Edit tour

Windows Analysis Report
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html

Overview

General Information

Sample URL:	https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html
Analysis ID:	1397179
Infos:

Detection

TechSupportScam

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Phishing site detected (based on favicon image match)

Yara detected TechSupportScam

Creates files inside the system directory

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 4612 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 504 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=1888,i,2175464741008215700,11808416696493816533,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 7404 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5428 --field-trial-handle=1888,i,2175464741008215700,11808416696493816533,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_75	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security

HTML

Source	Rule	Description	Author
0.0.pages.csv	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security
0.3.pages.csv	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security
0.1.pages.csv	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security
0.2.pages.csv	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• Spam, unwanted Advertisements and Ransom Demands
• System Summary
• Boot Survival

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html

SlashNext: detection malicious, Label: Scareware type: Phishing & Social Engineering

Phishing

Phishing site detected (based on favicon image match)

Source: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html

Matcher: Template: microsoft matched with high similarity

Yara detected TechSupportScam

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.3.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_75, type: DROPPED

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49751 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.200
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 23.51.58.94
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 40.68.123.157
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/index.html HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1Host: clients2.google.comConnection: keep-aliveX-Goog-Update-Interactivity: fgX-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmiedaX-Goog-Update-Updater: chromecrx-117.0.5938.132Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/tapa.css HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/bg.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/mnc.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-1.4.4.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://shark-app-9uouf.ondigitalocean.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/msmm.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/mnc.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/dm.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/re.gif HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/cs.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/pcm.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/bel.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/bg.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?lang=en HTTP/1.1Host: ipwho.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://shark-app-9uouf.ondigitalocean.appSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://shark-app-9uouf.ondigitalocean.app/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/bx1.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/msmm.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/set.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/dm.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/vsc.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/cs.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/nvidia.js HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/re.gif HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/jupiter.js HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/pcm.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/_Fm7-alert.mp3 HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /?lang=en HTTP/1.1Host: ipwho.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/bel.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/bx1.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/set.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/ai2.mp3 HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/webs.mp4 HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/msmm.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "acb05ebcd5f488fc99169cff02b6dd04"If-Modified-Since: Thu, 22 Feb 2024 18:26:07 GMT
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/vsc.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/msmm.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "acb05ebcd5f488fc99169cff02b6dd04"If-Modified-Since: Thu, 22 Feb 2024 18:26:07 GMT
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/w3.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/w1.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=M9yBtbeuV+suPwL&MD=owPnxyBp HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/w3.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/_Fm7-alert.mp3 HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Language: en-US,en;q=0.9Range: bytes=0-200831If-None-Match: "0116152611dd51432e852781f8cc7e82"If-Modified-Since: Thu, 22 Feb 2024 18:26:06 GMT
Source: global traffic	HTTP traffic detected: GET /cdewe4rewbvcfr4erwi/w1.png HTTP/1.1Host: shark-app-9uouf.ondigitalocean.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=M9yBtbeuV+suPwL&MD=owPnxyBp HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000002E0C35FEE9 HTTP/1.1Host: clients1.google.comConnection: keep-aliveSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br

Source: unknown

DNS traffic detected: queries for: shark-app-9uouf.ondigitalocean.app

Source: unknown

HTTP traffic detected: POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1Host: accounts.google.comConnection: keep-aliveContent-Length: 1Origin: https://www.google.comContent-Type: application/x-www-form-urlencodedSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 22 Feb 2024 18:58:08 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closelast-modified: Thu, 22 Feb 2024 18:26:06 GMTx-rgw-object-type: Normalx-amz-request-id: tx00000f7dacf781d6e310e-0065d7936d-471b1f79-ams3cvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Methodx-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66fx-do-orig-status: 404CF-Cache-Status: HITAge: 1491Set-Cookie: __cf_bm=CSO03uvQRycJ7YImstjfqSbuq7cB3j3fHAFsY30HG6o-1708628288-1.0-AQwiumYp7jV6vtq2Z1xq2MktJoNZDULPb2y9L6/7NNSGKSK/8o4y3AmcffbNF957c9OR3/aovBzAj2ouRtw0YoE=; path=/; expires=Thu, 22-Feb-24 19:28:08 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 859975723bae17e5-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 22 Feb 2024 18:58:09 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closelast-modified: Thu, 22 Feb 2024 18:26:06 GMTx-rgw-object-type: Normalx-amz-request-id: tx00000ec6793b3d68992a8-0065d793b4-471ae006-ams3cvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Methodx-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66fx-do-orig-status: 404CF-Cache-Status: HITAge: 1421Set-Cookie: __cf_bm=iEEpm3CibWsvAKmdAuzA7XWTOttMStHMSeDow8idfzA-1708628289-1.0-AX5ppxxFtP+fmypxVOJTWa9N+v4lfH20czM+tpywEtN1NnVKxQ6bdmhNda1iyAiSflz/nIresxCxcIsVDwfj/Qs=; path=/; expires=Thu, 22-Feb-24 19:28:09 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 859975788d88427f-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 22 Feb 2024 18:58:10 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closelast-modified: Thu, 22 Feb 2024 18:26:06 GMTx-rgw-object-type: Normalx-amz-request-id: tx00000f4a67708e70bd0af-0065d792ed-471b1f79-ams3cvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Methodx-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66fx-do-orig-status: 404CF-Cache-Status: HITAge: 1620Set-Cookie: __cf_bm=30GPeh.f.lpOgXm6pjj.J1XWG16gtkPDEeH7Eh41.MQ-1708628290-1.0-AdgKLx/Qe7I63TGowU9XzCNzQiV/CdoxavnKZQnmUUwbZXsrdM9m/lR7EdR4fM9pK4PM5NbdsyJV4H9uUuzZmE0=; path=/; expires=Thu, 22-Feb-24 19:28:10 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 8599757ebc7443a4-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 22 Feb 2024 18:58:41 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closelast-modified: Thu, 22 Feb 2024 18:26:06 GMTx-rgw-object-type: Normalx-amz-request-id: tx00000e2713c9ce6c35524-0065d79390-471ae006-ams3cvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Methodx-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66fx-do-orig-status: 404CF-Cache-Status: HITAge: 1489Set-Cookie: __cf_bm=MzWyYox1CmM9Xy5jEH533q3fpM5kbVfsXLw.DwKpI.w-1708628321-1.0-AaxdQz2BY2mVFh0N07O8aLPjKyx6AITaQ5I+arARQMQPaeWdht+KW7GfR80d8uG2We8eAiIqebXpocn+DgI0qx0=; path=/; expires=Thu, 22-Feb-24 19:28:41 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 859976415bae0f7c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 22 Feb 2024 18:58:42 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closelast-modified: Thu, 22 Feb 2024 18:26:06 GMTx-rgw-object-type: Normalx-amz-request-id: tx00000f4a67708e70bd0af-0065d792ed-471b1f79-ams3cvary: Origin, Access-Control-Request-Headers, Access-Control-Request-Methodx-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66fx-do-orig-status: 404CF-Cache-Status: HITAge: 1652Set-Cookie: __cf_bm=hgS2zQQKLOo_d2Dz2S33t03bePens5_3tCytxYx48.Q-1708628322-1.0-AXef7EUrejwfuBH+YnHvUVyDwMoXzl3Fp+F6y1ZhUTeHZ3oemcJB4jcu4iThIU8q/vTuv4CJJzr/GZWqSGLfUmY=; path=/; expires=Thu, 22-Feb-24 19:28:42 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=NoneServer: cloudflareCF-RAY: 85997646c84443ed-EWR

Source: chromecache_78.1.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_78.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_78.1.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_75.1.dr	String found in binary or memory: https://code.jquery.com/jquery-1.4.4.min.js
Source: chromecache_79.1.dr	String found in binary or memory: https://ezgif.com/optimize
Source: chromecache_75.1.dr	String found in binary or memory: https://ipwho.is/?lang=en

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49700 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49700
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.16:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.51.58.94:443 -> 192.168.2.16:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 40.68.123.157:443 -> 192.168.2.16:49751 version: TLS 1.2

Spam, unwanted Advertisements and Ransom Demands

Yara detected TechSupportScam

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.3.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_75, type: DROPPED

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\chrome_BITS_4612_1072083946

Jump to behavior

Source: classification engine

Classification label: mal64.phis.win@16/62@18/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=1888,i,2175464741008215700,11808416696493816533,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5428 --field-trial-handle=1888,i,2175464741008215700,11808416696493816533,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2204 --field-trial-handle=1888,i,2175464741008215700,11808416696493816533,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5428 --field-trial-handle=1888,i,2175464741008215700,11808416696493816533,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Download Video

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

No bigger version

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html	100%	SlashNext	Scareware type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/w3.png	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/webs.mp4	0%	Avira URL Cloud	safe
https://ipwho.is/?lang=en	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/bel.png	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/dm.png	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/nvidia.js	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/re.gif	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/cs.png	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/mnc.png	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/_Fm7-alert.mp3	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/bg.png	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/w1.png	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/msmm.png	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/vsc.png	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/set.png	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/tapa.css	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/ai2.mp3	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/pcm.png	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/bx1.png	0%	Avira URL Cloud	safe
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/jupiter.js	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
shark-app-9uouf.ondigitalocean.app	162.159.140.98	true	false	unknown
ipwho.is	15.204.213.5	true	false	unknown
accounts.google.com	142.251.163.84	true	false	high
code.jquery.com	151.101.130.137	true	false	high
www.google.com	142.250.81.228	true	false	high
clients.l.google.com	142.250.80.14	true	false	high
clients1.google.com	unknown	unknown	false	high
clients2.google.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/w3.png	false	Avira URL Cloud: safe	unknown
https://ipwho.is/?lang=en	false	Avira URL Cloud: safe	unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/bel.png	false	Avira URL Cloud: safe	unknown
https://accounts.google.com/ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard	false		high
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html	true		unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/webs.mp4	false	Avira URL Cloud: safe	unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/cs.png	false	Avira URL Cloud: safe	unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/_Fm7-alert.mp3	false	Avira URL Cloud: safe	unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/re.gif	false	Avira URL Cloud: safe	unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/mnc.png	false	Avira URL Cloud: safe	unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/dm.png	false	Avira URL Cloud: safe	unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/nvidia.js	false	Avira URL Cloud: safe	unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/bg.png	false	Avira URL Cloud: safe	unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/vsc.png	false	Avira URL Cloud: safe	unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/set.png	false	Avira URL Cloud: safe	unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/jupiter.js	false	Avira URL Cloud: safe	unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/pcm.png	false	Avira URL Cloud: safe	unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/tapa.css	false	Avira URL Cloud: safe	unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/msmm.png	false	Avira URL Cloud: safe	unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/w1.png	false	Avira URL Cloud: safe	unknown
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/ai2.mp3	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-1.4.4.min.js	false		high
https://clients2.google.com/service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1	false		high
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/bx1.png	false	Avira URL Cloud: safe	unknown
https://clients1.google.com/tools/pso/ping?as=chrome&brand=ONGR&pid=&hl=en&events=C1I,C2I,C7I,C1S,C7S&rep=2&rlz=C1:,C2:,C7:&id=00000000000000000000000000000000000000002E0C35FEE9	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
http://jquery.org/license	chromecache_78.1.dr	false	high
http://sizzlejs.com/	chromecache_78.1.dr	false	high
https://ezgif.com/optimize	chromecache_79.1.dr	false	high
http://jquery.com/	chromecache_78.1.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.80.14	clients.l.google.com	United States	15169	GOOGLEUS	false
15.204.213.5	ipwho.is	United States	71	HP-INTERNET-ASUS	false
142.251.40.206	unknown	United States	15169	GOOGLEUS	false
142.250.81.228	www.google.com	United States	15169	GOOGLEUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
162.159.140.98	shark-app-9uouf.ondigitalocean.app	United States	13335	CLOUDFLARENETUS	false
142.251.163.84	accounts.google.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.17
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1397179
Start date and time:	2024-02-22 19:57:38 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	17
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@16/62@18/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, audiodg.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.80.35, 34.104.35.123, 142.250.176.195
Excluded domains from analysis (whitelisted): fs.microsoft.com, edgedl.me.gvt1.com, slscr.update.microsoft.com, update.googleapis.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
VT rate limit hit for: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Feb 22 17:58:07 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9786230171996
Encrypted:	false
SSDEEP:	48:89dPTnH0HsidAKZdA1FehwiZUklqeh3y+3:8fTTQy
MD5:	1CDAC00356EE8CDCEAE5073B55DC8A06
SHA1:	18A1033F59F815F625A6AA71F3B66DBBF4122D5C
SHA-256:	87AD54F4E1038B6BE7E011C366EE362D1808AA7A3D061A642DD18DF8B0D8B9C5
SHA-512:	434EC3C793A78418EAAC801D8F48107093A10767EC1C28F384C6C24DD86D004DF8348AA1BC6E077C3BA558D8DA750AE0508FCF2E5C5E7F9D387D115CE83C1B7E
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....I....e..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IVX:.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VVXC.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VVXC.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VVXC............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VVXD............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i............5.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Feb 22, 2024 19:58:05.982897997 CET	55945	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:58:05.983109951 CET	51483	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:58:06.037255049 CET	52688	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:58:06.037616014 CET	53703	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:58:06.038227081 CET	49895	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:58:06.038429022 CET	58579	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:58:06.071306944 CET	53	50442	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:06.073755980 CET	53	55945	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:06.076999903 CET	53	51483	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:06.125597000 CET	53	52688	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:06.125880003 CET	53	53703	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:06.126148939 CET	53	49895	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:06.126768112 CET	53	58579	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:06.514360905 CET	54467	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:58:06.514677048 CET	59209	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:58:06.602396965 CET	53	59209	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:06.602618933 CET	53	54467	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:06.690695047 CET	53	63672	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:06.948868990 CET	52653	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:58:06.949064016 CET	55923	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:58:07.039994955 CET	53	52653	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:07.041353941 CET	53	55923	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:07.093379974 CET	63736	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:58:07.093591928 CET	61397	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:58:07.181859970 CET	53	63736	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:07.181916952 CET	53	61397	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:07.579274893 CET	52718	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:58:07.579446077 CET	57011	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:58:07.668562889 CET	53	52718	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:07.669215918 CET	53	57011	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:10.790019989 CET	51134	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:58:10.790198088 CET	57968	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:58:10.878257990 CET	53	57968	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:10.878283978 CET	53	51134	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:23.787353992 CET	53	50523	1.1.1.1	192.168.2.16
Feb 22, 2024 19:58:42.679549932 CET	53	62493	1.1.1.1	192.168.2.16
Feb 22, 2024 19:59:05.103431940 CET	53	54816	1.1.1.1	192.168.2.16
Feb 22, 2024 19:59:06.015194893 CET	53	52401	1.1.1.1	192.168.2.16
Feb 22, 2024 19:59:15.724312067 CET	138	138	192.168.2.16	192.168.2.255
Feb 22, 2024 19:59:33.508033037 CET	53	58801	1.1.1.1	192.168.2.16
Feb 22, 2024 19:59:35.791548967 CET	54901	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:59:35.791630030 CET	50532	53	192.168.2.16	1.1.1.1
Feb 22, 2024 19:59:35.879976988 CET	53	54901	1.1.1.1	192.168.2.16
Feb 22, 2024 19:59:35.898420095 CET	53	50532	1.1.1.1	192.168.2.16

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:06 UTC	707	OUT	GET /cdewe4rewbvcfr4erwi/index.html HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:06 UTC	911	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:06 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Thu, 22 Feb 2024 18:26:07 GMT x-rgw-object-type: Normal x-amz-request-id: tx000006333fe28c817df34-0065d792ea-471b1f79-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1620 Accept-Ranges: bytes Set-Cookie: __cf_bm=Ue_bnpmbDuqeMBh_vCuxCN7iWGr.YJ.2tLF3vYAmD7M-1708628286-1.0-AW7wSqzg4U0AA4r2DDb9ttLI6H8MMMddQpgMpnTznu4fe566w5KOad8oY2VawZ4fxpYqZGNTEv8w2ToBF+GcyYc=; path=/; expires=Thu, 22-Feb-24 19:28:06 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 859975664d5f43c1-EWR
2024-02-22 18:58:06 UTC	458	IN	Data Raw: 35 65 37 39 0d 0a 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 2c 6e 6f 66 6f 6c 6c 6f 77 22 20 6e 61 6d 65 3d 22 72 6f 62 6f 74 73 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 43 6f 6d 70 75 74 65 72 20 45 72 58 58 72 30 58 30 72 20 43 6f 58 64 65 20 23 42 30 37 41 41 6a 4d 69 31 30 30 64 64 38 37 3c 2f Data Ascii: 5e79<html lang="en"> <head> <meta charset="utf-8"> <meta content="width=device-width,initial-scale=1,shrink-to-fit=no" name="viewport"> <meta content="noindex,nofollow" name="robots"> <title>Computer ErXXr0X0r CoXde #B07AAjMi100dd87</
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 22 3e 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 3e 2f 2f 3c 21 5b 43 44 41 54 41 5b 0a 20 20 20 20 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 0a 20 20 20 20 24 28 27 62 6f 64 79 27 29 2e 62 69 6e 64 28 27 63 6f 6e 74 65 78 74 6d 65 6e 75 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 0a 20 20 20 20 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 20 20 20 20 7d 29 3b 0a 20 20 20 20 7d 29 3b 2f 2f 5d 5d 3e 0a 20 20 20 20 3c 2f 73 63 72 69 70 74 3e 0a 0a 20 0a 20 20 20 20 3c 73 63 72 69 70 74 3e 0a 20 20 20 20 20 20 76 61 72 20 74 20 3d 20 6e 65 77 20 58 4d 4c 48 74 74 70 52 65 71 75 65 73 74 3b 0a 20 20 20 20 20 20 74 2e 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 20 3d Data Ascii: "></script> <script type="text/javascript">//<![CDATA[ $(function(){ $('body').bind('contextmenu', function(e){ return false; }); });//... </script> <script> var t = new XMLHttpRequest; t.onreadystatechange =
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 20 72 65 6c 3d 22 6e 6f 72 65 66 65 72 72 65 72 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 6c 61 63 6b 22 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 20 31 34 35 25 3b 20 63 75 72 73 6f 72 3a 20 6e 6f 6e 65 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 5f 62 6f 78 22 20 73 74 79 6c 65 3d 22 63 75 72 73 6f 72 3a 20 6e 6f 6e 65 3b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 5f 62 6f 78 5f 68 65 61 64 65 72 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 6f 77 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 Data Ascii: rel="noreferrer"> <div class="black" style="height: 145%; cursor: none; display: block;"></div> </a> <div class="pro_box" style="cursor: none; display: block;"> <div class="pro_box_header"> <div class="row"> <div cla
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 39 64 31 64 56 30 33 7a 2f 4f 36 72 72 71 75 6d 36 62 70 4f 49 36 69 4b 4a 78 6c 2f 44 4e 4e 55 35 5a 6c 79 37 4a 49 6a 7a 41 4d 49 34 6f 69 79 37 4b 51 79 36 67 48 55 5a 71 6d 2b 46 46 56 4e 51 78 44 45 45 44 4b 73 6a 7a 50 6b 34 69 53 4a 41 46 43 65 41 36 56 65 49 45 34 6a 6d 33 62 62 74 73 57 4a 33 49 67 39 33 32 44 68 59 62 42 6b 33 6a 75 4f 49 36 6d 61 63 5a 78 33 4c 59 74 43 41 49 4f 67 6f 57 47 77 62 67 77 6c 4f 63 35 54 39 42 42 33 2f 63 43 68 34 62 51 6e 66 51 62 72 75 75 69 32 61 71 71 42 41 49 4e 59 51 52 50 45 59 78 37 6e 6c 63 55 42 54 77 49 45 42 72 43 31 61 65 4f 4d 56 62 58 39 54 41 4d 54 78 41 61 67 68 58 4d 53 66 6f 66 59 4b 45 68 54 42 7a 44 46 4b 69 6d 61 62 37 76 34 78 51 32 77 45 49 6a 38 37 32 39 32 73 65 62 2f 58 34 45 47 41 44 69 Data Ascii: 9d1dV03z/O6rrqum6bpOI6iKJxl/DNNU5Zly7JIjzAMI4oiy7KQy6gHUZqm+FFVNQxDEEDKsjzPk4iSJAFCeA6VeIE4jm3bbtsWJ3Ig932DhYbBk3juOI6macZx3LYtCAIOgoWGwbgwlOc5T9BB3/cCh4bQnfQbruui2aqqBAINYQRPEYx7nlcUBTwIEBrC1aeOMVbX9TAMTxAaghXMSfofYKEhTBzDFKimab7v4xQ2wEIj87292seb/X4EGADi
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 5f 71 75 69 63 6b 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 61 62 6c 65 20 63 6c 61 73 73 3d 22 74 61 62 6c 65 20 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 72 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 68 20 73 63 6f 70 65 3d 22 63 6f 6c 22 3e 53 63 61 6e 6e 65 64 20 4f 62 6a 65 63 74 73 3c 2f 74 68 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 74 68 20 73 63 6f 70 65 3d 22 63 6f 6c 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 5f 66 6f 75 72 74 68 Data Ascii: <div class="table_quick"> <table class="table table-bordered"> <thead> <tr> <th scope="col">Scanned Objects</th> <th scope="col"> <div class="col_fourth
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 74 6f 6e 20 63 6c 61 73 73 3d 22 62 74 6e 20 62 74 6e 2d 73 65 63 6f 6e 64 61 72 79 22 20 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 3e 50 61 75 73 65 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 36 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 74 5f 63 61 6e 32 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 62 74 6e 2d 67 72 6f 75 70 22 20 72 6f 6c 65 3d 22 67 72 6f 75 70 22 20 61 72 69 61 2d 6c 61 62 65 6c Data Ascii: ton class="btn btn-secondary" type="button">Pause</button> </div> </div> </div> <div class="col-md-6"> <div class="bt_can2"> <div class="btn-group" role="group" aria-label
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 22 23 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 3e 41 63 74 69 76 61 74 65 20 74 68 65 20 6c 69 63 65 6e 73 65 3c 2f 62 75 74 74 6f 6e 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 62 65 6c 2e 70 6e 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 61 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: "#"> <button>Activate the license</button> </a> </li> <li> <a href="#"> <img src="bel.png"> </a> </li>
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 36 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 69 6e 69 6d 69 7a 65 31 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 75 6c 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 20 68 72 65 66 3d 22 23 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 6d 6e 63 2e 70 6e 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c Data Ascii: > </div> </div> <div class="col-md-6"> <div class="minimize1"> <ul> <li> <a href="#"> <img src="mnc.png"> <
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 63 68 65 63 6b 22 3e 3c 2f 69 3e 20 53 63 61 6e 20 6d 65 6d 6f 72 79 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 69 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 20 63 6c 61 73 73 3d 22 66 61 20 66 61 2d 63 68 65 63 6b 22 3e 3c 2f 69 3e 20 41 6e 61 6c 79 7a 65 20 73 74 61 72 74 75 Data Ascii: </li> <li> <i aria-hidden="true" class="fa fa-check"></i> Scan memory </li> <li> <i aria-hidden="true" class="fa fa-check"></i> Analyze startu
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 76 73 63 2e 70 6e 67 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 63 6f 6c 2d 6d 64 2d 31 30 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 6b 65 5f 74 68 69 73 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 54 68 69 73 20 73 68 6f 75 6c 64 20 62 65 20 74 68 65 20 6c 61 73 74 20 74 68 69 6e 67 20 79 6f 75 20 77 6f 72 72 79 20 61 62 6f 75 74 20 6f 6e 6c 69 6e 65 20 74 68 72 65 61 74 73 2e 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 50 72 65 6d 69 75 6d 20 62 6c 6f 63 6b 73 20 6d 61 6c 77 61 72 65 2c 20 76 69 72 Data Ascii: vsc.png"> </div> </div> <div class="col-md-10"> <div class="make_this"> <p>This should be the last thing you worry about online threats.</p> <p>Premium blocks malware, vir

