Edit tour

Windows Analysis Report
https://cbnotifser.top/zkl1rest

Overview

General Information

Sample URL:	https://cbnotifser.top/zkl1rest
Analysis ID:	1458604
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Detected suspicious crossdomain redirect

Found iframes

HTML body contains low number of good links

HTML body with high number of embedded SVGs detected

HTML title does not match URL

HTTP GET or POST without a user agent

Suspicious form URL found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3152 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5252 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2484 --field-trial-handle=2452,i,14397704435342316106,12805535537861400111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5720 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6296 --field-trial-handle=2452,i,14397704435342316106,12805535537861400111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 412 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6592 --field-trial-handle=2452,i,14397704435342316106,12805535537861400111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6500 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cbnotifser.top/zkl1rest" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /check_ispaid.php HTTP/1.1Host: bitmaincontrol.topConnection: keep-aliveContent-Length: 45sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: */*Content-Type: application/x-www-form-urlencoded; charset=UTF-8X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://bitmaincontrol.topSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://bitmaincontrol.top/payform/2384x2/03a4/0374z2/?csrf=ee2cdAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=0c45sq1niuatc33oob9e8ms0am; u=2384x2; o=03a4; p=0374z2; backl=https%3A%2F%2Fbitmaincontrol.top%2Fpayform%2F2384x2%2F03a4%2F0374z2%2F%3Fcsrf%3Dee2cd

Source: https://cbnotifser.top/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://bitmaincontrol.top/pay/0374z2	Avira URL Cloud: Label: malware
Source: https://bitmaincontrol.top/forms/form_1/fonts/fa/css/font-awesome.min.css	Avira URL Cloud: Label: malware
Source: https://cbnotifser.top/css/style.css	Avira URL Cloud: Label: phishing
Source: https://cbnotifser.top/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Ew-.ttf	Avira URL Cloud: Label: phishing
Source: https://cbnotifser.top/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM70w-.ttf	Avira URL Cloud: Label: phishing

Source: https://bitmaincontrol.top	LLM: Score: 8 brands: Bitcoin Reasons: The URL 'https://bitmaincontrol.top' is suspicious as it does not match the legitimate domain 'bitcoin.org' associated with Bitcoin. The webpage requests personal information such as name, email, and phone number, which is a common phishing tactic. The page also includes instructions on how to buy Bitcoin from various services, which could be used to mislead users. The presence of a 'Pay' button and the use of social engineering techniques to guide users into providing sensitive information further indicate phishing. The domain name 'bitmaincontrol.top' does not align with any known legitimate Bitcoin-related services, increasing the suspicion. DOM: 2.2.pages.csv
Source: https://bitmaincontrol.top	LLM: Score: 8 brands: Bitcoin Reasons: The URL 'bitmaincontrol.top' is suspicious and does not match the legitimate domain 'bitcoin.com' associated with Bitcoin. The site requests personal information (name, email, phone) which is a common phishing tactic. The presence of a 'Pay' button and instructions on how to buy Bitcoin, along with links to external sites (MoonPay, Coingate), are indicative of social engineering techniques to mislead users. The domain name 'bitmaincontrol.top' is not associated with any known legitimate Bitcoin services, increasing the likelihood of it being a phishing site. DOM: 2.3.pages.csv

Source: https://www.moonpay.com/buy/btc	HTTP Parser: Iframe src: https://buy.moonpay.com/?theme=light&colorCode=%237d00ff&language=en&apiKey=pk_live_R5Lf25uBfNZyKwccAZpzcxuL3ZdJ3Hc&defaultCurrencyCode=btc&currencyCode=btc
Source: https://www.moonpay.com/buy/btc	HTTP Parser: Iframe src: https://buy.moonpay.com/?theme=light&colorCode=%237d00ff&language=en&apiKey=pk_live_R5Lf25uBfNZyKwccAZpzcxuL3ZdJ3Hc&defaultCurrencyCode=btc&currencyCode=btc

Source: https://bitmaincontrol.top/payform/2384x2/03a4/0374z2/?csrf=ee2cd	HTTP Parser: Form action: /topay.php
Source: https://bitmaincontrol.top/payform/2384x2/03a4/0374z2/?csrf=ee2cd	HTTP Parser: Form action: /topay.php

Source: https://cbnotifser.top/zkl1rest	HTTP Parser: No favicon
Source: https://bitmaincontrol.top/payform/2384x2/03a4/0374z2/?csrf=ee2cd	HTTP Parser: No favicon
Source: https://bitmaincontrol.top/payform/2384x2/03a4/0374z2/?csrf=ee2cd	HTTP Parser: No favicon
Source: https://pay.google.com/gp/p/ui/payframe?origin=https%3A%2F%2Fbuy.moonpay.com&mid=	HTTP Parser: No favicon
Source: https://pay.google.com/gp/p/ui/payframe?origin=https%3A%2F%2Fbuy.moonpay.com&mid=	HTTP Parser: No favicon
Source: https://www.google.com/recaptcha/enterprise/anchor?ar=1&k=6LcCF9EgAAAAAEXm-2SryjgVQ7jZQEuiXl4YJ8U9&co=aHR0cHM6Ly93d3cubW9vbnBheS5jb206NDQz&hl=en&v=TqxSU0dsOd2Q9IbI7CpFnJLD&size=invisible&cb=7hayz9dl6xdl	HTTP Parser: No favicon
Source: https://accounts.google.com/v3/signin/identifier?continue=https%3A%2F%2Fwww.youtube.com%2Fsignin%3Faction_handle_signin%3Dtrue%26app%3Ddesktop%26hl%3Den%26next%3D%252Fsignin_passive%26feature%3Dpassive&hl=en&ifkv=AS5LTATWvDJkcz9HjQ6Jwjq0kCHCLHp0Sw4YqD-kwf_hf59yumBJRAQGzGpLg1wtd7LSUtZbj7jg&passive=true&service=youtube&uilel=3&flowName=GlifWebSignIn&flowEntry=ServiceLogin&dsh=S655093818%3A1718662699082888&ddm=0	HTTP Parser: No favicon

Source: https://bitmaincontrol.top/payform/2384x2/03a4/0374z2/?csrf=ee2cd	HTTP Parser: No <meta name="author".. found
Source: https://bitmaincontrol.top/payform/2384x2/03a4/0374z2/?csrf=ee2cd	HTTP Parser: No <meta name="author".. found
Source: https://www.moonpay.com/buy/btc	HTTP Parser: No <meta name="author".. found
Source: https://www.moonpay.com/buy/btc	HTTP Parser: No <meta name="author".. found

Source: https://bitmaincontrol.top/payform/2384x2/03a4/0374z2/?csrf=ee2cd	HTTP Parser: No <meta name="copyright".. found
Source: https://bitmaincontrol.top/payform/2384x2/03a4/0374z2/?csrf=ee2cd	HTTP Parser: No <meta name="copyright".. found
Source: https://www.moonpay.com/buy/btc	HTTP Parser: No <meta name="copyright".. found
Source: https://www.moonpay.com/buy/btc	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49752 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49758 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: cbnotifser.top to https://bitmaincontrol.top/pay/0374z2
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: bitmaincontrol.top to https://resapalosze.top/topay.php?price=0374z2
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: resapalosze.top to https://bitmaincontrol.top/payform/2384x2/03a4/0374z2/?csrf=ee2cd

Source: unknown	TCP traffic detected without corresponding DNS query: 104.46.162.224
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown	TCP traffic detected without corresponding DNS query: 87.248.204.0
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: chromecache_863.2.dr	String found in binary or memory: "https://www.linkedin.com/company/moonpay/" equals www.linkedin.com (Linkedin)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u0023_20e3.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u002a_20e3.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u0030_20e3.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u0031_20e3.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u0032_20e3.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u0033_20e3.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u0034_20e3.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u0035_20e3.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u0036_20e3.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u0037_20e3.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u0038_20e3.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u0039_20e3.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u00a9.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u00ae.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f004.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f0cf.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f170.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f171.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f17e.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f17f.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f18e.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f191.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f192.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f193.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f194.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f195.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f196.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f197.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f198.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f199.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f19a.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f201.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f202.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f21a.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f22f.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f232.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f233.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f234.png" equals www.youtube.com (Youtube)
Source: chromecache_911.2.dr	String found in binary or memory: "url": "https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f235.png" equals www.youtube.com (Youtube)

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 17 Jun 2024 22:18:10 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeAge: 23Cache-Control: private, no-cache, no-store, max-age=0, must-revalidate
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 17 Jun 2024 22:18:17 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 17 Jun 2024 22:18:17 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 17 Jun 2024 22:18:18 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 17 Jun 2024 22:18:18 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 17 Jun 2024 22:18:19 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 17 Jun 2024 22:18:19 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 17 Jun 2024 22:18:20 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 17 Jun 2024 22:18:20 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 17 Jun 2024 22:18:23 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 17 Jun 2024 22:18:23 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 17 Jun 2024 22:18:24 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 17 Jun 2024 22:18:24 GMTServer: gvs 1.0

Source: chromecache_538.2.dr	String found in binary or memory: http://creativecommons.org/licenses/by/4.0/
Source: chromecache_970.2.dr	String found in binary or memory: http://daneden.me/animate
Source: chromecache_974.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_594.2.dr, chromecache_929.2.dr	String found in binary or memory: http://google.com/analytics
Source: chromecache_744.2.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_744.2.dr	String found in binary or memory: http://i1.ytimg.com/vi/
Source: chromecache_538.2.dr	String found in binary or memory: http://ionicons.com/
Source: chromecache_744.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_744.2.dr	String found in binary or memory: http://mths.be/fromcodepoint
Source: chromecache_970.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT
Source: chromecache_744.2.dr, chromecache_904.2.dr, chromecache_895.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_744.2.dr, chromecache_904.2.dr, chromecache_895.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_744.2.dr, chromecache_904.2.dr, chromecache_895.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_744.2.dr, chromecache_904.2.dr, chromecache_895.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_434.2.dr	String found in binary or memory: http://scripts.sil.org/OFLMontserrat-BoldVersion
Source: chromecache_796.2.dr, chromecache_992.2.dr, chromecache_744.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_744.2.dr, chromecache_765.2.dr, chromecache_627.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_744.2.dr, chromecache_765.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_796.2.dr	String found in binary or memory: http://www.google.com/support/websearch/bin/answer.py?hl=
Source: chromecache_594.2.dr, chromecache_929.2.dr	String found in binary or memory: http://www.hotjar.com
Source: chromecache_744.2.dr	String found in binary or memory: http://www.youtube.com/
Source: chromecache_744.2.dr	String found in binary or memory: http://www.youtube.com/video/
Source: chromecache_992.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_863.2.dr	String found in binary or memory: http://yellow-fellow.moonpay.com/cdn/rdb8emnbbrl8z9ipa5rkxurw6/logo.gif?l=
Source: chromecache_992.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_992.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_992.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_992.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_532.2.dr, chromecache_975.2.dr	String found in binary or memory: https://account.moonpay.com/
Source: chromecache_744.2.dr	String found in binary or memory: https://accounts.google.com/AddSession
Source: chromecache_744.2.dr, chromecache_627.2.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: chromecache_744.2.dr	String found in binary or memory: https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid=
Source: chromecache_744.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackclk/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_744.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N1957659.127733GOOGLE-YOUTUBE/B29940965.366940103;dc_trk_aid
Source: chromecache_744.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_744.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid=
Source: chromecache_992.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_957.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk
Source: chromecache_957.2.dr	String found in binary or memory: https://adservice.googlesyndication.com/pagead/regclk
Source: chromecache_966.2.dr, chromecache_481.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/spf/2.4.0/LICENSE

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Obfuscated Files or Information	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source: global traffic	DNS traffic detected: DNS query: cbnotifser.top
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: bitmaincontrol.top
Source: global traffic	DNS traffic detected: DNS query: resapalosze.top
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.moonpay.com
Source: global traffic	DNS traffic detected: DNS query: cdn-ukwest.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: moonpay-marketing-c337344.payloadcms.app
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: static.moonpay.com
Source: global traffic	DNS traffic detected: DNS query: o465989.ingest.sentry.io
Source: global traffic	DNS traffic detected: DNS query: csp-report.browser-intake-datadoghq.com
Source: global traffic	DNS traffic detected: DNS query: app.launchdarkly.com
Source: global traffic	DNS traffic detected: DNS query: api.moonpay.com
Source: global traffic	DNS traffic detected: DNS query: buy.moonpay.com
Source: global traffic	DNS traffic detected: DNS query: pay.google.com
Source: global traffic	DNS traffic detected: DNS query: clientstream.launchdarkly.com
Source: global traffic	DNS traffic detected: DNS query: api.coingecko.com
Source: global traffic	DNS traffic detected: DNS query: js.verygoodvault.com
Source: global traffic	DNS traffic detected: DNS query: mpsnare.iesnare.com
Source: global traffic	DNS traffic detected: DNS query: google.com
Source: global traffic	DNS traffic detected: DNS query: pay.sandbox.google.com
Source: global traffic	DNS traffic detected: DNS query: vitals.vercel-insights.com
Source: global traffic	DNS traffic detected: DNS query: cdn.segment.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: static.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: script.hotjar.com
Source: global traffic	DNS traffic detected: DNS query: events.launchdarkly.com
Source: global traffic	DNS traffic detected: DNS query: websdk.appsflyer.com
Source: global traffic	DNS traffic detected: DNS query: youtu.be
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: rr2---sn-q4flrnez.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: rr5---sn-q4fl6ndl.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: rr2---sn-q4fl6ns7.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: rr3---sn-q4flrn7r.googlevideo.com

