFFB37A989CA544E6BB780A2C78901D3FB33738768511A30617AFA01D
SHA-512:	B8244D028981D693AF7B456AF8EFA4CAD63D282E19FF14942C246E50D9351D22704A802A71C3580B6370DE4CEB293C324A8423342557D4E5C38438F0E36910EE
Malicious:	false
Reputation:	low
Preview:	.

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Nov 17, 2023 13:18:34.223227978 CET	33995	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:18:34.223227978 CET	33995	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:18:34.391272068 CET	53	33995	8.8.8.8	192.168.2.20
Nov 17, 2023 13:18:34.391697884 CET	53	33995	8.8.8.8	192.168.2.20
Nov 17, 2023 13:18:54.531443119 CET	53536	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:18:54.531443119 CET	53536	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:18:54.684106112 CET	53	53536	8.8.8.8	192.168.2.20
Nov 17, 2023 13:18:54.692792892 CET	47564	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:18:54.692835093 CET	47564	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:18:54.852713108 CET	53	47564	8.8.8.8	192.168.2.20
Nov 17, 2023 13:19:00.495127916 CET	37049	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:19:00.495129108 CET	37049	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:19:00.497107983 CET	52608	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:19:00.647694111 CET	53	37049	8.8.8.8	192.168.2.20
Nov 17, 2023 13:19:11.288002014 CET	35244	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:19:11.288002014 CET	35244	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:19:11.289096117 CET	49581	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:19:11.440193892 CET	53	35244	8.8.8.8	192.168.2.20
Nov 17, 2023 13:19:32.077452898 CET	57502	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:19:32.077452898 CET	57502	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:19:32.077573061 CET	38321	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:19:32.230237961 CET	53	57502	8.8.8.8	192.168.2.20
Nov 17, 2023 13:20:12.868781090 CET	48951	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:20:12.868781090 CET	48951	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:20:12.870735884 CET	45837	53	192.168.2.20	8.8.8.8
Nov 17, 2023 13:20:13.021565914 CET	53	48951	8.8.8.8	192.168.2.20

Timestamp	kBytes transferred	Direction	Data
2023-11-17 12:18:34 UTC	0	OUT	GET /landing.html HTTP/1.1 Host: app.iiflsdi-app.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,/;q=0.8 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive Upgrade-Insecure-Requests: 1
2023-11-17 12:18:35 UTC	0	IN	HTTP/1.1 200 OK Date: Fri, 17 Nov 2023 12:18:35 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Last-Modified: Mon, 13 Nov 2023 09:42:10 GMT CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=at70YVDnyvK8gMinprXXnc0Bz8U1sRcfIsurYyyLOOLsq2FVdAxNg%2BD0e8jXV9BVit8emBkpVisyeGHJUZ1UvPuHOgewAhXuDbXzJuFJyMiEXG1wFV9HpWgWmTO8of7BeQTUvw2d"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8277eac88c3ac377-SEA alt-svc: h3=":443"; ma=86400
2023-11-17 12:18:35 UTC	0	IN	Data Raw: 32 32 31 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 7a 68 2d 63 6e 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 3c 73 63 72 69 70 74 3e 76 61 72 20 6e 61 6d 65 20 3d 20 22 49 49 46 4c 53 44 49 22 3b 3c 2f 73 63 72 69 70 74 3e 0a 20 20 3c 74 69 74 6c 65 3e 49 49 46 4c 53 44 49 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 63 73 73 2f 62 75 74 74 6f 6e 73 Data Ascii: 2217<!DOCTYPE html><html lang="zh-cn"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <script>var name = "IIFLSDI";</script> <title>IIFLSDI</title> <link rel="stylesheet" href="css/buttons
2023-11-17 12:18:35 UTC	1	IN	Data Raw: 6f 20 48 65 69 2c 73 61 6e 73 3b 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 37 30 34 30 65 3b 0a 09 7d 0a 20 20 23 63 61 6e 76 61 73 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 30 3b 0a 20 20 20 20 74 6f 70 3a 20 30 3b 0a 20 20 20 20 6c 65 66 74 3a 20 30 3b 0a 20 20 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0a 20 20 20 20 72 69 67 68 74 3a 20 30 3b 0a 20 20 20 20 63 75 72 73 6f 72 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 2e 63 6f 6e 74 65 6e 74 7b 0a 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 31 Data Ascii: o Hei,sans; background-color: #07040e;} #canvas { position: absolute; z-index: 10; top: 0; left: 0; bottom: 0; right: 0; cursor: none; } .content{ position: absolute; z-index: 1
2023-11-17 12:18:35 UTC	3	IN	Data Raw: 6f 63 75 6d 65 6e 74 2e 6f 6e 63 6f 6e 74 65 78 74 6d 65 6e 75 20 3d 20 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 22 29 0a 64 6f 63 75 6d 65 6e 74 2e 6f 6e 6b 65 79 64 6f 77 6e 20 3d 64 6f 63 75 6d 65 6e 74 2e 6f 6e 6b 65 79 75 70 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 6f 6e 6b 65 79 70 72 65 73 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 20 0a 69 66 28 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2e 6b 65 79 43 6f 64 65 20 3d 3d 20 31 32 33 29 20 7b 20 0a 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 66 61 6c 73 65 3b 0a 72 65 74 75 72 6e 28 66 61 6c 73 65 29 3b 20 0a 7d 20 0a 7d 0a 3c 2f 73 63 72 69 70 74 3e 0a 20 20 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 63 6c 61 73 73 3d 22 68 6f 6d 65 20 70 61 Data Ascii: ocument.oncontextmenu = new Function("return false;")document.onkeydown =document.onkeyup = document.onkeypress=function(){ if(window.event.keyCode == 123) { window.event.returnValue=false;return(false); } }</script> </head><body class="home pa
2023-11-17 12:18:35 UTC	4	IN	Data Raw: 64 72 6f 70 64 6f 77 6e 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 62 61 69 64 75 2e 63 6f 6d 22 20 63 6c 61 73 73 3d 22 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 e8 87 aa e5 ae 9a e4 b9 89 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 09 09 09 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 68 61 73 2d 63 68 69 6c 64 72 65 6e 20 64 72 6f 70 64 6f 77 6e 22 3e 0a 20 20 20 20 20 20 20 20 Data Ascii: dropdown"> <a href="http://www.baidu.com" class="dropdown-toggle"> </a> </li><li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-has-children dropdown">
2023-11-17 12:18:35 UTC	5	IN	Data Raw: 3a 20 66 61 64 65 49 6e 44 6f 77 6e 3b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 68 31 20 63 6c 61 73 73 3d 22 77 6f 77 20 66 61 64 65 49 6e 20 61 6e 69 6d 61 74 65 64 22 20 64 61 74 61 2d 77 6f 77 2d 64 65 6c 61 79 3d 22 37 35 30 6d 73 22 20 73 74 79 6c 65 3d 22 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 20 37 35 30 6d 73 3b 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 66 61 64 65 49 6e 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 33 36 70 78 3b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 49 49 46 4c 53 44 49 20 20 20 20 20 20 20 20 20 20 3c 2f 68 31 3e 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: : fadeInDown;"> <h1 class="wow fadeIn animated" data-wow-delay="750ms" style="visibility: visible; animation-delay: 750ms; animation-name: fadeIn; border-bottom:none;font-weight:600;font-size:36px;"> IIFLSDI </h1>
2023-11-17 12:18:35 UTC	7	IN	Data Raw: 69 64 74 68 3a 20 31 30 30 25 3b 20 62 6f 74 74 6f 6d 3a 20 33 30 70 78 3b 20 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 6c 65 66 74 3a 20 30 3b 22 3e 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 3c 63 61 6e 76 61 73 20 69 64 3d 22 63 61 6e 76 61 73 22 20 77 69 64 74 68 3d 22 31 30 30 25 22 20 68 65 69 67 68 74 3d 22 31 30 30 25 22 3e 3c 2f 63 61 6e 76 61 73 3e 0a 20 20 3c 21 2d 2d 20 3c 64 69 76 20 69 64 3d 22 70 61 72 74 69 63 6c 65 73 2d 6a 73 22 3e 3c 2f 64 69 76 3e 20 2d 2d 3e 0a 20 20 0a 20 20 3c 2f 64 69 76 3e 0a 0a 20 0a 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 6a 73 2f 68 6f 76 65 72 74 72 65 65 77 65 6c 63 6f 6d 65 Data Ascii: idth: 100%; bottom: 30px; box-sizing: border-box;left: 0;"> </div> </div> </div> </div> <canvas id="canvas" width="100%" height="100%"></canvas> ... <div id="particles-js"></div> --> </div> <script src="js/hovertreewelcome
2023-11-17 12:18:35 UTC	8	IN	Data Raw: 73 68 6f 77 28 29 0a 09 09 7d 2c 20 33 30 30 30 29 3b 0a 09 09 0a 20 20 20 20 7d 0a 0a 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 64 6f 77 6e 6c 6f 61 64 41 6e 64 72 69 6f 64 28 29 20 7b 0a 20 20 20 20 20 20 20 20 64 65 76 69 63 65 5f 74 79 70 65 20 3d 20 22 61 6e 64 72 6f 69 64 22 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 24 2e 67 65 74 28 22 2f 69 6e 64 65 78 2f 69 6e 64 65 78 2f 61 6e 64 72 6f 69 64 5f 64 6f 77 6e 6c 6f 61 64 22 2c 20 7b 64 65 76 69 63 65 5f 74 79 70 65 3a 64 65 76 69 63 65 5f 74 79 70 65 7d 2c 20 66 75 6e 63 74 69 6f 6e 28 64 61 74 61 29 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 64 61 74 20 3d 20 24 2e 70 61 72 73 65 4a 53 4f 4e 28 20 64 61 74 61 20 29 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 28 Data Ascii: show()}, 3000); } function downloadAndriod() { device_type = "android"; $.get("/index/index/android_download", {device_type:device_type}, function(data){ var dat = $.parseJSON( data ); if(
2023-11-17 12:18:35 UTC	9	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-11-17 12:18:35 UTC	9	OUT	GET /6/Firefox/66.0.3/20190410113011/Linux_x86_64-gcc3/en-US/release-cck-ubuntu/Linux%204.4.0-116-generic%20(GTK%203.18.9%2Clibpulse%208.0.0)/canonical/1.0/ HTTP/1.1 Host: snippets.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive
2023-11-17 12:18:36 UTC	70	IN	HTTP/1.1 303 See Other Content-Type: text/html; charset=UTF-8 Content-Length: 0 Connection: close Cache-Control: public, max-age=86400 Date: Fri, 17 Nov 2023 12:18:36 GMT Location: https://snippets.cdn.mozilla.net/us-west/bundles-pregen/Firefox/en-us/default.json Server: meinheld/1.0.2 X-Backend-Server: frankfurt/snippets-prod/snippets-prod-676f79884-47465 X-Cache: Miss from cloudfront Via: 1.1 28ece4c2a6dd3c0a95262b04d30d3eb4.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA900-P3 X-Amz-Cf-Id: 4SyRmeJdMz8pEeSPKPQ3KErBcFRIjZ-P4oldatmeU5gMypT2Iph8ig==

Timestamp	kBytes transferred	Direction	Data
2023-11-17 12:18:36 UTC	71	OUT	GET /us-west/bundles-pregen/Firefox/en-us/default.json HTTP/1.1 Host: snippets.cdn.mozilla.net User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive
2023-11-17 12:18:37 UTC	88	IN	HTTP/1.1 200 OK Content-Type: application/json Content-Length: 3 Connection: close Last-Modified: Wed, 30 Oct 2019 08:26:45 GMT x-amz-version-id: null Accept-Ranges: bytes Server: AmazonS3 Date: Fri, 17 Nov 2023 12:10:49 GMT Cache-Control: max-age=600 ETag: "8a80554c91d9fca8acb82f023de02f11" Vary: Accept-Encoding X-Cache: Error from cloudfront Via: 1.1 e2c409cb6da9756c7d0172de8b33006e.cloudfront.net (CloudFront) X-Amz-Cf-Pop: SEA900-P3 X-Amz-Cf-Id: fXSafeaQ4HDqshSteHT77ZsoVuV4IMO1HiQQugFuNQjhWZ4u1l_EAA== Age: 469
2023-11-17 12:18:37 UTC	88	IN	Data Raw: 7b 7d 0a Data Ascii: {}

