Edit tour

Windows Analysis Report
https://mj.ostep.net/acknowledgements

Overview

General Information

Sample URL:	https://mj.ostep.net/acknowledgements
Analysis ID:	1517384
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Found iframes

HTML page contains hidden javascript code

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 1824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 4916 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2196,i,2542499644870121758,13649467693579498224,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 5504 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5996 --field-trial-handle=2196,i,2542499644870121758,13649467693579498224,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 6568 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5448 --field-trial-handle=2196,i,2542499644870121758,13649467693579498224,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

chrome.exe (PID: 340 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mj.ostep.net/acknowledgements" MD5: 5BBFA6CBDF4C254EB368D534F9E23C92)

cleanup

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/g/jsd/r/8c8699a1dd990fff HTTP/1.1Host: mj.ostep.netConnection: keep-aliveContent-Length: 15779sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: */*Origin: https://mj.ostep.netSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: __dcfduid=e6c6d7507acd11efbdb81fb86a55f4b0; __sdcfduid=e6c6d7517acd11efbdb81fb86a55f4b0c0145390fe123d93b256cce9770e837ae48d2aed4c2e99f987605e3678587816; locale=en-US

Source: https://mj.ostep.net/assets/7f63813838e283aea62f1a68ef1732c2.woff2	Avira URL Cloud: Label: phishing
Source: https://mj.ostep.net/assets/3d07f5abf272fbb5670d02ed687453d0.woff2	Avira URL Cloud: Label: phishing
Source: https://mj.ostep.net/assets/46b2132c01604c9493d558de444929f4.svg	Avira URL Cloud: Label: phishing
Source: https://mj.ostep.net/assets/478df9b67132a6268aaf.js	Avira URL Cloud: Label: phishing
Source: https://mj.ostep.net/assets/847541504914fd33810e70a0ea73177e.ico	Avira URL Cloud: Label: phishing
Source: https://mj.ostep.net/assets/9658d3734ade853a9e31.js	Avira URL Cloud: Label: phishing
Source: https://mj.ostep.net/assets/f531ea5a3a719ed1bb1d.js	Avira URL Cloud: Label: phishing
Source: https://mj.ostep.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js?	Avira URL Cloud: Label: phishing
Source: https://mj.ostep.net/assets/ff96c6cc388e99cdcdd33e996ba9f893.webm	Avira URL Cloud: Label: phishing
Source: https://mj.ostep.net/assets/c497145401e53878e6a4.js	Avira URL Cloud: Label: phishing

Source: https://mj.ostep.net/safety	HTTP Parser: Iframe src: //cdn.embedly.com/widgets/media.html?src=https%3A%2F%2Fwww.youtube.com%2Fembed%2FG1teGChUJQM%3Ffeature%3Doembed%26autoplay%3D1&display_name=YouTube&url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DG1teGChUJQM&image=https%3A%2F%2Fi.ytimg.com%2Fvi%2FG1teGChUJQM%2Fhqdefault.jpg&key=96f1f04c5f4143bcb0f2e68c87d65feb&autoplay=1&type=text%2Fhtml&schema=youtube
Source: https://mj.ostep.net/safety	HTTP Parser: Iframe src: https://www.youtube.com/embed/LvtpbOarcWE?si=O8nndJAAsReS1PZn
Source: https://mj.ostep.net/safety	HTTP Parser: Iframe src: //cdn.embedly.com/widgets/media.html?src=https%3A%2F%2Fwww.youtube.com%2Fembed%2FG1teGChUJQM%3Ffeature%3Doembed%26autoplay%3D1&display_name=YouTube&url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DG1teGChUJQM&image=https%3A%2F%2Fi.ytimg.com%2Fvi%2FG1teGChUJQM%2Fhqdefault.jpg&key=96f1f04c5f4143bcb0f2e68c87d65feb&autoplay=1&type=text%2Fhtml&schema=youtube
Source: https://mj.ostep.net/safety	HTTP Parser: Iframe src: https://www.youtube.com/embed/LvtpbOarcWE?si=O8nndJAAsReS1PZn

Source: https://mj.ostep.net/safety	HTTP Parser: No favicon
Source: https://support.discord.com/hc/en-us	HTTP Parser: No favicon
Source: https://support.discord.com/hc/en-us	HTTP Parser: No favicon
Source: https://support.discord.com/hc/en-us	HTTP Parser: No favicon

Source: https://mj.ostep.net/safety	HTTP Parser: No <meta name="author".. found
Source: https://mj.ostep.net/safety	HTTP Parser: No <meta name="author".. found

Source: https://mj.ostep.net/safety	HTTP Parser: No <meta name="copyright".. found
Source: https://mj.ostep.net/safety	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.6:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:49823 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:50007 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:50157 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 20.7.1.246:443 -> 192.168.2.6:50279 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.64
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246
Source: unknown	TCP traffic detected without corresponding DNS query: 20.7.1.246

Source: global traffic	DNS traffic detected: DNS query: mj.ostep.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: geolocation.onetrust.com
Source: global traffic	DNS traffic detected: DNS query: discord.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdn.prod.website-files.com
Source: global traffic	DNS traffic detected: DNS query: cdn.localizeapi.com
Source: global traffic	DNS traffic detected: DNS query: d3e54v103j8qbb.cloudfront.net
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: cdn.discordapp.com
Source: global traffic	DNS traffic detected: DNS query: support.discord.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: global.localizecdn.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 24 Sep 2024 23:37:25 GMTContent-Type: application/xmlTransfer-Encoding: chunkedConnection: closex-amz-request-id: 0JH90820DS8NBKHGx-amz-id-2: aws4QN7bWBGllDtQVoWKN7RFv6avO5gEajJCxOmhaCLorhiH0gRtDSizHodPQQUNwSu0VQ9uZbthAW8Ya7u9VGIridIfS+2HZqSroYbiLTc=CF-Cache-Status: BYPASSAccess-Control-Allow-Origin: *Server: cloudflareCF-RAY: 8c869a309fe34370-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 24 Sep 2024 23:37:26 GMTContent-Type: text/htmlContent-Length: 6037Connection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Tue, 24 Sep 2024 23:37:41 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=U347xeKCW1Nyop9lUq1OHiCQvNGRikPgWGpeybynmotZ94Ec5oajwBI%2FqoPngy5sTvFz%2FCXIODRUbk0%2BIiN8gbGxvI%2B3cSRObDoyoLKBF6DwLO24QIuQ%2Bc8y%2F4pV"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 8c869a324da40f9c-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 24 Sep 2024 23:37:46 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 24 Sep 2024 23:37:47 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 24 Sep 2024 23:37:49 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 24 Sep 2024 23:37:49 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: Ie1/URzh+GWQJ3tVBIIDCZe3HUp+U8OTxw8=$Tdx+lBN5zgMIKqYfReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=nf6k9ZNEh4I77uvPEwCdeLshYDvcpueGX51O6w5oN52QZYIbCLMgdeUbXquMLwLfRCjh5B%2BUpyvU%2B9G7NddwferyXZ3v8vceF9FXYyRxMyaVpKiyg8yEpt4n331OvrYCONYe340%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 8c869ac628eb32d3-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 24 Sep 2024 23:37:52 GMTContent-Type: text/html; charset=UTF-8Transfer-Encoding: chunkedConnection: closeAccept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACritical-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UACross-Origin-Embedder-Policy: require-corpCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originOrigin-Agent-Cluster: ?1Permissions-Policy: accelerometer=(),autoplay=(),browsing-topics=(),camera=(),clipboard-read=(),clipboard-write=(),geolocation=(),gyroscope=(),hid=(),interest-cohort=(),magnetometer=(),microphone=(),payment=(),publickey-credentials-get=(),screen-wake-lock=(),serial=(),sync-xhr=(),usb=()Referrer-Policy: same-originX-Content-Options: nosniffX-Frame-Options: SAMEORIGINcf-mitigated: challenge
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 24 Sep 2024 23:37:56 GMTContent-Type: application/jsonContent-Length: 7Connection: closecf-chl-out: C+7Y9OoZywAWEzrQtsv42gNhip2Fo04Mwio=$j8Ffcq0/mQ50N5ZZcache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0Server: cloudflareCF-RAY: 8c869aee8e2b7286-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 24 Sep 2024 23:37:59 GMTContent-Type: application/xmlTransfer-Encoding: chunkedConnection: closex-amz-request-id: T41C02RY7VEBZP18x-amz-id-2: XYFN5FP6FPlQHBvy5tALT/v1U6OxzQHHtycrAsBD623aHGB5Qd6f5xXrhd8Nz9Lp+U6uVKEVB9A=CF-Cache-Status: BYPASSAccess-Control-Allow-Origin: *Server: cloudflareCF-RAY: 8c869b02df25c420-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 24 Sep 2024 23:37:59 GMTContent-Type: text/htmlContent-Length: 6037Connection: closeX-Frame-Options: SAMEORIGINReferrer-Policy: same-originCache-Control: max-age=15Expires: Tue, 24 Sep 2024 23:38:14 GMTReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JBPINJGCU55wbGLYfm0nETv1YM8FSzUtRfJnAEH9qzul9ImLslAKE69hhO3uRfmNQCZiquuqLmX7CRYF7Caoxf%2Fakuh7QzcWmSYX6wkpz6E9aIuuStaUh5Tbb8TJ"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Strict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Content-Type-Options: nosniffServer: cloudflareCF-RAY: 8c869b045d2c0f9d-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 24 Sep 2024 23:38:01 GMTContent-Type: application/jsonContent-Length: 7Connection: closecache-control: private, max-age=0, no-store, no-cache, must-revalidate, post-check=0, pre-check=0cf-chl-out: IGKII+EUDrjq/UvzB5vonWLyemEEatMu7QY=$tisSPuzKfY3hYw1UServer: cloudflareCF-RAY: 8c869b0ebf961a13-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Tue, 24 Sep 2024 23:38:21 GMTContent-Type: application/xmlTransfer-Encoding: chunkedConnection: closex-amz-request-id: GX3QJ9T7E7E95G7Xx-amz-id-2: Jsj0CW+uuHX1+pSh60Hcy/MZ/FEwhMjuYJMdRw3b99wovAeQfL10CTgTz2iqKrMu/KaDZBNC0rQ=CF-Cache-Status: BYPASSAccess-Control-Allow-Origin: *Server: cloudflareCF-RAY: 8c869b8b7dd832d9-EWR

