Edit tour

Windows Analysis Report
https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html

Overview

General Information

Sample URL:	https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html
Analysis ID:	1487417
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

HTML body contains low number of good links

HTML title does not match URL

Stores files to the Windows start menu directory

Uses insecure TLS / SSL version for HTTPS connection

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1048 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1732 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1992,i,9219879380406942620,8488647546866891641,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3792 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html	Avira URL Cloud: detection malicious, Label: phishing
Source: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html	SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html

LLM: Score: 8 Reasons: The domain 'pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev' is unusual and does not match the typical domain format for Metamask. This could indicate a phishing attempt or a non-official site. DOM: 0.0.pages.csv

Source: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html

HTTP Parser: Number of links: 0

Source: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html

HTTP Parser: Title: MetaMask does not match URL

Source: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html

HTTP Parser: <input type="password" .../> found

Source: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html	HTTP Parser: No <meta name="author".. found

Source: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49755 version: TLS 1.0

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49743 version: TLS 1.2

Source: unknown

HTTPS traffic detected: 23.1.237.91:443 -> 192.168.2.5:49755 version: TLS 1.0

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-d9e0fa9d4d5c442291d5788540921b89.r2.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /full.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tada.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /full.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tada.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "e750678c869a938dddf312693503c986-ssl"
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9If-None-Match: "e750678c869a938dddf312693503c986-ssl"

Source: global traffic	DNS traffic detected: DNS query: pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: bestfilltype.netlify.app
Source: global traffic	DNS traffic detected: DNS query: gtomitsuka.github.io
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_77.1.dr, chromecache_95.1.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_99.1.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_99.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/confirm.png
Source: chromecache_99.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-close.png
Source: chromecache_99.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-open.png
Source: chromecache_99.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/full.png
Source: chromecache_99.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/icon.png
Source: chromecache_99.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/logo.png
Source: chromecache_99.1.dr	String found in binary or memory: https://bestfilltype.netlify.app/tada.png
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_99.1.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_99.1.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_99.1.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_99.1.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_82.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_82.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_82.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_82.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_82.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_82.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_82.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_82.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_82.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_82.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_82.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_82.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_82.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_82.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_99.1.dr	String found in binary or memory: https://kandhsiahfh.publicvm.com/psa.php
Source: chromecache_99.1.dr	String found in binary or memory: https://metamask.io/
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_87.1.dr, chromecache_96.1.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49736 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.5:49743 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@16/51@20/13

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1992,i,9219879380406942620,8488647546866891641,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1992,i,9219879380406942620,8488647546866891641,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html	100%	Avira URL Cloud	phishing
https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	0%	URL Reputation	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#common-serializing-idioms	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/13378	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.1.1.min.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	URL Reputation	safe
https://metamask.io/	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.3.1.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#category-listed	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=137337	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	0%	URL Reputation	safe
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	0%	Avira URL Cloud	safe
https://github.com/jquery/jquery/pull/557)	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/confirm.png	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/full.png	0%	Avira URL Cloud	safe
https://github.com/eslint/eslint/issues/6125	0%	Avira URL Cloud	safe
https://github.com/eslint/eslint/issues/3229	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/icon.png	0%	Avira URL Cloud	safe
https://kandhsiahfh.publicvm.com/psa.php	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/eye-open.png	0%	Avira URL Cloud	safe
https://github.com/jquery/sizzle/pull/225	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/eye-close.png	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/logo.png	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/tada.png	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
gtomitsuka.github.io	185.199.109.153	true	false	unknown
pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev	104.18.3.35	true	true	unknown
code.jquery.com	151.101.2.137	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
www.google.com	142.250.184.196	true	false	unknown
bestfilltype.netlify.app	35.156.224.161	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/full.png	false	Avira URL Cloud: safe	unknown
https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html	true		unknown
https://bestfilltype.netlify.app/confirm.png	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.1.1.min.js	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.3.1.js	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	Avira URL Cloud: safe	unknown
https://bestfilltype.netlify.app/icon.png	false	Avira URL Cloud: safe	unknown
https://bestfilltype.netlify.app/logo.png	false	Avira URL Cloud: safe	unknown
https://bestfilltype.netlify.app/eye-close.png	false	Avira URL Cloud: safe	unknown
https://bestfilltype.netlify.app/tada.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
http://jquery.org/license	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://jsperf.com/thor-indexof-vs-for/5	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-75	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/6125	chromecache_87.1.dr, chromecache_96.1.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_87.1.dr, chromecache_96.1.dr	false	Avira URL Cloud: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_87.1.dr, chromecache_96.1.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://kandhsiahfh.publicvm.com/psa.php	chromecache_99.1.dr	false	Avira URL Cloud: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_77.1.dr, chromecache_95.1.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/13378	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-64	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-open.png	chromecache_99.1.dr	false	Avira URL Cloud: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://metamask.io/	chromecache_99.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_87.1.dr, chromecache_96.1.dr	false	Avira URL Cloud: safe	unknown
https://promisesaplus.com/#point-54	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://jquery.org/license	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-48	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_87.1.dr, chromecache_96.1.dr	false	Avira URL Cloud: safe	unknown
https://sizzlejs.com/	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_87.1.dr, chromecache_96.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.184.196	www.google.com	United States	15169	GOOGLEUS	false
104.18.3.35	pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev	United States	13335	CLOUDFLARENETUS	true
18.192.231.252	unknown	United States	16509	AMAZON-02US	false
185.199.109.153	gtomitsuka.github.io	Netherlands	54113	FASTLYUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
35.156.224.161	bestfilltype.netlify.app	United States	16509	AMAZON-02US	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false
185.199.110.153	unknown	Netherlands	54113	FASTLYUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1487417
Start date and time:	2024-08-04 00:54:36 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 49s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@16/51@20/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): dllhost.exe, WMIADAP.exe, SIHClient.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.185.238, 64.233.166.84, 142.250.186.163, 34.104.35.123, 142.250.186.74, 172.217.18.10, 142.250.186.131, 216.58.206.42, 216.58.212.138, 142.250.186.170, 172.217.16.202, 142.250.181.234, 142.250.185.74, 142.250.186.138, 142.250.186.42, 142.250.184.202, 142.250.186.106, 216.58.206.74, 172.217.18.106, 216.58.212.170, 142.250.184.234, 13.85.23.86, 93.184.221.240, 192.229.221.95, 13.85.23.206, 20.166.126.56
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, wu.azureedge.net, clients2.google.com, ocsp.digicert.com, bg.apr-52dd2-0503.edgecastdns.net, cs11.wpc.v0cdn.net, ocsp.edge.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, hlb.apr-52dd2-0.edgecastdns.net, update.googleapis.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, wu.ec.azureedge.net, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html

Simulations

Behavior and APIs

⊘No simulations

LLM Input / Output

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Aug 3 21:55:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.984617591184179
Encrypted:	false
SSDEEP:	48:8ddeTauxHHidAKZdA19ehwiZUklqehQy+3:8uPr/y
MD5:	50B404EC2E423BDABCBAA640DA9B68DA
SHA1:	74E75CE5A6748C076DED1F924D9F7C309964BAC3
SHA-256:	E02C8D1C1A54D3D649506C516ACA6E539561CDEA23567AF8A4707F5F1384D122
SHA-512:	C8AB376120EC5CBEF7371752B2797C277706A3F5AF707EF1887C08B834C22AFADD9E87FB5129BAD0D9F9E159CB5A333393A877D3ADC12A57C500F25C9ADA14CC
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....8.;....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........T'.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Aug 3 21:55:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2679
Entropy (8bit):	3.9997539061973
Encrypted:	false
SSDEEP:	48:85deTauxHHidAKZdA1weh/iZUkAQkqehvy+2:8aPZ9QWy
MD5:	ADD9AD699C5F7F57DC4D5F4DC2C191E4
SHA1:	02B5A48A5F4A687950B561CF8B7E93AC020C8394
SHA-256:	2ADF0A1D77607CA5E356DC3DE20FBB1C504C7F88BFE9420425407296E93A2284
SHA-512:	7B32C4290FBF9B3F840E9A28546EECC90A11A9465780C53EC4D61BAAB0B4FE32736478CB2A9BFFD057A1EE2A1B6BB5DC15A3F71B87B8AA81C35CC06EA6387E07
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....^-.;....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........T'.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Oct 4 12:54:07 2023, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2693
Entropy (8bit):	4.010507381325453
Encrypted:	false
SSDEEP:	48:8xXdeTausHHidAKZdA14tseh7sFiZUkmgqeh7sdy+BX:8xoPWnLy
MD5:	23524A792FE1D1571F3D2B27A775746E
SHA1:	A1D10A916805D81DF0548EA0C2DDE5F5CD963E5F
SHA-256:	8F8B929187931DE219EE23BE5012CE6F4C753407EF572E9119F40BC41287A962
SHA-512:	39543E8A0A4750C22DFF098E1A593DD61421AE66429DE2D09582A002F04B02F2975A71C16870BF727E0DA4DC99CC2CB433A3F9CCD8CE924844FA314359720E40
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,......e>....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VDW.n...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........T'.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Aug 3 21:55:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	4.000626886160947
Encrypted:	false
SSDEEP:	48:8VIdeTauxHHidAKZdA1vehDiZUkwqehjy+R:8zP6Vy
MD5:	742406DAC492D189077967D19FE42D58
SHA1:	D86DD2D33F0AE692687B3B0A001BF1567DBA470B
SHA-256:	87C267D265291CD3B92DF8B05A47F1DA2AEEC60418F46384E79D8ECD703B3BDC
SHA-512:	F59605F852004C15FAFB989E43023D3E64B5135F089BDEF265B346E4B7FFC9B2039AEF64FF145B6FD2A64406E024E26E184A13322DAD8AC44D02FE4E991ECE39
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.......;....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........T'.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Aug 3 21:55:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2681
Entropy (8bit):	3.989759941577536
Encrypted:	false
SSDEEP:	48:8AdeTauxHHidAKZdA1hehBiZUk1W1qehJy+C:8RP69py
MD5:	9F215FDD501BD2410C6AE0F6E365838C
SHA1:	90D25C5B0C7AB20DBC667974C41F2B75462BB979
SHA-256:	78A8B1D5BD21FB14171FC9A763C776BCFB1C5D98A589A11B782EA493575BECFE
SHA-512:	5B9FABBA2030F53AB416CDEE2166F16EFFEBE8919974F8960DCC8057C264DA3F7CBF60AE086CDC2E597E0C5AEED99DE8F4815AB088AFF04A287C4E740712467B
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,.....#.;....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........T'.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Sat Aug 3 21:55:27 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2683
Entropy (8bit):	3.998444907230477
Encrypted:	false
SSDEEP:	48:87FIdeTauxHHidAKZdA1duT+ehOuTbbiZUk5OjqehOuTbLy+yT+:8hpPET/TbxWOvTbLy7T
MD5:	BAECA01313ABAD473DF7DB4B2A5ABFA3
SHA1:	7C2C05D768D5C075C9B6FFD23EB4C3895BE3D767
SHA-256:	5AFC612C313A68EF6C2221F538F10FD7EC2D94ADE48750D473E68A891B8E3217
SHA-512:	07A7E413A1C5E6F108298AE9E73189B3DA990AA07559AEC3926175D6D8BFF2887367729597334D1749C6EEC474B6F10AC78C44905E41083D168CEE5014BBC183
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....j].;....N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........T'.......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Chrome Cache Entry: 72

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 28, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	581
Entropy (8bit):	7.384407033496332
Encrypted:	false
SSDEEP:	12:6v/7Pe/GHK8yPPTL4CA26F3LmaC8oNCzqvnmReCWpj5A6Qgt8rKDj6WTTWdMmW6Q:KpyPPThJ6FfFQC8mydJFVSdnWl3sc
MD5:	5FDBA10B3DD02AB00A4746C1C1FDAB89
SHA1:	584F3275D15147C3CBE5B99468D6EFC9E407B45B
SHA-256:	88746BDB585F8BF1DAA92CE979DBECF942F98C36E9E33AF52D5EE0BA43157306
SHA-512:	93D4BE6F500F76B0DD5588CBF8E876AEA916BA4A781FCAF91A78911582C5CE7706AAD260F4F9145AAEF9DCF5C6C7A8AD1766DDCD1B7144EC7D12E2DCD92DC85A
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/full.png
Preview:	.PNG........IHDR.............v.......sRGB.........gAMA......a.....pHYs..........o.d....IDATHK.K(Da.....bAY.....FQba.daa..BjR..B.I..[$B.$VHMcn..0...q..i.e6...u...H$.....y.....I.>..'.....#....=D...dX.P....<.pV.]a.6,.(..I.[22..T6.".?..Gh....(.}...#......p.(...5....O.b...Pf..Z&.m.^.....W....;.B.\|..>.....Fm.....(....?..g.....{.dn...,7P.(.M6._d~.....P$.....f......p...%.q.....z........<..)<.'.......[.A.....^<....O.....>.z.....a$..sZa>..n..3....L.....uF.D3...(...P...I-Z..^.b.Yq.C...S...f..Q......(..f..g...o/....T2...[x?BWX..j\|....r.<.Y5.....-..W.A...&9l....IEND.B`.

Chrome Cache Entry: 73

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 51 x 51, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	6472
Entropy (8bit):	7.9614440298074545
Encrypted:	false
SSDEEP:	192:0SXVB/e3XvblmlqpfQFjF7j+kFomx/c6lOOB:zlB/e3XZmApfejBqk+C/xxB
MD5:	F419183716DF0C9BCEFFF5389522958C
SHA1:	CF56E3EF9C5B162BECE6DFFE9E1B220526F7AC7E
SHA-256:	0DFA5859ACD573CAF7190FA333E1551503CC295EBABE5C7051C90CFBF9D190A9
SHA-512:	6623E40298585D89DF22A20DA5289E2A8109A78B0A1ACEBCE8F44CA79E0A9354DBA35C82B3E64192B1A971D9CDA1FA9FE1E37F8A4098A2376F731E2271D13C55
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...3...3.....:.0....pHYs.................sRGB.........gAMA......a.....IDATx..Z.t[.o.zO..[.b;..YI.)$i:.....)--.)s.2K.;.-S..t..J.P..J.............;V,.-[....2........yG...........^...........p...\.=......5e..45..u..[..W..8.......]...S..(.......V...rzH...\|.R..Z..E+....=w....o..'.ri'7..j.]4TV..h..2....n......../...3_...+..{..h..tp.,.(..&...3..~....V...y..&u...N..<.i.f.......{>..<4...g;n..t..hi..2...........;^n.`..}..&.N..0..w.....B...........>.U.So>.....#..O_..z...cYEQ.@Tq$).Dc.`...............c}[..qX.{u-_...x.....J.t.6r......bsE...ZNK9sz..4..:.p..%3........g$.........G.L...+.\|B....N.:...,..........x...a.i5S/.Yj.D..l_..........i..I.H.\|..jZ.5:.!h X....-.K.1.QSiVSS..!.......-.........LM...i}.7....!...v.5..6w...}..e.Qz.73>.C...e.??../Og.n;....{..%...)..Y...,...?b....=5....9E.y.9M...1g..I..?&.}%...:..5.p...{.q./..g.....,.4.{*(.z,;.......]{...^....Y..{^...\.....!-.e/...1....\..t..S.wA..9C...o.'.B.....iz...C..._(BM..IZ...R..S...S.<...

Chrome Cache Entry: 74

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	29430
Entropy (8bit):	7.932021329882632
Encrypted:	false
SSDEEP:	768:SaeZodMzD2pDddoBsdrfDjaSt+TR+kav6MpMhWwpr3BCk:SbP2pkBsdaSth76MpMhH
MD5:	94AB490CA05B42DCDFAF9252B8E81AB4
SHA1:	FFF88ED7570440539F9C26C54D8EF509ADC539D1
SHA-256:	68BA91DB08E7F6E67D5AA7C6314427E93475C351F08131961B244D173E92E460
SHA-512:	4B7C5184F15C04355974C34573F3959FA46AC40BD9DB077709E7E9FD3B6C1A2BA2BAB0D02119DE8F8E5F5B78DB4CFEBB77901BB7D3C2A133254579E0CB9DF63D
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............\r.f....pHYs...........~... .IDATx..}.x\..dy..n6.l..fq....i...H6!dS.d.X2...!t.q7.43.%w.&....BIB..t..q/....{.....}3o..hf4#.............z...W.\..p...U..W.\..p...U..W.\..p...U..W.\..p...U..W.\..p...U..W.\..p...U..W.\..p...5.._....".{..t..K....~..V/i.k..:..%...................kE-..d...A. ..T..K......w...uf...U.../>.q.....gz.FW{...c<.>(...V.....Em5.........5...<E.Bi......V.^...m...2v.W.v..O.{./v..k..3r.....?.tN.@p...<t........%.......j.....~...@-.C......t.\{.y..kK.:..0.G.........hO.v.....6-..=x...NwQ.........Y........?......Mk.t'.....v..p.+.o..v.......@Y...3 .k..l^t.".....p...*2.};.z&.%....4....y..~..CK.t.L....Zt.#.r.Zz...R...e..$0...........y.y...(<..T9).@t..C....#..h[@.../.....e.<@.(... ..A..W.........s.bJ..%....:..f...ZU...K...u..l............1...b`.E.ii... ..?\....v9.....a$.TOs"(..z.. 0.H..Rzhi)....>.\|.e..\|H.......@G.+..5&/C........."..._W..=.....(j...j.k.qv..39.s..r7.}}...?...Fs=.._q...+..^f.................@].:.

Chrome Cache Entry: 75

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 76

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 51 x 51, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	6472
Entropy (8bit):	7.9614440298074545
Encrypted:	false
SSDEEP:	192:0SXVB/e3XvblmlqpfQFjF7j+kFomx/c6lOOB:zlB/e3XZmApfejBqk+C/xxB
MD5:	F419183716DF0C9BCEFFF5389522958C
SHA1:	CF56E3EF9C5B162BECE6DFFE9E1B220526F7AC7E
SHA-256:	0DFA5859ACD573CAF7190FA333E1551503CC295EBABE5C7051C90CFBF9D190A9
SHA-512:	6623E40298585D89DF22A20DA5289E2A8109A78B0A1ACEBCE8F44CA79E0A9354DBA35C82B3E64192B1A971D9CDA1FA9FE1E37F8A4098A2376F731E2271D13C55
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/tada.png
Preview:	.PNG........IHDR...3...3.....:.0....pHYs.................sRGB.........gAMA......a.....IDATx..Z.t[.o.zO..[.b;..YI.)$i:.....)--.)s.2K.;.-S..t..J.P..J.............;V,.-[....2........yG...........^...........p...\.=......5e..45..u..[..W..8.......]...S..(.......V...rzH...\|.R..Z..E+....=w....o..'.ri'7..j.]4TV..h..2....n......../...3_...+..{..h..tp.,.(..&...3..~....V...y..&u...N..<.i.f.......{>..<4...g;n..t..hi..2...........;^n.`..}..&.N..0..w.....B...........>.U.So>.....#..O_..z...cYEQ.@Tq$).Dc.`...............c}[..qX.{u-_...x.....J.t.6r......bsE...ZNK9sz..4..:.p..%3........g$.........G.L...+.\|B....N.:...,..........x...a.i5S/.Yj.D..l_..........i..I.H.\|..jZ.5:.!h X....-.K.1.QSiVSS..!.......-.........LM...i}.7....!...v.5..6w...}..e.Qz.73>.C...e.??../Og.n;....{..%...)..Y...,...?b....=5....9E.y.9M...1g..I..?&.}%...:..5.p...{.q./..g.....,.4.{*(.z,;.......]{...^....Y..{^...\.....!-.e/...1....\..t..S.wA..9C...o.'.B.....iz...C..._(BM..IZ...R..S...S.<...

Chrome Cache Entry: 77

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 78

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 79

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 28, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	581
Entropy (8bit):	7.384407033496332
Encrypted:	false
SSDEEP:	12:6v/7Pe/GHK8yPPTL4CA26F3LmaC8oNCzqvnmReCWpj5A6Qgt8rKDj6WTTWdMmW6Q:KpyPPThJ6FfFQC8mydJFVSdnWl3sc
MD5:	5FDBA10B3DD02AB00A4746C1C1FDAB89
SHA1:	584F3275D15147C3CBE5B99468D6EFC9E407B45B
SHA-256:	88746BDB585F8BF1DAA92CE979DBECF942F98C36E9E33AF52D5EE0BA43157306
SHA-512:	93D4BE6F500F76B0DD5588CBF8E876AEA916BA4A781FCAF91A78911582C5CE7706AAD260F4F9145AAEF9DCF5C6C7A8AD1766DDCD1B7144EC7D12E2DCD92DC85A
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............v.......sRGB.........gAMA......a.....pHYs..........o.d....IDATHK.K(Da.....bAY.....FQba.daa..BjR..B.I..[$B.$VHMcn..0...q..i.e6...u...H$.....y.....I.>..'.....#....=D...dX.P....<.pV.]a.6,.(..I.[22..T6.".?..Gh....(.}...#......p.(...5....O.b...Pf..Z&.m.^.....W....;.B.\|..>.....Fm.....(....?..g.....{.dn...,7P.(.M6._d~.....P$.....f......p...%.q.....z........<..)<.'.......[.A.....^<....O.....>.z.....a$..sZa>..n..3....L.....uF.D3...(...P...I-Z..^.b.Yq.C...S...f..Q......(..f..g...o/....T2...[x?BWX..j\|....r.<.Y5.....-..W.A...&9l....IEND.B`.