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:06 UTC	752	OUT	GET /service/update2/crx?os=win&arch=x64&os_arch=x86_64&nacl_arch=x86-64&prod=chromecrx&prodchannel=&prodversion=117.0.5938.132&lang=en-US&acceptformat=crx3,puff&x=id%3Dnmmhkkegccagdldgiimedpiccmgmieda%26v%3D0.0.0.0%26installedby%3Dother%26uc%26brand%3DONGR%26ping%3Dr%253D-1%2526e%253D1 HTTP/1.1 Host: clients2.google.com Connection: keep-alive X-Goog-Update-Interactivity: fg X-Goog-Update-AppId: nmmhkkegccagdldgiimedpiccmgmieda X-Goog-Update-Updater: chromecrx-117.0.5938.132 Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:06 UTC	732	IN	HTTP/1.1 200 OK Content-Security-Policy: script-src 'report-sample' 'nonce-TlWgHukZBKxpqoMmI-2vaA' 'unsafe-inline' 'strict-dynamic' https: http:;object-src 'none';base-uri 'self';report-uri https://csp.withgoogle.com/csp/clientupdate-aus/1 Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Feb 2024 18:58:06 GMT Content-Type: text/xml; charset=UTF-8 X-Daynum: 6261 X-Daystart: 39486 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-22 18:58:06 UTC	520	IN	Data Raw: 32 63 39 0d 0a 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 3c 67 75 70 64 61 74 65 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 75 70 64 61 74 65 32 2f 72 65 73 70 6f 6e 73 65 22 20 70 72 6f 74 6f 63 6f 6c 3d 22 32 2e 30 22 20 73 65 72 76 65 72 3d 22 70 72 6f 64 22 3e 3c 64 61 79 73 74 61 72 74 20 65 6c 61 70 73 65 64 5f 64 61 79 73 3d 22 36 32 36 31 22 20 65 6c 61 70 73 65 64 5f 73 65 63 6f 6e 64 73 3d 22 33 39 34 38 36 22 2f 3e 3c 61 70 70 20 61 70 70 69 64 3d 22 6e 6d 6d 68 6b 6b 65 67 63 63 61 67 64 6c 64 67 69 69 6d 65 64 70 69 63 63 6d 67 6d 69 65 64 61 22 20 63 6f 68 6f 72 74 3d 22 31 3a 3a 22 20 63 6f 68 6f 72 74 6e 61 6d 65 3d 22 22 Data Ascii: 2c9<?xml version="1.0" encoding="UTF-8"?><gupdate xmlns="http://www.google.com/update2/response" protocol="2.0" server="prod"><daystart elapsed_days="6261" elapsed_seconds="39486"/><app appid="nmmhkkegccagdldgiimedpiccmgmieda" cohort="1::" cohortname=""
2024-02-22 18:58:06 UTC	200	IN	Data Raw: 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 68 61 73 68 5f 73 68 61 32 35 36 3d 22 38 31 65 33 61 34 64 34 33 61 37 33 36 39 39 65 31 62 37 37 38 31 37 32 33 66 35 36 62 38 37 31 37 31 37 35 63 35 33 36 36 38 35 63 35 34 35 30 31 32 32 62 33 30 37 38 39 34 36 34 61 64 38 32 22 20 70 72 6f 74 65 63 74 65 64 3d 22 30 22 20 73 69 7a 65 3d 22 32 34 38 35 33 31 22 20 73 74 61 74 75 73 3d 22 6f 6b 22 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 2e 30 2e 36 22 2f 3e 3c 2f 61 70 70 3e 3c 2f 67 75 70 64 61 74 65 3e 0d 0a Data Ascii: 723f56b8717175c536685c5450122b30789464ad82" hash_sha256="81e3a4d43a73699e1b7781723f56b8717175c536685c5450122b30789464ad82" protected="0" size="248531" status="ok" version="1.0.0.6"/></app></gupdate>
2024-02-22 18:58:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:06 UTC	680	OUT	POST /ListAccounts?gpsia=1&source=ChromiumBrowser&json=standard HTTP/1.1 Host: accounts.google.com Connection: keep-alive Content-Length: 1 Origin: https://www.google.com Content-Type: application/x-www-form-urlencoded Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: NID=511=LtGInZ4I4WDrCvCHQBVMHOy4a-sqzpSrMO-Rwr8ezStTz_kfoi2bri7uGdXfNvskAEO_Tj5Jkwl0XSN-qA6MYiGShcDB_vNQOl1bpl3aua7gMrDRvWsHLpAuFBlBnNxTMeen95XElzx3r4myG8p8sgSHdx4NBawYGaI5oFn_dZ8
2024-02-22 18:58:06 UTC	1	OUT	Data Raw: 20 Data Ascii:
2024-02-22 18:58:06 UTC	1799	IN	HTTP/1.1 200 OK Content-Type: application/json; charset=utf-8 Access-Control-Allow-Origin: https://www.google.com Access-Control-Allow-Credentials: true X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Thu, 22 Feb 2024 18:58:06 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains Cross-Origin-Opener-Policy: same-origin Content-Security-Policy: require-trusted-types-for 'script';report-uri /_/IdentityListAccountsHttp/cspreport Content-Security-Policy: script-src 'report-sample' 'nonce-WnCfcg-V5sXWzfR4j76ktw' 'unsafe-inline';object-src 'none';base-uri 'self';report-uri /_/IdentityListAccountsHttp/cspreport;worker-src 'self' Content-Security-Policy: script-src 'unsafe-inline' 'self' https://apis.google.com https://ssl.gstatic.com https://www.google.com https://www.googletagmanager.com https://www.gstatic.com https://www.google-analytics.com;report-uri /_/IdentityListAccountsHttp/cspreport/allowlist Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factor=, ch-ua-platform=, ch-ua-platform-version=* Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factor, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version reporting-endpoints: default="/_/IdentityListAccountsHttp/web-reports?context=eJzjMtDikmII1pBiOHxtB5Meyy0mIyCe2_2UaSEQH4x7znQUiHf4eLA4pc9gDQBiIR6OfZvurWMTODHx5k4mALnzF9Y" Server: ESF X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2024-02-22 18:58:06 UTC	23	IN	Data Raw: 31 31 0d 0a 5b 22 67 61 69 61 2e 6c 2e 61 2e 72 22 2c 5b 5d 5d 0d 0a Data Ascii: 11["gaia.l.a.r",[]]
2024-02-22 18:58:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:06 UTC	625	OUT	GET /cdewe4rewbvcfr4erwi/tapa.css HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:06 UTC	947	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:06 GMT Content-Type: text/css; charset=utf-8 Content-Length: 18095 Connection: close last-modified: Thu, 22 Feb 2024 18:26:07 GMT x-rgw-object-type: Normal etag: "f0ad964310c0b485afc1f4e76515ffff" x-amz-request-id: tx00000e24386d37586ac36-0065d79291-471ae006-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1709 Accept-Ranges: bytes Set-Cookie: __cf_bm=VjJdcUPBvhgGjbly1kub0pi_JZfhBv_HekfjL_95xTM-1708628286-1.0-AYsshJvrtndxmwRedQlEzxAg9ADCZsE9HK01kCnntUoN7IkzkPA4W0yjAn1I5pTZ1osPso9pbioWnzz4c+ujtv0=; path=/; expires=Thu, 22-Feb-24 19:28:06 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 859975690c267d05-EWR
2024-02-22 18:58:06 UTC	422	IN	Data Raw: 2e 74 61 62 6c 65 2c 6c 61 62 65 6c 20 7b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 3a 66 6f 63 75 73 2c 2e 62 74 6e 3a 68 6f 76 65 72 2c 62 6f 64 79 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 0d 0a 7d 0d 0a 0d 0a 23 74 65 78 74 77 65 62 2c 2e 72 6f 77 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 63 6c 65 61 72 3a 20 62 6f 74 68 0d 0a 7d 0d 0a 0d 0a 23 62 6f 74 74 6f 6d 20 75 6c 2c 2e 6d 61 72 5f 74 6f 70 20 75 6c 2c 2e 74 6f 74 61 6c 5f 64 65 74 61 69 6c 20 75 6c 2c 2e 74 6f 74 61 6c 5f 64 65 74 61 69 6c 5f 73 63 61 6e 20 75 6c 20 7b 0d 0a 20 20 20 20 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 20 6e 6f 6e 65 0d 0a 7d 0d 0a 0d 0a 23 66 6f 6f 74 65 72 2c 23 77 65 62 62 78 2c 2e 62 74 6e Data Ascii: .table,label { max-width: 100%}.btn:focus,.btn:hover,body { color: #333}#textweb,.row:after { clear: both}#bottom ul,.mar_top ul,.total_detail ul,.total_detail_scan ul { list-style-type: none}#footer,#webbx,.btn
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 30 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 40 2d 6f 2d 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 73 74 72 69 70 65 73 20 7b 0d 0a 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 34 30 70 78 20 30 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 74 6f 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 20 30 20 30 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 73 74 72 69 70 65 73 20 7b 0d 0a 20 20 20 20 30 25 20 7b 0d 0a 20 20 20 20 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f Data Ascii: background-position: 0 0 }}@-o-keyframes progress-bar-stripes { 0% { background-position: 40px 0 } to { background-position: 0 0 }}@keyframes progress-bar-stripes { 0% { background-po
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 61 73 65 6c 69 6e 65 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 2c 2e 62 74 6e 2d 67 72 6f 75 70 2c 69 6d 67 20 7b 0d 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 6d 69 64 64 6c 65 0d 0a 7d 0d 0a 0d 0a 61 75 64 69 6f 3a 6e 6f 74 28 5b 63 6f 6e 74 72 6f 6c 73 5d 29 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 30 0d 0a 7d 0d 0a 0d 0a 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 66 6f 63 75 73 2c 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 30 0d 0a 7d 0d 0a 0d 0a 73 74 72 6f 6e 67 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 0d 0a 7d 0d 0a 0d 0a 73 6d 61 6c 6c Data Ascii: tical-align: baseline}.btn,.btn-group,img { vertical-align: middle}audio:not([controls]) { display: none; height: 0}.dropdown-toggle:focus,a:active,a:hover { outline: 0}strong { font-weight: 700}small
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 28 68 72 65 66 29 20 22 29 22 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 61 5b 68 72 65 66 5e 3d 22 23 22 5d 3a 61 66 74 65 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 74 65 6e 74 3a 20 22 22 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 74 68 65 61 64 20 7b 0d 0a 20 20 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 2d 68 65 61 64 65 72 2d 67 72 6f 75 70 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 6d 67 2c 74 72 20 7b 0d 0a 20 20 20 20 20 20 20 20 70 61 67 65 2d 62 72 65 61 6b 2d 69 6e 73 69 64 65 3a 20 61 76 6f 69 64 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 69 6d 67 20 7b 0d 0a 20 20 20 20 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 68 32 2c Data Ascii: (href) ")" } a[href^="#"]:after { content: "" } thead { display: table-header-group } img,tr { page-break-inside: avoid } img { max-width: 100%!important } h2,
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 73 2c 61 3a 68 6f 76 65 72 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 32 33 35 32 37 63 3b 0d 0a 20 20 20 20 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 20 75 6e 64 65 72 6c 69 6e 65 0d 0a 7d 0d 0a 0d 0a 2e 62 74 6e 3a 61 63 74 69 76 65 3a 66 6f 63 75 73 2c 2e 62 74 6e 3a 66 6f 63 75 73 2c 61 3a 66 6f 63 75 73 2c 69 6e 70 75 74 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 3a 66 6f 63 75 73 20 7b 0d 0a 20 20 20 20 6f 75 74 6c 69 6e 65 3a 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 20 61 75 74 6f 20 35 70 78 3b 0d 0a 20 20 20 20 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 20 2d 32 70 78 0d 0a 7d 0d 0a 0d 0a 68 32 2c 68 34 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 35 30 30 3b 0d 0a 20 20 20 20 6c Data Ascii: s,a:hover { color: #23527c; text-decoration: underline}.btn:active:focus,.btn:focus,a:focus,input[type=checkbox]:focus { outline: -webkit-focus-ring-color auto 5px; outline-offset: -2px}h2,h4 { font-weight: 500; l
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 35 37 31 34 33 3b 0d 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 74 6f 70 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 6c 65 3e 74 68 65 61 64 3e 74 72 3e 74 68 20 7b 0d 0a 20 20 20 20 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 20 62 6f 74 74 6f 6d 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 64 64 64 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 6c 65 3e 74 68 65 61 64 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 74 72 3a 66 69 72 73 74 2d 63 68 69 6c 64 3e 74 68 20 7b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 74 6f 70 3a 20 30 0d 0a 7d 0d 0a 0d 0a 2e 74 61 62 6c 65 2d 62 6f 72 64 65 72 65 64 2c 2e 74 61 62 6c 65 2d Data Ascii: 57143; vertical-align: top; border-top: 1px solid #ddd}.table>thead>tr>th { vertical-align: bottom; border-bottom: 2px solid #ddd}.table>thead:first-child>tr:first-child>th { border-top: 0}.table-bordered,.table-
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 23 66 66 66 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 70 61 64 64 69 6e 67 2d 62 6f 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 20 70 61 64 64 69 6e 67 2d 62 6f 78 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 35 29 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 34 70 78 3b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 36 70 78 20 31 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 37 35 29 3b 0d 0a 20 20 20 20 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 36 70 78 20 31 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 37 35 29 0d 0a 7d 0d 0a 0d 0a 2e Data Ascii: #fff; -webkit-background-clip: padding-box; background-clip: padding-box; border: 1px solid rgba(0,0,0,.15); border-radius: 4px; -webkit-box-shadow: 0 6px 12px rgba(0,0,0,.175); box-shadow: 0 6px 12px rgba(0,0,0,.175)}.
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 72 6f 67 72 65 73 73 2d 62 61 72 2d 73 74 72 69 70 65 73 3b 0d 0a 20 20 20 20 2d 6f 2d 61 6e 69 6d 61 74 69 6f 6e 3a 20 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 20 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 73 74 72 69 70 65 73 3b 0d 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 3a 20 32 73 20 6c 69 6e 65 61 72 20 69 6e 66 69 6e 69 74 65 20 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 73 74 72 69 70 65 73 0d 0a 7d 0d 0a 0d 0a 2e 70 72 6f 67 72 65 73 73 2d 62 61 72 2d 73 75 63 63 65 73 73 20 7b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 35 63 62 38 35 63 0d 0a 7d 0d 0a 0d 0a 2e 72 6f 77 3a 61 66 74 65 72 2c 2e 72 6f 77 3a 62 65 66 6f 72 65 20 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 74 61 62 6c 65 3b 0d 0a 20 20 20 20 Data Ascii: rogress-bar-stripes; -o-animation: 2s linear infinite progress-bar-stripes; animation: 2s linear infinite progress-bar-stripes}.progress-bar-success { background-color: #5cb85c}.row:after,.row:before { display: table;
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a 20 39 39 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0d 0a 20 20 20 20 6c 65 66 74 3a 20 32 36 25 3b 0d 0a 20 20 20 20 74 6f 70 3a 20 31 32 25 3b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 0d 0a 7d 0d 0a 0d 0a 2e 63 69 72 63 75 6c 61 72 2d 73 70 69 6e 6e 65 72 2c 2e 6d 61 72 5f 74 6f 70 2c 2e 74 69 74 6c 65 33 20 7b 0d 0a 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 72 65 6c 61 74 69 76 65 0d 0a 7d 0d 0a 0d 0a 2e 70 72 6f 5f 62 6f 78 32 2c 2e 70 72 6f 5f 62 6f 78 33 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 38 35 30 70 78 3b 0d 0a 20 20 20 20 68 65 69 67 68 74 3a 20 37 32 30 70 78 3b 0d 0a 20 20 20 20 7a 2d 69 6e 64 65 78 3a Data Ascii: absolute; z-index: 99; background-color: #fff; left: 26%; top: 12%; display: none}.circular-spinner,.mar_top,.title3 { position: relative}.pro_box2,.pro_box3 { width: 850px; height: 720px; z-index:
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 65 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 0d 0a 7d 0d 0a 0d 0a 2e 71 75 69 63 6b 5f 73 63 61 6e 20 69 6d 67 20 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 32 35 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 36 70 78 0d 0a 7d 0d 0a 0d 0a 2e 70 72 6f 67 72 65 73 73 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 31 35 70 78 3b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 36 36 35 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 39 70 78 0d 0a 7d 0d 0a 0d 0a 2e 62 74 5f 63 61 6e 2c 2e 62 74 5f 63 61 6e 32 20 7b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 39 33 70 78 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 72 6f 67 72 65 73 73 2c 2e 70 72 6f 67 72 65 73 73 2d 62 61 Data Ascii: e: 18px; font-weight: 700}.quick_scan img { width: 25px; margin-right: 6px}.progress { margin-top: 15px; width: 665px; margin-left: 19px}.bt_can,.bt_can2 { margin-top: 93px;}.progress,.progress-ba