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2196,i,2542499644870121758,13649467693579498224,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mj.ostep.net/acknowledgements"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5996 --field-trial-handle=2196,i,2542499644870121758,13649467693579498224,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5448 --field-trial-handle=2196,i,2542499644870121758,13649467693579498224,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2264 --field-trial-handle=2196,i,2542499644870121758,13649467693579498224,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5996 --field-trial-handle=2196,i,2542499644870121758,13649467693579498224,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5448 --field-trial-handle=2196,i,2542499644870121758,13649467693579498224,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: chromecache_483.2.dr	String found in binary or memory: (g.rk(c,"redirector.googlevideo.com"),d=c.toString()):c.j.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.rk(c,"www.youtube.com"),d=c.toString()):(c=hwa(d),iE(c)&&(d=c));c=new g.VL(d);c.set("cmo=pf","1");e&&c.set("cmo=td","a1.googlevideo.com");return c}; equals www.youtube.com (Youtube)
Source: chromecache_483.2.dr	String found in binary or memory: 0?"http":"https";this.Da=hE((b?b.customBaseYoutubeUrl:a.BASE_YT_URL)\|\|"")\|\|hE(this.mf)\|\|this.protocol+"://www.youtube.com/";h=b?b.eventLabel:a.el;d="detailpage";h==="adunit"?d=this.D?"embedded":"detailpage":h==="embedded"\|\|this.N?d=hs(d,h,GJa):h&&(d="embedded");this.Ja=d;Pqa();h=null;d=b?b.playerStyle:a.ps;f=g.Vb(HJa,d);!d\|\|f&&!this.N\|\|(h=d);this.playerStyle=h;this.K=g.Vb(HJa,this.playerStyle);this.houseBrandUserStatus=b==null?void 0:b.houseBrandUserStatus;this.qa=this.K&&this.playerStyle!=="play"&& equals www.youtube.com (Youtube)
Source: chromecache_524.2.dr	String found in binary or memory: ;e.BACK_TO_SCHOOL_GIVEAWAY_TWITTER="/terms/back-to-school-2020/twitter";e.SNOWSGIVING_GIVEAWAY_INSTAGRAM="/terms/snowsgiving-2020/instagram";e.SNOWSGIVING_GIVEAWAY_TWITTER="/terms/snowsgiving-2020/twitter";return e}(N\|\|{});t.AppRoutes=(0,i.wrapPaths)(C),t.WebRoutes=(0,i.wrapPaths)(N),t.SOCIAL_LINKS=Object.freeze({FACEBOOK_URL:"https://www.facebook.com/discord/",INSTAGRAM_URL:"https://www.instagram.com/discord/",YOUTUBE_URL:"https://www.youtube.com/discord/",TIKTOK_URL:"https://www.tiktok.com/@discord"}),t.WebAnalyticsEvents=function(e){e.EXPERIMENT_USER_TRIGGERED="experiment_user_triggered";e.EXPERIMENT_GUILD_TRIGGERED="experiment_guild_triggered";e.EXPERIMENT_SAVE_EXPOSURE_FAILED="experiment_save_exposure_failed";e.MKTG_PAGE_VIEWED="mktg_page_viewed";e.CLICK_LANDING_CTA="click_landing_cta";e.DOWNLOAD_APP="download_app";e.MKTG_HYPESQUAD_FORM_SUBMITTED="mktg_hypesquad_form_submitted";e.MKTG_HYPESQUAD_FORM_OPENED="mktg_hypesquad_form_opened" equals www.facebook.com (Facebook)
Source: chromecache_524.2.dr	String found in binary or memory: ;e.BACK_TO_SCHOOL_GIVEAWAY_TWITTER="/terms/back-to-school-2020/twitter";e.SNOWSGIVING_GIVEAWAY_INSTAGRAM="/terms/snowsgiving-2020/instagram";e.SNOWSGIVING_GIVEAWAY_TWITTER="/terms/snowsgiving-2020/twitter";return e}(N\|\|{});t.AppRoutes=(0,i.wrapPaths)(C),t.WebRoutes=(0,i.wrapPaths)(N),t.SOCIAL_LINKS=Object.freeze({FACEBOOK_URL:"https://www.facebook.com/discord/",INSTAGRAM_URL:"https://www.instagram.com/discord/",YOUTUBE_URL:"https://www.youtube.com/discord/",TIKTOK_URL:"https://www.tiktok.com/@discord"}),t.WebAnalyticsEvents=function(e){e.EXPERIMENT_USER_TRIGGERED="experiment_user_triggered";e.EXPERIMENT_GUILD_TRIGGERED="experiment_guild_triggered";e.EXPERIMENT_SAVE_EXPOSURE_FAILED="experiment_save_exposure_failed";e.MKTG_PAGE_VIEWED="mktg_page_viewed";e.CLICK_LANDING_CTA="click_landing_cta";e.DOWNLOAD_APP="download_app";e.MKTG_HYPESQUAD_FORM_SUBMITTED="mktg_hypesquad_form_submitted";e.MKTG_HYPESQUAD_FORM_OPENED="mktg_hypesquad_form_opened" equals www.youtube.com (Youtube)
Source: chromecache_413.2.dr	String found in binary or memory: </style></div></div></div></div><div class="section-video-safety"><div class="container-780px"><h2 class="new-h2 bottom-none _48px centered">Building Safer Spaces</h2><div style="padding-top:56.17021276595745%" class="nitro_video hidden w-video w-embed"><iframe class="embedly-embed" src="//cdn.embedly.com/widgets/media.html?src=https%3A%2F%2Fwww.youtube.com%2Fembed%2FG1teGChUJQM%3Ffeature%3Doembed%26autoplay%3D1&display_name=YouTube&url=https%3A%2F%2Fwww.youtube.com%2Fwatch%3Fv%3DG1teGChUJQM&image=https%3A%2F%2Fi.ytimg.com%2Fvi%2FG1teGChUJQM%2Fhqdefault.jpg&key=96f1f04c5f4143bcb0f2e68c87d65feb&autoplay=1&type=text%2Fhtml&schema=youtube" scrolling="no" allowfullscreen title="Announcing 4 new Nitro Perks"></iframe></div><div class="video-youtube"><div class="snowsgiving-video safety w-embed w-iframe"><center><iframe width="100%" height="410" src="https://www.youtube.com/embed/LvtpbOarcWE?si=O8nndJAAsReS1PZn" title="YouTube video player" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe></div></div><div class="star-safety"><img src="https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/652cda5887d36e6c66eecccc_star-3.svg" loading="lazy" data-w-id="2ae43ef0-afe2-5caf-7fbb-b67107af2300" alt="" class="star-safety_icon-1"/><img src="https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/652cda5879b85b7192ec2948_Star-2.svg" loading="lazy" style="-webkit-transform:translate3d(0, 0, 0) scale3d(0.8, 0.8, 1) rotateX(0) rotateY(0) rotateZ(0) skew(0, 0);-moz-transform:translate3d(0, 0, 0) scale3d(0.8, 0.8, 1) rotateX(0) rotateY(0) rotateZ(0) skew(0, 0);-ms-transform:translate3d(0, 0, 0) scale3d(0.8, 0.8, 1) rotateX(0) rotateY(0) rotateZ(0) skew(0, 0);transform:translate3d(0, 0, 0) scale3d(0.8, 0.8, 1) rotateX(0) rotateY(0) rotateZ(0) skew(0, 0)" data-w-id="2ae43ef0-afe2-5caf-7fbb-b67107af2301" alt="" class="star-safety_icon-2"/><img src="https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/652cda586a7788d4a2b1f456_star-1.svg" loading="lazy" style="-webkit-transform:translate3d(0, 0, 0) scale3d(0.8, 0.8, 1) rotateX(0) rotateY(0) rotateZ(0) skew(0, 0);-moz-transform:translate3d(0, 0, 0) scale3d(0.8, 0.8, 1) rotateX(0) rotateY(0) rotateZ(0) skew(0, 0);-ms-transform:translate3d(0, 0, 0) scale3d(0.8, 0.8, 1) rotateX(0) rotateY(0) rotateZ(0) skew(0, 0);transform:translate3d(0, 0, 0) scale3d(0.8, 0.8, 1) rotateX(0) rotateY(0) rotateZ(0) skew(0, 0)" data-w-id="2ae43ef0-afe2-5caf-7fbb-b67107af2302" alt="" class="star-safety_icon-3"/></div><div class="star-safety-2"><img src="https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/652cda5829f6f7d9d22065df_Star-5.svg" loading="lazy" style="-webkit-transform:translate3d(0, 0, 0) scale3d(0.8, 0.8, 1) rotateX(0) rotateY(0) rotateZ(0) skew(0, 0);-moz-transform:translate3d(0, 0, 0) scale3d(0.8, 0.8, 1) rotateX(0) rotateY(0) rotateZ(0) skew(0, 0);-ms-transform:translate3d(0, 0, 0) scale3d(0.8, 0.8, 1) rotate
Source: chromecache_483.2.dr	String found in binary or memory: Ho.prototype.Ia=function(){return this.C};var jna=(new Date).getTime();var wla="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),xla=/\bocr\b/;var zla=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var Kab=0,Lab=0,Mab=0;var Qo;g.Jo=null;g.Lo=!1;g.Ro=1;Qo=Symbol("SIGNAL");g.So={version:0,n_:0,Pm:!1,eg:void 0,Ry:void 0,An:void 0,GL:0,hj:void 0,Mu:void 0,VE:!1,kP:!1,O1:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_483.2.dr	String found in binary or memory: LIa=function(a,b){if(!a.j["0"]){var c=new UF("0","fakesb",{video:new QF(0,0,0,void 0,void 0,"auto")});a.j["0"]=b?new mN(new g.VL("http://www.youtube.com/videoplayback"),c,"fake"):new DN(new g.VL("http://www.youtube.com/videoplayback"),c,new YM(0,0),new YM(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_292.2.dr, chromecache_517.2.dr	String found in binary or memory: Math.round(q);v["gtm.videoElapsedTime"]=Math.round(f);v["gtm.videoPercent"]=r;v["gtm.videoVisible"]=t;return v},Yj:function(){e=zb()},nd:function(){d()}}};var gc=ja(["data-gtm-yt-inspected-"]),FC=["www.youtube.com","www.youtube-nocookie.com"],GC,HC=!1; equals www.youtube.com (Youtube)
Source: chromecache_483.2.dr	String found in binary or memory: a))):this.api.U().L("enable_adb_handling_in_sabr")&&c==="BROWSER_OR_EXTENSION_ERROR"&&!d.K?(d=d.hostLanguage,a="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",d&&(a=g.Ui(a,{hl:d})),this.Cd(sY(this,"BROWSER_OR_EXTENSION_ERROR",a))):this.Cd(g.qY(a.errorMessage)):this.Cd(sY(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(a=d.hostLanguage,c="//support.google.com/youtube/?p=player_error1",a&&(c=g.Ui(c, equals www.youtube.com (Youtube)
Source: chromecache_483.2.dr	String found in binary or memory: a.details.rc!=="429"?a.errorCode==="ump.spsrejectfailure"&&(e="HTML5_SPS_UMP_STATUS_REJECTED"):(e="TOO_MANY_REQUESTS",f="6");this.ea.Qf(a.errorCode,a.severity,e,CF(a.details),f)}else this.ea.publish("nonfatalerror",a),d=/^pp/.test(this.videoData.clientPlaybackNonce),this.Fd(a.errorCode,a.details),d&&a.errorCode==="manifest.net.connect"&&(a="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.Ht)(),gT(a,"manifest",function(h){b.K=!0;b.ma("pathprobe",h)},function(h){b.Fd(h.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_483.2.dr	String found in binary or memory: a.ismb);this.eq?(r=a.vss_host\|\|"s.youtube.com",r==="s.youtube.com"&&(r=qP(this.Da)\|\|"www.youtube.com")):r="video.google.com";this.Qn=r;rP(this,a,!0);this.La=new MO;g.P(this,this.La);q=b?b.innertubeApiKey:js("",a.innertube_api_key);p=b?b.innertubeApiVersion:js("",a.innertube_api_version);r=b?b.innertubeContextClientVersion:js("",a.innertube_context_client_version);q=g.Zq("INNERTUBE_API_KEY")\|\|q;p=g.Zq("INNERTUBE_API_VERSION")\|\|p;l=g.Zq("INNERTUBE_CONTEXT_CLIENT_CONFIG_INFO");m=FO(this);n=typeof this.j.c=== equals www.youtube.com (Youtube)
Source: chromecache_483.2.dr	String found in binary or memory: b=this.api.U();a=this.api.getVideoData();var c="";b.C\|\|(b=g.vP(b),b.indexOf("www.")===0&&(b=b.substring(4)),c=g.BR(a)?"Watch on YouTube Music":b==="youtube.com"?"Watch on YouTube":g.zE("Watch on $WEBSITE",{WEBSITE:b}));this.updateValue("title",c)}; equals www.youtube.com (Youtube)
Source: chromecache_292.2.dr, chromecache_517.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=lA(a,c,e);N(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return N(122),!0;if(d&&f){for(var m=Kb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},oA=function(){var a=[],b=function(c){return ob(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_236.2.dr	String found in binary or memory: features:["Sync YouTube channel memberships to a Discord role","Automatically demote or kick people after a grace period when they stop renewing their membership","Let members find your Discord server by syncing their YouTube account"],logoColor:"#333333",buttonText:"Learn More"},{name:"Twinge",icon:o.STREAMKIT_ADDON_TWINGE,description:"Allow Twinge to share analytics and Twitch community interaction within your Discord server.\n Be the second to know about Twinge reviews (because the first is the person who wrote it.\n This is a bot not a time wizard).",website:"http://www.twinge.tv/",addLink:"http://www.twinge.tv/sys/discord",features:["Notify you of new Twinge reviews as they come in","COMING SOON: Have a post-stream analysis sent to you as soon as your stream ends"],logoColor:"#303F4C",buttonText:"Add to Discord"},{name:"Mixer Integration",icon:o.STREAMKIT_ADDON_MIXER, equals www.youtube.com (Youtube)
Source: chromecache_288.2.dr, chromecache_441.2.dr	String found in binary or memory: function X(a,b){this.v={};this.playerInfo={};this.videoTitle="";this.j=this.g=null;this.h=0;this.m=!1;this.l=[];this.i=null;this.A={};this.options=null;if(!a)throw Error("YouTube player element ID required.");this.id=ra(this);b=Object.assign({title:"video player",videoId:"",width:640,height:360},b\|\|{});var c=document;if(a=typeof a==="string"?c.getElementById(a):a){W.yt_embedsEnableRsaforFromIframeApi&&vb();c=a.tagName.toLowerCase()==="iframe";b.host\|\|(b.host=c?ob(a.src):"https://www.youtube.com");this.options= equals www.youtube.com (Youtube)
Source: chromecache_288.2.dr, chromecache_441.2.dr	String found in binary or memory: function vb(){var a=new tb,b=["https://www.youtube.com"];b=b===void 0?sb:b;pa(function(c){switch(c.g){case 1:return C(c,ub(),2);case 2:if(!c.m){c.g=3;break}return C(c,Promise.all(b.map(function(d){var g;return pa(function(k){if(k.g==1)return k.l=2,C(k,navigator.permissions.query({name:"top-level-storage-access",requestedOrigin:d}),4);k.g!=2?(g=k.m,g.state==="prompt"&&a.g.push(d),k.g=0,k.l=0):(k.l=0,k.i=null,k.g=0)})})),4); equals www.youtube.com (Youtube)
Source: chromecache_483.2.dr	String found in binary or memory: g.IP=function(a){var b=g.vP(a);RJa.includes(b)&&(b="www.youtube.com");return a.protocol+"://"+b}; equals www.youtube.com (Youtube)
Source: chromecache_483.2.dr	String found in binary or memory: g.k.getVideoUrl=function(a,b,c,d,e,f,h){b={list:b};c&&(e?b.time_continue=c:b.t=c);c=h?"music.youtube.com":g.vP(this);e=c==="www.youtube.com";!f&&d&&e?f="https://youtu.be/"+a:g.mP(this)?(f="https://"+c+"/fire",b.v=a):(f&&e?(f=this.protocol+"://"+c+"/shorts/"+a,d&&(b.feature="share")):(f=this.protocol+"://"+c+"/watch",b.v=a),$t&&(a=$ma())&&(b.ebc=a));return g.Ui(f,b)}; equals www.youtube.com (Youtube)
Source: chromecache_483.2.dr	String found in binary or memory: g.vP=function(a){a=qP(a.Da);return a==="www.youtube-nocookie.com"?"www.youtube.com":a}; equals www.youtube.com (Youtube)
Source: chromecache_292.2.dr, chromecache_517.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Zg:e,Xg:f,Yg:g,Ih:k,Jh:m,Ge:n,Bb:b},q=C.YT;if(q)return q.ready&&q.ready(d),b;var r=C.onYouTubeIframeAPIReady;C.onYouTubeIframeAPIReady=function(){r&&r();d()};F(function(){for(var t=E.getElementsByTagName("script"),u=t.length,v=0;v<u;v++){var w=t[v].getAttribute("src");if(QC(w,"iframe_api")\|\|QC(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,A=0;A<y;A++)if(!HC&&OC(x[A],p.Ge))return wc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_524.2.dr	String found in binary or memory: return"#36542b";case"#647f1e":return"#415313";case"#87701f":return"#5a4b15";case"#817650":return"#5a5339";case"#984848":return"#673030";case"#506672":return"#303c43";case"#343434":return"#2c2c2c";default:return"#453bb0"}};t.useTrailerURL=function(){var e=(0,n.useStore)((function(e){var t;return null===(t=e.storePage)\|\|void 0===t?void 0:t.role_subscription.settings.store_page_trailer_url}));if(null==e)return null;return function(e){var t=(r=e,n=/(?:(?:youtu.be\/)\|(?:v\/)\|(?:\/u\/\w\/)\|(?:embed\/)\|(?:watch\?))\??v?=?([^#&?]*)/,o=r.match(n),null!=o&&o[1]);var r,n,o;if(null==t)return null;return"https://www.youtube.com/embed/"+t}(e)};var n=r(83370);function o(){var e=(0,n.useStore)((function(e){var t;return null===(t=e.storePage)\|\|void 0===t?void 0:t.role_subscription.settings.store_page_primary_color}));return null==e?"#6458F2":"#"+parseInt(e).toString(16).padStart(6,"0")}},51341:(e,t,r)=>{"use strict";Object.defineProperty(t,"__esModule",{value:!0});t.default=O equals www.youtube.com (Youtube)
Source: chromecache_275.2.dr	String found in binary or memory: t know well. For more tips on staying safe on Discord, visit our <a href="https://discord.com/safetycenter" class="link-16px">Safety</a> page.</div></nav></div><div data-delay="0" data-hover="false" data-w-id="4b68deeb-2151-31be-9de7-fe20b03fe90c" class="dropdown-qa w-dropdown"><div class="dropdown-toggle-blue w-dropdown-toggle"><div>Does Discord offer Nitro Promotions?</div><img loading="lazy" src="https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/633c1afc2642cd62d5e785bb_Vector%20(18).svg" alt="" class="drop-plus"/></div><nav class="dropdown-list-4 w-dropdown-list"><div class="p-400-16-white drop">We are always working on ways to give you more with Nitro! Keep an eye out in the app, on our <a href="https://twitter.com/discord" class="link-16px">Twitter</a> , <a href="https://www.instagram.com/discord" class="link-16px">Instagram</a>, or <a href="https://discord.com/blog" class="link-16px">blog</a> to see when new promotions go live. :)</div></nav></div><div data-delay="0" data-hover="false" data-w-id="e018e763-8ccf-4e62-917b-76a28ab1d439" class="dropdown-qa hidden w-dropdown"><div class="dropdown-toggle-blue w-dropdown-toggle"><div>Can You Buy Discord Nitro Gift Cards?</div><img loading="lazy" src="https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/633c1afc2642cd62d5e785bb_Vector%20(18).svg" alt="" class="drop-plus"/></div><nav class="dropdown-list-4 w-dropdown-list"><div class="p-400-16-white drop">Digital Nitro Gift Cards are available in our <a href="https://discordmerch.com/collections/digital-gift-codes" target="_blank" class="link-16px">Merch Store</a>. We have Gift Cards available for 1 month, 3 month, and 1 year subscriptions.</div></nav></div></div><div data-w-tab="Tab 4" class="w-tab-pane"><div data-delay="0" data-hover="false" data-w-id="ed1b58a1-b4d3-3c7c-02a1-bf72855d5ba0" class="dropdown-qa w-dropdown"><div class="dropdown-toggle-blue w-dropdown-toggle"><div>My Nitro subscription comes with Boosts. What are those?</div><img loading="lazy" src="https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/633c1afc2642cd62d5e785bb_Vector%20(18).svg" alt="" class="drop-plus"/></div><nav class="dropdown-list-4 w-dropdown-list"><div class="p-400-16-white drop">Server Boosts are a way to show support for your favorite communities. Each Boost that you give to a server helps collectively unlock perks for everyone in the server to enjoy. Learn more about Server Boosting <a href="https://support.discord.com/hc/articles/360028038352" class="link-16px">here</a>! equals www.twitter.com (Twitter)
Source: chromecache_335.2.dr, chromecache_236.2.dr, chromecache_336.2.dr	String found in binary or memory: t.SOCIAL_LINKS=Object.freeze({FACEBOOK_URL:"https://www.facebook.com/discord/",INSTAGRAM_URL:"https://www.instagram.com/discord/",YOUTUBE_URL:"https://www.youtube.com/discord/",TIKTOK_URL:"https://www.tiktok.com/@discord"}),t.WebAnalyticsEvents=function(e){e.EXPERIMENT_USER_TRIGGERED="experiment_user_triggered";e.EXPERIMENT_GUILD_TRIGGERED="experiment_guild_triggered";e.EXPERIMENT_SAVE_EXPOSURE_FAILED="experiment_save_exposure_failed";e.MKTG_PAGE_VIEWED="mktg_page_viewed";e.CLICK_LANDING_CTA="click_landing_cta";e.DOWNLOAD_APP="download_app";e.MKTG_HYPESQUAD_FORM_SUBMITTED="mktg_hypesquad_form_submitted";e.MKTG_HYPESQUAD_FORM_OPENED="mktg_hypesquad_form_opened";e.CHANGE_MARKETING_LOCALE="change_marketing_locale";e.GAME_CLICKED_LANDING="game_clicked_landing";e.MAIN_NAVIGATION_MENU="main_navigation_menu";e.MKTG_APPLICATION_STEP="mktg_application_step";e.MKTG_WARFRAME_CTA_CLICKED="mktg_warframe_cta_clicked";e.MKTG_PAGE_CTA_CLICKED="mktg_page_cta_clicked" equals www.facebook.com (Facebook)
Source: chromecache_335.2.dr, chromecache_236.2.dr, chromecache_336.2.dr	String found in binary or memory: t.SOCIAL_LINKS=Object.freeze({FACEBOOK_URL:"https://www.facebook.com/discord/",INSTAGRAM_URL:"https://www.instagram.com/discord/",YOUTUBE_URL:"https://www.youtube.com/discord/",TIKTOK_URL:"https://www.tiktok.com/@discord"}),t.WebAnalyticsEvents=function(e){e.EXPERIMENT_USER_TRIGGERED="experiment_user_triggered";e.EXPERIMENT_GUILD_TRIGGERED="experiment_guild_triggered";e.EXPERIMENT_SAVE_EXPOSURE_FAILED="experiment_save_exposure_failed";e.MKTG_PAGE_VIEWED="mktg_page_viewed";e.CLICK_LANDING_CTA="click_landing_cta";e.DOWNLOAD_APP="download_app";e.MKTG_HYPESQUAD_FORM_SUBMITTED="mktg_hypesquad_form_submitted";e.MKTG_HYPESQUAD_FORM_OPENED="mktg_hypesquad_form_opened";e.CHANGE_MARKETING_LOCALE="change_marketing_locale";e.GAME_CLICKED_LANDING="game_clicked_landing";e.MAIN_NAVIGATION_MENU="main_navigation_menu";e.MKTG_APPLICATION_STEP="mktg_application_step";e.MKTG_WARFRAME_CTA_CLICKED="mktg_warframe_cta_clicked";e.MKTG_PAGE_CTA_CLICKED="mktg_page_cta_clicked" equals www.youtube.com (Youtube)
Source: chromecache_483.2.dr	String found in binary or memory: this.Y.Aa&&(a.authuser=this.Y.Aa);this.Y.pageId&&(a.pageid=this.Y.pageId);isNaN(this.cryptoPeriodIndex)\|\|(a.cpi=this.cryptoPeriodIndex.toString());var e=(e=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.Bb()))?e[1]:"";e==="ATV"&&(a.cdt=e);this.G=a;this.G.session_id=d;this.oa=!0;this.B.flavor==="widevine"&&(this.G.hdr="1");this.B.flavor==="playready"&&(b=Number(HO(b.experiments,"playready_first_play_expiration")),!isNaN(b)&&b>=0&&(this.G.mfpe=""+b),this.oa=!1);b="";g.jO(this.B)?iO(this.B)?(d=c.B)&&(b="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_483.2.dr	String found in binary or memory: var E2={};var Gdb={Es:[{FB:/Unable to load player module/,weight:20},{FB:/Failed to fetch/,weight:500},{FB:/XHR API fetch failed/,weight:10},{FB:/JSON parsing failed after XHR fetch/,weight:10},{FB:/Retrying OnePlatform request/,weight:10},{FB:/CSN Missing or undefined during playback association/,weight:100}],Lr:[{callback:E7a,weight:500}]};var R7a=/[&\?]action_proxy=1/,Q7a=/[&\?]token=([\w-])/,S7a=/[&\?]video_id=([\w-])/,T7a=/[&\?]index=([\d-])/,U7a=/[&\?]m_pos_ms=([\d-])/,W7a=/[&\?]vvt=([\w-]*)/,I7a="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),V7a="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),L7a={android:"ANDROID", equals www.youtube.com (Youtube)
Source: chromecache_292.2.dr, chromecache_517.2.dr	String found in binary or memory: var SB=function(a,b,c,d,e){var f=Jz("fsl",c?"nv.mwt":"mwt",0),g;g=c?Jz("fsl","nv.ids",[]):Jz("fsl","ids",[]);if(!g.length)return!0;var k=Oz(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);N(121);if(m==="https://www.facebook.com/tr/")return N(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!wy(k,yy(b, equals www.facebook.com (Facebook)
Source: chromecache_460.2.dr	String found in binary or memory: var scriptUrl = 'https:\/\/www.youtube.com\/s\/player\/c9dd45ed\/www-widgetapi.vflset\/www-widgetapi.js';try{var ttPolicy=window.trustedTypes.createPolicy("youtube-widget-api",{createScriptURL:function(x){return x}});scriptUrl=ttPolicy.createScriptURL(scriptUrl)}catch(e){}var YT;if(!window["YT"])YT={loading:0,loaded:0};var YTConfig;if(!window["YTConfig"])YTConfig={"host":"https://www.youtube.com"}; equals www.youtube.com (Youtube)
Source: chromecache_336.2.dr	String found in binary or memory: var t=e.dataset,r=t.platform,o=t.format,i=t.releaseChannel,s=t.trackDownload,u=null!=r?r:a.default.platform,l=a.default.getDownloadLink(u,null!=i&&(0,a.isReleaseChannel)(i)?i:void 0,o);e.addEventListener("click",(function(){(0,n.default)(u,null!=i,s,l,!1)}));"A"===e.nodeName&&e.setAttribute("href",l)}));["landing","landingTV"].includes(e)&&o.default.addConditionalChangeListener((function(){if(null!=o.default.fingerprint){i.default.trackOtt(e,o.default.fingerprint);return!1}}));window.onYouTubeIframeAPIReady=function(){document.querySelectorAll("[data-track-youtube]").forEach((function(t){var r=new window.YT.Player(t,{events:{onStateChange:function(t){t.data===c.PLAYING&&i.default.track(s.WebAnalyticsEvents.MKTG_VIDEO_PLAYED,{video_url:null==r?void 0:r.getVideoUrl(),page_name:e})}}})}))};!function(){var e=document.createElement("script");e.src="https://www.youtube.com/iframe_api";var t=document.querySelector("body");null==t\|\|t.append(e)}()}},69630:(e,t)=>{"use strict" equals www.youtube.com (Youtube)