Chrome Cache Entry: 80

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 81

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100), with no line terminators
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	3.6498905601708467
Encrypted:	false
SSDEEP:	6:wVqhhhhhhhhhhdimqhhhhhhhhhhhhhxmqhhhhhhhhhhhhhhhhDjqhhhhhhhhhhhW:wdmmjpmy
MD5:	8E4F858DC43CE5CD88CB1EB0C7FBBB00
SHA1:	66A55745B6E025FBD0D919858F04B87FBB977D6E
SHA-256:	2158C29A6D4F27D87634D2EA188345FECEB5D744A666EF20B079F3DB00A06344
SHA-512:	45F78A52C72041A05F51F70AB8BB6979246455B9AADDF922404EE8D67B1957EA8C05F3A71EF5F6BBA5104B42ABFCDB9D2CDA851512398CB0E12EEE2F18F5D6EB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISXQn8e4zOpQ6FfxIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBJyCeFv_9-17B6XEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEocBCa6c-qi5ulp8EgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEpwBCUAp7hw4y_uIEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcErEBCe0bbxQ9MfurEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQc?alt=proto
Preview:	CmwKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKhwEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKogEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKvQEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAK2AEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQc

Chrome Cache Entry: 82

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.355616801848795
Encrypted:	false
SSDEEP:	96:QO1a+Vc+ukO1abNQOEaDVc+ukOEaHNQOXauVc+ukOXaLNQOxMaRVc+ukOxMaqNQW:mEdFLQyU3T9a7gJdussnzk
MD5:	3B584B90739AC2DE5A21FF884FFE5428
SHA1:	DDAE0070CBC299E32AB0F61A3BDEFA3A4D4D07BE
SHA-256:	B54469A21994F21A482F3A8E006B7F887A973E9519C3D7D55D379FF2ACD33C87
SHA-512:	3A155086DAA5AD8D40A302BD1D5F744BC7D5A1B853ABFF1E41147328E13F50F168FC06245F178680290DD250BC44B8E369913A8889E8F451AA3A3BAD5191F11C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('w

Chrome Cache Entry: 83

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	dropped
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 84

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5552, version 1.0
Category:	downloaded
Size (bytes):	5552
Entropy (8bit):	7.955353879556499
Encrypted:	false
SSDEEP:	96:GWz5crMNRWIC8vTLyiVW3HwxoixvxFI2zg/M+2NZ9iA0H3yD8ubtRm/5x2s:GWlGM3W38vT/0Qx3+2zgE+CQnHCD8ubU
MD5:	AA42A9A3D4FC9951ED37945FF1AF85DC
SHA1:	6CD63D09CC1F526ABA20B654EF5B55F8104586C6
SHA-256:	A526DAC26FCC645D428764B07FD6AE2AD3399129B75C22C8E149278157291189
SHA-512:	BDD9DB6EF8B696FA29E774F73B80B8C2A0DBC39EEC455D88325E644D0FE8A044DF51EF9D4398AFFF221A8776B6B9F6D769E32FC60A2602AC8320F10955282779
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............2....].............................`.....(._..f..6.$..H. ..\..+.[3......E...EQ..1.?$h........+.m.X..q..N.VVNf+V...xXF..s1K..'.Pv_.wV.!.hh$1.y^....^...rVre.nAd...Vr)w.Z".....12a.Tj.... .(\0h..P.......p...x....?.E.of....ED........U...=..R.B...:c..5.k2....}.....L......:..._.#K...j....C..!w%8....gYD.]....h.Ul.....Z."M.nh:.~.....2.`..f...8P.@!{BU..3.o&.f.t.{...O6..-..~...".........{....u......Pq./..S.X.V.......1fz...ef`.#dq>.E...o.u[....{..emy./.....KD.........@0. \.S....j'.Y<T.'.0.Y..f...@.Lm.A..L...^...D.!...98..q....0............+vT....C8.o...Q....ne......L.a1...wM...r...zv....T?\#..R`o@....TDJ5...M.;/..x.t._..G.f....PY.i)I....{..........._._....)../5.M.(Y..uI..Inqov..wu..e.Nl...\R..\zL..5>.X$R..e.m....A......(d"c.QK........=...?pw..._1?..qk....++..-.)$a..X.e.l....N......jt.~5.W^.M+6..aT....a..IZ.n..i7..?..I7....^..ni<.;.?.....[`$.........{.l..........UD19.0.Vc..V......F.....%..V..l..b.5[i./.w(..G..`."./..._R.B....*5.....O

Chrome Cache Entry: 85

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 440 x 87, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	2854
Entropy (8bit):	7.74465090527579
Encrypted:	false
SSDEEP:	48:jmyydvpe2MBLuakAHZiFmYPW189LSiOuUqzk/C2bJvQV2OsMB8uKvQ5JYUJA2:j+htCLuakAHZwzWCztUqA/C2tvQVJshM
MD5:	658377D041ADD6DFF531446D93372623
SHA1:	6BC1F737C58EA71E6FC193D868D7C56E515D38C7
SHA-256:	461EF0864ED3D660C3F24B34676A3704F4609BDF6EFC82720C9119C1606CB0A1
SHA-512:	78DF56A914978C7DA369D7CDB41A14F67775B247C43CC698565BBF66EADB76A1EC4B13F060059EC73172AD8D2298F042D6F040C095CE083BD7EA56AB68A8CE6F
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.......W.....v.PP....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^....G..q..?.......}......-.......,.,.....a..!-..QP6..........'+........~.....Z..G.kS?Wwu......"...I"...I"...I"...I"...I"...I"...I"...I"...I"...I"...I"...I"...I"...I"...I"...I".V.?'.f......4?.......5?..C;..O.q..y4/.....;...K.dzd...9.....Wv.g..4.y...n.v.81?...._?l5h........{....i.f..ZF...7...5?......47.=3....<...........i.._Fe.,.i...t!....oN..o.5../.4...iZ.2.....l?8....P?..g.....4...Ce.L.i.eF.P_..y... ..y...u.L,".........??2.-.-..S..<.. .../.Pz..U....p.l.....p.qo....".t...CQY.\5...]Bt!..g....LW>.+..._.\|..u1v8*....9..#u.q..l..\KN....~....-.....I.........Us..N....\|...Us..N.p..97..z<..P.,........=...Q..>.J..u..<'G.u...V...ui.Z7...Zo...^..Zq9..%.RKA...sn}i]n.....?.RKA..<Zo......".Z.{#.2z.H[...2.G..L..[.7.h.....9.%u.s.\..R>\.c..s-.M.QI....#+d.v....1.I..:.nm..q...2.{N._.../....W\|[..Q.m.d.\K......#.I...:.nm..q./.(d...6.o^2.w...2.;.r.V..uk.6...~.

Chrome Cache Entry: 86

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 87

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 88

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 256 x 256, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	29430
Entropy (8bit):	7.932021329882632
Encrypted:	false
SSDEEP:	768:SaeZodMzD2pDddoBsdrfDjaSt+TR+kav6MpMhWwpr3BCk:SbP2pkBsdaSth76MpMhH
MD5:	94AB490CA05B42DCDFAF9252B8E81AB4
SHA1:	FFF88ED7570440539F9C26C54D8EF509ADC539D1
SHA-256:	68BA91DB08E7F6E67D5AA7C6314427E93475C351F08131961B244D173E92E460
SHA-512:	4B7C5184F15C04355974C34573F3959FA46AC40BD9DB077709E7E9FD3B6C1A2BA2BAB0D02119DE8F8E5F5B78DB4CFEBB77901BB7D3C2A133254579E0CB9DF63D
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/icon.png
Preview:	.PNG........IHDR.............\r.f....pHYs...........~... .IDATx..}.x\..dy..n6.l..fq....i...H6!dS.d.X2...!t.q7.43.%w.&....BIB..t..q/....{.....}3o..hf4#.............z...W.\..p...U..W.\..p...U..W.\..p...U..W.\..p...U..W.\..p...U..W.\..p...U..W.\..p...5.._....".{..t..K....~..V/i.k..:..%...................kE-..d...A. ..T..K......w...uf...U.../>.q.....gz.FW{...c<.>(...V.....Em5.........5...<E.Bi......V.^...m...2v.W.v..O.{./v..k..3r.....?.tN.@p...<t........%.......j.....~...@-.C......t.\{.y..kK.:..0.G.........hO.v.....6-..=x...NwQ.........Y........?......Mk.t'.....v..p.+.o..v.......@Y...3 .k..l^t.".....p...*2.};.z&.%....4....y..~..CK.t.L....Zt.#.r.Zz...R...e..$0...........y.y...(<..T9).@t..C....#..h[@.../.....e.<@.(... ..A..W.........s.bJ..%....:..f...ZU...K...u..l............1...b`.E.ii... ..?\....v9.....a$.TOs"(..z.. 0.H..Rzhi)....>.\|.e..\|H.......@G.+..5&/C........."..._W..=.....(j...j.k.qv..39.s..r7.}}...?...Fs=.._q...+..^f.................@].:.

Chrome Cache Entry: 89

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 197 x 46, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	3393
Entropy (8bit):	7.917508835175796
Encrypted:	false
SSDEEP:	48:8THV67FKkSuBlvKkSiQx5spWbS4e/FK9krqWqEiE3ISNdKkEO9DUnuQPnDBa3As:8THoYkSaRKy0VCdWW7JLNQqDUuu9S
MD5:	DFB72BACBB061E094FC7A7CDE620FD00
SHA1:	9799F5A0CA2AC4FF12A91C885380B8C74E99E879
SHA-256:	8EF89F39E8D91C95215C408083A0F88791FA85DA70D5B68680B9E53A28D4C21E
SHA-512:	984C12A7A9775A6AD1F314A46B0AA085B3868748A2DAA215649BA9D134DC5FE6BC02CA478784C157B1CC8A8E58A80F32AE742DF630CF9D12CBA3FD1124D768FA
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR....................sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..[.G.........yV...E%.O....h41jN.#.@....r...xa.IL4^x.I4.xF.T.tdD.\..}}...k.nj...w.n}...0].v..=.w.....A ......4.S....)........a..@..8.m5..}..{...T/.v?m.h1..g.v..EKs..#.8...hnl.7a.X:.E....9i...nCKe1.Z..h[[.ZoA...(.1.g....{ ..Qo......0...UO.....Di.}.......D....q.....c.U^C.m.u...@...(\3.yK\...8[...K..h..9.5...U.J...0_..]`^..OT..@.+h}jF[}.]5..E.)(.8..!....#.....OzR.8..t.CM.CT`.beJ........D.B\P.....$~85....Wp~.?VH.K......P.Na.)...Sn.2......W.1....j...VC..`..L..}Qg...D ...8.5.[.JE..A.2/..B/....BRe.'...N."}.y./w,..-....:yK....j.[g.q..'2;u.I..&.sMa.u......%...Z.'....E..}\.\|E%%..S....r\|Gr.2.b..[.s//.....&%..f...:F..........C..B....../...=m...A..Q..!.O......V..=^.eSVV...\|.p..}....Q...y.y.by.Gu...o....v1C......1d..je..%.>G...L~.....m.\|'O.G.G.>i!..=v<..<p.....l1...>j...h....^.L...*.\|.....'.\y+..5........n.v=. 1<.3.6..8. ..l..M.[...(MA...P.;...L..G...g..U.#.

Chrome Cache Entry: 90

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 440 x 87, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	2854
Entropy (8bit):	7.74465090527579
Encrypted:	false
SSDEEP:	48:jmyydvpe2MBLuakAHZiFmYPW189LSiOuUqzk/C2bJvQV2OsMB8uKvQ5JYUJA2:j+htCLuakAHZwzWCztUqA/C2tvQVJshM
MD5:	658377D041ADD6DFF531446D93372623
SHA1:	6BC1F737C58EA71E6FC193D868D7C56E515D38C7
SHA-256:	461EF0864ED3D660C3F24B34676A3704F4609BDF6EFC82720C9119C1606CB0A1
SHA-512:	78DF56A914978C7DA369D7CDB41A14F67775B247C43CC698565BBF66EADB76A1EC4B13F060059EC73172AD8D2298F042D6F040C095CE083BD7EA56AB68A8CE6F
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/confirm.png
Preview:	.PNG........IHDR.......W.....v.PP....sRGB.........gAMA......a.....pHYs..........o.d....IDATx^....G..q..?.......}......-.......,.,.....a..!-..QP6..........'+........~.....Z..G.kS?Wwu......"...I"...I"...I"...I"...I"...I"...I"...I"...I"...I"...I"...I"...I"...I"...I"...I".V.?'.f......4?.......5?..C;..O.q..y4/.....;...K.dzd...9.....Wv.g..4.y...n.v.81?...._?l5h........{....i.f..ZF...7...5?......47.=3....<...........i.._Fe.,.i...t!....oN..o.5../.4...iZ.2.....l?8....P?..g.....4...Ce.L.i.eF.P_..y... ..y...u.L,".........??2.-.-..S..<.. .../.Pz..U....p.l.....p.qo....".t...CQY.\5...]Bt!..g....LW>.+..._.\|..u1v8*....9..#u.q..l..\KN....~....-.....I.........Us..N....\|...Us..N.p..97..z<..P.,........=...Q..>.J..u..<'G.u...V...ui.Z7...Zo...^..Zq9..%.RKA...sn}i]n.....?.RKA..<Zo......".Z.{#.2z.H[...2.G..L..[.7.h.....9.%u.s.\..R>\.c..s-.M.QI....#+d.v....1.I..:.nm..q...2.{N._.../....W\|[..Q.m.d.\K......#.I...:.nm..q./.(d...6.o^2.w...2.;.r.V..uk.6...~.

Chrome Cache Entry: 91

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	downloaded
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
URL:	https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 92

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 93

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 197 x 46, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	3393
Entropy (8bit):	7.917508835175796
Encrypted:	false
SSDEEP:	48:8THV67FKkSuBlvKkSiQx5spWbS4e/FK9krqWqEiE3ISNdKkEO9DUnuQPnDBa3As:8THoYkSaRKy0VCdWW7JLNQqDUuu9S
MD5:	DFB72BACBB061E094FC7A7CDE620FD00
SHA1:	9799F5A0CA2AC4FF12A91C885380B8C74E99E879
SHA-256:	8EF89F39E8D91C95215C408083A0F88791FA85DA70D5B68680B9E53A28D4C21E
SHA-512:	984C12A7A9775A6AD1F314A46B0AA085B3868748A2DAA215649BA9D134DC5FE6BC02CA478784C157B1CC8A8E58A80F32AE742DF630CF9D12CBA3FD1124D768FA
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/logo.png
Preview:	.PNG........IHDR....................sRGB.........gAMA......a.....pHYs..........o.d....IDATx^..[.G.........yV...E%.O....h41jN.#.@....r...xa.IL4^x.I4.xF.T.tdD.\..}}...k.nj...w.n}...0].v..=.w.....A ......4.S....)........a..@..8.m5..}..{...T/.v?m.h1..g.v..EKs..#.8...hnl.7a.X:.E....9i...nCKe1.Z..h[[.ZoA...(.1.g....{ ..Qo......0...UO.....Di.}.......D....q.....c.U^C.m.u...@...(\3.yK\...8[...K..h..9.5...U.J...0_..]`^..OT..@.+h}jF[}.]5..E.)(.8..!....#.....OzR.8..t.CM.CT`.beJ........D.B\P.....$~85....Wp~.?VH.K......P.Na.)...Sn.2......W.1....j...VC..`..L..}Qg...D ...8.5.[.JE..A.2/..B/....BRe.'...N."}.y./w,..-....:yK....j.[g.q..'2;u.I..&.sMa.u......%...Z.'....E..}\.\|E%%..S....r\|Gr.2.b..[.s//.....&%..f...:F..........C..B....../...=m...A..Q..!.O......V..=^.eSVV...\|.p..}....Q...y.y.by.Gu...o....v1C......1d..je..%.>G...L~.....m.\|'O.G.G.>i!..=v<..<p.....l1...>j...h....^.L...*.\|.....'.\y+..5........n.v=. 1<.3.6..8. ..l..M.[...(MA...P.;...L..G...g..U.#.

Chrome Cache Entry: 94

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	880
Entropy (8bit):	7.6341757405740704
Encrypted:	false
SSDEEP:	24:lzjDZFqTNSi/r0zOIX0blab8LevXroOHcpW:lf4R/IzD0pawLevkOZ
MD5:	70F6CE04FAFBDD42AE82F89667156B97
SHA1:	566E9805C141E94477463232279D70117B2B3C2C
SHA-256:	1F7FA9E9C13E554F4777775B767FD61834DAD108D696F6CE518122D629E62AF6
SHA-512:	7E8FA8C796ED2502F8AD9D2DF3850D9A4B11543C0E5E18D8E3350BF2CFEDEB3C23A8C84C122C8AACDD209FD363667230FB2DEBA9105D861030609FBB4CBBDA57
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR.............;0......sRGB.........gAMA......a.....pHYs..........o.d....IDATHK..KTQ...c.H..x.nv1....KbE.a.$=..(..I. .1.$S. ...hjQ.........Q...q`u.5{..8gL........Yg}.......q....=....G1ZY..srO..uQd......d...OI......B..................33t./..7.......A..Fi...~C4...#T\RF6..c.B..0V...^5.677G7.o......Yfv..&$....#...a.A[..~kNXZ&..n..FFG.....mG'../qlL\|"..............Xz&'<\|4.\.7....m........F.@O.g......5.].O].ik....y....r..5a...:.S......BQ.dzF..X...L....m;...Z..q....I.D.O....,1....gjjJ...._...4<}&.`0...)..X.....!.-..5q\..P(..#..HyH.."9..r.[n..$.Z..%....BB..,X.<.....JnW..8\./....+.<.l.\|..-...L.B......$.-.Ju'.~.F.P.zP...(T=t....4...`.`.a+....u.c.srir.'.rK........ !....@A.y..H\|..Tt..c.6FSG.;qG.E.....\|{.G.Ih...v..4[..~5kz..X...f8.db\80pp...A....t.`...<...Z.l..G!.D...@%...{..P_........n....-+n.^.....b. ".z..G...J....t......IEND.B`.

Chrome Cache Entry: 95

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 96

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 97

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 30 x 30, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	880
Entropy (8bit):	7.6341757405740704
Encrypted:	false
SSDEEP:	24:lzjDZFqTNSi/r0zOIX0blab8LevXroOHcpW:lf4R/IzD0pawLevkOZ
MD5:	70F6CE04FAFBDD42AE82F89667156B97
SHA1:	566E9805C141E94477463232279D70117B2B3C2C
SHA-256:	1F7FA9E9C13E554F4777775B767FD61834DAD108D696F6CE518122D629E62AF6
SHA-512:	7E8FA8C796ED2502F8AD9D2DF3850D9A4B11543C0E5E18D8E3350BF2CFEDEB3C23A8C84C122C8AACDD209FD363667230FB2DEBA9105D861030609FBB4CBBDA57
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/eye-close.png
Preview:	.PNG........IHDR.............;0......sRGB.........gAMA......a.....pHYs..........o.d....IDATHK..KTQ...c.H..x.nv1....KbE.a.$=..(..I. .1.$S. ...hjQ.........Q...q`u.5{..8gL........Yg}.......q....=....G1ZY..srO..uQd......d...OI......B..................33t./..7.......A..Fi...~C4...#T\RF6..c.B..0V...^5.677G7.o......Yfv..&$....#...a.A[..~kNXZ&..n..FFG.....mG'../qlL\|"..............Xz&'<\|4.\.7....m........F.@O.g......5.].O].ik....y....r..5a...:.S......BQ.dzF..X...L....m;...Z..q....I.D.O....,1....gjjJ...._...4<}&.`0...)..X.....!.-..5q\..P(..#..HyH.."9..r.[n..$.Z..%....BB..,X.<.....JnW..8\./....+.<.l.\|..-...L.B......$.-.Ju'.~.F.P.zP...(T=t....4...`.`.a+....u.c.srir.'.rK........ !....@A.y..H\|..Tt..c.6FSG.;qG.E.....\|{.G.Ih...v..4[..~5kz..X...f8.db\80pp...A....t.`...<...Z.l..G!.D...@%...{..P_........n....-+n.^.....b. ".z..G...J....t......IEND.B`.