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:06 UTC	669	OUT	GET /cdewe4rewbvcfr4erwi/bg.png HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:06 UTC	934	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:06 GMT Content-Type: image/png Content-Length: 462770 Connection: close last-modified: Thu, 22 Feb 2024 18:26:07 GMT x-rgw-object-type: Normal etag: "ab996ed3b126f2b5f0c1f214b96afe7a" x-amz-request-id: tx00000473530abcd4923b5-0065d793b2-471ae006-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1420 Accept-Ranges: bytes Set-Cookie: __cf_bm=TTeuJpFh15xrhxfxWS1mIlEBcGOUiBJHWa6k.M.esws-1708628286-1.0-AbZavSr7I3A4b/ll/SACcdlMFK3/ZVIylScRFCwpffIfnZGMaTJPXZNPzN38qmKXVLdJYlpYISCTxAD19zvZ3g8=; path=/; expires=Thu, 22-Feb-24 19:28:06 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8599756918994233-EWR
2024-02-22 18:58:06 UTC	435	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 07 80 00 00 10 f4 08 03 00 00 00 2a b6 57 63 00 00 03 00 50 4c 54 45 ff ff ff f2 f2 f2 cc cc cc 24 8c 95 33 98 9f 2b 77 c9 48 5b bf 1c 1d 1e 34 6e c8 6c 53 c0 41 62 c2 c2 e9 fe 4a 73 cf 26 85 a8 54 51 bb ba db fa ed ea e6 59 4b b9 5f 5f c6 fc de e3 f1 ef ec 36 89 c7 1d 1d 29 b0 d6 f9 27 7f b9 59 63 c7 e8 e5 e2 34 8f b6 c7 e2 fa 01 68 b3 d0 d7 d8 ed de d5 61 60 60 fb e2 e9 8d 53 db 27 28 32 06 05 06 fb d7 dc 41 7b d2 db e0 e5 d5 db de f2 e4 db e1 e0 dd e7 d4 f1 ed d8 f0 0a 81 d2 ca d1 d4 ba ba bf f5 ee e3 bd b6 f6 df d0 f2 cf c8 c4 ce bb e9 dc c8 b1 bf c2 f8 a5 ae fb bd c2 c9 96 af fe f4 dd ef d5 c3 eb e8 db cb d2 d0 ce ab ab ef 79 50 db 88 bf fe 8c cb f8 ed c8 db c6 bc f4 fb d2 d3 cb c0 bd 2d 25 1e db Data Ascii: PNGIHDR*WcPLTE$3+wH[4nlSAbJs&TQYK__6)'Yc4ha``S'(2A{yP-%
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: bd e6 e8 bc b0 ba b4 ed a2 d7 f3 cd fb ff ff af a1 1a 1f 8d f7 c2 e5 f6 b2 d2 6e 5f 52 b8 dd ec 56 86 b5 a9 65 22 8c 1f 1e fd 9b 96 25 16 0f 7a 6b 5e fd fb d2 51 6d a9 9f 8b ad ff c0 cf fe c7 e0 b1 a8 ab c3 a7 89 ff b8 bd 1b a1 e5 ca d6 eb ff b8 b5 cd a7 56 6e 6f 77 77 4e 35 fb 8b 74 be de bf ab 79 64 d7 ba df 2f 34 3e c9 8e 20 49 4c 4d 6d 3e 26 04 6c c4 cf b2 f2 80 68 a9 ba a9 a2 63 95 c4 8f 8c 8e 66 b2 eb aa e7 ff 89 a3 be 3a 40 50 28 7f f3 5c 46 3b 18 52 96 8e 74 6e 11 7d 13 a0 8a 7c 14 18 50 b2 9a 8b 4f b1 e9 8d d1 a1 ac 6c 3f d0 87 54 9e b9 cc 3c c2 ed cd a5 af a0 96 91 8c 5b 41 84 4c c9 ab ca e2 c0 78 47 8a 4f 26 c1 9a 7c c0 8c 61 8b ba e3 c2 b0 98 96 68 58 5b 49 cf f5 7e 61 86 7f 81 11 50 ef 84 86 ea b8 8c 74 e9 b9 88 e0 96 59 28 2d 4f 23 47 7a 72 Data Ascii: n_RVe"%zk^QmVnowwN5tyd/4> ILMm>&lhcf:@P(\F;Rtn}\|POl?T<[ALxGO&\|ahX[I~aPtY(-O#Gzr
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 54 31 bd d9 02 76 5a 13 76 92 da ea c8 f6 45 c0 75 8a 24 08 6d c9 04 fc 88 22 a3 97 20 4a 47 f1 6e 3b f4 e9 e4 ae f8 02 56 35 dd b9 d2 d9 33 cb 35 50 38 6f e8 93 71 ea ee c2 b5 d7 94 3e c1 46 71 80 22 5f 2f 0f 85 80 1b 74 2c 2a e0 b5 b1 43 fd 95 7a 8d 1d ff 71 c4 bc 82 b5 2c 3e b3 57 5d 3c bd f1 46 5f e7 37 5e 84 f0 ea fa 33 e0 6a 76 af 41 c7 15 30 e1 a6 7f a4 30 15 c5 40 c0 a8 64 bf 0c 73 92 07 02 46 38 27 cd 70 93 a9 9c 6d 60 22 04 57 02 16 91 ed 98 e0 07 09 d2 04 02 6e 51 77 1b 84 9c e1 cb b5 e0 74 fe 93 9f 39 f8 f2 da 28 7f ac 36 9d 7f be b4 f0 f9 d6 b8 bb bc 27 a8 75 72 f6 e9 14 96 84 3b 9f 98 e5 e2 16 46 28 33 a8 bf 96 ba 7b c7 0e 47 d8 06 a3 7d 43 45 dc fa 4a a5 b7 36 fe bb f3 91 59 b4 d3 1a 8b 31 ac a7 fd 81 3c 16 b6 a7 16 bd 4f ef ea 28 bf f8 02 Data Ascii: T1vZvEu$m" JGn;V535P8oq>Fq"_/t,*Czq,>W]<F_7^3jvA00@dsF8'pm`"WnQwt9(6'ur;F(3{G}CEJ6Y1<O(
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 5b 10 2a aa f8 0d 80 b3 93 ac dc 30 80 03 a1 c7 54 89 c1 1b c5 bf b9 46 f2 7c d9 d3 21 a5 ba 96 58 5d b2 47 4a 75 6c 48 ae 01 30 eb 87 39 52 46 92 4a 5e f6 2a 83 94 c2 36 b9 96 bb e3 d9 00 b8 d1 97 95 a7 cf 1d 00 d7 36 c7 cf 02 f1 d8 90 cf 82 4d b4 93 6b 5f 03 c0 cb 93 53 68 1d 4b 57 2f 7c b7 26 8d 25 99 5a 86 99 e9 c2 b7 99 fc f0 4a ff c4 a5 97 6f 0c e7 b2 5b 6b ee f3 1f 37 d2 17 6e 8e cf 3d fb f4 eb d9 ad d4 53 ba de 7e 98 41 6b 04 eb 85 db d2 b2 46 d7 85 dc 1b a7 01 c0 a8 20 f9 6a 19 00 b7 ea 8e 50 b3 45 2d db e9 0e 8b 46 c1 04 ec 92 b5 42 53 34 f6 4f 82 ac 85 c6 9f e3 ea 6b 2b ce 00 30 9c f7 32 f6 fa cf 87 34 41 13 c0 cc a6 bf 2c 07 95 f9 f9 77 ae 20 a2 dc 3b 9f 2c cc cf a7 cd 25 7c 70 ad f5 51 22 d9 dc c3 e3 32 a4 9e 74 c3 be 9a 49 a7 4b c5 1e c0 c0 Data Ascii: [0TF\|!X]GJulH09RFJ^66Mk_ShKW/\|&%ZJo[k7n=S~AkF jPE-FBS4Ok+024A,w ;,%\|pQ"2tIK
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 66 24 a3 61 e1 d3 66 05 2e bd 49 98 76 26 e8 44 14 00 1b 13 74 45 3f 0e 90 51 38 0d 9b a0 99 88 90 1e 78 7b be 13 1a 71 0b 06 d4 81 89 47 60 c5 98 78 4d 9a 22 46 c2 10 e8 c3 b6 35 41 d3 28 d8 0a 60 13 9c a6 08 06 a7 a7 b6 00 ce a6 5b 57 32 e7 16 e6 3b f1 57 c2 62 c3 9c 07 1c 8d 09 1a 1f 7d 67 53 3f bc 42 61 ca cd 22 f8 79 d8 76 ad 01 0c ff fd 13 32 3d 59 4c c8 35 9c c9 84 2b 03 60 99 9b 88 2d 01 5c c8 ea e6 43 c0 ca 89 b6 4a 63 d7 98 42 ef 59 35 99 9f f7 00 d8 f7 34 80 1f 29 e8 f8 1a cc c2 69 e8 01 a3 9e f8 5d 6a 01 b0 d1 1d 6c b6 a6 32 6d 74 87 7d a3 20 5e 73 3b 70 ad 7c 21 33 1a ac 00 fc e3 17 23 eb bf 95 ab d5 99 f7 96 86 1d 7b 21 61 23 01 38 bc 0c 69 20 d4 eb ad 27 4f c5 32 a4 43 00 d8 29 f1 e7 03 83 00 1e 2c e3 a4 98 2a 95 ab 04 b0 80 9a 4e ca 5b b3 Data Ascii: f$af.Iv&DtE?Q8x{qG`xM"F5A(`[W2;Wb}gS?Ba"yv2=YL5+`-\CJcBY54)i]jl2mt} ^s;p\|!3#{!a#8i 'O2C),*N[
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: ee a9 49 58 2f 7c 59 bf f3 21 43 5d b8 7c b7 bc ad 4e 2e 8a 67 86 c5 cb f5 4e 80 5a 8d e5 e1 ca b7 8b da 90 7c fc e5 20 d2 f9 6f d4 b3 18 8e b1 95 18 c0 5d 2c 61 fe fe cf bf aa 36 b2 ba bf fb c0 d0 60 39 35 34 84 a3 6a 17 ff 20 ff c9 07 70 3b e1 2c 68 08 01 7c 12 34 66 2c 27 40 64 64 f6 44 f0 b7 3d e9 b8 08 7e cd b1 96 18 c0 dd 2b 47 c6 5f ff af 69 ce f2 38 84 b8 66 f2 f3 fe 26 e8 33 65 d7 e9 5a 89 01 1c 4b 2c dd 2a 07 92 ce ef 75 ec 25 06 70 f7 ca e8 d1 fd 3e 48 85 03 c2 87 92 54 dd 3d 08 c0 6e bd 6b df c2 11 03 38 96 58 ba 58 8e 29 e9 8e 69 b2 62 79 48 d2 6c 1e 78 b5 7b a7 40 ef 27 be bf f3 7f 7c f0 1b 03 38 96 58 ba 87 74 c7 34 59 b1 3c 24 71 eb a5 f6 17 4b f5 2e 36 40 9f 18 89 00 60 2c 7f 78 d5 33 66 96 d2 2b 4f 38 b1 c4 72 aa e4 98 92 ee 98 26 eb 5f Data Ascii: IX/\|Y!C]\|N.gNZ\| o],a6`954j p;,h\|4f,'@ddD=~+G_i8f&3eZK,*u%p>HT=nk8XX)ibyHlx{@'\|8Xt4Y<$qK.6@`,x3f+O8r&_
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: b7 74 c2 2a a6 e7 49 04 2f 0a 67 fc 73 15 03 5d 32 7c 2f 14 08 2e ba 41 5b 22 97 82 dd 85 b5 0a a6 0b 3e 01 ff 59 fc 1d 78 92 03 f6 9f ae dc ec 80 d7 d0 99 f1 ac be 0e eb ef fd 2b 09 d4 56 3e 78 4a 16 18 04 87 4a ef 61 30 dd 7c 2d fe 06 6d 9e e2 75 dd dc 41 ef 29 fd 2c ed 2f 3d 1e d4 f8 8d 23 82 bc 5b dd 10 7e 53 fd a8 e8 cb c8 86 19 03 3c 88 60 d7 ed 5b 74 72 be 34 ab 1f bf 8f 6e 30 ab 54 0b 3e 3f 34 ce 03 00 c6 fd 2a c0 70 e7 23 34 93 67 4f 6d 39 4a 16 b7 84 c4 54 74 85 15 e6 02 03 7c 91 03 16 5b c9 88 5f 1f b4 c6 f1 79 1c 4f d4 a9 ec 2e 13 e9 52 47 82 6f e1 80 b9 e8 60 ef 84 3e 1b 5a 17 95 35 5b 08 b4 6d d2 31 d6 b7 0d f8 5f e0 1b 3f 06 7b 02 c1 e9 ef ce 80 97 da ff 02 cd 36 5f bb 39 28 0a 67 72 c2 d6 c9 8f c0 11 ad 46 32 c6 37 1a e3 0e fe 7e e5 80 ad Data Ascii: tI/gs]2\|/.A[">Yx+V>xJJa0\|-muA),/=#[~S<`[tr4n0T>?4p#4gOm9JTt\|[_yO.RGo`>Z5[m1_?{6_9(grF27~
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: a7 e9 f4 4d f0 05 b6 51 8d 40 35 69 a0 b6 7c 31 fd 31 4a 82 26 26 2c ab ba bf 42 79 71 db 54 c0 63 90 db fa f4 a1 33 d0 7e 0a 1a cc 32 35 12 7a 29 1b 06 a3 e1 2f 75 ea 7d 7a 5b 7f 1e 63 a7 49 f6 6a ee b6 47 26 b1 2b 60 35 28 18 be fc 4c 2f 2d 46 ef dc ed a5 97 ed 34 01 fc 33 7d 0c cb 80 2b 6f 24 ce b7 93 ce df 03 ce 7d b8 3c ff 65 4a 50 3c 62 b5 07 dc 5c 8f 0e e8 3e 07 e8 8d 6c 59 df ea a8 22 43 15 73 68 3a 12 35 64 76 2f a9 64 70 52 c0 84 65 82 c3 3c ae 82 95 b9 e4 a5 66 30 d5 81 bb c3 51 4d 98 70 4a c1 84 be f4 2a fe 22 7d 0b 25 5c 9d 7b be 31 7c 49 03 c0 95 06 06 c4 bc 91 cd 33 17 4f ea 0a 18 d4 ba 08 86 c6 7b 00 5b 6a 60 fa 20 d6 87 f5 a4 7f 9f c6 39 e8 e6 29 68 49 5f 1a 53 08 86 b9 74 e5 eb 15 68 40 4b e9 7a 98 6e e7 40 34 d7 81 c9 40 ef c9 e7 a0 fd Data Ascii: MQ@5i\|11J&&,ByqTc3~25z)/u}z[cIjG&+`5(L/-F43}+o$}<eJP<b\>lY"Csh:5dv/dpRe<f0QMpJ*"}%\{1\|I3O{[j` 9)hI_Sth@Kzn@4@
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: d9 cb cd 24 5c cc 6d 03 bf 93 10 06 b7 54 60 d8 11 ac cc 07 ce 6f 1f 8d 1e 61 17 7d 49 98 c2 6c 6a d6 23 a7 2a fc 28 f4 8d dd 8b db d6 1e f0 57 4b 5d 01 7f 6e d3 97 4c 53 02 b8 50 c0 6a 63 7b 50 9c 24 30 9d ac 7a b9 05 3c 3e 40 79 c2 1e 70 3e 80 05 84 37 c5 2f ac 55 97 5c a9 de 16 fa 57 de ee 06 13 67 2c d3 16 e9 1b 8e f2 44 f5 8b 02 0e 37 fe 4a f1 1b 84 38 8a 92 c4 f3 6c 5e 78 70 24 46 d7 9d 27 a1 a9 f4 64 eb 7f 89 d2 2e 23 8d ad de 65 65 69 59 bb be 4a 47 7b 11 a4 cd c4 ea 5a f7 d6 22 38 1f 83 a6 30 ec 7a 89 47 01 43 5e 72 b9 52 05 c3 62 79 75 36 d1 4b 0e 5f fd 45 22 30 31 c3 d7 95 2e 46 df 75 f1 fd 45 ac 8b da 1e 05 cc 1e b0 9e 2e 7a 59 83 66 c6 e3 12 58 53 03 ec 2a 9f 34 d8 0b 73 79 d4 20 27 a2 7f 0f 2a 60 20 dc 31 ee 1d 59 1e 83 34 0d 20 9b 15 30 c2 Data Ascii: $\mT`oa}Ilj#(WK]nLSPjc{P$0z<>@yp>7/U\Wg,D7J8l^xp$F'd.#eeiYJG{Z"80zGC^rRbyu6K_E"01.FuE.zYfXS4sy '*` 1Y4 0
2024-02-22 18:58:06 UTC	1369	IN	Data Raw: 26 e8 83 db 9f 81 2d f8 c5 ec 96 7b b0 f2 00 b0 3b 60 aa 79 e0 52 50 77 fe 9a 1c c1 eb db b0 40 6d da 5e ac 2d a1 60 ef ea f7 38 98 22 ed 93 d7 ec 6f 84 f5 73 c0 09 e3 38 0f fc fc f1 c6 b7 6f 7d d6 af 49 63 5c b0 aa 38 8a 34 a3 f1 cf 70 00 5c 10 ac 1c 17 02 3b 84 63 03 16 28 9e 75 c0 d0 b7 78 48 37 2f ac 22 5b 82 d8 b0 db 2d ef f5 45 8e 93 6b cf 01 cb ed 32 56 5b 77 c0 38 5f 72 4b e5 5b e0 49 09 ab 3e 4a 03 cc 23 86 bf bd 72 c0 89 e1 52 89 5e 46 0c 6a f0 72 f0 08 51 07 79 6d 08 76 81 6f e2 97 34 bb 09 8b 4a 1d ec be e1 ed 6f 1c 05 c6 02 9b ed 65 18 0e 58 f3 68 cd 0a 53 25 9f 99 87 b6 09 e7 dc 08 ad a0 39 ba cd 4e c2 f7 de 0b d4 b9 ca 12 f3 5d f7 00 c3 55 9d 05 de 6a 8f bc 17 9e 5a 81 56 00 c1 b7 12 be 39 a4 84 c8 3d 2b a9 3b 7b 87 ce 23 d5 4a ea 02 58 7a Data Ascii: &-{;`yRPw@m^-`8"os8o}Ic\84p\;c(uxH7/"[-Ek2V[w8_rK[I>J#rR^FjrQymvo4JoeXhS%9N]UjZV9=+;{#JXz

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:06 UTC	670	OUT	GET /cdewe4rewbvcfr4erwi/mnc.png HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:06 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:06 GMT Content-Type: image/png Content-Length: 187 Connection: close last-modified: Thu, 22 Feb 2024 18:26:07 GMT x-rgw-object-type: Normal etag: "271021cfa45940978184be0489841fd3" x-amz-request-id: tx00000c2059630f17b9305-0065d7936b-471b1f79-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1491 Accept-Ranges: bytes Set-Cookie: __cf_bm=zTKGUnBOPecJ1lQXrynoIrlYgCd4U1Yhlk8IyMWg7cE-1708628286-1.0-Ae8pKl5yHq471tlwQhqQD1cS7BgKAVtMMjmyItK6IaU1wXY+29Vo1gstjCLA6ApkJHKQvCqupz0z1EiiK/vu3ck=; path=/; expires=Thu, 22-Feb-24 19:28:06 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 859975691816c337-EWR
2024-02-22 18:58:06 UTC	187	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 8c 00 00 00 1e 01 03 00 00 00 c4 a0 64 35 00 00 00 06 50 4c 54 45 76 76 76 fe fe fe 2f ba f0 ce 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 5b 49 44 41 54 28 15 d5 d0 a1 0d 80 40 0c 85 e1 26 08 04 82 91 3b 0a a3 dc 06 8c 80 21 38 44 c9 09 0c a1 50 40 bc f0 26 68 c5 2f be dc 35 97 13 ff 8f 65 a4 b3 25 3a 9a 68 29 40 d6 45 27 05 aa 73 74 fd 2e 8a de d9 1f da 98 2a ae 7f 69 71 da 35 f2 a9 41 81 ac a7 77 a5 fc fb 0b da ad 0d 70 69 4b d6 47 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDRd5PLTEvvv/pHYs[IDAT(@&;!8DP@&h/5e%:h)@E'st.*iq5AwpiKGIENDB`

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:06 UTC	552	OUT	GET /jquery-1.4.4.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://shark-app-9uouf.ondigitalocean.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:06 UTC	560	IN	HTTP/1.1 200 OK Connection: close Content-Length: 78601 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-13309" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Thu, 22 Feb 2024 18:58:06 GMT Age: 2654610 X-Served-By: cache-lga21980-LGA, cache-ewr18162-EWR X-Cache: HIT, HIT X-Cache-Hits: 48, 1 X-Timer: S1708628287.926225,VS0,VE2 Vary: Accept-Encoding
2024-02-22 18:58:06 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 34 2e 34 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 2c 20 4a 6f 68 6e 20 52 65 73 69 67 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6f 72 20 47 50 4c 20 56 65 72 73 69 6f 6e 20 32 20 6c 69 63 65 6e 73 65 73 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 30 2c 20 54 68 65 20 44 Data Ascii: /! jQuery JavaScript Library v1.4.4 * http://jquery.com/ * * Copyright 2010, John Resig * Dual licensed under the MIT or GPL Version 2 licenses. * http://jquery.org/license * * Includes Sizzle.js * http://sizzlejs.com/ * Copyright 2010, The D
2024-02-22 18:58:06 UTC	1378	IN	Data Raw: 75 73 65 65 6e 74 65 72 22 7c 7c 0a 68 2e 70 72 65 54 79 70 65 3d 3d 3d 22 6d 6f 75 73 65 6c 65 61 76 65 22 29 7b 61 2e 74 79 70 65 3d 68 2e 70 72 65 54 79 70 65 3b 65 3d 63 28 61 2e 72 65 6c 61 74 65 64 54 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 68 2e 73 65 6c 65 63 74 6f 72 29 5b 30 5d 7d 69 66 28 21 65 7c 7c 65 21 3d 3d 6c 29 43 2e 70 75 73 68 28 7b 65 6c 65 6d 3a 6c 2c 68 61 6e 64 6c 65 4f 62 6a 3a 68 2c 6c 65 76 65 6c 3a 72 2e 6c 65 76 65 6c 7d 29 7d 7d 7d 6f 3d 30 3b 66 6f 72 28 78 3d 43 2e 6c 65 6e 67 74 68 3b 6f 3c 78 3b 6f 2b 2b 29 7b 66 3d 43 5b 6f 5d 3b 69 66 28 64 26 26 66 2e 6c 65 76 65 6c 3e 64 29 62 72 65 61 6b 3b 61 2e 63 75 72 72 65 6e 74 54 61 72 67 65 74 3d 66 2e 65 6c 65 6d 3b 61 2e 64 61 74 61 3d 66 2e 68 61 6e 64 6c 65 4f 62 6a Data Ascii: useenter"\|\|h.preType==="mouseleave"){a.type=h.preType;e=c(a.relatedTarget).closest(h.selector)[0]}if(!e\|\|e!==l)C.push({elem:l,handleObj:h,level:r.level})}}}o=0;for(x=C.length;o<x;o++){f=C[o];if(d&&f.level>d)break;a.currentTarget=f.elem;a.data=f.handleObj
2024-02-22 18:58:06 UTC	1378	IN	Data Raw: 68 74 3b 69 66 28 64 3d 3d 3d 22 62 6f 72 64 65 72 22 29 72 65 74 75 72 6e 20 65 3b 63 2e 65 61 63 68 28 62 3d 3d 3d 22 77 69 64 74 68 22 3f 50 61 3a 51 61 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 64 7c 7c 28 65 2d 3d 70 61 72 73 65 46 6c 6f 61 74 28 63 2e 63 73 73 28 61 2c 22 70 61 64 64 69 6e 67 22 2b 74 68 69 73 29 29 7c 7c 30 29 3b 69 66 28 64 3d 3d 3d 22 6d 61 72 67 69 6e 22 29 65 2b 3d 70 61 72 73 65 46 6c 6f 61 74 28 63 2e 63 73 73 28 61 2c 0a 22 6d 61 72 67 69 6e 22 2b 74 68 69 73 29 29 7c 7c 30 3b 65 6c 73 65 20 65 2d 3d 70 61 72 73 65 46 6c 6f 61 74 28 63 2e 63 73 73 28 61 2c 22 62 6f 72 64 65 72 22 2b 74 68 69 73 2b 22 57 69 64 74 68 22 29 29 7c 7c 30 7d 29 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 64 61 28 61 2c 62 2c 64 2c 65 29 7b Data Ascii: ht;if(d==="border")return e;c.each(b==="width"?Pa:Qa,function(){d\|\|(e-=parseFloat(c.css(a,"padding"+this))\|\|0);if(d==="margin")e+=parseFloat(c.css(a,"margin"+this))\|\|0;else e-=parseFloat(c.css(a,"border"+this+"Width"))\|\|0});return e}function da(a,b,d,e){
2024-02-22 18:58:06 UTC	1378	IN	Data Raw: 5c 77 2e 5d 2b 29 2f 2c 69 3d 2f 28 6d 73 69 65 29 20 28 5b 5c 77 2e 5d 2b 29 2f 2c 6e 3d 2f 28 6d 6f 7a 69 6c 6c 61 29 28 3f 3a 2e 2a 3f 20 72 76 3a 28 5b 5c 77 2e 5d 2b 29 29 3f 2f 2c 6d 3d 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2c 70 3d 66 61 6c 73 65 2c 71 3d 5b 5d 2c 75 2c 79 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 46 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 4d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 70 75 73 68 2c 4e 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2c 4f 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 2c 44 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 69 6e 64 65 78 Data Ascii: \w.]+)/,i=/(msie) ([\w.]+)/,n=/(mozilla)(?:.*? rv:([\w.]+))?/,m=navigator.userAgent,p=false,q=[],u,y=Object.prototype.toString,F=Object.prototype.hasOwnProperty,M=Array.prototype.push,N=Array.prototype.slice,O=String.prototype.trim,D=Array.prototype.index
2024-02-22 18:58:06 UTC	1378	IN	Data Raw: 68 69 73 2c 30 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 6a 29 7b 72 65 74 75 72 6e 20 6a 3d 3d 6e 75 6c 6c 3f 74 68 69 73 2e 74 6f 41 72 72 61 79 28 29 3a 6a 3c 30 3f 74 68 69 73 2e 73 6c 69 63 65 28 6a 29 5b 30 5d 3a 74 68 69 73 5b 6a 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 73 2c 76 29 7b 76 61 72 20 7a 3d 62 28 29 3b 62 2e 69 73 41 72 72 61 79 28 6a 29 3f 4d 2e 61 70 70 6c 79 28 7a 2c 6a 29 3a 62 2e 6d 65 72 67 65 28 7a 2c 6a 29 3b 7a 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 3b 7a 2e 63 6f 6e 74 65 78 74 3d 74 68 69 73 2e 63 6f 6e 74 65 78 74 3b 69 66 28 73 3d 3d 3d 22 66 69 6e 64 22 29 7a 2e 73 65 6c 65 63 74 6f 72 3d 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 2b 28 74 68 69 73 2e 73 65 6c 65 63 74 6f 72 3f 22 Data Ascii: his,0)},get:function(j){return j==null?this.toArray():j<0?this.slice(j)[0]:this[j]},pushStack:function(j,s,v){var z=b();b.isArray(j)?M.apply(z,j):b.merge(z,j);z.prevObject=this;z.context=this.context;if(s==="find")z.selector=this.selector+(this.selector?"
2024-02-22 18:58:06 UTC	1378	IN	Data Raw: 74 3a 66 75 6e 63 74 69 6f 6e 28 6a 29 7b 45 2e 24 3d 65 3b 69 66 28 6a 29 45 2e 6a 51 75 65 72 79 3d 64 3b 72 65 74 75 72 6e 20 62 7d 2c 69 73 52 65 61 64 79 3a 66 61 6c 73 65 2c 72 65 61 64 79 57 61 69 74 3a 31 2c 72 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 6a 29 7b 6a 3d 3d 3d 74 72 75 65 26 26 62 2e 72 65 61 64 79 57 61 69 74 2d 2d 3b 0a 69 66 28 21 62 2e 72 65 61 64 79 57 61 69 74 7c 7c 6a 21 3d 3d 74 72 75 65 26 26 21 62 2e 69 73 52 65 61 64 79 29 7b 69 66 28 21 74 2e 62 6f 64 79 29 72 65 74 75 72 6e 20 73 65 74 54 69 6d 65 6f 75 74 28 62 2e 72 65 61 64 79 2c 31 29 3b 62 2e 69 73 52 65 61 64 79 3d 74 72 75 65 3b 69 66 28 21 28 6a 21 3d 3d 74 72 75 65 26 26 2d 2d 62 2e 72 65 61 64 79 57 61 69 74 3e 30 29 29 69 66 28 71 29 7b 76 61 72 20 73 3d 30 2c Data Ascii: t:function(j){E.$=e;if(j)E.jQuery=d;return b},isReady:false,readyWait:1,ready:function(j){j===true&&b.readyWait--;if(!b.readyWait\|\|j!==true&&!b.isReady){if(!t.body)return setTimeout(b.ready,1);b.isReady=true;if(!(j!==true&&--b.readyWait>0))if(q){var s=0,
2024-02-22 18:58:06 UTC	1378	IN	Data Raw: 3b 7d 2c 70 61 72 73 65 4a 53 4f 4e 3a 66 75 6e 63 74 69 6f 6e 28 6a 29 7b 69 66 28 74 79 70 65 6f 66 20 6a 21 3d 3d 22 73 74 72 69 6e 67 22 7c 7c 21 6a 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 6a 3d 62 2e 74 72 69 6d 28 6a 29 3b 69 66 28 43 2e 74 65 73 74 28 6a 2e 72 65 70 6c 61 63 65 28 4a 2c 22 40 22 29 2e 72 65 70 6c 61 63 65 28 77 2c 22 5d 22 29 2e 72 65 70 6c 61 63 65 28 49 2c 22 22 29 29 29 72 65 74 75 72 6e 20 45 2e 4a 53 4f 4e 26 26 45 2e 4a 53 4f 4e 2e 70 61 72 73 65 3f 45 2e 4a 53 4f 4e 2e 70 61 72 73 65 28 6a 29 3a 28 6e 65 77 20 46 75 6e 63 74 69 6f 6e 28 22 72 65 74 75 72 6e 20 22 2b 6a 29 29 28 29 3b 65 6c 73 65 20 62 2e 65 72 72 6f 72 28 22 49 6e 76 61 6c 69 64 20 4a 53 4f 4e 3a 20 22 2b 6a 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ;},parseJSON:function(j){if(typeof j!=="string"\|\|!j)return null;j=b.trim(j);if(C.test(j.replace(J,"@").replace(w,"]").replace(I,"")))return E.JSON&&E.JSON.parse?E.JSON.parse(j):(new Function("return "+j))();else b.error("Invalid JSON: "+j)},noop:function(
2024-02-22 18:58:06 UTC	1378	IN	Data Raw: 2e 6c 65 6e 67 74 68 3d 3d 3d 22 6e 75 6d 62 65 72 22 29 66 6f 72 28 76 61 72 20 48 3d 73 2e 6c 65 6e 67 74 68 3b 7a 3c 48 3b 7a 2b 2b 29 6a 5b 76 2b 2b 5d 3d 73 5b 7a 5d 3b 65 6c 73 65 20 66 6f 72 28 3b 73 5b 7a 5d 21 3d 3d 42 3b 29 6a 5b 76 2b 2b 5d 3d 73 5b 7a 2b 2b 5d 3b 6a 2e 6c 65 6e 67 74 68 3d 76 3b 72 65 74 75 72 6e 20 6a 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 73 2c 76 29 7b 76 61 72 20 7a 3d 5b 5d 2c 48 3b 76 3d 21 21 76 3b 66 6f 72 28 76 61 72 20 47 3d 30 2c 4b 3d 6a 2e 6c 65 6e 67 74 68 3b 47 3c 4b 3b 47 2b 2b 29 7b 48 3d 21 21 73 28 6a 5b 47 5d 2c 47 29 3b 76 21 3d 3d 48 26 26 7a 2e 70 75 73 68 28 6a 5b 47 5d 29 7d 72 65 74 75 72 6e 20 7a 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6a 2c 73 2c 76 29 7b 66 6f 72 28 76 61 72 20 Data Ascii: .length==="number")for(var H=s.length;z<H;z++)j[v++]=s[z];else for(;s[z]!==B;)j[v++]=s[z++];j.length=v;return j},grep:function(j,s,v){var z=[],H;v=!!v;for(var G=0,K=j.length;G<K;G++){H=!!s(j[G],G);v!==H&&z.push(j[G])}return z},map:function(j,s,v){for(var
2024-02-22 18:58:06 UTC	1378	IN	Data Raw: 3d 2f 5e 5b 5c 73 5c 78 41 30 5d 2b 2f 3b 6f 3d 2f 5b 5c 73 5c 78 41 30 5d 2b 24 2f 7d 66 3d 62 28 74 29 3b 69 66 28 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 75 2c 0a 66 61 6c 73 65 29 3b 62 2e 72 65 61 64 79 28 29 7d 3b 65 6c 73 65 20 69 66 28 74 2e 61 74 74 61 63 68 45 76 65 6e 74 29 75 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 2e 72 65 61 64 79 53 74 61 74 65 3d 3d 3d 22 63 6f 6d 70 6c 65 74 65 22 29 7b 74 2e 64 65 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 72 65 61 64 79 73 74 61 74 65 63 68 61 6e 67 65 22 2c 75 29 3b 62 2e 72 65 61 64 79 28 29 7d 7d 3b 72 65 74 75 72 6e 20 Data Ascii: =/^[\s\xA0]+/;o=/[\s\xA0]+$/}f=b(t);if(t.addEventListener)u=function(){t.removeEventListener("DOMContentLoaded",u,false);b.ready()};else if(t.attachEvent)u=function(){if(t.readyState==="complete"){t.detachEvent("onreadystatechange",u);b.ready()}};return
2024-02-22 18:58:06 UTC	1378	IN	Data Raw: 54 65 78 74 4e 6f 64 65 28 22 77 69 6e 64 6f 77 2e 22 2b 65 2b 22 3d 31 3b 22 29 29 7d 63 61 74 63 68 28 6f 29 7b 7d 61 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 62 2c 61 2e 66 69 72 73 74 43 68 69 6c 64 29 3b 69 66 28 45 5b 65 5d 29 7b 63 2e 73 75 70 70 6f 72 74 2e 73 63 72 69 70 74 45 76 61 6c 3d 74 72 75 65 3b 64 65 6c 65 74 65 20 45 5b 65 5d 7d 74 72 79 7b 64 65 6c 65 74 65 20 62 2e 74 65 73 74 7d 63 61 74 63 68 28 78 29 7b 63 2e 73 75 70 70 6f 72 74 2e 64 65 6c 65 74 65 45 78 70 61 6e 64 6f 3d 66 61 6c 73 65 7d 61 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 29 3b 69 66 28 64 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 64 2e 66 69 72 65 45 76 65 6e 74 29 7b 64 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 20 Data Ascii: TextNode("window."+e+"=1;"))}catch(o){}a.insertBefore(b,a.firstChild);if(E[e]){c.support.scriptEval=true;delete E[e]}try{delete b.test}catch(x){c.support.deleteExpando=false}a.removeChild(b);if(d.attachEvent&&d.fireEvent){d.attachEvent("onclick",function