Source: chromecache_335.2.dr, chromecache_236.2.dr, chromecache_336.2.dr	String found in binary or memory: http://bit.ly/raven-secret-key
Source: chromecache_524.2.dr, chromecache_335.2.dr, chromecache_236.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_335.2.dr, chromecache_236.2.dr, chromecache_336.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/add-inverted-param/
Source: chromecache_335.2.dr, chromecache_236.2.dr, chromecache_336.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/define-locale/
Source: chromecache_335.2.dr, chromecache_236.2.dr, chromecache_336.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/dst-shifted/
Source: chromecache_335.2.dr, chromecache_236.2.dr, chromecache_336.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/js-date/
Source: chromecache_336.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/min-max/
Source: chromecache_335.2.dr, chromecache_236.2.dr, chromecache_336.2.dr	String found in binary or memory: http://momentjs.com/guides/#/warnings/zone/
Source: chromecache_283.2.dr	String found in binary or memory: http://schema.org
Source: chromecache_236.2.dr	String found in binary or memory: http://septapus.com/
Source: chromecache_415.2.dr, chromecache_511.2.dr, chromecache_483.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_396.2.dr, chromecache_326.2.dr, chromecache_560.2.dr	String found in binary or memory: http://underscorejs.org
Source: chromecache_358.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_335.2.dr, chromecache_236.2.dr	String found in binary or memory: http://www.twinge.tv/
Source: chromecache_335.2.dr, chromecache_236.2.dr	String found in binary or memory: http://www.twinge.tv/sys/discord
Source: chromecache_483.2.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_483.2.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_483.2.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_483.2.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_483.2.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_483.2.dr	String found in binary or memory: https://admin.youtube.com
Source: chromecache_517.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_236.2.dr	String found in binary or memory: https://airhorn.solutions/
Source: chromecache_413.2.dr, chromecache_275.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/webfont/1.6.26/webfont.js
Source: chromecache_483.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_524.2.dr, chromecache_335.2.dr, chromecache_236.2.dr, chromecache_336.2.dr	String found in binary or memory: https://app.box.com/s/5puqm5ijahrrdao7yldi7fr3zah5i1am
Source: chromecache_335.2.dr, chromecache_236.2.dr	String found in binary or memory: https://beta.nightbot.tv/
Source: chromecache_335.2.dr, chromecache_236.2.dr	String found in binary or memory: https://beta.nightbot.tv/integrations
Source: chromecache_292.2.dr, chromecache_517.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_607.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/googleData.json
Source: chromecache_607.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iab2Data.json
Source: chromecache_607.2.dr, chromecache_278.2.dr	String found in binary or memory: https://cdn.cookielaw.org/vendorlist/iabData.json
Source: chromecache_524.2.dr	String found in binary or memory: https://cdn.discordapp.com
Source: chromecache_413.2.dr, chromecache_275.2.dr	String found in binary or memory: https://cdn.localizeapi.com/localize.js
Source: chromecache_283.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/5f91fae62cc821206588b837_Frame%20246.png
Source: chromecache_492.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/60ae8e0e57598e8e29ef1150_ABCGintoNord-Bo
Source: chromecache_492.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/60ae8e0e78f5a47690e06b37_ABCGintoNord-Bl
Source: chromecache_492.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/60ae8e0ed21ce126aff5a815_ABCGintoNord-Me
Source: chromecache_492.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/60ae8e380cf36e820fde5cca_ABCGintoNormal-
Source: chromecache_492.2.dr	String found in binary or memory: https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/60ae8e3839e8be3006a06146_ABCGintoNormal-

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	1 Security Software Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
http://underscorejs.org	0%	URL Reputation	safe
https://npms.io/search?q=ponyfill.	0%	URL Reputation	safe
https://cdn.prod.website-files.com/5f9072399b2640f14d6a2bf4/61ea03c5f329550592ff06cd_Policy%20Update	0%	Avira URL Cloud	safe
https://developers.google.com/youtube/iframe_api_reference#Events	0%	URL Reputation	safe
https://youtu.be/	0%	URL Reputation	safe
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/651e69353db8bbacc1ce8265_Cloud.png	0%	Avira URL Cloud	safe
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/61a51fe7a92659b508c112f4_join-festivitie	0%	Avira URL Cloud	safe
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/6321cb4764813ee14c33c45f_62cb46f1aeebe90	0%	Avira URL Cloud	safe
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/64900f0ee4f743ad6fe083af_2306_SCL_Tile_T	0%	Avira URL Cloud	safe
https://discord.com/	0%	Avira URL Cloud	safe
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/6321cb4d6b18c71a53564bac_62cb46f3e00ff80	0%	Avira URL Cloud	safe
https://mj.ostep.net/assets/7f63813838e283aea62f1a68ef1732c2.woff2	100%	Avira URL Cloud	phishing
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=5f8dd67f8fdd6f51f0b50904	0%	Avira URL Cloud	safe
https://cdn.prod.website-files.com/5f9072399b2640f14d6a2bf4/66eb67698c19f39b38d643ab_image1-p-500.png	0%	Avira URL Cloud	safe
https://discord.com/safety-parents	0%	Avira URL Cloud	safe
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/65a8e7c8b60abd235de486e8_Nitro-unleash.s	0%	Avira URL Cloud	safe
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/633bec68cadad3f933adfcc1_Vector%20(17).svg	0%	Avira URL Cloud	safe
https://muxy.io/	0%	Avira URL Cloud	safe
https://discord.gg/EZP3Z33	0%	Avira URL Cloud	safe
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/6321cdbc0dc0fb5f55e3098f_6257c2a1e7544e3	0%	Avira URL Cloud	safe
https://discord.com/safety-teen-charter	0%	Avira URL Cloud	safe
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/62faf60da61ce206afa29696_back%20to%20sch	0%	Avira URL Cloud	safe
https://mj.ostep.net/assets/3d07f5abf272fbb5670d02ed687453d0.woff2	100%	Avira URL Cloud	phishing
https://mj.ostep.net/assets/46b2132c01604c9493d558de444929f4.svg	100%	Avira URL Cloud	phishing
https://mj.ostep.net/assets/478df9b67132a6268aaf.js	100%	Avira URL Cloud	phishing
https://mj.ostep.net/assets/847541504914fd33810e70a0ea73177e.ico	100%	Avira URL Cloud	phishing
https://stor.re/7J8C/tFvg	0%	Avira URL Cloud	safe
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/60ae916347747e71167e21cc_favicon.png	0%	Avira URL Cloud	safe
https://discord.com/assets/oneTrust/v4/scripttemplates/otSDKStub.js	0%	Avira URL Cloud	safe
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/633c0934aea58b4ddee274ec_Layer%201.svg	0%	Avira URL Cloud	safe
https://cdn.prod.website-files.com/5f9072399b2640f14d6a2bf4/6657ad0a58988c5decbfbc53_Header_3-p-1600	0%	Avira URL Cloud	safe
https://www.amazon.com/dp/B0CF4J58QK?maas=maas_adg_DE3B8B6262C4DC306922DC26C0CE6A2D_afap_abs&ref	0%	Avira URL Cloud	safe
https://u.muxy.io/dashboard/connections	0%	Avira URL Cloud	safe
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/6321cb4f36a20273d04eb401_62cb46f37c26b54	0%	Avira URL Cloud	safe
https://mj.ostep.net/assets/9658d3734ade853a9e31.js	100%	Avira URL Cloud	phishing
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/6321cb4ad6ee377e0df4cde6_62cb46f16128094	0%	Avira URL Cloud	safe
https://www.dropbox.com/sh/nabhhaq7kt59exr/AAB7U3f2pW-Jmvdul0yy7o-ia?dl=1	0%	Avira URL Cloud	safe
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/652736292cbf8363b43d077a_ggsans-Normal.woff2	0%	Avira URL Cloud	safe
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/638f797ccc57e5fa3a2882d4_ggsans-800-extr	0%	Avira URL Cloud	safe
https://cdn.prod.website-files.com/5f9072399b2640f14d6a2bf4/66eb67698c19f39b38d643ab_image1-p-500.pn	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
discord.com	162.159.137.232	true	false	unknown
support.discord.com	162.159.128.233	true	false	unknown
i.ytimg.com	216.58.206.86	true	false	unknown
cdn.discordapp.com	162.159.133.233	true	false	unknown
default.qdr.p1.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.18	true	false	unknown
static.doubleclick.net	172.217.18.6	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown
d3e54v103j8qbb.cloudfront.net	52.222.232.144	true	false	unknown
mj.ostep.net	165.154.182.38	true	false	unknown
bg.microsoft.map.fastly.net	199.232.214.172	true	false	unknown
cdn.localizeapi.com	172.67.41.53	true	false	unknown
youtube-ui.l.google.com	142.250.186.78	true	false	unknown
googleads.g.doubleclick.net	142.250.186.162	true	false	unknown
play.google.com	216.58.206.78	true	false	unknown
global.localizecdn.com	104.18.4.175	true	false	unknown
cdn.prod.website-files.com	104.18.160.117	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.181.225	true	false	unknown
challenges.cloudflare.com	104.18.94.41	true	false	unknown
www.google.com	216.58.206.36	true	false	unknown
geolocation.onetrust.com	172.64.155.119	true	false	unknown
yt3.ggpht.com	unknown	unknown	false	unknown
www.youtube.com	unknown	unknown	false	unknown

Name	Malicious	Antivirus Detection	Reputation
https://cdn.prod.website-files.com/5f9072399b2640f14d6a2bf4/66eb67698c19f39b38d643ab_image1-p-500.png	false	Avira URL Cloud: safe	unknown
https://mj.ostep.net/assets/7f63813838e283aea62f1a68ef1732c2.woff2	true	Avira URL Cloud: phishing	unknown
https://d3e54v103j8qbb.cloudfront.net/js/jquery-3.5.1.min.dc5e7f18c8.js?site=5f8dd67f8fdd6f51f0b50904	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/633bec68cadad3f933adfcc1_Vector%20(17).svg	false	Avira URL Cloud: safe	unknown
https://mj.ostep.net/assets/3d07f5abf272fbb5670d02ed687453d0.woff2	false	Avira URL Cloud: phishing	unknown
https://mj.ostep.net/assets/46b2132c01604c9493d558de444929f4.svg	false	Avira URL Cloud: phishing	unknown
https://mj.ostep.net/assets/478df9b67132a6268aaf.js	false	Avira URL Cloud: phishing	unknown
https://mj.ostep.net/assets/847541504914fd33810e70a0ea73177e.ico	false	Avira URL Cloud: phishing	unknown
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/60ae916347747e71167e21cc_favicon.png	false	Avira URL Cloud: safe	unknown
https://discord.com/assets/oneTrust/v4/scripttemplates/otSDKStub.js	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/633c0934aea58b4ddee274ec_Layer%201.svg	false	Avira URL Cloud: safe	unknown
https://mj.ostep.net/assets/9658d3734ade853a9e31.js	false	Avira URL Cloud: phishing	unknown
https://a.nel.cloudflare.com/report/v4?s=u3MMBuXR7dLxtHuN3JjZCPL6EixjL7f3d4Y0wBuNSZh2sHvU1G%2BbKp3IqkYleW7pvG3%2FaA6QY2jq%2BIK5GZs1gbXfon8u1rGlyttQi%2FReAJkmv38ymkek5mJKPiKw4uXwaVislZo%3D	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/652736292cbf8363b43d077a_ggsans-Normal.woff2	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/s/player/c9dd45ed/www-widgetapi.vflset/www-widgetapi.js	false	Avira URL Cloud: safe	unknown
https://mj.ostep.net/blog	false		unknown
https://cdn.discordapp.com/icons/1046979304547954728/bbe5d6097255431300cfc18dd629b876.jpg?size=256	false	Avira URL Cloud: safe	unknown
https://cdn.discordapp.com/discovery-splashes/322850917248663552/a37669a8d24a3db3b06eca5be56028c6.jpg?size=512	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/633bf1841225cb2fb8b85bf5_Stream%20Quality_white.svg	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/6537b50ff357a5ee463e995e_DISCORD%20POLICY%20HUB.svg	false	Avira URL Cloud: safe	unknown
https://cdn.discordapp.com/discovery-splashes/562762757905186828/e69c9585f8b23477c0626ac4a96f2794.jpg?size=512	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/633c0bef3ac44f5d1acbb35b_Vector.svg	false	Avira URL Cloud: safe	unknown
https://global.localizecdn.com/localize.js	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/js/discordpages.bcd5cacd4.js	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f9072399b2640f14d6a2bf4/66edb36b837e7153f23bca05_Blog(under100KB)-p-800.png	false	Avira URL Cloud: safe	unknown
https://mj.ostep.net/assets/f531ea5a3a719ed1bb1d.js	false	Avira URL Cloud: phishing	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/flow/ov1/1115491903:1727219511:VekTd5txY-qH9eZIFRlRFhpngX17Hv3YqQboRhq7zUU/8c869ac62c165e61/ca3efb3db4610bd	false	Avira URL Cloud: safe	unknown
https://mj.ostep.net/cdn-cgi/challenge-platform/h/g/scripts/jsd/ec4b873d446c/main.js?	false	Avira URL Cloud: phishing	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/633beb46b101837b5c2fc3fb_Vector%20(14).svg	false	Avira URL Cloud: safe	unknown
https://mj.ostep.net/assets/ff96c6cc388e99cdcdd33e996ba9f893.webm	false	Avira URL Cloud: phishing	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/633d926be4e0c47ae26d816b_Section.svg	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/6257bf8b5ba300233705a542_en.png	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/64900f0e31939bc0f725f0b2_2306_SCL_Tile_News.svg	false	Avira URL Cloud: safe	unknown
https://mj.ostep.net/assets/c497145401e53878e6a4.js	false	Avira URL Cloud: phishing	unknown
https://cdn.discordapp.com/icons/398627612299362304/a_792c266092d4989bb9a67e0abe3e965f.jpg?size=256	false	Avira URL Cloud: safe	unknown
https://discord.com/w/loader/loginOrDownload.js	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f9072399b2640f14d6a2bf4/66d0f24c478539f9ff090f41_37_DIS-MKT_05_CSS_BLOG%20HEADER-p-500.png	false	Avira URL Cloud: safe	unknown
https://cdn.discordapp.com/discovery-splashes/864458335532744716/963ba919d48c30c8321c2b6c1801d872.jpg?size=512	false	Avira URL Cloud: safe	unknown
https://cdn.discordapp.com/discovery-splashes/679875946597056683/f7ebc5a4ff13dd2a4a6c73f17d17d5e9.jpg?size=512	false	Avira URL Cloud: safe	unknown
https://cdn.discordapp.com/icons/1102970375731691612/1c420a9ef93cc2e24833f8c2bf7e6039.jpg?size=256	false	Avira URL Cloud: safe	unknown
https://challenges.cloudflare.com/cdn-cgi/challenge-platform/h/g/turnstile/if/ov2/av0/rcv0/0/1c3wk/0x4AAAAAAADnPIDROrmt1Wwj/light/fbE/normal/auto/	false	Avira URL Cloud: safe	unknown
https://cdn.discordapp.com/icons/846496831533088768/b8e828e0b3f7d333e50ddb3ac60dce61.jpg?size=256	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=Lj33z%2BIrr7JF%2BLVq4vQZYT99DWny5H29IYO%2Fs5VtmkYBY9ojcpCdTs53tmIRo0Dsy%2BgCWZxdB7PPYzwm7p5Vl4YvJ7m4ufOeBH3kZ14wdnwaWcyECQHI2MMq6KMI	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/js/discord-2022.85fc8981b.js	false	Avira URL Cloud: safe	unknown

Name	Source	Malicious	Antivirus Detection	Reputation
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/61a51fe7a92659b508c112f4_join-festivitie	chromecache_492.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f9072399b2640f14d6a2bf4/61ea03c5f329550592ff06cd_Policy%20Update	chromecache_283.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/6321cb4764813ee14c33c45f_62cb46f1aeebe90	chromecache_283.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/651e69353db8bbacc1ce8265_Cloud.png	chromecache_413.2.dr	false	Avira URL Cloud: safe	unknown
http://underscorejs.org	chromecache_396.2.dr, chromecache_326.2.dr, chromecache_560.2.dr	false	URL Reputation: safe	unknown
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/6321cb4d6b18c71a53564bac_62cb46f3e00ff80	chromecache_283.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/64900f0ee4f743ad6fe083af_2306_SCL_Tile_T	chromecache_413.2.dr	false	Avira URL Cloud: safe	unknown
https://discord.com/	chromecache_283.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://discord.com/safety-parents	chromecache_413.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/65a8e7c8b60abd235de486e8_Nitro-unleash.s	chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://discord.com/safety-teen-charter	chromecache_413.2.dr	false	Avira URL Cloud: safe	unknown
https://muxy.io/	chromecache_335.2.dr, chromecache_236.2.dr	false	Avira URL Cloud: safe	unknown
https://discord.gg/EZP3Z33	chromecache_335.2.dr, chromecache_236.2.dr, chromecache_336.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/62faf60da61ce206afa29696_back%20to%20sch	chromecache_492.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/6321cdbc0dc0fb5f55e3098f_6257c2a1e7544e3	chromecache_283.2.dr, chromecache_492.2.dr	false	Avira URL Cloud: safe	unknown
https://stor.re/7J8C/tFvg	chromecache_335.2.dr, chromecache_236.2.dr, chromecache_336.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f9072399b2640f14d6a2bf4/6657ad0a58988c5decbfbc53_Header_3-p-1600	chromecache_283.2.dr	false	Avira URL Cloud: safe	unknown
https://u.muxy.io/dashboard/connections	chromecache_335.2.dr, chromecache_236.2.dr	false	Avira URL Cloud: safe	unknown
https://www.amazon.com/dp/B0CF4J58QK?maas=maas_adg_DE3B8B6262C4DC306922DC26C0CE6A2D_afap_abs&ref	chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/6321cb4f36a20273d04eb401_62cb46f37c26b54	chromecache_283.2.dr	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/sh/nabhhaq7kt59exr/AAB7U3f2pW-Jmvdul0yy7o-ia?dl=1	chromecache_524.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/6321cb4ad6ee377e0df4cde6_62cb46f16128094	chromecache_283.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/638f797ccc57e5fa3a2882d4_ggsans-800-extr	chromecache_492.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/66ebf1006b0eb144de088fe0_BG-downloads.we	chromecache_492.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f9072399b2640f14d6a2bf4/66eb67698c19f39b38d643ab_image1-p-500.pn	chromecache_283.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/6321cb4d29670fb8a9998a06_62cb46f37c26b5e	chromecache_283.2.dr	false	Avira URL Cloud: safe	unknown
https://discord.com	chromecache_336.2.dr	false	Avira URL Cloud: safe	unknown
http://momentjs.com/guides/#/warnings/zone/	chromecache_335.2.dr, chromecache_236.2.dr, chromecache_336.2.dr	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_483.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/60b6ad79b75c18f025626c71_menuicon.svg	chromecache_283.2.dr	false	Avira URL Cloud: safe	unknown
https://discord.com/safety/360043857751-four-steps-to-a-super-safe-account	chromecache_413.2.dr	false	Avira URL Cloud: safe	unknown
https://github.com/date-fns/date-fns/blob/master/docs/upgradeGuide.md#string-arguments	chromecache_524.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/6321cb4f00801f3750f4834e_62cb46f4e819840	chromecache_283.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/65a8e7f5699945aa65f8d9f8_Nitro-bg.svg	chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f9072399b2640f14d6a2bf4/63178bf5d9f1714116f6a66d_Resources%20%26	chromecache_283.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/62cb46f3e00ff80959abff2a_nl.png	chromecache_413.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://community.nightdev.com/c/nightbot	chromecache_335.2.dr, chromecache_236.2.dr	false	Avira URL Cloud: safe	unknown
https://www.dropbox.com/scl/fo/2vittfakjukwa3zl4gnxh/AOS0AZlx-zA4TjDyv-M-dgk?rlkey=kn0v1lcqfq1lurj3l	chromecache_335.2.dr, chromecache_236.2.dr, chromecache_336.2.dr	false	Avira URL Cloud: safe	unknown
https://discord.com/api/download?platform=linux	chromecache_524.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/62cb46f39e6ac4c46ce39566_ru.png	chromecache_413.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://discord.com/blog/rss.xml	chromecache_283.2.dr	false	Avira URL Cloud: safe	unknown
https://discord.com/safety	chromecache_413.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/633c1afc2642cd62d5e785bb_Vector%20(18).s	chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f8dd67f8fdd6f51f0b50904/60ae8e384c11e54fd6986f3b_ABCGintoNormal-	chromecache_492.2.dr	false	Avira URL Cloud: safe	unknown
http://septapus.com/	chromecache_236.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/5f9072399b2640f14d6a2bf4/6657ad0a58988c5decbfbc53_Header_3.png	chromecache_283.2.dr	false	Avira URL Cloud: safe	unknown
http://momentjs.com/guides/#/warnings/min-max/	chromecache_336.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/RivalEsportsGG/status/864916530286411776	chromecache_335.2.dr, chromecache_236.2.dr, chromecache_336.2.dr	false	Avira URL Cloud: safe	unknown
https://npms.io/search?q=ponyfill.	chromecache_524.2.dr, chromecache_335.2.dr, chromecache_236.2.dr, chromecache_336.2.dr	false	URL Reputation: safe	unknown
https://discord.com/acknowledgements).	chromecache_335.2.dr, chromecache_236.2.dr, chromecache_336.2.dr	false	Avira URL Cloud: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/62cb46f49e6ac45f35e39568_zh-CN.png	chromecache_413.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://developers.google.com/youtube/iframe_api_reference#Events	chromecache_288.2.dr, chromecache_441.2.dr	false	URL Reputation: safe	unknown
https://cdn.prod.website-files.com/5f9072399b2640f14d6a2bf4/638a71cfbd7fbf6236a8ba0a_Policy%20%26%20	chromecache_283.2.dr	false	Avira URL Cloud: safe	unknown
https://discord.com/safetycenter	chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown
https://youtu.be/	chromecache_483.2.dr	false	URL Reputation: safe	unknown
https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/62fddf0fde45a8baedcc7ee5_847541504914fd3	chromecache_413.2.dr, chromecache_275.2.dr	false	Avira URL Cloud: safe	unknown