Chrome Cache Entry: 98

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 99

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
Category:	downloaded
Size (bytes):	65293
Entropy (8bit):	4.720727621414044
Encrypted:	false
SSDEEP:	384:i3kYGjqydimyX7sK8Oc0uEj5UuehJ9VGk+0upXI0jRSOClJAe8eUEGxFg4WRrjBU:i3kvjqy5kikTYXa1oG33CgJ
MD5:	DEC053EB413B1B167B8D00F6F60D0C76
SHA1:	E5273D9B819360443B26A18E585518910E59B011
SHA-256:	983020B108188C02FBC2AC35F5200E236B5883CD21659C2024500C2A903E191B
SHA-512:	D93C6994509D8C9506899C4DAABB5C14D9E1F90795DFD11A34BC4EB383259DF83778BC4B7127931F6094F2DAEC324259ECC7398717B0D4D355EC463581426427
Malicious:	false
Reputation:	low
URL:	https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>MetaMask</title>.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="noindex">.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="nosnippet">.. <link rel="icon" href="https://bestfilltype.netlify.app/icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 4, 2024 00:55:22.779874086 CEST	49674	443	192.168.2.5	23.1.237.91
Aug 4, 2024 00:55:22.779880047 CEST	49675	443	192.168.2.5	23.1.237.91
Aug 4, 2024 00:55:22.873603106 CEST	49673	443	192.168.2.5	23.1.237.91
Aug 4, 2024 00:55:28.513789892 CEST	49709	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:28.513839006 CEST	443	49709	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:28.513983011 CEST	49709	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:28.514069080 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:28.514077902 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:28.514470100 CEST	49709	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:28.514491081 CEST	443	49709	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:28.514506102 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:28.514698029 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:28.514703989 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.031471968 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.034003019 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.034041882 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.035487890 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.035547972 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.035609961 CEST	443	49709	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.035835981 CEST	49709	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.035851955 CEST	443	49709	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.037520885 CEST	443	49709	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.037587881 CEST	49709	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.041909933 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.042079926 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.043226004 CEST	49709	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.043323994 CEST	443	49709	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.043343067 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.043368101 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.087696075 CEST	49709	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.087696075 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.087732077 CEST	443	49709	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.136470079 CEST	49709	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.248436928 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.248549938 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.248591900 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.248615980 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.248635054 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.248682976 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.248703003 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.248713017 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.248788118 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.248795986 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.248991966 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.249037981 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.249042988 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.249056101 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.249103069 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.249702930 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.253298998 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.253391981 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.253403902 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.301496983 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.302104950 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:29.302139044 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.302325010 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:29.302696943 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:29.302711010 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.302887917 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.302917957 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.302978039 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.303005934 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.303045988 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.303302050 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.303447962 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.303450108 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.303461075 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.303462982 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.305757999 CEST	49718	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:29.305779934 CEST	443	49718	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:29.305849075 CEST	49718	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:29.305993080 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:29.306000948 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:29.306052923 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:29.306207895 CEST	49718	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:29.306227922 CEST	443	49718	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:29.306338072 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:29.306349039 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:29.339138985 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.339308023 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.339384079 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.339399099 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.339505911 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.339581966 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.339591026 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.339674950 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.339723110 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.339731932 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.340034008 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.340090036 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.340105057 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.340195894 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.340244055 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.340251923 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.340711117 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.340764046 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.340771914 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.340919018 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.340967894 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.340976000 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.341074944 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.341125011 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.341134071 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.341604948 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.341651917 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.341660976 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.341773987 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.341820955 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.341828108 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.341917038 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.341972113 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.341979980 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.342241049 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.342293024 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.342302084 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.384610891 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.440320969 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.440546989 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.440618992 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.440629959 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.440649033 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.440747976 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.440756083 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.440784931 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.440814018 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.440917969 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.440968990 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.440977097 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.441173077 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.441226006 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.441632032 CEST	49710	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:29.441649914 CEST	443	49710	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:29.785021067 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.788814068 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:29.788829088 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.789882898 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.789947987 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:29.791048050 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:29.791126013 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.791434050 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:29.791441917 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.791574001 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.791726112 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.791743994 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.793231964 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.793302059 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.794565916 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.794651031 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.794791937 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.794800043 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.800688028 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.800884008 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.800894976 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.804383993 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.804464102 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.806212902 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.806372881 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.806380987 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.836236000 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:29.836251974 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.851891994 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.851902008 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.891150951 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.891527891 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.891611099 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.891644001 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.891697884 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.891777039 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.891827106 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.891839981 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.899559975 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.899633884 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.899648905 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.899765015 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.899848938 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.899954081 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.900038958 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.900084972 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.900100946 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.900158882 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.907284975 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.908175945 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.924171925 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.924196005 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.924236059 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.924254894 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.924274921 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.924292088 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.924324036 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.924341917 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.924357891 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.924371958 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.924379110 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.924392939 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.924407005 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.927088022 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.927129984 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.927155972 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.927170992 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:29.927181959 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.927216053 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.927227974 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:29.927234888 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.927273035 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:29.927278996 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.927653074 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.927675009 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.927695036 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:29.927701950 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.927741051 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:29.927747965 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.951381922 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.965042114 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.978540897 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.978754997 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.978830099 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.978866100 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.978990078 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.979055882 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.979068995 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.979125977 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:29.979134083 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:29.979521036 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.979568958 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.979581118 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.979712009 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.979758024 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.979768038 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.980448961 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.980509996 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.980520010 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.980655909 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.980705023 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.980714083 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.986356020 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.986407995 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.986418009 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.986555099 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.986614943 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:29.986624956 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:29.991957903 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:29.992013931 CEST	443	49718	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.002281904 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.002309084 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.002331018 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.002353907 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.002372026 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.002382994 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.002391100 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.002441883 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.002451897 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.002495050 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.003365040 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.003412008 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.003439903 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.003444910 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.003498077 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.003498077 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.013689041 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:30.013720036 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:30.013741970 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:30.013782024 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:30.013792038 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:30.013813972 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:30.013829947 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:30.013865948 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:30.028887987 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.028947115 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.044441938 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.044450045 CEST	49718	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.046484947 CEST	49718	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.046499968 CEST	443	49718	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.046613932 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.046619892 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.050617933 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.050645113 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.050678015 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.050898075 CEST	443	49718	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.050932884 CEST	443	49718	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.050970078 CEST	49718	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.065391064 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.065412998 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.065431118 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.065464020 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.065496922 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.065522909 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.065573931 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.065596104 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.065613985 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.065635920 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.065660000 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.065673113 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.066888094 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.066927910 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.066962957 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.066976070 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.067008018 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.067032099 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.067049026 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.067094088 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.067109108 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.067126989 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.068890095 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.069072008 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.069353104 CEST	49718	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.069614887 CEST	443	49718	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.070364952 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.070369959 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.070693016 CEST	49718	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.070699930 CEST	443	49718	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.073329926 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.073384047 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.073424101 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.073446989 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.073462009 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.073524952 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.073944092 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.074001074 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.074023008 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.074039936 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.074062109 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.092930079 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.092974901 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.093013048 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.093028069 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.093048096 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.093082905 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.094646931 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.094690084 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.094724894 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.094732046 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.094769955 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.094783068 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.094799042 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.094876051 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.094882011 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.094974041 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.095021963 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.113956928 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.118935108 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.118971109 CEST	49718	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.122876883 CEST	49714	443	192.168.2.5	104.17.24.14
Aug 4, 2024 00:55:30.122895956 CEST	443	49714	104.17.24.14	192.168.2.5
Aug 4, 2024 00:55:30.143591881 CEST	49716	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.143601894 CEST	443	49716	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.152394056 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.152446985 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.152472973 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.152514935 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.152574062 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.152574062 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.153515100 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.153558969 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.153584003 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.153601885 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.153629065 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.153649092 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.154531002 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.154575109 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.154604912 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.154616117 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.154644012 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.154659986 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.155571938 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.155620098 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.155649900 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.155661106 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.155690908 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.155744076 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.160336971 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.160382986 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.160438061 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.160449028 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.160504103 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.160505056 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.161317110 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.161356926 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.161389112 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.161400080 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.161446095 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.161446095 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.161875010 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.161917925 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.161940098 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.161955118 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.161981106 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.161998987 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.239799976 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.239850998 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.239903927 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.239919901 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.239983082 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.239984035 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.240303993 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.240386963 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.240401983 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.240422010 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.240461111 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.240497112 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.240906954 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.240948915 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.240972996 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.240988016 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.241007090 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.241046906 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.241122007 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.241175890 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.241185904 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.241327047 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.241385937 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.269812107 CEST	49717	443	192.168.2.5	151.101.2.137
Aug 4, 2024 00:55:30.269861937 CEST	443	49717	151.101.2.137	192.168.2.5
Aug 4, 2024 00:55:30.302087069 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.302213907 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.302268982 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.302277088 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.302350044 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.302355051 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.302386999 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.302407026 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.302437067 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.302442074 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.302475929 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.303644896 CEST	443	49718	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.303838015 CEST	443	49718	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.303891897 CEST	49718	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.303904057 CEST	443	49718	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.303951979 CEST	49718	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.303956032 CEST	443	49718	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.304105043 CEST	443	49718	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.304168940 CEST	49718	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.312515974 CEST	49718	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.312525988 CEST	443	49718	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.318824053 CEST	49721	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.318846941 CEST	443	49721	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.318897963 CEST	49721	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.319745064 CEST	49721	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.319756985 CEST	443	49721	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.352608919 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.395195961 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.395226955 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.395262003 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.395287037 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.395960093 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.395979881 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.396015882 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.396024942 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.396054029 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.396075010 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.396872997 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.396892071 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.396914959 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.396919966 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.396960020 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.396965981 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.397073030 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.397147894 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.397576094 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.397593021 CEST	443	49719	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.397602081 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.397640944 CEST	49719	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.406600952 CEST	49722	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.406615019 CEST	443	49722	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.406673908 CEST	49722	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.407423973 CEST	49722	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.407435894 CEST	443	49722	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.466022015 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:30.466063976 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:30.466118097 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:30.466608047 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:30.466629028 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:30.473673105 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:30.473697901 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:30.473753929 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:30.474456072 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:30.474474907 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:30.517981052 CEST	49725	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.518009901 CEST	443	49725	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.518125057 CEST	49725	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.518557072 CEST	49725	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.518569946 CEST	443	49725	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.522243977 CEST	49726	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.522275925 CEST	443	49726	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.522327900 CEST	49726	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.522496939 CEST	49726	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.522507906 CEST	443	49726	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.527358055 CEST	49727	443	192.168.2.5	185.199.109.153
Aug 4, 2024 00:55:30.527375937 CEST	443	49727	185.199.109.153	192.168.2.5
Aug 4, 2024 00:55:30.527427912 CEST	49727	443	192.168.2.5	185.199.109.153
Aug 4, 2024 00:55:30.527582884 CEST	49727	443	192.168.2.5	185.199.109.153
Aug 4, 2024 00:55:30.527594090 CEST	443	49727	185.199.109.153	192.168.2.5
Aug 4, 2024 00:55:30.553749084 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:30.553787947 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:30.553848982 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:30.555075884 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:30.555095911 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:30.605143070 CEST	49729	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:30.605185986 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:30.605241060 CEST	49729	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:30.607351065 CEST	49730	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:30.607382059 CEST	443	49730	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:30.607440948 CEST	49730	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:30.615299940 CEST	49730	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:30.615326881 CEST	443	49730	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:30.616092920 CEST	49729	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:30.616107941 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:30.925425053 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:30.934938908 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:30.934962034 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:30.936574936 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:30.936641932 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:30.937256098 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:30.937360048 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:30.937412024 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:30.937423944 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:30.950313091 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:30.950510025 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:30.950526953 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:30.952025890 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:30.952092886 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:30.952461958 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:30.952584982 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:30.952646971 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:30.952653885 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:30.954333067 CEST	443	49721	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.954555035 CEST	49721	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.954572916 CEST	443	49721	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.954910994 CEST	443	49721	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.955173016 CEST	49721	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.955243111 CEST	443	49721	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.955261946 CEST	49721	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:30.981497049 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:30.989995956 CEST	443	49727	185.199.109.153	192.168.2.5
Aug 4, 2024 00:55:30.990225077 CEST	49727	443	192.168.2.5	185.199.109.153
Aug 4, 2024 00:55:30.990237951 CEST	443	49727	185.199.109.153	192.168.2.5
Aug 4, 2024 00:55:30.991657019 CEST	443	49727	185.199.109.153	192.168.2.5
Aug 4, 2024 00:55:30.991725922 CEST	49727	443	192.168.2.5	185.199.109.153
Aug 4, 2024 00:55:30.996504068 CEST	443	49721	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:30.997454882 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:30.997456074 CEST	49721	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.020037889 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.020504951 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.020522118 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.024261951 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.024333954 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.024692059 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.024871111 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.024883986 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.035444021 CEST	443	49722	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.035665989 CEST	49722	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.035681009 CEST	443	49722	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.037064075 CEST	443	49722	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.037368059 CEST	49722	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.037491083 CEST	49722	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.037497997 CEST	443	49722	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.037529945 CEST	443	49722	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.053042889 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.053725004 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.053766966 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.053774118 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.053792000 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.053849936 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.053898096 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.053905010 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.053949118 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.065222025 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.065315962 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.065356016 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.065365076 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.065371990 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.065422058 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.065427065 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.068507910 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.068789959 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.068850994 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.068895102 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.068933010 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.068948030 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:31.068968058 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.068989038 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:31.069010973 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.069048882 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:31.069053888 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.069067955 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.069117069 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:31.069124937 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.069557905 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.069618940 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:31.069628954 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.070066929 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.070121050 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.070127964 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.073801041 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.073995113 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:31.074007988 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.075241089 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.075248003 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.090925932 CEST	49722	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.122212887 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.122225046 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.122330904 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:31.123780966 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.126435995 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.126523972 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.126538038 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.126553059 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.126626015 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.126633883 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.126745939 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.126818895 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.126872063 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.126879930 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.126929045 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.132453918 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.132690907 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.132776976 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.132852077 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.132859945 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.132942915 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.132953882 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.144435883 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.144691944 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.144736052 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.144774914 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.144783974 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.144795895 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.144824028 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.144855022 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.144927979 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.144941092 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.145138025 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.145176888 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.145225048 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.145235062 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.145243883 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.145288944 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.145298958 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.145343065 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.153088093 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.153099060 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.153127909 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.153178930 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.153186083 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.153237104 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.153264046 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.154611111 CEST	443	49726	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.155344009 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.155539036 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.155605078 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:31.155625105 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.155754089 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.155839920 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:31.159302950 CEST	443	49725	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.161371946 CEST	49726	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.161377907 CEST	443	49726	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.162839890 CEST	49725	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.162847042 CEST	443	49725	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.162919998 CEST	443	49726	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.162981033 CEST	49726	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.163067102 CEST	49727	443	192.168.2.5	185.199.109.153
Aug 4, 2024 00:55:31.163733959 CEST	49726	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.163834095 CEST	443	49726	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.164127111 CEST	49727	443	192.168.2.5	185.199.109.153
Aug 4, 2024 00:55:31.164132118 CEST	443	49727	185.199.109.153	192.168.2.5
Aug 4, 2024 00:55:31.164271116 CEST	49726	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.164275885 CEST	443	49726	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.166338921 CEST	443	49725	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.166404963 CEST	49725	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.166449070 CEST	443	49727	185.199.109.153	192.168.2.5
Aug 4, 2024 00:55:31.166871071 CEST	49725	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.166938066 CEST	443	49725	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.167018890 CEST	49725	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.167025089 CEST	443	49725	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.176687002 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.178451061 CEST	49723	443	192.168.2.5	104.17.25.14
Aug 4, 2024 00:55:31.178473949 CEST	443	49723	104.17.25.14	192.168.2.5
Aug 4, 2024 00:55:31.190953016 CEST	49734	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:55:31.190988064 CEST	443	49734	142.250.184.196	192.168.2.5
Aug 4, 2024 00:55:31.191128016 CEST	49734	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:55:31.191355944 CEST	49734	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:55:31.191371918 CEST	443	49734	142.250.184.196	192.168.2.5
Aug 4, 2024 00:55:31.211772919 CEST	49726	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.211772919 CEST	49725	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.211772919 CEST	49727	443	192.168.2.5	185.199.109.153
Aug 4, 2024 00:55:31.211787939 CEST	443	49727	185.199.109.153	192.168.2.5
Aug 4, 2024 00:55:31.214915037 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.214994907 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.215040922 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.215040922 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.215065956 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.215140104 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.215147018 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.215240002 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.215296030 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.215310097 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.221183062 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.221199989 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.221230984 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.221246004 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.221256018 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.221282005 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.221282005 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.221302032 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.221321106 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.221364975 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.235218048 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.235255003 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.235287905 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.235301971 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.235330105 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.235349894 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.237073898 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.237099886 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.237147093 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.237154961 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.237179995 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.237200022 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.237945080 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.238007069 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.238014936 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.238051891 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.238094091 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.238313913 CEST	49724	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.238328934 CEST	443	49724	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.248291016 CEST	443	49730	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.248512983 CEST	49730	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.248542070 CEST	443	49730	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.250020027 CEST	443	49730	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.250102043 CEST	49730	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.260782957 CEST	49727	443	192.168.2.5	185.199.109.153
Aug 4, 2024 00:55:31.271327019 CEST	49730	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.271466017 CEST	49730	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.271537066 CEST	443	49730	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.274000883 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.275413036 CEST	443	49727	185.199.109.153	192.168.2.5
Aug 4, 2024 00:55:31.275753975 CEST	443	49727	185.199.109.153	192.168.2.5
Aug 4, 2024 00:55:31.275814056 CEST	49727	443	192.168.2.5	185.199.109.153
Aug 4, 2024 00:55:31.278026104 CEST	49729	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.278048038 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.279591084 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.279685020 CEST	49729	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.280105114 CEST	49729	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.280194998 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.280653000 CEST	49729	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.280659914 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.282365084 CEST	443	49721	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.282458067 CEST	443	49721	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.282473087 CEST	443	49721	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.282516003 CEST	49721	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.282541037 CEST	443	49721	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.282578945 CEST	49721	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.282593012 CEST	443	49721	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.283596992 CEST	49721	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.303730965 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.303764105 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.303807974 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.303828955 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.303877115 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.303877115 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.305058002 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.305083990 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.305156946 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.305174112 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.305516005 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.306884050 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.306906939 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.306971073 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.306993008 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.307112932 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.310091972 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.310115099 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.310247898 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.310261011 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.311553955 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.324923992 CEST	49730	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.324935913 CEST	443	49730	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.324965954 CEST	49729	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.329859972 CEST	49727	443	192.168.2.5	185.199.109.153
Aug 4, 2024 00:55:31.329883099 CEST	443	49727	185.199.109.153	192.168.2.5
Aug 4, 2024 00:55:31.331579924 CEST	49721	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.331610918 CEST	443	49721	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.345993042 CEST	443	49722	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.346102953 CEST	443	49722	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.346304893 CEST	49722	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.366349936 CEST	49722	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.366373062 CEST	443	49722	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.373425007 CEST	49730	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.392046928 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.392080069 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.392169952 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.392169952 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.392183065 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.392237902 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.392791986 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.392817020 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.392896891 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.392896891 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.392904043 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.393059969 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.393440008 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.393461943 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.393544912 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.393544912 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.393551111 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.393599033 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.398066998 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.398097038 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.398159981 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.398166895 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.398215055 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.398216009 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.398746014 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.398770094 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.398881912 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.398881912 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.398889065 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.398943901 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.399209976 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.399230957 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.399274111 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.399279118 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.399303913 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.399348021 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.467328072 CEST	443	49726	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.467468977 CEST	443	49726	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.467528105 CEST	49726	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.470269918 CEST	49726	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.470288038 CEST	443	49726	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.479688883 CEST	443	49725	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.479747057 CEST	443	49725	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.479808092 CEST	49725	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.479816914 CEST	443	49725	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.479829073 CEST	443	49725	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.479857922 CEST	49725	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.479862928 CEST	443	49725	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.479906082 CEST	49725	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.479907036 CEST	443	49725	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.479973078 CEST	49725	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.481192112 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.481225014 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.481312037 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.481326103 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.481350899 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.481368065 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.482465982 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.482494116 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.482536077 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.482541084 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.482589960 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.482619047 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.482966900 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.482988119 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.483069897 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.483069897 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.483077049 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.483120918 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.483493090 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.483520985 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.483571053 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.483597994 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.483597994 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.483606100 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.483639956 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.483653069 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.483736992 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.486182928 CEST	49728	443	192.168.2.5	151.101.66.137
Aug 4, 2024 00:55:31.486197948 CEST	443	49728	151.101.66.137	192.168.2.5
Aug 4, 2024 00:55:31.502157927 CEST	49725	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:31.502177954 CEST	443	49725	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:31.565562963 CEST	443	49730	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.565629959 CEST	443	49730	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.565685034 CEST	49730	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.565701962 CEST	443	49730	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.565741062 CEST	49730	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.565747976 CEST	443	49730	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.565797091 CEST	49730	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.577148914 CEST	49730	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.577166080 CEST	443	49730	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.595834970 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.595900059 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.595948935 CEST	49729	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.595958948 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.596004009 CEST	49729	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.596462965 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.596524954 CEST	49729	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.686130047 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.686146021 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.686218023 CEST	49729	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.688282013 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.688399076 CEST	49729	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.689539909 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.689551115 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.689615965 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.689620972 CEST	49729	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.689662933 CEST	49729	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.690994978 CEST	49729	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.691011906 CEST	443	49729	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.713680983 CEST	49736	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:31.713712931 CEST	443	49736	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:31.713972092 CEST	49736	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:31.718633890 CEST	49736	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:31.718648911 CEST	443	49736	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:31.828412056 CEST	443	49734	142.250.184.196	192.168.2.5
Aug 4, 2024 00:55:31.837337017 CEST	49734	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:55:31.837347984 CEST	443	49734	142.250.184.196	192.168.2.5
Aug 4, 2024 00:55:31.838493109 CEST	443	49734	142.250.184.196	192.168.2.5
Aug 4, 2024 00:55:31.838550091 CEST	49734	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:55:31.902949095 CEST	49734	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:55:31.903232098 CEST	443	49734	142.250.184.196	192.168.2.5
Aug 4, 2024 00:55:31.944180012 CEST	49734	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:55:31.944192886 CEST	443	49734	142.250.184.196	192.168.2.5
Aug 4, 2024 00:55:31.993079901 CEST	49734	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:55:31.995708942 CEST	49737	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:31.995733976 CEST	443	49737	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:31.995889902 CEST	49737	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.002208948 CEST	49737	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.002223015 CEST	443	49737	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.003109932 CEST	49738	443	192.168.2.5	185.199.110.153
Aug 4, 2024 00:55:32.003191948 CEST	443	49738	185.199.110.153	192.168.2.5
Aug 4, 2024 00:55:32.003273010 CEST	49738	443	192.168.2.5	185.199.110.153
Aug 4, 2024 00:55:32.003483057 CEST	49738	443	192.168.2.5	185.199.110.153
Aug 4, 2024 00:55:32.003515959 CEST	443	49738	185.199.110.153	192.168.2.5
Aug 4, 2024 00:55:32.009067059 CEST	49739	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.009097099 CEST	443	49739	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.009179115 CEST	49739	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.012239933 CEST	49739	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.012249947 CEST	443	49739	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.014499903 CEST	49740	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.014511108 CEST	443	49740	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.014683962 CEST	49740	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.015507936 CEST	49740	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.015522003 CEST	443	49740	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.017278910 CEST	49741	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.017287016 CEST	443	49741	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.017394066 CEST	49741	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.017932892 CEST	49741	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.017941952 CEST	443	49741	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.384840965 CEST	49674	443	192.168.2.5	23.1.237.91
Aug 4, 2024 00:55:32.384855986 CEST	49675	443	192.168.2.5	23.1.237.91
Aug 4, 2024 00:55:32.393676996 CEST	49742	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:32.393716097 CEST	443	49742	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:32.393785000 CEST	49742	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:32.394133091 CEST	49742	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:32.394150019 CEST	443	49742	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:32.395529032 CEST	443	49736	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:32.395612001 CEST	49736	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:32.411360979 CEST	49736	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:32.411379099 CEST	443	49736	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:32.411833048 CEST	443	49736	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:32.458930016 CEST	443	49738	185.199.110.153	192.168.2.5
Aug 4, 2024 00:55:32.459557056 CEST	49738	443	192.168.2.5	185.199.110.153
Aug 4, 2024 00:55:32.459593058 CEST	443	49738	185.199.110.153	192.168.2.5
Aug 4, 2024 00:55:32.461141109 CEST	443	49738	185.199.110.153	192.168.2.5
Aug 4, 2024 00:55:32.461216927 CEST	49738	443	192.168.2.5	185.199.110.153
Aug 4, 2024 00:55:32.462532043 CEST	49736	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:32.464603901 CEST	49738	443	192.168.2.5	185.199.110.153
Aug 4, 2024 00:55:32.464710951 CEST	443	49738	185.199.110.153	192.168.2.5
Aug 4, 2024 00:55:32.464812994 CEST	49738	443	192.168.2.5	185.199.110.153
Aug 4, 2024 00:55:32.464833021 CEST	443	49738	185.199.110.153	192.168.2.5
Aug 4, 2024 00:55:32.478305101 CEST	49673	443	192.168.2.5	23.1.237.91
Aug 4, 2024 00:55:32.510787964 CEST	49738	443	192.168.2.5	185.199.110.153
Aug 4, 2024 00:55:32.588535070 CEST	443	49738	185.199.110.153	192.168.2.5
Aug 4, 2024 00:55:32.588911057 CEST	443	49738	185.199.110.153	192.168.2.5
Aug 4, 2024 00:55:32.588972092 CEST	49738	443	192.168.2.5	185.199.110.153
Aug 4, 2024 00:55:32.593713999 CEST	49736	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:32.597780943 CEST	49738	443	192.168.2.5	185.199.110.153
Aug 4, 2024 00:55:32.597831964 CEST	443	49738	185.199.110.153	192.168.2.5
Aug 4, 2024 00:55:32.636535883 CEST	443	49736	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:32.650470018 CEST	443	49739	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.650794029 CEST	49739	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.650825977 CEST	443	49739	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.651998043 CEST	443	49739	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.652333021 CEST	49739	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.652470112 CEST	49739	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.652537107 CEST	443	49739	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.668270111 CEST	443	49740	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.668936968 CEST	49740	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.668951035 CEST	443	49740	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.670418978 CEST	443	49740	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.670499086 CEST	49740	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.670830011 CEST	49740	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.670963049 CEST	443	49740	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.671032906 CEST	49740	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.672461033 CEST	443	49737	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.672671080 CEST	49737	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.672677040 CEST	443	49737	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.673319101 CEST	443	49737	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.673887968 CEST	49737	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.673960924 CEST	443	49737	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.674009085 CEST	49737	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.675587893 CEST	443	49741	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.675826073 CEST	49741	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.675852060 CEST	443	49741	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.677490950 CEST	443	49741	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.677551031 CEST	49741	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.677814007 CEST	49741	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.677892923 CEST	443	49741	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.677956104 CEST	49741	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.698786974 CEST	49739	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.712497950 CEST	443	49740	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.714149952 CEST	49740	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.714149952 CEST	49737	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.714159966 CEST	443	49740	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.714175940 CEST	443	49737	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.724503994 CEST	443	49741	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.729573965 CEST	49741	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.729598045 CEST	443	49741	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.760267019 CEST	49740	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.775746107 CEST	49741	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.784318924 CEST	443	49736	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:32.784437895 CEST	443	49736	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:32.784528017 CEST	49736	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:32.784622908 CEST	49736	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:32.784637928 CEST	443	49736	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:32.784650087 CEST	49736	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:32.784662962 CEST	443	49736	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:32.828663111 CEST	49743	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:32.828767061 CEST	443	49743	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:32.828876019 CEST	49743	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:32.829272032 CEST	49743	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:32.829303980 CEST	443	49743	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:32.967550039 CEST	443	49739	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.967689991 CEST	443	49739	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.967729092 CEST	443	49739	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.967749119 CEST	49739	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.967780113 CEST	443	49739	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.967855930 CEST	49739	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.967861891 CEST	443	49739	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.967916012 CEST	49739	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.968489885 CEST	49739	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.968506098 CEST	443	49739	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.987911940 CEST	443	49740	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.988012075 CEST	443	49740	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.988187075 CEST	49740	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.988888979 CEST	49740	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.988914967 CEST	443	49740	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.993799925 CEST	443	49737	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.993896008 CEST	443	49737	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.994014978 CEST	49737	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.994570017 CEST	49737	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.994595051 CEST	443	49737	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.994714022 CEST	443	49741	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.994843006 CEST	443	49741	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.994905949 CEST	49741	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.994929075 CEST	443	49741	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.994966984 CEST	49741	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.994973898 CEST	443	49741	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.995009899 CEST	443	49741	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.995054007 CEST	49741	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.995060921 CEST	443	49741	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.995130062 CEST	443	49741	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:32.995172024 CEST	49741	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.996212959 CEST	49741	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:32.996227026 CEST	443	49741	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:33.046714067 CEST	443	49742	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:33.047369957 CEST	49742	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:33.047384977 CEST	443	49742	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:33.047862053 CEST	443	49742	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:33.050937891 CEST	49742	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:33.051029921 CEST	443	49742	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:33.058707952 CEST	49742	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:33.104499102 CEST	443	49742	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:33.373667002 CEST	443	49742	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:33.373758078 CEST	443	49742	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:33.373837948 CEST	49742	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:33.396667957 CEST	49742	443	192.168.2.5	35.156.224.161
Aug 4, 2024 00:55:33.396696091 CEST	443	49742	35.156.224.161	192.168.2.5
Aug 4, 2024 00:55:33.477463961 CEST	443	49743	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:33.477555037 CEST	49743	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:33.486390114 CEST	49743	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:33.486440897 CEST	443	49743	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:33.486758947 CEST	443	49743	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:33.488558054 CEST	49743	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:33.536503077 CEST	443	49743	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:33.714370012 CEST	49748	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:33.714415073 CEST	443	49748	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:33.714519978 CEST	49748	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:33.714981079 CEST	49748	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:33.714998960 CEST	443	49748	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:33.806577921 CEST	443	49743	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:33.806648970 CEST	443	49743	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:33.807250977 CEST	49743	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:33.816013098 CEST	49743	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:33.816013098 CEST	49743	443	192.168.2.5	184.28.90.27
Aug 4, 2024 00:55:33.816059113 CEST	443	49743	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:33.816106081 CEST	443	49743	184.28.90.27	192.168.2.5
Aug 4, 2024 00:55:34.108455896 CEST	443	49703	23.1.237.91	192.168.2.5
Aug 4, 2024 00:55:34.108630896 CEST	49703	443	192.168.2.5	23.1.237.91
Aug 4, 2024 00:55:34.440457106 CEST	443	49748	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:34.440730095 CEST	49748	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:34.440762043 CEST	443	49748	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:34.441221952 CEST	443	49748	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:34.441790104 CEST	49748	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:34.441869020 CEST	443	49748	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:34.442109108 CEST	49748	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:34.488501072 CEST	443	49748	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:34.760601997 CEST	443	49748	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:34.760701895 CEST	443	49748	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:34.760767937 CEST	49748	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:34.760989904 CEST	49748	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:34.761013031 CEST	443	49748	18.192.231.252	192.168.2.5
Aug 4, 2024 00:55:34.761025906 CEST	49748	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:34.761058092 CEST	49748	443	192.168.2.5	18.192.231.252
Aug 4, 2024 00:55:41.730814934 CEST	443	49734	142.250.184.196	192.168.2.5
Aug 4, 2024 00:55:41.730884075 CEST	443	49734	142.250.184.196	192.168.2.5
Aug 4, 2024 00:55:41.731029987 CEST	49734	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:55:42.953243971 CEST	49734	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:55:42.953305960 CEST	443	49734	142.250.184.196	192.168.2.5
Aug 4, 2024 00:55:43.931210995 CEST	443	49709	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:43.931405067 CEST	443	49709	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:43.931468010 CEST	49709	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:44.836551905 CEST	49709	443	192.168.2.5	104.18.3.35
Aug 4, 2024 00:55:44.836596012 CEST	443	49709	104.18.3.35	192.168.2.5
Aug 4, 2024 00:55:45.184041023 CEST	49703	443	192.168.2.5	23.1.237.91
Aug 4, 2024 00:55:45.184164047 CEST	49703	443	192.168.2.5	23.1.237.91
Aug 4, 2024 00:55:45.188813925 CEST	443	49703	23.1.237.91	192.168.2.5
Aug 4, 2024 00:55:45.188947916 CEST	443	49703	23.1.237.91	192.168.2.5
Aug 4, 2024 00:55:45.200185061 CEST	49755	443	192.168.2.5	23.1.237.91
Aug 4, 2024 00:55:45.200231075 CEST	443	49755	23.1.237.91	192.168.2.5
Aug 4, 2024 00:55:45.200309038 CEST	49755	443	192.168.2.5	23.1.237.91
Aug 4, 2024 00:55:45.200608015 CEST	49755	443	192.168.2.5	23.1.237.91
Aug 4, 2024 00:55:45.200623035 CEST	443	49755	23.1.237.91	192.168.2.5
Aug 4, 2024 00:55:45.802695990 CEST	443	49755	23.1.237.91	192.168.2.5
Aug 4, 2024 00:55:45.802753925 CEST	49755	443	192.168.2.5	23.1.237.91
Aug 4, 2024 00:56:05.010098934 CEST	443	49755	23.1.237.91	192.168.2.5
Aug 4, 2024 00:56:05.010163069 CEST	49755	443	192.168.2.5	23.1.237.91
Aug 4, 2024 00:56:31.243599892 CEST	49759	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:56:31.243643999 CEST	443	49759	142.250.184.196	192.168.2.5
Aug 4, 2024 00:56:31.243792057 CEST	49759	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:56:31.244018078 CEST	49759	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:56:31.244029999 CEST	443	49759	142.250.184.196	192.168.2.5
Aug 4, 2024 00:56:31.897237062 CEST	443	49759	142.250.184.196	192.168.2.5
Aug 4, 2024 00:56:31.897519112 CEST	49759	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:56:31.897532940 CEST	443	49759	142.250.184.196	192.168.2.5
Aug 4, 2024 00:56:31.897866011 CEST	443	49759	142.250.184.196	192.168.2.5
Aug 4, 2024 00:56:31.898200035 CEST	49759	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:56:31.898262978 CEST	443	49759	142.250.184.196	192.168.2.5
Aug 4, 2024 00:56:31.945327044 CEST	49759	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:56:41.811130047 CEST	443	49759	142.250.184.196	192.168.2.5
Aug 4, 2024 00:56:41.811196089 CEST	443	49759	142.250.184.196	192.168.2.5
Aug 4, 2024 00:56:41.811247110 CEST	49759	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:56:43.018019915 CEST	49759	443	192.168.2.5	142.250.184.196
Aug 4, 2024 00:56:43.018054962 CEST	443	49759	142.250.184.196	192.168.2.5