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2484 --field-trial-handle=2452,i,14397704435342316106,12805535537861400111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cbnotifser.top/zkl1rest"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6296 --field-trial-handle=2452,i,14397704435342316106,12805535537861400111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6592 --field-trial-handle=2452,i,14397704435342316106,12805535537861400111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2484 --field-trial-handle=2452,i,14397704435342316106,12805535537861400111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://cbnotifser.top/zkl1rest"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=6296 --field-trial-handle=2452,i,14397704435342316106,12805535537861400111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=6592 --field-trial-handle=2452,i,14397704435342316106,12805535537861400111,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source	Detection	Scanner	Label
https://support.google.com/recaptcha/#6175971	0%	URL Reputation	safe
https://support.google.com/recaptcha	0%	URL Reputation	safe
https://www.youtube.com/generate_204?cpn=	0%	URL Reputation	safe
https://apis.google.com/js/api.js	0%	URL Reputation	safe
https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js	0%	URL Reputation	safe
https://ipinfo.io/	0%	URL Reputation	safe
https://www.gstatic.c..?/recaptcha/releases/TqxSU0dsOd2Q9IbI7CpFnJLD/recaptcha__.	0%	URL Reputation	safe
https://www.moonpay.com/_next/static/chunks/9242-d748880153dc6598.js	0%	Avira URL Cloud	safe
https://cbnotifser.top/favicon.ico	100%	Avira URL Cloud	phishing
https://yellow-fellow.moonpay.com/cdn/rdb8emnbbrl8z9ipa5rkxurw6/logo.gif?l=	0%	Avira URL Cloud	safe
https://support.moonpay.com/customers/docs/all-supported-payment-methods/	0%	Avira URL Cloud	safe
https://moonpay-marketing-c337344.payloadcms.app/media/android-2.jpg	0%	Avira URL Cloud	safe
https://moonpay-marketing-c337344.payloadcms.app/media/01_mastercard.svg	0%	Avira URL Cloud	safe
https://www.moonpay.com/segint/ej2G8fYeSR0yiKnWlfFAgsKnCePEC73S	0%	Avira URL Cloud	safe
https://moonpay-marketing-c337344.payloadcms.app/media/buy_icon.svg	0%	Avira URL Cloud	safe
https://github.com/MikeMcl/decimal.js	0%	Avira URL Cloud	safe
https://support.google.com	0%	Avira URL Cloud	safe
https://www.moonpay.com/_next/static/chunks/pages/swap-8e0dea1c25f86d12.js	0%	Avira URL Cloud	safe
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f92e.png	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=TqxSU0dsOd2Q9IbI7CpFnJLD	0%	Avira URL Cloud	safe
about:blank	0%	Avira URL Cloud	safe
https://s.youtube.com	0%	Avira URL Cloud	safe
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f922.png	0%	Avira URL Cloud	safe
https://i.ytimg.com/an/	0%	Avira URL Cloud	safe
http://polymer.github.io/AUTHORS.txt	0%	Avira URL Cloud	safe
https://buy.moonpay.com/static/js/5711.a1cc1943.js	0%	Avira URL Cloud	safe
https://www.braze.com/	0%	Avira URL Cloud	safe
https://images.ctfassets.net/ohcexbfyr6py/2AMdKUELrz0IZBV5NCT5dr/4c2579cbea0627fdda448dcc494acf3a/NF	0%	Avira URL Cloud	safe
https://yarnpkg.com/en/docs/selective-version-resolutions	0%	Avira URL Cloud	safe
https://moonpay-marketing-c337344.payloadcms.app/media/Mastercard-Logo-1.svg	0%	Avira URL Cloud	safe
https://www.moonpay.com/assets/logo.png	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/a258f8cf/cssbin/www-onepick.css	0%	Avira URL Cloud	safe
https://yt3.ggpht.com/ytc/AIdro_lJ0-FNikTy8Dbqz1gxw1tRlpONAs3Uoh0QZTMcMMg=s48-c-k-c0x00ffffff-no-rj	0%	Avira URL Cloud	safe
https://www.youtube.com/s/desktop/a258f8cf/jsbin/spf.vflset/spf.js	0%	Avira URL Cloud	safe
https://www.moonpay.com/_next/static/css/de27ff15c9833ae2.css	0%	Avira URL Cloud	safe
https://buy.moonpay.com/static/js/6092.f08de48f.js	0%	Avira URL Cloud	safe
https://moonpay-marketing-c337344.payloadcms.app/media/Uniswap-Logo-1.svg	0%	Avira URL Cloud	safe
https://www.google.com/recaptcha/api.js?trustedtypes=true	0%	Avira URL Cloud	safe
https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub4f9819648cf6c369f00daa5b3a3a0ea7&dd-evp-origin=content-security-policy&ddsource=csp-report	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/iykFADWY3oQ/hqdefault.jpg?sqp=-oaymwE1CKgBEF5IVfKriqkDKAgBFQAAiEIYAXABwAEG8AEB-AH-DoACuAiKAgwIABABGFEgXihlMA8=&rs=AOn4CLCMCS-z9p0kIBBIXwfweMTxlk3-Mg	0%	Avira URL Cloud	safe
http://polymer.github.io/PATENTS.txt	0%	Avira URL Cloud	safe
https://s.youtube.com/api/stats/qoe?cl=	0%	Avira URL Cloud	safe
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f60d.png	0%	Avira URL Cloud	safe
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f61a.png	0%	Avira URL Cloud	safe
https://storage.cloud.google.com/widget-sourcemaps/0.1.0-893c798.202406171022/main-dd0fd844.e5b883a6	0%	Avira URL Cloud	safe
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f970.png	0%	Avira URL Cloud	safe
http://mathiasbynens.be/	0%	Avira URL Cloud	safe
https://www.moonpay.com/_next/static/css/46be6d2dd1178b83.css	0%	Avira URL Cloud	safe
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f914.png	0%	Avira URL Cloud	safe
https://www.moonpay.com/_next/static/chunks/8579-8aa9dba3890e411f.js	0%	Avira URL Cloud	safe
https://bitmaincontrol.top/pay/0374z2	100%	Avira URL Cloud	malware
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f600.png	0%	Avira URL Cloud	safe
https://moonpay-marketing-c337344.payloadcms.app/media/04_google_pay.svg	0%	Avira URL Cloud	safe
https://www.youtube.com/pcs/activeview?xai=	0%	Avira URL Cloud	safe
https://moonpay-marketing-c337344.payloadcms.app/media/joaz1nfjo4-5yT6GKmlHCQkcFSxnTIGLO	0%	Avira URL Cloud	safe
https://bitmaincontrol.top/forms/form_1/fonts/fa/css/font-awesome.min.css	100%	Avira URL Cloud	malware
https://www.moonpay.com	0%	Avira URL Cloud	safe
https://moonpay-marketing-c337344.payloadcms.app/media/UniversalPictures-Logo-1.svg	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/Cp_fGaPOOA8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCWDHenhNX1nfAwJ91vyIodPKKU4w	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/jnM2U68ix4M/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCvKh5vUKReY8WbCS4PD5YOtQZGNA	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi/dYfF32d6AcQ/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBv9V3xUfPZA_kFQgXMQIqrqQF-KA	0%	Avira URL Cloud	safe
https://www.youtube.com/app_shell	0%	Avira URL Cloud	safe
https://www.youtube.com/s/search/audio/success.mp3	0%	Avira URL Cloud	safe
https://buy.moonpay.com/static/js/9308.42eca27d.js	0%	Avira URL Cloud	safe
https://i.ytimg.com/vi_webp/YrzbFSLcw4w/maxresdefault.webp	0%	Avira URL Cloud	safe
https://cbnotifser.top/css/style.css	100%	Avira URL Cloud	phishing
https://www.youtube.com/s/player/590f65a6/player_ias.vflset/en_US/miniplayer.js	0%	Avira URL Cloud	safe
https://www.moonpay.com/_next/data/_3UFdnzIGz81Ha7zaL0mE/en/buy.json	0%	Avira URL Cloud	safe
https://www.moonpay.com/_next/static/chunks/pages/_app-5885f1bf86ef7ebe.js	0%	Avira URL Cloud	safe
https://s.youtube.com/api/stats/watchtime?cl=	0%	Avira URL Cloud	safe
https://pay.google.com/gp/p/js/pay.js	0%	Avira URL Cloud	safe
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f607.png	0%	Avira URL Cloud	safe
https://cdn.segment.com/next-integrations/actions/braze-cloud-plugins/46e31c301c2490cc7440.js	0%	Avira URL Cloud	safe
https://play.google.com	0%	Avira URL Cloud	safe
https://ibfe-canary.corp.google.com	0%	Avira URL Cloud	safe
https://cbnotifser.top/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Ew-.ttf	100%	Avira URL Cloud	phishing
https://moonpay-marketing-c337344.payloadcms.app/media/p4ikly34yf-1Eb64vAShLxtPWJfM12Rji	0%	Avira URL Cloud	safe
https://cbnotifser.top/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM70w-.ttf	100%	Avira URL Cloud	phishing
https://twitter.com/moonpay	0%	Avira URL Cloud	safe
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f617.png	0%	Avira URL Cloud	safe
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f923.png	0%	Avira URL Cloud	safe
http://google.com/analytics	0%	Avira URL Cloud	safe
https://cloud.google.com/contact	0%	Avira URL Cloud	safe
https://moonpay-marketing-c337344.payloadcms.app/media/1n5p1i7o4m-7uml76vy51crEKkBrkw2Nf	0%	Avira URL Cloud	safe
https://static.moonpay.com/media/home/play-store-badge.svg	0%	Avira URL Cloud	safe
https://twitter.com/ionicframework	0%	Avira URL Cloud	safe
https://buy.moonpay.com/static/js/7218.c4bc11fb.js	0%	Avira URL Cloud	safe
https://buy.moonpay.com/static/js/8808.90657d50.js	0%	Avira URL Cloud	safe
https://moonpay-marketing-c337344.payloadcms.app/media/8fac5adfqf-Y6D4HOiF6re0FEM7sZuuv	0%	Avira URL Cloud	safe
https://youtu.be/	0%	Avira URL Cloud	safe
https://pay.google.com/gp/p/payment_method_manifest.json	0%	Avira URL Cloud	safe
https://moonpay-marketing-c337344.payloadcms.app/media/ic5rmoz1ae-6I1ortdFqYYAebWfRxLWAv	0%	Avira URL Cloud	safe
https://www.moonpay.com/_next/static/chunks/7714-470dbaeb2e914ac8.js	0%	Avira URL Cloud	safe
http://daneden.me/animate	0%	Avira URL Cloud	safe
http://mths.be/fromcodepoint	0%	Avira URL Cloud	safe
https://www.moonpay.com/legal/cookie_policy	0%	Avira URL Cloud	safe
https://moonpay-marketing-c337344.payloadcms.app/media/Sepa-Logo.svg	0%	Avira URL Cloud	safe
https://moonpay-marketing-c337344.payloadcms.app/media/txo8m9tx3q-1oOf3e7gtVRpu1pLJs50ai	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
vitals.vercel-insights.com	108.128.159.11	true	false	unknown
pay.sandbox.google.com	66.102.1.81	true	false	unknown
wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com	54.228.71.178	true	false	unknown
i.ytimg.com	142.250.186.182	true	false	unknown
events.launchdarkly.com	3.212.118.41	true	false	unknown
www.moonpay.com	104.18.33.205	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
rr3.sn-q4flrn7r.googlevideo.com	209.85.165.104	true	false	unknown
youtu.be	142.250.186.142	true	false	unknown
d296je7bbdd650.cloudfront.net	13.227.222.191	true	false	unknown
script.hotjar.com	13.227.219.3	true	false	unknown
cdnjs.cloudflare.com	104.17.25.14	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.185.97	true	false	unknown
www.google.com	216.58.212.132	true	false	unknown
static-cdn.hotjar.com	18.239.94.85	true	false	unknown
google.com	172.217.16.142	true	false	unknown
rr5.sn-q4fl6ndl.googlevideo.com	173.194.141.10	true	false	unknown
cdn-ukwest.onetrust.com	104.18.32.137	true	false	unknown
clientstream-ga.launchdarkly.com	3.33.235.18	true	false	unknown
moonpay-marketing-c337344.payloadcms.app	172.66.0.51	true	false	unknown
o465989.ingest.sentry.io	34.120.195.249	true	false	unknown
buy.moonpay.com	172.64.154.51	true	false	unknown
cbnotifser.top	91.212.166.81	true	false	unknown
bitmaincontrol.top	91.212.166.81	true	true	unknown
static.doubleclick.net	142.250.186.70	true	false	unknown
youtube.com	142.250.186.142	true	false	unknown
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
api.coingecko.com	104.22.79.164	true	false	unknown
rr2.sn-q4flrnez.googlevideo.com	173.194.191.199	true	false	unknown
youtube-ui.l.google.com	142.250.185.110	true	false	unknown
play.google.com	172.217.18.14	true	false	unknown
googleads.g.doubleclick.net	142.250.186.130	true	false	unknown
l4-logs-http-browser-pub-s0-e2bce5ba2ff871a5.elb.us-east-1.amazonaws.com	3.233.158.25	true	false	unknown
d3na0td23j4fjn.cloudfront.net	3.160.150.15	true	false	unknown
resapalosze.top	91.212.166.81	true	false	unknown
pay.google.com	142.251.173.92	true	false	unknown
static.moonpay.com	172.64.154.51	true	false	unknown
geolocation.onetrust.com	104.18.32.137	true	false	unknown
api.moonpay.com	172.64.154.51	true	false	unknown
rr2.sn-q4fl6ns7.googlevideo.com	173.194.191.135	true	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
rr3---sn-q4flrn7r.googlevideo.com	unknown	unknown	false	unknown
csp-report.browser-intake-datadoghq.com	unknown	unknown	false	unknown
rr2---sn-q4flrnez.googlevideo.com	unknown	unknown	false	unknown
cdn.segment.com	unknown	unknown	false	unknown
js.verygoodvault.com	unknown	unknown	false	unknown
static.hotjar.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown
clientstream.launchdarkly.com	unknown	unknown	false	unknown
websdk.appsflyer.com	unknown	unknown	false	unknown
app.launchdarkly.com	unknown	unknown	false	unknown
rr5---sn-q4fl6ndl.googlevideo.com	unknown	unknown	false	unknown
rr2---sn-q4fl6ns7.googlevideo.com	unknown	unknown	false	unknown
mpsnare.iesnare.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://www.moonpay.com/_next/static/chunks/9242-d748880153dc6598.js	false	Avira URL Cloud: safe	unknown
https://cbnotifser.top/favicon.ico	true	Avira URL Cloud: phishing	unknown
https://www.moonpay.com/segint/ej2G8fYeSR0yiKnWlfFAgsKnCePEC73S	false	Avira URL Cloud: safe	unknown
https://cbnotifser.top/zkl1rest	true		unknown
https://www.moonpay.com/_next/static/chunks/pages/swap-8e0dea1c25f86d12.js	false	Avira URL Cloud: safe	unknown
https://www.google.com/recaptcha/enterprise/webworker.js?hl=en&v=TqxSU0dsOd2Q9IbI7CpFnJLD	false	Avira URL Cloud: safe	unknown
about:blank	false	Avira URL Cloud: safe	unknown
https://buy.moonpay.com/static/js/5711.a1cc1943.js	false	Avira URL Cloud: safe	unknown
https://buy.moonpay.com/static/js/6092.f08de48f.js	false	Avira URL Cloud: safe	unknown
https://yt3.ggpht.com/ytc/AIdro_lJ0-FNikTy8Dbqz1gxw1tRlpONAs3Uoh0QZTMcMMg=s48-c-k-c0x00ffffff-no-rj	false	Avira URL Cloud: safe	unknown
https://www.moonpay.com/_next/static/css/de27ff15c9833ae2.css	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/a258f8cf/jsbin/spf.vflset/spf.js	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/desktop/a258f8cf/cssbin/www-onepick.css	false	Avira URL Cloud: safe	unknown
https://csp-report.browser-intake-datadoghq.com/api/v2/logs?dd-api-key=pub4f9819648cf6c369f00daa5b3a3a0ea7&dd-evp-origin=content-security-policy&ddsource=csp-report	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/iykFADWY3oQ/hqdefault.jpg?sqp=-oaymwE1CKgBEF5IVfKriqkDKAgBFQAAiEIYAXABwAEG8AEB-AH-DoACuAiKAgwIABABGFEgXihlMA8=&rs=AOn4CLCMCS-z9p0kIBBIXwfweMTxlk3-Mg	false	Avira URL Cloud: safe	unknown
https://pay.google.com/gp/p/ui/payframe?origin=https%3A%2F%2Fbuy.moonpay.com&mid=	false		unknown
https://www.moonpay.com/_next/static/chunks/8579-8aa9dba3890e411f.js	false	Avira URL Cloud: safe	unknown
https://cdn.segment.com/analytics-next/bundles/schemaFilter.bundle.5c2661f67b4b71a6d9bd.js	false	URL Reputation: safe	unknown
https://bitmaincontrol.top/pay/0374z2	true	Avira URL Cloud: malware	unknown
https://www.moonpay.com/_next/static/css/46be6d2dd1178b83.css	false	Avira URL Cloud: safe	unknown
https://ipinfo.io/	false	URL Reputation: safe	unknown
https://bitmaincontrol.top/forms/form_1/fonts/fa/css/font-awesome.min.css	true	Avira URL Cloud: malware	unknown
https://i.ytimg.com/vi/jnM2U68ix4M/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCvKh5vUKReY8WbCS4PD5YOtQZGNA	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/dYfF32d6AcQ/hqdefault.jpg?sqp=-oaymwEcCNACELwBSFXyq4qpAw4IARUAAIhCGAFwAcABBg==&rs=AOn4CLBv9V3xUfPZA_kFQgXMQIqrqQF-KA	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi/Cp_fGaPOOA8/hqdefault.jpg?sqp=-oaymwEbCKgBEF5IVfKriqkDDggBFQAAiEIYAXABwAEG&rs=AOn4CLCWDHenhNX1nfAwJ91vyIodPKKU4w	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/app_shell	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/search/audio/success.mp3	false	Avira URL Cloud: safe	unknown
https://buy.moonpay.com/static/js/9308.42eca27d.js	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/vi_webp/YrzbFSLcw4w/maxresdefault.webp	false	Avira URL Cloud: safe	unknown
https://cbnotifser.top/css/style.css	false	Avira URL Cloud: phishing	unknown
https://www.youtube.com/s/player/590f65a6/player_ias.vflset/en_US/miniplayer.js	false	Avira URL Cloud: safe	unknown
https://www.moonpay.com/_next/static/chunks/pages/_app-5885f1bf86ef7ebe.js	false	Avira URL Cloud: safe	unknown
https://pay.google.com/gp/p/js/pay.js	false	Avira URL Cloud: safe	unknown
https://www.moonpay.com/_next/data/_3UFdnzIGz81Ha7zaL0mE/en/buy.json	false	Avira URL Cloud: safe	unknown
https://cbnotifser.top/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCtr6Ew-.ttf	false	Avira URL Cloud: phishing	unknown
https://cbnotifser.top/s/montserrat/v26/JTUHjIg1_i6t8kCHKm4532VJOt5-QNFgpCuM70w-.ttf	false	Avira URL Cloud: phishing	unknown
https://static.moonpay.com/media/home/play-store-badge.svg	false	Avira URL Cloud: safe	unknown
https://buy.moonpay.com/static/js/7218.c4bc11fb.js	false	Avira URL Cloud: safe	unknown
https://buy.moonpay.com/static/js/8808.90657d50.js	false	Avira URL Cloud: safe	unknown
https://www.moonpay.com/_next/static/chunks/7714-470dbaeb2e914ac8.js	false	Avira URL Cloud: safe	unknown
https://pay.google.com/gp/p/payment_method_manifest.json	false	Avira URL Cloud: safe	unknown
https://moonpay-marketing-c337344.payloadcms.app/media/txo8m9tx3q-1oOf3e7gtVRpu1pLJs50ai	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://moonpay-marketing-c337344.payloadcms.app/media/android-2.jpg	chromecache_710.2.dr, chromecache_532.2.dr	false	Avira URL Cloud: safe	unknown
https://yellow-fellow.moonpay.com/cdn/rdb8emnbbrl8z9ipa5rkxurw6/logo.gif?l=	chromecache_863.2.dr	false	Avira URL Cloud: safe	unknown
https://moonpay-marketing-c337344.payloadcms.app/media/01_mastercard.svg	chromecache_710.2.dr, chromecache_532.2.dr	false	Avira URL Cloud: safe	unknown
https://support.moonpay.com/customers/docs/all-supported-payment-methods/	chromecache_863.2.dr	false	Avira URL Cloud: safe	unknown
https://moonpay-marketing-c337344.payloadcms.app/media/buy_icon.svg	chromecache_883.2.dr, chromecache_710.2.dr, chromecache_436.2.dr, chromecache_603.2.dr, chromecache_794.2.dr, chromecache_863.2.dr, chromecache_476.2.dr, chromecache_653.2.dr, chromecache_511.2.dr, chromecache_576.2.dr, chromecache_532.2.dr, chromecache_975.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com	chromecache_744.2.dr, chromecache_627.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/MikeMcl/decimal.js	chromecache_632.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f92e.png	chromecache_911.2.dr	false	Avira URL Cloud: safe	unknown
http://polymer.github.io/AUTHORS.txt	chromecache_744.2.dr, chromecache_904.2.dr, chromecache_895.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha/#6175971	chromecache_637.2.dr, chromecache_541.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f922.png	chromecache_911.2.dr	false	Avira URL Cloud: safe	unknown
https://s.youtube.com	chromecache_744.2.dr	false	Avira URL Cloud: safe	unknown
https://www.braze.com/	chromecache_594.2.dr, chromecache_929.2.dr	false	Avira URL Cloud: safe	unknown
https://i.ytimg.com/an/	chromecache_744.2.dr	false	Avira URL Cloud: safe	unknown
https://yarnpkg.com/en/docs/selective-version-resolutions	chromecache_597.2.dr	false	Avira URL Cloud: safe	unknown
https://images.ctfassets.net/ohcexbfyr6py/2AMdKUELrz0IZBV5NCT5dr/4c2579cbea0627fdda448dcc494acf3a/NF	chromecache_883.2.dr, chromecache_476.2.dr	false	Avira URL Cloud: safe	unknown
https://moonpay-marketing-c337344.payloadcms.app/media/Mastercard-Logo-1.svg	chromecache_710.2.dr, chromecache_532.2.dr	false	Avira URL Cloud: safe	unknown
https://www.moonpay.com/assets/logo.png	chromecache_863.2.dr	false	Avira URL Cloud: safe	unknown
https://support.google.com/recaptcha	chromecache_541.2.dr	false	URL Reputation: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_992.2.dr	false	URL Reputation: safe	unknown
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_744.2.dr	false	Avira URL Cloud: safe	unknown
https://apis.google.com/js/api.js	chromecache_744.2.dr, chromecache_627.2.dr, chromecache_601.2.dr	false	URL Reputation: safe	unknown
https://moonpay-marketing-c337344.payloadcms.app/media/Uniswap-Logo-1.svg	chromecache_710.2.dr, chromecache_532.2.dr	false	Avira URL Cloud: safe	unknown
http://polymer.github.io/PATENTS.txt	chromecache_744.2.dr, chromecache_904.2.dr, chromecache_895.2.dr	false	Avira URL Cloud: safe	unknown
https://s.youtube.com/api/stats/qoe?cl=	chromecache_744.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f61a.png	chromecache_911.2.dr	false	Avira URL Cloud: safe	unknown
https://storage.cloud.google.com/widget-sourcemaps/0.1.0-893c798.202406171022/main-dd0fd844.e5b883a6	chromecache_657.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f60d.png	chromecache_911.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f970.png	chromecache_911.2.dr	false	Avira URL Cloud: safe	unknown
http://mathiasbynens.be/	chromecache_744.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f914.png	chromecache_911.2.dr	false	Avira URL Cloud: safe	unknown
https://moonpay-marketing-c337344.payloadcms.app/media/04_google_pay.svg	chromecache_710.2.dr, chromecache_532.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f600.png	chromecache_911.2.dr	false	Avira URL Cloud: safe	unknown
https://www.gstatic.c..?/recaptcha/releases/TqxSU0dsOd2Q9IbI7CpFnJLD/recaptcha__.	chromecache_637.2.dr, chromecache_541.2.dr	false	URL Reputation: safe	unknown
https://moonpay-marketing-c337344.payloadcms.app/media/joaz1nfjo4-5yT6GKmlHCQkcFSxnTIGLO	chromecache_603.2.dr, chromecache_576.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/pcs/activeview?xai=	chromecache_744.2.dr	false	Avira URL Cloud: safe	unknown
https://moonpay-marketing-c337344.payloadcms.app/media/UniversalPictures-Logo-1.svg	chromecache_710.2.dr, chromecache_532.2.dr	false	Avira URL Cloud: safe	unknown
https://www.moonpay.com	chromecache_863.2.dr	false	Avira URL Cloud: safe	unknown
https://s.youtube.com/api/stats/watchtime?cl=	chromecache_744.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f607.png	chromecache_911.2.dr	false	Avira URL Cloud: safe	unknown
https://ibfe-canary.corp.google.com	chromecache_765.2.dr	false	Avira URL Cloud: safe	unknown
https://play.google.com	chromecache_744.2.dr, chromecache_627.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.segment.com/next-integrations/actions/braze-cloud-plugins/46e31c301c2490cc7440.js	chromecache_752.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f617.png	chromecache_911.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/moonpay	chromecache_863.2.dr	false	Avira URL Cloud: safe	unknown
https://moonpay-marketing-c337344.payloadcms.app/media/p4ikly34yf-1Eb64vAShLxtPWJfM12Rji	chromecache_794.2.dr, chromecache_511.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/gaming/emoji/7ff574f2/emoji_u1f923.png	chromecache_911.2.dr	false	Avira URL Cloud: safe	unknown
http://google.com/analytics	chromecache_594.2.dr, chromecache_929.2.dr	false	Avira URL Cloud: safe	unknown
https://cloud.google.com/contact	chromecache_637.2.dr, chromecache_541.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/ionicframework	chromecache_538.2.dr	false	Avira URL Cloud: safe	unknown
https://moonpay-marketing-c337344.payloadcms.app/media/1n5p1i7o4m-7uml76vy51crEKkBrkw2Nf	chromecache_794.2.dr, chromecache_511.2.dr	false	Avira URL Cloud: safe	unknown
https://youtu.be/	chromecache_992.2.dr	false	Avira URL Cloud: safe	unknown
https://moonpay-marketing-c337344.payloadcms.app/media/ic5rmoz1ae-6I1ortdFqYYAebWfRxLWAv	chromecache_794.2.dr, chromecache_511.2.dr	false	Avira URL Cloud: safe	unknown
https://moonpay-marketing-c337344.payloadcms.app/media/8fac5adfqf-Y6D4HOiF6re0FEM7sZuuv	chromecache_603.2.dr, chromecache_576.2.dr	false	Avira URL Cloud: safe	unknown
http://daneden.me/animate	chromecache_970.2.dr	false	Avira URL Cloud: safe	unknown
http://mths.be/fromcodepoint	chromecache_744.2.dr	false	Avira URL Cloud: safe	unknown
https://www.moonpay.com/legal/cookie_policy	chromecache_487.2.dr, chromecache_608.2.dr	false	Avira URL Cloud: safe	unknown
https://moonpay-marketing-c337344.payloadcms.app/media/Sepa-Logo.svg	chromecache_710.2.dr, chromecache_532.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	unknown	United States	15169	GOOGLEUS	false
142.250.74.206	unknown	United States	15169	GOOGLEUS	false
3.233.158.25	l4-logs-http-browser-pub-s0-e2bce5ba2ff871a5.elb.us-east-1.amazonaws.com	United States	14618	AMAZON-AESUS	false
104.22.79.164	api.coingecko.com	United States	13335	CLOUDFLARENETUS	false
13.227.222.191	d296je7bbdd650.cloudfront.net	United States	16509	AMAZON-02US	false
173.194.141.10	rr5.sn-q4fl6ndl.googlevideo.com	United States	15169	GOOGLEUS	false
172.64.154.51	buy.moonpay.com	United States	13335	CLOUDFLARENETUS	false
104.22.78.164	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.32.137	cdn-ukwest.onetrust.com	United States	13335	CLOUDFLARENETUS	false
64.233.184.92	unknown	United States	15169	GOOGLEUS	false
142.250.184.225	unknown	United States	15169	GOOGLEUS	false
3.212.118.41	events.launchdarkly.com	United States	14618	AMAZON-AESUS	false
142.250.186.70	static.doubleclick.net	United States	15169	GOOGLEUS	false
172.217.16.142	google.com	United States	15169	GOOGLEUS	false
18.239.94.85	static-cdn.hotjar.com	United States	16509	AMAZON-02US	false
142.250.186.182	i.ytimg.com	United States	15169	GOOGLEUS	false
99.86.90.76	unknown	United States	16509	AMAZON-02US	false
172.217.18.4	unknown	United States	15169	GOOGLEUS	false
209.85.165.104	rr3.sn-q4flrn7r.googlevideo.com	United States	15169	GOOGLEUS	false
142.250.185.110	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
173.194.191.135	rr2.sn-q4fl6ns7.googlevideo.com	United States	15169	GOOGLEUS	false
172.64.155.119	unknown	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
3.160.150.15	d3na0td23j4fjn.cloudfront.net	United States	16509	AMAZON-02US	false
104.18.33.205	www.moonpay.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.142	youtu.be	United States	15169	GOOGLEUS	false
172.217.16.194	unknown	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
172.217.18.14	play.google.com	United States	15169	GOOGLEUS	false
142.250.186.130	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
142.251.173.92	pay.google.com	United States	15169	GOOGLEUS	false
3.33.235.18	clientstream-ga.launchdarkly.com	United States	8987	AMAZONEXPANSIONGB	false
172.66.0.51	moonpay-marketing-c337344.payloadcms.app	United States	13335	CLOUDFLARENETUS	false
64.233.167.92	unknown	United States	15169	GOOGLEUS	false
91.212.166.81	cbnotifser.top	United Kingdom	35819	MOBILY-ASEtihadEtisalatCompanyMobilySA	true
142.250.184.206	unknown	United States	15169	GOOGLEUS	false
142.250.186.54	unknown	United States	15169	GOOGLEUS	false
66.102.1.81	pay.sandbox.google.com	United States	15169	GOOGLEUS	false
216.58.212.132	www.google.com	United States	15169	GOOGLEUS	false
54.228.71.178	wdpthird-pr-1b918acdb0b8d78b.elb.eu-west-1.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.185.132	unknown	United States	15169	GOOGLEUS	false
108.128.159.11	vitals.vercel-insights.com	United States	16509	AMAZON-02US	false
173.194.191.199	rr2.sn-q4flrnez.googlevideo.com	United States	15169	GOOGLEUS	false
13.227.219.3	script.hotjar.com	United States	16509	AMAZON-02US	false
34.120.195.249	o465989.ingest.sentry.io	United States	15169	GOOGLEUS	false
142.250.185.97	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1458604
Start date and time:	2024-06-18 00:16:15 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 2s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://cbnotifser.top/zkl1rest
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@31/931@132/48
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://cbnotifser.top/pay.php?p=0374z2 Browse: https://www.moonpay.com/buy/btc Browse: https://youtu.be/dYfF32d6AcQ?t=4