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.160.117	cdn.prod.website-files.com	United States	13335	CLOUDFLARENETUS	false
172.67.41.53	cdn.localizeapi.com	United States	13335	CLOUDFLARENETUS	false
162.159.130.233	unknown	United States	13335	CLOUDFLARENETUS	false
104.18.32.137	unknown	United States	13335	CLOUDFLARENETUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
142.250.186.78	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
172.217.18.6	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.185.198	unknown	United States	15169	GOOGLEUS	false
216.58.206.86	i.ytimg.com	United States	15169	GOOGLEUS	false
104.18.95.41	unknown	United States	13335	CLOUDFLARENETUS	false
162.159.133.233	cdn.discordapp.com	United States	13335	CLOUDFLARENETUS	false
172.64.155.119	geolocation.onetrust.com	United States	13335	CLOUDFLARENETUS	false
216.58.206.46	unknown	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.186.142	unknown	United States	15169	GOOGLEUS	false
142.250.186.100	unknown	United States	15169	GOOGLEUS	false
162.159.136.232	unknown	United States	13335	CLOUDFLARENETUS	false
162.159.128.233	support.discord.com	United States	13335	CLOUDFLARENETUS	false
216.58.206.78	play.google.com	United States	15169	GOOGLEUS	false
104.18.94.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
142.250.185.161	unknown	United States	15169	GOOGLEUS	false
52.222.232.144	d3e54v103j8qbb.cloudfront.net	United States	16509	AMAZON-02US	false
142.250.186.98	unknown	United States	15169	GOOGLEUS	false
52.222.232.39	unknown	United States	16509	AMAZON-02US	false
142.250.186.162	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
104.18.4.175	global.localizecdn.com	United States	13335	CLOUDFLARENETUS	false
165.154.182.38	mj.ostep.net	Canada	7456	INTERHOPCA	false
162.159.137.232	discord.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.225	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
104.22.20.64	unknown	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1517384
Start date and time:	2024-09-25 01:36:04 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mj.ostep.net/acknowledgements
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	12
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@30/583@84/33
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0
Cookbook Comments:	Browse: https://mj.ostep.net/safetycenter Browse: https://mj.ostep.net/servers Browse: https://support.discord.com/hc/en-us Browse: https://mj.ostep.net/nitro Browse: https://mj.ostep.net/blog

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	downloaded
Size (bytes):	3615
Entropy (8bit):	4.33660436795529
Encrypted:	false
SSDEEP:	96:7QiZkw9YR9w69zoWWvz2i5PsjYxHpLIO/T:Td+Rjc/7N5PsyH+OL
MD5:	AC96B2A5AB032D89EEF4572440C02E80
SHA1:	DA581F18C99AC2072BCBA55EBE54D0D375D2457A
SHA-256:	3A2F006116F16C994916CE7089243D5B89DE5DC71FC933DFD308968D86F5818E
SHA-512:	0AD46574A91A2ADDCE252A9FB168D51447B46D10DD03D7D905EC36485FBA785E12620B182E600B5691DC4D61C389B440060CEA673982DBC2704B7714F44FACCB
Malicious:	false
Reputation:	low
URL:	https://cdn.prod.website-files.com/6257adef93867e50d84d30e2/633c109da93ff46336b02e84_Tag.svg
Preview:	<svg width="112" height="25" viewBox="0 0 112 25" fill="none" xmlns="http://www.w3.org/2000/svg">.<rect y="0.609375" width="112" height="24" rx="8" fill="url(#paint0_linear_14123_98906)"/>.<path d="M18.344 8.20937H15.44L13.796 13.9454L12.224 8.20937H9.248L8.684 16.6094H10.532L10.952 10.2134L12.692 16.6094H14.78L16.532 10.3214L17.048 16.6094H19.04L18.344 8.20937ZM24.4962 16.8494C27.0762 16.8494 28.8882 15.0254 28.8882 12.4214C28.8882 9.82938 27.0762 7.96937 24.4962 7.96937C21.9402 7.96937 20.1282 9.82938 20.1282 12.4214C20.1282 15.0254 21.9402 16.8494 24.4962 16.8494ZM24.4962 14.9414C23.1042 14.9414 22.2402 13.8734 22.2402 12.4334C22.2402 10.9934 23.0922 9.87737 24.4962 9.87737C25.9242 9.87737 26.7642 10.9934 26.7642 12.4334C26.7642 13.8734 25.9122 14.9414 24.4962 14.9414ZM32.9158 16.8614C34.9318 16.8614 36.1318 15.8174 36.1318 14.1614C36.1318 12.9134 35.4478 12.1454 33.8518 11.6294L32.9878 11.3534C32.3758 11.1134 32.0638 10.8854 32.0638 10.4654C32.0638 9.97337 32.4478 9.70937 33.2638 9

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Sep 25, 2024 01:37:01.850781918 CEST	192.168.2.6	1.1.1.1	0x98f9	Standard query (0)	mj.ostep.net	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:01.857841969 CEST	192.168.2.6	1.1.1.1	0x95e5	Standard query (0)	mj.ostep.net	65	IN (0x0001)	false
Sep 25, 2024 01:37:03.300013065 CEST	192.168.2.6	1.1.1.1	0x4b6c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:03.300132036 CEST	192.168.2.6	1.1.1.1	0x3d5b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:04.130996943 CEST	192.168.2.6	1.1.1.1	0x5df	Standard query (0)	mj.ostep.net	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:04.131592989 CEST	192.168.2.6	1.1.1.1	0xe349	Standard query (0)	mj.ostep.net	65	IN (0x0001)	false
Sep 25, 2024 01:37:06.715406895 CEST	192.168.2.6	1.1.1.1	0xa19b	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:06.716929913 CEST	192.168.2.6	1.1.1.1	0x39ef	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:08.962183952 CEST	192.168.2.6	1.1.1.1	0x220f	Standard query (0)	geolocation.onetrust.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:08.962779045 CEST	192.168.2.6	1.1.1.1	0x3632	Standard query (0)	geolocation.onetrust.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:10.302975893 CEST	192.168.2.6	1.1.1.1	0x2032	Standard query (0)	discord.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:10.303843021 CEST	192.168.2.6	1.1.1.1	0x131d	Standard query (0)	discord.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:11.641381979 CEST	192.168.2.6	1.1.1.1	0x8bc5	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:11.641581059 CEST	192.168.2.6	1.1.1.1	0x9488	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:11.693989038 CEST	192.168.2.6	1.1.1.1	0x1954	Standard query (0)	discord.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:11.693989038 CEST	192.168.2.6	1.1.1.1	0x2d91	Standard query (0)	discord.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:23.534662962 CEST	192.168.2.6	1.1.1.1	0x7551	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:23.534820080 CEST	192.168.2.6	1.1.1.1	0x26e4	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:23.535832882 CEST	192.168.2.6	1.1.1.1	0x3a10	Standard query (0)	cdn.localizeapi.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:23.536015034 CEST	192.168.2.6	1.1.1.1	0xa5f	Standard query (0)	cdn.localizeapi.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:24.511573076 CEST	192.168.2.6	1.1.1.1	0xaef7	Standard query (0)	cdn.localizeapi.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:24.511723042 CEST	192.168.2.6	1.1.1.1	0x72c8	Standard query (0)	cdn.localizeapi.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:25.305141926 CEST	192.168.2.6	1.1.1.1	0x6b5b	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:25.305401087 CEST	192.168.2.6	1.1.1.1	0xb4ba	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:25.342448950 CEST	192.168.2.6	1.1.1.1	0x2360	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:25.342889071 CEST	192.168.2.6	1.1.1.1	0xd2ea	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Sep 25, 2024 01:37:25.638523102 CEST	192.168.2.6	1.1.1.1	0xb718	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:25.638683081 CEST	192.168.2.6	1.1.1.1	0x2726	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:27.292043924 CEST	192.168.2.6	1.1.1.1	0x420e	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:27.292344093 CEST	192.168.2.6	1.1.1.1	0xaa03	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:27.770307064 CEST	192.168.2.6	1.1.1.1	0x77cd	Standard query (0)	d3e54v103j8qbb.cloudfront.net	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:27.770582914 CEST	192.168.2.6	1.1.1.1	0xaaf1	Standard query (0)	d3e54v103j8qbb.cloudfront.net	65	IN (0x0001)	false
Sep 25, 2024 01:37:30.870277882 CEST	192.168.2.6	1.1.1.1	0x1c68	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:30.870444059 CEST	192.168.2.6	1.1.1.1	0xdff7	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 25, 2024 01:37:30.871140957 CEST	192.168.2.6	1.1.1.1	0xe20	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:30.871433973 CEST	192.168.2.6	1.1.1.1	0x1b5b	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Sep 25, 2024 01:37:30.946729898 CEST	192.168.2.6	1.1.1.1	0xdb12	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:30.946851969 CEST	192.168.2.6	1.1.1.1	0x4432	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:30.984316111 CEST	192.168.2.6	1.1.1.1	0xfa92	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:30.984463930 CEST	192.168.2.6	1.1.1.1	0x1bf6	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:31.274050951 CEST	192.168.2.6	1.1.1.1	0x2f45	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:31.274158001 CEST	192.168.2.6	1.1.1.1	0xcd1a	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:31.319796085 CEST	192.168.2.6	1.1.1.1	0x1713	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:31.319921017 CEST	192.168.2.6	1.1.1.1	0x62f3	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:31.320780039 CEST	192.168.2.6	1.1.1.1	0x499a	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:31.320899963 CEST	192.168.2.6	1.1.1.1	0x624	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:32.232614994 CEST	192.168.2.6	1.1.1.1	0xc679	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:32.232767105 CEST	192.168.2.6	1.1.1.1	0xefb0	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Sep 25, 2024 01:37:32.239231110 CEST	192.168.2.6	1.1.1.1	0x9ce7	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:32.239372015 CEST	192.168.2.6	1.1.1.1	0x2034	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:33.341351986 CEST	192.168.2.6	1.1.1.1	0xd458	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:33.341528893 CEST	192.168.2.6	1.1.1.1	0x134e	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:33.802500963 CEST	192.168.2.6	1.1.1.1	0xee28	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:33.802917004 CEST	192.168.2.6	1.1.1.1	0xe80f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:33.804056883 CEST	192.168.2.6	1.1.1.1	0xcf0b	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:33.804471016 CEST	192.168.2.6	1.1.1.1	0x38c7	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Sep 25, 2024 01:37:34.714497089 CEST	192.168.2.6	1.1.1.1	0xe359	Standard query (0)	cdn.discordapp.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:34.715048075 CEST	192.168.2.6	1.1.1.1	0xda5	Standard query (0)	cdn.discordapp.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:36.171664953 CEST	192.168.2.6	1.1.1.1	0xf8cb	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:36.172148943 CEST	192.168.2.6	1.1.1.1	0xb559	Standard query (0)	play.google.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:36.181660891 CEST	192.168.2.6	1.1.1.1	0x6fc4	Standard query (0)	cdn.discordapp.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:36.182138920 CEST	192.168.2.6	1.1.1.1	0x346d	Standard query (0)	cdn.discordapp.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:46.389553070 CEST	192.168.2.6	1.1.1.1	0x6fa5	Standard query (0)	support.discord.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:46.392035961 CEST	192.168.2.6	1.1.1.1	0x1a8e	Standard query (0)	support.discord.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:48.258482933 CEST	192.168.2.6	1.1.1.1	0x1716	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:48.258528948 CEST	192.168.2.6	1.1.1.1	0xc74d	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:48.274341106 CEST	192.168.2.6	1.1.1.1	0x2511	Standard query (0)	support.discord.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:48.274341106 CEST	192.168.2.6	1.1.1.1	0x9f73	Standard query (0)	support.discord.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:49.090504885 CEST	192.168.2.6	1.1.1.1	0xf758	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:49.091381073 CEST	192.168.2.6	1.1.1.1	0x2aea	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Sep 25, 2024 01:37:49.098598003 CEST	192.168.2.6	1.1.1.1	0x22f2	Standard query (0)	challenges.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:37:49.098967075 CEST	192.168.2.6	1.1.1.1	0x5564	Standard query (0)	challenges.cloudflare.com	65	IN (0x0001)	false
Sep 25, 2024 01:38:11.759742022 CEST	192.168.2.6	1.1.1.1	0xfe1	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:38:11.760231018 CEST	192.168.2.6	1.1.1.1	0x7108	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 25, 2024 01:38:11.761063099 CEST	192.168.2.6	1.1.1.1	0xec43	Standard query (0)	a.nel.cloudflare.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:38:11.761446953 CEST	192.168.2.6	1.1.1.1	0xd7e7	Standard query (0)	a.nel.cloudflare.com	65	IN (0x0001)	false
Sep 25, 2024 01:38:17.049267054 CEST	192.168.2.6	1.1.1.1	0xb161	Standard query (0)	global.localizecdn.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:38:17.049711943 CEST	192.168.2.6	1.1.1.1	0x3fa1	Standard query (0)	global.localizecdn.com	65	IN (0x0001)	false
Sep 25, 2024 01:38:17.884465933 CEST	192.168.2.6	1.1.1.1	0xd895	Standard query (0)	global.localizecdn.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:38:17.884872913 CEST	192.168.2.6	1.1.1.1	0xa75d	Standard query (0)	global.localizecdn.com	65	IN (0x0001)	false
Sep 25, 2024 01:38:25.421614885 CEST	192.168.2.6	1.1.1.1	0x2bea	Standard query (0)	discord.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:38:25.421832085 CEST	192.168.2.6	1.1.1.1	0x1c52	Standard query (0)	discord.com	65	IN (0x0001)	false
Sep 25, 2024 01:38:25.536950111 CEST	192.168.2.6	1.1.1.1	0x82ef	Standard query (0)	cdn.prod.website-files.com	A (IP address)	IN (0x0001)	false
Sep 25, 2024 01:38:25.537163973 CEST	192.168.2.6	1.1.1.1	0xecba	Standard query (0)	cdn.prod.website-files.com	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-09-24 23:37:00 UTC	71	OUT	Data Raw: 43 4e 54 20 31 20 43 4f 4e 20 33 30 35 0d 0a 4d 53 2d 43 56 3a 20 59 49 59 69 54 55 35 58 76 6b 69 6d 39 77 51 4a 2e 31 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 61 66 31 39 30 34 39 33 31 39 33 33 61 32 38 0d 0a 0d 0a Data Ascii: CNT 1 CON 305MS-CV: YIYiTU5Xvkim9wQJ.1Context: faf1904931933a28
2024-09-24 23:37:00 UTC	249	OUT	Data Raw: 3c 63 6f 6e 6e 65 63 74 3e 3c 76 65 72 3e 32 3c 2f 76 65 72 3e 3c 61 67 65 6e 74 3e 3c 6f 73 3e 57 69 6e 64 6f 77 73 3c 2f 6f 73 3e 3c 6f 73 56 65 72 3e 31 30 2e 30 2e 30 2e 30 2e 31 39 30 34 35 3c 2f 6f 73 56 65 72 3e 3c 70 72 6f 63 3e 78 36 34 3c 2f 70 72 6f 63 3e 3c 6c 63 69 64 3e 65 6e 2d 43 48 3c 2f 6c 63 69 64 3e 3c 67 65 6f 49 64 3e 32 32 33 3c 2f 67 65 6f 49 64 3e 3c 61 6f 61 63 3e 30 3c 2f 61 6f 61 63 3e 3c 64 65 76 69 63 65 54 79 70 65 3e 31 3c 2f 64 65 76 69 63 65 54 79 70 65 3e 3c 64 65 76 69 63 65 4e 61 6d 65 3e 56 4d 77 61 72 65 32 30 2c 31 3c 2f 64 65 76 69 63 65 4e 61 6d 65 3e 3c 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 74 72 75 65 3c 2f 66 6f 6c 6c 6f 77 52 65 74 72 79 3e 3c 2f 61 67 65 6e 74 3e 3c 2f 63 6f 6e 6e 65 63 74 3e Data Ascii: <connect><ver>2</ver><agent><os>Windows</os><osVer>10.0.0.0.19045</osVer><proc>x64</proc><lcid>en-CH</lcid><geoId>223</geoId><aoac>0</aoac><deviceType>1</deviceType><deviceName>VMware20,1</deviceName><followRetry>true</followRetry></agent></connect>
2024-09-24 23:37:00 UTC	1084	OUT	Data Raw: 41 54 48 20 32 20 43 4f 4e 5c 44 45 56 49 43 45 20 31 30 36 31 0d 0a 4d 53 2d 43 56 3a 20 59 49 59 69 54 55 35 58 76 6b 69 6d 39 77 51 4a 2e 32 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 61 66 31 39 30 34 39 33 31 39 33 33 61 32 38 0d 0a 0d 0a 3c 64 65 76 69 63 65 3e 3c 63 6f 6d 70 61 63 74 2d 74 69 63 6b 65 74 3e 74 3d 45 77 43 34 41 75 70 49 42 41 41 55 31 62 44 47 66 64 61 7a 69 44 66 58 70 6a 4e 35 4e 36 63 59 68 54 31 77 62 6d 51 41 41 51 48 4e 59 77 2b 38 4f 76 78 38 41 70 53 57 4b 4c 57 4a 6a 47 43 48 58 71 53 6d 41 47 67 2b 73 7a 70 37 56 74 52 38 54 63 43 56 47 49 44 54 30 63 70 33 2b 4b 50 58 41 58 53 53 56 4e 36 58 49 70 41 70 35 48 35 30 6a 78 6c 5a 45 47 57 62 4d 34 6f 71 56 30 4a 53 6f 72 33 54 62 53 58 46 79 4b 52 4c 66 4c 31 50 6a 39 64 5a 34 61 Data Ascii: ATH 2 CON\DEVICE 1061MS-CV: YIYiTU5Xvkim9wQJ.2Context: faf1904931933a28<device><compact-ticket>t=EwC4AupIBAAU1bDGfdaziDfXpjN5N6cYhT1wbmQAAQHNYw+8Ovx8ApSWKLWJjGCHXqSmAGg+szp7VtR8TcCVGIDT0cp3+KPXAXSSVN6XIpAp5H50jxlZEGWbM4oqV0JSor3TbSXFyKRLfL1Pj9dZ4a
2024-09-24 23:37:00 UTC	218	OUT	Data Raw: 42 4e 44 20 33 20 43 4f 4e 5c 57 4e 53 20 30 20 31 39 37 0d 0a 4d 53 2d 43 56 3a 20 59 49 59 69 54 55 35 58 76 6b 69 6d 39 77 51 4a 2e 33 0d 0a 43 6f 6e 74 65 78 74 3a 20 66 61 66 31 39 30 34 39 33 31 39 33 33 61 32 38 0d 0a 0d 0a 3c 77 6e 73 3e 3c 76 65 72 3e 31 3c 2f 76 65 72 3e 3c 63 6c 69 65 6e 74 3e 3c 6e 61 6d 65 3e 57 50 4e 3c 2f 6e 61 6d 65 3e 3c 76 65 72 3e 31 2e 30 3c 2f 76 65 72 3e 3c 2f 63 6c 69 65 6e 74 3e 3c 6f 70 74 69 6f 6e 73 3e 3c 70 77 72 6d 6f 64 65 20 6d 6f 64 65 3d 22 30 22 3e 3c 2f 70 77 72 6d 6f 64 65 3e 3c 2f 6f 70 74 69 6f 6e 73 3e 3c 6c 61 73 74 4d 73 67 49 64 3e 30 3c 2f 6c 61 73 74 4d 73 67 49 64 3e 3c 2f 77 6e 73 3e Data Ascii: BND 3 CON\WNS 0 197MS-CV: YIYiTU5Xvkim9wQJ.3Context: faf1904931933a28<wns><ver>1</ver><client><name>WPN</name><ver>1.0</ver></client><options><pwrmode mode="0"></pwrmode></options><lastMsgId>0</lastMsgId></wns>
2024-09-24 23:37:01 UTC	14	IN	Data Raw: 32 30 32 20 31 20 43 4f 4e 20 35 38 0d 0a Data Ascii: 202 1 CON 58
2024-09-24 23:37:01 UTC	58	IN	Data Raw: 4d 53 2d 43 56 3a 20 43 34 50 63 63 34 71 32 77 45 71 62 32 2f 59 56 7a 31 67 70 2f 51 2e 30 0d 0a 0d 0a 50 61 79 6c 6f 61 64 20 70 61 72 73 69 6e 67 20 66 61 69 6c 65 64 2e Data Ascii: MS-CV: C4Pcc4q2wEqb2/YVz1gp/Q.0Payload parsing failed.