Timestamp	kBytes transferred	Direction	Data
2023-11-17 12:18:38 UTC	374	OUT	GET /layer/theme/default/layer.css?v=3.1.1 HTTP/1.1 Host: app.iiflsdi-app.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://app.iiflsdi-app.com/landing.html Connection: keep-alive
2023-11-17 12:18:38 UTC	374	IN	HTTP/1.1 200 OK Date: Fri, 17 Nov 2023 12:18:38 GMT Content-Type: text/css Content-Length: 14367 Connection: close Last-Modified: Tue, 07 Nov 2023 06:41:47 GMT ETag: "6549dc2b-381f" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 130 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=wGHp0ODcZ4VRZ2cMgpETeTZwYVeuGrqTsFV%2B0csfNLJpO4N4Sh4XHPEAGtzUCXhvP5sh7Yh7nHDVVKsehvJiBBTUsyadRh2JoplFJDrtcKcB6q0g7AIh1RLAhSVdfAFyH3CbxiMa"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8277eadeccd42807-SEA alt-svc: h3=":443"; ma=86400
2023-11-17 12:18:38 UTC	375	IN	Data Raw: 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 69 6d 67 62 61 72 2c 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 69 6d 67 74 69 74 20 61 2c 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 74 61 62 20 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 74 69 74 6c 65 20 73 70 61 6e 2c 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 74 69 74 6c 65 7b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 7d 68 74 6d 6c 20 23 6c 61 79 75 69 63 73 73 2d 6c 61 79 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 39 38 39 70 78 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2c 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 73 68 61 64 65 7b 70 6f 73 69 74 69 6f 6e 3a 66 69 78 65 64 Data Ascii: .layui-layer-imgbar,.layui-layer-imgtit a,.layui-layer-tab .layui-layer-title span,.layui-layer-title{text-overflow:ellipsis;white-space:nowrap}html #layuicss-layer{display:none;position:absolute;width:1989px}.layui-layer,.layui-layer-shade{position:fixed
2023-11-17 12:18:38 UTC	375	IN	Data Raw: 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 42 32 42 32 42 32 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 31 70 78 20 31 70 78 20 35 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 32 29 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 6c 6f 61 64 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 6c 6f 61 64 69 6e 67 2d 31 2e 67 69 66 29 20 63 65 6e 74 65 72 20 63 65 6e 74 65 72 20 6e 6f 2d 72 65 70 65 61 74 20 23 65 65 65 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 69 63 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 69 63 6f 6e 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 62 74 6e 20 61 2c 2e 6c 61 79 75 69 2d 6c 61 79 65 72 Data Ascii: border:1px solid #B2B2B2;border:1px solid rgba(0,0,0,.1);box-shadow:1px 1px 5px rgba(0,0,0,.2)}.layui-layer-load{background:url(loading-1.gif) center center no-repeat #eee}.layui-layer-ico{background:url(icon.png) no-repeat}.layui-layer-btn a,.layui-layer
2023-11-17 12:18:38 UTC	377	IN	Data Raw: 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 36 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 34 37 35 29 20 74 72 61 6e 73 6c 61 74 65 59 28 36 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 34 37 35 29 20 74 72 61 6e 73 6c 61 74 65 59 28 36 30 70 78 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 6f 75 74 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 61 79 65 Data Ascii: g-function:ease-in-out;animation-timing-function:ease-in-out}60%{opacity:1;-webkit-transform:scale(.475) translateY(60px);transform:scale(.475) translateY(60px);-webkit-animation-timing-function:ease-out;animation-timing-function:ease-out}}@keyframes laye
2023-11-17 12:18:38 UTC	378	IN	Data Raw: 79 3a 30 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 31 29 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 30 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 31 29 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 32 30 30 30 70 78 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 2d 69 6e 2d 6f 75 74 7d 36 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 34 37 35 29 20 74 72 61 6e 73 6c 61 74 65 58 28 34 38 70 78 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 2e 34 Data Ascii: y:0;-webkit-transform:scale(.1) translateX(-2000px);transform:scale(.1) translateX(-2000px);-webkit-animation-timing-function:ease-in-out;animation-timing-function:ease-in-out}60%{opacity:1;-webkit-transform:scale(.475) translateX(48px);transform:scale(.4
2023-11-17 12:18:38 UTC	379	IN	Data Raw: 72 61 6e 73 6c 61 74 65 58 28 30 29 20 72 6f 74 61 74 65 28 30 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 20 72 6f 74 61 74 65 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 20 72 6f 74 61 74 65 28 30 29 7d 7d 2e 6c 61 79 65 72 2d 61 6e 69 6d 2d 30 34 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 6c 61 79 65 72 2d 72 6f 6c 6c 49 6e 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 6c 61 79 65 72 2d 72 6f 6c 6c 49 6e 7d 40 6b 65 79 66 72 61 6d 65 73 20 6c 61 79 65 72 2d 66 61 64 65 49 6e 7b 30 25 7b 6f 70 61 63 69 74 79 3a 30 7d 31 30 30 25 7b 6f 70 61 63 69 74 79 3a 31 7d 7d 2e 6c 61 79 65 72 2d 61 6e 69 6d 2d 30 35 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d Data Ascii: ranslateX(0) rotate(0);-ms-transform:translateX(0) rotate(0);transform:translateX(0) rotate(0)}}.layer-anim-04{-webkit-animation-name:layer-rollIn;animation-name:layer-rollIn}@keyframes layer-fadeIn{0%{opacity:0}100%{opacity:1}}.layer-anim-05{-webkit-anim
2023-11-17 12:18:38 UTC	381	IN	Data Raw: 77 69 64 74 68 3a 31 36 70 78 3b 68 65 69 67 68 74 3a 31 36 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 30 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 32 70 78 3b 5f 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 73 65 74 77 69 6e 20 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 6d 69 6e 20 63 69 74 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 34 70 78 3b 68 65 69 67 68 74 3a 32 70 78 3b 6c 65 66 74 3a 30 3b 74 6f 70 3a 35 30 25 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 31 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 45 32 44 33 43 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 5f 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d Data Ascii: width:16px;height:16px;margin-left:10px;font-size:12px;_overflow:hidden}.layui-layer-setwin .layui-layer-min cite{position:absolute;width:14px;height:2px;left:0;top:50%;margin-top:-1px;background-color:#2E2D3C;cursor:pointer;_overflow:hidden}.layui-layer-
2023-11-17 12:18:38 UTC	382	IN	Data Raw: 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 62 74 6e 20 61 3a 61 63 74 69 76 65 7b 6f 70 61 63 69 74 79 3a 2e 38 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 62 74 6e 20 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 62 74 6e 30 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 31 45 39 46 46 46 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 31 45 39 46 46 46 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 62 74 6e 2d 6c 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 62 74 6e 2d 63 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 64 69 61 6c 6f 67 7b 6d 69 6e 2d 77 69 64 74 68 3a 32 36 30 70 78 Data Ascii: xt-decoration:none}.layui-layer-btn a:active{opacity:.8}.layui-layer-btn .layui-layer-btn0{border-color:#1E9FFF;background-color:#1E9FFF;color:#fff}.layui-layer-btn-l{text-align:left}.layui-layer-btn-c{text-align:center}.layui-layer-dialog{min-width:260px
2023-11-17 12:18:38 UTC	383	IN	Data Raw: 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 69 66 72 61 6d 65 20 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 62 74 6e 2c 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 70 61 67 65 20 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 62 74 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 31 30 70 78 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 6e 6f 62 67 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 69 66 72 61 6d 65 20 69 66 72 61 6d 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 6c 6f 61 64 69 6e 67 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 3b 62 6f 78 2d 73 68 61 64 Data Ascii: ive;overflow:auto}.layui-layer-iframe .layui-layer-btn,.layui-layer-page .layui-layer-btn{padding-top:10px}.layui-layer-nobg{background:0 0}.layui-layer-iframe iframe{display:block;width:100%}.layui-layer-loading{border-radius:100%;background:0 0;box-shad
2023-11-17 12:18:38 UTC	385	IN	Data Raw: 73 4c 2c 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 74 69 70 73 20 69 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 54 69 70 73 52 7b 74 6f 70 3a 35 70 78 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 74 69 70 73 20 69 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 54 69 70 73 52 7b 6c 65 66 74 3a 2d 38 70 78 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 74 69 70 73 20 69 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 54 69 70 73 4c 7b 72 69 67 68 74 3a 2d 38 70 78 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 6c 61 6e 5b 74 79 70 65 3d 64 69 61 6c 6f 67 5d 7b 6d 69 6e 2d 77 69 64 74 68 3a 32 38 30 70 78 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 Data Ascii: sL,.layui-layer-tips i.layui-layer-TipsR{top:5px;border-bottom-style:solid;border-bottom-color:#000}.layui-layer-tips i.layui-layer-TipsR{left:-8px}.layui-layer-tips i.layui-layer-TipsL{right:-8px}.layui-layer-lan[type=dialog]{min-width:280px}.layui-layer
2023-11-17 12:18:38 UTC	386	IN	Data Raw: 2d 6c 61 79 65 72 2d 74 61 62 20 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 74 69 74 6c 65 20 73 70 61 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 69 6e 2d 77 69 64 74 68 3a 38 30 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 32 36 30 70 78 3b 70 61 64 64 69 6e 67 3a 30 20 32 30 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 74 61 62 20 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 74 69 74 6c 65 20 73 70 61 6e 2e 6c 61 79 75 69 2d 74 68 69 73 7b 68 65 69 67 68 74 3a 34 33 70 78 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 3b 62 6f 72 64 65 Data Ascii: -layer-tab .layui-layer-title span{position:relative;float:left;min-width:80px;max-width:260px;padding:0 20px;text-align:center;overflow:hidden;cursor:pointer}.layui-layer-tab .layui-layer-title span.layui-this{height:43px;border-left:1px solid #eee;borde
2023-11-17 12:18:38 UTC	387	IN	Data Raw: 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 33 33 70 78 20 2d 35 30 70 78 3b 5f 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 32 30 70 78 20 2d 35 30 70 78 7d 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 69 6d 67 62 61 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 33 32 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 33 32 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 30 2c 30 2c 30 2c 2e 38 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 5c 39 3b 66 69 6c 74 65 72 3a 41 6c 70 68 61 28 6f 70 61 63 69 74 79 3d 38 30 29 3b 63 6f 6c 6f 72 3a 23 Data Ascii: :hover{background-position:-33px -50px;_background-position:-120px -50px}.layui-layer-imgbar{position:absolute;left:0;bottom:0;width:100%;height:32px;line-height:32px;background-color:rgba(0,0,0,.8);background-color:#000\9;filter:Alpha(opacity=80);color:#