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:07 UTC	671	OUT	GET /cdewe4rewbvcfr4erwi/msmm.png HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:07 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:07 GMT Content-Type: image/png Content-Length: 168 Connection: close last-modified: Thu, 22 Feb 2024 18:26:07 GMT x-rgw-object-type: Normal etag: "acb05ebcd5f488fc99169cff02b6dd04" x-amz-request-id: tx00000f5f4b8d4d3563afe-0065d79513-471b1f79-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1068 Accept-Ranges: bytes Set-Cookie: __cf_bm=6nb5ZwU5Yq8kZzd6cmgxx_lZkAtMqAfXonyxYlQ0muU-1708628287-1.0-ARvEe/6E/3TyHymsZrw+owFYtis1CSbb7THJkKWNtaF+pYTCPR9WatxwjJGRVz3afuc2R1JZVBfAa94R83MQWTI=; path=/; expires=Thu, 22-Feb-24 19:28:07 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8599756bbe148c1b-EWR
2024-02-22 18:58:07 UTC	168	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1f 00 00 00 1e 04 03 00 00 00 26 dc d8 af 00 00 00 01 73 52 47 42 01 d9 c9 2c 7f 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 0f 50 4c 54 45 f4 50 21 00 00 00 83 bb 03 03 a6 f1 fc ba 03 5d 32 e9 94 00 00 00 05 74 52 4e 53 ff 00 ff ff ff 08 b1 e7 2f 00 00 00 21 49 44 41 54 78 9c 63 60 80 00 41 25 08 10 60 18 d6 02 82 a8 00 8b 80 31 04 08 ba 40 c0 f0 16 00 00 8a 22 40 4d a4 c1 93 b8 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: PNGIHDR&sRGB,pHYsPLTEP!]2tRNS/!IDATxc`A%`1@"@MIENDB`

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:07 UTC	669	OUT	GET /cdewe4rewbvcfr4erwi/dm.png HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:07 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:07 GMT Content-Type: image/png Content-Length: 332 Connection: close last-modified: Thu, 22 Feb 2024 18:26:07 GMT x-rgw-object-type: Normal etag: "9d8a90a63d20f05d27e5d6abb35e0cd0" x-amz-request-id: tx00000bc5ba5a45843dd72-0065d793b3-471ae006-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1420 Accept-Ranges: bytes Set-Cookie: __cf_bm=YbWkj3Zvaw0_4CMAmqg2uauPTzglytp.OVtXPAQ4c0c-1708628287-1.0-AeMEr0nCp+StJoT8qJSrlkVbp1GRpVjA4/Rf5//o6w5pnN+QsV8rybBmTDH6DfmWKHUFYNnq4LxdzbiYMsTPfSo=; path=/; expires=Thu, 22-Feb-24 19:28:07 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8599756c9f5b425b-EWR
2024-02-22 18:58:07 UTC	332	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 01 03 00 00 00 4a 2c 07 17 00 00 00 06 50 4c 54 45 00 00 00 00 00 00 a5 67 b9 cf 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 df 49 44 41 54 78 5e ed d4 31 6e c5 20 0c 06 60 23 06 8f b9 40 f5 72 8d 4e cd 55 de 49 1e 39 1a 47 c9 11 32 32 20 53 70 c0 04 41 5e 55 a5 63 bd a0 4f c8 30 80 7f f8 65 7d 68 5b a1 08 7d 15 12 86 aa 39 ca 8a 4c d4 2e 0a 51 ae 40 27 91 b4 25 49 a3 61 e5 46 15 58 fe 50 60 1d 9b 2a 14 a5 63 75 95 6f 44 ef 85 dd de 7d fd 4b e7 77 50 bc b2 1c fc 65 7d 2a 1b f1 8c a8 f7 b9 fa 27 7e 16 b4 32 a2 bd d3 22 da 1a d9 4e f3 1b 4d a2 35 0a 45 70 16 f5 d2 45 3e 49 35 82 22 d7 68 67 99 a1 36 d6 9c 65 1b ad ac 29 Data Ascii: PNGIHDRddJ,PLTEgtRNS@fpHYsIDATx^1n `#@rNUI9G22 SpA^UcO0e}h[}9L.Q@'%IaFXP`cuoD}KwPe}'~2"NM5EpE>I5"hg6e)

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:07 UTC	669	OUT	GET /cdewe4rewbvcfr4erwi/re.gif HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:07 UTC	933	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:07 GMT Content-Type: image/gif Content-Length: 14751 Connection: close last-modified: Thu, 22 Feb 2024 18:26:07 GMT x-rgw-object-type: Normal etag: "6fcb78e0cd7933a70eea2cf071f82118" x-amz-request-id: tx00000d4c4cabf34a60497-0065d7936c-471b1f79-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1491 Accept-Ranges: bytes Set-Cookie: __cf_bm=AxE23ba4GLf6oT3GuUOp7gtisN7njoLbvllapuB3VdM-1708628287-1.0-Ab1oZWCvYPJZbzWiQM/4Rokf1rLqOCNwh7XqaHQ2MuupL/Bju9c4fPY4wDWjT6uEJdLxF+/r/l7dZiF7UEol3N4=; path=/; expires=Thu, 22-Feb-24 19:28:07 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8599756cbe050f8f-EWR
2024-02-22 18:58:07 UTC	436	IN	Data Raw: 47 49 46 38 39 61 c1 00 47 00 f6 01 00 ff fd ff fd cc 01 fb df 64 fd e8 8f f9 d3 3b f8 e6 a0 fa f2 d1 d0 dc f0 98 b3 d8 7a a5 d7 7c a4 d4 f8 e5 a0 f6 f0 d3 a2 b9 db fa de 64 fb e7 94 7b a4 d5 f0 ec da a8 b6 d2 70 60 ef 82 72 f1 6d 5e ef 7b a4 d6 ea e9 e1 e4 da a8 fb df 63 71 61 f0 db e3 f5 ea e6 e0 d1 cb ba 83 75 ea dc e4 f5 f9 dd 64 73 63 f0 ea e7 e2 d5 d0 b6 84 76 ec 72 62 f3 7b a4 d4 fb df 61 e5 e1 e5 dc e3 f6 d1 cc b7 83 73 f3 fb df 60 dc e3 f5 e8 e5 df cb c5 c4 71 65 e7 7b a3 d4 e8 e5 e3 d1 cd b7 84 75 ef fb df 62 dd e3 f5 73 68 e2 7b a3 d3 e7 e4 e3 ca c4 c0 85 76 f0 7b a2 d3 70 69 de e6 e3 e0 c8 c3 c5 84 75 ec 71 69 df cc c6 bd 84 74 f3 70 68 df dc e2 f5 e3 df e7 cf c9 b8 83 72 f4 fc df 61 70 69 dc 7a a0 d2 a3 a3 e8 e1 e4 ec ec de a8 82 72 f2 6f 68 Data Ascii: GIF89aGd;z\|d{p`rm^{cqaudscvrb{as`qe{ubsh{v{piuqitphrapizroh
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: 74 70 73 3a 2f 2f 65 7a 67 69 66 2e 63 6f 6d 2f 6f 70 74 69 6d 69 7a 65 00 21 f9 04 04 0a 00 ff 00 2c 00 00 00 00 c1 00 47 00 00 04 ff 10 c8 49 ab bd 38 eb cd bb ff 60 28 8e 64 69 9e 68 aa ae 6c eb be 70 2c cf 74 6d df 78 ae ef 7c ef ff c0 a0 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f d0 a8 74 4a ad 5a af d8 ac 76 cb ed 7a bf e0 b0 78 4c 2e 9b cf e8 b4 7a cd 6e bb df af 03 e2 00 77 23 12 88 7a 5b 4e d7 b3 fb 7e 81 82 83 84 85 86 87 88 89 8a 8b 8c 8d 8e 8f 90 91 92 93 94 95 96 97 98 99 9a 9b 9c 9d 88 06 05 a1 a2 a3 a1 06 6d a0 a4 a9 a6 57 02 ad ae af af ab 69 06 b0 b5 ae 58 b6 b9 03 bb bc bd be bb b2 44 a8 bf c4 bd ba af b8 c5 ca cb be 47 cc cf cb b8 2f 03 ce c1 2a 02 d2 21 bb c7 ad ce dc dd da d9 1f 05 01 e5 e6 e7 e6 d8 46 02 e8 ed e5 05 e1 ac da ee ed 04 ce f4 Data Ascii: tps://ezgif.com/optimize!,GI8`(dihlp,tmx\|pH,rl:tJZvzxL.znw#z[N~mWiXDG/*!F
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: e7 99 c5 c6 51 57 f4 97 1f 75 bc 4d 17 10 2c 82 f4 18 c8 20 12 0e ce 11 21 84 0f ae 33 e1 11 fc e9 16 e0 6b 37 5c 88 a1 69 20 7a e8 1f 88 7a 81 e7 dd 89 28 a6 a8 e2 8a d5 85 00 00 21 f9 04 05 0a 00 01 00 2c 00 00 03 00 c1 00 44 00 00 05 ff 60 20 8e 64 69 9e 68 aa ae 6c eb be 30 7c 59 57 6c df 78 ae ef 7c 3f 5b b4 9e 70 48 2c 1a 75 3f 20 f0 c8 6c 3a 9f 38 a5 14 58 83 5a af 58 63 72 aa ac 66 bf e0 f0 6a cb 95 7a c5 e8 b4 95 5c e6 9e d5 f0 f8 8e dd 6e bf e5 f8 7c 8a 5e ef 07 f5 80 7a 17 7c 7e 85 81 87 70 85 8a 75 77 88 8e 56 8b 91 53 8d 8f 95 4c 92 98 7f 96 9b 4d 99 92 94 9c a1 3b 9e 91 a0 a2 a7 36 a4 8b a6 a8 ad 2d 9f 83 a5 ae b3 37 84 93 83 b8 8a ac b4 bc 24 b6 54 b8 c1 bf 9a bd c5 28 00 85 c2 c1 c9 c6 cd 28 c9 ca b1 7e ce d4 25 d0 d1 86 d5 da c3 d8 d9 da Data Ascii: QWuM, !3k7\i zz(!,D` dihl0\|YWlx\|?[pH,u? l:8XZXcrfjz\n\|^z\|~puwVSLM;6-7$T((~%
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: 04 00 c1 00 43 00 00 06 ff c0 80 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f 50 e8 27 30 8d 5a af d8 ac 76 cb e5 56 a9 dd b0 78 4c 2e 6b bf 42 b4 79 cd 6e bb a5 47 f5 7b 4e af 8f 47 c3 8f 9e 28 b7 fb ff 80 71 7c 7a 7b 79 81 87 88 7e 6a 84 8c 45 7d 89 90 91 59 85 69 8c 96 8b 8f 92 9a 9b 46 72 97 9f 9e 99 9c a3 87 94 79 a0 a8 9d a4 ab a4 a8 ae 8d 69 ac b2 90 af b5 84 86 b3 b9 80 b6 bc b1 ba bf 75 bc b6 be c0 c5 6d c2 b5 c4 c6 cb 61 55 c8 af ca cc d2 93 95 cf a0 d1 d3 d9 70 54 d6 d7 60 6c c3 da 8a d5 dd 96 d8 63 24 21 ea eb ec ea 0a e2 81 e5 e6 73 e9 ed f6 21 a2 f0 6b f2 b0 6f 21 0a a8 14 ac cb a7 af 19 39 79 74 ea dd b3 47 b0 e0 96 2f fc 0a 35 c4 02 00 00 09 80 a0 04 b2 9b e8 f0 21 3f 5c 65 2a 5a 5c 48 92 63 c7 28 ce 3e ba 11 49 82 1b 21 92 03 4f 1e 43 f8 cd 0c 4b Data Ascii: CpH,rl:P'0ZvVxL.kBynG{NG(q\|z{y~jE}YiFryiumaUpT`lc$!s!ko!9ytG/5!?\e*Z\Hc(>I!OCK
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: e7 a8 a8 46 aa 53 a9 a9 b6 0a 23 a8 d4 b0 ea ea ac 1e c2 8a 8c ac b4 e6 9a a1 ad bb e0 aa eb af 09 f2 da ab a5 2e aa 27 a2 26 d2 15 5b 9e 9b 68 36 eb ec b3 d0 46 2b ed b4 d4 56 db 6c 10 00 21 f9 04 05 0a 00 01 00 2c 00 00 04 00 c1 00 43 00 00 06 ff 40 80 70 48 2c 1a 8f c8 a4 72 c9 6c 3a 9f 50 68 cb d4 8a 5a af d8 ac 76 cb ed 4e 4d d4 ae 78 4c 2e 9b b5 5f 70 f8 cc 6e bb df d7 b4 da f4 82 73 5b 94 92 7e cf 2f 55 ed 80 6d 2f 73 84 6b 81 51 2f 7d 8a 7a 7f 87 8e 5b 72 60 2d 83 73 75 8f 4e 89 85 73 7b 8d 97 9e 4d 93 84 2f 2d a4 94 73 9d 9f 46 99 9a 26 79 9c a9 b0 47 a1 a2 a4 b5 a6 a7 a8 b0 89 ae bc bd af b1 b1 b3 84 b5 c4 a4 ac 54 b9 97 99 c5 b6 8a c9 c0 76 c2 b4 cc c5 c7 cf 87 bb 8b da 7e d0 8f b7 6a a3 d4 e2 df 86 9f 89 c5 be 8b 2d 01 ec ed ee ef f0 f1 f2 f3 Data Ascii: FS#.'&[h6F+Vl!,C@pH,rl:PhZvNMxL._pns[~/Um/skQ/}z[r`-suNs{M/-sF&yGTv~j-
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: 6a fc f9 27 20 26 fa 31 31 a0 80 a4 c0 90 8b 82 07 fa a7 88 82 78 88 33 5a 16 32 cc 60 e1 85 18 5a 28 43 83 15 66 e8 ff e1 86 72 dc c2 44 37 f6 d5 01 a2 7f 27 36 d2 c6 88 84 05 18 4f 8a c2 21 a5 c8 6a b7 34 18 df 7e ab 95 33 a1 8d 6c c4 04 17 24 fb f1 68 de 8f 78 04 69 89 8b e0 21 69 09 91 50 18 d9 88 92 db 41 c9 08 93 24 ed 28 24 69 0a 69 75 8b 95 57 72 12 07 95 40 a1 01 63 97 5a 8c 29 4f 96 24 42 f8 13 99 65 98 79 26 89 3a 39 c9 14 9b 5d b8 79 26 8e 4b a8 a5 93 81 5c d8 59 9c 9f 76 98 f8 e0 17 0a 09 71 11 8e 73 b6 27 e5 1a 80 8a 69 4a 61 88 52 68 a2 0c 94 56 ea 08 a5 97 6e 68 e9 a6 95 76 8a a9 a7 9e 66 6a a8 23 7c 34 6a 4b 9c 85 86 67 a2 a1 20 56 68 28 0b 01 f0 89 e9 a5 86 f2 27 03 ac a4 c6 da 6a ab b6 92 6a 6a 9d a7 dc 02 c6 8c aa b2 b7 28 a3 b5 10 55 Data Ascii: j' &11x3Z2`Z(CfrD7'6O!j4~3l$hxi!iPA$($iiuWr@cZ)O$Bey&:9]y&K\Yvqs'iJaRhVnhvfj#\|4jKg Vh('jjj(U
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: 32 91 1d c2 74 0e 95 31 74 94 71 d9 45 88 a6 f0 4d 1b 39 ed 18 48 41 1d eb d9 ea 45 cf e3 c9 59 05 0d 82 fa 88 2c 25 8f 8d 2b 1b b5 74 f9 f2 d5 b1 9c b6 4c f6 4b 89 13 28 c7 7f 3d 61 c5 94 99 0b 22 52 a3 46 cd d1 4c ca 49 1c d4 47 42 13 3e bc 1a 75 2b d5 53 15 d9 7d 9b ca 4b 21 57 a8 66 bf a2 22 86 6b 24 b1 99 10 ff d3 9e cd 29 57 6d a9 b6 24 f3 1d 8c bb 75 ae ad ba 76 47 55 fc f4 76 ef 40 b9 7e 21 01 0e ac 09 2f 49 80 d3 00 66 b5 d7 37 f1 51 9e 8c 1b 53 a4 c6 b9 33 b5 c9 f0 16 5a 56 ec 35 73 26 5c 7e 41 ab 93 3a da 91 54 d3 9b c4 8a 25 cb 8b 75 6b 96 cb 60 6b 2e 8a 75 2c 48 c4 a3 5f eb c6 c4 b6 b8 c5 93 a2 5b 2f 1e 5e 55 b6 6f 90 b6 e7 ca 03 a5 92 f9 33 e7 d5 5e 26 e7 ca c3 d3 bc 4e d5 ad 4f 1a ad bd 32 d0 ee 3d 54 3e 42 cf 50 bc 7b 4a 0e af 76 57 bf 72 Data Ascii: 2t1tqEM9HAEY,%+tLK(=a"RFLIGB>u+S}K!Wf"k$)Wm$uvGUv@~!/If7QS3ZV5s&\~A:T%uk`k.u,H_[/^Uo3^&NO2=T>BP{JvWr
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: 0f a6 9c 5a 0a cb 49 05 cd 22 67 24 9d 96 0a a9 40 a6 a6 da 27 35 dd 14 3a c9 09 9f c0 8a 6a ac ac 8a 3a aa 23 b2 42 52 ea 44 bb 92 4a 0d 49 65 2e 92 ab 23 42 a0 36 2c 3a 27 18 eb 6b 71 b4 b8 ba ec 23 c5 8a 08 62 b2 a7 1d cb 88 b5 b8 a0 00 ac 24 aa f6 29 ed b4 c6 76 ab 4d 3b 85 7e 6b ee b9 be 69 fa d8 b6 8f a0 80 ee bb e8 aa bb 19 2d e3 40 e2 2e bc f8 8a 28 6f 2f da d2 42 53 bb f9 06 fc e1 be 21 35 7b 2b 22 f7 0a 1c e2 09 09 8f b8 4d bf fe 56 a3 b0 b4 27 44 eb f0 99 36 81 49 0c 62 9e 28 74 0c 40 c7 1c 7b 0c f2 c7 22 87 6c 32 c9 21 a3 ac b2 20 7c ea 1b ce 41 11 37 d2 f0 7d 0c 0b b1 aa cd 0c 2f 1a a8 a3 1d 07 8a 33 00 3a 33 cc 33 ce 74 ae ca 32 c3 17 6f d3 4d b0 86 cc 3c f1 7d 36 4b 4b b0 32 53 23 fc f4 b4 16 27 7d 9d d3 57 2b c7 b5 83 55 77 f5 75 d7 64 33 Data Ascii: ZI"g$@'5:j:#BRDJIe.#B6,:'kq#b$)vM;~ki-@.(o/BS!5{+"MV'D6Ib(t@{"l2! \|A7}/3:33t2oM<}6KK2S#'}W+Uwud3
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: f8 d7 f2 f4 fc cc b3 ce f8 02 0a fc f4 69 5f 3f 65 4a 12 2a 5c 98 d0 e0 a8 5d 02 23 06 84 78 b0 1a 13 86 18 1b b6 22 c8 4a a2 47 68 a0 1c 56 fc e5 ac a4 c9 92 0a 45 6a e2 f8 91 d2 49 80 2e 57 a9 1c 79 eb e2 4b 94 0a 9f cc bc 44 51 e2 c5 8c 4a 8c c9 a4 b9 cc e6 cd 9f 4f 92 ea 3c 35 74 60 c2 62 cf 9c 29 ec 49 54 98 d1 a3 39 93 ee ac a4 2a e2 cf 7b da 9e 86 ac 9a ec aa d4 8c 4a 97 92 ea 95 4f a3 4f b1 5b ff c9 a2 2a 19 16 6d da b8 8e d8 ba 73 eb f1 27 37 b9 b8 90 da cd 88 b7 51 cf b0 60 9d d6 02 4c f2 c9 51 ac 4a 0a 37 6a 9a 4d 49 c7 96 4d 34 32 ce 45 17 b3 d6 52 7a 3d 05 c5 1c 56 f2 66 6b 83 ed 9a 5e 04 ef 5d 64 d2 2e 47 9f ae 99 d8 e9 ea 45 7a 97 bc 86 9d 79 f1 6c 58 82 53 2f bc 0d ae a9 6e de 94 64 ff 06 fe 18 32 71 45 6c 8f 23 57 be dc 95 d9 e6 67 9f 27 Data Ascii: i_?eJ\]#x"JGhVEjI.WyKDQJO<5t`b)IT9{JOO[*ms'7Q`LQJ7jMIM42ERz=Vfk^]d.GEzylXS/nd2qEl#Wg'
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: de 16 e6 99 5f de a2 a4 4a 9b a0 e9 e6 95 70 62 99 8e 95 27 c4 e9 a4 9b 67 e2 b2 d7 98 88 d4 69 e7 9f 76 a2 03 e8 a0 57 9e 80 cb 9a 7c 1e 12 85 29 8b 7a d3 28 29 86 ea c9 0f 27 8f 3e 42 a8 a0 7e 06 da e5 2f 13 71 19 49 a5 8d 44 11 c0 a8 a4 96 4a 6a a4 dd 9c 60 ea aa a3 82 ca 08 aa 3c c1 1a 2a ab ac a2 a3 2a ad a5 ba ba 88 ac 31 65 4a e8 ad b8 92 6a 6b b0 a7 12 fa 24 af 26 11 ab 6c b0 e8 2c eb ec aa 89 76 f3 ec b4 a3 36 4b ed b3 d1 72 73 2d b6 de 6c eb 6c b6 d4 78 bb ac b5 e2 32 7b 54 b9 c4 4a 23 2b ba e6 f6 c4 2e ae d3 c8 09 c0 bb b4 82 3b 0d bd b5 0e 25 08 53 fb de d4 6f bf fe 0a 12 29 be d0 9e 4b 70 a9 00 60 29 a7 c2 0c 2f 2a e5 c2 0e 37 9c 30 c3 52 48 b9 ef 45 c0 07 0b 6b 70 c6 01 c4 fb 28 c7 d5 6e 9c b1 34 f2 ce 0b b2 bd d2 80 dc 71 b7 27 8b 7c 30 b9 Data Ascii: _Jpb'givW\|)z()'>B~/qIDJj`<*1eJjk$&l,v6Krs-llx2{TJ#+.;%So)Kp`)/70RHEkp(n4q'\|0