Timestamp	Bytes transferred	Direction	Data
2024-09-24 23:37:02 UTC	671	OUT	GET /acknowledgements HTTP/1.1 Host: mj.ostep.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-24 23:37:03 UTC	3463	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 24 Sep 2024 23:37:03 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding CF-Ray: 8c8699a1dd990fff-LAX CF-Cache-Status: HIT Accept-Ranges: bytes Cache-Control: no-cache Last-Modified: Tue, 24 Sep 2024 23:21:24 GMT Set-Cookie: __dcfduid=e6c6d7507acd11efbdb81fb86a55f4b0; Expires=Sun, 23 Sep 2029 23:37:03 GMT; Max-Age=157680000; Path=/; Secure; HttpOnly; SameSite=Lax Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Security-Policy: default-src 'self'; script-src 'self' 'unsafe-inline' 'nonce-NjAsNTcsMTgsMTU5LDEwNCwyMzYsMzUsMTA4' https://discord.com https://www.googletagmanager.com https://connect.facebook.net https://www.google-analytics.com https://ssl.google-analytics.com https://www.gstatic.com/recaptcha/ https://www.google.com/recaptcha/ https://recaptcha.net/recaptcha/ https://hcaptcha.com https://.hcaptcha.com https://s.ytimg.com/yts/jsbin/ https://www.youtube.com/iframe_api https://www.youtube.com/s/player/ https://geolocation.onetrust.com/cookieconsentpub/v1/geo/location; style-src 'self' 'unsafe-inline' https://fonts.googleapis.com https://.hcaptcha.com https://hcaptcha.com; img-src 'self' https://www.google-analytics.com https://www.googletagmanager.com https://www.facebook.com https://cdn.discordapp.com https://hackerone-api.discord.workers.dev/user-avatars/ https://safety.discord.com https://discordmoderatoracademy.zendesk.com https://assets-global.website-files.com data:; font-src 'self' https://f [TRUNCATED] Permissions-Policy: interest-cohort=() X-Build-Id: 338c3cab08f6da9c6217af24d25ed610481180a2 X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qvwBR3cZiECqDoFiEX54TvCc%2BNSD1tQSwdcPNBtYPZmyHnJ43GjLMoIwiEVZ2OC9Vqry8qJuOPEvHniKWwh8NttpqotZzSq7B%2BrQErsvVv%2BTkmRRz7E1uuMjYuP8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Set-Cookie: __sdcfduid=e6c6d7517acd11efbdb81fb86a55f4b0c0145390fe123d93b256cce9770e837ae48d2aed4c2e99f987605e3678587816; Expires=Sun, 23 Sep 2029 23:37:03 GMT; Max-Age=157680000; Path=/; Secure; HttpOnly; SameSite=Lax Set-Cookie: __cfruid=0b863d3a15b45cafaa4a6c43d13c1508d3f348bc-1727221023; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=NtZPovmaPsQl0crItvS4kHAyPJYmmoP4_pE4ZAdRN.A-1727221023050-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None X-Cache: MISS Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache
2024-09-24 23:37:03 UTC	12921	IN	Data Raw: 39 64 35 66 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 2d 73 69 74 65 2d 76 65 72 69 66 69 63 61 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 75 62 51 38 33 6b 7a 32 59 59 52 72 6c 65 4a 61 59 66 5f 43 59 62 76 44 5a 36 6c 58 56 6c 2d 4e 4c 5f 4d 57 58 31 55 6a 39 59 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6d 73 76 61 6c 69 64 61 74 65 2e 30 31 22 20 63 6f 6e 74 65 6e 74 3d 22 33 33 30 44 43 39 30 34 38 34 41 34 42 37 42 36 31 42 33 36 41 44 36 35 45 38 39 42 34 37 41 45 22 20 2f 3e 0a 20 20 3c 6d 65 74 61 20 Data Ascii: 9d5f<!DOCTYPE html><html lang="en-US"><head> <meta charset="utf-8" /> <meta name="google-site-verification" content="nubQ83kz2YYRrleJaYf_CYbvDZ6lXVl-NL_MWX1Uj9Y" /> <meta name="msvalidate.01" content="330DC90484A4B7B61B36AD65E89B47AE" /> <meta
2024-09-24 23:37:03 UTC	16384	IN	Data Raw: 37 33 20 34 37 2e 35 34 38 35 20 31 32 2e 38 37 33 48 34 35 2e 34 38 37 31 56 31 38 2e 36 38 35 32 48 34 37 2e 33 31 36 5a 22 3e 3c 2f 70 61 74 68 3e 3c 70 61 74 68 20 64 3d 22 4d 36 35 2e 34 33 36 32 20 32 31 2e 36 37 37 34 43 36 34 2e 35 32 31 37 20 32 31 2e 34 34 34 39 20 36 33 2e 37 30 30 33 20 32 31 2e 31 30 33 39 20 36 32 2e 39 37 31 38 20 32 30 2e 36 33 38 39 56 31 37 2e 38 33 33 35 43 36 33 2e 35 32 39 38 20 31 38 2e 32 36 37 35 20 36 34 2e 32 35 38 32 20 31 38 2e 36 30 38 35 20 36 35 2e 31 38 38 32 20 31 38 2e 38 38 37 35 43 36 36 2e 31 31 38 31 20 31 39 2e 31 36 36 35 20 36 37 2e 30 31 37 31 20 31 39 2e 33 30 36 20 36 37 2e 38 38 35 31 20 31 39 2e 33 30 36 43 36 38 2e 32 38 38 20 31 39 2e 33 30 36 20 36 38 2e 35 39 38 20 31 39 2e 32 35 39 35 20 Data Ascii: 73 47.5485 12.873H45.4871V18.6852H47.316Z"></path><path d="M65.4362 21.6774C64.5217 21.4449 63.7003 21.1039 62.9718 20.6389V17.8335C63.5298 18.2675 64.2582 18.6085 65.1882 18.8875C66.1181 19.1665 67.0171 19.306 67.8851 19.306C68.288 19.306 68.598 19.2595
2024-09-24 23:37:03 UTC	10995	IN	Data Raw: 3d 22 74 65 78 74 2d 32 48 35 46 6e 50 20 74 65 78 74 53 6d 61 6c 6c 2d 52 6d 36 2d 59 73 22 3e 47 61 6d 69 6e 67 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 61 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 2d 31 6e 61 46 46 4c 20 6c 69 6e 6b 44 65 66 61 75 6c 74 2d 33 71 37 34 5f 58 20 6e 61 76 4c 69 6e 6b 2d 33 33 64 51 78 33 22 20 68 72 65 66 3d 22 2f 71 75 65 73 74 73 22 3e 3c 73 70 61 6e 20 63 6c 61 73 73 3d 22 74 65 78 74 2d 32 48 35 46 6e 50 20 74 65 78 74 53 6d 61 6c 6c 2d 52 6d 36 2d 59 73 22 3e 51 75 65 73 74 73 3c 2f 73 70 61 6e 3e 3c 2f 61 3e 3c 61 20 63 6c 61 73 73 3d 22 6c 69 6e 6b 2d 31 6e 61 46 46 4c 20 6c 69 6e 6b 44 65 66 61 75 6c 74 2d 33 71 37 34 5f 58 20 6e 61 76 4c 69 6e 6b 2d 33 33 64 51 78 33 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 69 73 Data Ascii: ="text-2H5FnP textSmall-Rm6-Ys">Gaming</span></a><a class="link-1naFFL linkDefault-3q74_X navLink-33dQx3" href="/quests"><span class="text-2H5FnP textSmall-Rm6-Ys">Quests</span></a><a class="link-1naFFL linkDefault-3q74_X navLink-33dQx3" href="https://dis