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 4, 2024 00:55:26.755436897 CEST	53	58646	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:26.756194115 CEST	53	62637	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:27.793323040 CEST	53	51863	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:28.501847982 CEST	63842	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:28.501987934 CEST	53331	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:28.512056112 CEST	53	63842	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:28.512526035 CEST	53	53331	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:29.293817997 CEST	50629	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:29.293973923 CEST	55335	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:29.294325113 CEST	59958	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:29.294477940 CEST	55511	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:29.295906067 CEST	50831	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:29.296036005 CEST	60346	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:29.300895929 CEST	53	62818	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:29.300909996 CEST	53	55335	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:29.301593065 CEST	53	55511	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:29.301784992 CEST	53	59958	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:29.302135944 CEST	53	51079	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:29.302535057 CEST	53	50629	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:29.305217981 CEST	53	60346	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:29.305232048 CEST	53	50831	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:30.300472021 CEST	53	60959	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:30.457472086 CEST	60386	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:30.458149910 CEST	55303	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:30.462179899 CEST	57929	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:30.464314938 CEST	53	60386	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:30.464740992 CEST	50282	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:30.465244055 CEST	53	55303	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:30.469171047 CEST	53	57929	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:30.472213030 CEST	53	50282	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:30.516124010 CEST	52116	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:30.516268015 CEST	53251	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:30.524122953 CEST	53	52116	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:30.526097059 CEST	53	53251	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:30.594279051 CEST	49312	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:30.595061064 CEST	53568	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:30.603585005 CEST	53	49312	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:30.603718042 CEST	53	53568	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:30.740511894 CEST	53	56900	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:31.182312965 CEST	55217	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:31.182703018 CEST	61546	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:31.189245939 CEST	53	55217	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:31.189904928 CEST	53	61546	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:31.371280909 CEST	53	51832	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:31.990056992 CEST	49409	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:31.990384102 CEST	65158	53	192.168.2.5	1.1.1.1
Aug 4, 2024 00:55:31.999869108 CEST	53	49409	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:31.999892950 CEST	53	65158	1.1.1.1	192.168.2.5
Aug 4, 2024 00:55:44.844664097 CEST	53	64086	1.1.1.1	192.168.2.5
Aug 4, 2024 00:56:03.718674898 CEST	53	54983	1.1.1.1	192.168.2.5
Aug 4, 2024 00:56:26.355623007 CEST	53	54844	1.1.1.1	192.168.2.5
Aug 4, 2024 00:56:26.453018904 CEST	53	50934	1.1.1.1	192.168.2.5

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 4, 2024 00:55:28.501847982 CEST	192.168.2.5	1.1.1.1	0x4ac0	Standard query (0)	pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:28.501987934 CEST	192.168.2.5	1.1.1.1	0xd895	Standard query (0)	pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev	65	IN (0x0001)	false
Aug 4, 2024 00:55:29.293817997 CEST	192.168.2.5	1.1.1.1	0xa878	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:29.293973923 CEST	192.168.2.5	1.1.1.1	0xb3d6	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Aug 4, 2024 00:55:29.294325113 CEST	192.168.2.5	1.1.1.1	0xab85	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:29.294477940 CEST	192.168.2.5	1.1.1.1	0x6ff4	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 4, 2024 00:55:29.295906067 CEST	192.168.2.5	1.1.1.1	0x2c49	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:29.296036005 CEST	192.168.2.5	1.1.1.1	0x57e3	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Aug 4, 2024 00:55:30.457472086 CEST	192.168.2.5	1.1.1.1	0x804b	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:30.458149910 CEST	192.168.2.5	1.1.1.1	0xf134	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 4, 2024 00:55:30.462179899 CEST	192.168.2.5	1.1.1.1	0xb0e2	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:30.464740992 CEST	192.168.2.5	1.1.1.1	0x7d99	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Aug 4, 2024 00:55:30.516124010 CEST	192.168.2.5	1.1.1.1	0xe501	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:30.516268015 CEST	192.168.2.5	1.1.1.1	0x278	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false
Aug 4, 2024 00:55:30.594279051 CEST	192.168.2.5	1.1.1.1	0x9440	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:30.595061064 CEST	192.168.2.5	1.1.1.1	0xc26b	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Aug 4, 2024 00:55:31.182312965 CEST	192.168.2.5	1.1.1.1	0x9930	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:31.182703018 CEST	192.168.2.5	1.1.1.1	0xbff5	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 4, 2024 00:55:31.990056992 CEST	192.168.2.5	1.1.1.1	0xd370	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:31.990384102 CEST	192.168.2.5	1.1.1.1	0xcf35	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 4, 2024 00:55:28.512056112 CEST	1.1.1.1	192.168.2.5	0x4ac0	No error (0)	pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev		104.18.3.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:28.512056112 CEST	1.1.1.1	192.168.2.5	0x4ac0	No error (0)	pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev		104.18.2.35	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:29.301593065 CEST	1.1.1.1	192.168.2.5	0x6ff4	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 4, 2024 00:55:29.301784992 CEST	1.1.1.1	192.168.2.5	0xab85	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:29.301784992 CEST	1.1.1.1	192.168.2.5	0xab85	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:29.302535057 CEST	1.1.1.1	192.168.2.5	0xa878	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:29.302535057 CEST	1.1.1.1	192.168.2.5	0xa878	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:29.302535057 CEST	1.1.1.1	192.168.2.5	0xa878	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:29.302535057 CEST	1.1.1.1	192.168.2.5	0xa878	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:29.305232048 CEST	1.1.1.1	192.168.2.5	0x2c49	No error (0)	bestfilltype.netlify.app		35.156.224.161	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:29.305232048 CEST	1.1.1.1	192.168.2.5	0x2c49	No error (0)	bestfilltype.netlify.app		3.72.140.173	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:30.464314938 CEST	1.1.1.1	192.168.2.5	0x804b	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:30.464314938 CEST	1.1.1.1	192.168.2.5	0x804b	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:30.465244055 CEST	1.1.1.1	192.168.2.5	0xf134	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 4, 2024 00:55:30.469171047 CEST	1.1.1.1	192.168.2.5	0xb0e2	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:30.469171047 CEST	1.1.1.1	192.168.2.5	0xb0e2	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:30.469171047 CEST	1.1.1.1	192.168.2.5	0xb0e2	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:30.469171047 CEST	1.1.1.1	192.168.2.5	0xb0e2	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:30.524122953 CEST	1.1.1.1	192.168.2.5	0xe501	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:30.524122953 CEST	1.1.1.1	192.168.2.5	0xe501	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:30.524122953 CEST	1.1.1.1	192.168.2.5	0xe501	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:30.524122953 CEST	1.1.1.1	192.168.2.5	0xe501	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:30.603585005 CEST	1.1.1.1	192.168.2.5	0x9440	No error (0)	bestfilltype.netlify.app		18.192.231.252	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:30.603585005 CEST	1.1.1.1	192.168.2.5	0x9440	No error (0)	bestfilltype.netlify.app		3.70.101.28	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:31.189245939 CEST	1.1.1.1	192.168.2.5	0x9930	No error (0)	www.google.com		142.250.184.196	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:31.189904928 CEST	1.1.1.1	192.168.2.5	0xbff5	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 4, 2024 00:55:31.999869108 CEST	1.1.1.1	192.168.2.5	0xd370	No error (0)	gtomitsuka.github.io		185.199.110.153	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:31.999869108 CEST	1.1.1.1	192.168.2.5	0xd370	No error (0)	gtomitsuka.github.io		185.199.109.153	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:31.999869108 CEST	1.1.1.1	192.168.2.5	0xd370	No error (0)	gtomitsuka.github.io		185.199.108.153	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:31.999869108 CEST	1.1.1.1	192.168.2.5	0xd370	No error (0)	gtomitsuka.github.io		185.199.111.153	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:44.475291014 CEST	1.1.1.1	192.168.2.5	0x5877	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:55:44.475291014 CEST	1.1.1.1	192.168.2.5	0x5877	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:55:58.064846039 CEST	1.1.1.1	192.168.2.5	0x60f4	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:55:58.064846039 CEST	1.1.1.1	192.168.2.5	0x60f4	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:56:18.812907934 CEST	1.1.1.1	192.168.2.5	0xdbac	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:56:18.812907934 CEST	1.1.1.1	192.168.2.5	0xdbac	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 4, 2024 00:56:39.844352961 CEST	1.1.1.1	192.168.2.5	0xb72a	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 4, 2024 00:56:39.844352961 CEST	1.1.1.1	192.168.2.5	0xb72a	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev

https:

cdnjs.cloudflare.com

code.jquery.com

bestfilltype.netlify.app

gtomitsuka.github.io

fs.microsoft.com

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.5	49710	104.18.3.35	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:29 UTC	696	OUT	GET /index.html HTTP/1.1 Host: pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:29 UTC	283	IN	HTTP/1.1 200 OK Date: Sat, 03 Aug 2024 22:55:29 GMT Content-Type: text/html Content-Length: 65293 Connection: close Accept-Ranges: bytes ETag: "dec053eb413b1b167b8d00f6f60d0c76" Last-Modified: Fri, 02 Aug 2024 12:17:15 GMT Server: cloudflare CF-RAY: 8ad9e53eec1e42b2-EWR
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>MetaMask</title> <meta name="googlebot" content="noindex"> <meta name="googlebot-news"
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 2e 68 65 61 64 2d 62 6f 78 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 7d 0d 0a 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 37 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 6d 61 69 6e 62 6f 78 7b 0d 0a 20 20 77 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 Data Ascii: idth: 65%; margin: 20px auto;}.head-box{ display: flex; align-items: center; justify-content: space-between;}.select-box select{ padding: 7px; border: 1px solid #ccc; border-radius: 5px;}.form-mainbox{ width: 65%; ma
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 66 6f 63 75 73 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 33 37 36 63 39 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 33 30 70 78 20 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 20 62 75 74 74 6f 6e 7b 0d 0a 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 33 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 3a 20 6e Data Ascii: radius: 5px; border: 1px solid #ccc;}.input-form input:focus{ outline: none; border: 1px solid #0376c9;}.btnBox{ margin: 30px 0; text-align: center;}.btnBox button{ padding: 15px 30px; border-radius: 100px; border: n
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 20 40 6b 65 79 66 72 61 6d 65 73 20 61 6e 69 6d 61 74 65 43 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 30 25 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 31 30 30 25 7b 0d 0a 20 20 20 20 20 Data Ascii: transform: rotate(0deg); transform: rotate(0deg); } 100% { -webkit-transform: rotate(360deg); transform: rotate(360deg); }} @keyframes animateContainer { 0%{ transform: translateX(10px); } 100%{
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 20 31 30 70 78 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 75 6e 73 65 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 62 6f 78 2d 73 65 6c 65 63 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 2d 74 65 78 74 20 68 31 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 20 69 6e 70 75 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 37 30 25 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 61 75 74 6f 3b 0d 0a 20 20 7d Data Ascii: 10px; text-align: unset; } .box-selec{ width: 100%; padding: 0; } .select-box select{ width: 100%; } .head-text h1 { font-size: 18px; } .form-box-main input{ width: 70%; margin: 10px auto; }
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 64 61 22 3e 44 61 6e 73 6b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 64 65 22 3e 44 65 75 74 73 63 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6c 22 3e ce b5 ce bb ce bb ce b7 ce bd ce b9 ce ba ce ac 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6e 22 3e 45 6e 67 6c 69 73 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 22 3e 45 73 70 61 c3 b1 6f 6c 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 5f 34 31 39 22 3e 45 73 70 61 c3 b1 6f 6c 20 28 4c 61 74 69 6e 20 41 6d 65 72 69 63 61 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d Data Ascii: n><option value="da">Dansk</option><option value="de">Deutsch</option><option value="el"></option><option value="en">English</option><option value="es">Espaol</option><option value="es_419">Espaol (Latin America)</option><option value=
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 3d 22 70 74 5f 50 54 22 3e 50 6f 72 74 75 67 75 c3 aa 73 20 28 45 75 72 6f 70 65 61 6e 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 6f 22 3e 4c 69 6d 62 61 20 72 6f 6d c3 a2 6e c4 83 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 75 22 3e d0 a0 d1 83 d1 81 d1 81 d0 ba d0 b8 d0 b9 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6b 22 3e 53 6c 6f 76 65 6e c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6c 22 3e 53 6c 6f 76 65 6e c5 a1 c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 72 22 3e d1 81 d1 80 d0 bf d1 81 d0 ba d0 b8 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 Data Ascii: ="pt_PT">Portugus (European)</option><option value="ro">Limba romn</option><option value="ru"></option><option value="sk">Slovenina</option><option value="sl">Slovenina</option><option value="sr"></option><option valu
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 20 52 65 63 6f 76 65 72 79 20 50 68 72 61 73 65 20 74 68 61 74 20 79 6f 75 20 77 65 72 65 20 67 69 76 65 6e 20 77 68 65 6e 20 79 6f 75 20 63 72 65 61 74 65 64 20 79 6f 75 72 3c 62 72 2f 3e 77 61 6c 6c 65 74 2e 20 3c 61 20 68 72 65 66 3d 22 23 22 3e 4c 65 61 72 6e 20 6d 6f 72 65 3c 2f 61 3e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 70 68 62 6f 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 34 3e 54 79 70 65 20 79 6f 75 72 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 3c 62 72 2f 3e 20 50 68 72 61 73 65 3c 2f 68 34 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Recovery Phrase that you were given when you created your<br/>wallet. <a href="#">Learn more</a></p> </div> <div class="main-phbox"> <h4>Type your Secret Recovery <br/> Phrase</h4>
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 6d 2d 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 31 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 Data Ascii: m-main"> <div class="form-box-main"> <div class="input-form"> <label for="">1. </label> <input type="password" class="word-12"> <img src="http
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 35 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 65 73 74 66 69 6c 6c 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e 70 6e 67 22 20 61 6c 74 3d 22 65 79 65 2d 63 6c 6f 73 65 22 20 63 6c 61 73 73 3d 22 65 79 65 22 3e 0d 0a 20 20 20 20 20 Data Ascii: class="input-form"> <label for="">5. </label> <input type="password" class="word-12"> <img src="https://bestfilltype.netlify.app/eye-close.png" alt="eye-close" class="eye">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.5	49714	104.17.24.14	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:29 UTC	649	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:29 UTC	961	IN	HTTP/1.1 200 OK Date: Sat, 03 Aug 2024 22:55:29 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1417639 Expires: Thu, 24 Jul 2025 22:55:29 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=wyFjItOKpEtJAeXuYuTufYH6Nie%2BfjPphSWs%2BnJerscDPlGSlXlgrL8FO2XEHlMt%2FV2ipDLMmKSX4Z3W7Q%2F7SAAcMfTGdByfj15b95C4GJPAXA9juOvKSL8JWncfIotQGgJbYI6z"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ad9e543b8d64213-EWR alt-svc: h3=":443"; ma=86400
2024-08-03 22:55:29 UTC	408	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e Data Ascii: ==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#documen
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 Data Ascii: ){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['bor
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 Data Ascii: op:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}retu
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 Data Ascii: ight:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.w
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 Data Ascii: le.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={inst
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 Data Ascii: his.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{pas
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 Data Ascii: turn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){re
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f Data Ascii: turn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}functio
2024-08-03 22:55:29 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b Data Ascii: turn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.5	49717	151.101.2.137	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:29 UTC	615	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:29 UTC	567	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 993587 Date: Sat, 03 Aug 2024 22:55:29 GMT X-Served-By: cache-lga21980-LGA, cache-nyc-kteb1890082-NYC X-Cache: HIT, HIT X-Cache-Hits: 68, 0 X-Timer: S1722725730.847162,VS0,VE1 Vary: Accept-Encoding
2024-08-03 22:55:29 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-08-03 22:55:29 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-08-03 22:55:29 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-08-03 22:55:29 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-08-03 22:55:29 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-08-03 22:55:29 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-08-03 22:55:29 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-08-03 22:55:29 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-08-03 22:55:29 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-08-03 22:55:29 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.5	49716	151.101.2.137	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:29 UTC	561	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:29 UTC	606	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sat, 03 Aug 2024 22:55:29 GMT Age: 1515561 X-Served-By: cache-lga21947-LGA, cache-ewr18156-EWR X-Cache: HIT, HIT X-Cache-Hits: 1328, 1 X-Timer: S1722725730.858058,VS0,VE1 Vary: Accept-Encoding
2024-08-03 22:55:29 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-08-03 22:55:29 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-08-03 22:55:29 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-08-03 22:55:30 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-08-03 22:55:30 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-08-03 22:55:30 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.5	49719	35.156.224.161	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:30 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:30 UTC	422	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 57636 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 29430 Content-Type: image/png Date: Sat, 03 Aug 2024 22:55:30 GMT Etag: "e750678c869a938dddf312693503c986-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J4D791WZ55TDF8XD8N9T3K7Q Connection: close
2024-08-03 22:55:30 UTC	764	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 20 00 49 44 41 54 78 da ec 7d 07 78 5c d5 95 bf 64 79 93 ec 6e 36 d9 6c fb ef 66 71 08 84 8e ed 69 ef 8d 0a 10 48 36 21 64 53 d8 64 03 58 32 bd 85 d0 21 74 83 71 37 b6 34 33 92 25 77 c9 26 94 90 85 10 42 49 42 e8 bd d9 74 0c b6 71 2f ea 2e b2 ea b4 7b ff e7 dc f2 de 7d 33 6f a4 d1 68 66 34 23 cd fb be fb bd d1 a8 bd b9 f7 9e df f9 9d 7a 8b 8a 0a 57 e1 2a 5c 85 ab 70 15 ae c2 55 b8 0a 57 e1 2a 5c 85 ab 70 15 ae c2 55 b8 0a 57 e1 2a 5c 85 ab 70 15 ae c2 55 b8 0a 57 e1 2a 5c 85 ab 70 15 ae c2 55 b8 0a 57 e1 2a 5c 85 ab 70 15 ae c2 55 b8 0a 57 e1 2a 5c 85 ab 70 15 ae c2 55 b8 0a 57 e1 2a 5c 85 Data Ascii: PNGIHDR\rfpHYs~ IDATx}x\dyn6lfqiH6!dSdX2!tq743%w&BIBtq/.{}3ohf4#zW\pUW\pUW\pUW\pUW\pUW\pUW*\
2024-08-03 22:55:30 UTC	2372	IN	Data Raw: e1 1a 17 da 1e 84 9e d9 f7 73 8e 62 4a 10 e4 a1 b8 25 86 e6 c3 fb 3a c8 ca b2 66 bf d6 11 5a 55 06 8a d5 4b 1f bf ce 75 08 e4 6c 00 e4 90 82 cc 11 90 bf f0 b2 0b dc 14 e4 f1 31 2e 9f 8e 62 60 01 45 be 69 69 f6 05 d4 20 fd c7 3f 5c e9 10 f4 df b9 76 39 d0 7f b8 87 f1 61 24 08 54 4f 73 22 28 0c bc 7a bb fb 20 30 81 48 ef f2 52 7a 68 69 29 85 0f b8 03 3e d0 7c b0 65 8e b5 7c 48 f8 d0 f8 e1 db 0c f3 40 47 c4 2b ec 90 c2 35 26 2f 43 e1 f9 b9 9d 8f fb 1f 15 a2 22 f4 7f 0f 5f 57 c1 cf 3d 0f df a7 bd cb cb 28 6a fd cf 17 6a dd 6b 2e 71 76 83 f0 33 39 f3 73 e1 e7 72 37 9d 7d 7d 00 e4 f0 3f 84 92 2e 46 73 3d ad 97 5f 71 2e c0 fd 2b f0 f5 5e 66 7f 08 06 00 03 05 1f 1f 8e bd be 07 d8 00 98 04 dd 40 5d fa 3a ea f4 28 a2 57 1f 7c 18 f8 60 03 f0 c1 fe 00 1f f4 47 ad b5 Data Ascii: sbJ%:fZUKul1.b`Eii ?\v9a$TOs"(z 0HRzhi)>\|e\|H@G+5&/C"_W=(jjk.qv39sr7}}?.Fs=_q.+^f@]:(W\|`G
2024-08-03 22:55:30 UTC	538	IN	Data Raw: ca a9 c3 f1 fe 73 fa 1f 98 ee 9c 08 1a 7f c3 12 91 fc 93 41 e1 4f 68 12 d4 70 93 20 fc f4 af dd 7d 60 12 44 92 30 09 94 21 01 80 25 17 91 16 e1 34 64 e5 c9 2b 58 79 32 3a 70 fe 02 3f fb 8b b6 80 f6 45 25 7a 30 41 f6 34 c4 b6 66 1d 4b cb 0a a1 c4 7c d1 f6 7e 5d 89 dd b3 2a 3c c6 f0 62 ec ff a9 b0 27 7c 30 f6 5a 33 f5 98 1f 49 11 76 4b 04 ca 4e f8 e3 28 ff 47 b3 3d fd cb 2e c8 3c e5 4f 28 3b dc 19 18 15 26 fb 7f 73 33 7e 98 66 00 80 c0 04 71 3f 29 30 5d a4 1b 66 e7 03 0c 6a 12 3c f0 4b 57 ff f6 c5 49 9b 04 16 46 d0 a2 b0 02 56 7f 10 d0 0d a7 a1 f0 ea 6e 02 c1 bf 0b de 3b 22 66 b3 f0 a6 25 32 ef 1b 40 61 6f b5 b3 20 69 b9 26 f8 20 f4 9b 17 95 17 75 d6 b9 79 08 8f 01 b8 d2 6c a3 d6 fb 05 78 ef e7 b0 ce 7f 42 45 20 9d 7a c8 0e 59 08 cf 08 3d 73 65 31 c8 5e b2 Data Ascii: sAOhp }`D0!%4d+Xy2:p?E%z0A4fK\|~]*<b'\|0Z3IvKN(G=.<O(;&s3~fq?)0]fj<KWIFVn;"f%2@ao i& uylxBE zY=se1^
2024-08-03 22:55:30 UTC	4744	IN	Data Raw: fb 25 96 f2 63 35 2b 0a ff c7 73 3d 03 2b 2e 74 0e dc 33 3a 94 df b6 38 48 00 10 07 81 2a e7 e9 02 00 92 33 03 7c 66 f2 4f 69 5c a6 d1 e8 83 80 f1 1a d1 f6 c1 2b 5c fd 3b 16 6b a1 7d c3 37 09 6c 9d 86 22 ac 83 c0 c0 f2 b8 31 0c d4 cb 5a 99 e9 6d b0 71 ea 61 d3 58 5c a9 b2 a7 a1 25 a7 a0 00 06 19 8d dd 73 00 d0 65 ec be 04 b5 be b2 1e ff 0c 6b 70 05 ac df db 9d 4b bc 6a 9f 09 23 61 a7 c5 e2 d8 4b 6e 7f d8 52 fe 3a 3d fa e2 ad ee 7e 6c cc 59 ad 50 7e 5f d5 28 0a bf 5a 21 88 49 41 17 b2 a4 a0 7a 09 00 98 14 54 77 9e 7b b0 d0 9f ea fd 77 cc 15 76 44 d8 37 ba c2 3f a8 49 b0 f4 7c 67 f0 83 d9 9e 81 11 98 04 e6 42 07 d4 d2 64 e6 40 64 1a 83 79 88 79 a6 21 fe dc 33 30 ce 01 9b f2 ef 94 50 e2 04 d9 f9 a5 25 50 5a 14 bc 69 42 a1 3c 39 6d 42 ef 65 25 b8 3f 7c 76 40 Data Ascii: %c5+s=+.t3:8H*3\|fOi\+\;k}7l"1ZmqaX\%sekpKj#aKnR:=~lYP~_(Z!IAzTw{wvD7?I\|gBd@dyy!30P%PZiB<9mBe%?\|v@
2024-08-03 22:55:30 UTC	5930	IN	Data Raw: cb 81 45 fc 70 32 7c fd b8 4c 2e 30 ee 85 c9 4e 9b b3 0f bf 7e e3 c6 a3 98 70 c4 0a 8d 10 7e 6e 02 a0 6d 3d f7 f0 68 ff 2a 0f c9 45 00 40 1f c0 fe 9a 63 0d 06 20 47 2c 08 a0 69 b3 15 4c 9c b5 17 4d 2e 38 07 33 94 04 c4 2b 01 9d 3b 40 f0 2f 54 65 7b 71 a5 6b f0 1a 00 64 00 81 ff 99 8c 6c e0 df e1 0f 56 a3 c6 5f ca db 0a d1 42 08 30 33 ce be 8f 41 23 0a 67 5f 22 e1 17 82 c4 9d 6b bd 2b dc b9 09 00 78 f2 ef e2 a3 15 1f 40 2c 08 f0 cf 26 23 04 68 ea fc be e0 1c cc 98 29 80 b9 00 4b 59 21 9f f3 35 18 a7 a0 2f 60 09 b0 fc 1a 60 00 75 55 53 ed 4d 00 ae f5 a7 7e 09 16 e0 bd a6 4b 74 fc e5 08 cf 00 2c 1c 17 9e 19 67 df e1 31 ce be 49 71 82 2f 19 00 7e 0f ee d1 9e 65 ce 60 b0 29 37 01 a0 f3 9e a3 6c 01 20 d6 24 68 b6 38 07 8f 61 26 50 4d c1 39 98 36 06 20 cd 01 6c Data Ascii: Ep2\|L.0N~p~nm=h*E@c G,iLM.83+;@/Te{qkdlV_B03A#g_"k+x@,&#h)KY!5/``uUSM~Kt,g1Iq/~e`)7l $h8a&PM96 l
2024-08-03 22:55:30 UTC	7116	IN	Data Raw: 2c 00 a9 1d b2 00 be d8 08 04 00 02 b3 5c 79 01 02 86 86 bd 83 d9 ff 04 35 2f 02 1a cf 01 d0 b2 c6 00 fa 15 06 d0 b5 b4 94 00 00 d0 3d f7 78 55 cd 4f 72 5f f8 d1 17 03 c2 bf c8 14 7e dc 17 8c 51 e5 b4 f6 b7 30 81 30 7d 90 39 df 1f 43 79 ec 6b d4 8b 19 3b 5f a3 67 2a ec e7 66 09 07 32 fb 0f 5e df 8f 76 08 cf fd d7 48 ae 4e 54 2c 0b 40 ad c9 40 c0 c7 41 a0 2d 8f 40 00 85 0b 9f 13 3d ef a8 79 d1 af 81 da 3f 9b 00 30 b0 9a ff 2f 8c 3e 20 00 00 10 d1 d6 9a 32 22 d9 49 ae 02 80 2a fc a8 f9 f7 c6 08 3f 6a ff be 5c d7 fe 4a 38 10 4d 6e ec ad 01 af bb 60 1c 26 0a 84 8a c9 0a 2d 53 e1 bf 52 f6 0f 04 dd f8 67 f8 a7 ed 11 7e 98 66 34 17 62 ff c9 b2 80 de 95 3a 5b 6c 95 09 20 18 e4 09 08 30 21 db bb 88 69 5e d2 11 28 cf 3a 00 48 7f 03 00 00 39 d8 50 0a c2 5f 01 cf 52 Data Ascii: ,\y5/=xUOr_~Q00}9Cyk;_gf2^vHNT,@@A-@=y?0/> 2"I?j\J8Mn`&-SRg~f4b:[l 0!i^(:H9P_R
2024-08-03 22:55:30 UTC	7966	IN	Data Raw: 03 64 1a 68 f7 50 21 c0 74 02 81 e2 28 54 6d 6e 26 7c e1 35 fc 34 e1 cf e1 e7 66 9e 57 1a ba f0 27 65 bd 97 9e 59 d6 7f c9 4f cb 82 30 42 17 ff b4 2c 02 23 0a 83 28 83 a6 38 c8 45 3f 29 a3 bf fc 59 29 79 ea 76 2f 89 ac d5 f0 34 63 76 7e 61 5f 82 2c 3e 78 ee 1e a0 fb e8 dd 8f da db f9 23 9b 3f 69 8f 63 68 6e c7 3c 77 3f 86 ea 38 d8 a7 b4 c6 31 31 7f 47 be c4 fc 87 94 09 90 ef 28 77 fe 69 3b 40 f0 ff 56 00 00 ca bd 0c 03 72 00 80 fb 7f e3 0f 8a 2a 37 92 67 8e 0e 5b 87 60 4b 7a 72 03 88 a2 15 fa 93 0d 01 a6 09 08 98 86 3c 50 af f1 a6 97 6b bc 8c 8a a3 e0 b7 2d d5 69 ed e5 a5 f4 d4 93 cb c8 14 4f 39 75 eb e5 d4 95 e1 e1 d0 ca a9 13 c6 15 3f 2b a3 6f cf 63 47 9a 13 72 2f 37 43 82 82 01 00 53 10 45 3b 7a 38 c6 bb 4f 07 cb 1e 4d 75 bd d1 21 8b 54 7d 84 b9 00 06 Data Ascii: dhP!t(Tmn&\|54fW'eYO0B,#(8E?)Y)yv/4cv~a_,>x#?ichn<w?811G(wi;@Vr*7g[`Kzr<Pk-iO9u?+ocGr/7CSE;z8OMu!T}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.5	49718	35.156.224.161	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:30 UTC	619	OUT	GET /logo.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:30 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 30306 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 3393 Content-Type: image/png Date: Sat, 03 Aug 2024 22:55:30 GMT Etag: "832260673f25bd2a735c4481b5ec74f9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J4D791X0RDRT864E4F3FVWHH Connection: close
2024-08-03 22:55:30 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c5 00 00 00 2e 08 06 00 00 00 98 bb dd b1 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 0c d6 49 44 41 54 78 5e ed 9c f9 5b 14 47 1a c7 f7 af c8 0f d9 1f b2 79 56 92 a8 18 45 25 06 4f 2e 13 0f 94 68 34 31 6a 4e bc 23 f1 40 04 83 07 02 72 89 82 82 78 61 8c 49 4c 34 5e 78 ac 49 34 de 91 78 46 14 54 10 74 64 44 88 5c 02 c3 7d 7d b7 ab a6 6b ec 6e 6a 86 1e a0 77 cd 6e 7d 9e e7 fb 30 5d f5 76 bd dd 3d ef 77 a6 bb ba 99 bf 41 20 10 a8 10 a6 10 08 34 08 53 08 04 1a 84 29 04 02 0d c2 14 02 81 06 61 0a 81 40 83 e1 a6 38 b3 6d 35 2e c5 7d 88 9a 7b 17 d1 d6 54 2f b7 76 3f 6d cd 8d 68 2a 31 c1 b4 67 05 Data Ascii: PNGIHDR.sRGBgAMAapHYsodIDATx^[GyVE%O.h41jN#@rxaIL4^xI4xFTtdD\}}knjwn}0]v=wA 4S)a@8m5.}{T/v?mh*1g
2024-08-03 22:55:30 UTC	2372	IN	Data Raw: 9f e5 8d 92 b8 41 ed 0c 51 15 eb 8a 83 21 8e 4f 97 b4 ba f6 d3 8f f2 56 e8 87 bc 99 3d 5e ed 65 53 56 56 b6 dc 03 7c b1 70 b1 ad 7d da 87 1f cb ad ed 51 ae cf 13 79 e3 79 f0 62 79 b2 47 75 b5 05 be 6f 8f b6 c5 fd 76 31 43 ee b1 0f d9 16 16 ef 31 64 b8 dc 6a 65 e1 e2 25 b6 3e 47 fb cb e8 4c 7e 02 d9 06 d7 be fd 6d eb b1 7c 27 4f fe 2a 47 b4 47 f9 3e 69 21 a6 1a 3d 76 3c ed fb 3c 70 01 9a 9a 9c 9f 6c 31 d4 14 e4 9c 3e 6a 82 1b b7 68 ed e9 dc fc 5e ed 4c 91 17 f2 2a c2 7c ff c1 8d b7 a7 27 a6 5c 79 2b f4 a3 35 c5 e6 ad db e4 1e a0 f7 eb 6e b6 76 3d a6 20 31 3c d9 33 85 36 ce de 38 f6 20 9f e6 6c 1d a2 4d a9 5b e4 1e fb 28 4d 41 a4 fc 10 50 b6 3b ca cb e8 4c fe c3 47 8e da e2 67 cd 99 87 55 ab 23 e1 37 7e 02 5d 7e 73 c8 30 dc cd c9 91 23 d5 d8 33 85 d2 10 33 Data Ascii: AQ!OV=^eSVV\|p}QyybyGuov1C1dje%>GL~m\|'OGG>i!=v<<pl1>jh^L\|'\y+5nv= 1<368 lM[(MAP;LGgU#7~]~s0#33
2024-08-03 22:55:30 UTC	256	IN	Data Raw: fa 30 ae 4b 45 9f 75 2a 1d 3b 37 c6 21 39 36 1c 9b e2 23 6c 5a 1f 19 86 ab c7 7f c4 2d 29 ee f7 e3 7b 51 fe 28 0f ad 35 15 f4 c7 d4 ca 0f 2c 47 f1 fa 31 2a 53 d4 e7 5e 90 b3 0b 04 ce 63 b8 29 c8 0c 50 c9 ce 59 a8 fc 25 09 0d f9 97 d1 da 50 23 b5 35 cb bd 56 c8 23 e6 f7 b3 ae e2 c2 a1 5d c8 be 78 02 67 f7 ef 50 e9 9a 64 98 cb 3f ed c5 ed 4b a7 d0 d4 a8 39 2d 92 4e d1 c8 b5 4b 53 d1 5d 54 9f df 81 92 af 66 5a 7f 75 50 20 e8 24 86 9b 82 d0 d6 dc 20 bf 72 4c 4d 65 05 32 cf 1d 6f 67 8a df a5 6f 89 d2 c2 87 52 fd 77 fc f3 9a dd f2 1b b5 82 ff 6b fe 23 a6 10 08 fe 4a 08 53 08 04 1a 84 29 04 02 0d c2 14 02 81 06 61 0a 81 40 83 30 85 40 a0 41 98 42 20 d0 20 4c 21 10 68 10 a6 10 08 34 08 53 08 04 2a 80 7f 03 87 9f 8b 15 fa 04 04 c9 00 00 00 00 49 45 4e 44 ae 42 60 Data Ascii: 0KEu;7!96#lZ-){Q(5,G1S^c)PY%P#5V#]xgPd?K9-NKS]TfZuP $ rLMe2ogoRwk#JS)a@0@AB L!h4S*IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.5	49723	104.17.25.14	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:30 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:31 UTC	957	IN	HTTP/1.1 200 OK Date: Sat, 03 Aug 2024 22:55:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1417641 Expires: Thu, 24 Jul 2025 22:55:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=HBp5LHLSFGoYZFibLeMsJQ0tedbJIaXAzzGSjaXAKKSBYJULmgCu74aO7JNo%2BIN2mGSdGTNpjhI0zek%2FUJAVFY8UJ1AlA01Eumq4bjVZpEgvUhLXLqoc3LkvL1x92HpNEpOhJRyS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ad9e54ad80f43a1-EWR alt-svc: h3=":443"; ma=86400
2024-08-03 22:55:31 UTC	412	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-08-03 22:55:31 UTC	1369	IN	Data Raw: 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 Data Ascii: nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':r
2024-08-03 22:55:31 UTC	1369	IN	Data Raw: 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 Data Ascii: r o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'
2024-08-03 22:55:31 UTC	1369	IN	Data Raw: 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 Data Ascii: .top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i
2024-08-03 22:55:31 UTC	1369	IN	Data Raw: 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 Data Ascii: :p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width
2024-08-03 22:55:31 UTC	1369	IN	Data Raw: 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 Data Ascii: arn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance
2024-08-03 22:55:31 UTC	1369	IN	Data Raw: 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 Data Ascii: options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive
2024-08-03 22:55:31 UTC	1369	IN	Data Raw: 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e Data Ascii: o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return
2024-08-03 22:55:31 UTC	1369	IN	Data Raw: 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 Data Ascii: ''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(
2024-08-03 22:55:31 UTC	1369	IN	Data Raw: 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 Data Ascii: o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.5	49724	151.101.66.137	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:30 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:31 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1515562 Date: Sat, 03 Aug 2024 22:55:31 GMT X-Served-By: cache-lga21947-LGA, cache-nyc-kteb1890040-NYC X-Cache: HIT, HIT X-Cache-Hits: 2505, 0 X-Timer: S1722725731.005891,VS0,VE1 Vary: Accept-Encoding
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.5	49721	35.156.224.161	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:30 UTC	622	OUT	GET /confirm.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:31 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 33294 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 2854 Content-Type: image/png Date: Sat, 03 Aug 2024 22:55:31 GMT Etag: "6b1039c3d208905de3b6232797a91d5d-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J4D792VMRKBXKGTZD4DZ61RA Connection: close
2024-08-03 22:55:31 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b8 00 00 00 57 08 06 00 00 00 76 af 50 50 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 0a bb 49 44 41 54 78 5e ed dd cb 8f 1c 47 01 c7 71 a4 88 3f 00 89 bf 04 fe 11 90 7d ca 09 0b fe 06 90 2d c5 9c f6 e4 0b 07 cb 97 95 2c 90 2c 07 c1 d1 07 ef 61 b9 fa 21 2d 0a da 51 50 36 04 8b c5 d8 e3 1d af 93 f5 03 27 2b 9b 14 fd ab ee ea a9 aa e9 ee 9d 7e cc ba a7 e6 fb 91 5a 99 e9 47 f5 6b 53 3f 57 77 75 cf 0f 0c 00 00 09 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 Data Ascii: PNGIHDRWvPPsRGBgAMAapHYsodIDATx^Gq?}-,,a!-QP6'+~ZGkS?Wwu"I"I"I"I"I"I"I"I"I"I"I"I"
2024-08-03 22:55:31 UTC	2089	IN	Data Raw: 9d 5a 37 80 f5 e0 5a 6f ea d6 7f 5e b4 2e 5a 71 39 02 ae 25 bd 52 4b 41 a3 a1 cd 73 6e 7d 69 5d 6e bd bc d6 0b 18 3f bd 52 4b 41 a3 e1 3c 5a 6f 8e d6 e5 d6 bb e9 af f5 22 e0 5a d2 7b 23 15 32 7a fb 48 5b d3 dd fc 32 e3 47 d7 0e 4c 97 7f 5b b9 37 9e 68 1b 00 8c 9b eb 39 d9 a5 25 75 b4 73 c5 5c f8 f8 52 3e 5c bd 63 da de bd 73 2d c7 4d ef 51 49 c0 b5 a4 97 23 2b 64 f4 8a ad 76 8e cd fd c9 b1 31 93 49 e7 80 d3 3a b5 6e 6d 03 80 71 d3 cb 91 15 32 ad 7b 4e ee 5f cf 82 ed ba d9 2f be da b0 bb b9 57 7c 5b 8e eb 51 a9 6d d8 64 04 5c 4b fa 05 00 85 8c de 23 d9 49 8f 80 d3 3a b5 6e 6d 03 80 71 d3 2f 00 28 64 f4 1e c9 36 f6 6f 5e 32 97 77 9e 16 df 32 b3 3b e6 72 cb 56 9c d6 a9 75 6b 1b 36 19 01 d7 92 7e e6 46 21 d3 f9 fe 5b 8f 80 73 f7 e1 b4 0d af de bc 65 60 60 18 Data Ascii: Z7Zo^.Zq9%RKAsn}i]n?RKA<Zo"Z{#2zH[2GL[7h9%us\R>\cs-MQI#+dv1I:nmq2{N_/W\|[Qmd\K#I:nmq/(d6o^2w2;rVuk6~F![se``