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:07 UTC	669	OUT	GET /cdewe4rewbvcfr4erwi/cs.png HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:07 UTC	932	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:07 GMT Content-Type: image/png Content-Length: 2681 Connection: close last-modified: Thu, 22 Feb 2024 18:26:06 GMT x-rgw-object-type: Normal etag: "b01a30d354bfcf51edf33e0b0ea07402" x-amz-request-id: tx0000049db981d385221bc-0065d79414-471ae006-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1323 Accept-Ranges: bytes Set-Cookie: __cf_bm=a6rHy9cqX8xMcoCFQbOgW93m3mZsznUalrGkKdMCtxw-1708628287-1.0-ASuMJN4I2z2rsg9VmwB5P/l7V9/VCmWhPyuaJ7L8o9zLh2cfAewLeXDJ5K/f3jkeMxd8ITJvKTt1sN6311Edsd4=; path=/; expires=Thu, 22-Feb-24 19:28:07 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8599756cc9edc32e-EWR
2024-02-22 18:58:07 UTC	437	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 08 00 00 02 08 08 03 00 00 00 3c 22 e6 51 00 00 00 5d 50 4c 54 45 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b9 07 14 f0 00 00 00 1e 74 52 4e 53 00 ef 65 f7 7a 51 05 e5 48 5e 33 ee 6f cf 1f fb e2 28 f2 d7 9f 13 0a e6 b4 b3 9e 8b 37 09 09 a4 65 6e 00 00 09 ad 49 44 41 54 78 da ec d8 cb 8e 82 40 18 44 e1 56 40 01 f1 ee 8c 66 2e ff fb 3f e6 84 34 41 33 81 d2 b5 75 ce 96 ed 17 ba ba 13 d1 63 bb ba 69 ea dd 2a 91 4d ab 63 d5 75 4d fb 99 1e 3a 7e 9f 8b 88 e2 f0 f5 93 c8 a4 Data Ascii: PNGIHDR<"Q]PLTEtRNSezQH^3o(7enIDATx@DV@f.?4A3uci*McuM:~
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: 03 24 18 25 1c 20 c1 28 e1 00 09 46 09 07 48 30 4a 38 40 82 51 c2 01 12 8c 12 0e 90 60 94 70 80 04 a3 84 03 24 18 25 1c 20 c1 28 e1 00 09 46 09 07 48 30 4a 38 40 82 51 c2 01 12 8c 12 0e 90 60 94 70 80 04 a3 84 03 24 18 25 1c 20 c1 28 e1 00 09 46 09 07 48 30 4a 38 40 82 51 c2 01 12 8c 12 0e 90 60 94 70 80 04 a3 84 03 24 18 25 1c 20 c1 28 e1 00 09 46 09 07 48 30 4a 38 40 82 51 c2 01 12 8c 92 0e 90 60 d3 13 07 48 30 e9 a9 03 24 58 f4 82 03 24 18 f4 92 03 24 bc 7d 7f ec d2 c9 0d c3 40 0c 04 b0 fe bb 0e 06 41 90 db 5e bd bc 90 c8 1a b8 f8 c0 84 e6 96 1f 98 d0 5a e1 81 09 8d 95 1e 98 d0 56 f1 81 09 4d 95 1f 98 d0 d2 e5 0f 4c d8 c2 06 0f 4c d8 c0 16 0f 4c b8 dc 26 0f 4c a8 ea fa c0 84 9a be 0f 4c a8 e8 fc c0 84 75 bd 1f 98 b0 aa fb 03 13 d6 f4 7f 60 c2 8a 09 0f Data Ascii: $% (FH0J8@Q`p$% (FH0J8@Q`p$% (FH0J8@Q`p$% (FH0J8@Q`H0$X$$}@A^ZVMLLL&LLu`
2024-02-22 18:58:07 UTC	875	IN	Data Raw: 12 8e a2 38 50 42 8e e3 40 09 29 92 03 25 d4 b1 1c 28 a1 8a e6 40 09 af e3 39 50 c2 ab 88 0e 94 f0 1c d3 81 12 fe 47 75 a0 84 bf 71 1d 28 e1 77 64 07 4a f8 89 ed 40 09 df d1 1d 28 61 a6 03 25 8c 74 f0 c5 2e 9d dc 46 0c 04 41 00 53 fe 51 1b 85 32 0c 5f 2b 8d 5e 2b 4c 93 31 d0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 c0 84 f0 e0 38 4c 38 0e 0f c2 04 0f ca 04 0f ca 04 0f ca 04 0f ca 04 0f ca 04 0f ca 04 0f ca 04 0f ca 04 0f ca 04 0f ca 04 0f ca 04 0f ca 04 0f ca 04 Data Ascii: 8PB@)%(@9PGuq(wdJ@(a%t.FASQ2_+^+L18L8

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:07 UTC	670	OUT	GET /cdewe4rewbvcfr4erwi/pcm.png HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:07 UTC	932	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:07 GMT Content-Type: image/png Content-Length: 1270 Connection: close last-modified: Thu, 22 Feb 2024 18:26:07 GMT x-rgw-object-type: Normal etag: "05cdf1a2c2fc8f07bea0a8f4f9356637" x-amz-request-id: tx000003442b8fa3ff260d0-0065d79292-471b1f79-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1709 Accept-Ranges: bytes Set-Cookie: __cf_bm=T_WVVnFcv_ayh_Mw43Da27VRxbqb9ckF1116ynxYKqE-1708628287-1.0-AXTzk6m6cfn0FECCia+ooZsZ0bsu/fL/k6KHyJCT8hdpjg+6qZbWPKeFmHGQs62xihDmud+PylwUA5s+MdmfWp0=; path=/; expires=Thu, 22-Feb-24 19:28:07 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8599756cddb619d7-EWR
2024-02-22 18:58:07 UTC	437	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 a6 00 00 00 5c 04 03 00 00 00 16 af d3 3b 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 03 23 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 38 38 2c 20 32 30 32 30 2f 30 37 2f 31 30 2d 32 32 3a 30 36 3a 35 33 20 20 20 20 20 20 20 20 22 3e Data Ascii: PNGIHDR\;gAMAasRGB#iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164488, 2020/07/10-22:06:53 ">
2024-02-22 18:58:07 UTC	833	IN	Data Raw: 22 20 78 6d 6c 6e 73 3a 73 74 52 65 66 3d 22 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 73 54 79 70 65 2f 52 65 73 6f 75 72 63 65 52 65 66 23 22 20 78 6d 70 3a 43 72 65 61 74 6f 72 54 6f 6f 6c 3d 22 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 32 32 2e 30 20 28 57 69 6e 64 6f 77 73 29 22 20 78 6d 70 4d 4d 3a 49 6e 73 74 61 6e 63 65 49 44 3d 22 78 6d 70 2e 69 69 64 3a 46 31 37 42 39 34 43 46 43 41 42 46 31 31 45 42 42 41 42 37 46 42 37 32 31 32 36 39 36 31 35 45 22 20 78 6d 70 4d 4d 3a 44 6f 63 75 6d 65 6e 74 49 44 3d 22 78 6d 70 2e 64 69 64 3a 46 31 37 42 39 34 44 30 43 41 42 46 31 31 45 42 42 41 42 37 46 42 37 32 31 32 36 39 36 31 35 45 22 3e 20 3c 78 6d 70 4d 4d 3a 44 65 72 69 76 65 64 46 72 6f 6d 20 73 74 52 Data Ascii: " xmlns:stRef="http://ns.adobe.com/xap/1.0/sType/ResourceRef#" xmp:CreatorTool="Adobe Photoshop 22.0 (Windows)" xmpMM:InstanceID="xmp.iid:F17B94CFCABF11EBBAB7FB721269615E" xmpMM:DocumentID="xmp.did:F17B94D0CABF11EBBAB7FB721269615E"> <xmpMM:DerivedFrom stR

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:07 UTC	670	OUT	GET /cdewe4rewbvcfr4erwi/bel.png HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:07 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:07 GMT Content-Type: image/png Content-Length: 276 Connection: close last-modified: Thu, 22 Feb 2024 18:26:06 GMT x-rgw-object-type: Normal etag: "7616d96c388301e391653647e1f5f057" x-amz-request-id: tx000005562fd4f563e45a9-0065d792eb-471b1f79-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1620 Accept-Ranges: bytes Set-Cookie: __cf_bm=WVkFsetQW2u7S0A5VEEpEkYjAVrTP6GIXogRx18rF0g-1708628287-1.0-AXlLHJNxrdefC2SbbLMuRvetDMMB1ZdSFXsDJeVhc7XjhAV+940LjOepjF9e8xLPPI3B3SMDzbApL21CUFQBiug=; path=/; expires=Thu, 22-Feb-24 19:28:07 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8599756d6cd2433a-EWR
2024-02-22 18:58:07 UTC	276	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0d 00 00 00 0d 08 03 00 00 00 45 35 14 4e 00 00 00 4e 50 4c 54 45 00 00 00 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 66 3d 75 17 bb 00 00 00 1a 74 52 4e 53 00 a8 7a 53 ac b5 04 47 c1 96 15 6a 90 cd 22 a1 0c d8 9e 29 09 a4 6d 0f ae b2 10 a7 28 a1 00 00 00 5b 49 44 41 54 78 9c 65 8c 49 16 80 20 0c 43 99 e7 19 04 bd ff 45 15 a8 6e cc a2 e9 7f 69 83 d0 54 e7 1d 7d a2 f9 cc f4 05 4d 1a 6a 44 43 42 96 91 9d e2 b4 2c e1 65 07 3c 6c 67 40 ec 4f d5 01 b9 3a 4b 02 50 98 35 4a 8e 05 43 aa 67 1a 5b b8 c7 9e 17 6b f6 8d 88 57 14 73 b9 Data Ascii: PNGIHDRE5NNPLTEfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff=utRNSzSGj")m([IDATxeI CEniT}MjDCB,e<lg@O:KP5JCg[kWs

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:07 UTC	582	OUT	GET /?lang=en HTTP/1.1 Host: ipwho.is Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Origin: https://shark-app-9uouf.ondigitalocean.app Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://shark-app-9uouf.ondigitalocean.app/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:07 UTC	255	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:07 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Server: ipwhois Access-Control-Allow-Origin: * Access-Control-Allow-Headers: * X-Robots-Tag: noindex
2024-02-22 18:58:07 UTC	726	IN	Data Raw: 32 63 61 0d 0a 7b 22 69 70 22 3a 22 31 39 31 2e 39 36 2e 32 32 37 2e 32 32 32 22 2c 22 73 75 63 63 65 73 73 22 3a 74 72 75 65 2c 22 74 79 70 65 22 3a 22 49 50 76 34 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 22 3a 22 4e 6f 72 74 68 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 6e 74 69 6e 65 6e 74 5f 63 6f 64 65 22 3a 22 4e 41 22 2c 22 63 6f 75 6e 74 72 79 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 22 2c 22 63 6f 75 6e 74 72 79 5f 63 6f 64 65 22 3a 22 55 53 22 2c 22 72 65 67 69 6f 6e 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 72 65 67 69 6f 6e 5f 63 6f 64 65 22 3a 22 4e 59 22 2c 22 63 69 74 79 22 3a 22 4e 65 77 20 59 6f 72 6b 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 34 30 2e 37 31 32 37 38 33 37 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 37 34 2e 30 30 35 39 34 31 33 Data Ascii: 2ca{"ip":"191.96.227.222","success":true,"type":"IPv4","continent":"North America","continent_code":"NA","country":"United States","country_code":"US","region":"New York","region_code":"NY","city":"New York","latitude":40.7127837,"longitude":-74.0059413