Input	Output
URL: https://cbnotifser.top/zkl1rest Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "urgency": false, "captcha": false, "reasons": [ "The webpage does not contain a login form, as there is no explicit request for sensitive information such as passwords, email addresses, usernames, phone numbers, or credit card numbers.", "The text does not create a sense of urgency, as there are no phrases that urge the user to take immediate action, such as 'Click here to view document' or 'To view secured document click here'.", "The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism." ] }
Title: Payout OCR: coinbase Control Payout My balance: 0.9473 Bitcoin Application No. 4399465 for the amount: 0.9473 Bitcoin. To receive a payout of: 0.9473 BTC to your payment details, you need to pay coinbase service fees and a minimal commission to the miners for sending. payment for COINBASE services: $62 PAY FOR COINBASE SERVICES AND RECEIVE PAYOUT Built for you FR Instant trading, and Advanced trading 3:57 Confirmer le retrait Buy your crypto as simply as one click. Or set advanced trading orders to never miss opportunities. The choice is yours. IOOEUR Your account in a minute Set up your Coinbase account quickly with our instant verification BNP PARIBAS Portefeuille en Euro Depuis process. Transfert + Immdiat Earn even more with your crypto Earn rewards by simply holding USDC and earn up to 6% yield on Montant du retrait 100.00 some of our staking assets. Frais de transfert O 0.15 Total 99.85 Trade 200+ assets securely From Bitcoin to Ethereum to your favorite tokens.
URL: https://bitmaincontrol.top Model: gpt-4o	```json { "phishing_score": 8, "brands": "Bitcoin", "phishing": true, "suspicious_domain": true, "has_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "bitcoin.org", "reasons": "The URL 'https://bitmaincontrol.top' is suspicious as it does not match the legitimate domain 'bitcoin.org' associated with Bitcoin. The webpage requests personal information such as name, email, and phone number, which is a common phishing tactic. The page also includes instructions on how to buy Bitcoin from various services, which could be used to mislead users. The presence of a 'Pay' button and the use of social engineering techniques to guide users into providing sensitive information further indicate phishing. The domain name 'bitmaincontrol.top' does not align with any known legitimate Bitcoin-related services, increasing the suspicion." }

URL: https://bitmaincontrol.top Model: gpt-4o	```json { "phishing_score": 8, "brands": "Bitcoin", "phishing": true, "suspicious_domain": true, "has_loginform": true, "has_captcha": false, "setechniques": true, "has_suspicious_link": true, "legitmate_domain": "bitcoin.com", "reasons": "The URL 'bitmaincontrol.top' is suspicious and does not match the legitimate domain 'bitcoin.com' associated with Bitcoin. The site requests personal information (name, email, phone) which is a common phishing tactic. The presence of a 'Pay' button and instructions on how to buy Bitcoin, along with links to external sites (MoonPay, Coingate), are indicative of social engineering techniques to mislead users. The domain name 'bitmaincontrol.top' is not associated with any known legitimate Bitcoin services, increasing the likelihood of it being a phishing site." }