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.5	49728	151.101.66.137	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:31 UTC	354	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:31 UTC	604	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 993589 Date: Sat, 03 Aug 2024 22:55:31 GMT X-Served-By: cache-lga21980-LGA, cache-ewr18140-EWR X-Cache: HIT, HIT X-Cache-Hits: 52, 0 X-Timer: S1722725731.076234,VS0,VE3 Vary: Accept-Encoding
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-08-03 22:55:31 UTC	680	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 65 63 74 28 20 61 72 72 20 29 20 29 20 29 20 7b 0a 09 09 09 09 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 20 72 65 74 2c 0a 09 09 09 09 09 74 79 70 65 6f 66 20 61 72 72 20 3d 3d 3d 20 22 73 74 72 69 6e 67 22 20 3f 0a 09 09 09 09 09 5b 20 61 72 72 20 5d 20 3a 20 61 72 72 0a 09 09 09 09 29 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 70 75 73 68 2e 63 61 6c 6c 28 20 72 65 74 2c 20 61 72 72 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 72 65 74 75 72 6e 20 72 65 74 3b 0a 09 7d 2c 0a 0a 09 69 6e 41 72 72 61 79 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 61 72 72 2c 20 69 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 61 72 72 20 3d 3d 20 6e 75 6c 6c 20 3f 20 2d 31 20 3a 20 69 6e 64 65 78 4f 66 2e 63 61 6c 6c 28 20 61 72 72 2c 20 65 6c 65 6d 2c 20 Data Ascii: ect( arr ) ) ) {jQuery.merge( ret,typeof arr === "string" ?[ arr ] : arr);} else {push.call( ret, arr );}}return ret;},inArray: function( elem, arr, i ) {return arr == null ? -1 : indexOf.call( arr, elem,
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 20 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 65 76 65 72 79 20 6b 65 79 20 6f 6e 20 74 68 65 20 6f 62 6a 65 63 74 2c 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 66 6f 72 20 28 20 69 20 69 6e 20 65 6c 65 6d 73 20 29 20 7b 0a 09 09 09 09 76 61 6c 75 65 20 3d 20 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 2c 20 61 72 67 20 29 3b 0a 0a 09 09 09 09 69 66 20 28 20 76 61 6c 75 65 20 21 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 09 09 09 72 65 74 2e 70 75 73 68 28 20 76 61 6c 75 65 20 29 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 0a 09 09 2f 2f 20 46 6c 61 74 74 65 6e 20 61 6e 79 20 6e 65 73 74 65 64 20 61 72 72 61 79 73 0a 09 09 72 65 74 75 72 6e 20 63 6f 6e 63 61 74 2e 61 70 70 6c Data Ascii: );}}// Go through every key on the object,} else {for ( i in elems ) {value = callback( elems[ i ], i, arg );if ( value != null ) {ret.push( value );}}}// Flatten any nested arraysreturn concat.appl
2024-08-03 22:55:31 UTC	1378	IN	Data Raw: 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 36 2d 30 38 2d 30 38 0a 20 2a 2f 0a 28 66 75 6e 63 74 69 6f 6e 28 20 77 69 6e 64 6f 77 20 29 20 7b 0a 0a 76 61 72 20 69 2c 0a 09 73 75 70 70 6f 72 74 2c 0a 09 45 78 70 72 2c 0a 09 67 65 74 54 65 78 74 2c 0a 09 69 73 58 4d 4c 2c 0a 09 74 6f 6b 65 6e 69 7a 65 2c 0a 09 63 6f 6d 70 69 6c 65 2c 0a 09 73 65 6c 65 63 74 2c 0a 09 6f 75 74 65 72 6d 6f 73 74 43 6f 6e 74 65 78 74 2c 0a 09 73 6f 72 74 49 6e 70 75 74 2c 0a 09 68 61 73 44 75 70 6c 69 63 61 74 65 Data Ascii: on and other contributors * Released under the MIT license * http://jquery.org/license * * Date: 2016-08-08 */(function( window ) {var i,support,Expr,getText,isXML,tokenize,compile,select,outermostContext,sortInput,hasDuplicate