Timestamp	kBytes transferred	Direction	Data
2023-11-17 12:18:40 UTC	546	OUT	GET /favicon.ico HTTP/1.1 Host: app.iiflsdi-app.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: image/webp,/ Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Connection: keep-alive
2023-11-17 12:18:40 UTC	546	IN	HTTP/1.1 404 Not Found Date: Fri, 17 Nov 2023 12:18:40 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 131 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XghuiwCqMOxbS9kjuT%2FLCoBgm04EbQufn9bbEOQicX4%2BY0Ht8Rf31tM63LwGGcbY3mfxuSWaqzpJiXaDR%2Bw9yLKjn7SJABHnyakanMhczQIicGDQbPZxZ3zS38V1o%2FqOUHalFNxh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8277eaeb4d342765-SEA alt-svc: h3=":443"; ma=86400
2023-11-17 12:18:40 UTC	547	IN	Data Raw: 32 33 34 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 31 38 2e 30 20 28 55 62 75 6e 74 75 29 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 Data Ascii: 234<html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>nginx/1.18.0 (Ubuntu)</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to dis
2023-11-17 12:18:40 UTC	547	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	kBytes transferred	Direction	Data
2023-11-17 12:18:55 UTC	1181	OUT	GET /update/3/GMP/66.0.3/20190410113011/Linux_x86_64-gcc3/null/release-cck-ubuntu/Linux%204.4.0-116-generic%20(GTK%203.18.9%2Clibpulse%208.0.0)/canonical/1.0/update.xml HTTP/1.1 Host: aus5.mozilla.org User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Cache-Control: no-cache Pragma: no-cache Connection: keep-alive
2023-11-17 12:18:55 UTC	1181	IN	HTTP/1.1 200 OK Server: nginx Date: Fri, 17 Nov 2023 12:18:55 GMT Content-Type: text/xml; charset=utf-8 Content-Length: 718 Vary: Accept-Encoding Rule-ID: 17566 Rule-Data-Version: 4 Content-Signature: x5u=https://content-signature-2.cdn.mozilla.net/chains/aus.content-signature.mozilla.org-2023-12-29-19-51-25.chain; p384ecdsa=EMF5xvvLxTyBp0yZbjZVglhRtw7_afREYT4P1zWBvQ_zKgXFYBL8-dzUht6Dfrz-X_6ijG5HTzekAg7ba1umuIZXemYtqRg1WqV0zDU3tmH6G6OTKfe8-4CJJy502IpS Strict-Transport-Security: max-age=31536000; X-Content-Type-Options: nosniff Content-Security-Policy: default-src 'none'; frame-ancestors 'none' X-Proxy-Cache-Status: MISS Via: 1.1 google Cache-Control: public,max-age=90 Alt-Svc: clear Connection: close
2023-11-17 12:18:55 UTC	1182	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 3f 3e 0a 3c 75 70 64 61 74 65 73 3e 0a 20 20 20 20 3c 61 64 64 6f 6e 73 3e 0a 20 20 20 20 20 20 20 20 3c 61 64 64 6f 6e 20 69 64 3d 22 67 6d 70 2d 67 6d 70 6f 70 65 6e 68 32 36 34 22 20 55 52 4c 3d 22 68 74 74 70 3a 2f 2f 63 69 73 63 6f 62 69 6e 61 72 79 2e 6f 70 65 6e 68 32 36 34 2e 6f 72 67 2f 6f 70 65 6e 68 32 36 34 2d 6c 69 6e 75 78 36 34 2d 36 63 32 65 37 30 30 38 66 38 62 62 65 32 66 66 39 30 31 30 30 39 37 32 66 39 37 30 37 31 65 62 38 37 65 63 33 37 63 62 2e 7a 69 70 22 20 68 61 73 68 46 75 6e 63 74 69 6f 6e 3d 22 73 68 61 35 31 32 22 20 68 61 73 68 56 61 6c 75 65 3d 22 32 36 61 66 66 37 32 63 33 64 35 34 36 65 32 61 37 35 39 66 30 31 63 36 65 37 33 32 39 66 33 32 64 32 65 63 33 39 39 33 64 Data Ascii: <?xml version="1.0"?><updates> <addons> <addon id="gmp-gmpopenh264" URL="http://ciscobinary.openh264.org/openh264-linux64-6c2e7008f8bbe2ff90100972f97071eb87ec37cb.zip" hashFunction="sha512" hashValue="26aff72c3d546e2a759f01c6e7329f32d2ec3993d
2023-11-17 12:18:55 UTC	1183	IN	Data Raw: 3d 22 39 38 66 62 39 37 65 63 36 63 33 31 32 37 37 61 39 64 35 36 61 65 31 32 30 64 63 64 62 39 39 65 38 65 31 33 66 38 62 30 61 30 36 62 39 35 61 34 36 36 38 61 33 65 38 36 38 39 33 31 64 66 66 35 37 31 63 61 65 61 35 38 34 33 35 39 65 65 39 66 63 36 61 33 31 63 38 34 35 34 39 66 33 64 62 61 62 66 63 62 33 33 62 61 37 61 36 31 30 61 66 36 38 65 30 61 35 35 34 65 61 31 33 63 39 63 35 66 22 20 73 69 7a 65 3d 22 33 30 38 36 31 30 32 22 20 76 65 72 73 69 6f 6e 3d 22 34 2e 31 30 2e 31 31 39 36 2e 30 22 2f 3e 0a 20 20 20 20 3c 2f 61 64 64 6f 6e 73 3e 0a 3c 2f 75 70 64 61 74 65 73 3e Data Ascii: ="98fb97ec6c31277a9d56ae120dcdb99e8e13f8b0a06b95a4668a3e868931dff571caea584359ee9fc6a31c84549f3dbabfcb33ba7a610af68e0a554ea13c9c5f" size="3086102" version="4.10.1196.0"/> </addons></updates>

Timestamp	kBytes transferred	Direction	Data
2023-11-17 12:18:36 UTC	10	OUT	GET /css/font-awesome.min.css HTTP/1.1 Host: app.iiflsdi-app.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: text/css,/;q=0.1 Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://app.iiflsdi-app.com/landing.html Connection: keep-alive
2023-11-17 12:18:37 UTC	176	IN	HTTP/1.1 200 OK Date: Fri, 17 Nov 2023 12:18:37 GMT Content-Type: text/css Content-Length: 21984 Connection: close Last-Modified: Tue, 07 Nov 2023 06:41:46 GMT ETag: "6549dc2a-55e0" Cache-Control: max-age=14400 CF-Cache-Status: MISS Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=XVD%2FHTo3WqFzJZZ0Y1yTiiZQJVc7NqheeV6%2FoY3k%2B8egq2v%2BPhFvItd4zQ7weKeeoAKbsfiXFnrLk3z6eDYyiODGuio77sUUtMYuJ9tpTjveg9wyGc5Gc00WbqV4PUfLeIxQ9IAk"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8277ead19d3dec84-SEA alt-svc: h3=":443"; ma=86400
2023-11-17 12:18:37 UTC	177	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 32 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 32 2e 30 27 29 3b 73 Data Ascii: /! Font Awesome 4.2.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.2.0');s
2023-11-17 12:18:37 UTC	177	IN	Data Raw: 75 74 6f 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 2e 66 61 2d 6c 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 33 33 33 33 33 33 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 37 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 31 35 25 7d 2e 66 61 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 33 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 7d 2e 66 61 2d 34 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 65 6d 7d 2e 66 61 2d 35 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 65 6d 7d 2e 66 61 2d 66 77 7b 77 69 64 74 68 3a 31 2e 32 38 35 37 31 34 32 39 65 6d 3b 74 65 78 74 Data Ascii: uto;-webkit-font-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.fa-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-fw{width:1.28571429em;text
2023-11-17 12:18:37 UTC	179	IN	Data Raw: 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 7b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 33 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 32 37 30 64 65 67 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 32 37 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 32 37 30 64 65 67 29 7d 2e 66 61 2d 66 6c 69 70 2d 68 6f 72 69 7a 6f 6e 74 61 6c 7b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d Data Ascii: sform:rotate(180deg)}.fa-rotate-270{filter:progid:DXImageTransform.Microsoft.BasicImage(rotation=3);-webkit-transform:rotate(270deg);-ms-transform:rotate(270deg);transform:rotate(270deg)}.fa-flip-horizontal{filter:progid:DXImageTransform.Microsoft.BasicIm
2023-11-17 12:18:37 UTC	180	IN	Data Raw: 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 6f 73 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 74 69 6d 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 64 22 7d 2e 66 61 2d 73 65 61 72 63 68 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 65 22 7d 2e 66 61 2d 73 65 61 72 63 68 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 30 22 7d 2e 66 61 2d 70 6f 77 65 72 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 31 22 7d 2e 66 61 2d 73 69 67 6e 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 31 32 22 7d 2e 66 61 2d 67 65 61 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6f 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c Data Ascii: remove:before,.fa-close:before,.fa-times:before{content:"\f00d"}.fa-search-plus:before{content:"\f00e"}.fa-search-minus:before{content:"\f010"}.fa-power-off:before{content:"\f011"}.fa-signal:before{content:"\f012"}.fa-gear:before,.fa-cog:before{content:"\
2023-11-17 12:18:37 UTC	181	IN	Data Raw: 6e 74 3a 22 5c 66 30 33 34 22 7d 2e 66 61 2d 74 65 78 74 2d 77 69 64 74 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 35 22 7d 2e 66 61 2d 61 6c 69 67 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 36 22 7d 2e 66 61 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 37 22 7d 2e 66 61 2d 61 6c 69 67 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 38 22 7d 2e 66 61 2d 61 6c 69 67 6e 2d 6a 75 73 74 69 66 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 39 22 7d 2e 66 61 2d 6c 69 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 61 22 7d 2e 66 61 2d 64 65 64 65 6e 74 3a 62 65 66 6f 72 Data Ascii: nt:"\f034"}.fa-text-width:before{content:"\f035"}.fa-align-left:before{content:"\f036"}.fa-align-center:before{content:"\f037"}.fa-align-right:before{content:"\f038"}.fa-align-justify:before{content:"\f039"}.fa-list:before{content:"\f03a"}.fa-dedent:befor
2023-11-17 12:18:37 UTC	183	IN	Data Raw: 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 39 22 7d 2e 66 61 2d 69 6e 66 6f 2d 63 69 72 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 61 22 7d 2e 66 61 2d 63 72 6f 73 73 68 61 69 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 62 22 7d 2e 66 61 2d 74 69 6d 65 73 2d 63 69 72 63 6c 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 63 22 7d 2e 66 61 2d 63 68 65 63 6b 2d 63 69 72 63 6c 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 64 22 7d 2e 66 61 2d 62 61 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 65 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 Data Ascii: ircle:before{content:"\f059"}.fa-info-circle:before{content:"\f05a"}.fa-crosshairs:before{content:"\f05b"}.fa-times-circle-o:before{content:"\f05c"}.fa-check-circle-o:before{content:"\f05d"}.fa-ban:before{content:"\f05e"}.fa-arrow-left:before{content:"\f0
2023-11-17 12:18:37 UTC	184	IN	Data Raw: 65 2c 2e 66 61 2d 62 61 72 2d 63 68 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 30 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 31 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 32 22 7d 2e 66 61 2d 63 61 6d 65 72 61 2d 72 65 74 72 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 33 22 7d 2e 66 61 2d 6b 65 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 34 22 7d 2e 66 61 2d 67 65 61 72 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6f 67 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 35 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 Data Ascii: e,.fa-bar-chart:before{content:"\f080"}.fa-twitter-square:before{content:"\f081"}.fa-facebook-square:before{content:"\f082"}.fa-camera-retro:before{content:"\f083"}.fa-key:before{content:"\f084"}.fa-gears:before,.fa-cogs:before{content:"\f085"}.fa-comment
2023-11-17 12:18:37 UTC	185	IN	Data Raw: 65 6e 74 3a 22 5c 66 30 61 36 22 7d 2e 66 61 2d 68 61 6e 64 2d 6f 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 37 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 38 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 39 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 61 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 62 22 7d 2e 66 61 2d 67 6c 6f 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a Data Ascii: ent:"\f0a6"}.fa-hand-o-down:before{content:"\f0a7"}.fa-arrow-circle-left:before{content:"\f0a8"}.fa-arrow-circle-right:before{content:"\f0a9"}.fa-arrow-circle-up:before{content:"\f0aa"}.fa-arrow-circle-down:before{content:"\f0ab"}.fa-globe:before{content:
2023-11-17 12:18:37 UTC	187	IN	Data Raw: 6e 74 65 6e 74 3a 22 5c 66 30 64 37 22 7d 2e 66 61 2d 63 61 72 65 74 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 38 22 7d 2e 66 61 2d 63 61 72 65 74 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 39 22 7d 2e 66 61 2d 63 61 72 65 74 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 61 22 7d 2e 66 61 2d 63 6f 6c 75 6d 6e 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 62 22 7d 2e 66 61 2d 75 6e 73 6f 72 74 65 64 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6f 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 64 63 22 7d 2e 66 61 2d 73 6f 72 74 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 6f 72 74 2d 64 65 73 63 3a 62 65 66 6f 72 65 Data Ascii: ntent:"\f0d7"}.fa-caret-up:before{content:"\f0d8"}.fa-caret-left:before{content:"\f0d9"}.fa-caret-right:before{content:"\f0da"}.fa-columns:before{content:"\f0db"}.fa-unsorted:before,.fa-sort:before{content:"\f0dc"}.fa-sort-down:before,.fa-sort-desc:before
2023-11-17 12:18:37 UTC	188	IN	Data Raw: 66 61 2d 66 69 67 68 74 65 72 2d 6a 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 62 22 7d 2e 66 61 2d 62 65 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 63 22 7d 2e 66 61 2d 68 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 64 22 7d 2e 66 61 2d 70 6c 75 73 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 65 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 30 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 30 31 22 7d 2e 66 61 2d 61 6e 67 6c 65 2d 64 6f 75 62 6c 65 2d 75 70 Data Ascii: fa-fighter-jet:before{content:"\f0fb"}.fa-beer:before{content:"\f0fc"}.fa-h-square:before{content:"\f0fd"}.fa-plus-square:before{content:"\f0fe"}.fa-angle-double-left:before{content:"\f100"}.fa-angle-double-right:before{content:"\f101"}.fa-angle-double-up
2023-11-17 12:18:37 UTC	189	IN	Data Raw: 22 7d 2e 66 61 2d 73 74 61 72 2d 68 61 6c 66 2d 65 6d 70 74 79 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 74 61 72 2d 68 61 6c 66 2d 66 75 6c 6c 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 73 74 61 72 2d 68 61 6c 66 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 33 22 7d 2e 66 61 2d 6c 6f 63 61 74 69 6f 6e 2d 61 72 72 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 34 22 7d 2e 66 61 2d 63 72 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 35 22 7d 2e 66 61 2d 63 6f 64 65 2d 66 6f 72 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 36 22 7d 2e 66 61 2d 75 6e 6c 69 6e 6b 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 68 61 69 6e 2d 62 72 6f 6b 65 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a Data Ascii: "}.fa-star-half-empty:before,.fa-star-half-full:before,.fa-star-half-o:before{content:"\f123"}.fa-location-arrow:before{content:"\f124"}.fa-crop:before{content:"\f125"}.fa-code-fork:before{content:"\f126"}.fa-unlink:before,.fa-chain-broken:before{content:
2023-11-17 12:18:37 UTC	191	IN	Data Raw: 31 34 36 22 7d 2e 66 61 2d 6d 69 6e 75 73 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 37 22 7d 2e 66 61 2d 6c 65 76 65 6c 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 38 22 7d 2e 66 61 2d 6c 65 76 65 6c 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 39 22 7d 2e 66 61 2d 63 68 65 63 6b 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 61 22 7d 2e 66 61 2d 70 65 6e 63 69 6c 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 62 22 7d 2e 66 61 2d 65 78 74 65 72 6e 61 6c 2d 6c 69 6e 6b 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 63 22 7d 2e 66 61 2d 73 Data Ascii: 146"}.fa-minus-square-o:before{content:"\f147"}.fa-level-up:before{content:"\f148"}.fa-level-down:before{content:"\f149"}.fa-check-square:before{content:"\f14a"}.fa-pencil-square:before{content:"\f14b"}.fa-external-link-square:before{content:"\f14c"}.fa-s
2023-11-17 12:18:37 UTC	192	IN	Data Raw: 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 36 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 37 22 7d 2e 66 61 2d 78 69 6e 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 38 22 7d 2e 66 61 2d 78 69 6e 67 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 39 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 61 22 7d 2e 66 61 2d 64 72 6f 70 62 6f 78 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 62 22 7d 2e 66 61 2d 73 74 61 63 6b 2d 6f 76 65 72 66 6c 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 63 22 7d 2e 66 61 2d 69 6e 73 Data Ascii: e:before{content:"\f166"}.fa-youtube:before{content:"\f167"}.fa-xing:before{content:"\f168"}.fa-xing-square:before{content:"\f169"}.fa-youtube-play:before{content:"\f16a"}.fa-dropbox:before{content:"\f16b"}.fa-stack-overflow:before{content:"\f16c"}.fa-ins
2023-11-17 12:18:37 UTC	193	IN	Data Raw: 72 6f 77 2d 63 69 72 63 6c 65 2d 6f 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 38 65 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6f 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 30 22 7d 2e 66 61 2d 74 6f 67 67 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 61 72 65 74 2d 73 71 75 61 72 65 2d 6f 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 31 22 7d 2e 66 61 2d 64 6f 74 2d 63 69 72 63 6c 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 32 22 7d 2e 66 61 2d 77 68 65 65 6c 63 68 61 69 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 39 33 22 7d 2e 66 61 2d 76 69 6d 65 6f 2d 73 71 75 61 72 65 3a 62 Data Ascii: row-circle-o-right:before{content:"\f18e"}.fa-arrow-circle-o-left:before{content:"\f190"}.fa-toggle-left:before,.fa-caret-square-o-left:before{content:"\f191"}.fa-dot-circle-o:before{content:"\f192"}.fa-wheelchair:before{content:"\f193"}.fa-vimeo-square:b
2023-11-17 12:18:37 UTC	195	IN	Data Raw: 6e 74 3a 22 5c 66 31 62 32 22 7d 2e 66 61 2d 63 75 62 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 33 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 34 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 35 22 7d 2e 66 61 2d 73 74 65 61 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 36 22 7d 2e 66 61 2d 73 74 65 61 6d 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 37 22 7d 2e 66 61 2d 72 65 63 79 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 38 22 7d 2e 66 61 2d 61 75 74 6f 6d 6f 62 69 6c 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d Data Ascii: nt:"\f1b2"}.fa-cubes:before{content:"\f1b3"}.fa-behance:before{content:"\f1b4"}.fa-behance-square:before{content:"\f1b5"}.fa-steam:before{content:"\f1b6"}.fa-steam-square:before{content:"\f1b7"}.fa-recycle:before{content:"\f1b8"}.fa-automobile:before,.fa-
2023-11-17 12:18:37 UTC	196	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 64 32 22 7d 2e 66 61 2d 67 69 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 64 33 22 7d 2e 66 61 2d 68 61 63 6b 65 72 2d 6e 65 77 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 64 34 22 7d 2e 66 61 2d 74 65 6e 63 65 6e 74 2d 77 65 69 62 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 64 35 22 7d 2e 66 61 2d 71 71 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 64 36 22 7d 2e 66 61 2d 77 65 63 68 61 74 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 77 65 69 78 69 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 64 37 22 7d 2e 66 61 2d 73 65 6e 64 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 70 61 70 65 72 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: ore{content:"\f1d2"}.fa-git:before{content:"\f1d3"}.fa-hacker-news:before{content:"\f1d4"}.fa-tencent-weibo:before{content:"\f1d5"}.fa-qq:before{content:"\f1d6"}.fa-wechat:before,.fa-weixin:before{content:"\f1d7"}.fa-send:before,.fa-paper-plane:before{con
2023-11-17 12:18:37 UTC	197	IN	Data Raw: 37 22 7d 2e 66 61 2d 74 72 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 38 22 7d 2e 66 61 2d 63 6f 70 79 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 39 22 7d 2e 66 61 2d 61 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 61 22 7d 2e 66 61 2d 65 79 65 64 72 6f 70 70 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 62 22 7d 2e 66 61 2d 70 61 69 6e 74 2d 62 72 75 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 63 22 7d 2e 66 61 2d 62 69 72 74 68 64 61 79 2d 63 61 6b 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 64 22 7d 2e 66 61 2d 61 72 65 61 2d 63 68 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 Data Ascii: 7"}.fa-trash:before{content:"\f1f8"}.fa-copyright:before{content:"\f1f9"}.fa-at:before{content:"\f1fa"}.fa-eyedropper:before{content:"\f1fb"}.fa-paint-brush:before{content:"\f1fc"}.fa-birthday-cake:before{content:"\f1fd"}.fa-area-chart:before{content:"\f1