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:07 UTC	670	OUT	GET /cdewe4rewbvcfr4erwi/bx1.png HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:07 UTC	933	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:07 GMT Content-Type: image/png Content-Length: 99389 Connection: close last-modified: Thu, 22 Feb 2024 18:26:06 GMT x-rgw-object-type: Normal etag: "6b11ad15da74888bea9095007a9f7dd6" x-amz-request-id: tx00000eb3715baae0e7ad0-0065d793b3-471ae006-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1420 Accept-Ranges: bytes Set-Cookie: __cf_bm=rZb4svrqLT4ooLeJh3qcGL3.9Hsbm49tNfh_WRjjR4g-1708628287-1.0-AbI1TPSExdIzaGRD2+lQ1hTUQ23MchiRwGjjVz9NzEoRoSfJsk7aUM+T3mWlw29b3+VANqoNEvpv82pokD4M5+o=; path=/; expires=Thu, 22-Feb-24 19:28:07 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8599756e48d3422d-EWR
2024-02-22 18:58:07 UTC	436	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 04 20 00 00 03 8c 08 06 00 00 00 9c 95 c2 7e 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 16 3d f7 de f4 42 4b 88 80 94 4b 6f 52 15 08 20 52 42 8b 80 14 91 26 2a 21 09 10 4a 88 21 a1 d9 15 51 c1 11 45 45 04 1b c8 a0 88 03 8e 8e 80 8c 15 51 2c 0c 8a 0a d8 07 e4 21 a2 8e 83 a3 88 8a ca fb e1 7b a3 6b d6 bc f7 e6 cd fe b5 d7 3e e7 ac f3 9d b3 cf 07 c0 08 0c 96 48 33 51 35 80 0c a9 42 1e 11 e0 83 c7 c4 c6 e1 e4 2e 40 81 0a 24 70 00 10 08 b3 64 21 73 fd 23 01 00 f8 7e 3c 3c 2b 22 c0 07 be 00 01 78 d3 0b 08 00 c0 4d 9b c0 30 1c 87 ff 0f ea 42 99 5c 01 80 84 01 c0 74 91 38 4b Data Ascii: PNGIHDR ~pHYsOiCCPPhotoshop ICC profilexSgTS=BKKoR RB&*!J!QEEQ,!{k>H3Q5B.@$pd!s#~<<+"xM0B\t8K
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: ce 0e ae ce ce 36 8e b6 0e 5f 2d ea bf 06 ff 22 62 62 e3 fe e5 cf ab 70 40 00 00 e1 74 7e d1 fe 2c 2f b3 1a 80 3b 06 80 6d fe a2 25 ee 04 68 5e 0b a0 75 f7 8b 66 b2 0f 40 b5 00 a0 e9 da 57 f3 70 f8 7e 3c 3c 45 a1 90 b9 d9 d9 e5 e4 e4 d8 4a c4 42 5b 61 ca 57 7d fe 67 c2 5f c0 57 fd 6c f9 7e 3c fc f7 f5 e0 be e2 24 81 32 5d 81 47 04 f8 e0 c2 cc f4 4c a5 1c cf 92 09 84 62 dc e6 8f 47 fc b7 0b ff fc 1d d3 22 c4 49 62 b9 58 2a 14 e3 51 12 71 8e 44 9a 8c f3 32 a5 22 89 42 92 29 c5 25 d2 ff 64 e2 df 2c fb 03 3e df 35 00 b0 6a 3e 01 7b 91 2d a8 5d 63 03 f6 4b 27 10 58 74 c0 e2 f7 00 00 f2 bb 6f c1 d4 28 08 03 80 68 83 e1 cf 77 ff ef 3f fd 47 a0 25 00 80 66 49 92 71 00 00 5e 44 24 2e 54 ca b3 3f c7 08 00 00 44 a0 81 2a b0 41 1b f4 c1 18 2c c0 06 1c c1 05 dc c1 0b Data Ascii: 6_-"bbp@t~,/;m%h^uf@Wp~<<EJB[aW}g_Wl~<$2]GLbG"IbXQqD2"B)%d,>5j>{-]cK'Xto(hw?G%fIq^D$.T?DA,
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: ad 82 e5 c1 ad 21 68 c8 ec 90 ad 21 f7 e7 98 ce 91 ce 69 0e 85 50 7e e8 d6 d0 07 61 e6 61 8b c3 7e 0c 27 85 87 85 57 86 3f 8e 70 88 58 1a d1 31 97 35 77 d1 dc 43 73 df 44 fa 44 96 44 de 9b 67 31 4f 39 af 2d 4a 35 2a 3e aa 2e 6a 3c da 37 ba 34 ba 3f c6 2e 66 59 cc d5 58 9d 58 49 6c 4b 1c 39 2e 2a ae 36 6e 6c be df fc ed f3 87 e2 9d e2 0b e3 7b 17 98 2f c8 5d 70 79 a1 ce c2 f4 85 a7 16 a9 2e 12 2c 3a 96 40 4c 88 4e 38 94 f0 41 10 2a a8 16 8c 25 f2 13 77 25 8e 0a 79 c2 1d c2 67 22 2f d1 36 d1 88 d8 43 5c 2a 1e 4e f2 48 2a 4d 7a 92 ec 91 bc 35 79 24 c5 33 a5 2c e5 b9 84 27 a9 90 bc 4c 0d 4c dd 9b 3a 9e 16 9a 76 20 6d 32 3d 3a bd 31 83 92 91 90 71 42 aa 21 4d 93 b6 67 ea 67 e6 66 76 cb ac 65 85 b2 fe c5 6e 8b b7 2f 1e 95 07 c9 6b b3 90 ac 05 59 2d 0a b6 42 a6 Data Ascii: !h!iP~aa~'W?pX15wCsDDDg1O9-J5>.j<74?.fYXXIlK9.6nl{/]py.,:@LN8A%w%yg"/6C\NH*Mz5y$3,'LL:v m2=:1qB!Mggfven/kY-B
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: 8d 8d de e5 7b e6 37 99 4c de e5 3b 5d 2e 9c cd 65 b0 db ed b8 70 61 34 b8 eb c5 64 32 61 32 99 bc cb 68 72 34 e1 72 b6 6c 67 50 50 50 ab ed b9 5c 1c 0e 07 4d 4d 4d de 7a f5 ad bb c0 c0 40 6f b9 3c ff ec f6 46 ec f6 06 00 4c a6 60 82 82 02 bd ed c7 68 30 78 3f 53 cf b2 3c cb 00 68 b0 37 d0 68 6f c4 e9 72 e2 72 ba 3f 3f 93 c9 44 40 40 00 4d 4d 8e e6 3a 71 e2 74 3a 31 34 2f 2b 28 28 88 80 80 80 56 6d c5 df 5c 2e 17 f6 46 3b 8d 8d 4d 38 9d 9e 36 13 40 70 70 30 a6 a0 20 1a ec 0d 34 d4 37 e0 f2 69 f7 41 41 41 04 05 06 ba db 60 a3 1d 97 d3 e5 6d 23 1e 9e 69 01 9a 1c 0e 9a 9a 1a bd ed c3 e9 74 7a db 8d 67 3e cf f4 9e ed 0f 08 08 c4 6e 6f a0 a1 a1 81 a6 a6 26 ef f7 d2 d3 b6 02 02 02 30 18 8d e0 72 d1 d0 e0 9e ce b3 3f 01 a8 af af c7 6e b7 7b bf 13 2e 97 cb fb d9 Data Ascii: {7L;].epa4d2a2hr4rlgPPP\MMMz@o<FL`h0x?S<h7horr??D@@MM:qt:14/+((Vm\.F;M86@pp0 47iAAA`m#itzg>no&0r?n{.
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: 57 a4 4e 9a 3f 23 df cf d0 e1 74 e0 74 b4 b4 01 ef 89 b0 cf ce db b7 9d b5 0d f1 00 ef 49 eb 99 da ae 67 b9 06 83 b1 79 bf d3 52 4f 8e e6 1f 05 6f 1b 6f 0e e0 8c 6d da b3 a7 fe 5b 9d 50 f9 bc e6 db ae 7d bf 1b be 75 7e 39 ea bd d5 77 c2 67 ff e1 5b e7 ee e9 5c b8 9a f7 a1 6d f7 3b 9e 69 7d b7 a3 55 9b 6d b3 7f 6b bb dd be 7c eb a7 bd 36 eb a9 4f 4f 79 ae 64 9b 6d af bd 79 d6 ed 72 b9 70 38 3c ef d1 aa 9d f9 6e b3 c1 68 c0 68 68 f9 9e e3 73 00 d1 f6 b3 f0 dd cf b9 db 68 eb fa 6c bb 0f bb dc 75 70 da b6 9d 75 1f 66 20 20 c0 d8 6a 19 be 65 6f db 96 5a 9d 6c 3b 9d b8 7c d6 d5 5e 1b 74 81 bb 7d b8 38 6d 1f ef fb 5b d8 f6 37 cb f7 35 cf c9 8a fb 84 d9 7d 92 d2 b2 3e a3 b7 fc 6d 7f 3b 7d cb d3 76 99 67 da a6 d6 db 0d d0 fa 7b d6 76 1f 76 c6 cf 01 9a c3 0a e3 69 Data Ascii: WN?#ttIgyROoom[P}u~9wg[\m;i}Umk\|6OOydmyrp8<nhhhshlupuf jeoZl;\|^t}8m[75}>m;}vg{vvi
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: af be 7d fb 32 71 e2 44 5e 78 e1 05 4e 9d 3a 45 70 70 30 c3 86 0d e3 ee bb ef be ac e5 50 00 21 22 22 22 22 22 22 f2 2d 72 d3 4d 37 91 9c 9c 7c d9 d7 ab 00 42 44 44 44 44 44 44 da 15 1a 1a ca 5d 77 dd 75 ce b7 60 f4 ed db 57 95 76 15 3a 78 f0 20 ff fc e7 3f a9 ad ad 25 39 39 99 80 80 00 36 6f de 7c d9 43 08 05 10 22 22 22 22 22 22 d2 fe 09 63 60 20 71 71 71 d7 f4 36 ee dc b9 93 90 90 10 a2 a2 a2 ae c9 ed 2b 2b 2b e3 b3 cf 3e a3 ac ac 8c 9b 6e ba 89 91 23 47 72 ea d4 29 4a 4b 4b d9 b4 69 13 89 89 89 04 07 07 5f 96 b2 18 f5 95 12 11 11 11 11 11 91 6f ab 8a 8a 0a 8e 1d 3b 76 cd 6e db 67 9f 7d 46 51 51 11 71 71 71 8c 1f 3f 9e 3e 7d fa 30 68 d0 20 e2 e2 e2 d8 bb 77 2f 25 25 25 97 ed 09 1f 0a 20 44 44 44 44 44 44 e4 5b 2b 39 39 99 1b 6f bc 91 86 86 86 d3 fe 35 Data Ascii: }2qD^xN:Epp0P!""""""-rM7\|BDDDDDD]wu`Wv:x ?%996o\|C""""""c` qqq6+++>n#Gr)JKKi_o;vng}FQQqqq?>}0h w/%%% DDDDDD[+99o5
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: b5 cb 7b 62 bd 6b d7 2e ba 77 ef 4e bf 7e fd 4e 3b c1 bf 12 9c 4e a7 f7 c4 be ba ba 9a c0 c0 40 2a 2a 2a b8 e1 86 1b ae 68 b9 ea ea ea a8 a8 a8 60 fb f6 ed 7c fd f5 d7 54 57 57 d3 d8 d8 48 63 63 23 41 41 41 04 05 05 d1 a5 4b 17 ae bb ee 3a 46 8c 18 41 64 64 24 21 21 21 17 b5 4e 05 10 1e e1 d1 0c 37 43 41 39 80 95 a2 32 3b 98 7d 1a 6b c9 16 f2 da 0c ec 6a 5f bf 85 a2 47 13 88 f3 79 6d df 9e 02 ef ff 9b 47 0e 41 a7 84 e2 bf e4 a1 88 9c e7 9f e6 f7 6f 17 61 79 72 2d d3 54 23 22 22 22 22 f2 2d 72 e2 c4 09 f6 ed db 47 75 75 35 51 51 51 74 ea d4 09 80 fa fa 7a 0e 1d 3a c4 c9 93 27 19 38 70 20 dd bb 77 bf ec 65 2b 2b 2b e3 e8 d1 a3 38 9d 4e 02 03 03 d9 bb 77 2f 27 4f 9e a4 b1 b1 91 53 a7 4e b1 77 ef 5e 7a f7 ee 0d 80 d1 68 24 3c 3c 9c a8 a8 a8 cb 56 be 9a 9a 1a Data Ascii: {bk.wN~N;N@***h`\|TWWHcc#AAAK:FAdd$!!!N7CA92;}kj_GymGAoayr-T#""""-rGuu5QQQtz:'8p we+++8Nw/'OSNw^zh$<<V
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: 32 d7 14 52 d5 3c d6 84 ad 2c 8f ac 27 a6 32 e3 ff 7c 42 0e 80 da 42 32 ef 9f c4 63 2f e6 51 74 d8 fd 8e fd 70 21 d9 4f 4f 65 d2 13 59 de f2 9c 7e 42 5d 4e ee 2f 93 99 30 eb 19 b2 f2 8b bc eb b1 1f 2e 22 6f e5 42 66 4f 4c 6e 3e e9 05 30 61 b9 25 dd 3b eb aa 2d 7b 5a 85 13 7b 76 b7 8c 75 41 f9 07 ec f0 3d d1 2d db c1 07 9e c5 8c 4d 61 5c 78 39 39 8f 4f 60 ea 13 59 e4 ed 2e c5 1b 11 d4 56 51 b4 39 97 cc 47 ee 64 ea d2 36 db 78 26 b5 85 64 4e 99 c0 ec e7 73 b1 16 57 b5 cc 73 a2 94 a2 fc 2c e6 dd 3b 89 b9 6b ab 4e db ee bc a7 ef 61 c2 23 99 e4 6e f7 cc 63 a7 aa 38 8f ac a7 67 70 e7 7d 8b 29 ac 3d 7d 3d 8b ef bb 93 19 4f 67 91 e7 b3 1e 5b 99 95 dc e7 67 33 61 4a e6 e9 f3 5c 94 02 16 3e 3a 97 ec 9d ee da 09 eb 9e c4 3d b7 9a cf 7f 31 86 eb 48 be 3f c1 1b 04 65 Data Ascii: 2R<,'2\|BB2c/Qtp!OOeY~B]N/0."oBfOLn>0a%;-{Z{vuA=-Ma\x99O`Y.VQ9Gd6x&dNsWs,;kNa#nc8gp})=}=Og[g3aJ\>:=1H?e
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: 14 e7 b0 b8 39 30 21 3e 83 5f 4c 89 23 2c c0 3d 8f e5 e1 8c 96 50 e6 8d 1c 9f 60 e8 e2 c5 3d 92 41 5a bf 4b b0 a0 7e 77 90 3e de 93 37 ac a2 60 b7 6f 3b d8 48 ee ce e6 ff 1f 3a 8d e4 a1 fa d6 8b 88 88 5c bb 4e f2 e1 fb 36 e8 da 93 b1 43 c0 7c 73 04 63 68 e4 f5 f7 4b 4f 0b 09 ca 73 d6 71 d7 fc 4a 36 99 ba f3 f3 5f c6 f2 c7 99 dd 09 de 51 c9 4f 32 0a d8 65 ea cb f4 a7 22 b8 15 88 bd 63 00 7f 7e 6a 10 89 5d db 2c 62 c8 00 7e 6c 86 b7 0a f6 b6 3e 81 77 ec 25 7f 1d 98 6f 37 13 1b e0 a4 ec b5 0f b9 f7 b9 63 d8 be 63 e6 d9 a7 62 f9 f3 cf 22 49 ee d9 c0 5b 4b b6 f3 3f 1f 9c 04 c2 48 9c 1e cb 4f be 03 98 bb f1 d4 53 b1 4c b7 84 01 47 59 37 3f 8f 07 97 d5 62 fe 41 34 7f 7e 2a 96 5f ff 20 88 b2 95 5f 70 d7 dc ad 94 9f 29 84 88 8e e6 cf 8f 75 23 16 b8 f5 fe 58 fe fc Data Ascii: 90!>_L#,=P`=AZK~w>7`o;H:\N6C\|schKOsqJ6_QO2e"c~j],b~l>w%o7ccb"I[K?HOSLGY7?bA4~*_ _p)u#X
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: 00 71 a8 ac e5 95 a4 41 03 db 59 72 2f c2 a3 9a cf ed 29 a2 fc 44 f3 a9 ec e8 14 52 c9 25 17 28 2a 28 a4 6a 4a d7 96 1e 0e 43 53 c9 98 6a 66 c6 2f 73 9b 7b 48 64 30 e4 e8 16 77 dd 01 71 a9 16 f7 4e 2a 79 0e f3 6f c9 e3 99 8f bd a3 7a 52 55 9c 47 76 71 1e d9 cf 03 a1 e1 24 dd bf 80 27 a7 5b 08 ff 86 7d 48 dc 94 05 4c 7b 6f 86 f7 16 14 b0 51 ba 39 97 d2 cd b9 64 01 74 4f 20 fd d1 f9 64 4c 8a 76 d7 67 ed a9 96 a7 99 6c 7a 86 09 a3 9e 39 e3 b2 0b 0f 94 03 71 1c 3d d0 72 2b 4d 74 78 af cb d4 f0 e2 30 77 bf 74 4b 33 8d 4a 26 3d 34 9b ec 5a 28 5f 5d 40 d1 f4 38 e2 02 8a c8 5f d1 d2 3b 25 75 b4 59 df 77 11 11 91 6b 58 f9 86 4a 3e 21 88 9f df dc d7 7b bc 97 3c 31 94 67 9f 73 0f 46 e9 3d 61 2f 3e ca 3b 76 b8 eb f6 36 27 d3 51 37 f1 d2 db 2d 27 cd df c4 3c ba 17 c3 Data Ascii: qAYr/)DR%((jJCSjf/s{Hd0wqNyozRUGvq$'[}HL{oQ9dtO dLvglz9q=r+Mtx0wtK3J&=4Z(_]@8_;%uYwkXJ>!{<1gsF=a/>;v6'Q7-'<

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:07 UTC	670	OUT	GET /cdewe4rewbvcfr4erwi/set.png HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:07 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:07 GMT Content-Type: image/png Content-Length: 364 Connection: close last-modified: Thu, 22 Feb 2024 18:26:07 GMT x-rgw-object-type: Normal etag: "e144c3378090087c8ce129a30cb6cb4e" x-amz-request-id: tx0000043474856eca0781b-0065d793b3-471ae006-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1420 Accept-Ranges: bytes Set-Cookie: __cf_bm=7f1xSorZFj.vgn7r9Dc6jfOyGizOpRJjkIkQsFHZsm8-1708628287-1.0-AW0nit7cDtgbRgUqDtS97hyZp0q4uUsrvOSB5HnVD+oY+xPhskzTCsIZP8qla3jeJCsho09b6J0Df4gvpZe8NwE=; path=/; expires=Thu, 22-Feb-24 19:28:07 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8599756f3a5742ac-EWR
2024-02-22 18:58:07 UTC	364	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 0c 00 00 00 0c 08 02 00 00 00 d9 17 cb b0 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 01 0e 49 44 41 54 78 da 5c 90 bf 8e 45 40 14 c6 b1 a3 94 a8 54 42 a5 13 c9 2d 6e 24 b4 a2 90 28 e4 96 1a 0f e4 35 54 1a 37 91 78 00 3d 5a 51 88 82 c2 9f 6c 28 6e 23 d8 b3 d7 ae cc ee 57 4c be f9 9d f9 4e ce 1c 72 59 16 e2 57 59 96 25 49 02 c6 30 0c 55 55 2f 4e 11 98 ea ba fe 7c ab 2c 4b 9c 93 d0 29 08 82 b6 6d 45 51 2c 8a 62 5d d7 b3 70 bb dd fa be e7 38 ce 75 5d 04 e9 3c cf 81 02 c2 d3 27 84 b0 a6 69 68 1c c7 ab c0 f3 bc e3 38 60 e2 38 86 f0 09 bb ae a3 ee f7 bb 65 59 e7 1d 5e 88 6f 3d 1e 8f 93 98 a6 a9 eb fa f7 e0 34 4d 13 7f 45 51 3f 1f 42 Data Ascii: PNGIHDRtEXtSoftwareAdobe ImageReadyqe<IDATx\E@TB-n$(5T7x=ZQl(n#WLNrYWY%I0UU/N\|,K)mEQ,b]p8u]<'ih8`8eY^o=4MEQ?B

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:07 UTC	670	OUT	GET /cdewe4rewbvcfr4erwi/vsc.png HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:07 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:07 GMT Content-Type: image/png Content-Length: 722 Connection: close last-modified: Thu, 22 Feb 2024 18:26:07 GMT x-rgw-object-type: Normal etag: "42d8f2cc1ae5759c2369f255f36ebc03" x-amz-request-id: tx00000126c4926bcbc6ed2-0065d793b3-471b1f79-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1420 Accept-Ranges: bytes Set-Cookie: __cf_bm=QRvAHT2nGPWl_Pl8jtgfeX_kxFOHp1nMoUB8jJs2PXI-1708628287-1.0-AaMpNxEnZCUWfBMDM2YAhwpbP9mJSAweHX28Gx5mWuSK3Dk8caUPVsRECeVhGd/HNqTptb86l1IDoV0pnwbiDcg=; path=/; expires=Thu, 22-Feb-24 19:28:07 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8599756f6a0242da-EWR
2024-02-22 18:58:07 UTC	438	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 01 03 00 00 00 f9 f0 f3 88 00 00 00 06 50 4c 54 45 00 00 00 00 00 00 a5 67 b9 cf 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 02 65 49 44 41 54 78 5e c5 95 bd 6e dc 30 0c 80 29 08 a8 3a 45 7d 80 e0 f4 1a 19 0e f6 2b 65 f4 70 c8 09 b8 a1 63 5e 49 41 87 be 06 83 0e 59 95 cd 83 61 d6 3c 51 c7 8b b9 b7 c6 1d 6c 7f 96 28 fe 13 e4 72 19 be 5e be fc 0b 10 70 b7 80 e8 eb 92 33 d1 ba 5b f0 75 49 a2 8f 0f 9a ef 77 cc be a4 55 81 a3 ec 8b 23 b5 2f 2c ac c7 88 2a 02 61 5c 20 cc 2a 22 07 22 74 2a 64 6d 7a 9c 3b 70 73 d3 23 75 a9 a1 06 f2 85 30 a2 80 58 62 f5 fc af 02 52 0e ac 07 ba 7e cc d8 fd b1 08 38 75 30 08 98 7b 5c 92 9c da 65 41 Data Ascii: PNGIHDRPLTEgtRNS@fpHYseIDATx^n0):E}+epc^IAYa<Ql(r^p3[uIwU#/,a\ ""t*dmz;ps#u0XbR~8u0{\eA
2024-02-22 18:58:07 UTC	284	IN	Data Raw: 39 cc 10 04 04 ba d4 f8 76 c1 06 3e 91 cb 05 03 fd 2a 10 5e 37 f0 7e 05 c5 5f c1 4f 01 6f 04 40 97 06 1c 6f 29 03 c0 c9 f3 96 cc 69 bf 01 89 26 97 00 11 e5 0e 1c 11 19 60 b6 88 50 9f 5d 11 a1 f0 ae 40 f5 28 1b ba 81 cf 7b f0 2a c6 15 87 81 03 d3 ad 4d e8 88 d4 fc 0a d4 00 3b a8 bb d0 6f a0 b9 50 9c cc 0e 48 a9 39 79 7a 76 38 85 e2 b1 85 41 02 15 b3 ab c3 7d 28 23 40 bd 0f 65 fa b6 dd 5b b0 35 1d 4e 75 97 30 a3 82 56 98 23 36 20 49 07 90 38 e9 34 2d 01 34 2d d9 7b 1c 97 c2 47 de 52 bb 06 49 ed 9e fc eb b9 25 bf 29 0f 01 11 ce 2b 54 06 a6 c4 4c 11 9a 32 b5 85 6c 4b dd 36 03 db 2e 06 05 47 d3 72 6c 53 b2 6d cb 36 36 db fa 6c 73 d4 f6 19 f7 0d f6 61 df 82 61 d7 a4 3b d0 36 5e f6 8d be 98 51 60 87 85 1d 27 76 e0 d8 91 64 87 96 1d 6b 76 f0 d9 d1 68 87 a7 1d af Data Ascii: 9v>^7~_Oo@o)i&`P]@({M;oPH9yzv8A}(#@e[5Nu0V#6 I84-4-{GRI%)+TL2lK6.GrlSm66lsaa;6^Q`'vdkvh

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:07 UTC	612	OUT	GET /cdewe4rewbvcfr4erwi/nvidia.js HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:07 UTC	953	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:07 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 2042 Connection: close last-modified: Thu, 22 Feb 2024 18:26:07 GMT x-rgw-object-type: Normal etag: "f1392454d2e2f4c7741711cf1ed3e620" x-amz-request-id: tx00000914b1ae36e7a90d6-0065d79292-471ae006-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1709 Accept-Ranges: bytes Set-Cookie: __cf_bm=3cVb_nuCodu4Q05db3gpNiaj.3pPwGDFt.z22klRfCU-1708628287-1.0-AZYr8mvQMftBXt4X/fvZBMc1N0Cql49K+ifnIcE6H9rBsZ7YsBmdrla3lE5Jbe52xwF6/wu1+ka7H182JDCy5HU=; path=/; expires=Thu, 22-Feb-24 19:28:07 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8599756f6a171996-EWR
2024-02-22 18:58:07 UTC	416	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 74 6f 67 67 6c 65 46 75 6c 6c 53 63 72 65 65 6e 28 65 29 7b 76 61 72 20 6e 3d 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 65 20 69 6e 73 74 61 6e 63 65 6f 66 20 48 54 4d 4c 45 6c 65 6d 65 6e 74 26 26 28 6e 3d 65 29 3b 76 61 72 20 74 3d 64 6f 63 75 6d 65 6e 74 2e 77 65 62 6b 69 74 49 73 46 75 6c 6c 53 63 72 65 65 6e 7c 7c 64 6f 63 75 6d 65 6e 74 2e 6d 6f 7a 46 75 6c 6c 53 63 72 65 65 6e 7c 7c 21 31 3b 6e 2e 72 65 71 75 65 73 74 46 75 6c 6c 53 63 72 65 65 6e 3d 6e 2e 72 65 71 75 65 73 74 46 75 6c 6c 53 63 72 65 65 6e 7c 7c 6e 2e 77 65 62 6b 69 74 52 65 71 75 65 73 74 46 75 6c 6c 53 63 72 65 65 6e 7c 7c 6e 2e 6d 6f 7a 52 65 71 75 65 73 74 46 75 6c 6c 53 63 72 65 65 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 31 7d Data Ascii: function toggleFullScreen(e){var n=document.body;e instanceof HTMLElement&&(n=e);var t=document.webkitIsFullScreen\|\|document.mozFullScreen\|\|!1;n.requestFullScreen=n.requestFullScreen\|\|n.webkitRequestFullScreen\|\|n.mozRequestFullScreen\|\|function(){return!1}
2024-02-22 18:58:07 UTC	1369	IN	Data Raw: 72 65 65 6e 28 29 3a 6e 2e 72 65 71 75 65 73 74 46 75 6c 6c 53 63 72 65 65 6e 28 29 7d 66 75 6e 63 74 69 6f 6e 20 61 64 64 45 76 65 6e 74 28 65 2c 6e 2c 74 29 7b 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 3f 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 6e 2c 74 2c 21 31 29 3a 65 2e 61 74 74 61 63 68 45 76 65 6e 74 26 26 65 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 2b 6e 2c 74 29 7d 24 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 61 75 64 69 6f 22 29 3b 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 2c 22 61 69 32 2e 6d 70 33 22 29 2c 65 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 Data Ascii: reen():n.requestFullScreen()}function addEvent(e,n,t){e.addEventListener?e.addEventListener(n,t,!1):e.attachEvent&&e.attachEvent("on"+n,t)}$(document).ready(function(){var e=document.createElement("audio");e.setAttribute("src","ai2.mp3"),e.addEventListene
2024-02-22 18:58:07 UTC	257	IN	Data Raw: 6d 65 74 68 69 6e 67 2e 20 49 66 20 79 6f 75 20 6c 65 61 76 65 20 62 65 66 6f 72 65 20 73 61 76 69 6e 67 2c 20 79 6f 75 72 20 63 68 61 6e 67 65 73 20 77 69 6c 6c 20 62 65 20 6c 6f 73 74 2e 22 3b 72 65 74 75 72 6e 28 65 7c 7c 77 69 6e 64 6f 77 2e 65 76 65 6e 74 29 2e 72 65 74 75 72 6e 56 61 6c 75 65 3d 6e 2c 6e 7d 29 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 63 6c 69 63 6b 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 28 65 2e 72 65 71 75 65 73 74 46 75 6c 6c 53 63 72 65 65 6e 7c 7c 65 2e 77 65 62 6b 69 74 52 65 71 75 65 73 74 46 75 6c 6c 53 63 72 65 65 6e 7c 7c 65 2e 6d 6f 7a 52 65 71 75 65 73 74 46 75 6c 6c 53 63 72 65 65 6e 29 2e 63 61 6c 6c 28 65 29 7d Data Ascii: mething. If you leave before saving, your changes will be lost.";return(e\|\|window.event).returnValue=n,n}),addEventListener("click",function(){var e=document.documentElement;(e.requestFullScreen\|\|e.webkitRequestFullScreen\|\|e.mozRequestFullScreen).call(e)}