Timestamp	Bytes transferred	Direction	Data
2024-09-24 23:37:03 UTC	735	OUT	GET /assets/532.423e048cce31881cf30d.css HTTP/1.1 Host: mj.ostep.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mj.ostep.net/acknowledgements Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __dcfduid=e6c6d7507acd11efbdb81fb86a55f4b0; __sdcfduid=e6c6d7517acd11efbdb81fb86a55f4b0c0145390fe123d93b256cce9770e837ae48d2aed4c2e99f987605e3678587816
2024-09-24 23:37:03 UTC	1326	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 24 Sep 2024 23:37:03 GMT Content-Type: text/css Content-Length: 425514 Connection: close Vary: Accept-Encoding CF-Ray: 8c8699a3f9450fe3-LAX CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: https://discord.com Cache-Control: public, max-age=2592000 ETag: "fbc6904cf91b5d9cc70f0d60914691e1" Last-Modified: Tue, 24 Sep 2024 23:21:21 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=DyRhZ07qksNLdUQcxd1aFsSjl7Ex54s0ybhvGrW5Tb0lKIyrtZtxniXJ82QdYZxrtxaaO9jrQ%2FTAXMtSIcbdx0Vz06hVkKADoBH5kVgF%2FbxYxYrOwNZOqlR6sFnf"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=0b863d3a15b45cafaa4a6c43d13c1508d3f348bc-1727221023; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=XF.K.KD07hYmUkNh0.NyFshsJNzJ1CTprYvpNKw86.Y-1727221023377-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None X-Cache: MISS Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache
2024-09-24 23:37:03 UTC	15058	IN	Data Raw: 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 50 72 65 73 73 2b 53 74 61 72 74 2b 32 50 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 50 72 65 73 73 2b 53 74 61 72 74 2b 32 50 29 3b 0a 40 69 6d 70 6f 72 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 6f 6f 67 6c 65 61 70 69 73 2e 63 6f 6d 2f 63 73 73 3f 66 61 6d 69 6c 79 3d 50 72 65 73 73 2b 53 74 61 72 74 2b 32 50 29 3b 0a 2e 62 75 74 74 6f 6e 2d 5a 47 4d 65 76 4b 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 34 70 Data Ascii: @import url(https://fonts.googleapis.com/css?family=Press+Start+2P);@import url(https://fonts.googleapis.com/css?family=Press+Start+2P);@import url(https://fonts.googleapis.com/css?family=Press+Start+2P);.button-ZGMevK{border-radius:50%;line-height:24p
2024-09-24 23:37:03 UTC	16384	IN	Data Raw: 6e 3a 63 65 6e 74 65 72 3b 2d 6d 73 2d 66 6c 65 78 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 70 61 64 64 69 6e 67 3a 38 70 78 20 31 36 70 78 3b 63 6f 6c 6f 72 3a 23 32 33 32 37 32 61 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 6e 6f 74 2d 71 75 69 74 65 2d 62 6c 61 63 6b 29 7d 2e 6c 69 6e 6b 41 63 74 69 76 65 2d 35 6c 41 78 62 4f 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 36 66 36 66 36 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 6f 66 66 2d 77 68 69 74 65 29 3b 63 6f 6c 6f 72 3a 23 30 30 62 30 66 34 3b 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 74 65 78 74 2d 6c 69 6e 6b 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 38 70 78 7d 2e 63 61 72 65 74 2d 67 63 46 77 39 41 7b 2d 77 65 62 6b 69 74 2d 74 72 Data Ascii: n:center;-ms-flex-align:center;align-items:center;padding:8px 16px;color:#23272a;color:var(--not-quite-black)}.linkActive-5lAxbO{background:#f6f6f6;background:var(--off-white);color:#00b0f4;color:var(--text-link);border-radius:8px}.caret-gcFw9A{-webkit-tr
2024-09-24 23:37:03 UTC	16384	IN	Data Raw: 2d 68 73 6c 3a 30 20 63 61 6c 63 28 76 61 72 28 2d 2d 73 61 74 75 72 61 74 69 6f 6e 2d 66 61 63 74 6f 72 2c 20 31 29 2a 30 25 29 20 36 30 25 3b 2d 2d 62 6c 61 63 6b 2d 33 33 30 3a 68 73 6c 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 33 33 30 2d 68 73 6c 29 2f 31 29 3b 2d 2d 62 6c 61 63 6b 2d 33 33 30 2d 68 73 6c 3a 30 20 63 61 6c 63 28 76 61 72 28 2d 2d 73 61 74 75 72 61 74 69 6f 6e 2d 66 61 63 74 6f 72 2c 20 31 29 2a 30 25 29 20 34 37 2e 38 25 3b 2d 2d 62 6c 61 63 6b 2d 33 34 35 3a 68 73 6c 28 76 61 72 28 2d 2d 62 6c 61 63 6b 2d 33 34 35 2d 68 73 6c 29 2f 31 29 3b 2d 2d 62 6c 61 63 6b 2d 33 34 35 2d 68 73 6c 3a 30 20 63 61 6c 63 28 76 61 72 28 2d 2d 73 61 74 75 72 61 74 69 6f 6e 2d 66 61 63 74 6f 72 2c 20 31 29 2a 30 25 29 20 34 30 25 3b 2d 2d 62 6c 61 63 6b Data Ascii: -hsl:0 calc(var(--saturation-factor, 1)0%) 60%;--black-330:hsl(var(--black-330-hsl)/1);--black-330-hsl:0 calc(var(--saturation-factor, 1)0%) 47.8%;--black-345:hsl(var(--black-345-hsl)/1);--black-345-hsl:0 calc(var(--saturation-factor, 1)*0%) 40%;--black
2024-09-24 23:37:03 UTC	16384	IN	Data Raw: 75 6d 2d 31 38 2d 68 73 6c 3a 32 33 33 20 63 61 6c 63 28 76 61 72 28 2d 2d 73 61 74 75 72 61 74 69 6f 6e 2d 66 61 63 74 6f 72 2c 20 31 29 2a 31 30 2e 36 25 29 20 31 36 2e 37 25 3b 2d 2d 70 6c 75 6d 2d 31 39 3a 68 73 6c 28 76 61 72 28 2d 2d 70 6c 75 6d 2d 31 39 2d 68 73 6c 29 2f 31 29 3b 2d 2d 70 6c 75 6d 2d 31 39 2d 68 73 6c 3a 32 33 33 20 63 61 6c 63 28 76 61 72 28 2d 2d 73 61 74 75 72 61 74 69 6f 6e 2d 66 61 63 74 6f 72 2c 20 31 29 2a 31 30 2e 38 25 29 20 31 34 2e 35 25 3b 2d 2d 70 6c 75 6d 2d 32 3a 68 73 6c 28 76 61 72 28 2d 2d 70 6c 75 6d 2d 32 2d 68 73 6c 29 2f 31 29 3b 2d 2d 70 6c 75 6d 2d 32 2d 68 73 6c 3a 32 32 30 20 63 61 6c 63 28 76 61 72 28 2d 2d 73 61 74 75 72 61 74 69 6f 6e 2d 66 61 63 74 6f 72 2c 20 31 29 2a 38 2e 36 25 29 20 39 33 2e 31 25 Data Ascii: um-18-hsl:233 calc(var(--saturation-factor, 1)10.6%) 16.7%;--plum-19:hsl(var(--plum-19-hsl)/1);--plum-19-hsl:233 calc(var(--saturation-factor, 1)10.8%) 14.5%;--plum-2:hsl(var(--plum-2-hsl)/1);--plum-2-hsl:220 calc(var(--saturation-factor, 1)*8.6%) 93.1%
2024-09-24 23:37:03 UTC	16384	IN	Data Raw: 72 61 74 69 6f 6e 2d 66 61 63 74 6f 72 2c 20 31 29 2a 36 33 2e 35 25 29 20 33 38 2e 36 25 3b 2d 2d 74 65 61 6c 2d 34 33 30 3a 68 73 6c 28 76 61 72 28 2d 2d 74 65 61 6c 2d 34 33 30 2d 68 73 6c 29 2f 31 29 3b 2d 2d 74 65 61 6c 2d 34 33 30 2d 68 73 6c 3a 31 39 30 20 63 61 6c 63 28 76 61 72 28 2d 2d 73 61 74 75 72 61 74 69 6f 6e 2d 66 61 63 74 6f 72 2c 20 31 29 2a 36 33 25 29 20 33 33 2e 39 25 3b 2d 2d 74 65 61 6c 2d 34 36 30 3a 68 73 6c 28 76 61 72 28 2d 2d 74 65 61 6c 2d 34 36 30 2d 68 73 6c 29 2f 31 29 3b 2d 2d 74 65 61 6c 2d 34 36 30 2d 68 73 6c 3a 31 39 31 20 63 61 6c 63 28 76 61 72 28 2d 2d 73 61 74 75 72 61 74 69 6f 6e 2d 66 61 63 74 6f 72 2c 20 31 29 2a 36 34 2e 32 25 29 20 32 39 2e 36 25 3b 2d 2d 74 65 61 6c 2d 35 30 30 3a 68 73 6c 28 76 61 72 28 2d Data Ascii: ration-factor, 1)63.5%) 38.6%;--teal-430:hsl(var(--teal-430-hsl)/1);--teal-430-hsl:190 calc(var(--saturation-factor, 1)63%) 33.9%;--teal-460:hsl(var(--teal-460-hsl)/1);--teal-460-hsl:191 calc(var(--saturation-factor, 1)*64.2%) 29.6%;--teal-500:hsl(var(-
2024-09-24 23:37:03 UTC	16384	IN	Data Raw: 72 74 65 72 2d 6d 6f 64 61 6c 2d 73 75 62 6d 69 74 74 69 6e 67 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 28 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 38 30 30 2d 68 73 6c 29 2f 30 2e 36 29 3b 2d 2d 62 75 67 2d 72 65 70 6f 72 74 65 72 2d 6d 6f 64 61 6c 2d 73 75 62 6d 69 74 74 69 6e 67 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 63 6f 6c 6f 72 2d 6d 69 78 28 69 6e 20 6f 6b 6c 61 62 2c 68 73 6c 28 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 38 30 30 2d 68 73 6c 29 2f 30 2e 36 29 20 31 30 30 25 2c 68 73 6c 28 76 61 72 28 2d 2d 74 68 65 6d 65 2d 62 61 73 65 2d 63 6f 6c 6f 72 2d 68 73 6c 2c 30 20 30 25 20 30 25 29 2f 30 2e 36 29 20 76 61 72 28 2d 2d 74 68 65 6d 65 2d 62 61 73 65 2d 63 6f 6c 6f 72 2d 61 6d 6f 75 6e 74 2c 30 25 29 29 3b 2d 2d 62 75 74 74 6f 6e 2d 63 72 Data Ascii: rter-modal-submitting-background:hsl(var(--primary-800-hsl)/0.6);--bug-reporter-modal-submitting-background:color-mix(in oklab,hsl(var(--primary-800-hsl)/0.6) 100%,hsl(var(--theme-base-color-hsl,0 0% 0%)/0.6) var(--theme-base-color-amount,0%));--button-cr
2024-09-24 23:37:03 UTC	16384	IN	Data Raw: 72 69 6d 61 72 79 2d 32 33 30 29 20 31 30 30 25 2c 76 61 72 28 2d 2d 74 68 65 6d 65 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 23 30 30 30 29 20 76 61 72 28 2d 2d 74 68 65 6d 65 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 61 6d 6f 75 6e 74 2c 30 25 29 29 3b 2d 2d 69 6e 74 65 72 61 63 74 69 76 65 2d 6d 75 74 65 64 3a 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 35 30 30 29 3b 2d 2d 69 6e 74 65 72 61 63 74 69 76 65 2d 6d 75 74 65 64 3a 63 6f 6c 6f 72 2d 6d 69 78 28 69 6e 20 6f 6b 6c 61 62 2c 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 35 30 30 29 20 31 30 30 25 2c 76 61 72 28 2d 2d 74 68 65 6d 65 2d 74 65 78 74 2d 63 6f 6c 6f 72 2c 23 30 30 30 29 20 76 61 72 28 2d 2d 74 68 65 6d 65 2d 74 65 78 74 2d 63 6f 6c 6f 72 2d 61 6d 6f 75 6e 74 2c 30 25 29 29 3b 2d 2d 69 6e 74 65 72 61 Data Ascii: rimary-230) 100%,var(--theme-text-color,#000) var(--theme-text-color-amount,0%));--interactive-muted:var(--primary-500);--interactive-muted:color-mix(in oklab,var(--primary-500) 100%,var(--theme-text-color,#000) var(--theme-text-color-amount,0%));--intera
2024-09-24 23:37:03 UTC	16384	IN	Data Raw: 64 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 63 6f 6c 6f 72 2d 6d 69 78 28 69 6e 20 6f 6b 6c 61 62 2c 68 73 6c 28 76 61 72 28 2d 2d 62 72 61 6e 64 2d 35 30 30 2d 68 73 6c 29 2f 30 2e 32 34 29 20 31 30 30 25 2c 68 73 6c 28 76 61 72 28 2d 2d 74 68 65 6d 65 2d 62 61 73 65 2d 63 6f 6c 6f 72 2d 68 73 6c 2c 30 20 30 25 20 30 25 29 2f 30 2e 32 34 29 20 76 61 72 28 2d 2d 74 68 65 6d 65 2d 62 61 73 65 2d 63 6f 6c 6f 72 2d 61 6d 6f 75 6e 74 2c 30 25 29 29 3b 2d 2d 72 65 64 65 73 69 67 6e 2d 62 75 74 74 6f 6e 2d 73 65 6c 65 63 74 65 64 2d 70 72 65 73 73 65 64 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 28 76 61 72 28 2d 2d 62 72 61 6e 64 2d 35 30 30 2d 68 73 6c 29 2f 30 2e 32 38 29 3b 2d 2d 72 65 64 65 73 69 67 6e 2d 62 75 74 74 6f 6e 2d 73 65 6c 65 63 74 65 64 2d 70 72 Data Ascii: d-background:color-mix(in oklab,hsl(var(--brand-500-hsl)/0.24) 100%,hsl(var(--theme-base-color-hsl,0 0% 0%)/0.24) var(--theme-base-color-amount,0%));--redesign-button-selected-pressed-background:hsl(var(--brand-500-hsl)/0.28);--redesign-button-selected-pr
2024-09-24 23:37:03 UTC	16384	IN	Data Raw: 65 2d 73 65 63 6f 6e 64 61 72 79 3a 76 61 72 28 2d 2d 77 68 69 74 65 29 3b 2d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6d 6f 62 69 6c 65 2d 73 65 63 6f 6e 64 61 72 79 3a 63 6f 6c 6f 72 2d 6d 69 78 28 69 6e 20 6f 6b 6c 61 62 2c 76 61 72 28 2d 2d 77 68 69 74 65 29 20 31 30 30 25 2c 76 61 72 28 2d 2d 74 68 65 6d 65 2d 62 61 73 65 2d 63 6f 6c 6f 72 2c 23 30 30 30 29 20 76 61 72 28 2d 2d 74 68 65 6d 65 2d 62 61 73 65 2d 63 6f 6c 6f 72 2d 61 6d 6f 75 6e 74 2c 30 25 29 29 3b 2d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6d 6f 64 69 66 69 65 72 2d 61 63 63 65 6e 74 3a 68 73 6c 28 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 34 30 30 2d 68 73 6c 29 2f 30 2e 32 34 29 3b 2d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 6d 6f 64 69 66 69 65 72 2d 61 63 63 65 6e 74 3a 63 6f 6c 6f 72 2d 6d 69 Data Ascii: e-secondary:var(--white);--background-mobile-secondary:color-mix(in oklab,var(--white) 100%,var(--theme-base-color,#000) var(--theme-base-color-amount,0%));--background-modifier-accent:hsl(var(--primary-400-hsl)/0.24);--background-modifier-accent:color-mi
2024-09-24 23:37:03 UTC	16384	IN	Data Raw: 38 29 20 76 61 72 28 2d 2d 74 68 65 6d 65 2d 62 61 73 65 2d 63 6f 6c 6f 72 2d 61 6d 6f 75 6e 74 2c 30 25 29 29 3b 2d 2d 66 6f 72 75 6d 2d 70 6f 73 74 2d 74 61 67 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 28 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 31 36 30 2d 68 73 6c 29 2f 30 2e 39 29 3b 2d 2d 66 6f 72 75 6d 2d 70 6f 73 74 2d 74 61 67 2d 62 61 63 6b 67 72 6f 75 6e 64 3a 63 6f 6c 6f 72 2d 6d 69 78 28 69 6e 20 6f 6b 6c 61 62 2c 68 73 6c 28 76 61 72 28 2d 2d 70 72 69 6d 61 72 79 2d 31 36 30 2d 68 73 6c 29 2f 30 2e 39 29 20 31 30 30 25 2c 68 73 6c 28 76 61 72 28 2d 2d 74 68 65 6d 65 2d 62 61 73 65 2d 63 6f 6c 6f 72 2d 68 73 6c 2c 30 20 30 25 20 30 25 29 2f 30 2e 39 29 20 76 61 72 28 2d 2d 74 68 65 6d 65 2d 62 61 73 65 2d 63 6f 6c 6f 72 2d 61 6d 6f 75 6e Data Ascii: 8) var(--theme-base-color-amount,0%));--forum-post-tag-background:hsl(var(--primary-160-hsl)/0.9);--forum-post-tag-background:color-mix(in oklab,hsl(var(--primary-160-hsl)/0.9) 100%,hsl(var(--theme-base-color-hsl,0 0% 0%)/0.9) var(--theme-base-color-amoun

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://mj.ostep.net/acknowledgements

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 233

Chrome Cache Entry: 234

Chrome Cache Entry: 235

Chrome Cache Entry: 236

Chrome Cache Entry: 237

Chrome Cache Entry: 238

Chrome Cache Entry: 239

Chrome Cache Entry: 240

Chrome Cache Entry: 241

Chrome Cache Entry: 242

Chrome Cache Entry: 243

Chrome Cache Entry: 244

Chrome Cache Entry: 245

Chrome Cache Entry: 246

Chrome Cache Entry: 247

Chrome Cache Entry: 248

Chrome Cache Entry: 249

Chrome Cache Entry: 250

Chrome Cache Entry: 251

Chrome Cache Entry: 252

Chrome Cache Entry: 253

Chrome Cache Entry: 254

Chrome Cache Entry: 255

Chrome Cache Entry: 256

Chrome Cache Entry: 257

Chrome Cache Entry: 258

Windows Analysis Report
https://mj.ostep.net/acknowledgements

Timestamp	Bytes transferred	Direction	Data
2024-09-24 23:37:03 UTC	733	OUT	GET /assets/oneTrust/v4/scripttemplates/otSDKStub.js HTTP/1.1 Host: mj.ostep.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mj.ostep.net/acknowledgements Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __dcfduid=e6c6d7507acd11efbdb81fb86a55f4b0; __sdcfduid=e6c6d7517acd11efbdb81fb86a55f4b0c0145390fe123d93b256cce9770e837ae48d2aed4c2e99f987605e3678587816
2024-09-24 23:37:04 UTC	1341	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 24 Sep 2024 23:37:04 GMT Content-Type: application/javascript Content-Length: 20606 Connection: close Vary: Accept-Encoding CF-Ray: 8c8699a7fd052b90-LAX CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: https://discord.com Cache-Control: public, max-age=2592000 ETag: "5b2ab40ec5c55209f5747c46875e2061" Last-Modified: Wed, 29 Mar 2023 20:09:36 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tGuuQ7xMws4KtA5%2BbeObIid2Ly8yE5NT3Cozlp9%2FziY7Y5waWPsJ4mcRl786Kvh7DSv58c7UNvLEjZb0oZDCPdmBv%2B0KvUok2qU067o9SIqh8mPqw864sXVwfuTx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=7f4f103b077eb04bb6f661033d42180884aa8335-1727221024; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=.1WKZXOaZdFrq9EYvUeU03xQCyb95EOXNHvFoYMGlR0-1727221024028-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None X-Cache: MISS Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache
2024-09-24 23:37:04 UTC	15043	IN	Data Raw: 76 61 72 20 4f 6e 65 54 72 75 73 74 53 74 75 62 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 2c 6f 2c 6e 2c 69 2c 61 2c 72 2c 73 2c 6c 2c 63 2c 70 2c 75 2c 64 2c 6d 2c 68 2c 67 2c 66 2c 41 2c 62 2c 79 2c 76 2c 43 2c 53 2c 49 2c 4c 2c 44 2c 54 2c 52 2c 77 2c 42 2c 50 2c 5f 2c 45 2c 55 2c 47 2c 4f 2c 6b 2c 46 2c 56 2c 4e 2c 78 2c 4d 2c 48 2c 6a 2c 7a 2c 4b 2c 71 2c 57 2c 4a 2c 59 2c 51 2c 58 2c 5a 2c 24 2c 65 65 2c 74 65 2c 6f 65 2c 6e 65 2c 69 65 3d 6e 65 77 20 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 43 6f 6f 6b 69 65 4e 61 6d 65 3d 22 4f 70 74 61 6e 6f 6e 43 6f 6e 73 65 6e 74 22 2c 74 68 69 73 2e 6f 70 74 61 6e 6f 6e 48 74 6d 6c 47 72 6f 75 70 44 61 74 61 3d 5b 5d 2c 74 68 69 73 Data Ascii: var OneTrustStub=function(e){"use strict";var t,o,n,i,a,r,s,l,c,p,u,d,m,h,g,f,A,b,y,v,C,S,I,L,D,T,R,w,B,P,_,E,U,G,O,k,F,V,N,x,M,H,j,z,K,q,W,J,Y,Q,X,Z,$,ee,te,oe,ne,ie=new function(){this.optanonCookieName="OptanonConsent",this.optanonHtmlGroupData=[],this
2024-09-24 23:37:04 UTC	5563	IN	Data Raw: 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 76 61 72 20 6f 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 72 65 2c 22 65 78 70 69 72 79 22 29 2c 6e 3d 74 68 69 73 2e 72 65 61 64 43 6f 6f 6b 69 65 50 61 72 61 6d 28 72 65 2c 61 65 29 3b 74 68 69 73 2e 69 73 52 65 73 65 74 3d 65 7c 7c 6f 26 26 6e 65 77 20 44 61 74 65 28 6f 29 3c 6e 65 77 20 44 61 74 65 2c 74 68 69 73 2e 69 73 50 72 65 76 69 65 77 3d 21 74 68 69 73 2e 69 73 52 65 73 65 74 26 26 28 74 7c 7c 6f 26 26 6e 65 77 20 44 61 74 65 28 6f 29 3e 6e 65 77 20 44 61 74 65 29 2c 74 68 69 73 2e 73 65 74 47 65 6f 50 61 72 61 6d 28 74 68 69 73 2e 67 65 6f 46 72 6f 6d 55 72 6c 7c 7c 6e 29 7d 2c 64 65 2e 70 72 6f 74 6f 74 79 70 65 2e 73 65 74 47 65 6f 50 61 72 61 6d 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: toLowerCase();var o=this.readCookieParam(re,"expiry"),n=this.readCookieParam(re,ae);this.isReset=e\|\|o&&new Date(o)<new Date,this.isPreview=!this.isReset&&(t\|\|o&&new Date(o)>new Date),this.setGeoParam(this.geoFromUrl\|\|n)},de.prototype.setGeoParam=function(

Timestamp	Bytes transferred	Direction	Data
2024-09-24 23:37:03 UTC	789	OUT	GET /assets/779a770c34fcb823a598a7277301adaf.svg HTTP/1.1 Host: mj.ostep.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mj.ostep.net/acknowledgements Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __dcfduid=e6c6d7507acd11efbdb81fb86a55f4b0; __sdcfduid=e6c6d7517acd11efbdb81fb86a55f4b0c0145390fe123d93b256cce9770e837ae48d2aed4c2e99f987605e3678587816
2024-09-24 23:37:04 UTC	1307	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 24 Sep 2024 23:37:04 GMT Content-Type: image/svg+xml Content-Length: 179 Connection: close CF-Ray: 8c8699a80d3078e0-LAX CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: https://discord.com Cache-Control: public, max-age=2592000 ETag: "779a770c34fcb823a598a7277301adaf" Last-Modified: Wed, 29 Mar 2023 20:09:32 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3%2Buyt3Rg5iCYtE8l%2Bb%2FaIw5bLHvNvJjr1U0hOkjDjFEnqSVklsKXbEcpOpXAb0pvXvWTT15jmWrtw7DGnXYOJ5vCjsS4xsbS5MQydr3ureq8JX7wJaXVuvRXIh0V"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=7f4f103b077eb04bb6f661033d42180884aa8335-1727221024; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=i1CwBRuNhtPxE8FVl_RHWGzHURmU2BstXiWezVU22Lw-1727221024034-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None X-Cache: MISS Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache
2024-09-24 23:37:04 UTC	179	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 37 22 20 68 65 69 67 68 74 3d 22 35 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 37 76 35 48 30 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 6c 33 2e 34 38 38 20 32 2e 37 33 37 4c 36 2e 39 37 35 20 31 22 20 73 74 72 6f 6b 65 3d 22 23 46 46 46 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: <svg width="7" height="5" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M0 0h7v5H0z"/><path d="M0 1l3.488 2.737L6.975 1" stroke="#FFF"/></g></svg>

Timestamp	Bytes transferred	Direction	Data
2024-09-24 23:37:05 UTC	540	OUT	GET /assets/779a770c34fcb823a598a7277301adaf.svg HTTP/1.1 Host: mj.ostep.net Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __dcfduid=e6c6d7507acd11efbdb81fb86a55f4b0; __sdcfduid=e6c6d7517acd11efbdb81fb86a55f4b0c0145390fe123d93b256cce9770e837ae48d2aed4c2e99f987605e3678587816
2024-09-24 23:37:05 UTC	1303	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 24 Sep 2024 23:37:05 GMT Content-Type: image/svg+xml Content-Length: 179 Connection: close CF-Ray: 8c8699afdaec1034-LAX CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: https://discord.com Cache-Control: public, max-age=2592000 ETag: "779a770c34fcb823a598a7277301adaf" Last-Modified: Wed, 29 Mar 2023 20:09:32 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h5tSg981Pq9Yu4iUFTcdyker84D6jeUETGZKlQGmtbNEdaMaFp%2FSumkiudTDpihUgCQIomkY17XuGcSYaVEWVxnpa2hFKfy4HwVEf2AqAPppWfzPcokY72fP9KT9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=0ac61fa81038d7e35bd1ad5f0eb3709fd337006b-1727221025; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=_nqr3CVfUdwPYoSixtyaWm.yPgG6g9Eq6aeZP3pvdBE-1727221025275-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None X-Cache: MISS Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache
2024-09-24 23:37:05 UTC	179	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 37 22 20 68 65 69 67 68 74 3d 22 35 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 3c 67 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 66 69 6c 6c 2d 72 75 6c 65 3d 22 65 76 65 6e 6f 64 64 22 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 30 68 37 76 35 48 30 7a 22 2f 3e 3c 70 61 74 68 20 64 3d 22 4d 30 20 31 6c 33 2e 34 38 38 20 32 2e 37 33 37 4c 36 2e 39 37 35 20 31 22 20 73 74 72 6f 6b 65 3d 22 23 46 46 46 22 2f 3e 3c 2f 67 3e 3c 2f 73 76 67 3e Data Ascii: <svg width="7" height="5" xmlns="http://www.w3.org/2000/svg"><g fill="none" fill-rule="evenodd"><path d="M0 0h7v5H0z"/><path d="M0 1l3.488 2.737L6.975 1" stroke="#FFF"/></g></svg>