Timestamp	kBytes transferred	Direction	Data
2023-11-17 12:18:36 UTC	11	OUT	GET /layer/layer.js HTTP/1.1 Host: app.iiflsdi-app.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://app.iiflsdi-app.com/landing.html Connection: keep-alive
2023-11-17 12:18:36 UTC	48	IN	HTTP/1.1 200 OK Date: Fri, 17 Nov 2023 12:18:36 GMT Content-Type: application/javascript Content-Length: 22116 Connection: close Last-Modified: Tue, 07 Nov 2023 06:41:47 GMT ETag: "6549dc2b-5664" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 133 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=NA4V4cWsuHNgaxsoqyrKnyOY14vMuTATZDlxhyRRJVFM30Y0cmgHuLglrZeAm2X6xLRGy0s3M%2BfDnNq5LVbCsb4rEF2Vu1VBDemrN4jbrEMM7KgYdBFAN%2FQIYwueRnEI2p5ucVl1"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8277ead1da52681b-SEA alt-svc: h3=":443"; ma=86400
2023-11-17 12:18:36 UTC	49	IN	Data Raw: 2f 2a 21 20 6c 61 79 65 72 2d 76 33 2e 31 2e 31 20 57 65 62 e5 bc b9 e5 b1 82 e7 bb 84 e4 bb b6 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 20 68 74 74 70 3a 2f 2f 6c 61 79 65 72 2e 6c 61 79 75 69 2e 63 6f 6d 2f 20 20 42 79 20 e8 b4 a4 e5 bf 83 20 2a 2f 0a 20 3b 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 2c 6e 2c 61 3d 65 2e 6c 61 79 75 69 26 26 6c 61 79 75 69 2e 64 65 66 69 6e 65 2c 6f 3d 7b 67 65 74 50 61 74 68 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 3f 64 6f 63 75 6d 65 6e 74 2e 63 75 72 72 65 6e 74 53 63 72 69 70 74 2e 73 72 63 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 2c 74 3d 64 6f 63 75 6d 65 6e 74 Data Ascii: /! layer-v3.1.1 Web MIT License http://layer.layui.com/ By / ;!function(e,t){"use strict";var i,n,a=e.layui&&layui.define,o={getPath:function(){var e=document.currentScript?document.currentScript.src:function(){for(var e,t=document
2023-11-17 12:18:36 UTC	49	IN	Data Raw: 22 67 65 74 41 74 74 72 69 62 75 74 65 22 5d 28 69 29 7d 2c 6c 69 6e 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 69 2c 6e 29 7b 69 66 28 72 2e 70 61 74 68 29 7b 76 61 72 20 61 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 68 65 61 64 22 29 5b 30 5d 2c 73 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 6c 69 6e 6b 22 29 3b 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 69 26 26 28 6e 3d 69 29 3b 76 61 72 20 6c 3d 28 6e 7c 7c 74 29 2e 72 65 70 6c 61 63 65 28 2f 5c 2e 7c 5c 2f 2f 67 2c 22 22 29 2c 66 3d 22 6c 61 79 75 69 63 73 73 2d 22 2b 6c 2c 63 3d 30 3b 73 2e 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 2c 73 2e 68 72 65 66 3d 72 2e 70 61 74 68 2b 74 2c 73 2e 69 64 3d 66 2c 64 Data Ascii: "getAttribute"](i)},link:function(t,i,n){if(r.path){var a=document.getElementsByTagName("head")[0],s=document.createElement("link");"string"==typeof i&&(n=i);var l=(n\|\|t).replace(/\.\|\//g,""),f="layuicss-"+l,c=0;s.rel="stylesheet",s.href=r.path+t,s.id=f,d
2023-11-17 12:18:36 UTC	51	IN	Data Raw: 28 65 2c 6e 2c 61 29 7b 76 61 72 20 73 3d 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 6e 2c 66 3d 6f 2e 63 6f 6e 66 69 67 2e 73 6b 69 6e 2c 63 3d 28 66 3f 66 2b 22 20 22 2b 66 2b 22 2d 6d 73 67 22 3a 22 22 29 7c 7c 22 6c 61 79 75 69 2d 6c 61 79 65 72 2d 6d 73 67 22 2c 75 3d 6c 2e 61 6e 69 6d 2e 6c 65 6e 67 74 68 2d 31 3b 72 65 74 75 72 6e 20 73 26 26 28 61 3d 6e 29 2c 72 2e 6f 70 65 6e 28 69 2e 65 78 74 65 6e 64 28 7b 63 6f 6e 74 65 6e 74 3a 65 2c 74 69 6d 65 3a 33 65 33 2c 73 68 61 64 65 3a 21 31 2c 73 6b 69 6e 3a 63 2c 74 69 74 6c 65 3a 21 31 2c 63 6c 6f 73 65 42 74 6e 3a 21 31 2c 62 74 6e 3a 21 31 2c 72 65 73 69 7a 65 3a 21 31 2c 65 6e 64 3a 61 7d 2c 73 26 26 21 6f 2e 63 6f 6e 66 69 67 2e 73 6b 69 6e 3f 7b 73 6b 69 6e 3a 63 2b 22 20 6c 61 Data Ascii: (e,n,a){var s="function"==typeof n,f=o.config.skin,c=(f?f+" "+f+"-msg":"")\|\|"layui-layer-msg",u=l.anim.length-1;return s&&(a=n),r.open(i.extend({content:e,time:3e3,shade:!1,skin:c,title:!1,closeBtn:!1,btn:!1,resize:!1,end:a},s&&!o.config.skin?{skin:c+" la
2023-11-17 12:18:36 UTC	52	IN	Data Raw: 74 79 70 65 6f 66 20 72 2e 74 69 74 6c 65 2c 63 3d 72 2e 6d 61 78 6d 69 6e 26 26 28 31 3d 3d 3d 72 2e 74 79 70 65 7c 7c 32 3d 3d 3d 72 2e 74 79 70 65 29 2c 75 3d 72 2e 74 69 74 6c 65 3f 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 79 75 69 2d 6c 61 79 65 72 2d 74 69 74 6c 65 22 20 73 74 79 6c 65 3d 22 27 2b 28 66 3f 72 2e 74 69 74 6c 65 5b 31 5d 3a 22 22 29 2b 27 22 3e 27 2b 28 66 3f 72 2e 74 69 74 6c 65 5b 30 5d 3a 72 2e 74 69 74 6c 65 29 2b 22 3c 2f 64 69 76 3e 22 3a 22 22 3b 72 65 74 75 72 6e 20 72 2e 7a 49 6e 64 65 78 3d 73 2c 74 28 5b 72 2e 73 68 61 64 65 3f 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 79 75 69 2d 6c 61 79 65 72 2d 73 68 61 64 65 22 20 69 64 3d 22 6c 61 79 75 69 2d 6c 61 79 65 72 2d 73 68 61 64 65 27 2b 61 2b 27 22 20 74 69 6d 65 73 Data Ascii: typeof r.title,c=r.maxmin&&(1===r.type\|\|2===r.type),u=r.title?'<div class="layui-layer-title" style="'+(f?r.title[1]:"")+'">'+(f?r.title[0]:r.title)+"</div>":"";return r.zIndex=s,t([r.shade?'<div class="layui-layer-shade" id="layui-layer-shade'+a+'" times
2023-11-17 12:18:36 UTC	53	IN	Data Raw: 72 28 76 61 72 20 74 3d 30 2c 69 3d 72 2e 62 74 6e 2e 6c 65 6e 67 74 68 3b 74 3c 69 3b 74 2b 2b 29 65 2b 3d 27 3c 61 20 63 6c 61 73 73 3d 22 27 2b 6c 5b 36 5d 2b 74 2b 27 22 3e 27 2b 72 2e 62 74 6e 5b 74 5d 2b 22 3c 2f 61 3e 22 3b 72 65 74 75 72 6e 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 27 2b 6c 5b 36 5d 2b 22 20 6c 61 79 75 69 2d 6c 61 79 65 72 2d 62 74 6e 2d 22 2b 28 72 2e 62 74 6e 41 6c 69 67 6e 7c 7c 22 22 29 2b 27 22 3e 27 2b 65 2b 22 3c 2f 64 69 76 3e 22 7d 28 29 3a 22 22 29 2b 28 72 2e 72 65 73 69 7a 65 3f 27 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 6c 61 79 75 69 2d 6c 61 79 65 72 2d 72 65 73 69 7a 65 22 3e 3c 2f 73 70 61 6e 3e 27 3a 22 22 29 2b 22 3c 2f 64 69 76 3e 22 5d 2c 75 2c 69 28 27 3c 64 69 76 20 63 6c 61 73 73 3d 22 6c 61 79 75 69 2d 6c 61 Data Ascii: r(var t=0,i=r.btn.length;t<i;t++)e+='<a class="'+l[6]+t+'">'+r.btn[t]+"</a>";return'<div class="'+l[6]+" layui-layer-btn-"+(r.btnAlign\|\|"")+'">'+e+"</div>"}():"")+(r.resize?'<span class="layui-layer-resize"></span>':"")+"</div>"],u,i('<div class="layui-la
2023-11-17 12:18:36 UTC	55	IN	Data Raw: 7c 7c 28 73 2e 64 61 74 61 28 22 64 69 73 70 6c 61 79 22 2c 73 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 29 29 2e 73 68 6f 77 28 29 2e 61 64 64 43 6c 61 73 73 28 22 6c 61 79 75 69 2d 6c 61 79 65 72 2d 77 72 61 70 22 29 2e 77 72 61 70 28 6e 5b 31 5d 29 2c 69 28 22 23 22 2b 6c 5b 30 5d 2b 61 29 2e 66 69 6e 64 28 22 2e 22 2b 6c 5b 35 5d 29 2e 62 65 66 6f 72 65 28 72 29 29 7d 28 29 7d 28 29 3a 63 2e 61 70 70 65 6e 64 28 6e 5b 31 5d 29 2c 69 28 22 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 6d 6f 76 65 22 29 5b 30 5d 7c 7c 63 2e 61 70 70 65 6e 64 28 6f 2e 6d 6f 76 65 45 6c 65 6d 3d 75 29 2c 65 2e 6c 61 79 65 72 6f 3d 69 28 22 23 22 2b 6c 5b 30 5d 2b 61 29 2c 74 2e 73 63 72 6f 6c 6c 62 61 72 7c 7c 6c 2e 68 74 6d 6c 2e 63 73 73 28 22 6f 76 65 72 66 6c 6f 77 22 2c 22 Data Ascii: \|\|(s.data("display",s.css("display")).show().addClass("layui-layer-wrap").wrap(n[1]),i("#"+l[0]+a).find("."+l[5]).before(r))}()}():c.append(n[1]),i(".layui-layer-move")[0]\|\|c.append(o.moveElem=u),e.layero=i("#"+l[0]+a),t.scrollbar\|\|l.html.css("overflow","
2023-11-17 12:18:36 UTC	56	IN	Data Raw: 72 65 61 5b 31 5d 3f 61 2e 6d 61 78 48 65 69 67 68 74 3e 30 26 26 6f 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 3e 61 2e 6d 61 78 48 65 69 67 68 74 3f 28 73 5b 31 5d 3d 61 2e 6d 61 78 48 65 69 67 68 74 2c 75 28 22 2e 22 2b 6c 5b 35 5d 29 29 3a 61 2e 66 69 78 65 64 26 26 73 5b 31 5d 3e 3d 6e 2e 68 65 69 67 68 74 28 29 26 26 28 73 5b 31 5d 3d 6e 2e 68 65 69 67 68 74 28 29 2c 75 28 22 2e 22 2b 6c 5b 35 5d 29 29 3a 75 28 22 2e 22 2b 6c 5b 35 5d 29 7d 72 65 74 75 72 6e 20 74 7d 2c 73 2e 70 74 2e 6f 66 66 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 74 3d 65 2e 63 6f 6e 66 69 67 2c 69 3d 65 2e 6c 61 79 65 72 6f 2c 61 3d 5b 69 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 69 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 5d 2c 6f 3d 22 6f Data Ascii: rea[1]?a.maxHeight>0&&o.outerHeight()>a.maxHeight?(s[1]=a.maxHeight,u("."+l[5])):a.fixed&&s[1]>=n.height()&&(s[1]=n.height(),u("."+l[5])):u("."+l[5])}return t},s.pt.offset=function(){var e=this,t=e.config,i=e.layero,a=[i.outerWidth(),i.outerHeight()],o="o
2023-11-17 12:18:36 UTC	57	IN	Data Raw: 64 79 22 29 29 3b 76 61 72 20 73 3d 7b 77 69 64 74 68 3a 72 2e 6f 75 74 65 72 57 69 64 74 68 28 29 2c 68 65 69 67 68 74 3a 72 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 2c 74 6f 70 3a 72 2e 6f 66 66 73 65 74 28 29 2e 74 6f 70 2c 6c 65 66 74 3a 72 2e 6f 66 66 73 65 74 28 29 2e 6c 65 66 74 7d 2c 66 3d 61 2e 66 69 6e 64 28 22 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 54 69 70 73 47 22 29 2c 63 3d 74 2e 74 69 70 73 5b 30 5d 3b 74 2e 74 69 70 73 5b 31 5d 7c 7c 66 2e 72 65 6d 6f 76 65 28 29 2c 73 2e 61 75 74 6f 4c 65 66 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 6c 65 66 74 2b 6f 5b 30 5d 2d 6e 2e 77 69 64 74 68 28 29 3e 30 3f 28 73 2e 74 69 70 4c 65 66 74 3d 73 2e 6c 65 66 74 2b 73 2e 77 69 64 74 68 2d 6f 5b 30 5d 2c 66 2e 63 73 73 28 7b 72 69 67 68 74 3a 31 32 Data Ascii: dy"));var s={width:r.outerWidth(),height:r.outerHeight(),top:r.offset().top,left:r.offset().left},f=a.find(".layui-layer-TipsG"),c=t.tips[0];t.tips[1]\|\|f.remove(),s.autoLeft=function(){s.left+o[0]-n.width()>0?(s.tipLeft=s.left+s.width-o[0],f.css({right:12
2023-11-17 12:18:36 UTC	59	IN	Data Raw: 3d 69 28 64 6f 63 75 6d 65 6e 74 29 2c 73 3d 65 2e 6c 61 79 65 72 6f 2c 6c 3d 73 2e 66 69 6e 64 28 74 2e 6d 6f 76 65 29 2c 66 3d 73 2e 66 69 6e 64 28 22 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 72 65 73 69 7a 65 22 29 2c 63 3d 7b 7d 3b 72 65 74 75 72 6e 20 74 2e 6d 6f 76 65 26 26 6c 2e 63 73 73 28 22 63 75 72 73 6f 72 22 2c 22 6d 6f 76 65 22 29 2c 6c 2e 6f 6e 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 2e 6d 6f 76 65 26 26 28 63 2e 6d 6f 76 65 53 74 61 72 74 3d 21 30 2c 63 2e 6f 66 66 73 65 74 3d 5b 65 2e 63 6c 69 65 6e 74 58 2d 70 61 72 73 65 46 6c 6f 61 74 28 73 2e 63 73 73 28 22 6c 65 66 74 22 29 29 2c 65 2e 63 6c 69 65 6e 74 59 2d 70 61 72 73 65 46 6c 6f 61 74 28 Data Ascii: =i(document),s=e.layero,l=s.find(t.move),f=s.find(".layui-layer-resize"),c={};return t.move&&l.css("cursor","move"),l.on("mousedown",function(e){e.preventDefault(),t.move&&(c.moveStart=!0,c.offset=[e.clientX-parseFloat(s.css("left")),e.clientY-parseFloat(
2023-11-17 12:18:36 UTC	60	IN	Data Raw: 63 65 73 73 26 26 28 32 3d 3d 61 2e 74 79 70 65 3f 6e 2e 66 69 6e 64 28 22 69 66 72 61 6d 65 22 29 2e 6f 6e 28 22 6c 6f 61 64 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 61 2e 73 75 63 63 65 73 73 28 6e 2c 74 2e 69 6e 64 65 78 29 7d 29 3a 61 2e 73 75 63 63 65 73 73 28 6e 2c 74 2e 69 6e 64 65 78 29 29 2c 36 3d 3d 72 2e 69 65 26 26 74 2e 49 45 36 28 6e 29 2c 6e 2e 66 69 6e 64 28 22 2e 22 2b 6c 5b 36 5d 29 2e 63 68 69 6c 64 72 65 6e 28 22 61 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 69 28 74 68 69 73 29 2e 69 6e 64 65 78 28 29 3b 69 66 28 30 3d 3d 3d 65 29 61 2e 79 65 73 3f 61 2e 79 65 73 28 74 2e 69 6e 64 65 78 2c 6e 29 3a 61 2e 62 74 6e 31 3f 61 2e 62 74 6e 31 28 74 2e 69 6e 64 65 78 2c 6e 29 3a 72 2e 63 6c 6f Data Ascii: cess&&(2==a.type?n.find("iframe").on("load",function(){a.success(n,t.index)}):a.success(n,t.index)),6==r.ie&&t.IE6(n),n.find("."+l[6]).children("a").on("click",function(){var e=i(this).index();if(0===e)a.yes?a.yes(t.index,n):a.btn1?a.btn1(t.index,n):r.clo
2023-11-17 12:18:36 UTC	61	IN	Data Raw: 77 69 64 74 68 28 29 2c 65 2e 68 65 69 67 68 74 28 29 2c 65 2e 70 6f 73 69 74 69 6f 6e 28 29 2e 74 6f 70 2c 65 2e 70 6f 73 69 74 69 6f 6e 28 29 2e 6c 65 66 74 2b 70 61 72 73 65 46 6c 6f 61 74 28 65 2e 63 73 73 28 22 6d 61 72 67 69 6e 2d 6c 65 66 74 22 29 29 5d 3b 65 2e 66 69 6e 64 28 22 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 6d 61 78 22 29 2e 61 64 64 43 6c 61 73 73 28 22 6c 61 79 75 69 2d 6c 61 79 65 72 2d 6d 61 78 6d 69 6e 22 29 2c 65 2e 61 74 74 72 28 7b 61 72 65 61 3a 74 7d 29 7d 2c 6f 2e 72 65 73 63 6f 6c 6c 62 61 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6c 2e 68 74 6d 6c 2e 61 74 74 72 28 22 6c 61 79 65 72 2d 66 75 6c 6c 22 29 3d 3d 65 26 26 28 6c 2e 68 74 6d 6c 5b 30 5d 2e 73 74 79 6c 65 2e 72 65 6d 6f 76 65 50 72 6f 70 65 72 74 79 3f 6c 2e 68 74 Data Ascii: width(),e.height(),e.position().top,e.position().left+parseFloat(e.css("margin-left"))];e.find(".layui-layer-max").addClass("layui-layer-maxmin"),e.attr({area:t})},o.rescollbar=function(e){l.html.attr("layer-full")==e&&(l.html[0].style.removeProperty?l.ht
2023-11-17 12:18:36 UTC	63	IN	Data Raw: 22 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 22 29 29 7d 29 29 7d 2c 72 2e 6d 69 6e 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 61 3d 69 28 22 23 22 2b 6c 5b 30 5d 2b 65 29 2c 73 3d 61 2e 66 69 6e 64 28 6c 5b 31 5d 29 2e 6f 75 74 65 72 48 65 69 67 68 74 28 29 7c 7c 30 2c 66 3d 61 2e 61 74 74 72 28 22 6d 69 6e 4c 65 66 74 22 29 7c 7c 31 38 31 2a 6f 2e 6d 69 6e 49 6e 64 65 78 2b 22 70 78 22 2c 63 3d 61 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 3b 6f 2e 72 65 63 6f 72 64 28 61 29 2c 6f 2e 6d 69 6e 4c 65 66 74 5b 30 5d 26 26 28 66 3d 6f 2e 6d 69 6e 4c 65 66 74 5b 30 5d 2c 6f 2e 6d 69 6e 4c 65 66 74 2e 73 68 69 66 74 28 29 29 2c 61 2e 61 74 74 72 28 22 70 6f 73 69 74 69 6f 6e 22 2c 63 29 2c 72 2e 73 74 79 6c 65 28 65 2c 7b 77 69 64 74 68 3a Data Ascii: "padding-bottom"))}))},r.min=function(e,t){var a=i("#"+l[0]+e),s=a.find(l[1]).outerHeight()\|\|0,f=a.attr("minLeft")\|\|181*o.minIndex+"px",c=a.css("position");o.record(a),o.minLeft[0]&&(f=o.minLeft[0],o.minLeft.shift()),a.attr("position",c),r.style(e,{width:
2023-11-17 12:18:36 UTC	64	IN	Data Raw: 65 22 3b 69 66 28 74 5b 30 5d 29 7b 76 61 72 20 73 3d 22 6c 61 79 75 69 2d 6c 61 79 65 72 2d 77 72 61 70 22 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 6e 3d 3d 3d 6f 2e 74 79 70 65 5b 31 5d 26 26 22 6f 62 6a 65 63 74 22 3d 3d 3d 74 2e 61 74 74 72 28 22 63 6f 6e 54 79 70 65 22 29 29 7b 74 2e 63 68 69 6c 64 72 65 6e 28 22 3a 6e 6f 74 28 2e 22 2b 6c 5b 35 5d 2b 22 29 22 29 2e 72 65 6d 6f 76 65 28 29 3b 66 6f 72 28 76 61 72 20 61 3d 74 2e 66 69 6e 64 28 22 2e 22 2b 73 29 2c 72 3d 30 3b 72 3c 32 3b 72 2b 2b 29 61 2e 75 6e 77 72 61 70 28 29 3b 61 2e 63 73 73 28 22 64 69 73 70 6c 61 79 22 2c 61 2e 64 61 74 61 28 22 64 69 73 70 6c 61 79 22 29 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 73 29 7d 65 6c 73 65 7b 69 66 28 6e 3d 3d 3d 6f 2e 74 79 70 65 5b 32 5d Data Ascii: e";if(t[0]){var s="layui-layer-wrap",f=function(){if(n===o.type[1]&&"object"===t.attr("conType")){t.children(":not(."+l[5]+")").remove();for(var a=t.find("."+s),r=0;r<2;r++)a.unwrap();a.css("display",a.data("display")).removeClass(s)}else{if(n===o.type[2]
2023-11-17 12:18:36 UTC	65	IN	Data Raw: 63 63 65 73 73 2c 72 2e 6f 70 65 6e 28 69 2e 65 78 74 65 6e 64 28 7b 74 79 70 65 3a 31 2c 62 74 6e 3a 5b 22 26 23 78 37 38 36 45 3b 26 23 78 35 42 39 41 3b 22 2c 22 26 23 78 35 33 44 36 3b 26 23 78 36 44 38 38 3b 22 5d 2c 63 6f 6e 74 65 6e 74 3a 6c 2c 73 6b 69 6e 3a 22 6c 61 79 75 69 2d 6c 61 79 65 72 2d 70 72 6f 6d 70 74 22 2b 63 28 22 70 72 6f 6d 70 74 22 29 2c 6d 61 78 57 69 64 74 68 3a 6e 2e 77 69 64 74 68 28 29 2c 73 75 63 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 73 3d 65 2e 66 69 6e 64 28 22 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 69 6e 70 75 74 22 29 2c 73 2e 66 6f 63 75 73 28 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 66 26 26 66 28 65 29 7d 2c 72 65 73 69 7a 65 3a 21 31 2c 79 65 73 3a 66 75 6e 63 74 69 6f 6e 28 69 29 Data Ascii: ccess,r.open(i.extend({type:1,btn:["确定","取消"],content:l,skin:"layui-layer-prompt"+c("prompt"),maxWidth:n.width(),success:function(e){s=e.find(".layui-layer-input"),s.focus(),"function"==typeof f&&f(e)},resize:!1,yes:function(i)
2023-11-17 12:18:36 UTC	67	IN	Data Raw: 61 26 26 61 28 74 29 7d 7d 2c 65 29 29 7d 2c 72 2e 70 68 6f 74 6f 73 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 6e 2c 61 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 2c 69 29 7b 76 61 72 20 6e 3d 6e 65 77 20 49 6d 61 67 65 3b 72 65 74 75 72 6e 20 6e 2e 73 72 63 3d 65 2c 6e 2e 63 6f 6d 70 6c 65 74 65 3f 74 28 6e 29 3a 28 6e 2e 6f 6e 6c 6f 61 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 2e 6f 6e 6c 6f 61 64 3d 6e 75 6c 6c 2c 74 28 6e 29 7d 2c 76 6f 69 64 28 6e 2e 6f 6e 65 72 72 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 6e 2e 6f 6e 65 72 72 6f 72 3d 6e 75 6c 6c 2c 69 28 65 29 7d 29 29 7d 76 61 72 20 73 3d 7b 7d 3b 69 66 28 74 3d 74 7c 7c 7b 7d 2c 74 2e 70 68 6f 74 6f 73 29 7b 76 61 72 20 6c 3d 74 2e 70 68 6f 74 6f 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d Data Ascii: a&&a(t)}},e))},r.photos=function(t,n,a){function o(e,t,i){var n=new Image;return n.src=e,n.complete?t(n):(n.onload=function(){n.onload=null,t(n)},void(n.onerror=function(e){n.onerror=null,i(e)}))}var s={};if(t=t\|\|{},t.photos){var l=t.photos.constructor===
2023-11-17 12:18:36 UTC	68	IN	Data Raw: 2e 66 69 6e 64 28 22 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 69 6d 67 70 72 65 76 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 73 2e 69 6d 67 70 72 65 76 28 29 7d 29 2c 73 2e 62 69 67 69 6d 67 2e 66 69 6e 64 28 22 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 69 6d 67 6e 65 78 74 22 29 2e 6f 6e 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 73 2e 69 6d 67 6e 65 78 74 28 29 7d 29 2c 69 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 6b 65 79 75 70 22 2c 73 2e 6b 65 79 75 70 29 7d 2c 73 2e 6c 6f 61 64 69 3d 72 2e 6c 6f 61 64 28 31 2c 7b 73 68 61 64 65 3a 21 28 22 73 68 61 64 65 22 69 6e 20 74 29 26 26 2e 39 Data Ascii: .find(".layui-layer-imgprev").on("click",function(e){e.preventDefault(),s.imgprev()}),s.bigimg.find(".layui-layer-imgnext").on("click",function(e){e.preventDefault(),s.imgnext()}),i(document).on("keyup",s.keyup)},s.loadi=r.load(1,{shade:!("shade"in t)&&.9
2023-11-17 12:18:36 UTC	69	IN	Data Raw: 6e 28 65 2c 69 29 7b 73 2e 62 69 67 69 6d 67 3d 65 2e 66 69 6e 64 28 22 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 70 68 69 6d 67 22 29 2c 73 2e 69 6d 67 73 65 65 3d 65 2e 66 69 6e 64 28 22 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 69 6d 67 75 69 64 65 2c 2e 6c 61 79 75 69 2d 6c 61 79 65 72 2d 69 6d 67 62 61 72 22 29 2c 73 2e 65 76 65 6e 74 28 65 29 2c 74 2e 74 61 62 26 26 74 2e 74 61 62 28 75 5b 64 5d 2c 65 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 79 26 26 79 28 65 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 65 6e 64 3d 21 30 2c 69 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 66 66 28 22 6b 65 79 75 70 22 2c 73 2e 6b 65 79 75 70 29 7d 7d 2c 74 29 29 7d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 2e 63 6c 6f 73 65 28 73 2e 6c 6f 61 64 69 Data Ascii: n(e,i){s.bigimg=e.find(".layui-layer-phimg"),s.imgsee=e.find(".layui-layer-imguide,.layui-layer-imgbar"),s.event(e),t.tab&&t.tab(u[d],e),"function"==typeof y&&y(e)},end:function(){s.end=!0,i(document).off("keyup",s.keyup)}},t))},function(){r.close(s.loadi