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:07 UTC	613	OUT	GET /cdewe4rewbvcfr4erwi/jupiter.js HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:07 UTC	952	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:07 GMT Content-Type: text/javascript; charset=utf-8 Content-Length: 494 Connection: close last-modified: Thu, 22 Feb 2024 18:26:07 GMT x-rgw-object-type: Normal etag: "4dbac0f9092005d5d0c788205c0a1f96" x-amz-request-id: tx00000c5fa4b534ee89a8d-0065d792eb-471b1f79-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1620 Accept-Ranges: bytes Set-Cookie: __cf_bm=CEHC5nKKM1pfb7DgP8vBvJogjnzaHjgQWM2gzyduHBs-1708628287-1.0-ASDTw8FPEhLU0M1Xr/1k6dAf8hN/389LRMSQHMpBkCXlxPVYNZ3fS/UzYs1KZWoMUKrRak92PVJNyGJ54VVJzME=; path=/; expires=Thu, 22-Feb-24 19:28:07 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8599756f9cbe43ca-EWR
2024-02-22 18:58:07 UTC	417	IN	Data Raw: 20 66 75 6e 63 74 69 6f 6e 20 61 64 64 45 76 65 6e 74 28 6f 62 6a 2c 20 65 76 74 2c 20 66 6e 29 20 7b 0d 0a 20 20 20 20 69 66 20 28 6f 62 6a 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 62 6a 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 65 76 74 2c 20 66 6e 2c 20 66 61 6c 73 65 29 3b 0d 0a 20 20 20 20 7d 20 65 6c 73 65 20 69 66 20 28 6f 62 6a 2e 61 74 74 61 63 68 45 76 65 6e 74 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 6f 62 6a 2e 61 74 74 61 63 68 45 76 65 6e 74 28 22 6f 6e 22 20 2b 20 65 76 74 2c 20 66 6e 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 61 64 64 45 76 65 6e 74 28 64 6f 63 75 6d 65 6e 74 2c 20 27 6d 6f 75 73 65 6f 75 74 27 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 74 29 20 7b 0d 0a 20 20 Data Ascii: function addEvent(obj, evt, fn) { if (obj.addEventListener) { obj.addEventListener(evt, fn, false); } else if (obj.attachEvent) { obj.attachEvent("on" + evt, fn); }}addEvent(document, 'mouseout', function(evt) {
2024-02-22 18:58:07 UTC	77	IN	Data Raw: 64 65 55 70 28 29 3b 0d 0a 7d 29 3b 0d 0a 24 28 27 62 6f 64 79 27 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 20 20 20 20 24 28 27 2e 6d 6e 62 78 73 27 29 2e 73 6c 69 64 65 55 70 28 29 3b 0d 0a 7d 29 3b 0d 0a Data Ascii: deUp();});$('body').click(function() { $('.mnbxs').slideUp();});

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Windows Analysis Report
https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:07 UTC	635	OUT	GET /cdewe4rewbvcfr4erwi/_Fm7-alert.mp3 HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-02-22 18:58:08 UTC	964	IN	HTTP/1.1 206 Partial Content Date: Thu, 22 Feb 2024 18:58:08 GMT Content-Type: audio/mpeg Content-Length: 200832 Connection: close last-modified: Thu, 22 Feb 2024 18:26:06 GMT x-rgw-object-type: Normal etag: "0116152611dd51432e852781f8cc7e82" x-amz-request-id: tx00000e9f955f2b911b1ba-0065d793b3-471b1f79-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1421 Content-Range: bytes 0-200831/200832 Set-Cookie: __cf_bm=VBuRotS4vXlJ6a4HJCYOC_sEAWEqyLcvS8.sZiJb6xk-1708628288-1.0-AX9hIepVnYNwQI5pI6qvYsTSGNG4qHKjT/PgGTvn+MJXfr+PDDHpFsVL+U6nTNPEdrZKYnNMJQmSSWAQgahv/C0=; path=/; expires=Thu, 22-Feb-24 19:28:08 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 859975700d3742de-EWR
2024-02-22 18:58:08 UTC	405	IN	Data Raw: 49 44 33 03 00 00 00 00 49 2a 54 50 45 31 00 00 00 26 00 00 00 49 56 4f 4e 41 20 52 65 61 64 65 72 20 2d 20 4d 69 63 72 6f 73 6f 66 74 20 5a 69 72 61 20 44 65 73 6b 74 6f 70 54 49 54 32 00 00 00 13 00 00 00 49 6d 70 6f 72 74 61 6e 74 20 53 65 63 75 72 69 74 79 54 41 4c 42 00 00 00 08 00 00 00 57 61 72 6e 69 6e 67 43 4f 4d 4d 00 00 00 15 00 00 00 00 00 00 00 4c 69 63 65 6e 73 65 3a 20 55 6e 6b 6e 6f 77 6e 54 52 43 4b 00 00 00 02 00 00 00 31 41 50 49 43 00 00 1c 97 00 00 00 69 6d 61 67 65 2f 70 6e 67 00 0b 49 56 4f 4e 41 20 52 65 61 64 65 72 00 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 64 00 00 00 64 08 06 00 00 00 70 e2 95 54 00 00 0a 4f 69 43 43 50 50 68 6f 74 6f 73 68 6f 70 20 49 43 43 20 70 72 6f 66 69 6c 65 00 00 78 da 9d 53 67 54 53 e9 Data Ascii: ID3I*TPE1&IVONA Reader - Microsoft Zira DesktopTIT2Important SecurityTALBWarningCOMMLicense: UnknownTRCK1APICimage/pngIVONA ReaderPNGIHDRddpTOiCCPPhotoshop ICC profilexSgTS
2024-02-22 18:58:08 UTC	1369	IN	Data Raw: 42 99 5c 01 80 84 01 c0 74 91 38 4b 08 80 14 00 40 7a 8e 42 a6 00 40 46 01 80 9d 98 26 53 00 a0 04 00 60 cb 63 62 e3 00 50 2d 00 60 27 7f e6 d3 00 80 9d f8 99 7b 01 00 5b 94 21 15 01 a0 91 00 20 13 65 88 44 00 68 3b 00 ac cf 56 8a 45 00 58 30 00 14 66 4b c4 39 00 d8 2d 00 30 49 57 66 48 00 b0 b7 00 c0 ce 10 0b b2 00 08 0c 00 30 51 88 85 29 00 04 7b 00 60 c8 23 23 78 00 84 99 00 14 46 f2 57 3c f1 2b ae 10 e7 2a 00 00 78 99 b2 3c b9 24 39 45 81 5b 08 2d 71 07 57 57 2e 1e 28 ce 49 17 2b 14 36 61 02 61 9a 40 2e c2 79 99 19 32 81 34 0f e0 f3 cc 00 00 a0 91 15 11 e0 83 f3 fd 78 ce 0e ae ce ce 36 8e b6 0e 5f 2d ea bf 06 ff 22 62 62 e3 fe e5 cf ab 70 40 00 00 e1 74 7e d1 fe 2c 2f b3 1a 80 3b 06 80 6d fe a2 25 ee 04 68 5e 0b a0 75 f7 8b 66 b2 0f 40 b5 00 a0 e9 da Data Ascii: B\t8K@zB@F&S`cbP-`'{[! eDh;VEX0fK9-0IWfH0Q){`##xFW<+*x<$9E[-qWW.(I+6aa@.y24x6_-"bbp@t~,/;m%h^uf@
2024-02-22 18:58:08 UTC	1369	IN	Data Raw: 67 58 cf 10 cf d8 33 e3 b6 13 cb 29 c4 69 9d 53 9b d3 47 67 17 67 b9 73 83 f3 88 8b 89 4b 82 cb 2e 97 3e 2e 9b 1b c6 dd c8 bd e4 4a 74 f5 71 5d e1 7a d2 f5 9d 9b b3 9b c2 ed a8 db af ee 36 ee 69 ee 87 dc 9f cc 34 9f 29 9e 59 33 73 d0 c3 c8 43 e0 51 e5 d1 3f 0b 9f 95 30 6b df ac 7e 4f 43 4f 81 67 b5 e7 23 2f 63 2f 91 57 ad d7 b0 b7 a5 77 aa f7 61 ef 17 3e f6 3e 72 9f e3 3e e3 3c 37 de 32 de 59 5f cc 37 c0 b7 c8 b7 cb 4f c3 6f 9e 5f 85 df 43 7f 23 ff 64 ff 7a ff d1 00 a7 80 25 01 67 03 89 81 41 81 5b 02 fb f8 7a 7c 21 bf 8e 3f 3a db 65 f6 b2 d9 ed 41 8c a0 b9 41 15 41 8f 82 ad 82 e5 c1 ad 21 68 c8 ec 90 ad 21 f7 e7 98 ce 91 ce 69 0e 85 50 7e e8 d6 d0 07 61 e6 61 8b c3 7e 0c 27 85 87 85 57 86 3f 8e 70 88 58 1a d1 31 97 35 77 d1 dc 43 73 df 44 fa 44 96 44 de Data Ascii: gX3)iSGggsK.>.Jtq]z6i4)Y3sCQ?0k~OCOg#/c/Wwa>>r><72Y_7Oo_C#dz%gA[z\|!?:eAAA!h!iP~aa~'W?pX15wCsDDD
2024-02-22 18:58:08 UTC	1369	IN	Data Raw: c4 ec 89 fe 11 31 46 4a 48 21 80 78 a2 35 4d 83 61 1a b0 0c 13 ba 61 c2 b2 4c 58 96 05 d3 34 a3 6e 18 30 e2 f7 96 65 c1 30 f4 84 66 2a 38 83 02 ca cc 14 04 09 70 c1 db 98 10 86 21 38 e7 08 e2 c9 0f 43 86 30 08 10 c4 3d 0c 43 08 29 00 29 97 01 88 a7 90 44 1a 01 ac 25 a0 e8 d1 c4 5b 26 2c d3 82 6d 5b 30 cd 08 14 cb 34 60 5a 16 cc f8 ff 0c c3 48 c0 8a d8 a5 27 62 6e 10 c0 98 59 81 91 b0 21 06 c1 f7 fd a4 07 61 88 30 08 a2 ff 63 21 58 c8 10 86 0c 8c 85 60 8c b5 8b ac 04 00 0d 52 0a c4 74 81 a6 01 52 02 9a ae 43 d7 34 e8 ba 06 dd 34 60 ea c4 10 03 96 65 c3 34 4d d8 96 05 cb b2 60 d9 36 2c cb 42 a1 50 80 6d db b0 6d 3b 01 68 50 e2 cc cc 14 8c 90 21 08 03 f8 be 0f cf f3 d0 6a b5 e0 79 1e 3c cf 83 ef fb 11 6b 38 07 63 21 38 8b 5e a5 90 10 52 42 70 0e 41 0c 49 80 Data Ascii: 1FJH!x5MaaLX4n0e0f*8p!8C0=C))D%[&,m[04`ZH'bnY!a0c!X`RtRC44`e4M`6,BPmm;hP!jy<k8c!8^RBpAI
2024-02-22 18:58:08 UTC	1369	IN	Data Raw: 30 6b 49 5c a5 9f b5 97 22 ba a7 a1 93 34 2b d6 52 4c ab d3 c2 cb 65 29 69 1a 8c 4e 7e c8 5a d2 25 2a 18 fd d8 bc d3 53 73 a8 1b 75 d7 02 4b ee 54 a8 91 2b a5 ae c6 77 d2 9f f5 23 ab 96 07 e5 de af c5 d6 f3 68 ef 5a d3 1f 69 10 d4 7c 48 3f b2 86 5f 38 85 db c9 39 ea 04 d0 5a f1 41 d2 d5 8a b9 ca a9 a7 27 3a 3d 48 35 0c bf 16 42 27 6a 62 2a cd 90 5e 19 2f 3d d5 21 dd 2c af b5 d2 d4 34 b5 ba 71 a7 97 49 aa 9e 9b bd 6b b5 a9 15 f1 e9 7d ed b9 53 ea e9 53 da d6 32 40 ab 85 df 73 e5 87 74 0a 25 f4 fb d4 83 41 b5 6e 8e 61 2e c2 ef e9 c0 22 05 17 09 94 b5 92 57 57 2b 30 75 5d 5f 71 02 5d 6e 1c 43 75 90 86 61 c4 e7 18 0e f6 54 b6 7e 88 29 9a f8 e4 ec c6 b8 53 00 35 77 80 10 18 e9 4d f6 c3 1e cf 52 c7 4d 00 58 74 44 60 bc f8 72 15 ed 55 29 4c 60 d8 f1 89 6d 6b 41 Data Ascii: 0kI\"4+RLe)iN~Z%SsuKT+w#hZi\|H?_89ZA':=H5B'jb^/=!,4qIk}SS2@st%Ana."WW+0u]_q]nCuaT~)S5wMRMXtD`rU)L`mkA
2024-02-22 18:58:08 UTC	1369	IN	Data Raw: 4d 7f 1e 6e b0 04 3f 68 c0 32 4b f8 f4 92 86 9d 3b 77 62 72 72 12 00 e0 79 1e ce 9e 3d 8b f7 de 7b 0f d3 bf 5d 40 a3 55 83 90 dd f5 8f ae 59 58 ba a1 61 64 64 04 c5 62 31 7b 40 28 1c 4f 11 60 c3 30 fa 72 12 c2 bd 8a 2b c3 30 b0 73 e7 4e 04 41 80 73 a7 6a 60 a1 01 2f 6c a2 e9 d6 51 5a 67 63 74 e3 18 46 37 8f 63 64 cc c0 e6 89 0a 6e 5e 59 c4 d7 be 79 1f 1c c7 41 ad 56 c3 eb af bf 8e 53 a7 4e 61 e2 cb 4d 94 77 5f c6 ed 46 d8 75 d1 49 09 ac 2f 6d c6 e5 f7 05 f6 4f 4e a0 52 a9 64 03 08 39 89 86 61 b4 5d c4 45 e6 6f 5e 42 29 94 f1 db b6 6d 1b ee bb ef be 36 9d 27 84 80 ef fb a8 d5 6a 49 af 5f ae e3 a1 07 a7 30 35 35 85 6a b5 8a 97 5e 7a 09 a7 4e 9d c2 03 bf 0e 4c 7e 6d 06 37 96 3e 5b c5 be 92 80 d4 b0 51 fb 0a 66 de 5b c2 b7 1e fd 45 38 8e 93 1d 20 69 47 31 9d Data Ascii: Mn?h2K;wbrry={]@UYXaddb1{@(O`0r+0sNAsj`/lQZgctF7cdn^YyAVSNaMw_FuI/mONRd9a]Eo^B)m6'jI_055j^zNL~m7>[Qf[E8 iG1
2024-02-22 18:58:08 UTC	1369	IN	Data Raw: 7d 08 00 51 c1 a0 bd 79 ae eb 26 35 5a 59 de b1 4e bf 9f 7c 04 df f7 e1 ba 6e 5b b0 93 4a 95 d2 3e 84 44 5c bd d8 bd c6 07 82 df 33 1e d9 32 84 00 21 30 28 fc 4e 49 aa ac d9 a1 69 5a c2 90 56 ab 85 46 a3 b1 62 5b 77 fa e8 74 a7 50 c4 d8 e8 b6 55 ad 2c db 2c c0 91 c5 7b 7a 8e 4c 19 c2 39 4f e4 35 01 42 09 aa ac d8 91 fe 3b a4 47 28 c7 af 56 58 d2 9e 16 00 b0 2c 0b 63 63 63 78 e7 ad 06 0a 23 db 61 a2 bb ce 93 d0 f1 f3 7a 03 07 1e 19 4b 2a 56 72 09 88 aa 40 89 25 41 10 b4 f9 25 59 06 18 55 96 e8 ba 0e d7 75 db 72 35 8e e3 24 16 57 b1 58 c4 b1 63 c7 b0 61 c3 06 34 1a 8d 3b fe ee 4a a5 82 43 87 0e ad 9a 1d ec d4 fe 0f a3 d6 83 ca ff 00 51 0c 00 00 00 00 49 45 4e 44 ae 42 60 82 54 43 4f 4e 00 00 00 07 00 00 00 53 70 65 65 63 68 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: }Qy&5ZYN\|n[J>D\32!0(NIiZVFb[wtPU,,{zL9O5B;G(VX,cccx#azK*Vr@%A%YUur5$WXca4;JCQIENDB`TCONSpeech
2024-02-22 18:58:08 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:
2024-02-22 18:58:08 UTC	1369	IN	Data Raw: 2b d7 a2 bf be 5c e5 7e 53 de a4 ce ef e5 d9 fc 24 4c 21 f9 68 0f 50 b0 c0 b1 80 71 7b f5 ed b6 26 ce 9e 8d 41 81 b1 46 5e e0 80 89 96 08 22 ca 42 93 04 41 d1 41 c7 28 54 92 8a 63 28 22 bc 3f 0d 27 c4 aa 13 4f 02 b5 b8 7d 23 c6 00 05 81 a2 61 7b 59 1a 96 a3 ba d0 08 71 0e da b9 3d 8d 9e d5 9e 5d f3 1f 2c de 1f fb d7 3f d0 52 1f 2e 9d e9 45 2e 76 ec 65 af cd ae 56 b4 15 ff ff f2 69 88 29 a8 a6 65 c7 26 e0 ff f3 80 c4 00 2e ea aa 84 07 dc c0 01 0f 80 06 7b 03 83 c8 4b 10 05 4c 38 81 34 84 e0 c8 21 21 21 55 08 c8 08 50 90 64 40 5a 00 60 a1 50 11 71 81 d0 70 c1 cc 4a 4f 22 1d 04 a6 06 78 ce 50 25 45 ae eb 16 e7 02 59 c7 95 58 86 1d b9 61 db 7c a2 ed 6d 0c d1 fc 30 12 b7 89 52 96 b8 cf 28 1a 76 54 c3 99 d0 28 d0 f4 bb ea 34 e6 4b 4b dc b4 99 d2 fc f2 72 c3 0e Data Ascii: +\~S$L!hPq{&AF^"BAA(Tc("?'O}#a{Yq=],?R.E.veVi)e&.{KL84!!!UPd@Z`PqpJO"xP%EYXa\|m0R(vT(4KKr
2024-02-22 18:58:08 UTC	1369	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f3 80 c4 00 23 b2 ae 68 7f 5a 48 01 00 bb 9d b2 ce 01 bf 95 03 b1 04 ab 35 89 0e f8 33 3c 2a 6d dd 6b 80 51 80 60 cd b7 64 ad 89 83 5f ee a5 6e ed ed eb 38 ce fb b2 22 66 a3 69 82 24 b4 a4 c2 ac 30 e6 48 a3 53 c2 81 78 3d a5 f3 7e cd a5 7c 63 a4 31 f1 88 88 9a 94 64 e0 9a a5 0e 85 0c 67 04 4d 4d 35 54 44 69 a5 b0 86 29 c1 67 3d 08 e9 46 d0 ab b5 3d b9 79 ac 8b c3 de 78 fd cc f5 14 a7 39 4e b2 e6 94 93 43 69 61 65 c8 6a 45 45 26 24 85 43 4a 58 a5 a6 8d 3b 98 f1 31 05 35 14 cc b8 e4 dc 80 a1 89 95 d1 84 a4 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff f3 80 c4 00 2c da ff 72 7f 8f 7f fd 00 00 32 cc e8 ee 70 4b 9c fa 7b 76 d7 50 03 9a b5 ac fd Data Ascii: #hZH53<*mkQ`d_n8"fi$0HSx=~\|c1dgMM5TDi)g=F=yx9NCiaejEE&$CJX;15,r2pK{vP