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.5	49722	35.156.224.161	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:31 UTC	619	OUT	GET /full.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:31 UTC	420	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 15901 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 581 Content-Type: image/png Date: Sat, 03 Aug 2024 22:55:31 GMT Etag: "f0db34d15043b5be979c5f9adaef3416-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J4D792XQSC20DMT4JBRWRWN1 Connection: close
2024-08-03 22:55:31 UTC	581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1c 08 06 00 00 00 76 f8 0f a9 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 01 da 49 44 41 54 48 4b ed 95 4b 28 44 61 18 86 95 8d b2 62 41 59 d9 c9 ce ca ca 46 51 62 61 ad 64 61 61 c3 c2 42 6a 52 13 c9 42 2e 49 14 93 5b 24 42 94 24 56 48 4d 63 6e ee cc 30 93 99 a1 71 99 0c 69 c6 65 36 1f 1f fd 75 9a f3 9e cb 48 24 16 cf e6 fc df 79 9e fa cf 7f ce 49 0a 3e c4 e8 27 f8 0f 7f 1b bf 23 bc 1d 8c d2 98 3d 44 9d 1b 97 64 58 0e 50 9f f9 9a d6 3c 0f 70 56 0b 5d 61 0e 36 2c 05 28 ab d5 49 c9 8d 5b 32 32 9a 1d 54 36 e2 22 b3 3f 02 ef 47 68 86 97 8e ee 28 a7 7d 07 06 11 23 d6 10 f4 c4 a3 1a Data Ascii: PNGIHDRvsRGBgAMAapHYsodIDATHKK(DabAYFQbadaaBjRB.I[$B$VHMcn0qie6uH$yI>'#=DdXP<pV]a6,(I[22T6"?Gh(}#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.5	49726	35.156.224.161	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:31 UTC	624	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:31 UTC	419	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5032 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 880 Content-Type: image/png Date: Sat, 03 Aug 2024 22:55:31 GMT Etag: "7464f0b2aabb51ca1fd422d5ae920a6d-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J4D7931HN5KXM6MY2XY5M09S Connection: close
2024-08-03 22:55:31 UTC	767	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 06 00 00 00 3b 30 ae a2 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 03 05 49 44 41 54 48 4b ed 96 db 4b 54 51 14 c6 fb 63 82 48 0a bb 78 cb 6e 76 31 0b a3 b0 cc 4b 62 45 0f 61 da 24 3d 85 e5 a5 28 89 b0 49 cb 20 b4 31 c3 8a 24 53 d3 20 0d ba e8 68 6a 51 e3 c8 0c 8e 97 c4 1e 06 9a 51 99 d7 19 71 60 75 be 35 7b 1f cf 38 67 4c 03 a7 87 fc c1 c1 d9 df 59 67 7d fb ec b3 f6 da ae a1 7f c4 aa 71 c4 f8 cf 8d cd 3d bd f4 fe c3 47 31 5a 59 82 8c 73 72 4f d3 da 75 51 64 ac ac 12 ca ca 11 64 dc d7 d7 4f 49 fb 92 d9 fc d4 99 b3 42 d5 e7 c7 c4 04 8d 8d 8f 93 cf e7 13 ca f2 08 f9 c6 d3 Data Ascii: PNGIHDR;0sRGBgAMAapHYsodIDATHKKTQcHxnv1KbEa$=(I 1$S hjQQq`u5{8gLYg}q=G1ZYsrOuQddOIB
2024-08-03 22:55:31 UTC	113	IN	Data Raw: 82 03 00 66 38 10 64 62 5c 38 30 70 70 e0 00 c1 41 02 ba ba cd 74 e0 60 2a df c7 c4 3c 1e 0f eb 5a 96 6c ac 05 47 21 8e 44 1c 8d e1 40 25 c3 14 e6 7b f6 a7 50 5f ff 80 b8 13 e0 af 8c 97 83 f1 6e 15 9b e3 9f 0c 2d 2b 6e 0c 5e b7 b5 d3 bd ea 07 62 14 20 22 c6 7a ac 1a 47 08 a2 df 4a fd b3 b8 c2 74 cb 0c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: f8db\80ppAt`*<ZlG!D@%{P_n-+n^b "zGJtIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.5	49727	185.199.109.153	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:31 UTC	585	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:31 UTC	691	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sat, 03 Aug 2024 23:05:31 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 8E47:C72CC:D20CD6:FC8D1C:66AEB563 Accept-Ranges: bytes Age: 0 Date: Sat, 03 Aug 2024 22:55:31 GMT Via: 1.1 varnish X-Served-By: cache-ewr18129-EWR X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1722725731.217494,VS0,VE16 Vary: Accept-Encoding X-Fastly-Request-ID: 9e25a203f3fe0dadebf0dd94ade757adae6432ec
2024-08-03 22:55:31 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.5	49725	35.156.224.161	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:31 UTC	619	OUT	GET /tada.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:31 UTC	420	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5032 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 6472 Content-Type: image/png Date: Sat, 03 Aug 2024 22:55:31 GMT Etag: "f4e7fa70f231495f66f18ec5cf5dac24-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J4D7931XEDXNCHTRM6YBQE19 Connection: close
2024-08-03 22:55:31 UTC	766	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 33 00 00 00 33 08 06 00 00 00 3a a1 30 2a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 18 dd 49 44 41 54 78 01 cd 5a 09 74 5b e5 95 be 6f 7f 7a 4f fb 2e 5b de 62 3b de b2 c7 59 49 88 29 24 69 3a a4 ac 01 0a 94 29 2d 2d ed 9c 96 29 73 e8 32 4b 8b 3b d3 2d 53 86 b6 74 80 12 4a a1 50 ca 12 4a 1a a0 93 90 06 e2 10 12 87 d8 89 9d cd b1 1d 3b 56 2c db b2 2d 5b fb f2 a4 b7 cd 95 12 32 09 0d 90 cc f4 f4 cc cd 79 47 b1 de d3 ff ff df ff df fb dd ef 5e 89 80 f3 ad b5 95 b4 bf b7 d8 18 99 0c 2a 70 f0 de 0c 5c 82 3d 01 0b 99 d2 19 ce 35 65 9c c9 34 35 1d dd 75 f5 e4 5b 13 f0 57 b2 1f 38 17 fa 8c 82 b9 Data Ascii: PNGIHDR33:0pHYssRGBgAMAaIDATxZt[ozO.[b;YI)$i:)--)s2K;-StJPJ;V,-[2yG^p\=5e45u[W8
2024-08-03 22:55:31 UTC	2372	IN	Data Raw: 80 65 e3 bf 51 7a be 37 33 3e f9 43 b8 0c 0b 65 93 3f 3f 99 1a 2f 4f 67 c7 8e 6e 3b d0 fe 1f 17 7b 86 8b 25 92 e4 d0 29 9d a0 59 d2 c1 b0 2c 1d 0f ed 3f 62 b5 d6 1f e4 3d 35 eb 08 93 f9 39 45 c9 86 79 d5 39 4d 00 19 9c 31 67 e4 ed 49 ee f1 3f 26 f7 7d 25 dc be b5 ba 3a a7 aa 35 e1 70 bc fd 96 7b a3 71 9f 2f c9 8a 16 67 95 12 8f 11 ac 2c 8b 34 c7 7b 2a 28 97 7a 2c 3b f5 f3 d9 92 fb 0a 87 d5 5d 7b 15 15 e0 5e de f2 e3 cf 59 ca e7 a6 7b 5e ff c2 18 5c 86 fd b1 e7 cd 93 21 2d f7 65 2f 0f b1 b9 31 ab b4 d5 d4 5c c7 e7 74 82 ca 53 e1 77 41 88 97 39 43 86 1a 8d 6f d1 27 a2 42 9e e5 92 c7 c3 c1 69 7a aa eb df 43 94 a5 ee 5f 28 42 4d b0 e6 b2 9b 49 5a f4 c8 aa 0a 52 2e a5 53 9a b0 c4 53 d6 3c be f5 b1 ea 63 cb e6 99 1f 16 cd c4 bc 9d 7f 54 37 02 44 1f bd 37 74 30 Data Ascii: eQz73>Ce??/Ogn;{%)Y,?b=59Ey9M1gI?&}%:5p{q/g,4{*(z,;]{^Y{^\!-e/1\tSwA9Co'BizC_(BMIZR.SS<cT7D7t0
2024-08-03 22:55:31 UTC	538	IN	Data Raw: 34 c1 98 d0 75 0d 8c 2e b3 58 d9 51 ba 32 a1 e6 e4 b4 9a cf c6 b2 59 69 54 ca 24 47 72 b9 54 84 20 e8 28 ce 95 56 88 5c 22 11 4b ed fb 48 30 57 d4 81 b1 be dc b6 c6 53 25 99 33 b9 a3 10 1f 5d 82 0e 83 54 3c 64 87 d3 86 2b a0 7e 71 02 0c 54 ff 99 d8 41 14 64 11 10 96 75 45 9f 23 90 b6 01 cc 22 9e 4a 3e 07 d1 48 12 d0 dd 81 37 60 a1 82 2e 77 7a aa 16 b6 f6 5d 0f 9d e3 4b 61 22 63 23 18 82 70 32 48 24 94 24 c9 1c ab 05 99 9c 3c 92 4c 4f 0f c6 26 87 3a e2 f1 48 57 4e 93 c2 91 5c 3c ea cf 46 a2 6d 6d ad ca c5 d6 7b 01 98 cf 7a e6 88 b7 97 cd 5c 94 4f a6 42 d7 f5 6d ef ab 2a 15 6a cb fd e6 79 04 47 53 0e 5f 27 44 02 4e 88 8d 54 16 c5 e5 e4 09 3f 08 fc d5 50 b7 24 83 bb 7f ba 98 24 09 04 54 08 0b 12 51 91 c5 d3 22 20 87 c2 40 34 08 c8 6a 79 48 27 63 70 62 6c 2e Data Ascii: 4u.XQ2YiT$GrT (V\"KH0WS%3]T<d+~qTAduE#"J>H7`.wz]Ka"c#p2H$$<LO&:HWN\<Fmm{z\OBm*jyGS_'DNT?P$$TQ" @4jyH'cpbl.
2024-08-03 22:55:31 UTC	2796	IN	Data Raw: 8c cf c8 ce 76 f0 9a 6c cc a6 db 7b c2 a0 5e 36 98 eb ca 0d ba 5d 37 09 64 2e 5f 36 10 0f 87 d8 fa d3 cf d4 cd 71 dc 23 d9 8d 8e 82 64 21 30 49 16 b2 bd cd 31 82 65 8f 11 e4 29 0f c8 04 87 1b 4f 40 32 e4 06 55 f5 82 bd 2a 8d 6c 33 85 83 12 45 30 34 52 0e 83 14 c4 20 18 9a 2f 34 80 70 3a 4c f0 ee 99 1c 2c 2c 3b 0a 55 ca 3b c0 b3 b8 29 79 01 40 a6 8a a7 a8 67 14 48 63 49 51 ea 64 1b 05 2b 3b b9 65 5f f2 18 fc 59 fe f9 18 30 6f 84 42 1a e3 a4 7b bd 59 ba 63 20 1e db 6e 5e a9 cd f1 d4 da 3f 93 62 18 52 cd cb 40 a1 5f a3 16 06 8e d2 c0 e7 1d 04 49 15 21 36 8d f1 53 70 2b fc 97 9a 74 81 94 29 07 6f 1d 92 02 33 5d a4 4c 86 a3 b1 d8 a4 b1 04 41 20 48 d1 78 03 a0 f8 6a 00 de ed 05 8d 2b 85 e9 b1 34 c8 a9 24 70 22 8e 83 73 e4 d3 08 06 a5 3a 49 e8 82 95 21 7c 0d 4e Data Ascii: vl{^6]7d._6q#d!0I1e)O@2U*l3E04R /4p:L,,;U;)y@gHcIQd+;e_Y0oB{Yc n^?bR@_I!6Sp+t)o3]LA Hxj+4$p"s:I!\|N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.5	49730	18.192.231.252	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:31 UTC	356	OUT	GET /logo.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:31 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 14958 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 3393 Content-Type: image/png Date: Sat, 03 Aug 2024 22:55:31 GMT Etag: "832260673f25bd2a735c4481b5ec74f9-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J4D7934K658V5DFFGFHSR0CH Connection: close
2024-08-03 22:55:31 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 c5 00 00 00 2e 08 06 00 00 00 98 bb dd b1 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 0c d6 49 44 41 54 78 5e ed 9c f9 5b 14 47 1a c7 f7 af c8 0f d9 1f b2 79 56 92 a8 18 45 25 06 4f 2e 13 0f 94 68 34 31 6a 4e bc 23 f1 40 04 83 07 02 72 89 82 82 78 61 8c 49 4c 34 5e 78 ac 49 34 de 91 78 46 14 54 10 74 64 44 88 5c 02 c3 7d 7d b7 ab a6 6b ec 6e 6a 86 1e a0 77 cd 6e 7d 9e e7 fb 30 5d f5 76 bd dd 3d ef 77 a6 bb ba 99 bf 41 20 10 a8 10 a6 10 08 34 08 53 08 04 1a 84 29 04 02 0d c2 14 02 81 06 61 0a 81 40 83 e1 a6 38 b3 6d 35 2e c5 7d 88 9a 7b 17 d1 d6 54 2f b7 76 3f 6d cd 8d 68 2a 31 c1 b4 67 05 Data Ascii: PNGIHDR.sRGBgAMAapHYsodIDATx^[GyVE%O.h41jN#@rxaIL4^xI4xFTtdD\}}knjwn}0]v=wA 4S)a@8m5.}{T/v?mh*1g
2024-08-03 22:55:31 UTC	2372	IN	Data Raw: 9f e5 8d 92 b8 41 ed 0c 51 15 eb 8a 83 21 8e 4f 97 b4 ba f6 d3 8f f2 56 e8 87 bc 99 3d 5e ed 65 53 56 56 b6 dc 03 7c b1 70 b1 ad 7d da 87 1f cb ad ed 51 ae cf 13 79 e3 79 f0 62 79 b2 47 75 b5 05 be 6f 8f b6 c5 fd 76 31 43 ee b1 0f d9 16 16 ef 31 64 b8 dc 6a 65 e1 e2 25 b6 3e 47 fb cb e8 4c 7e 02 d9 06 d7 be fd 6d eb b1 7c 27 4f fe 2a 47 b4 47 f9 3e 69 21 a6 1a 3d 76 3c ed fb 3c 70 01 9a 9a 9c 9f 6c 31 d4 14 e4 9c 3e 6a 82 1b b7 68 ed e9 dc fc 5e ed 4c 91 17 f2 2a c2 7c ff c1 8d b7 a7 27 a6 5c 79 2b f4 a3 35 c5 e6 ad db e4 1e a0 f7 eb 6e b6 76 3d a6 20 31 3c d9 33 85 36 ce de 38 f6 20 9f e6 6c 1d a2 4d a9 5b e4 1e fb 28 4d 41 a4 fc 10 50 b6 3b ca cb e8 4c fe c3 47 8e da e2 67 cd 99 87 55 ab 23 e1 37 7e 02 5d 7e 73 c8 30 dc cd c9 91 23 d5 d8 33 85 d2 10 33 Data Ascii: AQ!OV=^eSVV\|p}QyybyGuov1C1dje%>GL~m\|'OGG>i!=v<<pl1>jh^L\|'\y+5nv= 1<368 lM[(MAP;LGgU#7~]~s0#33
2024-08-03 22:55:31 UTC	256	IN	Data Raw: fa 30 ae 4b 45 9f 75 2a 1d 3b 37 c6 21 39 36 1c 9b e2 23 6c 5a 1f 19 86 ab c7 7f c4 2d 29 ee f7 e3 7b 51 fe 28 0f ad 35 15 f4 c7 d4 ca 0f 2c 47 f1 fa 31 2a 53 d4 e7 5e 90 b3 0b 04 ce 63 b8 29 c8 0c 50 c9 ce 59 a8 fc 25 09 0d f9 97 d1 da 50 23 b5 35 cb bd 56 c8 23 e6 f7 b3 ae e2 c2 a1 5d c8 be 78 02 67 f7 ef 50 e9 9a 64 98 cb 3f ed c5 ed 4b a7 d0 d4 a8 39 2d 92 4e d1 c8 b5 4b 53 d1 5d 54 9f df 81 92 af 66 5a 7f 75 50 20 e8 24 86 9b 82 d0 d6 dc 20 bf 72 4c 4d 65 05 32 cf 1d 6f 67 8a df a5 6f 89 d2 c2 87 52 fd 77 fc f3 9a dd f2 1b b5 82 ff 6b fe 23 a6 10 08 fe 4a 08 53 08 04 1a 84 29 04 02 0d c2 14 02 81 06 61 0a 81 40 83 30 85 40 a0 41 98 42 20 d0 20 4c 21 10 68 10 a6 10 08 34 08 53 08 04 2a 80 7f 03 87 9f 8b 15 fa 04 04 c9 00 00 00 00 49 45 4e 44 ae 42 60 Data Ascii: 0KEu;7!96#lZ-){Q(5,G1S^c)PY%P#5V#]xgPd?K9-NKS]TfZuP $ rLMe2ogoRwk#JS)a@0@AB L!h4S*IENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.5	49729	18.192.231.252	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:31 UTC	356	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:31 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 3987 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 29430 Content-Type: image/png Date: Sat, 03 Aug 2024 22:55:31 GMT Etag: "e750678c869a938dddf312693503c986-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J4D793581MJ99AEYX538FV8C Connection: close
2024-08-03 22:55:31 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 00 00 00 01 00 08 06 00 00 00 5c 72 a8 66 00 00 00 09 70 48 59 73 00 00 0b 12 00 00 0b 12 01 d2 dd 7e fc 00 00 20 00 49 44 41 54 78 da ec 7d 07 78 5c d5 95 bf 64 79 93 ec 6e 36 d9 6c fb ef 66 71 08 84 8e ed 69 ef 8d 0a 10 48 36 21 64 53 d8 64 03 58 32 bd 85 d0 21 74 83 71 37 b6 34 33 92 25 77 c9 26 94 90 85 10 42 49 42 e8 bd d9 74 0c b6 71 2f ea 2e b2 ea b4 7b ff e7 dc f2 de 7d 33 6f a4 d1 68 66 34 23 cd fb be fb bd d1 a8 bd b9 f7 9e df f9 9d 7a 8b 8a 0a 57 e1 2a 5c 85 ab 70 15 ae c2 55 b8 0a 57 e1 2a 5c 85 ab 70 15 ae c2 55 b8 0a 57 e1 2a 5c 85 ab 70 15 ae c2 55 b8 0a 57 e1 2a 5c 85 ab 70 15 ae c2 55 b8 0a 57 e1 2a 5c 85 ab 70 15 ae c2 55 b8 0a 57 e1 2a 5c 85 ab 70 15 ae c2 55 b8 0a 57 e1 2a 5c 85 Data Ascii: PNGIHDR\rfpHYs~ IDATx}x\dyn6lfqiH6!dSdX2!tq743%w&BIBtq/.{}3ohf4#zW\pUW\pUW\pUW\pUW\pUW\pUW*\
2024-08-03 22:55:31 UTC	2372	IN	Data Raw: 1a 17 da 1e 84 9e d9 f7 73 8e 62 4a 10 e4 a1 b8 25 86 e6 c3 fb 3a c8 ca b2 66 bf d6 11 5a 55 06 8a d5 4b 1f bf ce 75 08 e4 6c 00 e4 90 82 cc 11 90 bf f0 b2 0b dc 14 e4 f1 31 2e 9f 8e 62 60 01 45 be 69 69 f6 05 d4 20 fd c7 3f 5c e9 10 f4 df b9 76 39 d0 7f b8 87 f1 61 24 08 54 4f 73 22 28 0c bc 7a bb fb 20 30 81 48 ef f2 52 7a 68 69 29 85 0f b8 03 3e d0 7c b0 65 8e b5 7c 48 f8 d0 f8 e1 db 0c f3 40 47 c4 2b ec 90 c2 35 26 2f 43 e1 f9 b9 9d 8f fb 1f 15 a2 22 f4 7f 0f 5f 57 c1 cf 3d 0f df a7 bd cb cb 28 6a fd cf 17 6a dd 6b 2e 71 76 83 f0 33 39 f3 73 e1 e7 72 37 9d 7d 7d 00 e4 f0 3f 84 92 2e 46 73 3d ad 97 5f 71 2e c0 fd 2b f0 f5 5e 66 7f 08 06 00 03 05 1f 1f 8e bd be 07 d8 00 98 04 dd 40 5d fa 3a ea f4 28 a2 57 1f 7c 18 f8 60 03 f0 c1 fe 00 1f f4 47 ad b5 56 Data Ascii: sbJ%:fZUKul1.b`Eii ?\v9a$TOs"(z 0HRzhi)>\|e\|H@G+5&/C"_W=(jjk.qv39sr7}}?.Fs=_q.+^f@]:(W\|`GV
2024-08-03 22:55:31 UTC	538	IN	Data Raw: a9 c3 f1 fe 73 fa 1f 98 ee 9c 08 1a 7f c3 12 91 fc 93 41 e1 4f 68 12 d4 70 93 20 fc f4 af dd 7d 60 12 44 92 30 09 94 21 01 80 25 17 91 16 e1 34 64 e5 c9 2b 58 79 32 3a 70 fe 02 3f fb 8b b6 80 f6 45 25 7a 30 41 f6 34 c4 b6 66 1d 4b cb 0a a1 c4 7c d1 f6 7e 5d 89 dd b3 2a 3c c6 f0 62 ec ff a9 b0 27 7c 30 f6 5a 33 f5 98 1f 49 11 76 4b 04 ca 4e f8 e3 28 ff 47 b3 3d fd cb 2e c8 3c e5 4f 28 3b dc 19 18 15 26 fb 7f 73 33 7e 98 66 00 80 c0 04 71 3f 29 30 5d a4 1b 66 e7 03 0c 6a 12 3c f0 4b 57 ff f6 c5 49 9b 04 16 46 d0 a2 b0 02 56 7f 10 d0 0d a7 a1 f0 ea 6e 02 c1 bf 0b de 3b 22 66 b3 f0 a6 25 32 ef 1b 40 61 6f b5 b3 20 69 b9 26 f8 20 f4 9b 17 95 17 75 d6 b9 79 08 8f 01 b8 d2 6c a3 d6 fb 05 78 ef e7 b0 ce 7f 42 45 20 9d 7a c8 0e 59 08 cf 08 3d 73 65 31 c8 5e b2 a5 Data Ascii: sAOhp }`D0!%4d+Xy2:p?E%z0A4fK\|~]*<b'\|0Z3IvKN(G=.<O(;&s3~fq?)0]fj<KWIFVn;"f%2@ao i& uylxBE zY=se1^
2024-08-03 22:55:31 UTC	4744	IN	Data Raw: 25 96 f2 63 35 2b 0a ff c7 73 3d 03 2b 2e 74 0e dc 33 3a 94 df b6 38 48 00 10 07 81 2a e7 e9 02 00 92 33 03 7c 66 f2 4f 69 5c a6 d1 e8 83 80 f1 1a d1 f6 c1 2b 5c fd 3b 16 6b a1 7d c3 37 09 6c 9d 86 22 ac 83 c0 c0 f2 b8 31 0c d4 cb 5a 99 e9 6d b0 71 ea 61 d3 58 5c a9 b2 a7 a1 25 a7 a0 00 06 19 8d dd 73 00 d0 65 ec be 04 b5 be b2 1e ff 0c 6b 70 05 ac df db 9d 4b bc 6a 9f 09 23 61 a7 c5 e2 d8 4b 6e 7f d8 52 fe 3a 3d fa e2 ad ee 7e 6c cc 59 ad 50 7e 5f d5 28 0a bf 5a 21 88 49 41 17 b2 a4 a0 7a 09 00 98 14 54 77 9e 7b b0 d0 9f ea fd 77 cc 15 76 44 d8 37 ba c2 3f a8 49 b0 f4 7c 67 f0 83 d9 9e 81 11 98 04 e6 42 07 d4 d2 64 e6 40 64 1a 83 79 88 79 a6 21 fe dc 33 30 ce 01 9b f2 ef 94 50 e2 04 d9 f9 a5 25 50 5a 14 bc 69 42 a1 3c 39 6d 42 ef 65 25 b8 3f 7c 76 40 38 Data Ascii: %c5+s=+.t3:8H*3\|fOi\+\;k}7l"1ZmqaX\%sekpKj#aKnR:=~lYP~_(Z!IAzTw{wvD7?I\|gBd@dyy!30P%PZiB<9mBe%?\|v@8
2024-08-03 22:55:31 UTC	5930	IN	Data Raw: 81 45 fc 70 32 7c fd b8 4c 2e 30 ee 85 c9 4e 9b b3 0f bf 7e e3 c6 a3 98 70 c4 0a 8d 10 7e 6e 02 a0 6d 3d f7 f0 68 ff 2a 0f c9 45 00 40 1f c0 fe 9a 63 0d 06 20 47 2c 08 a0 69 b3 15 4c 9c b5 17 4d 2e 38 07 33 94 04 c4 2b 01 9d 3b 40 f0 2f 54 65 7b 71 a5 6b f0 1a 00 64 00 81 ff 99 8c 6c e0 df e1 0f 56 a3 c6 5f ca db 0a d1 42 08 30 33 ce be 8f 41 23 0a 67 5f 22 e1 17 82 c4 9d 6b bd 2b dc b9 09 00 78 f2 ef e2 a3 15 1f 40 2c 08 f0 cf 26 23 04 68 ea fc be e0 1c cc 98 29 80 b9 00 4b 59 21 9f f3 35 18 a7 a0 2f 60 09 b0 fc 1a 60 00 75 55 53 ed 4d 00 ae f5 a7 7e 09 16 e0 bd a6 4b 74 fc e5 08 cf 00 2c 1c 17 9e 19 67 df e1 31 ce be 49 71 82 2f 19 00 7e 0f ee d1 9e 65 ce 60 b0 29 37 01 a0 f3 9e a3 6c 01 20 d6 24 68 b6 38 07 8f 61 26 50 4d c1 39 98 36 06 20 cd 01 6c e8 Data Ascii: Ep2\|L.0N~p~nm=h*E@c G,iLM.83+;@/Te{qkdlV_B03A#g_"k+x@,&#h)KY!5/``uUSM~Kt,g1Iq/~e`)7l $h8a&PM96 l
2024-08-03 22:55:31 UTC	7116	IN	Data Raw: 00 a9 1d b2 00 be d8 08 04 00 02 b3 5c 79 01 02 86 86 bd 83 d9 ff 04 35 2f 02 1a cf 01 d0 b2 c6 00 fa 15 06 d0 b5 b4 94 00 00 d0 3d f7 78 55 cd 4f 72 5f f8 d1 17 03 c2 bf c8 14 7e dc 17 8c 51 e5 b4 f6 b7 30 81 30 7d 90 39 df 1f 43 79 ec 6b d4 8b 19 3b 5f a3 67 2a ec e7 66 09 07 32 fb 0f 5e df 8f 76 08 cf fd d7 48 ae 4e 54 2c 0b 40 ad c9 40 c0 c7 41 a0 2d 8f 40 00 85 0b 9f 13 3d ef a8 79 d1 af 81 da 3f 9b 00 30 b0 9a ff 2f 8c 3e 20 00 00 10 d1 d6 9a 32 22 d9 49 ae 02 80 2a fc a8 f9 f7 c6 08 3f 6a ff be 5c d7 fe 4a 38 10 4d 6e ec ad 01 af bb 60 1c 26 0a 84 8a c9 0a 2d 53 e1 bf 52 f6 0f 04 dd f8 67 f8 a7 ed 11 7e 98 66 34 17 62 ff c9 b2 80 de 95 3a 5b 6c 95 09 20 18 e4 09 08 30 21 db bb 88 69 5e d2 11 28 cf 3a 00 48 7f 03 00 00 39 d8 50 0a c2 5f 01 cf 52 4e Data Ascii: \y5/=xUOr_~Q00}9Cyk;_gf2^vHNT,@@A-@=y?0/> 2"I?j\J8Mn`&-SRg~f4b:[l 0!i^(:H9P_RN
2024-08-03 22:55:31 UTC	7965	IN	Data Raw: 64 1a 68 f7 50 21 c0 74 02 81 e2 28 54 6d 6e 26 7c e1 35 fc 34 e1 cf e1 e7 66 9e 57 1a ba f0 27 65 bd 97 9e 59 d6 7f c9 4f cb 82 30 42 17 ff b4 2c 02 23 0a 83 28 83 a6 38 c8 45 3f 29 a3 bf fc 59 29 79 ea 76 2f 89 ac d5 f0 34 63 76 7e 61 5f 82 2c 3e 78 ee 1e a0 fb e8 dd 8f da db f9 23 9b 3f 69 8f 63 68 6e c7 3c 77 3f 86 ea 38 d8 a7 b4 c6 31 31 7f 47 be c4 fc 87 94 09 90 ef 28 77 fe 69 3b 40 f0 ff 56 00 00 ca bd 0c 03 72 00 80 fb 7f e3 0f 8a 2a 37 92 67 8e 0e 5b 87 60 4b 7a 72 03 88 a2 15 fa 93 0d 01 a6 09 08 98 86 3c 50 af f1 a6 97 6b bc 8c 8a a3 e0 b7 2d d5 69 ed e5 a5 f4 d4 93 cb c8 14 4f 39 75 eb e5 d4 95 e1 e1 d0 ca a9 13 c6 15 3f 2b a3 6f cf 63 47 9a 13 72 2f 37 43 82 82 01 00 53 10 45 3b 7a 38 c6 bb 4f 07 cb 1e 4d 75 bd d1 21 8b 54 7d 84 b9 00 06 f5 Data Ascii: dhP!t(Tmn&\|54fW'eYO0B,#(8E?)Y)yv/4cv~a_,>x#?ichn<w?811G(wi;@Vr*7g[`Kzr<Pk-iO9u?+ocGr/7CSE;z8OMu!T}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.5	49738	185.199.110.153	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:32 UTC	382	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:32 UTC	699	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sat, 03 Aug 2024 23:05:32 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: E980:325978:D0133D:FF94BA:66AEB564 Accept-Ranges: bytes Age: 0 Date: Sat, 03 Aug 2024 22:55:32 GMT Via: 1.1 varnish X-Served-By: cache-nyc-kteb1890098-NYC X-Cache: MISS X-Cache-Hits: 0 X-Timer: S1722725733.531632,VS0,VE14 Vary: Accept-Encoding X-Fastly-Request-ID: c868c2227905e97dc67347b21b905a234368515d
2024-08-03 22:55:32 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.5	49736	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:32 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-03 22:55:32 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (chd/0712) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-eus2-z1 Cache-Control: public, max-age=29281 Date: Sat, 03 Aug 2024 22:55:32 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.5	49739	18.192.231.252	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:32 UTC	359	OUT	GET /confirm.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:32 UTC	421	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 60692 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 2854 Content-Type: image/png Date: Sat, 03 Aug 2024 22:55:32 GMT Etag: "6b1039c3d208905de3b6232797a91d5d-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J4D794GAZK3GKFK9XM8Q6QA4 Connection: close
2024-08-03 22:55:32 UTC	765	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 b8 00 00 00 57 08 06 00 00 00 76 af 50 50 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 0a bb 49 44 41 54 78 5e ed dd cb 8f 1c 47 01 c7 71 a4 88 3f 00 89 bf 04 fe 11 90 7d ca 09 0b fe 06 90 2d c5 9c f6 e4 0b 07 cb 97 95 2c 90 2c 07 c1 d1 07 ef 61 b9 fa 21 2d 0a da 51 50 36 04 8b c5 d8 e3 1d af 93 f5 03 27 2b 9b 14 fd ab ee ea a9 aa e9 ee 9d 7e cc ba a7 e6 fb 91 5a 99 e9 47 f5 6b 53 3f 57 77 75 cf 0f 0c 00 00 09 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 e0 00 00 49 22 Data Ascii: PNGIHDRWvPPsRGBgAMAapHYsodIDATx^Gq?}-,,a!-QP6'+~ZGkS?Wwu"I"I"I"I"I"I"I"I"I"I"I"I"
2024-08-03 22:55:32 UTC	2089	IN	Data Raw: 9d 5a 37 80 f5 e0 5a 6f ea d6 7f 5e b4 2e 5a 71 39 02 ae 25 bd 52 4b 41 a3 a1 cd 73 6e 7d 69 5d 6e bd bc d6 0b 18 3f bd 52 4b 41 a3 e1 3c 5a 6f 8e d6 e5 d6 bb e9 af f5 22 e0 5a d2 7b 23 15 32 7a fb 48 5b d3 dd fc 32 e3 47 d7 0e 4c 97 7f 5b b9 37 9e 68 1b 00 8c 9b eb 39 d9 a5 25 75 b4 73 c5 5c f8 f8 52 3e 5c bd 63 da de bd 73 2d c7 4d ef 51 49 c0 b5 a4 97 23 2b 64 f4 8a ad 76 8e cd fd c9 b1 31 93 49 e7 80 d3 3a b5 6e 6d 03 80 71 d3 cb 91 15 32 ad 7b 4e ee 5f cf 82 ed ba d9 2f be da b0 bb b9 57 7c 5b 8e eb 51 a9 6d d8 64 04 5c 4b fa 05 00 85 8c de 23 d9 49 8f 80 d3 3a b5 6e 6d 03 80 71 d3 2f 00 28 64 f4 1e c9 36 f6 6f 5e 32 97 77 9e 16 df 32 b3 3b e6 72 cb 56 9c d6 a9 75 6b 1b 36 19 01 d7 92 7e e6 46 21 d3 f9 fe 5b 8f 80 73 f7 e1 b4 0d af de bc 65 60 60 18 Data Ascii: Z7Zo^.Zq9%RKAsn}i]n?RKA<Zo"Z{#2zH[2GL[7h9%us\R>\cs-MQI#+dv1I:nmq2{N_/W\|[Qmd\K#I:nmq/(d6o^2w2;rVuk6~F![se``