Timestamp	kBytes transferred	Direction	Data
2023-11-17 12:18:36 UTC	71	OUT	GET /js/hovertreewelcome.js HTTP/1.1 Host: app.iiflsdi-app.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://app.iiflsdi-app.com/landing.html Connection: keep-alive
2023-11-17 12:18:37 UTC	72	IN	HTTP/1.1 200 OK Date: Fri, 17 Nov 2023 12:18:37 GMT Content-Type: application/javascript Content-Length: 2497 Connection: close Last-Modified: Tue, 07 Nov 2023 06:41:46 GMT ETag: "6549dc2a-9c1" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 132 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=%2FEVeGpxgCd%2FzjMRuQCa9ggSN4kYg8Mn8CL%2BXS5VY5kVbdaG%2FpadrUJGPHoTKGjyFZuriXc1XvcenfmPEzWAeik7z%2BgIGTo6E%2ByqRNuKYcdekQiL3EVg%2FOkjrI8%2B%2BVD%2BaSnBbhdbD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8277ead60a4b284c-SEA alt-svc: h3=":443"; ma=86400
2023-11-17 12:18:37 UTC	72	IN	Data Raw: 76 61 72 20 53 74 61 74 73 20 3d 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 76 61 72 20 65 20 3d 20 44 61 74 65 2e 6e 6f 77 28 29 2c 20 74 20 3d 20 65 2c 20 69 20 3d 20 30 2c 20 6e 20 3d 20 31 20 2f 20 30 2c 20 72 20 3d 20 30 2c 20 73 20 3d 20 30 2c 20 6f 20 3d 20 31 20 2f 20 30 2c 20 61 20 3d 20 30 2c 20 6c 20 3d 20 30 2c 20 68 20 3d 20 30 2c 20 63 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 20 63 2e 69 64 20 3d 20 22 73 74 61 74 73 22 2c 20 63 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6d 6f 75 73 65 64 6f 77 6e 22 2c 20 66 75 6e 63 74 69 6f 6e 20 28 65 29 20 7b 20 65 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 20 76 28 2b 2b 68 20 25 20 32 29 20 7d 2c 20 21 31 29 2c 20 63 Data Ascii: var Stats = function () { var e = Date.now(), t = e, i = 0, n = 1 / 0, r = 0, s = 0, o = 1 / 0, a = 0, l = 0, h = 0, c = document.createElement("div"); c.id = "stats", c.addEventListener("mousedown", function (e) { e.preventDefault(), v(++h % 2) }, !1), c
2023-11-17 12:18:37 UTC	73	IN	Data Raw: 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 64 29 3b 20 76 61 72 20 70 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 20 66 6f 72 20 28 70 2e 69 64 20 3d 20 22 66 70 73 47 72 61 70 68 22 2c 20 70 2e 73 74 79 6c 65 2e 63 73 73 54 65 78 74 20 3d 20 22 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 37 34 70 78 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 66 66 22 2c 20 75 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 70 29 20 3b 20 37 34 20 3e 20 70 2e 63 68 69 6c 64 72 65 6e 2e 6c 65 6e 67 74 68 3b 29 20 7b 20 76 61 72 20 66 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 73 70 61 6e 22 29 3b 20 66 2e 73 74 79 Data Ascii: .appendChild(d); var p = document.createElement("div"); for (p.id = "fpsGraph", p.style.cssText = "position:relative;width:74px;height:30px;background-color:#0ff", u.appendChild(p) ; 74 > p.children.length;) { var f = document.createElement("span"); f.sty
2023-11-17 12:18:37 UTC	74	IN	Data Raw: 74 69 6f 6e 20 28 29 20 7b 20 65 20 3d 20 44 61 74 65 2e 6e 6f 77 28 29 20 7d 2c 20 65 6e 64 3a 20 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 20 76 61 72 20 68 20 3d 20 44 61 74 65 2e 6e 6f 77 28 29 3b 20 72 65 74 75 72 6e 20 69 20 3d 20 68 20 2d 20 65 2c 20 6e 20 3d 20 4d 61 74 68 2e 6d 69 6e 28 6e 2c 20 69 29 2c 20 72 20 3d 20 4d 61 74 68 2e 6d 61 78 28 72 2c 20 69 29 2c 20 67 2e 74 65 78 74 43 6f 6e 74 65 6e 74 20 3d 20 69 20 2b 20 22 20 4d 53 20 28 22 20 2b 20 6e 20 2b 20 22 2d 22 20 2b 20 72 20 2b 20 22 29 22 2c 20 62 28 79 2c 20 4d 61 74 68 2e 6d 69 6e 28 33 30 2c 20 33 30 20 2d 20 33 30 20 2a 20 28 69 20 2f 20 32 30 30 29 29 29 2c 20 6c 2b 2b 2c 20 68 20 3e 20 74 20 2b 20 31 65 33 20 26 26 20 28 73 20 3d 20 4d 61 74 68 2e 72 6f 75 6e 64 28 31 65 33 20 Data Ascii: tion () { e = Date.now() }, end: function () { var h = Date.now(); return i = h - e, n = Math.min(n, i), r = Math.max(r, i), g.textContent = i + " MS (" + n + "-" + r + ")", b(y, Math.min(30, 30 - 30 * (i / 200))), l++, h > t + 1e3 && (s = Math.round(1e3