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:08 UTC	628	OUT	GET /cdewe4rewbvcfr4erwi/ai2.mp3 HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-02-22 18:58:08 UTC	896	IN	HTTP/1.1 404 Not Found Date: Thu, 22 Feb 2024 18:58:08 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Thu, 22 Feb 2024 18:26:06 GMT x-rgw-object-type: Normal x-amz-request-id: tx00000f7dacf781d6e310e-0065d7936d-471b1f79-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 404 CF-Cache-Status: HIT Age: 1491 Set-Cookie: __cf_bm=CSO03uvQRycJ7YImstjfqSbuq7cB3j3fHAFsY30HG6o-1708628288-1.0-AQwiumYp7jV6vtq2Z1xq2MktJoNZDULPb2y9L6/7NNSGKSK/8o4y3AmcffbNF957c9OR3/aovBzAj2ouRtw0YoE=; path=/; expires=Thu, 22-Feb-24 19:28:08 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 859975723bae17e5-EWR
2024-02-22 18:58:08 UTC	473	IN	Data Raw: 33 66 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 Data Ascii: 3fb<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Not Found</title> <style> html { font-family: Arial, sans-serif;
2024-02-22 18:58:08 UTC	553	IN	Data Raw: 2d 62 6f 74 74 6f 6d 3a 20 32 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 70 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 37 64 37 64 37 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 37 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 Data Ascii: -bottom: 2rem; } h1 { font-weight: 700; font-size: 4.5rem; } p { color: #7d7d7d; font-size: 1.75rem; } @media screen and (max-width: 768px) { ht
2024-02-22 18:58:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:08 UTC	629	OUT	GET /cdewe4rewbvcfr4erwi/webs.mp4 HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept-Encoding: identity;q=1, ;q=0 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: /* Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: audio Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Language: en-US,en;q=0.9 Range: bytes=0-
2024-02-22 18:58:08 UTC	957	IN	HTTP/1.1 206 Partial Content Date: Thu, 22 Feb 2024 18:58:08 GMT Content-Type: video/mp4 Content-Length: 8405 Connection: close last-modified: Thu, 22 Feb 2024 18:26:07 GMT x-rgw-object-type: Normal etag: "8618fbb0911e3b8fc96725dee8bfd81f" x-amz-request-id: tx00000b21a1447d3ed78b0-0065d793b3-471ae006-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1421 Content-Range: bytes 0-8404/8405 Set-Cookie: __cf_bm=iUeRJ2DmMxT8LvjdrtrrYtDpPbITvPM2EmYvC7Bg01E-1708628288-1.0-AUV+gHWlwQaWfgSYX3/mgZtaClK22TLsScJBlsdcWUWCWebu1d367yVpnYgRtaFp+LvcqmyHX9sXfcF3OnKt/6o=; path=/; expires=Thu, 22-Feb-24 19:28:08 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8599757249624251-EWR
2024-02-22 18:58:08 UTC	412	IN	Data Raw: 49 44 33 04 00 00 00 00 00 3f 54 50 45 31 00 00 00 1c 00 00 03 53 6f 75 6e 64 4a 61 79 2e 63 6f 6d 20 53 6f 75 6e 64 20 45 66 66 65 63 74 73 00 54 53 53 45 00 00 00 0f 00 00 03 4c 61 76 66 35 34 2e 32 39 2e 31 30 34 00 ff fb 40 c0 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 49 6e 66 6f 00 00 00 07 00 00 00 27 00 00 20 8c 00 0b 0b 12 12 12 18 18 1f 1f 1f 25 25 2c 2c 2c 32 32 38 38 38 3f 3f 3f 45 45 4c 4c 4c 52 52 59 59 59 5f 5f 65 65 65 6c 6c 6c 72 72 79 79 79 7f 7f 85 85 85 8c 8c 92 92 92 99 99 9f 9f 9f a6 a6 a6 ac ac b2 b2 b2 b9 b9 bf bf bf c6 c6 cc cc cc d3 d3 d3 d9 d9 df df df e6 e6 ec ec ec f3 f3 f9 f9 f9 ff ff 4c 61 76 66 35 34 2e 32 39 2e 31 30 34 00 00 00 00 00 00 00 00 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: ID3?TPE1SoundJay.com Sound EffectsTSSELavf54.29.104@Info' %%,,,22888???EELLLRRYYY__eeelllrryyyLavf54.29.104$
2024-02-22 18:58:08 UTC	1369	IN	Data Raw: 4d f2 05 01 ff ed f2 ef ff 45 84 ca 1c cb c4 e5 c1 f0 41 cf 13 ff b5 09 10 42 b8 cd c0 ac f8 d7 04 83 86 91 40 9a 66 0f fe a4 d3 00 c5 ae a3 73 12 94 c4 ff fb 52 c4 37 80 0a 24 b6 f8 14 94 00 02 66 b2 e6 c3 39 40 00 b9 04 00 6d 00 6d c9 de 88 b7 95 40 d2 1c 03 00 10 0c 88 bf 20 e2 c6 4c 17 c0 cc 20 03 29 78 0e a1 81 0b ff d4 62 82 66 65 0f cd 10 44 dc dd 84 07 0a 04 06 db 87 a0 20 30 ce ff 4d d1 4d f1 f8 42 61 5d 1b e0 63 c0 8e 22 a7 ff ee f7 41 79 f1 5a 09 d8 68 95 ff ff d9 bc ac 55 27 ca c4 b0 94 c5 10 d8 b8 7d bf ff ff ed f5 14 cf 9b 9a 17 d3 2e 17 ce 8c e0 ec 40 e7 ff ff ff ae f8 00 20 30 4d e0 16 1a d7 67 21 aa d0 0a a5 53 58 0c 28 05 01 06 47 5d e7 3a 0a 18 00 1a 24 01 87 5e 22 a1 16 20 c4 f1 b2 2c 64 93 24 92 59 b1 16 27 8c 04 2c 03 d4 00 33 51 00 Data Ascii: MEAB@fsR7$f9@mm@ L )xbfeD 0MMBa]c"AyZhU'}.@ 0Mg!SX(G]:$^" ,d$Y',3Q
2024-02-22 18:58:08 UTC	1369	IN	Data Raw: d3 5c d0 95 03 68 4d 16 4e 8d 15 d5 ff fa 96 48 02 a9 d4 df ff ff 91 b6 fb ff ff 97 2b 6f 5b 7f ff 93 b2 82 9c b0 81 ac 38 60 00 7f eb fd ef 90 30 78 65 c1 98 67 e3 17 a3 3f 00 e2 04 3c c0 e9 3e 78 dd 03 64 4a a5 69 cd b3 7b a8 cc 12 38 05 a6 9a 3d b5 a9 ff fd 3b 8a e0 38 e9 e5 4b 9f ff fe 5d 01 70 f2 4c 4f bf ff fe 54 16 0c 93 2f db ff f9 c1 87 bb 2f 54 ff ff f5 11 76 ed 3d ff fe 48 e4 66 4a 92 06 79 90 28 04 90 35 fd fe bd f0 2b ff fb 52 c4 07 80 0b c9 8b 47 ee 4d 4d c1 78 31 68 bd c9 b5 b9 67 60 ab 96 69 aa 95 24 80 60 cd 00 e5 8e 82 0e 66 54 4c b8 5f 4e cb a4 eb cf b6 74 25 80 e5 50 d3 b2 68 7f fb 9f 65 87 70 52 a8 64 ff ff fb 97 04 40 11 32 c3 cb 7f ff d0 57 04 13 2c 9e df ff c8 c0 ac d6 ed 7f ff ea 2d 6d de df ff e3 ea 11 9a 5c c1 1e 58 08 00 00 0e Data Ascii: \hMNH+o[8`0xeg?<>xdJi{8=;8K]pLOT//Tv=HfJy(5+RGMMx1hg`i$`fTL_Nt%PhepRd@2W,-m\X
2024-02-22 18:58:08 UTC	1369	IN	Data Raw: fb 7f ff 51 23 57 d5 ff ff 2e 28 22 26 54 1a 29 d0 c9 32 c2 ff 3a 5f 14 06 98 c0 27 c4 81 ff fb 52 c4 32 80 0a 39 89 53 ed 35 ad c1 52 31 6d 3c f6 c1 be f9 b8 14 e0 96 e3 c0 97 38 39 09 72 e1 8a 28 46 8f 47 7f 22 0d ff 5d 1f 6f f7 c7 c0 f2 ca 9e ff ff d1 35 16 90 df 0d 72 8f ff ff a0 34 9c eb 9a 3e af ff b2 a4 68 7c 9f ed ff fe 6d fd 5f ff f3 3a 2a 07 69 95 06 89 88 33 92 d7 36 a6 42 0c d8 cc 09 dc 56 c6 62 b8 13 a1 45 06 c1 6c 44 0c 02 fc b2 b9 14 5c f6 62 7d d6 75 05 3f db db fd ea 08 85 f5 4d ff ff fc c0 1f 5b 39 ed ff fc 68 09 c2 2b a5 d5 ff fa e4 c0 bc ff b7 ff f9 a5 5e f7 ff ff 2a a1 a1 b2 8c 1e 32 18 e1 52 09 d7 e5 f8 be 50 fb 7b 4e f4 55 78 08 65 44 a8 a9 c5 20 4d 9a 13 86 e8 24 82 ef ed a1 d8 67 c2 ff fb 52 c4 3d 00 0a 39 8b 67 e8 a9 ad d1 4f 31 Data Ascii: Q#W.("&T)2:_'R29S5R1m<89r(FG"]o5r4>h\|m_:i36BVbElD\b}u?M[9h+^2RP{NUxeD M$gR=9gO1
2024-02-22 18:58:08 UTC	1369	IN	Data Raw: ff f7 04 df 7f ff ff 38 3e df ff ff f0 b3 fe ff ff e5 f7 fb ff ff 96 09 99 a7 07 9a 98 3b 72 34 bf b5 d2 08 7a f2 4f 23 f9 60 9b b6 0a ce 16 86 87 85 d8 f1 8e 24 2a 71 2a 39 ae f9 9b ca 8a 7e c8 a8 96 43 13 f7 c3 c0 53 54 d7 ff fe e7 8d 43 48 5a 96 a9 76 d7 43 ff f4 04 1c 41 d2 51 f4 bd ff fe b9 c0 e7 ff 5b ff ff 94 37 ff ff fc fa 08 ab b6 05 bd 80 38 4c a6 3f fb d8 01 ff fb 52 c4 5b 00 0a 21 89 4f ed c9 4d c1 5e b1 2e 3c f5 35 be b7 8e 3c 6d 51 e7 9c 62 62 87 83 e9 b3 83 bc 9c 2f 94 4e 1a 9f 3c ad 4a 52 d5 b7 50 4f 0d 89 3d b7 ed 75 3f ef 58 d6 20 fb 1b 7f ff ea 35 1d 21 76 22 ec 5e ff ff f6 21 6a 75 ff ff f9 d2 0c cd 56 eb 7f ff ea 29 ef ff ff f9 a0 3b dd a0 23 5c 01 41 34 11 ff ce 4d 3c ee 83 97 0d 36 79 43 5b 11 3d 0b ce c8 07 3c d0 dc 9b 65 b2 d0 a1 Data Ascii: 8>;r4zO#`$q9~CSTCHZvCAQ[78L?R[!OM^.<5<mQbb/N<JRPO=u?X 5!v"^!juV);#\A4M<6yC[=<e
2024-02-22 18:58:08 UTC	1369	IN	Data Raw: 66 da 49 53 c3 39 cd f1 c6 ff fb 52 c4 86 80 0a b5 89 4b ed cd ad c1 59 31 2a 7d a6 b5 b8 65 a8 0e 61 6b 0c f1 8c 6c 03 cf 60 80 e3 c0 a2 0b b2 46 1e 14 2c 63 e8 9b 78 8e 34 fb af 46 a9 9f be 18 05 ea 21 2e df ff fd 98 77 82 69 35 cf 7f ff f9 90 b4 65 32 ff ff f5 28 e8 e4 76 ab 75 37 ff f5 13 6b fd bf ff cb ca bf fc 83 ff c1 54 9a 3b 5d 50 96 06 06 60 70 a2 34 cb 80 58 07 3e 26 58 05 01 21 b8 8c 3a 78 c0 9c 70 78 74 e2 3d 26 cd 23 f5 f7 af ff 38 97 37 ff ff 60 a3 73 76 76 bd e7 3d 6c ec a4 01 13 ff ff fd 40 7f ff ff e6 a9 7d bf ff 56 06 02 84 19 65 e2 ba 50 b6 d2 ee 46 4d 04 83 91 48 d4 57 1a 04 d1 c0 be 70 5f 2f 9c 2a 74 e9 bc da cc f6 79 6b 43 ff fb 52 c4 8e 80 0a 3d 8b 75 e7 a9 ad f1 62 31 2d bc f5 35 be 30 67 47 8c a5 ac 72 65 e5 5a b2 fa ac b0 57 68 Data Ascii: fIS9RKY1}eakl`F,cx4F!.wi5e2(vu7kT;]P`p4X>&X!:xpxt=&#87`svv=l@}VePFMHWp_/tykCR=ub1-50gGreZWh
2024-02-22 18:58:08 UTC	1148	IN	Data Raw: aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa ff fb 52 c4 a1 83 c0 00 01 a4 00 00 00 20 00 00 34 80 00 00 04 aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa 4c 41 4d 45 33 2e 39 39 2e 35 aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa aa Data Ascii: R 4LAME3.99.5

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:09 UTC	385	OUT	GET /cdewe4rewbvcfr4erwi/vsc.png HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:09 UTC	931	IN	HTTP/1.1 200 OK Date: Thu, 22 Feb 2024 18:58:09 GMT Content-Type: image/png Content-Length: 722 Connection: close last-modified: Thu, 22 Feb 2024 18:26:07 GMT x-rgw-object-type: Normal etag: "42d8f2cc1ae5759c2369f255f36ebc03" x-amz-request-id: tx00000686d993bc519710e-0065d79292-471ae006-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 200 CF-Cache-Status: HIT Age: 1711 Accept-Ranges: bytes Set-Cookie: __cf_bm=aN.uCVI8NyVSHBaJcU0QLJryL3TSmkvWpPW.u0nDOSw-1708628289-1.0-AXV2uyFACMkEAtApZr0LG/n+dA+QomuG4dDO7TFMmHIYVie4g9w/1IWD+eO7jQByByvb4/qt/hINn7JArwRpBlk=; path=/; expires=Thu, 22-Feb-24 19:28:09 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 859975778dc8728a-EWR
2024-02-22 18:58:09 UTC	438	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 80 00 00 00 80 01 03 00 00 00 f9 f0 f3 88 00 00 00 06 50 4c 54 45 00 00 00 00 00 00 a5 67 b9 cf 00 00 00 01 74 52 4e 53 00 40 e6 d8 66 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 02 65 49 44 41 54 78 5e c5 95 bd 6e dc 30 0c 80 29 08 a8 3a 45 7d 80 e0 f4 1a 19 0e f6 2b 65 f4 70 c8 09 b8 a1 63 5e 49 41 87 be 06 83 0e 59 95 cd 83 61 d6 3c 51 c7 8b b9 b7 c6 1d 6c 7f 96 28 fe 13 e4 72 19 be 5e be fc 0b 10 70 b7 80 e8 eb 92 33 d1 ba 5b f0 75 49 a2 8f 0f 9a ef 77 cc be a4 55 81 a3 ec 8b 23 b5 2f 2c ac c7 88 2a 02 61 5c 20 cc 2a 22 07 22 74 2a 64 6d 7a 9c 3b 70 73 d3 23 75 a9 a1 06 f2 85 30 a2 80 58 62 f5 fc af 02 52 0e ac 07 ba 7e cc d8 fd b1 08 38 75 30 08 98 7b 5c 92 9c da 65 41 Data Ascii: PNGIHDRPLTEgtRNS@fpHYseIDATx^n0):E}+epc^IAYa<Ql(r^p3[uIwU#/,a\ ""t*dmz;ps#u0XbR~8u0{\eA
2024-02-22 18:58:09 UTC	284	IN	Data Raw: 39 cc 10 04 04 ba d4 f8 76 c1 06 3e 91 cb 05 03 fd 2a 10 5e 37 f0 7e 05 c5 5f c1 4f 01 6f 04 40 97 06 1c 6f 29 03 c0 c9 f3 96 cc 69 bf 01 89 26 97 00 11 e5 0e 1c 11 19 60 b6 88 50 9f 5d 11 a1 f0 ae 40 f5 28 1b ba 81 cf 7b f0 2a c6 15 87 81 03 d3 ad 4d e8 88 d4 fc 0a d4 00 3b a8 bb d0 6f a0 b9 50 9c cc 0e 48 a9 39 79 7a 76 38 85 e2 b1 85 41 02 15 b3 ab c3 7d 28 23 40 bd 0f 65 fa b6 dd 5b b0 35 1d 4e 75 97 30 a3 82 56 98 23 36 20 49 07 90 38 e9 34 2d 01 34 2d d9 7b 1c 97 c2 47 de 52 bb 06 49 ed 9e fc eb b9 25 bf 29 0f 01 11 ce 2b 54 06 a6 c4 4c 11 9a 32 b5 85 6c 4b dd 36 03 db 2e 06 05 47 d3 72 6c 53 b2 6d cb 36 36 db fa 6c 73 d4 f6 19 f7 0d f6 61 df 82 61 d7 a4 3b d0 36 5e f6 8d be 98 51 60 87 85 1d 27 76 e0 d8 91 64 87 96 1d 6b 76 f0 d9 d1 68 87 a7 1d af Data Ascii: 9v>^7~_Oo@o)i&`P]@({M;oPH9yzv8A}(#@e[5Nu0V#6 I84-4-{GRI%)+TL2lK6.GrlSm66lsaa;6^Q`'vdkvh

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:09 UTC	669	OUT	GET /cdewe4rewbvcfr4erwi/w3.png HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:09 UTC	896	IN	HTTP/1.1 404 Not Found Date: Thu, 22 Feb 2024 18:58:09 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Thu, 22 Feb 2024 18:26:06 GMT x-rgw-object-type: Normal x-amz-request-id: tx00000ec6793b3d68992a8-0065d793b4-471ae006-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 404 CF-Cache-Status: HIT Age: 1421 Set-Cookie: __cf_bm=iEEpm3CibWsvAKmdAuzA7XWTOttMStHMSeDow8idfzA-1708628289-1.0-AX5ppxxFtP+fmypxVOJTWa9N+v4lfH20czM+tpywEtN1NnVKxQ6bdmhNda1iyAiSflz/nIresxCxcIsVDwfj/Qs=; path=/; expires=Thu, 22-Feb-24 19:28:09 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 859975788d88427f-EWR
2024-02-22 18:58:09 UTC	473	IN	Data Raw: 33 66 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 Data Ascii: 3fb<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Not Found</title> <style> html { font-family: Arial, sans-serif;
2024-02-22 18:58:09 UTC	553	IN	Data Raw: 2d 62 6f 74 74 6f 6d 3a 20 32 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 70 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 37 64 37 64 37 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 37 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 Data Ascii: -bottom: 2rem; } h1 { font-weight: 700; font-size: 4.5rem; } p { color: #7d7d7d; font-size: 1.75rem; } @media screen and (max-width: 768px) { ht
2024-02-22 18:58:09 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:10 UTC	669	OUT	GET /cdewe4rewbvcfr4erwi/w1.png HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:10 UTC	896	IN	HTTP/1.1 404 Not Found Date: Thu, 22 Feb 2024 18:58:10 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Thu, 22 Feb 2024 18:26:06 GMT x-rgw-object-type: Normal x-amz-request-id: tx00000f4a67708e70bd0af-0065d792ed-471b1f79-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 404 CF-Cache-Status: HIT Age: 1620 Set-Cookie: __cf_bm=30GPeh.f.lpOgXm6pjj.J1XWG16gtkPDEeH7Eh41.MQ-1708628290-1.0-AdgKLx/Qe7I63TGowU9XzCNzQiV/CdoxavnKZQnmUUwbZXsrdM9m/lR7EdR4fM9pK4PM5NbdsyJV4H9uUuzZmE0=; path=/; expires=Thu, 22-Feb-24 19:28:10 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 8599757ebc7443a4-EWR
2024-02-22 18:58:10 UTC	473	IN	Data Raw: 33 66 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 Data Ascii: 3fb<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Not Found</title> <style> html { font-family: Arial, sans-serif;
2024-02-22 18:58:10 UTC	553	IN	Data Raw: 2d 62 6f 74 74 6f 6d 3a 20 32 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 70 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 37 64 37 64 37 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 37 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 Data Ascii: -bottom: 2rem; } h1 { font-weight: 700; font-size: 4.5rem; } p { color: #7d7d7d; font-size: 1.75rem; } @media screen and (max-width: 768px) { ht
2024-02-22 18:58:10 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:18 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-02-22 18:58:18 UTC	493	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0758) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=1613 Date: Thu, 22 Feb 2024 18:58:18 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:18 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-02-22 18:58:18 UTC	454	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 Cache-Control: public, max-age=1752 Date: Thu, 22 Feb 2024 18:58:18 GMT Content-Length: 55 Connection: close X-CID: 2
2024-02-22 18:58:18 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:21 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=M9yBtbeuV+suPwL&MD=owPnxyBp HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-02-22 18:58:21 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 658839db-cd64-4a6c-939f-b1b7080b8424 MS-RequestId: d19b88ba-5a26-4b2e-93b9-232ed1a0bd1b MS-CV: 39c1h36A4E2Fs/IS.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Thu, 22 Feb 2024 18:58:20 GMT Connection: close Content-Length: 24490
2024-02-22 18:58:21 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-02-22 18:58:21 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	Bytes transferred	Direction	Data
2024-02-22 18:58:41 UTC	669	OUT	GET /cdewe4rewbvcfr4erwi/w3.png HTTP/1.1 Host: shark-app-9uouf.ondigitalocean.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://shark-app-9uouf.ondigitalocean.app/cdewe4rewbvcfr4erwi/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-02-22 18:58:41 UTC	896	IN	HTTP/1.1 404 Not Found Date: Thu, 22 Feb 2024 18:58:41 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close last-modified: Thu, 22 Feb 2024 18:26:06 GMT x-rgw-object-type: Normal x-amz-request-id: tx00000e2713c9ce6c35524-0065d79390-471ae006-ams3c vary: Origin, Access-Control-Request-Headers, Access-Control-Request-Method x-envoy-upstream-healthchecked-cluster: cache-control: public,max-age=10,s-maxage=86400 x-do-app-origin: bcd0d0df-aa37-4fc1-a780-7d25401dc66f x-do-orig-status: 404 CF-Cache-Status: HIT Age: 1489 Set-Cookie: __cf_bm=MzWyYox1CmM9Xy5jEH533q3fpM5kbVfsXLw.DwKpI.w-1708628321-1.0-AaxdQz2BY2mVFh0N07O8aLPjKyx6AITaQ5I+arARQMQPaeWdht+KW7GfR80d8uG2We8eAiIqebXpocn+DgI0qx0=; path=/; expires=Thu, 22-Feb-24 19:28:41 GMT; domain=.ondigitalocean.app; HttpOnly; Secure; SameSite=None Server: cloudflare CF-RAY: 859976415bae0f7c-EWR
2024-02-22 18:58:41 UTC	473	IN	Data Raw: 33 66 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 0a 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 20 20 68 74 6d 6c 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 20 20 20 20 20 20 20 Data Ascii: 3fb<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Not Found</title> <style> html { font-family: Arial, sans-serif;
2024-02-22 18:58:41 UTC	553	IN	Data Raw: 2d 62 6f 74 74 6f 6d 3a 20 32 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 68 31 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 37 30 30 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 34 2e 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 70 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6c 6f 72 3a 20 23 37 64 37 64 37 64 3b 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 37 35 72 65 6d 3b 0a 20 20 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 20 20 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 68 74 Data Ascii: -bottom: 2rem; } h1 { font-weight: 700; font-size: 4.5rem; } p { color: #7d7d7d; font-size: 1.75rem; } @media screen and (max-width: 768px) { ht
2024-02-22 18:58:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0