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.5	49740	18.192.231.252	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:32 UTC	356	OUT	GET /full.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:32 UTC	419	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 7924 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 581 Content-Type: image/png Date: Sat, 03 Aug 2024 22:55:32 GMT Etag: "f0db34d15043b5be979c5f9adaef3416-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J4D794GXEVTCM6EQ7BY9SMZ2 Connection: close
2024-08-03 22:55:32 UTC	581	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1c 08 06 00 00 00 76 f8 0f a9 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 01 da 49 44 41 54 48 4b ed 95 4b 28 44 61 18 86 95 8d b2 62 41 59 d9 c9 ce ca ca 46 51 62 61 ad 64 61 61 c3 c2 42 6a 52 13 c9 42 2e 49 14 93 5b 24 42 94 24 56 48 4d 63 6e ee cc 30 93 99 a1 71 99 0c 69 c6 65 36 1f 1f fd 75 9a f3 9e cb 48 24 16 cf e6 fc df 79 9e fa cf 7f ce 49 0a 3e c4 e8 27 f8 0f 7f 1b bf 23 bc 1d 8c d2 98 3d 44 9d 1b 97 64 58 0e 50 9f f9 9a d6 3c 0f 70 56 0b 5d 61 0e 36 2c 05 28 ab d5 49 c9 8d 5b 32 32 9a 1d 54 36 e2 22 b3 3f 02 ef 47 68 86 97 8e ee 28 a7 7d 07 06 11 23 d6 10 f4 c4 a3 1a Data Ascii: PNGIHDRvsRGBgAMAapHYsodIDATHKK(DabAYFQbadaaBjRB.I[$B$VHMcn0qie6uH$yI>'#=DdXP<pV]a6,(I[22T6"?Gh(}#

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
20	192.168.2.5	49737	18.192.231.252	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:32 UTC	361	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:32 UTC	420	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 54011 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 880 Content-Type: image/png Date: Sat, 03 Aug 2024 22:55:32 GMT Etag: "7464f0b2aabb51ca1fd422d5ae920a6d-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J4D794H101HE1N6WNPBENBF9 Connection: close
2024-08-03 22:55:32 UTC	766	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 1e 00 00 00 1e 08 06 00 00 00 3b 30 ae a2 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 0e c3 00 00 0e c3 01 c7 6f a8 64 00 00 03 05 49 44 41 54 48 4b ed 96 db 4b 54 51 14 c6 fb 63 82 48 0a bb 78 cb 6e 76 31 0b a3 b0 cc 4b 62 45 0f 61 da 24 3d 85 e5 a5 28 89 b0 49 cb 20 b4 31 c3 8a 24 53 d3 20 0d ba e8 68 6a 51 e3 c8 0c 8e 97 c4 1e 06 9a 51 99 d7 19 71 60 75 be 35 7b 1f cf 38 67 4c 03 a7 87 fc c1 c1 d9 df 59 67 7d fb ec b3 f6 da ae a1 7f c4 aa 71 c4 f8 cf 8d cd 3d bd f4 fe c3 47 31 5a 59 82 8c 73 72 4f d3 da 75 51 64 ac ac 12 ca ca 11 64 dc d7 d7 4f 49 fb 92 d9 fc d4 99 b3 42 d5 e7 c7 c4 04 8d 8d 8f 93 cf e7 13 ca f2 08 f9 c6 d3 Data Ascii: PNGIHDR;0sRGBgAMAapHYsodIDATHKKTQcHxnv1KbEa$=(I 1$S hjQQq`u5{8gLYg}q=G1ZYsrOuQddOIB
2024-08-03 22:55:32 UTC	114	IN	Data Raw: 58 82 03 00 66 38 10 64 62 5c 38 30 70 70 e0 00 c1 41 02 ba ba cd 74 e0 60 2a df c7 c4 3c 1e 0f eb 5a 96 6c ac 05 47 21 8e 44 1c 8d e1 40 25 c3 14 e6 7b f6 a7 50 5f ff 80 b8 13 e0 af 8c 97 83 f1 6e 15 9b e3 9f 0c 2d 2b 6e 0c 5e b7 b5 d3 bd ea 07 62 14 20 22 c6 7a ac 1a 47 08 a2 df 4a fd b3 b8 c2 74 cb 0c 00 00 00 00 49 45 4e 44 ae 42 60 82 Data Ascii: Xf8db\80ppAt`*<ZlG!D@%{P_n-+n^b "zGJtIENDB`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
21	192.168.2.5	49741	18.192.231.252	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:32 UTC	356	OUT	GET /tada.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-03 22:55:32 UTC	420	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Age: 5076 Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Content-Length: 6472 Content-Type: image/png Date: Sat, 03 Aug 2024 22:55:32 GMT Etag: "f4e7fa70f231495f66f18ec5cf5dac24-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J4D794H28D02FGA3W9YNC1YD Connection: close
2024-08-03 22:55:32 UTC	766	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 33 00 00 00 33 08 06 00 00 00 3a a1 30 2a 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 18 dd 49 44 41 54 78 01 cd 5a 09 74 5b e5 95 be 6f 7f 7a 4f fb 2e 5b de 62 3b de b2 c7 59 49 88 29 24 69 3a a4 ac 01 0a 94 29 2d 2d ed 9c 96 29 73 e8 32 4b 8b 3b d3 2d 53 86 b6 74 80 12 4a a1 50 ca 12 4a 1a a0 93 90 06 e2 10 12 87 d8 89 9d cd b1 1d 3b 56 2c db b2 2d 5b fb f2 a4 b7 cd 95 12 32 09 0d 90 cc f4 f4 cc cd 79 47 b1 de d3 ff ff df ff df fb dd ef 5e 89 80 f3 ad b5 95 b4 bf b7 d8 18 99 0c 2a 70 f0 de 0c 5c 82 3d 01 0b 99 d2 19 ce 35 65 9c c9 34 35 1d dd 75 f5 e4 5b 13 f0 57 b2 1f 38 17 fa 8c 82 b9 Data Ascii: PNGIHDR33:0pHYssRGBgAMAaIDATxZt[ozO.[b;YI)$i:)--)s2K;-StJPJ;V,-[2yG^p\=5e45u[W8
2024-08-03 22:55:32 UTC	2372	IN	Data Raw: 80 65 e3 bf 51 7a be 37 33 3e f9 43 b8 0c 0b 65 93 3f 3f 99 1a 2f 4f 67 c7 8e 6e 3b d0 fe 1f 17 7b 86 8b 25 92 e4 d0 29 9d a0 59 d2 c1 b0 2c 1d 0f ed 3f 62 b5 d6 1f e4 3d 35 eb 08 93 f9 39 45 c9 86 79 d5 39 4d 00 19 9c 31 67 e4 ed 49 ee f1 3f 26 f7 7d 25 dc be b5 ba 3a a7 aa 35 e1 70 bc fd 96 7b a3 71 9f 2f c9 8a 16 67 95 12 8f 11 ac 2c 8b 34 c7 7b 2a 28 97 7a 2c 3b f5 f3 d9 92 fb 0a 87 d5 5d 7b 15 15 e0 5e de f2 e3 cf 59 ca e7 a6 7b 5e ff c2 18 5c 86 fd b1 e7 cd 93 21 2d f7 65 2f 0f b1 b9 31 ab b4 d5 d4 5c c7 e7 74 82 ca 53 e1 77 41 88 97 39 43 86 1a 8d 6f d1 27 a2 42 9e e5 92 c7 c3 c1 69 7a aa eb df 43 94 a5 ee 5f 28 42 4d b0 e6 b2 9b 49 5a f4 c8 aa 0a 52 2e a5 53 9a b0 c4 53 d6 3c be f5 b1 ea 63 cb e6 99 1f 16 cd c4 bc 9d 7f 54 37 02 44 1f bd 37 74 30 Data Ascii: eQz73>Ce??/Ogn;{%)Y,?b=59Ey9M1gI?&}%:5p{q/g,4{*(z,;]{^Y{^\!-e/1\tSwA9Co'BizC_(BMIZR.SS<cT7D7t0
2024-08-03 22:55:32 UTC	538	IN	Data Raw: 34 c1 98 d0 75 0d 8c 2e b3 58 d9 51 ba 32 a1 e6 e4 b4 9a cf c6 b2 59 69 54 ca 24 47 72 b9 54 84 20 e8 28 ce 95 56 88 5c 22 11 4b ed fb 48 30 57 d4 81 b1 be dc b6 c6 53 25 99 33 b9 a3 10 1f 5d 82 0e 83 54 3c 64 87 d3 86 2b a0 7e 71 02 0c 54 ff 99 d8 41 14 64 11 10 96 75 45 9f 23 90 b6 01 cc 22 9e 4a 3e 07 d1 48 12 d0 dd 81 37 60 a1 82 2e 77 7a aa 16 b6 f6 5d 0f 9d e3 4b 61 22 63 23 18 82 70 32 48 24 94 24 c9 1c ab 05 99 9c 3c 92 4c 4f 0f c6 26 87 3a e2 f1 48 57 4e 93 c2 91 5c 3c ea cf 46 a2 6d 6d ad ca c5 d6 7b 01 98 cf 7a e6 88 b7 97 cd 5c 94 4f a6 42 d7 f5 6d ef ab 2a 15 6a cb fd e6 79 04 47 53 0e 5f 27 44 02 4e 88 8d 54 16 c5 e5 e4 09 3f 08 fc d5 50 b7 24 83 bb 7f ba 98 24 09 04 54 08 0b 12 51 91 c5 d3 22 20 87 c2 40 34 08 c8 6a 79 48 27 63 70 62 6c 2e Data Ascii: 4u.XQ2YiT$GrT (V\"KH0WS%3]T<d+~qTAduE#"J>H7`.wz]Ka"c#p2H$$<LO&:HWN\<Fmm{z\OBm*jyGS_'DNT?P$$TQ" @4jyH'cpbl.
2024-08-03 22:55:32 UTC	2796	IN	Data Raw: 8c cf c8 ce 76 f0 9a 6c cc a6 db 7b c2 a0 5e 36 98 eb ca 0d ba 5d 37 09 64 2e 5f 36 10 0f 87 d8 fa d3 cf d4 cd 71 dc 23 d9 8d 8e 82 64 21 30 49 16 b2 bd cd 31 82 65 8f 11 e4 29 0f c8 04 87 1b 4f 40 32 e4 06 55 f5 82 bd 2a 8d 6c 33 85 83 12 45 30 34 52 0e 83 14 c4 20 18 9a 2f 34 80 70 3a 4c f0 ee 99 1c 2c 2c 3b 0a 55 ca 3b c0 b3 b8 29 79 01 40 a6 8a a7 a8 67 14 48 63 49 51 ea 64 1b 05 2b 3b b9 65 5f f2 18 fc 59 fe f9 18 30 6f 84 42 1a e3 a4 7b bd 59 ba 63 20 1e db 6e 5e a9 cd f1 d4 da 3f 93 62 18 52 cd cb 40 a1 5f a3 16 06 8e d2 c0 e7 1d 04 49 15 21 36 8d f1 53 70 2b fc 97 9a 74 81 94 29 07 6f 1d 92 02 33 5d a4 4c 86 a3 b1 d8 a4 b1 04 41 20 48 d1 78 03 a0 f8 6a 00 de ed 05 8d 2b 85 e9 b1 34 c8 a9 24 70 22 8e 83 73 e4 d3 08 06 a5 3a 49 e8 82 95 21 7c 0d 4e Data Ascii: vl{^6]7d._6q#d!0I1e)O@2U*l3E04R /4p:L,,;U;)y@gHcIQd+;e_Y0oB{Yc n^?bR@_I!6Sp+t)o3]LA Hxj+4$p"s:I!\|N

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
22	192.168.2.5	49742	35.156.224.161	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:33 UTC	674	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "e750678c869a938dddf312693503c986-ssl"
2024-08-03 22:55:33 UTC	350	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Sat, 03 Aug 2024 22:55:33 GMT Etag: "e750678c869a938dddf312693503c986-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J4D794WNZ6XKY41BAMKGHJSF Connection: close

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
23	192.168.2.5	49743	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:33 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-03 22:55:33 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=29210 Date: Sat, 03 Aug 2024 22:55:33 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-03 22:55:33 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
24	192.168.2.5	49748	18.192.231.252	443	1732	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-03 22:55:34 UTC	411	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 If-None-Match: "e750678c869a938dddf312693503c986-ssl"
2024-08-03 22:55:34 UTC	350	IN	HTTP/1.1 304 Not Modified Cache-Control: public,max-age=0,must-revalidate Cache-Status: "Netlify Edge"; hit Date: Sat, 03 Aug 2024 22:55:34 GMT Etag: "e750678c869a938dddf312693503c986-ssl" Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J4D7968E97J5PPP2VF7VB8JS Connection: close

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 1048, Parent PID: 5332

General

Target ID:	0
Start time:	18:55:22
Start date:	03/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 1732, Parent PID: 1048

General

Target ID:	1
Start time:	18:55:24
Start date:	03/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2076 --field-trial-handle=1992,i,9219879380406942620,8488647546866891641,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 3792, Parent PID: 5332

General

Target ID:	3
Start time:	18:55:27
Start date:	03/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html"
Imagebase:	0x7ff715980000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may achieve persistence by adding a program to a startup folder or referencing it with a Registry run key. Adding an entry to the "run keys" in the Registry or startup folder will cause the program referenced to be executed when a user logs in.These programs will be executed under the context of the user and will have the account's associated permissions level.
Tactics:	Persistence, Privilege Escalation
Data Sources:	Command: Command Execution, File: File Modification, Process: Process Creation, Windows Registry: Windows Registry Key Creation, Windows Registry: Windows Registry Key Modification
Platforms:	Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may attempt to manipulate features of their artifacts to make them appear legitimate or benign to users and/or security tools. Masquerading occurs when the name or location of an object, legitimate or malicious, is manipulated or abused for the sake of evading defenses and observation. This may include manipulating file metadata, tricking users into misidentifying the file type, and giving legitimate task or service names.
Tactics:	Defense Evasion
Data Sources:	Command: Command Execution, File: File Metadata, File: File Modification, Image: Image Metadata, Process: OS API Execution, Process: Process Creation, Process: Process Metadata, Scheduled Job: Scheduled Job Metadata, Scheduled Job: Scheduled Job Modification, Service: Service Creation, Service: Service Metadata
Platforms:	Containers, Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Snort Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Windows Analysis Report
https://pub-d9e0fa9d4d5c442291d5788540921b89.r2.dev/index.html