Process:	/usr/lib/firefox/firefox
File Type:	ASCII text, with very long lines (1632), with CRLF line terminators
Category:	dropped
Size (bytes):	89812
Entropy (8bit):	5.367038022104836
Encrypted:	false
SSDEEP:	384:4huTuaNgnoRgag0F+K83TVkwYTKrjJ2zeoR0zwR8S+D+lCOz3FyZLAEpBTD3ChTZ:4KPDjjIBppPUdcfEf3Es7mAh
MD5:	C861679FD5CCD3CECBC8BFF4DB4EBA0B
SHA1:	BFDE1650BAC1AC7FA95118AD2C472E7F14961446
SHA-256:	D2BBE1DE37BE79BDE22AA2949C56B72E9F5E9B8AD9675CEFEAD01ACAA8883EC6
SHA-512:	1345701997ED6BC1D4255FFE573F8C49FADBEFCB120729F6DDEFD71BDDD7D6B53AA57240CDEBA638422CEB7D5A5BA56D88998B0F0CB7DB6158A745E4E311F841
Malicious:	false
Reputation:	low
Preview:	/! @license....* Buttons..* Copyright 2012-2014 Alex Wolfe and Rob Levin.... Licensed under the Apache License, Version 2.0 (the "License");..* you may not use this file except in compliance with the License...* You may obtain a copy of the License at.... http://www.apache.org/licenses/LICENSE-2.0.... Unless required by applicable law or agreed to in writing, software..* distributed under the License is distributed on an "AS IS" BASIS,..* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied...* See the License for the specific language governing permissions and..* limitations under the License.../../..* Compass (optional).... We recommend the use of autoprefixer instead of Compass..* when using buttons. However, buttons does support Compass...* simply change $ubtn-use-compass to true and uncomment the..* @import 'compass' code below to use Compass.../../..* Required Files.... These files include the variables and options..* and base css styles