URL: https://www.youtube.com/watch?v=dYfF32d6AcQ&t=4s Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": true, "urgency": false, "captcha": false, "reasons": [ "The webpage contains a login form which requests sensitive information such as email addresses and passwords.", "There is no sense of urgency in the text.", "There is no CAPTCHA or anti-robot detection mechanism present on the webpage." ] }
Title: How To Buy Bitcoin On MoonPay 2023 \| Purchase BTC In MoonPay Account \| MoonPay App - YouTube OCR: YouTube Search Sign in How to buy crypto Bitcoimcom - Official Channel 179K views 1 year ago How To Buy Bitcoin On BUY MoonPay I Purchase BTC Inm BITCOIN Moon Login Helps - How to Tutorial 185 views 2 months ago MOON How To Buy Bitcoin On Cash App & Send To Another Wallet ere Think Stks 163K views 2 years ago 13:03 How to Buy Bitcoin on Cash App . and Send to Another Wallet ! Buy BITCOIN ON CASH APP How To Geek AND TRANSF3 71K views 1 year ago How To Withdraw Metamask MMETAMASK Crypto Into Your Bank Or Payp... WITHDRAW TO BANK OR The Social Guide How To Buy Bitcoin On MoonPay 2023 \| Purchase BTC In MoonPay Account I MoonPay 33K views 1 year ago PAYPAL 8:19 App How To Buy Bitcoin on Moonpay . MoonPay Login Aid (Full 2024 Guide) Share 546 Save HOW TO 29.3K subscribers Andy's Guides BUY 140 views 1 monthago BITCOIN 3:10 66K views 9 months ago #MoonPay n RTCIn MnnnPwAt7tznIInt I MnnnPAV Ann How to verify your identity on MoonPay? 9 It's cable reimagined MoonPay 32K views 2years ago No DVR space limits. No long-term contract. No hidden fees. No YouTubeTV cable box. No problems. P '(PAL How to Buy Bitcoin on PayPal TruFinanciaIs BUY BITCOIN 144K views 1 year ago Dismiss Try it free
URL: https://www.youtube.com/watch?v=dYfF32d6AcQ&t=4s Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": false, "urgency": false, "captcha": false, "reasons": [ "The webpage does not contain a login form explicitly requesting sensitive information.", "The text does not create a sense of urgency.", "The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism." ] }
Title: How To Buy Bitcoin On MoonPay 2023 \| Purchase BTC In MoonPay Account \| MoonPay App - YouTube OCR: YouTube @ Sign in Search How to buy crypto Bitcoimcom - Official Channel o 179K views 1 year ago Bitcoin $25,842.37 How To Buy Bitcoin On BUY MoonPay I Purchase BTC Inm BITCOIN Moon Login Helps - How to Tutorial 185 views 2 months ago MOON How To Buy Bitcoin On Cash App & Send To Another Wallet ere Think Stks 163K views 2 years ago 13:03 How to Buy Bitcoin on Cash App . and Send to Another Wallet ! Buy BITCOIN ON CASH APP How To Geek AND TRANSF3 71K views 1 year ago How To Withdraw Metamask MMETAMASK Crypto Into Your Bank Or Payp... WITHDRAW TO BANK OR The Social Guide How To Buy Bitcoin On MoonPay 2023 \| Purchase BTC In MoonPay Account I MoonPay 33K views 1 year ago PAYPAL 8:19 App How To Buy Bitcoin on Moonpay . MoonPay Login Aid (Full 2024 Guide) Share 546 Save HOW TO 29.3K subscribers Andy's Guides BUY 140 views 1 monthago BITCOIN 3:10 66K views 9 months ago #MoonPay n RTCIn MnnnPwAt7tznIInt I MnnnPAV Ann How to verify your identity on MoonPay? 9 It's cable reimagined MoonPay 32K views 2years ago No DVR space limits. No long-term contract. No hidden fees. No YouTubeTV cable box. No problems. P '(PAL How to Buy Bitcoin on PayPal TruFinanciaIs BUY BITCOIN 144K views 1 year ago Dismiss Try it free
URL: https://www.youtube.com/watch?v=dYfF32d6AcQ&t=4s Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": true, "urgency": false, "captcha": false, "reasons": [ "The webpage contains a login form which explicitly requests sensitive information such as email addresses and passwords.", "The text does not create a sense of urgency.", "The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism." ] }
Title: How To Buy Bitcoin On MoonPay 2023 \| Purchase BTC In MoonPay Account \| MoonPay App - YouTube OCR: YouTube @ Sign in Search How to buy crypto Bitcoimcom - Official Channel 179K views 1 year ago $0 How To Buy Bitcoin On BUY MoonPay I Purchase BTC Inm BITCOIN Moon Login Helps - How to Tutorial 185 views 2 months ago MOON $200 $300 How To Buy Bitcoin On Cash 2 3 App & Send To Another Wallet ere 4 5 6 Think Stks 163K views 2 years ago 13:03 7 8 9 How to Buy Bitcoin on Cash App . o a and Send to Another Wallet ! Buy BITCOIN ON CASH APP How To Geek AND TRANSF3 71K views 1 year ago How To Withdraw Metamask MMETAMASK Crypto Into Your Bank Or Payp... WITHDRAW TO BANK OR The Social Guide How To Buy Bitcoin On MoonPay 2023 \| Purchase BTC In MoonPay Account I MoonPay 33K views 1 year ago PAYPAL 8:19 App How To Buy Bitcoin on Moonpay . MoonPay Login Aid (Full 2024 Guide) Share 546 Save HOW TO 29.3K subscribers Andy's Guides BUY 140 views 1 monthago BITCOIN 3:10 66K views 9 months ago #MoonPay n RTCIn MnnnPwAt7tznIInt I MnnnPAV Ann How to verify your identity on MoonPay? 9 It's cable reimagined MoonPay 32K views 2years ago No DVR space limits. No long-term contract. No hidden fees. No YouTubeTV cable box. No problems. P '(PAL How to Buy Bitcoin on PayPal TruFinanciaIs BUY BITCOIN 144K views 1 year ago Dismiss Try it free
URL: https://www.youtube.com/watch?v=dYfF32d6AcQ&t=4s Model: Perplexity: mixtral-8x7b-instruct	{ "loginform": true, "urgency": false, "captcha": false, "reasons": [ "The webpage contains a login form which requests sensitive information such as email addresses and passwords.", "There is no sense of urgency created in the text.", "The webpage does not contain a CAPTCHA or any other anti-robot detection mechanism." ] }
Title: How To Buy Bitcoin On MoonPay 2023 \| Purchase BTC In MoonPay Account \| MoonPay App - YouTube OCR: YouTube @ Sign in Search How to buy crypto Bitcoimcom - Official Channel 179K views 1 year ago $ 1,000 How To Buy Bitcoin On BUY MoonPay I Purchase BTC Inm BITCOIN Moon Login Helps - How to Tutorial 185 views 2 months ago MOON $200 $300 $500 How To Buy Bitcoin On Cash 2 3 App & Send To Another Wallet ere 4 5 6 Think Stks 163K views 2 years ago 13:03 7 8 9 How to Buy Bitcoin on Cash App . o a and Send to Another Wallet ! Buy BITCOIN ON CASH APP How To Geek AND TRANSF3 71K views 1 year ago 0 0:35/ 1:59 How To Withdraw Metamask MMETAMASK Crypto Into Your Bank Or Payp... WITHDRAW TO BANK OR The Social Guide How To Buy Bitcoin On MoonPay 2023 \| Purchase BTC In MoonPay Account I MoonPay 33K views 1 year ago PAYPAL 8:19 App How To Buy Bitcoin on Moonpay . MoonPay Login Aid (Full 2024 Guide) Share 546 Save HOW TO 29.3K subscribers -'ides 1 month ago Want to watch this again later? 66K views 9 months ago #MoonPay n RTCIn MnnnPwAt7tznIInt I MnnnPAV Ann ify your identity on Sign in to add this video to a playlist. It's cable reimagined 2 years ago No DVR space limits. No long-term contract. No hidden fees. No Sign in YouTubeTV cable box. No problems. Buy Bitcoin on PayPal Tru Inancials BUY BITCOIN' 144K views 1 year ago Dismiss Try it free
URL: https://www.youtube.com Model: gpt-4o	```json { "phishing_score": 0, "brands": "YouTube", "phishing": false, "suspicious_domain": false, "has_loginform": false, "has_captcha": false, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "youtube.com", "reasons": "The URL 'https://www.youtube.com' is the legitimate domain for YouTube. The webpage appears to be a typical YouTube video page with no evident signs of phishing. There are no suspicious elements, login forms, captchas, or social engineering techniques present in the image. The domain is not suspicious and matches the legitimate domain for YouTube." }

URL: https://www.youtube.com Model: gpt-4o	```json { "phishing_score": 0, "brands": "YouTube", "phishing": false, "suspicious_domain": false, "has_loginform": false, "has_captcha": false, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "youtube.com", "reasons": "The URL 'https://www.youtube.com' is the legitimate domain for YouTube. The webpage appears to be a typical YouTube video page with no suspicious elements or social engineering techniques evident. There are no login forms or captchas present on the page. The content and layout are consistent with YouTube's standard design." }

URL: https://www.youtube.com Model: gpt-4o	```json { "phishing_score": 0, "brands": "YouTube", "phishing": false, "suspicious_domain": false, "has_loginform": true, "has_captcha": false, "setechniques": false, "has_suspicious_link": false, "legitmate_domain": "youtube.com", "reasons": "The URL 'https://www.youtube.com' is the legitimate domain for YouTube, a well-known video-sharing platform. The page layout, design, and elements such as the YouTube logo, video player, and related video suggestions are consistent with the legitimate YouTube website. There are no signs of social engineering techniques, suspicious links, or other indicators of phishing. The presence of a login form is standard for YouTube, allowing users to sign in to their accounts. Therefore, this site is determined to be legitimate." }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (65463)
Category:	downloaded
Size (bytes):	124718
Entropy (8bit):	5.405544619019178
Encrypted:	false
SSDEEP:	1536:btjznmKbl9fgYbqWEEu8F4VBbyadms6x9hLwvmH6yImpi:xLeWEK4Pby062
MD5:	FB3C850E24FDC50E302933573C6CE12D
SHA1:	7EEC90188E7209364CD3AC214B3D8B0414742C46
SHA-256:	2DFFF5C83200B03BA525D518531205161B97B3BD340E28C09DCA94BFA1B03A9B
SHA-512:	CB23C6CA9C55970CF644952A7F08D565A6BEE7F848B9C273BF04A304ECAD42C0BF10735BFCFD4CEFED0072046DA5BC94F354CC1F21C18FFFA029D6C7FE3B3390
Malicious:	false
Reputation:	low
URL:	https://buy.moonpay.com/static/js/7462.fba193c5.js
Preview:	/! For license information please see 7462.fba193c5.js.LICENSE.txt /.!function(){try{var e="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{},t=(new Error).stack;t&&(e._sentryDebugIds=e._sentryDebugIds\|\|{},e._sentryDebugIds[t]="8ed32de7-ff75-4bd9-b206-5a4682b93dac",e._sentryDebugIdIdentifier="sentry-dbid-8ed32de7-ff75-4bd9-b206-5a4682b93dac")}catch(e){}}();var _global="undefined"!=typeof window?window:"undefined"!=typeof global?global:"undefined"!=typeof self?self:{};_global.SENTRY_RELEASE={id:"893c798"},(self.webpackChunk_moonpay_widget_widget=self.webpackChunk_moonpay_widget_widget\|\|[]).push([[7462],{77388:(e,t,r)=>{"use strict";r.d(t,{yf:()=>yr});var n={log:"log",debug:"debug",info:"info",warn:"warn",error:"error"},o=function(e){for(var t=[],r=1;r<arguments.length;r++)t[r-1]=arguments[r];Object.prototype.hasOwnProperty.call(n,e)\|\|(e=n.log),o[e].apply(o,t)};function i(e,t){return function(){for(var r=[],n=0;n<arguments.length;n++)r[