Timestamp	Bytes transferred	Direction	Data
2024-09-24 23:37:05 UTC	716	OUT	GET /assets/9658d3734ade853a9e31.js HTTP/1.1 Host: mj.ostep.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mj.ostep.net/acknowledgements Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __dcfduid=e6c6d7507acd11efbdb81fb86a55f4b0; __sdcfduid=e6c6d7517acd11efbdb81fb86a55f4b0c0145390fe123d93b256cce9770e837ae48d2aed4c2e99f987605e3678587816
2024-09-24 23:37:05 UTC	1337	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 24 Sep 2024 23:37:05 GMT Content-Type: text/javascript Content-Length: 4787 Connection: close Vary: Accept-Encoding CF-Ray: 8c8699b09b6bdbdd-LAX CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: https://discord.com Cache-Control: public, max-age=2592000 ETag: "637aa23e8ca67550255ff137271d4dbd" Last-Modified: Tue, 24 Sep 2024 23:21:21 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4NWM1qBL7uxzt80o8fkrTKVpWgKExchSTXo%2Bzsc0r0KIK18xmzmYGVY2p3er%2FkdfgaNpYQDOwNTkYy24HT%2BBBe4VY0ZtDPv9J%2FiBHizN1KT3JG9xAbQ8o%2BL6V3Yv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=0ac61fa81038d7e35bd1ad5f0eb3709fd337006b-1727221025; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=FkH2lw_LtQjAGO7UuvpJrFFgBhOrqwb9ilUSzk68mJ0-1727221025410-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None X-Cache: MISS Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache
2024-09-24 23:37:05 UTC	4787	IN	Data Raw: 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 61 2c 66 2c 72 2c 74 2c 64 3d 7b 7d 2c 63 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 76 61 72 20 61 3d 63 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 61 29 72 65 74 75 72 6e 20 61 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 66 3d 63 5b 65 5d 3d 7b 69 64 3a 65 2c 6c 6f 61 64 65 64 3a 21 31 2c 65 78 70 6f 72 74 73 3a 7b 7d 7d 3b 64 5b 65 5d 2e 63 61 6c 6c 28 66 2e 65 78 70 6f 72 74 73 2c 66 2c 66 2e 65 78 70 6f 72 74 73 2c 6f 29 3b 66 2e 6c 6f 61 64 65 64 3d 21 30 3b 72 65 74 75 72 6e 20 66 2e 65 78 70 6f 72 74 73 7d 6f 2e 6d 3d 64 3b 65 3d 5b 5d 2c 6f 2e 4f 3d 28 61 2c 66 2c 72 2c 74 29 3d 3e 7b 69 66 28 21 66 29 7b 76 61 72 20 64 3d 31 2f 30 3b 66 6f 72 28 69 3d 30 3b 69 Data Ascii: (()=>{"use strict";var e,a,f,r,t,d={},c={};function o(e){var a=c[e];if(void 0!==a)return a.exports;var f=c[e]={id:e,loaded:!1,exports:{}};d[e].call(f.exports,f,f.exports,o);f.loaded=!0;return f.exports}o.m=d;e=[],o.O=(a,f,r,t)=>{if(!f){var d=1/0;for(i=0;i

Timestamp	Bytes transferred	Direction	Data
2024-09-24 23:37:06 UTC	775	OUT	GET /assets/71d3e9dc2bcb8e91225ba9fab588c8f2.woff2 HTTP/1.1 Host: mj.ostep.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mj.ostep.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://mj.ostep.net/assets/532.423e048cce31881cf30d.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __dcfduid=e6c6d7507acd11efbdb81fb86a55f4b0; __sdcfduid=e6c6d7517acd11efbdb81fb86a55f4b0c0145390fe123d93b256cce9770e837ae48d2aed4c2e99f987605e3678587816
2024-09-24 23:37:06 UTC	1306	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 24 Sep 2024 23:37:06 GMT Content-Type: font/woff2 Content-Length: 39764 Connection: close CF-Ray: 8c8699b5cfda31b5-LAX CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: https://discord.com Cache-Control: public, max-age=2592000 ETag: "71d3e9dc2bcb8e91225ba9fab588c8f2" Last-Modified: Fri, 02 Jun 2023 20:46:12 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=EBR8fSAWWJt3suuBkyrMnMFhGju6z7gccP2sabLZsTRMnZp7UKi%2FT%2FcJ1uWOMjcDaN5O3y2Qxf4fvOPTTNn3FvTeKXxDnjWk5FxuYo9MPSPO%2FBzsPH4t2e9ecH5N"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=d1e8eb3034954e239e89f53702e18bb43e71dfde-1727221026; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=WmyhWXwFMtWV1TFxyI3kxdqgZyyMx3wLVz9NIvaFNTU-1727221026241-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None X-Cache: MISS Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache
2024-09-24 23:37:06 UTC	15078	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 9b 54 00 11 00 00 00 01 7d 10 00 00 9a ee 00 02 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 04 1b 81 a6 7a 1c a0 20 06 60 00 8e 50 08 82 44 09 8d 57 11 0c 0a 83 9a 1c 82 de 53 01 36 02 24 03 99 60 0b 8c 72 00 04 20 05 94 06 07 b4 46 0c 83 3d 5b aa 57 91 00 69 72 9f 68 d3 0d 0e ba 0d 01 2c f5 ae a3 2e ff 8a 6a f0 e6 a9 49 6e 1b 58 f6 cf 1f 1b 55 6a 0d 9e 33 a4 df ed 60 4b 5c 74 d0 ec ff ff ff ff f4 a4 22 c3 25 c5 a5 5d 07 00 70 10 cf 45 af b6 dc c3 a8 81 ac b5 a1 47 0e 15 39 26 72 a8 14 ec 53 9b 2b 9a 72 a1 35 1a cf d0 84 cd 7e 60 a7 83 a2 bc ed 53 27 fb 97 31 7e 9e 61 d5 ea 86 48 9d 9f a3 53 88 ae bc 8c 97 b9 1c fe 18 4e ae 74 58 32 47 37 05 75 d5 fc 6d c4 7a a0 21 83 06 89 16 08 be f9 29 ac 77 0a Data Ascii: wOF2T}Bz `PDWS6$`r F=[Wirh,.jInXUj3`K\t"%]pEG9&rS+r5~`S'1~aHSNtX2G7umz!)w
2024-09-24 23:37:06 UTC	16384	IN	Data Raw: e4 e5 fb e3 06 27 b4 2e 78 c4 af 9f 91 16 10 54 17 6d 99 09 aa ef fc 4d 7e be e6 bc 0d 27 07 5e e2 77 d4 b6 a0 45 66 27 9f e1 26 a1 fa 7f f8 81 a5 5c ab 94 b2 ee 28 ea f1 9c 1a ea 5d c6 0d 72 80 74 da d6 9a b0 86 1b 52 33 80 1d fd 2d 54 37 c3 8d ab a6 73 75 53 09 ea 21 d4 85 fc 41 06 90 8b 14 55 ae eb 50 76 dc 12 5e 00 45 e6 bf 12 c8 07 6d 09 9d f3 29 6a a6 24 4a 5a 49 4e 4f d0 bf f6 3f e1 a6 4b 19 26 74 e4 dc 2f 99 9c b6 89 4e 26 77 fe 43 a3 3b 14 8a d8 74 4c 47 38 68 c9 b8 f9 c7 f6 f2 1e 41 f6 7e e5 43 38 b7 df e7 70 64 d4 bd 20 3d e4 23 7c bf 5e a8 ba 00 e2 54 da f5 b0 39 46 dc d9 e3 7d 6b c5 6f 78 75 e8 e4 d6 92 4f 49 e3 69 9c 7e de e3 7a d4 b5 85 7a 3c 36 8e 88 cd d7 c5 3b 86 aa d9 30 bc 90 3b 44 5c 98 f4 65 d4 6c fd f5 a7 a4 f5 19 5a 5b 5b 6e 22 31 Data Ascii: '.xTmM~'^wEf'&\(]rtR3-T7suS!AUPv^Em)j$JZINO?K&t/N&wC;tLG8hA~C8pd =#\|^T9F}koxuOIi~zz<6;0;D\elZ[[n"1
2024-09-24 23:37:06 UTC	8302	IN	Data Raw: 7f 8d bc 5e 5c f7 96 61 99 d0 1c cd b4 d2 74 88 d5 a7 85 ce 34 5d cb 1f 0b c0 1c 7f 09 51 0f b8 3a 8a 28 09 7d 21 0b 70 d7 49 85 d9 10 93 fd 1e 36 93 8d 80 04 d2 4f 69 07 3e c1 fb b5 dc 30 a0 6c aa 8a 7c 4e dc 4e 85 bd 41 21 8e 01 f0 1b 6b f0 f4 ff 37 42 1f 67 bc 86 d2 97 d8 ac f9 e6 a2 a5 ec 46 e9 6e e8 39 be 32 a3 9b d7 bc f9 52 72 c2 be 6c 51 d2 cf 2e d6 eb 0d 7c b3 8d d6 a1 ad da 0e 0f f6 67 87 15 fc 0c 45 fe 26 ec d4 e9 4d 34 a7 32 75 a8 13 b4 8d 00 4a 6d 14 ff 69 f8 d4 af b9 79 82 b0 79 e9 ad 65 52 90 fc 52 43 4a b0 dc c3 97 0e 73 0d 17 5a 5f 83 bf e4 ef 78 52 fa ef f4 3f e1 6f 79 e3 fd 09 2c 3d 0a 38 d9 05 83 49 54 e8 49 62 63 db 3b 65 c9 bf b0 05 72 02 25 78 d9 73 c2 5d c1 08 18 6b d5 00 1b 36 70 60 af 2b a9 39 9e a1 f5 90 22 de 54 84 99 2e c7 ba Data Ascii: ^\at4]Q:(}!pI6Oi>0l\|NNA!k7BgFn92RrlQ.\|gE&M42uJmiyyeRRCJsZ_xR?oy,=8ITIbc;er%xs]k6p`+9"T.

Timestamp	Bytes transferred	Direction	Data
2024-09-24 23:37:06 UTC	775	OUT	GET /assets/7f63813838e283aea62f1a68ef1732c2.woff2 HTTP/1.1 Host: mj.ostep.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mj.ostep.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://mj.ostep.net/assets/532.423e048cce31881cf30d.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __dcfduid=e6c6d7507acd11efbdb81fb86a55f4b0; __sdcfduid=e6c6d7517acd11efbdb81fb86a55f4b0c0145390fe123d93b256cce9770e837ae48d2aed4c2e99f987605e3678587816
2024-09-24 23:37:06 UTC	1332	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 24 Sep 2024 23:37:06 GMT Content-Type: font/woff2 Content-Length: 39424 Connection: close CF-Ray: 8c8699b5bfe583f2-LAX CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: https://discord.com Cache-Control: public, max-age=2592000 ETag: "7f63813838e283aea62f1a68ef1732c2" Last-Modified: Fri, 02 Jun 2023 20:46:12 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=iSqIyPRRUwESMkuZMhTQxbulny6eId8ocKDu4vXyTvFmV6phkY6LvpLyGGfTcJ98h7jD2SpWW8Mm250KenmoPUmoLvSM3DKlis7nsS51a%2FdVBIzCeA07pynE3chG"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=d1e8eb3034954e239e89f53702e18bb43e71dfde-1727221026; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=UV_cxb4MksdGN0jfJgaH_7sRQiwlx7RszvtKrQpUEK4-1727221026222-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None alt-svc: h3=":443"; ma=86400 X-Cache: MISS Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache
2024-09-24 23:37:06 UTC	15052	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 9a 00 00 11 00 00 00 01 7c 60 00 00 99 9b 00 02 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 04 1b 81 a7 5a 1c a0 20 06 60 00 8e 50 08 82 42 09 8d 57 11 0c 0a 83 98 2c 82 dc 55 01 36 02 24 03 99 60 0b 8c 72 00 04 20 05 93 6e 07 b4 46 0c 83 35 5b ea 56 91 00 d6 6e bb 3c 92 00 6a 1b 02 14 f5 91 a5 9d 6e 08 d5 e0 0d 47 f1 ae f3 d6 ab 54 80 0c a8 61 73 6a 11 fb a1 6e 56 01 96 57 dd f8 cc fe ff ff ff cf 4c 36 c6 30 0e eb 00 55 2b 9b b5 b6 fd 0b 35 0a 4d 33 67 78 2e 19 6a 80 49 63 f7 26 2e c1 2d 20 9c e4 ee 3c 22 87 96 c7 f9 72 9c cc 4e 28 42 b1 cb 30 a4 de 32 60 8b d0 28 54 49 30 7c 8f 4e ca be 1f 6e 60 c2 d7 be 57 8c 83 62 d0 0d f9 18 7c 98 67 58 2e a5 84 bf 3d 7b 9e c5 fb 53 5c 2a 91 b2 43 ab 84 b0 4a Data Ascii: wOF2\|`BZ `PBW,U6$`r nF5[Vn<jnGTasjnVWL60U+5M3gx.jIc&.- <"rN(B02`(TI0\|Nn`Wb\|gX.={S\*CJ
2024-09-24 23:37:06 UTC	16384	IN	Data Raw: 5d 63 97 ca 87 b5 39 5b 1c 16 cc 9c 4c f5 af 37 f5 9f 64 7c 0d 44 46 98 83 85 d0 87 bc 7e 70 f3 ce 5a dd 44 52 58 c7 23 5a 7d 0f 67 23 20 23 f1 6d 1f 18 09 07 cb 8e a4 d3 4f a9 9a 3e 2e bd 30 fc 82 07 69 0f e4 7f 22 b0 af 16 65 e7 9a d8 d0 32 51 4b 77 5d 6b e3 f3 17 c0 e7 31 4e bd 0a d8 63 cb a3 0b f7 86 72 89 8a c7 16 d7 71 2d 5c 5c 43 8f 29 cf 68 4e bc 90 14 fd 4e bb 0b 66 ff 34 51 53 08 54 b7 67 e2 4e d6 11 e8 d6 60 5a ae 03 28 c4 f5 79 dd 28 8a b7 7f 2e 3c 81 cb a1 d0 88 18 2d 64 24 12 d1 18 c1 ae 76 47 42 3f be 3d 0e 3c 26 cd f2 e6 47 fd a1 fa 0f 33 a2 38 61 91 a1 b6 10 f4 8a 45 05 7c c2 6e 08 3c ee 1d a4 89 70 ba 19 75 4c 06 bd 86 4d ad fe bb e1 3b 96 d0 92 0a a3 c6 4c cb cd ad a2 a9 da 79 ec a4 be e6 10 f0 01 5d d8 da a1 ec ee 5f 06 62 6e 7d 6c db Data Ascii: ]c9[L7d\|DF~pZDRX#Z}g# #mO>.0i"e2QKw]k1Ncrq-\\C)hNNf4QSTgN`Z(y(.<-d$vGB?=<&G38aE\|n<puLM;Ly]_bn}l
2024-09-24 23:37:06 UTC	7988	IN	Data Raw: 54 58 d3 77 ab 3f 43 a0 fe 9d c3 da 1c 11 fd 95 1c b4 02 7b 4a f4 33 49 73 19 fb 5e a0 4f 4c fb a2 e3 07 c9 51 ba 6e 07 ea 5f ed ee 50 72 44 77 28 75 76 47 63 65 3a f4 a3 94 84 df 03 6d c7 39 ef 14 8e e6 f8 8e 1f 8d 8d 08 28 dd 34 cb 8f 49 c8 d9 28 57 88 5c 79 15 de 13 a5 4b d1 52 78 99 d7 5d 85 61 79 06 d7 e7 bf 6b e2 9d fe 49 ff 67 bf ea db da 7c de d3 9f 7d 4a ff 65 7f ad ff 85 37 de cb 58 e8 ea 95 4b 6c 98 3c c5 cd c8 83 07 1f 7c e8 2c 8a d3 4f aa 74 1d 63 f1 1e 70 ee 7d c6 85 74 99 ba 30 ea 29 1e c0 e9 29 d8 ed bc a6 f0 2c 63 e4 b7 0e 99 6a dd bf dd f8 d8 74 19 80 65 9a 4c fb c8 91 b3 5a ef 55 ae a6 27 a2 a5 9b 91 7a 65 59 a6 75 75 48 c7 26 c1 a6 70 c3 8d 74 43 27 80 d7 7a 0d 59 ef 7f 32 fa 6c aa f2 d0 e8 a5 d1 db 23 6d 2b 50 ed 91 1a 08 67 e4 9c 1f Data Ascii: TXw?C{J3Is^OLQn_PrDw(uvGce:m9(4I(W\yKRx]aykIg\|}Je7XKl<\|,Otcp}t0)),cjteLZU'zeYuuH&ptC'zY2l#m+Pg

Timestamp	Bytes transferred	Direction	Data
2024-09-24 23:37:06 UTC	775	OUT	GET /assets/3d07f5abf272fbb5670d02ed687453d0.woff2 HTTP/1.1 Host: mj.ostep.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mj.ostep.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://mj.ostep.net/assets/532.423e048cce31881cf30d.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __dcfduid=e6c6d7507acd11efbdb81fb86a55f4b0; __sdcfduid=e6c6d7517acd11efbdb81fb86a55f4b0c0145390fe123d93b256cce9770e837ae48d2aed4c2e99f987605e3678587816
2024-09-24 23:37:06 UTC	1308	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 24 Sep 2024 23:37:06 GMT Content-Type: font/woff2 Content-Length: 41872 Connection: close CF-Ray: 8c8699b619840faf-LAX CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: https://discord.com Cache-Control: public, max-age=2592000 ETag: "3d07f5abf272fbb5670d02ed687453d0" Last-Modified: Thu, 30 Mar 2023 18:28:00 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=k98ADBua5ewVU4S2lSpwr34Uw16ESENbv9%2F74PkFFk%2BwMwPewTblwzRKRtCF10wIR%2Bx%2FqU1LLZdI4EsdkssGhTVrmpRRywpV5qVatMxXeuEMFrggoutf3ioxWMKj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=d1e8eb3034954e239e89f53702e18bb43e71dfde-1727221026; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=32BV.WH.PwJ2j4HXFI5AURMyi3rcl9m17xa_HeSrHGs-1727221026306-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None X-Cache: MISS Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache
2024-09-24 23:37:06 UTC	15076	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 a3 90 00 0d 00 00 00 01 f6 80 00 00 a3 36 00 01 19 99 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 81 08 1b 83 96 3a 1c b8 78 06 60 00 8a 7e 0a 83 b9 20 82 d3 27 01 36 02 24 03 93 38 0b 89 5e 00 04 20 05 93 39 07 a4 17 5b c0 bd 91 03 19 63 ec 36 75 bc a1 21 52 fe 4d 9e aa 9b 0f 63 7b b0 ba 18 07 d0 63 9b 2e 4a cf 6d 3a a1 7d 43 25 cc 46 d8 1e 07 44 e1 57 ab f9 ff ff ff ff df 91 2c 64 4c ef 2f f1 fe 13 00 00 10 aa 68 a9 d3 6e 83 98 dc 03 b2 8e e2 51 9b 68 9b a6 45 d7 a3 d6 8a 66 c0 58 6b 9d 7a 68 ae b5 2b a6 46 47 b5 8c 66 1d fc 5a 92 3a a2 a8 1b 29 f9 66 f4 c4 53 f6 fd cb dc 4c 5c de 9d ce 85 1c 26 22 98 fb 10 98 4c 29 37 e6 1e cc 3d 12 d7 9d ea a0 ba 07 6a 60 29 46 8f 0a 0f ac b5 ad f0 02 b7 11 5b 09 13 76 Data Ascii: wOF26:x`~ '6$8^ 9[c6u!RMc{c.Jm:}C%FDW,dL/hnQhEfXkzh+FGfZ:)fSL\&"L)7=j`)F[v
2024-09-24 23:37:06 UTC	16384	IN	Data Raw: 95 75 26 70 70 20 47 91 58 04 37 06 ab ba 0b 78 0e 15 74 8c e5 57 c5 08 4b 30 4e c6 0d bd 65 cb 1d 0f 47 f9 28 79 2f 65 91 bb d1 52 cc 69 1f 91 03 a0 22 d1 56 27 5c 79 de 4f 81 b2 aa a1 57 c2 86 49 2b f0 7a f1 02 8d e2 c0 af 55 6a e5 b2 0e c8 86 f9 1f e0 55 5e 11 8a d3 c5 2d 2f ba 51 6f e4 f8 e2 03 b4 60 30 29 98 22 17 2a ad 8c ec 5d d1 c3 9a ca 7a bd e9 82 7b 6f 97 5f ab 71 ca 23 ff 7c e9 07 cd a0 6a d5 c6 05 70 b0 56 03 38 1a 01 ec 2b db 04 1b 05 81 ba 0e ba b3 b2 a1 08 ee 66 04 69 4d 7f 13 f6 81 f6 fa cb 45 96 0f f6 82 d5 51 37 ec 50 31 94 78 af 85 d1 e2 52 eb 5c 7e ae d6 15 50 00 5b 50 e6 f4 e7 cd 6c 5c df a7 96 17 18 89 84 4d 8c af 3a 17 1d 95 5f 88 24 42 28 c6 20 96 de 77 12 aa 93 00 24 1e 65 58 54 96 12 2c 2d c4 36 32 eb b9 e6 5b ea a8 4f 0f f0 64 Data Ascii: u&pp GX7xtWK0NeG(y/eRi"V'\yOWI+zUjU^-/Qo`0)"*]z{o_q#\|jpV8+fiMEQ7P1xR\~P[Pl\M:_$B( w$eXT,-62[Od
2024-09-24 23:37:06 UTC	10412	IN	Data Raw: cd 81 c7 91 6d 4f bf d1 b2 68 59 1f 5a 9e d6 9f fb 42 32 50 0c 7f 03 5c 8c e8 f8 3b 7b f8 0f d9 e0 e1 aa 77 c0 29 ff 46 eb af dd 8b da e6 3a 6e 74 7d 01 d6 9f b9 7d fa b8 1d 6c 87 38 dd cf 7e 0b 22 3e 37 52 e3 f2 39 9e 75 87 2a be ee b2 0e 0c 8d a6 45 84 47 d3 42 03 bf ef fa 5a 7e a8 9e eb 19 97 4f 55 65 36 1f 4d a8 a8 3c 9a 90 d9 0c 54 c1 68 92 98 d4 a6 d1 f1 0f 1d 26 d9 91 b0 11 e9 21 1a 10 83 16 df ab ac 42 d9 bb 39 ee 1c 9f 5e a7 84 13 2b da 8a b3 77 56 96 91 ca 8a ef 81 43 4e 2b a7 95 69 c3 69 99 69 9b a7 35 2b ab a7 35 a6 cd 99 69 a6 e1 69 65 d5 63 7c 30 8b 48 0c e6 e0 43 71 6c 12 09 c7 04 30 47 e8 2a f0 25 ae ff 59 3e 78 fa 0b df dd f5 50 d3 c8 41 15 1f 7b c8 1b 1d 10 45 2a f4 c9 7d 5c d8 17 9c 9c dd 1b 25 c8 8a 13 25 e5 03 6f b3 d8 5e aa 8c 8d 55 Data Ascii: mOhYZB2P\;{w)F:nt}}l8~">7R9uEGBZ~OUe6M<Th&!B9^+wVCN+iii5+5iiec\|0HCql0G%Y>xPA{E*}\%%o^U

Timestamp	Bytes transferred	Direction	Data
2024-09-24 23:37:06 UTC	775	OUT	GET /assets/3d6549bf2f38372c054eafb93fa358a9.woff2 HTTP/1.1 Host: mj.ostep.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mj.ostep.net sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://mj.ostep.net/assets/532.423e048cce31881cf30d.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __dcfduid=e6c6d7507acd11efbdb81fb86a55f4b0; __sdcfduid=e6c6d7517acd11efbdb81fb86a55f4b0c0145390fe123d93b256cce9770e837ae48d2aed4c2e99f987605e3678587816
2024-09-24 23:37:06 UTC	1314	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 24 Sep 2024 23:37:06 GMT Content-Type: font/woff2 Content-Length: 38156 Connection: close CF-Ray: 8c8699b628120fb8-LAX CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: https://discord.com Cache-Control: public, max-age=2592000 ETag: "3d6549bf2f38372c054eafb93fa358a9" Last-Modified: Fri, 02 Jun 2023 20:46:12 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=I%2FrhkJLtEodM6diG%2FYEPanYV%2FMlmI3vut0zRDib3%2FmWRc3H733qVtHdgRLtgniHP%2BvIHWaskBmRiJ7R28qSOX6WFkc0RZHbKp5%2FnsNpp%2FUn6e4IlwrnJ0gnxZjiS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=d1e8eb3034954e239e89f53702e18bb43e71dfde-1727221026; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=RomGFkaYryZCOdeM0KUOKjg9DbdBaI4XqM2x9OYB4dc-1727221026297-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None X-Cache: MISS Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache
2024-09-24 23:37:06 UTC	15070	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 95 0c 00 11 00 00 00 01 7c 54 00 00 94 a6 00 02 00 42 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1a 83 04 1b 81 a6 0c 1c a0 20 06 60 00 8e 50 08 82 3c 09 8d 57 11 0c 0a 83 9a 38 82 dd 7d 01 36 02 24 03 99 60 0b 8c 72 00 04 20 05 93 6e 07 b4 46 0c 82 76 5b 7f 56 71 04 dd b6 1d 51 a9 72 db 00 18 92 af d7 92 39 1c c0 9d 2f 68 e8 cd d2 c6 89 72 7e a0 84 79 d6 e7 80 da 29 4a 76 f6 8d 5f 40 f6 ff ff 7f 5a 82 7f 19 63 6d 9f 7a 1b 28 88 a9 da 75 86 0a 23 45 4d 4b 4b 17 8d 65 ad 6d 6d 0b e9 32 2c c9 46 4b df c2 e8 59 eb 10 6d 6b 5d cd ba 7b ac e7 eb 5b f1 5e 55 52 87 c3 01 1e ab 1f 38 70 e3 ac 6a 44 a8 6e b8 74 97 bc 6b 09 8a 0d d8 dc 62 21 9a 43 e0 10 b8 26 38 f4 fe 91 b3 5f b6 2d 6e 36 39 28 06 09 c5 b1 4e f5 84 04 Data Ascii: wOF2\|TB `P<W8}6$`r nFv[VqQr9/hr~y)Jv_@Zcmz(u#EMKKemm2,FKYmk]{[^UR8pjDntkb!C&8_-n69(N
2024-09-24 23:37:06 UTC	16384	IN	Data Raw: 6f 4b 4a 85 24 02 bb 7d 8f 8b 22 d1 00 69 ca bf 46 77 32 0d 70 79 c3 b1 fe 9f 50 eb fe e0 9f 43 60 74 12 59 eb 7f 90 0c c7 c5 31 63 6c cc f8 67 26 e2 1a 36 6e 8e 17 c7 21 80 e3 63 b8 34 23 95 92 cc 99 ab 78 9c 99 1f f7 8d 2d 31 88 e6 24 78 1c 04 5c 47 c0 58 a0 79 62 7a 83 30 ae 88 b6 97 7c ad d9 c2 51 85 49 2d 1d 2f 62 e6 b3 37 fd d9 35 7a 3d bb 63 e1 20 f3 60 2f 6b e7 a9 d5 96 7c 09 39 09 1e 96 00 03 26 27 50 f1 12 ba 88 82 0b 9c 37 01 13 40 38 7a 0f 13 7b cf ff 8e c2 ff c2 2c 41 9e a1 06 09 2a 1d 75 da a8 3a 1a 21 11 fb 0c e1 ea 9a 17 a7 b9 fc 92 9d cf e5 3a 82 ce e1 70 70 ea 27 3b 3a 5f 4a 42 a0 3d 57 29 7d b8 04 9d 20 f2 64 12 d0 89 a3 90 ec d1 c2 50 e6 4b 09 33 76 e2 06 12 93 dd af 43 e5 ff 9e 96 6c 7e 6f 11 cd e8 b6 c7 b9 23 0c ca dc 45 21 2a d7 53 Data Ascii: oKJ$}"iFw2pyPC`tY1clg&6n!c4#x-1$x\GXybz0\|QI-/b75z=c `/k\|9&'P7@8z{,Au:!:pp';:_JB=W)} dPK3vCl~o#E!S
2024-09-24 23:37:06 UTC	6702	IN	Data Raw: 5f bf 98 f4 86 4d eb b4 2f 71 aa f0 14 36 f5 67 67 b3 76 8f 36 bd cb db 14 f6 0f cb 75 0a 13 bf a9 a3 81 92 9a dd d0 dd a9 52 df 1c c4 6f b0 32 a9 eb 20 35 ce 2a 52 77 17 c3 fe d7 56 66 d1 4e 7c 17 7f 09 fb b1 69 cd a4 1f 2a 22 b1 ef 2a 18 64 27 53 fe d6 8a 02 ee d2 d8 2b 68 61 6e ed a5 5d 94 90 0b fe 12 0b 58 c0 28 87 7f 9e 22 c6 20 51 fc bf 0b 6b f1 ea 17 49 a1 1a 7e e1 7f a5 ee 42 b1 3f ac da fa a5 ab aa 85 0e bf 86 3d fb 54 b7 f6 e0 4e 2c f8 5b bb f7 1a c6 2d 5a 25 b8 73 54 c6 95 fd e6 2e 18 ca 6a 07 e3 23 90 24 df 7f 53 45 28 5d 51 cb 0f 3e 58 ad 24 eb f6 08 24 61 ab 43 d8 96 c5 a7 ab 71 5a a5 ba cb a5 75 eb f3 40 f7 66 ac 08 87 d0 ab 58 71 24 c4 62 e6 1a 92 f8 03 ba b1 1d 2e a4 60 23 56 bb fd ec 38 62 6d f6 b8 d2 0e c8 f3 76 96 41 4d b4 75 ee c3 65 Data Ascii: _M/q6ggv6uRo2 5RwVfN\|i"*d'S+han]X(" QkI~B?=TN,[-Z%sT.j#$SE(]Q>X$$aCqZu@fXq$b.`#V8bmvAMue

Timestamp	Bytes transferred	Direction	Data
2024-09-24 23:37:06 UTC	787	OUT	GET /assets/oneTrust/v4/consent/04da1d72-0626-4fff-b3c6-150c719cc115/04da1d72-0626-4fff-b3c6-150c719cc115.json HTTP/1.1 Host: mj.ostep.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://mj.ostep.net/acknowledgements Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __dcfduid=e6c6d7507acd11efbdb81fb86a55f4b0; __sdcfduid=e6c6d7517acd11efbdb81fb86a55f4b0c0145390fe123d93b256cce9770e837ae48d2aed4c2e99f987605e3678587816
2024-09-24 23:37:06 UTC	1309	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 24 Sep 2024 23:37:06 GMT Content-Type: application/json Content-Length: 4324 Connection: close CF-Ray: 8c8699b649070d58-LAX CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: https://discord.com Cache-Control: public, max-age=2592000 ETag: "de9b2c3b18688a8f7220e9ec15f3516d" Last-Modified: Wed, 29 Mar 2023 20:09:37 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Tp6CORXUtMYqlv9Kcp2slnjLKKIxk5Xmo07xeRuNZPhlthbjxqDUQhlz6YTZqEIZKfa7HIUsxw7eAQGYPsyEU%2BOG35icckY5e2pCF8zFvs1xWe%2F1LLb5dGse2Khh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=d1e8eb3034954e239e89f53702e18bb43e71dfde-1727221026; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=Y1QJZTyp45KJhSakdxoijp_0fVowAClAga53gdra4Dw-1727221026318-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None X-Cache: MISS Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache
2024-09-24 23:37:06 UTC	4324	IN	Data Raw: 7b 22 43 6f 6f 6b 69 65 53 50 41 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 4d 75 6c 74 69 56 61 72 69 61 6e 74 54 65 73 74 69 6e 67 45 6e 61 62 6c 65 64 22 3a 66 61 6c 73 65 2c 22 55 73 65 56 32 22 3a 74 72 75 65 2c 22 4d 6f 62 69 6c 65 53 44 4b 22 3a 66 61 6c 73 65 2c 22 53 6b 69 70 47 65 6f 6c 6f 63 61 74 69 6f 6e 22 3a 66 61 6c 73 65 2c 22 53 63 72 69 70 74 54 79 70 65 22 3a 22 4c 4f 43 41 4c 22 2c 22 56 65 72 73 69 6f 6e 22 3a 22 36 2e 33 33 2e 30 22 2c 22 4f 70 74 61 6e 6f 6e 44 61 74 61 4a 53 4f 4e 22 3a 22 30 34 64 61 31 64 37 32 2d 30 36 32 36 2d 34 66 66 66 2d 62 33 63 36 2d 31 35 30 63 37 31 39 63 63 31 31 35 22 2c 22 47 65 6f 6c 6f 63 61 74 69 6f 6e 55 72 6c 22 3a 22 68 74 74 70 73 3a 2f 2f 67 65 6f 6c 6f 63 61 74 69 6f 6e 2e 6f 6e 65 74 Data Ascii: {"CookieSPAEnabled":false,"MultiVariantTestingEnabled":false,"UseV2":true,"MobileSDK":false,"SkipGeolocation":false,"ScriptType":"LOCAL","Version":"6.33.0","OptanonDataJSON":"04da1d72-0626-4fff-b3c6-150c719cc115","GeolocationUrl":"https://geolocation.onet

Timestamp	Bytes transferred	Direction	Data
2024-09-24 23:37:06 UTC	808	OUT	GET /assets/2eb1d6746b7f5df4fba98d67601c2814.png HTTP/1.1 Host: mj.ostep.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mj.ostep.net/assets/532.423e048cce31881cf30d.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: __dcfduid=e6c6d7507acd11efbdb81fb86a55f4b0; __sdcfduid=e6c6d7517acd11efbdb81fb86a55f4b0c0145390fe123d93b256cce9770e837ae48d2aed4c2e99f987605e3678587816
2024-09-24 23:37:06 UTC	1305	IN	HTTP/1.1 200 OK Server: openresty Date: Tue, 24 Sep 2024 23:37:06 GMT Content-Type: image/png Content-Length: 20281 Connection: close CF-Ray: 8c8699b64e0d08b2-LAX CF-Cache-Status: HIT Accept-Ranges: bytes Access-Control-Allow-Origin: https://discord.com Cache-Control: public, max-age=2592000 ETag: "2eb1d6746b7f5df4fba98d67601c2814" Last-Modified: Wed, 29 Mar 2023 20:09:29 GMT Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Vary: Origin Permissions-Policy: interest-cohort=() X-Content-Type-Options: nosniff X-Frame-Options: DENY X-XSS-Protection: 1; mode=block Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1%2Br7lF%2BsP8Jw0HiYG8imNaqiEM4oF0cM5IcwOvxLVMoEuCjsu8ued2CJ57t1dRFT0zRpeauIdVyTTPOo%2ByYkldC02ZmusNgqA5ap3onWr8Y5H0mhM4mvOlXADYfu"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Set-Cookie: __cfruid=d1e8eb3034954e239e89f53702e18bb43e71dfde-1727221026; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None Set-Cookie: _cfuvid=AZD9UO0LZeZ8bUbvG2qHbCeMIBLVbtVididZGDHAEng-1727221026309-0.0.1.1-604800000; path=/; domain=.discord.com; HttpOnly; Secure; SameSite=None X-Cache: MISS Strict-Transport-Security: max-age=31536000 Cache-Control: no-cache
2024-09-24 23:37:06 UTC	15079	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 01 00 00 00 35 08 06 00 00 00 d8 92 38 f3 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 40 00 49 44 41 54 78 01 ec dd 75 b8 55 e5 ba b0 f1 4d 77 77 2f 3a a4 91 0e 17 a8 84 80 62 b7 22 76 6e bb 03 bb 3b b7 89 dd 9d a8 28 22 18 60 63 12 ba 10 69 04 01 e9 fa ee 1b e7 b3 f7 f8 e6 59 0b f0 9c ed d9 9c eb 1a f3 ba 7e ce 31 c7 1c ef fb 3c ef f3 c6 5c ec 3f ce 29 f4 b7 bf fd 6d 23 d2 57 5a 81 b4 02 69 05 d2 0a fc 7b 2a 30 87 6e 6a fd 7b ba 4a 7b 49 2b f0 97 56 e0 ed c2 7f 69 f7 69 e7 69 05 d2 0a a4 15 48 2b 90 56 20 ad c0 36 5b 81 f4 8f 80 6d 76 6a d2 c4 d2 0a a4 15 48 2b 90 56 20 ad c0 5f 5b 81 f4 8f 80 bf b6 be 69 ef 69 05 d2 0a a4 15 48 2b 90 56 60 9b ad 40 fa 47 c0 36 3b 35 69 62 69 05 d2 0a a4 Data Ascii: PNGIHDR58gAMAa@IDATxuUMww/:b"vn;("`ciY~1<\?)m#WZi{*0nj{J{I+ViiiH+V 6[mvjH+V _[iiH+V`@G6;5ibi
2024-09-24 23:37:06 UTC	5202	IN	Data Raw: 31 e4 66 1b 89 88 53 87 eb 47 d0 10 d6 c4 3a 9d 85 83 60 0c 63 75 c7 f5 99 cf bc 6d 9a bb 07 79 6f 87 18 b3 73 66 2e ce b3 f5 6e 89 3b 60 0e be ec cb 79 ef 8b 18 b3 f5 1f 09 9f 31 b6 8b ec 1f a8 0e eb 66 8e d7 c0 0d e5 b5 b9 b8 01 6f 40 d4 a5 12 d7 c6 71 b3 d8 87 7d 5b eb 71 18 8e 58 77 6d b8 4e d7 ea 1f 6b 28 5d ab db ce 5a bd 8f 75 f9 1a f6 86 7b 44 3d e0 be 2d 0f d7 74 3d 5c 8a b6 70 6f 79 b6 9d 8d d8 a3 b6 f1 5c da 5c 1b f7 c9 31 38 11 ee 71 f7 92 fb f7 3a b8 df ec d7 b3 e0 1c ec 00 f7 b5 f1 f7 c5 f9 70 8f fa 4c 53 d8 a6 11 7c a6 26 4e 82 3f 34 ee 3d 9f db 0f 17 64 ae a3 cd b5 7c ce 6e e3 99 6d 1b f3 1f 88 ab e0 be 76 cc fe 58 3a 9e f6 30 d7 2a 38 2c c3 73 cc 76 9e 4b 37 c1 ef 6c e3 f9 31 12 e6 ef f7 15 e1 1f 0a a7 c0 36 1a 84 ab 61 9e c9 38 1d f8 6c Data Ascii: 1fSG:`cumyosf.n;`y1fo@q}[qXwmNk(]Zu{D=-t=\poy\\18q:pLS\|&N?4=d\|nmvX:0*8,svK7l16a8l