Process:	/usr/lib/firefox/firefox
File Type:	data
Category:	dropped
Size (bytes):	20319
Entropy (8bit):	5.284259254359985
Encrypted:	false
SSDEEP:	384:q841Jz2m8mzzL/zSM/YLhBCo3+rs7mA2Z1ZR:F4PV/YLhf3Es7mA2r7
MD5:	75D1F3200F9963A6A858E850395C5F03
SHA1:	2C2619524BE366CD0743354D66C087CE5C4CEEC2
SHA-256:	62A931925926DA6E3786F2B88D912383DC24CC7B5BB7FBA1A29875C4A07C28DA
SHA-512:	5948E6EFEE9731A5C46374DB15EE0F92A52DC7599E34EC40BD41248BB463542AD47F8053A5BC7B5B7269067A67B9E0EAD38E542122029C5F7B2349F3B48C584A
Malicious:	false
Reputation:	low
Preview:	(function (window) {.... var ctx,.. hue,.. logo,.. form,.. buffer,.. target = {},.. tendrils = [],.. settings = {};.... settings.debug = true;.. settings.friction = 0.5;.. settings.trails = 20;.. settings.size = 50;.. settings.dampening = 0.25;.. settings.tension = 0.98;.... Math.TWO_PI = Math.PI * 2;.... // ========================================================================================.. // Oscillator ..... // ----------------------------------------------------------------------------------------.... function Oscillator(options) {.. this.init(options \|\| {});.. }.... Oscillator.prototype = (function () {.... var value = 0;.... return {.... init: functio

Process:	/usr/lib/firefox/firefox
File Type:	ASCII text, with very long lines (65536), with no line terminators
Category:	dropped
Size (bytes):	96764
Entropy (8bit):	5.400952721804672
Encrypted:	false
SSDEEP:	768:dxLnupVkbCyTHhp73eU6Jww9JVVvCfvtFq9jassX66BdkZlIuqI46CIBqI4Iff3O:dZCyTHh53eTewVnl6rkZ6IffUsaT
MD5:	8A5CD4342CE7DF6E168CEA66F09AE3B6
SHA1:	B923968FEC3BC24483209D8E1250B967A584F7A5
SHA-256:	7C34452BBCB0EFCA9537259A0C2611E4ED267D7A4274FB9DE91A07730067E13B
SHA-512:	8B61F7DF187B22CB4C135B73E5D669F5748AC69706B2906B98E765CD3C12DB24815D82BA2BE1368B1C65632E349403A491B28F41611A1FC3DEE717384BA61D9E
Malicious:	false
Reputation:	low
Preview:	hr,img{border:0}body,figure{margin:0}.navbar-fixed-bottom .navbar-collapse,.navbar-fixed-top .navbar-collapse,.pre-scrollable{max-height:340px}.fa,.glyphicon{-moz-osx-font-smoothing:grayscale}@font-face{font-family:'Open Sans';font-style:normal;font-weight:300;src:url(../components/patternfly/dist/fonts/OpenSans-Light-webfont.eot);src:url(../components/patternfly/dist/fonts/OpenSans-Light-webfont.eot?#iefix) format('embedded-opentype'),url(../components/patternfly/dist/fonts/OpenSans-Light-webfont.woff) format('woff'),url(../components/patternfly/dist/fonts/OpenSans-Light-webfont.ttf) format('truetype'),url(../components/patternfly/dist/fonts/OpenSans-Light-webfont.svg#OpenSansLight) format('svg')}@font-face{font-family:'Open Sans';font-style:normal;font-weight:400;src:url(../components/patternfly/dist/fonts/OpenSans-Regular-webfont.eot);src:url(../components/patternfly/dist/fonts/OpenSans-Regular-webfont.eot?#iefix) format('embedded-opentype'),url(../components/patternfly/dist/fonts/O

Process:	/usr/lib/firefox/firefox
File Type:	ASCII text, with very long lines (32038)
Category:	dropped
Size (bytes):	103790
Entropy (8bit):	5.583371474346313
Encrypted:	false
SSDEEP:	3072:R+41ZqLTW8xRrqSb8qGH77da98HrG8sah:MOoW8xVdGda98HrGR+
MD5:	EA45E03DD7E3BA0A2B56EF4D45DCEB89
SHA1:	F1F1FBBA5D40B5B67EE80E9CA983EFA333C77A7C
SHA-256:	9119BBD5FEB14596242909E3595A2EAA84A3C03FDB2B862AE37787A71E97E7E2
SHA-512:	FC3CF61C36A039E8A3C688D6C936EA3D75FC77AF43F62C22D31950450DDD952E6AC18C74A67CDF1374F14C3739B3C7CEFB923AF37E1738F94A380AED8F481A4A
Malicious:	false
Reputation:	low
Preview:	/! jQuery v1.11.3 \| (c) 2005, 2015 jQuery Foundation, Inc. \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=c.slice,e=c.concat,f=c.push,g=c.indexOf,h={},i=h.toString,j=h.hasOwnProperty,k={},l="1.11.3",m=function(a,b){return new m.fn.init(a,b)},n=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,o=/^-ms-/,p=/-([\da-z])/gi,q=function(a,b){return b.toUpperCase()};m.fn=m.prototype={jquery:l,constructor:m,selector:"",length:0,toArray:function(){return d.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:d.call(this)},pushStack:function(a){var b=m.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a,b){return m.each(this,a,b)},map:function(a){return this.pushStack(m.map(this,function(b,c){ret