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://cbnotifser.top/zkl1rest

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 431

Chrome Cache Entry: 432

Chrome Cache Entry: 433

Chrome Cache Entry: 434

Chrome Cache Entry: 435

Chrome Cache Entry: 436

Chrome Cache Entry: 437

Chrome Cache Entry: 438

Chrome Cache Entry: 439

Chrome Cache Entry: 440

Chrome Cache Entry: 441

Chrome Cache Entry: 442

Chrome Cache Entry: 443

Chrome Cache Entry: 444

Chrome Cache Entry: 445

Chrome Cache Entry: 446

Chrome Cache Entry: 447

Chrome Cache Entry: 448

Chrome Cache Entry: 449

Chrome Cache Entry: 450

Chrome Cache Entry: 451

Chrome Cache Entry: 452

Chrome Cache Entry: 453

Chrome Cache Entry: 454

Chrome Cache Entry: 455

Chrome Cache Entry: 456

Chrome Cache Entry: 457

Windows Analysis Report
https://cbnotifser.top/zkl1rest

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jun 18, 2024 00:17:10.275522947 CEST	192.168.2.4	1.1.1.1	0xe814	Standard query (0)	cbnotifser.top	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:10.275779009 CEST	192.168.2.4	1.1.1.1	0x31b3	Standard query (0)	cbnotifser.top	65	IN (0x0001)	false
Jun 18, 2024 00:17:12.223125935 CEST	192.168.2.4	1.1.1.1	0xe241	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:12.223551989 CEST	192.168.2.4	1.1.1.1	0x4b45	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:13.087805033 CEST	192.168.2.4	1.1.1.1	0xfe68	Standard query (0)	cbnotifser.top	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:13.088289022 CEST	192.168.2.4	1.1.1.1	0x7f8	Standard query (0)	cbnotifser.top	65	IN (0x0001)	false
Jun 18, 2024 00:17:24.730743885 CEST	192.168.2.4	1.1.1.1	0xd8e2	Standard query (0)	bitmaincontrol.top	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:24.731292963 CEST	192.168.2.4	1.1.1.1	0x40c2	Standard query (0)	bitmaincontrol.top	65	IN (0x0001)	false
Jun 18, 2024 00:17:26.344782114 CEST	192.168.2.4	1.1.1.1	0x3858	Standard query (0)	resapalosze.top	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:26.344954014 CEST	192.168.2.4	1.1.1.1	0x1734	Standard query (0)	resapalosze.top	65	IN (0x0001)	false
Jun 18, 2024 00:17:29.012720108 CEST	192.168.2.4	1.1.1.1	0xc68f	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:29.012898922 CEST	192.168.2.4	1.1.1.1	0x108b	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:32.048574924 CEST	192.168.2.4	1.1.1.1	0xdbd7	Standard query (0)	bitmaincontrol.top	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:32.049213886 CEST	192.168.2.4	1.1.1.1	0x7f42	Standard query (0)	bitmaincontrol.top	65	IN (0x0001)	false
Jun 18, 2024 00:17:40.892900944 CEST	192.168.2.4	1.1.1.1	0xc7d1	Standard query (0)	www.moonpay.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:40.893404961 CEST	192.168.2.4	1.1.1.1	0x2f0	Standard query (0)	www.moonpay.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:41.845967054 CEST	192.168.2.4	1.1.1.1	0x1a9f	Standard query (0)	cdn-ukwest.onetrust.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:41.846168041 CEST	192.168.2.4	1.1.1.1	0xf0ce	Standard query (0)	cdn-ukwest.onetrust.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:43.019912958 CEST	192.168.2.4	1.1.1.1	0x6823	Standard query (0)	moonpay-marketing-c337344.payloadcms.app	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:43.020139933 CEST	192.168.2.4	1.1.1.1	0x611f	Standard query (0)	moonpay-marketing-c337344.payloadcms.app	65	IN (0x0001)	false
Jun 18, 2024 00:17:43.557033062 CEST	192.168.2.4	1.1.1.1	0x7658	Standard query (0)	www.moonpay.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:43.559175968 CEST	192.168.2.4	1.1.1.1	0x3ce	Standard query (0)	www.moonpay.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:44.058881998 CEST	192.168.2.4	1.1.1.1	0x4ee	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:44.059071064 CEST	192.168.2.4	1.1.1.1	0x7f78	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:44.084690094 CEST	192.168.2.4	1.1.1.1	0x5ccd	Standard query (0)	cdn-ukwest.onetrust.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:44.085172892 CEST	192.168.2.4	1.1.1.1	0xe616	Standard query (0)	cdn-ukwest.onetrust.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:44.325402975 CEST	192.168.2.4	1.1.1.1	0xda1b	Standard query (0)	moonpay-marketing-c337344.payloadcms.app	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:44.325930119 CEST	192.168.2.4	1.1.1.1	0x59f1	Standard query (0)	moonpay-marketing-c337344.payloadcms.app	65	IN (0x0001)	false
Jun 18, 2024 00:17:45.093410015 CEST	192.168.2.4	1.1.1.1	0xc5e4	Standard query (0)	static.moonpay.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:45.094218016 CEST	192.168.2.4	1.1.1.1	0xe194	Standard query (0)	static.moonpay.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:45.164887905 CEST	192.168.2.4	1.1.1.1	0x35d2	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:45.165450096 CEST	192.168.2.4	1.1.1.1	0x438d	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:46.155662060 CEST	192.168.2.4	1.1.1.1	0xf9c4	Standard query (0)	static.moonpay.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:46.155971050 CEST	192.168.2.4	1.1.1.1	0xaefc	Standard query (0)	static.moonpay.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:46.466033936 CEST	192.168.2.4	1.1.1.1	0x18c7	Standard query (0)	o465989.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:46.466548920 CEST	192.168.2.4	1.1.1.1	0x5743	Standard query (0)	o465989.ingest.sentry.io	65	IN (0x0001)	false
Jun 18, 2024 00:17:47.253076077 CEST	192.168.2.4	1.1.1.1	0xc308	Standard query (0)	csp-report.browser-intake-datadoghq.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:47.253231049 CEST	192.168.2.4	1.1.1.1	0x9a52	Standard query (0)	csp-report.browser-intake-datadoghq.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:48.401510000 CEST	192.168.2.4	1.1.1.1	0x5cd1	Standard query (0)	app.launchdarkly.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:48.401665926 CEST	192.168.2.4	1.1.1.1	0x4f68	Standard query (0)	app.launchdarkly.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:48.423674107 CEST	192.168.2.4	1.1.1.1	0xd7ab	Standard query (0)	api.moonpay.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:48.423882008 CEST	192.168.2.4	1.1.1.1	0x1e1d	Standard query (0)	api.moonpay.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:48.424463987 CEST	192.168.2.4	1.1.1.1	0xd33f	Standard query (0)	buy.moonpay.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:48.424587011 CEST	192.168.2.4	1.1.1.1	0xa750	Standard query (0)	buy.moonpay.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:48.609108925 CEST	192.168.2.4	1.1.1.1	0xa60c	Standard query (0)	o465989.ingest.sentry.io	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:48.609357119 CEST	192.168.2.4	1.1.1.1	0xcc19	Standard query (0)	o465989.ingest.sentry.io	65	IN (0x0001)	false
Jun 18, 2024 00:17:49.341324091 CEST	192.168.2.4	1.1.1.1	0xf0a7	Standard query (0)	api.moonpay.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:49.341464043 CEST	192.168.2.4	1.1.1.1	0x2804	Standard query (0)	api.moonpay.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:49.439517021 CEST	192.168.2.4	1.1.1.1	0x2c22	Standard query (0)	pay.google.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:49.439913034 CEST	192.168.2.4	1.1.1.1	0x254b	Standard query (0)	pay.google.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:50.036104918 CEST	192.168.2.4	1.1.1.1	0xa895	Standard query (0)	app.launchdarkly.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:50.036104918 CEST	192.168.2.4	1.1.1.1	0xfc4b	Standard query (0)	app.launchdarkly.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:50.063678980 CEST	192.168.2.4	1.1.1.1	0x8c4e	Standard query (0)	clientstream.launchdarkly.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:50.063935995 CEST	192.168.2.4	1.1.1.1	0x7e6	Standard query (0)	clientstream.launchdarkly.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:51.206024885 CEST	192.168.2.4	1.1.1.1	0x2d63	Standard query (0)	api.coingecko.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:51.206352949 CEST	192.168.2.4	1.1.1.1	0x2471	Standard query (0)	api.coingecko.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:51.232017994 CEST	192.168.2.4	1.1.1.1	0xc8ca	Standard query (0)	js.verygoodvault.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:51.232203007 CEST	192.168.2.4	1.1.1.1	0xe997	Standard query (0)	js.verygoodvault.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:52.014184952 CEST	192.168.2.4	1.1.1.1	0xe68d	Standard query (0)	mpsnare.iesnare.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:52.014523029 CEST	192.168.2.4	1.1.1.1	0x999a	Standard query (0)	mpsnare.iesnare.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:52.015109062 CEST	192.168.2.4	1.1.1.1	0xaa82	Standard query (0)	pay.google.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:52.015391111 CEST	192.168.2.4	1.1.1.1	0x679c	Standard query (0)	pay.google.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:52.038496971 CEST	192.168.2.4	1.1.1.1	0xa652	Standard query (0)	google.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:52.038937092 CEST	192.168.2.4	1.1.1.1	0x954c	Standard query (0)	google.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:52.200216055 CEST	192.168.2.4	1.1.1.1	0xa580	Standard query (0)	api.coingecko.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:52.200604916 CEST	192.168.2.4	1.1.1.1	0x1dd9	Standard query (0)	api.coingecko.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:53.084567070 CEST	192.168.2.4	1.1.1.1	0x2de9	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:53.084759951 CEST	192.168.2.4	1.1.1.1	0xe172	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:53.469837904 CEST	192.168.2.4	1.1.1.1	0x8f84	Standard query (0)	pay.sandbox.google.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:53.470119953 CEST	192.168.2.4	1.1.1.1	0x10ac	Standard query (0)	pay.sandbox.google.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:53.848745108 CEST	192.168.2.4	1.1.1.1	0x9420	Standard query (0)	vitals.vercel-insights.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:53.848963022 CEST	192.168.2.4	1.1.1.1	0x56b8	Standard query (0)	vitals.vercel-insights.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:54.258605957 CEST	192.168.2.4	1.1.1.1	0x599e	Standard query (0)	pay.google.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:54.258908987 CEST	192.168.2.4	1.1.1.1	0x6d75	Standard query (0)	pay.google.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:54.274142981 CEST	192.168.2.4	1.1.1.1	0x6f35	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:54.274283886 CEST	192.168.2.4	1.1.1.1	0x5151	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:56.012732983 CEST	192.168.2.4	1.1.1.1	0x2b05	Standard query (0)	cdn.segment.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:56.012857914 CEST	192.168.2.4	1.1.1.1	0x898	Standard query (0)	cdn.segment.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:56.051493883 CEST	192.168.2.4	1.1.1.1	0xb363	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:56.051635981 CEST	192.168.2.4	1.1.1.1	0xe77a	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:56.483366013 CEST	192.168.2.4	1.1.1.1	0xa57e	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:56.483514071 CEST	192.168.2.4	1.1.1.1	0x3692	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:57.579596996 CEST	192.168.2.4	1.1.1.1	0x802	Standard query (0)	pay.google.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:57.579977036 CEST	192.168.2.4	1.1.1.1	0xa413	Standard query (0)	pay.google.com	65	IN (0x0001)	false
Jun 18, 2024 00:17:58.756795883 CEST	192.168.2.4	1.1.1.1	0x4e71	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:17:58.756912947 CEST	192.168.2.4	1.1.1.1	0xe702	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:03.933481932 CEST	192.168.2.4	1.1.1.1	0xa351	Standard query (0)	static.hotjar.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:03.933612108 CEST	192.168.2.4	1.1.1.1	0xc23c	Standard query (0)	static.hotjar.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:05.119045019 CEST	192.168.2.4	1.1.1.1	0xbf65	Standard query (0)	script.hotjar.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:05.119045019 CEST	192.168.2.4	1.1.1.1	0x8e6a	Standard query (0)	script.hotjar.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:06.685442924 CEST	192.168.2.4	1.1.1.1	0x460f	Standard query (0)	events.launchdarkly.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:06.685590982 CEST	192.168.2.4	1.1.1.1	0x9cb	Standard query (0)	events.launchdarkly.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:06.697424889 CEST	192.168.2.4	1.1.1.1	0x614c	Standard query (0)	websdk.appsflyer.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:06.697662115 CEST	192.168.2.4	1.1.1.1	0xe6c1	Standard query (0)	websdk.appsflyer.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:08.902446985 CEST	192.168.2.4	1.1.1.1	0xae35	Standard query (0)	youtu.be	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:08.902616978 CEST	192.168.2.4	1.1.1.1	0x5024	Standard query (0)	youtu.be	65	IN (0x0001)	false
Jun 18, 2024 00:18:10.101625919 CEST	192.168.2.4	1.1.1.1	0xc173	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:10.102216005 CEST	192.168.2.4	1.1.1.1	0xadec	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:11.352036953 CEST	192.168.2.4	1.1.1.1	0x3770	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:11.352236986 CEST	192.168.2.4	1.1.1.1	0xb77c	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:11.976228952 CEST	192.168.2.4	1.1.1.1	0x7f18	Standard query (0)	rr2---sn-q4flrnez.googlevideo.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:11.976547956 CEST	192.168.2.4	1.1.1.1	0x4c58	Standard query (0)	rr2---sn-q4flrnez.googlevideo.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:12.842896938 CEST	192.168.2.4	1.1.1.1	0x131a	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:12.843771935 CEST	192.168.2.4	1.1.1.1	0x4897	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:16.466696978 CEST	192.168.2.4	1.1.1.1	0x7921	Standard query (0)	rr5---sn-q4fl6ndl.googlevideo.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:16.466814995 CEST	192.168.2.4	1.1.1.1	0x3cd4	Standard query (0)	rr5---sn-q4fl6ndl.googlevideo.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:17.085091114 CEST	192.168.2.4	1.1.1.1	0x7f5b	Standard query (0)	rr2---sn-q4fl6ns7.googlevideo.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:17.085256100 CEST	192.168.2.4	1.1.1.1	0x91a9	Standard query (0)	rr2---sn-q4fl6ns7.googlevideo.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:17.166268110 CEST	192.168.2.4	1.1.1.1	0xccf6	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:17.166625023 CEST	192.168.2.4	1.1.1.1	0xe0f5	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jun 18, 2024 00:18:17.354027987 CEST	192.168.2.4	1.1.1.1	0x7722	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:17.354186058 CEST	192.168.2.4	1.1.1.1	0x197d	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Jun 18, 2024 00:18:18.046196938 CEST	192.168.2.4	1.1.1.1	0x6eea	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:18.046329975 CEST	192.168.2.4	1.1.1.1	0xf964	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:18.232528925 CEST	192.168.2.4	1.1.1.1	0x9f88	Standard query (0)	rr5---sn-q4fl6ndl.googlevideo.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:18.232774019 CEST	192.168.2.4	1.1.1.1	0x6f9f	Standard query (0)	rr5---sn-q4fl6ndl.googlevideo.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:18.856203079 CEST	192.168.2.4	1.1.1.1	0x40c8	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:18.856473923 CEST	192.168.2.4	1.1.1.1	0x8757	Standard query (0)	youtube.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:19.277740955 CEST	192.168.2.4	1.1.1.1	0x5599	Standard query (0)	rr3---sn-q4flrn7r.googlevideo.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:19.277861118 CEST	192.168.2.4	1.1.1.1	0x2b6b	Standard query (0)	rr3---sn-q4flrn7r.googlevideo.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:20.254184008 CEST	192.168.2.4	1.1.1.1	0xf620	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:20.254307985 CEST	192.168.2.4	1.1.1.1	0xe1db	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:23.511600018 CEST	192.168.2.4	1.1.1.1	0x8744	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:23.511748075 CEST	192.168.2.4	1.1.1.1	0x130d	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:23.512075901 CEST	192.168.2.4	1.1.1.1	0x6de7	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:23.515348911 CEST	192.168.2.4	1.1.1.1	0x2e15	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jun 18, 2024 00:18:23.535231113 CEST	192.168.2.4	1.1.1.1	0x8534	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:23.535723925 CEST	192.168.2.4	1.1.1.1	0x4ee7	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:25.084472895 CEST	192.168.2.4	1.1.1.1	0x7896	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:25.084613085 CEST	192.168.2.4	1.1.1.1	0xfa3d	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Jun 18, 2024 00:18:25.088608027 CEST	192.168.2.4	1.1.1.1	0x3f8f	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jun 18, 2024 00:18:25.088732958 CEST	192.168.2.4	1.1.1.1	0x545c	Standard query (0)	www.google.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-06-17 22:16:57 UTC	59	OUT	GET / HTTP/1.1 Host: ipinfo.io Connection: Keep-Alive
2024-06-17 22:16:57 UTC	513	IN	HTTP/1.1 200 OK server: nginx/1.24.0 date: Mon, 17 Jun 2024 22:16:57 GMT content-type: application/json; charset=utf-8 Content-Length: 314 access-control-allow-origin: * x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff referrer-policy: strict-origin-when-cross-origin x-envoy-upstream-service-time: 2 via: 1.1 google strict-transport-security: max-age=2592000; includeSubDomains Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2024-06-17 22:16:57 UTC	314	IN	Data Raw: 7b 0a 20 20 22 69 70 22 3a 20 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 30 22 2c 0a 20 20 22 68 6f 73 74 6e 61 6d 65 22 3a 20 22 31 37 33 2e 32 35 34 2e 32 35 30 2e 39 30 2e 73 74 61 74 69 63 2e 71 75 61 64 72 61 6e 65 74 2e 63 6f 6d 22 2c 0a 20 20 22 63 69 74 79 22 3a 20 22 44 61 6c 6c 61 73 22 2c 0a 20 20 22 72 65 67 69 6f 6e 22 3a 20 22 54 65 78 61 73 22 2c 0a 20 20 22 63 6f 75 6e 74 72 79 22 3a 20 22 55 53 22 2c 0a 20 20 22 6c 6f 63 22 3a 20 22 33 32 2e 38 31 35 32 2c 2d 39 36 2e 38 37 30 33 22 2c 0a 20 20 22 6f 72 67 22 3a 20 22 41 53 38 31 30 30 20 51 75 61 64 72 61 4e 65 74 20 45 6e 74 65 72 70 72 69 73 65 73 20 4c 4c 43 22 2c 0a 20 20 22 70 6f 73 74 61 6c 22 3a 20 22 37 35 32 34 37 22 2c 0a 20 20 22 74 69 6d 65 7a 6f 6e 65 22 3a 20 22 41 6d 65 72 Data Ascii: { "ip": "173.254.250.90", "hostname": "173.254.250.90.static.quadranet.com", "city": "Dallas", "region": "Texas", "country": "US", "loc": "32.8152,-96.8703", "org": "AS8100 QuadraNet Enterprises LLC", "postal": "75247", "timezone": "Amer

Timestamp	Bytes transferred	Direction	Data
2024-06-17 22:17:11 UTC	665	OUT	GET /zkl1rest HTTP/1.1 Host: cbnotifser.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-17 22:17:11 UTC	188	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Mon, 17 Jun 2024 22:17:16 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-06-17 22:17:11 UTC	5960	IN	Data Raw: 31 37 33 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 3c 73 63 72 69 70 74 3e 0d 0a 20 20 20 76 61 72 20 70 61 67 65 5f 69 64 20 3d 20 39 3b 0d 0a 20 20 20 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 3c 73 63 72 69 70 74 20 74 79 70 65 3d 22 74 65 78 74 2f 6a 61 76 61 73 63 72 69 70 74 22 20 73 72 63 3d 22 6a 73 2f 72 65 64 69 72 65 63 74 2e 6a 73 22 3e 3c 2f 73 63 72 69 70 74 3e 0d 0a 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 3e 0d 0a 20 20 20 3c 6d Data Ascii: 173b<!DOCTYPE html><html lang="en"><head> <script> var page_id = 9; </script> <script type="text/javascript" src="js/redirect.js"></script> <meta charset="UTF-8"> <meta http-equiv="X-UA-Compatible" content="IE=edge"> <m

Timestamp	Bytes transferred	Direction	Data
2024-06-17 22:17:11 UTC	535	OUT	GET /js/redirect.js HTTP/1.1 Host: cbnotifser.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cbnotifser.top/zkl1rest Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-17 22:17:11 UTC	332	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Mon, 17 Jun 2024 22:17:16 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 2115 Last-Modified: Tue, 23 Apr 2024 12:17:19 GMT Connection: close ETag: "6627a6cf-843" Expires: Tue, 18 Jun 2024 22:17:16 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2024-06-17 22:17:11 UTC	2115	IN	Data Raw: 76 61 72 20 43 52 65 64 69 72 65 63 74 4e 61 6d 65 20 3d 20 27 70 61 67 65 5f 69 64 5f 6d 69 72 6e 74 6b 27 3b 0a 76 61 72 20 72 65 64 69 72 65 63 74 4c 61 73 74 50 61 67 65 20 3d 20 74 72 75 65 3b 0a 0a 76 61 72 20 63 6f 6f 6b 65 65 5f 70 61 67 65 5f 69 64 3b 0a 76 61 72 20 63 6f 6f 6b 65 65 5f 70 61 67 65 73 3b 0a 76 61 72 20 70 61 67 65 73 20 3d 20 7b 0a 20 20 20 30 3a 20 22 6e 65 77 74 72 61 6e 73 66 65 72 22 2c 0a 20 20 20 31 3a 20 22 73 69 67 6e 75 70 22 2c 0a 20 20 20 32 3a 20 22 73 65 61 72 63 68 74 72 61 6e 22 2c 0a 20 20 20 33 3a 20 22 73 65 61 72 63 68 74 72 61 6e 73 22 2c 0a 20 20 20 34 3a 20 22 67 65 74 70 73 6b 6c 22 2c 0a 20 20 20 35 3a 20 22 77 61 69 74 6f 70 65 72 61 74 22 2c 0a 20 20 20 36 3a 20 22 63 68 61 74 35 32 39 68 22 2c 0a 20 20 Data Ascii: var CRedirectName = 'page_id_mirntk';var redirectLastPage = true;var cookee_page_id;var cookee_pages;var pages = { 0: "newtransfer", 1: "signup", 2: "searchtran", 3: "searchtrans", 4: "getpskl", 5: "waitoperat", 6: "chat529h",

Timestamp	Bytes transferred	Direction	Data
2024-06-17 22:17:12 UTC	612	OUT	GET /npm/bootstrap%405.3.2/dist/css/bootstrap.min.css HTTP/1.1 Host: cbnotifser.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://cbnotifser.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://cbnotifser.top/zkl1rest Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-17 22:17:12 UTC	307	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Mon, 17 Jun 2024 22:17:17 GMT Content-Type: text/css Content-Length: 232948 Last-Modified: Tue, 23 Apr 2024 12:17:19 GMT Connection: close ETag: "6627a6cf-38df4" Expires: Tue, 18 Jun 2024 22:17:17 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2024-06-17 22:17:12 UTC	16077	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 73 2d 74 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 23 36 36 Data Ascii: @charset "UTF-8";/! Bootstrap v5.3.2 (https://getbootstrap.com/) * Copyright 2011-2023 The Bootstrap Authors * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#66
2024-06-17 22:17:12 UTC	16384	IN	Data Raw: 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 30 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 33 2c 2e 67 78 2d 73 6d 2d 33 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 72 65 6d 7d 2e 67 2d 73 6d 2d 33 2c 2e 67 79 2d 73 6d 2d 33 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 72 65 6d 7d 2e 67 2d 73 6d 2d 34 2c 2e 67 78 2d 73 6d 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 31 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 34 2c 2e 67 79 2d 73 6d 2d 34 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 31 2e 35 72 65 6d 7d 2e 67 2d 73 6d 2d 35 2c 2e 67 78 2d 73 6d 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 78 3a 33 72 65 6d 7d 2e 67 2d 73 6d 2d 35 2c 2e 67 79 2d 73 6d 2d 35 7b 2d 2d 62 73 2d 67 75 74 74 65 72 2d 79 3a 33 72 65 6d 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d Data Ascii: {--bs-gutter-y:0.5rem}.g-sm-3,.gx-sm-3{--bs-gutter-x:1rem}.g-sm-3,.gy-sm-3{--bs-gutter-y:1rem}.g-sm-4,.gx-sm-4{--bs-gutter-x:1.5rem}.g-sm-4,.gy-sm-4{--bs-gutter-y:1.5rem}.g-sm-5,.gx-sm-5{--bs-gutter-x:3rem}.g-sm-5,.gy-sm-5{--bs-gutter-y:3rem}}@media (min-
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 70 61 64 64 69 6e 67 3a 2e 32 35 72 65 6d 20 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 3a 2d 2e 32 35 72 65 6d 20 2d 2e 35 72 65 6d 3b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 65 6e 64 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 2e 35 72 65 6d 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 67 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 6d 20 2b 20 31 72 65 6d 20 2b 20 63 61 6c 63 28 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 2a 20 32 29 29 3b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 31 72 65 6d 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 32 35 72 65 6d 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 2d 6c 67 29 7d 2e 66 6f Data Ascii: padding:.25rem .5rem;margin:-.25rem -.5rem;-webkit-margin-end:.5rem;margin-inline-end:.5rem}.form-control-lg{min-height:calc(1.5em + 1rem + calc(var(--bs-border-width) * 2));padding:.5rem 1rem;font-size:1.25rem;border-radius:var(--bs-border-radius-lg)}.fo
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 37 35 72 65 6d 29 20 63 61 6c 63 28 2e 37 35 65 6d 20 2b 20 2e 33 37 35 72 65 6d 29 7d 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 2e 69 73 2d 76 61 6c 69 64 3a 66 6f 63 75 73 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 73 65 6c 65 63 74 3a 76 61 6c 69 64 3a 66 6f 63 75 73 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 66 6f 72 6d 2d 76 61 6c 69 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 30 20 30 20 2e 32 35 72 65 6d 20 72 67 62 61 28 76 61 72 28 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 72 67 62 29 2c 2e 32 35 29 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 63 6f 6c 6f 72 2e 69 73 2d 76 61 6c 69 64 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 63 6f 6e 74 72 Data Ascii: 75rem) calc(.75em + .375rem)}.form-select.is-valid:focus,.was-validated .form-select:valid:focus{border-color:var(--bs-form-valid-border-color);box-shadow:0 0 0 .25rem rgba(var(--bs-success-rgb),.25)}.form-control-color.is-valid,.was-validated .form-contr
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 65 72 2d 62 6f 74 74 6f 6d 3a 30 3b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 2e 33 65 6d 20 73 6f 6c 69 64 20 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 3a 65 6d 70 74 79 3a 3a 61 66 74 65 72 7b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 7b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 7a 69 6e 64 65 78 3a 31 30 30 30 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 6d 69 6e 2d 77 69 64 74 68 3a 31 30 72 65 6d 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 70 61 64 64 69 6e 67 2d 78 3a 30 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 70 61 64 64 69 6e 67 2d 79 3a 30 2e 35 72 65 6d 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 73 70 61 63 65 72 3a 30 2e 31 32 35 72 65 6d 3b 2d 2d 62 73 2d 64 Data Ascii: er-bottom:0;border-left:.3em solid transparent}.dropdown-toggle:empty::after{margin-left:0}.dropdown-menu{--bs-dropdown-zindex:1000;--bs-dropdown-min-width:10rem;--bs-dropdown-padding-x:0;--bs-dropdown-padding-y:0.5rem;--bs-dropdown-spacer:0.125rem;--bs-d
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 2e 6f 66 66 63 61 6e 76 61 73 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 73 6d 20 2e 6f 66 66 63 61 6e 76 61 73 20 2e 6f 66 66 63 61 6e 76 61 73 2d 62 6f 64 79 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 67 72 6f 77 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 76 69 73 69 62 6c 65 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 7b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 20 2e 6e 61 76 62 61 72 2d 6e 61 76 7b 66 6c 65 78 2d 64 69 Data Ascii: .offcanvas-header{display:none}.navbar-expand-sm .offcanvas .offcanvas-body{display:flex;flex-grow:0;padding:0;overflow-y:visible}}@media (min-width:768px){.navbar-expand-md{flex-wrap:nowrap;justify-content:flex-start}.navbar-expand-md .navbar-nav{flex-di
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 6e 61 74 69 6f 6e 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 6c 69 6e 6b 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 68 6f 76 65 72 2d 63 6f 6c 6f Data Ascii: nation-color:var(--bs-link-color);--bs-pagination-bg:var(--bs-body-bg);--bs-pagination-border-width:var(--bs-border-width);--bs-pagination-border-color:var(--bs-border-color);--bs-pagination-border-radius:var(--bs-border-radius);--bs-pagination-hover-colo
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 6c 65 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 61 63 74 69 76 65 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 61 63 74 69 76 65 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 73 75 63 63 65 73 73 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 29 7d 2e 6c 69 73 74 2d 67 72 6f 75 70 2d 69 74 65 6d 2d 69 6e 66 6f 7b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 69 6e 66 6f 2d 74 65 78 74 2d 65 6d 70 68 61 73 69 73 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 69 6e 66 6f 2d 62 67 2d 73 75 62 74 6c 65 29 3b 2d 2d 62 73 2d 6c 69 73 Data Ascii: le);--bs-list-group-active-bg:var(--bs-success-text-emphasis);--bs-list-group-active-border-color:var(--bs-success-text-emphasis)}.list-group-item-info{--bs-list-group-color:var(--bs-info-text-emphasis);--bs-list-group-bg:var(--bs-info-bg-subtle);--bs-lis
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 73 74 61 72 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 6e 6f 6e 65 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 77 6f 72 64 2d 62 72 65 61 6b 3a 6e 6f 72 6d 61 6c 3b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 72 6d 61 6c 3b 77 6f 72 64 2d 73 70 61 63 69 6e 67 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 62 72 65 61 6b 3a 61 75 74 6f 3b 66 6f 6e 74 2d 73 69 7a 65 3a 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 77 6f 72 64 Data Ascii: weight:400;line-height:1.5;text-align:left;text-align:start;text-decoration:none;text-shadow:none;text-transform:none;letter-spacing:normal;word-break:normal;white-space:normal;word-spacing:normal;line-break:auto;font-size:var(--bs-popover-font-size);word
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 2d 63 6f 6c 6f 72 29 3b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 62 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 70 61 64 64 69 6e 67 2d 62 6f 78 3b 6f 75 74 6c 69 6e 65 3a 30 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 74 72 61 6e 73 69 74 69 6f 6e 29 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 31 39 39 2e 39 38 70 78 29 20 61 6e 64 20 28 70 72 65 66 65 72 73 2d 72 65 64 75 63 65 64 2d 6d 6f 74 69 6f 6e 3a 72 65 64 75 63 65 29 7b 2e 6f 66 66 63 61 6e 76 61 73 2d 78 6c 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6e 6f 6e 65 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d Data Ascii: -color);visibility:hidden;background-color:var(--bs-offcanvas-bg);background-clip:padding-box;outline:0;transition:var(--bs-offcanvas-transition)}}@media (max-width:1199.98px) and (prefers-reduced-motion:reduce){.offcanvas-xl{transition:none}}@media (max-

Timestamp	Bytes transferred	Direction	Data
2024-06-17 22:17:12 UTC	548	OUT	GET /css/style.css HTTP/1.1 Host: cbnotifser.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://cbnotifser.top/zkl1rest Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-17 22:17:12 UTC	306	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Mon, 17 Jun 2024 22:17:17 GMT Content-Type: text/css Content-Length: 85009 Last-Modified: Tue, 23 Apr 2024 12:17:19 GMT Connection: close ETag: "6627a6cf-14c11" Expires: Tue, 18 Jun 2024 22:17:17 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2024-06-17 22:17:12 UTC	16078	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 22 2e 2e 2f 63 73 73 32 22 29 3b 0a 2f 2a 21 0a 41 6e 69 6d 61 74 65 2e 63 73 73 20 2d 20 68 74 74 70 3a 2f 2f 64 61 6e 65 64 65 6e 2e 6d 65 2f 61 6e 69 6d 61 74 65 0a 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 0a 0a 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 34 20 44 61 6e 69 65 6c 20 45 64 65 6e 0a 2a 2f 0a 2e 61 6e 69 6d 61 74 65 64 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 20 31 73 3b 0a 20 20 2d 77 65 62 6b 69 74 2d 61 6e Data Ascii: @import url("../css2");/!Animate.css - http://daneden.me/animateLicensed under the MIT license - http://opensource.org/licenses/MITCopyright (c) 2014 Daniel Eden/.animated { -webkit-animation-duration: 1s; animation-duration: 1s; -webkit-an
2024-06-17 22:17:12 UTC	16384	IN	Data Raw: 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 6e 6f 6e 65 3b 0a 20 20 7d 0a 7d 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 62 6f 75 6e 63 65 49 6e 52 69 67 68 74 20 7b 0a 20 20 30 25 2c 0a 20 20 36 30 25 2c 0a 20 20 37 35 25 2c 0a 20 20 39 30 25 2c 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 2c 20 30 2e 33 35 35 2c 20 31 29 3b 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2e 32 31 35 2c 20 30 2e 36 31 2c 20 30 2e 33 35 35 2c 20 31 29 3b 0a 20 20 7d 0a 20 20 30 25 20 7b 0a 20 20 20 20 6f 70 61 63 69 Data Ascii: transform: none; }}@keyframes bounceInRight { 0%, 60%, 75%, 90%, 100% { -webkit-transition-timing-function: cubic-bezier(0.215, 0.61, 0.355, 1); transition-timing-function: cubic-bezier(0.215, 0.61, 0.355, 1); } 0% { opaci
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 30 2c 20 31 35 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 31 2c 20 30 2c 20 2d 31 39 30 64 65 67 29 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 65 61 73 65 2d 6f 75 74 3b 0a 20 20 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 20 65 61 73 65 2d 6f 75 74 3b 0a 20 20 7d 0a 20 20 35 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 70 65 72 73 70 65 63 74 69 76 65 28 34 30 30 70 78 29 20 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 20 30 2c 20 31 35 30 70 78 29 20 72 6f 74 61 74 65 33 64 28 30 2c 20 31 2c 20 30 2c 20 2d 31 37 30 64 65 67 29 3b 0a 20 20 20 20 74 Data Ascii: translate3d(0, 0, 150px) rotate3d(0, 1, 0, -190deg); -webkit-animation-timing-function: ease-out; animation-timing-function: ease-out; } 50% { -webkit-transform: perspective(400px) translate3d(0, 0, 150px) rotate3d(0, 1, 0, -170deg); t
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 72 69 67 68 74 20 62 6f 74 74 6f 6d 3b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 39 30 64 65 67 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 33 64 28 30 2c 20 30 2c 20 31 2c 20 39 30 64 65 67 29 3b 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0a 20 20 7d 0a 7d 0a 0a 40 6b 65 79 66 72 61 6d 65 73 20 72 6f 74 61 74 65 4f 75 74 55 70 52 69 67 68 74 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 72 69 67 68 74 20 62 6f 74 74 6f 6d 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 20 72 69 67 68 74 20 62 6f 74 74 6f Data Ascii: sform-origin: right bottom; -webkit-transform: rotate3d(0, 0, 1, 90deg); transform: rotate3d(0, 0, 1, 90deg); opacity: 0; }}@keyframes rotateOutUpRight { 0% { -webkit-transform-origin: right bottom; transform-origin: right botto
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 69 6f 6e 2d 6e 61 6d 65 3a 20 73 6c 69 64 65 49 6e 4c 65 66 74 3b 0a 20 20 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 20 73 6c 69 64 65 49 6e 4c 65 66 74 3b 0a 7d 0a 0a 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 73 6c 69 64 65 49 6e 52 69 67 68 74 20 7b 0a 20 20 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 30 25 29 3b 0a 20 20 20 20 76 69 73 69 62 69 6c 69 74 79 3a 20 76 69 73 69 62 6c 65 3b 0a 20 20 7d 0a 20 20 31 30 30 25 20 7b 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 74 72 61 Data Ascii: ion-name: slideInLeft; animation-name: slideInLeft;}@-webkit-keyframes slideInRight { 0% { -webkit-transform: translateX(100%); transform: translateX(100%); visibility: visible; } 100% { -webkit-transform: translateX(0); tra
2024-06-17 22:17:13 UTC	3395	IN	Data Raw: 6f 6f 73 20 7b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0a 20 20 2d 6d 73 2d 66 6c 65 78 2d 77 72 61 70 3a 20 6e 6f 77 72 61 70 3b 0a 20 20 20 20 20 20 66 6c 65 78 2d 77 72 61 70 3a 20 6e 6f 77 72 61 70 3b 0a 7d 0a 0a 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 20 37 36 38 70 78 29 20 7b 0a 20 20 2e 62 6c 6f 74 6f 6f 73 20 7b 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0a 20 20 7d 0a 7d 0a 0a 2e 62 6c 6f 74 6f 6f 73 20 2e 6a 71 6c 7a 72 68 20 7b 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 20 20 20 20 20 20 20 20 20 20 Data Ascii: oos { display: -webkit-box; display: -ms-flexbox; display: flex; -ms-flex-wrap: nowrap; flex-wrap: nowrap;}@media (max-width: 768px) { .blotoos { display: block; }}.blotoos .jqlzrh { -webkit-box-sizing: border-box;

Timestamp	Bytes transferred	Direction	Data
2024-06-17 22:17:12 UTC	534	OUT	GET /js/all.min.js HTTP/1.1 Host: cbnotifser.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://cbnotifser.top/zkl1rest Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-17 22:17:12 UTC	338	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Mon, 17 Jun 2024 22:17:17 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 1726692 Last-Modified: Tue, 23 Apr 2024 12:17:19 GMT Connection: close ETag: "6627a6cf-1a58e4" Expires: Tue, 18 Jun 2024 22:17:17 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2024-06-17 22:17:12 UTC	16046	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 36 2e 31 2e 31 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 32 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0a 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 43 3d 7b 7d 2c 63 3d Data Ascii: /! Font Awesome Free 6.1.1 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) * Copyright 2022 Fonticons, Inc. */!function(){"use strict";var C={},c=
2024-06-17 22:17:12 UTC	16384	IN	Data Raw: 33 2e 37 7a 4d 33 31 31 2e 37 20 31 30 38 63 34 2d 31 32 2e 33 20 32 31 2e 31 2d 36 34 2e 33 20 33 37 2e 31 2d 36 34 2e 33 20 38 2e 36 20 30 20 31 30 2e 39 20 38 2e 39 20 31 30 2e 39 20 31 36 20 30 20 31 39 2e 31 2d 33 38 2e 36 20 31 32 34 2e 36 2d 34 37 2e 31 20 31 34 38 6c 2d 33 34 2d 36 20 33 33 2e 31 2d 39 33 2e 37 7a 4d 31 34 32 2e 33 20 34 38 2e 33 63 30 2d 31 31 2e 39 20 31 34 2e 35 2d 34 35 2e 37 20 34 36 2e 33 20 34 37 2e 31 6c 33 34 2e 36 20 31 30 30 2e 33 63 2d 31 35 2e 36 2d 31 2e 33 2d 32 37 2e 37 2d 33 2d 33 35 2e 34 20 31 2e 34 2d 31 30 2e 39 2d 32 38 2e 38 2d 34 35 2e 35 2d 31 31 39 2e 37 2d 34 35 2e 35 2d 31 34 38 2e 38 7a 4d 31 34 30 20 32 34 34 63 32 39 2e 33 20 30 20 36 37 2e 31 20 39 34 2e 36 20 36 37 2e 31 20 31 30 37 2e 34 20 30 20 Data Ascii: 3.7zM311.7 108c4-12.3 21.1-64.3 37.1-64.3 8.6 0 10.9 8.9 10.9 16 0 19.1-38.6 124.6-47.1 148l-34-6 33.1-93.7zM142.3 48.3c0-11.9 14.5-45.7 46.3 47.1l34.6 100.3c-15.6-1.3-27.7-3-35.4 1.4-10.9-28.8-45.5-119.7-45.5-148.8zM140 244c29.3 0 67.1 94.6 67.1 107.4 0
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 2d 31 32 2d 35 31 2e 37 20 36 30 2e 32 37 2d 31 30 32 2e 33 20 39 38 2d 31 33 32 2e 38 20 31 31 35 2e 39 2d 32 30 2e 35 39 2d 31 31 2e 31 38 2d 34 30 2e 38 34 2d 33 31 2e 37 38 2d 35 35 2e 37 31 2d 36 31 2e 34 39 2d 32 30 2d 33 39 2e 39 32 2d 33 30 2d 38 32 2e 33 39 2d 33 31 2e 35 37 2d 31 31 36 2e 31 20 31 32 2e 33 20 2e 39 31 20 32 35 2e 32 37 20 32 2e 31 37 20 33 38 2e 38 35 20 33 2e 38 38 2d 32 32 2e 32 39 20 33 36 2e 38 2d 31 34 2e 33 39 20 36 33 2d 31 33 2e 34 37 20 36 34 2e 32 33 20 30 2d 2e 30 37 2d 2e 39 35 2d 32 39 2e 31 37 20 32 30 2e 31 34 2d 35 39 2e 35 37 61 36 39 35 2e 32 20 36 39 35 2e 32 20 30 20 30 20 30 20 34 34 2e 36 37 20 31 35 32 2e 38 63 2e 39 33 2d 2e 33 38 20 31 2e 38 34 20 2e 38 38 20 31 38 2e 36 37 2d 38 2e 32 35 2d 32 36 2e 33 Data Ascii: -12-51.7 60.27-102.3 98-132.8 115.9-20.59-11.18-40.84-31.78-55.71-61.49-20-39.92-30-82.39-31.57-116.1 12.3 .91 25.27 2.17 38.85 3.88-22.29 36.8-14.39 63-13.47 64.23 0-.07-.95-29.17 20.14-59.57a695.2 695.2 0 0 0 44.67 152.8c.93-.38 1.84 .88 18.67-8.25-26.3
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 2d 32 30 2e 39 2d 32 2e 39 2d 37 2d 2e 36 2d 31 34 2d 2e 33 2d 32 30 2e 38 20 31 2e 39 2d 36 2e 37 20 32 2e 32 2d 31 31 2e 37 20 36 2e 32 2d 31 33 2e 37 20 31 33 2e 31 2d 31 2e 36 20 35 2e 34 2d 31 2e 36 20 31 30 2e 38 20 2e 31 20 31 36 2e 32 20 31 2e 36 20 35 2e 35 20 35 2e 32 20 39 2e 32 20 31 30 2e 34 20 31 31 2e 32 7a 4d 35 37 36 20 38 30 76 33 35 32 63 30 20 32 36 2e 35 2d 32 31 2e 35 20 34 38 2d 34 38 20 34 38 48 34 38 63 2d 32 36 2e 35 20 30 2d 34 38 2d 32 31 2e 35 2d 34 38 2d 34 38 56 38 30 63 30 2d 32 36 2e 35 20 32 31 2e 35 2d 34 38 20 34 38 2d 34 38 68 34 38 30 63 32 36 2e 35 20 30 20 34 38 20 32 31 2e 35 20 34 38 20 34 38 7a 6d 2d 32 30 37 2e 35 20 32 33 2e 39 63 2e 34 20 31 2e 37 20 2e 39 20 33 2e 34 20 31 2e 36 20 35 2e 31 20 31 36 2e 35 20 Data Ascii: -20.9-2.9-7-.6-14-.3-20.8 1.9-6.7 2.2-11.7 6.2-13.7 13.1-1.6 5.4-1.6 10.8 .1 16.2 1.6 5.5 5.2 9.2 10.4 11.2zM576 80v352c0 26.5-21.5 48-48 48H48c-26.5 0-48-21.5-48-48V80c0-26.5 21.5-48 48-48h480c26.5 0 48 21.5 48 48zm-207.5 23.9c.4 1.7 .9 3.4 1.6 5.1 16.5
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 2d 37 2e 31 2d 32 32 2e 37 2d 31 31 2e 39 2d 32 32 2e 37 2d 31 39 2e 32 20 2e 32 2d 36 2e 36 20 37 2e 33 2d 31 33 2e 34 20 32 33 2e 31 2d 31 33 2e 34 20 31 33 2e 31 2d 2e 33 20 32 32 2e 37 20 32 2e 38 20 32 39 2e 39 20 35 2e 39 6c 33 2e 36 20 31 2e 37 20 35 2e 35 2d 33 33 2e 36 63 2d 37 2e 39 2d 33 2e 31 2d 32 30 2e 35 2d 36 2e 36 2d 33 36 2d 36 2e 36 2d 33 39 2e 37 20 30 2d 36 37 2e 36 20 32 31 2e 32 2d 36 37 2e 38 20 35 31 2e 34 2d 2e 33 20 32 32 2e 33 20 32 30 20 33 34 2e 37 20 33 35 2e 32 20 34 32 2e 32 20 31 35 2e 35 20 37 2e 36 20 32 30 2e 38 20 31 32 2e 36 20 32 30 2e 38 20 31 39 2e 33 2d 2e 32 20 31 30 2e 34 2d 31 32 2e 36 20 31 35 2e 32 2d 32 34 2e 31 20 31 35 2e 32 2d 31 36 20 30 2d 32 34 2e 36 2d 32 2e 35 2d 33 37 2e 37 2d 38 2e 33 6c 2d 35 2e Data Ascii: -7.1-22.7-11.9-22.7-19.2 .2-6.6 7.3-13.4 23.1-13.4 13.1-.3 22.7 2.8 29.9 5.9l3.6 1.7 5.5-33.6c-7.9-3.1-20.5-6.6-36-6.6-39.7 0-67.6 21.2-67.8 51.4-.3 22.3 20 34.7 35.2 42.2 15.5 7.6 20.8 12.6 20.8 19.3-.2 10.4-12.6 15.2-24.1 15.2-16 0-24.6-2.5-37.7-8.3l-5.
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 31 33 2e 36 20 35 30 34 20 30 20 33 39 34 2e 35 20 30 20 32 35 36 20 30 20 31 32 33 2e 31 20 31 30 34 2e 37 20 38 20 32 34 37 2e 36 20 38 7a 6d 2e 38 20 34 34 2e 37 43 31 33 30 2e 32 20 35 32 2e 37 20 34 34 2e 37 20 31 35 30 2e 36 20 34 34 2e 37 20 32 35 36 63 30 20 31 30 39 2e 38 20 39 31 2e 32 20 32 30 32 2e 38 20 32 30 33 2e 37 20 32 30 32 2e 38 20 31 30 33 2e 32 20 30 20 32 30 32 2e 38 2d 38 31 2e 31 20 32 30 32 2e 38 2d 32 30 32 2e 38 20 2e 31 2d 31 31 33 2e 38 2d 39 30 2e 32 2d 32 30 33 2e 33 2d 32 30 32 2e 38 2d 32 30 33 2e 33 7a 22 5d 2c 22 63 72 65 61 74 69 76 65 2d 63 6f 6d 6d 6f 6e 73 2d 6e 63 22 3a 5b 34 39 36 2c 35 31 32 2c 5b 5d 2c 22 66 34 65 38 22 2c 22 4d 32 34 37 2e 36 20 38 43 33 38 37 2e 34 20 38 20 34 39 36 20 31 31 35 2e 39 20 34 39 Data Ascii: 13.6 504 0 394.5 0 256 0 123.1 104.7 8 247.6 8zm.8 44.7C130.2 52.7 44.7 150.6 44.7 256c0 109.8 91.2 202.8 203.7 202.8 103.2 0 202.8-81.1 202.8-202.8 .1-113.8-90.2-203.3-202.8-203.3z"],"creative-commons-nc":[496,512,[],"f4e8","M247.6 8C387.4 8 496 115.9 49
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 33 37 2e 37 2d 33 31 2e 31 20 31 38 33 2d 38 30 2e 37 2d 34 35 2e 33 2d 32 34 2e 35 2d 37 33 2e 33 2d 36 36 2e 39 2d 38 37 2d 31 31 37 2e 38 7a 22 5d 2c 22 64 2d 61 6e 64 2d 64 22 3a 5b 35 37 36 2c 35 31 32 2c 5b 5d 2c 22 66 33 38 64 22 2c 22 4d 38 32 2e 35 20 39 38 2e 39 63 2d 2e 36 2d 31 37 2e 32 20 32 2d 33 33 2e 38 20 31 32 2e 37 2d 34 38 2e 32 20 2e 33 20 37 2e 34 20 31 2e 32 20 31 34 2e 35 20 34 2e 32 20 32 31 2e 36 20 35 2e 39 2d 32 37 2e 35 20 31 39 2e 37 2d 34 39 2e 33 20 34 32 2e 33 2d 36 35 2e 35 2d 31 2e 39 20 35 2e 39 2d 33 2e 35 20 31 31 2e 38 2d 33 20 31 37 2e 37 20 38 2e 37 2d 37 2e 34 20 31 38 2e 38 2d 31 37 2e 38 20 34 34 2e 34 2d 32 32 2e 37 20 31 34 2e 37 2d 32 2e 38 20 32 39 2e 37 2d 32 20 34 32 2e 31 20 31 20 33 38 2e 35 20 39 2e 33 Data Ascii: 37.7-31.1 183-80.7-45.3-24.5-73.3-66.9-87-117.8z"],"d-and-d":[576,512,[],"f38d","M82.5 98.9c-.6-17.2 2-33.8 12.7-48.2 .3 7.4 1.2 14.5 4.2 21.6 5.9-27.5 19.7-49.3 42.3-65.5-1.9 5.9-3.5 11.8-3 17.7 8.7-7.4 18.8-17.8 44.4-22.7 14.7-2.8 29.7-2 42.1 1 38.5 9.3
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 20 37 33 2e 36 2d 33 2e 37 20 31 30 33 2e 38 2d 38 2e 37 20 34 2e 37 2d 32 35 2e 38 20 31 31 2e 31 2d 34 38 2e 34 20 31 30 2e 37 48 32 2e 34 63 2d 38 2e 37 20 35 30 2e 38 20 35 2e 38 20 31 31 36 2e 38 20 34 34 20 31 36 32 2e 31 20 33 37 2e 31 20 34 33 2e 39 20 39 32 2e 37 20 36 36 2e 32 20 31 36 35 2e 34 20 36 36 2e 32 20 31 35 37 2e 34 20 30 20 32 37 33 2e 39 2d 37 32 2e 35 20 33 32 38 2e 34 2d 32 30 34 2e 32 20 32 31 2e 34 20 2e 34 20 36 37 2e 36 20 2e 31 20 39 31 2e 33 2d 34 35 2e 32 20 31 2e 35 2d 32 2e 35 20 36 2e 36 2d 31 33 2e 32 20 38 2e 35 2d 31 37 2e 31 6c 2d 31 33 2e 33 2d 38 2e 39 7a 6d 2d 35 31 31 2e 31 2d 32 37 2e 39 68 2d 36 36 76 35 39 2e 34 68 36 36 2e 31 76 2d 35 39 2e 34 7a 6d 37 38 2e 31 20 30 68 2d 36 36 2e 31 76 35 39 2e 34 68 36 36 Data Ascii: 73.6-3.7 103.8-8.7 4.7-25.8 11.1-48.4 10.7H2.4c-8.7 50.8 5.8 116.8 44 162.1 37.1 43.9 92.7 66.2 165.4 66.2 157.4 0 273.9-72.5 328.4-204.2 21.4 .4 67.6 .1 91.3-45.2 1.5-2.5 6.6-13.2 8.5-17.1l-13.3-8.9zm-511.1-27.9h-66v59.4h66.1v-59.4zm78.1 0h-66.1v59.4h66
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 2d 33 35 2e 34 20 33 35 2e 34 2d 33 35 2e 34 73 33 35 2e 35 20 31 35 2e 38 20 33 35 2e 35 20 33 35 2e 34 7a 4d 32 34 38 20 38 43 31 31 31 20 38 20 30 20 31 31 39 20 30 20 32 35 36 73 31 31 31 20 32 34 38 20 32 34 38 20 32 34 38 20 32 34 38 2d 31 31 31 20 32 34 38 2d 32 34 38 53 33 38 35 20 38 20 32 34 38 20 38 7a 6d 30 20 34 37 38 2e 33 43 31 32 31 20 34 38 36 2e 33 20 31 37 2e 37 20 33 38 33 20 31 37 2e 37 20 32 35 36 53 31 32 31 20 32 35 2e 37 20 32 34 38 20 32 35 2e 37 20 34 37 38 2e 33 20 31 32 39 20 34 37 38 2e 33 20 32 35 36 20 33 37 35 20 34 38 36 2e 33 20 32 34 38 20 34 38 36 2e 33 7a 22 5d 2c 66 61 63 65 62 6f 6f 6b 3a 5b 35 31 32 2c 35 31 32 2c 5b 36 32 65 33 5d 2c 22 66 30 39 61 22 2c 22 4d 35 30 34 20 32 35 36 43 35 30 34 20 31 31 39 20 33 39 Data Ascii: -35.4 35.4-35.4s35.5 15.8 35.5 35.4zM248 8C111 8 0 119 0 256s111 248 248 248 248-111 248-248S385 8 248 8zm0 478.3C121 486.3 17.7 383 17.7 256S121 25.7 248 25.7 478.3 129 478.3 256 375 486.3 248 486.3z"],facebook:[512,512,[62e3],"f09a","M504 256C504 119 39
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 20 31 20 2e 34 20 32 20 2e 37 20 33 20 2e 32 20 2e 39 20 2e 35 20 31 2e 38 20 2e 37 20 32 2e 37 20 2e 33 20 31 20 2e 35 20 31 2e 39 20 2e 38 20 32 2e 39 20 2e 33 20 2e 39 20 2e 35 20 31 2e 38 20 2e 38 20 32 2e 37 20 2e 32 20 2e 39 20 2e 35 20 31 2e 39 20 2e 38 20 32 2e 38 73 2e 35 20 31 2e 38 20 2e 38 20 32 2e 37 63 2e 33 20 31 20 2e 36 20 31 2e 39 20 2e 39 20 32 2e 38 20 2e 36 20 31 2e 36 20 31 2e 31 20 33 2e 33 20 31 2e 37 20 34 2e 39 20 2e 34 20 31 20 2e 37 20 31 2e 39 20 31 20 32 2e 38 20 2e 33 20 31 20 2e 37 20 32 20 31 2e 31 20 33 20 2e 33 20 2e 38 20 2e 36 20 31 2e 35 20 2e 39 20 32 2e 33 6c 31 2e 32 20 33 63 2e 33 20 2e 37 20 2e 36 20 31 2e 35 20 2e 39 20 32 2e 32 20 2e 34 20 31 20 2e 39 20 32 20 31 2e 33 20 33 6c 2e 39 20 32 2e 31 63 2e 35 20 31 Data Ascii: 1 .4 2 .7 3 .2 .9 .5 1.8 .7 2.7 .3 1 .5 1.9 .8 2.9 .3 .9 .5 1.8 .8 2.7 .2 .9 .5 1.9 .8 2.8s.5 1.8 .8 2.7c.3 1 .6 1.9 .9 2.8 .6 1.6 1.1 3.3 1.7 4.9 .4 1 .7 1.9 1 2.8 .3 1 .7 2 1.1 3 .3 .8 .6 1.5 .9 2.3l1.2 3c.3 .7 .6 1.5 .9 2.2 .4 1 .9 2 1.3 3l.9 2.1c.5 1

Timestamp	Bytes transferred	Direction	Data
2024-06-17 22:17:12 UTC	569	OUT	GET /jquery-3.6.3.min.js HTTP/1.1 Host: cbnotifser.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://cbnotifser.top sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://cbnotifser.top/zkl1rest Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-17 22:17:12 UTC	335	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Mon, 17 Jun 2024 22:17:17 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 89947 Last-Modified: Tue, 23 Apr 2024 12:17:19 GMT Connection: close ETag: "6627a6cf-15f5b" Expires: Tue, 18 Jun 2024 22:17:17 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2024-06-17 22:17:12 UTC	16049	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 33 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.3 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-06-17 22:17:12 UTC	16384	IN	Data Raw: 63 65 28 30 2c 33 29 2c 6d 3d 22 6c 61 73 74 22 21 3d 3d 68 2e 73 6c 69 63 65 28 2d 34 29 2c 78 3d 22 6f 66 2d 74 79 70 65 22 3d 3d 3d 65 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 67 26 26 30 3d 3d 3d 79 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 21 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 76 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 76 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d Data Ascii: ce(0,3),m="last"!==h.slice(-4),x="of-type"===e;return 1===g&&0===y?function(e){return!!e.parentNode}:function(e,t,n){var r,i,o,a,s,u,l=v!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(v){while(l){a=
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 79 2e 74 68 65 6e 3d 46 2e 74 68 65 6e 2c 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 53 2e 72 65 61 64 79 53 74 61 74 65 7c 7c 22 6c 6f 61 64 69 6e 67 22 21 3d 3d 53 2e 72 65 61 64 79 53 74 61 74 65 26 26 21 53 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 64 6f 53 63 72 6f 6c 6c 3f 43 2e 73 65 74 54 69 6d 65 6f 75 74 28 45 2e 72 65 61 64 79 29 3a 28 53 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 24 29 2c 43 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 24 29 29 3b 76 61 72 20 42 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 29 7b 76 61 72 20 73 3d 30 2c 75 3d 65 2e 6c 65 6e 67 74 68 2c 6c 3d 6e 75 6c 6c 3d 3d 6e 3b 69 66 28 22 6f 62 6a Data Ascii: y.then=F.then,"complete"===S.readyState\|\|"loading"!==S.readyState&&!S.documentElement.doScroll?C.setTimeout(E.ready):(S.addEventListener("DOMContentLoaded",$),C.addEventListener("load",$));var B=function(e,t,n,r,i,o,a){var s=0,u=e.length,l=null==n;if("obj
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 66 69 6c 74 65 72 28 74 2c 65 29 3a 65 2c 6f 3d 30 3b 6e 75 6c 6c 21 3d 28 72 3d 69 5b 6f 5d 29 3b 6f 2b 2b 29 6e 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 45 2e 63 6c 65 61 6e 44 61 74 61 28 79 65 28 72 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 28 6e 26 26 69 65 28 72 29 26 26 76 65 28 79 65 28 72 2c 22 73 63 72 69 70 74 22 29 29 2c 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 72 29 29 3b 72 65 74 75 72 6e 20 65 7d 45 2e 65 78 74 65 6e 64 28 7b 68 74 6d 6c 50 72 65 66 69 6c 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 7d 2c 63 6c 6f 6e 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 3d 65 2e 63 6c 6f 6e 65 4e 6f 64 Data Ascii: filter(t,e):e,o=0;null!=(r=i[o]);o++)n\|\|1!==r.nodeType\|\|E.cleanData(ye(r)),r.parentNode&&(n&&ie(r)&&ve(ye(r,"script")),r.parentNode.removeChild(r));return e}E.extend({htmlPrefilter:function(e){return e},clone:function(e,t,n){var r,i,o,a,s,u,l,c=e.cloneNod
2024-06-17 22:17:13 UTC	16384	IN	Data Raw: 65 72 73 2e 70 75 73 68 28 65 29 2c 45 2e 66 78 2e 73 74 61 72 74 28 29 7d 2c 45 2e 66 78 2e 69 6e 74 65 72 76 61 6c 3d 31 33 2c 45 2e 66 78 2e 73 74 61 72 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 74 7c 7c 28 6e 74 3d 21 30 2c 73 74 28 29 29 7d 2c 45 2e 66 78 2e 73 74 6f 70 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6e 74 3d 6e 75 6c 6c 7d 2c 45 2e 66 78 2e 73 70 65 65 64 73 3d 7b 73 6c 6f 77 3a 36 30 30 2c 66 61 73 74 3a 32 30 30 2c 5f 64 65 66 61 75 6c 74 3a 34 30 30 7d 2c 45 2e 66 6e 2e 64 65 6c 61 79 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 65 29 7b 72 65 74 75 72 6e 20 72 3d 45 2e 66 78 26 26 45 2e 66 78 2e 73 70 65 65 64 73 5b 72 5d 7c 7c 72 2c 65 3d 65 7c 7c 22 66 78 22 2c 74 68 69 73 2e 71 75 65 75 65 28 65 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 Data Ascii: ers.push(e),E.fx.start()},E.fx.interval=13,E.fx.start=function(){nt\|\|(nt=!0,st())},E.fx.stop=function(){nt=null},E.fx.speeds={slow:600,fast:200,_default:400},E.fn.delay=function(r,e){return r=E.fx&&E.fx.speeds[r]\|\|r,e=e\|\|"fx",this.queue(e,function(e,t){va
2024-06-17 22:17:13 UTC	8362	IN	Data Raw: 6f 6e 28 65 29 7b 45 28 74 68 69 73 29 2e 77 72 61 70 49 6e 6e 65 72 28 6e 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 29 7d 29 3a 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 45 28 74 68 69 73 29 2c 74 3d 65 2e 63 6f 6e 74 65 6e 74 73 28 29 3b 74 2e 6c 65 6e 67 74 68 3f 74 2e 77 72 61 70 41 6c 6c 28 6e 29 3a 65 2e 61 70 70 65 6e 64 28 6e 29 7d 29 7d 2c 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 6d 28 74 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 45 28 74 68 69 73 29 2e 77 72 61 70 41 6c 6c 28 6e 3f 74 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 3a 74 29 7d 29 7d 2c 75 6e 77 72 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 Data Ascii: on(e){E(this).wrapInner(n.call(this,e))}):this.each(function(){var e=E(this),t=e.contents();t.length?t.wrapAll(n):e.append(n)})},wrap:function(t){var n=m(t);return this.each(function(e){E(this).wrapAll(n?t.call(this,e):t)})},unwrap:function(e){return this

Timestamp	Bytes transferred	Direction	Data
2024-06-17 22:17:12 UTC	593	OUT	GET /img/logo.svg HTTP/1.1 Host: cbnotifser.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cbnotifser.top/zkl1rest Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-17 22:17:12 UTC	308	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Mon, 17 Jun 2024 22:17:17 GMT Content-Type: image/svg+xml Content-Length: 3788 Last-Modified: Tue, 23 Apr 2024 12:17:19 GMT Connection: close ETag: "6627a6cf-ecc" Expires: Tue, 18 Jun 2024 22:17:17 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2024-06-17 22:17:12 UTC	3788	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 33 35 39 22 20 68 65 69 67 68 74 3d 22 36 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 35 39 20 36 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 67 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 63 6c 69 70 30 29 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 37 32 2e 33 30 39 34 20 31 37 2e 38 36 37 36 43 35 39 2e 32 39 34 31 20 31 37 2e 38 36 37 36 20 34 39 2e 31 32 34 35 20 32 37 2e 37 34 37 38 20 34 39 2e 31 32 34 35 20 34 30 2e 39 37 34 34 43 34 39 2e 31 32 34 35 20 35 34 2e 32 30 31 31 20 35 39 2e 30 33 37 31 20 36 33 2e 39 39 36 37 20 37 32 2e 33 30 39 34 20 36 33 2e 39 39 36 37 43 38 35 2e 35 38 31 36 Data Ascii: <svg width="359" height="64" viewBox="0 0 359 64" fill="none" xmlns="http://www.w3.org/2000/svg"><g clip-path="url(#clip0)"><path d="M72.3094 17.8676C59.2941 17.8676 49.1245 27.7478 49.1245 40.9744C49.1245 54.2011 59.0371 63.9967 72.3094 63.9967C85.5816

Timestamp	Bytes transferred	Direction	Data
2024-06-17 22:17:12 UTC	595	OUT	GET /img/mob__2.jpg HTTP/1.1 Host: cbnotifser.top Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://cbnotifser.top/zkl1rest Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-06-17 22:17:13 UTC	307	IN	HTTP/1.1 200 OK Server: nginx/1.18.0 Date: Mon, 17 Jun 2024 22:17:18 GMT Content-Type: image/jpeg Content-Length: 17747 Last-Modified: Tue, 23 Apr 2024 12:17:19 GMT Connection: close ETag: "6627a6cf-4553" Expires: Tue, 18 Jun 2024 22:17:18 GMT Cache-Control: max-age=86400 Accept-Ranges: bytes
2024-06-17 22:17:13 UTC	16077	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff ee 00 0e 41 64 6f 62 65 00 64 c0 00 00 00 01 ff db 00 84 00 06 04 04 04 05 04 06 05 05 06 09 06 05 06 09 0b 08 06 06 08 0b 0c 0a 0a 0b 0a 0a 0c 10 0c 0c 0c 0c 0c 0c 10 0c 0e 0f 10 0f 0e 0c 13 13 14 14 13 13 1c 1b 1b 1b 1c 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 01 07 07 07 0d 0c 0d 18 10 10 18 1a 15 11 15 1a 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f 1f ff c0 00 11 08 01 c0 01 90 03 01 11 00 02 11 01 03 11 01 ff c4 00 9e 00 01 00 03 01 01 01 01 01 00 00 00 00 00 00 00 00 00 01 03 04 02 05 06 07 08 01 01 01 01 01 01 01 00 00 Data Ascii: ExifII*Ducky<Adobed
2024-06-17 22:17:13 UTC	1670	IN	Data Raw: 4f a9 dd 1b 3d 1c d4 98 5c b5 2c b5 ec 2d 49 ed cf 46 bd 80 23 76 ae 0e 4f ee ee e1 b8 76 b9 33 3b 33 a0 f5 ba 47 3d ff 00 21 e9 5c 3e 7b 93 e1 bf b5 a7 05 df 0f bb 7f 2f 9f 18 c9 b3 76 83 bb 6e ed 35 d1 07 ac 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 80 83 e2 7e a1 7d 54 c2 f4 7c b4 b1 ec 21 90 cf e4 8d c2 9e 2f c4 c1 57 41 11 73 29 67 9a 72 10 86 36 66 f7 8b b5 f8 33 3a 0c 13 fd 5f 96 be 1a 03 b3 d3 57 e0 ea 5b 79 21 c3 d4 c0 19 46 dc eb 25 1f 35 8e 2b 6e ed 01 d7 e5 b6 ee 6b 3e 9f 62 0a 1f eb 6c 21 4a 5a d3 60 6d 07 57 47 94 8f 09 ff 00 1a 69 61 23 2b 73 44 f3 c6 ed 65 8b 95 c9 78 59 cf 98 fd 9e 64 1f 43 d1 9d 7f 0f 50 45 98 86 ee 3e 6c 3e 63 a7 e6 e4 66 31 b2 90 4c f1 39 46 d2 81 84 91 6a 32 01 c6 fa 8b b7 1f b1 07 ce 74 d7 d6 c6 Data Ascii: O=\,-IF#vOv3;3G=!\>{/vn5~}T\|!/WAs)gr6f3:_W[y!F%5+nk>bl!JZ`mWGia#+sDexYdCPE>l>cf1L9Fj2t