Timestamp	kBytes transferred	Direction	Data
2023-11-17 12:18:36 UTC	71	OUT	GET /js/bg_window.js HTTP/1.1 Host: app.iiflsdi-app.com User-Agent: Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:66.0) Gecko/20100101 Firefox/66.0 Accept: / Accept-Language: en-US,en;q=0.5 Accept-Encoding: gzip, deflate, br Referer: https://app.iiflsdi-app.com/landing.html Connection: keep-alive
2023-11-17 12:18:37 UTC	75	IN	HTTP/1.1 200 OK Date: Fri, 17 Nov 2023 12:18:37 GMT Content-Type: application/javascript Content-Length: 12499 Connection: close Last-Modified: Tue, 07 Nov 2023 06:41:47 GMT ETag: "6549dc2b-30d3" Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 131 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v3?s=x5Sd22dfi2amsJzRIn5Zh3jp2gOVw1tIhqZ0%2BIAWF52hxHUd0Z%2B%2FBS7pyEr%2Fcp%2BEdqgTi6gQHPAZDExP%2FQdktsykGeyrbqo5wzNaXvNl10joQ9ANMBdHP7eobqsZhAJ6fM7wClUl"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8277ead63991ec70-SEA alt-svc: h3=":443"; ma=86400
2023-11-17 12:18:37 UTC	75	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 77 69 6e 64 6f 77 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 63 74 78 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 75 65 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6c 6f 67 6f 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 72 6d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 75 66 66 65 72 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 20 3d 20 7b 7d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 65 6e 64 72 69 6c 73 20 3d 20 5b 5d 2c 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 74 69 6e 67 73 20 3d 20 7b 7d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 65 74 74 69 6e 67 73 Data Ascii: (function (window) { var ctx, hue, logo, form, buffer, target = {}, tendrils = [], settings = {}; settings
2023-11-17 12:18:37 UTC	76	IN	Data Raw: 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 4f 73 63 69 6c 6c 61 74 6f 72 28 6f 70 74 69 6f 6e 73 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 69 6e 69 74 28 6f 70 74 69 6f 6e 73 20 7c 7c 20 7b 7d 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 4f 73 63 69 6c 6c 61 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 Data Ascii: ----------------------------------------------------------------------------- function Oscillator(options) { this.init(options \|\| {}); } Oscillator.prototype = (function () { v
2023-11-17 12:18:37 UTC	77	IN	Data Raw: 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 54 65 6e 64 72 69 6c 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 28 66 75 6e 63 74 69 6f 6e 20 28 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 4e 6f 64 65 28 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 78 20 3d 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 79 20 3d 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 76 79 20 3d 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 68 69 73 2e 76 78 20 3d 20 30 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: } Tendril.prototype = (function () { function Node() { this.x = 0; this.y = 0; this.vy = 0; this.vx = 0; }
2023-11-17 12:18:37 UTC	79	IN	Data Raw: 20 20 70 72 65 76 20 3d 20 74 68 69 73 2e 6e 6f 64 65 73 5b 69 20 2d 20 31 5d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f 64 65 2e 76 78 20 2b 3d 20 28 70 72 65 76 2e 78 20 2d 20 6e 6f 64 65 2e 78 29 20 2a 20 73 70 72 69 6e 67 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f 64 65 2e 76 79 20 2b 3d 20 28 70 72 65 76 2e 79 20 2d 20 6e 6f 64 65 2e 79 29 20 2a 20 73 70 72 69 6e 67 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6e 6f 64 65 2e 76 78 20 2b 3d 20 70 72 65 76 2e 76 78 20 2a 20 73 65 74 74 69 6e 67 73 2e 64 61 6d 70 65 6e 69 6e 67 3b 0d 0a 20 20 20 20 20 20 Data Ascii: prev = this.nodes[i - 1]; node.vx += (prev.x - node.x) * spring; node.vy += (prev.y - node.y) * spring; node.vx += prev.vx * settings.dampening;
2023-11-17 12:18:37 UTC	80	IN	Data Raw: 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 20 3d 20 74 68 69 73 2e 6e 6f 64 65 73 5b 69 20 2b 20 31 5d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 74 78 2e 71 75 61 64 72 61 74 69 63 43 75 72 76 65 54 6f 28 61 2e 78 2c 20 61 2e 79 2c 20 62 2e 78 2c 20 62 2e 79 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 74 78 2e 73 74 72 6f 6b 65 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 74 78 2e 63 6c 6f 73 65 50 61 74 68 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: b = this.nodes[i + 1]; ctx.quadraticCurveTo(a.x, a.y, b.x, b.y); ctx.stroke(); ctx.closePath(); } };
2023-11-17 12:18:37 UTC	81	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 63 74 78 2e 66 69 6c 6c 52 65 63 74 28 30 2c 20 30 2c 20 63 74 78 2e 63 61 6e 76 61 73 2e 77 69 64 74 68 2c 20 63 74 78 2e 63 61 6e 76 61 73 2e 68 65 69 67 68 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 74 78 2e 67 6c 6f 62 61 6c 43 6f 6d 70 6f 73 69 74 65 4f 70 65 72 61 74 69 6f 6e 20 3d 20 27 6c 69 67 68 74 65 72 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 74 78 2e 73 74 72 6f 6b 65 53 74 79 6c 65 20 3d 20 27 68 73 6c 61 28 27 20 2b 20 4d 61 74 68 2e 72 6f 75 6e 64 28 68 75 65 2e 75 70 64 61 74 65 28 29 29 20 2b 20 27 2c 39 30 25 2c 35 30 25 2c 30 2e 32 35 29 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 74 78 2e 6c 69 6e 65 57 69 64 74 68 20 3d 20 31 3b 0d 0a 0d 0a Data Ascii: ctx.fillRect(0, 0, ctx.canvas.width, ctx.canvas.height); ctx.globalCompositeOperation = 'lighter'; ctx.strokeStyle = 'hsla(' + Math.round(hue.update()) + ',90%,50%,0.25)'; ctx.lineWidth = 1;
2023-11-17 12:18:37 UTC	83	IN	Data Raw: 20 3d 20 65 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 70 61 67 65 59 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 20 65 6c 73 65 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 2e 78 20 3d 20 65 76 65 6e 74 2e 63 6c 69 65 6e 74 58 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 74 61 72 67 65 74 2e 79 20 3d 20 65 76 65 6e 74 2e 63 6c 69 65 6e 74 59 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 65 76 65 6e 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 74 6f 75 63 68 73 74 61 72 74 Data Ascii: = event.touches[0].pageY; } else { target.x = event.clientX target.y = event.clientY; } event.preventDefault(); } function touchstart
2023-11-17 12:18:37 UTC	84	IN	Data Raw: 61 6d 65 20 3d 20 27 74 72 61 6e 73 69 74 69 6f 6e 2d 69 6e 27 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 7d 2c 20 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 20 2a 20 35 30 30 29 20 2b 20 35 30 30 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 75 6e 63 74 69 6f 6e 20 73 61 76 65 28 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 21 62 75 66 66 65 72 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 75 66 66 65 72 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 27 63 61 6e 76 61 73 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 62 75 66 66 65 72 2e 77 69 64 74 68 20 Data Ascii: ame = 'transition-in'; }, (Math.random() * 500) + 500); } function save() { if (!buffer) { buffer = document.createElement('canvas'); buffer.width
2023-11-17 12:18:37 UTC	85	IN	Data Raw: 6f 67 6f 2e 68 65 69 67 68 74 20 2f 20 32 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 62 75 66 66 65 72 2e 74 6f 44 61 74 61 55 52 4c 28 29 2c 20 27 77 61 6c 6c 70 61 70 65 72 27 2c 20 27 74 6f 70 3d 30 2c 6c 65 66 74 3d 30 2c 77 69 64 74 68 3d 27 20 2b 20 62 75 66 66 65 72 2e 77 69 64 74 68 20 2b 20 27 2c 68 65 69 67 68 74 3d 27 20 2b 20 62 75 66 66 65 72 2e 68 65 69 67 68 74 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 2f 2f 20 66 6f 72 6d 2e 69 6e 70 75 74 2e 76 61 6c 75 65 20 3d 20 62 75 66 66 65 72 2e 74 6f 44 61 74 61 55 52 4c 28 29 2e 73 75 62 73 74 72 28 32 32 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: ogo.height / 2 ); window.open(buffer.toDataURL(), 'wallpaper', 'top=0,left=0,width=' + buffer.width + ',height=' + buffer.height); // form.input.value = buffer.toDataURL().substr(22);
2023-11-17 12:18:37 UTC	87	IN	Data Raw: 75 70 27 2c 20 6b 65 79 75 70 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 66 6f 63 75 73 27 2c 20 73 74 61 72 74 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 27 62 6c 75 72 27 2c 20 73 74 6f 70 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 72 65 73 69 7a 65 28 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 77 69 6e 64 6f 77 2e 44 45 42 55 47 29 20 7b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 76 61 72 20 67 75 69 20 3d 20 6e 65 77 20 64 61 74 2e 47 55 49 28 29 3b 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 Data Ascii: up', keyup); window.addEventListener('focus', start); window.addEventListener('blur', stop); resize(); if (window.DEBUG) { var gui = new dat.GUI();

Start time (UTC):	12:18:31
Start date (UTC):	17/11/2023
Path:	/usr/bin/exo-open
Arguments:	exo-open https://app.iiflsdi-app.com/landing.html
File size:	22856 bytes
MD5 hash:	39c5fa78f1cb3d950b9944f784018d3a

Start time (UTC):	12:18:32
Start date (UTC):	17/11/2023
Path:	/usr/lib/firefox/firefox
Arguments:	-
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Start time (UTC):	12:18:33
Start date (UTC):	17/11/2023
Path:	/usr/lib/firefox/firefox
Arguments:	-
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Start time (UTC):	12:18:34
Start date (UTC):	17/11/2023
Path:	/usr/lib/firefox/firefox
Arguments:	-
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Start time (UTC):	12:18:36
Start date (UTC):	17/11/2023
Path:	/usr/lib/firefox/firefox
Arguments:	-
File size:	219456 bytes
MD5 hash:	9a5584c0c2c9ac6b1ba6296513075910

Description:	Adversaries may set files and directories to be hidden to evade detection mechanisms. To prevent normal users from accidentally changing special files on a system, most operating systems have the concept of a ‘hidden’ file. These files don’t show up when a user browses the file system with a GUI or when using normal commands on the command line. Users must explicitly ask to show the hidden files either via a series of Graphical User Interface (GUI) prompts or with command line switches ( `dir /a` for Windows and `ls –a` for Linux and macOS).
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Creation, File: File Metadata, Process: Process Creation
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to get a listing of security software, configurations, defensive tools, and sensors that are installed on a system or in a cloud environment. This may include things such as firewall rules and anti-virus. Adversaries may use the information from Security Software Discovery during automated discovery to shape follow-on behaviors, including whether or not the adversary fully infects the target and/or attempts specific actions.
Tactics:	Discovery
Data Sources:	Command: Command Execution, Firewall: Firewall Enumeration, Firewall: Firewall Metadata, Process: OS API Execution, Process: Process Creation
Platforms:	Azure AD, Google Workspace, IaaS, Linux, macOS, Office 365, SaaS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Linux Analysis Report https://app.iiflsdi-app.com/landing.html

Overview

General Information

Detection

Signatures

Classification

Analysis Advice

General Information

Warnings

Process Tree

Yara Signatures

Snort Signatures

Joe Sandbox Signatures

Compliance

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Language, Device and Operating System Detection

Mitre Att&ck Matrix

Malware Configuration

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

/home/james/.cache/dconf/user

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/0FA16E4596296001A9857264129362F499572146

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/22B8925CE1CF856F212F1016775C0769E5778302

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/34E309C940AAF78E945F6867A500183E0FA9FDA0

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/55F784984DEE175F073A757B0206338D613E4759

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/62334AFB83609B25B29CD81DDCF086F62EA668A8

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/91CFD3D640EFE75C9C1AC26AC55F57F92C8FF418

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/9C20A376592F45D3A3726BFFCDC4E4290F545200

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/AF727B868551E00A242A12CA62A025A1D10352FE

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/C15619A64BE15A33A26CE7F774E8B29B1E8CA560

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/C389DE279BF5275924497D5B33D1F1900116E591

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/ED61E2F0D410C8FEDA332B35EFCA69693965ECB1

/home/james/.cache/mozilla/firefox/5zxot757.default/cache2/entries/F805D8CAE142D878D7FC013CCEEF913C38BE31EF

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/allow-flashallow-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/allow-flashallow-digest256.sbstore

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/base-track-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/base-track-digest256.sbstore

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/block-flash-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/block-flash-digest256.sbstore

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/block-flashsubdoc-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/block-flashsubdoc-digest256.sbstore

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flash-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flash-digest256.sbstore

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flashallow-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flashallow-digest256.sbstore

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flashsubdoc-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/except-flashsubdoc-digest256.sbstore

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/mozplugin-block-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/mozplugin-block-digest256.sbstore

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/mozstd-trackwhite-digest256.pset

/home/james/.cache/mozilla/firefox/5zxot757.default/safebrowsing-updating/mozstd-trackwhite-digest256.sbstore

Linux Analysis Report
https://app.iiflsdi-app.com/landing.html

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre