Edit tour

Windows Analysis Report
AMTEmu #U2013 Universal Adobe Patcher.url

Overview

General Information

Sample name:	AMTEmu #U2013 Universal Adobe Patcher.url renamed because original name is a hash value
Original sample name:	AMTEmu Universal Adobe Patcher.url
Analysis ID:	1518046
MD5:	9bf1453a3d8d72054e1b961da2784e3e
SHA1:	25b696be0079929f7fbd3653d17eec0c1676ecc1
SHA256:	956ddfaa048dabef6edfedfbb37d169398bd8f076715206700e7f37d46504237
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus detection for URL or domain

HTML page contains string obfuscation

IP address seen in connection with other malware

JA3 SSL client fingerprint seen in connection with other malware

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6652 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://amtemu-official.com/ MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2304 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1912 --field-trial-handle=2020,i,6106424304714382276,7800768360948129297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP Parser: Found new string: script ..atOptions = {...'key' : 'a767497648184538fa89f2458d6c0f08',...'format' : 'iframe',...'height' : 250,...'width' : 300,...'params' : {}..};..document.write('<scr' + 'ipt type="text/javascript" src="http' + (location.protocol === 'https:' ? 's' : '') + '://ascertainintend.com/a767497648184538fa89f2458d6c0f08/invoke.js"></scr' + 'ipt>');...

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49847 version: TLS 1.2

Source: Joe Sandbox View	IP Address: 172.240.108.76 172.240.108.76
Source: Joe Sandbox View	IP Address: 239.255.255.250 239.255.255.250
Source: Joe Sandbox View	IP Address: 188.114.96.3 188.114.96.3
Source: Joe Sandbox View	IP Address: 188.114.96.3 188.114.96.3

Source: Joe Sandbox View

JA3 fingerprint: 28a2c9bd18a11de089ef85a160da29e4

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 217.20.57.34
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/AMTEmuOfficial/style.css?ver=2.2.3 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /94/d3/a0/94d3a052a6f8134fcd0ff8af84cb1505.js HTTP/1.1Host: citizenhid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dist/block-library/style.min.css?ver=6.3.5 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dashicons.min.css?ver=6.3.5 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/post-views-counter/css/frontend.min.css?ver=1.4.7 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wccp-pro/css-protect.css?wccp_ver_num=1&ver=10.9.2 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wccp-pro/css/print-protection.css?wccp_ver_num=1&ver=6.3.5 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/post-views-counter/js/frontend.min.js?ver=1.4.7 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.0 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/AMTEmuOfficial/js/responsive-menu.js?ver=1.0.0 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/03/AMTEmu-Windows.jpg HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/post-views-counter/js/frontend.min.js?ver=1.4.7 HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/AMTEmuOfficial/js/responsive-menu.js?ver=1.0.0 HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.0 HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a767497648184538fa89f2458d6c0f08/invoke.js HTTP/1.1Host: citizenhid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/03/AMTEmu-Windows.jpg HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/03/AMT-Emulator-Windows.jpg HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.3.5 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/shortcodes-ultimate/includes/css/shortcodes.css?ver=7.2.2 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7fd86c7dc98030c6b5c747948898e27f/invoke.js HTTP/1.1Host: citizenhid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/genesis/lib/js/menu/superfish.min.js?ver=1.7.10 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/03/AMT-Emulator-Windows.jpg HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/genesis/lib/js/menu/superfish.args.min.js?ver=3.5.0 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/genesis/lib/js/skip-links.min.js?ver=3.5.0 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /7fd86c7dc98030c6b5c747948898e27f/invoke.js HTTP/1.1Host: citizenhid.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wccp-pro/js/admin_bar_ajax.js?ver=6.3.5 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/genesis/lib/js/menu/superfish.min.js?ver=1.7.10 HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a767497648184538fa89f2458d6c0f08/invoke.js HTTP/1.1Host: ascertainintend.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning"sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=3.16.5 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/genesis/lib/js/menu/superfish.args.min.js?ver=3.5.0 HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/genesis/lib/js/skip-links.min.js?ver=3.5.0 HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.3.5 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wccp-pro/js/admin_bar_ajax.js?ver=6.3.5 HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.3.5 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=3.16.5 HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.17 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/03/amtemu-official.mp4?_=1 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://amtemu-official.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.3.5 HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17 HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.3.5 HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.17 HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/mediaelement/mejs-controls.svg HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://amtemu-official.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/03/amtemu-official.mp4?_=1 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://amtemu-official.com/Accept-Language: en-US,en;q=0.9Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/mediaelement/mejs-controls.svg HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/03/amtemu-official.mp4?_=1 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://amtemu-official.com/Accept-Language: en-US,en;q=0.9Range: bytes=18448384-18566538If-Range: "5e740750-11b4d8b"
Source: global traffic	HTTP traffic detected: GET /wp-admin/admin-ajax.php HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wccp_pro_functionality=excludethispage; pvc_visits[0]=1727340590b14
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/03/amtemu-official.mp4?_=1 HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: videoReferer: https://amtemu-official.com/Accept-Language: en-US,en;q=0.9Cookie: wccp_pro_functionality=excludethispage; pvc_visits[0]=1727340590b14Range: bytes=46915-18448383If-Range: "5e740750-11b4d8b"
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/03/cropped-AMTEmu-Logo-32x32.jpg HTTP/1.1Host: amtemu-official.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wccp_pro_functionality=excludethispage; pvc_visits[0]=1727340590b14
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ko27XRZs2zKVt7+&MD=UC5gKsTe HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/03/cropped-AMTEmu-Logo-32x32.jpg HTTP/1.1Host: amtemu-official.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: wccp_pro_functionality=excludethispage; pvc_visits[0]=1727340590b14
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=ko27XRZs2zKVt7+&MD=UC5gKsTe HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com

Source: global traffic	DNS traffic detected: DNS query: amtemu-official.com
Source: global traffic	DNS traffic detected: DNS query: citizenhid.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: ascertainintend.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com

Source: unknown

HTTP traffic detected: POST /wp-admin/admin-ajax.php HTTP/1.1Host: amtemu-official.comConnection: keep-aliveContent-Length: 83Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=utf-8Accept: */*Origin: https://amtemu-official.comSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://amtemu-official.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.19.5Date: Wed, 25 Sep 2024 08:49:41 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.19.5Date: Wed, 25 Sep 2024 08:49:44 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.19.5Date: Wed, 25 Sep 2024 08:49:44 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.19.5Date: Wed, 25 Sep 2024 08:49:45 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenServer: nginx/1.21.6Date: Wed, 25 Sep 2024 08:49:46 GMTContent-Type: application/javascriptContent-Length: 0Connection: closeP3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT"Access-Control-Allow-Origin: *Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UAHost: ascertainintend.com

Source: chromecache_105.2.dr, chromecache_103.2.dr, chromecache_117.2.dr, chromecache_91.2.dr	String found in binary or memory: http://j.hn/)
Source: chromecache_73.2.dr	String found in binary or memory: http://twitter.github.io/bootstrap/assets/css/bootstrap-responsive.css
Source: chromecache_97.2.dr, chromecache_88.2.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl.html
Source: chromecache_105.2.dr, chromecache_103.2.dr, chromecache_117.2.dr, chromecache_91.2.dr	String found in binary or memory: http://www.mediaelementjs.com/
Source: chromecache_73.2.dr	String found in binary or memory: http://www.opensource.org/licenses/gpl-license.php
Source: chromecache_97.2.dr, chromecache_88.2.dr	String found in binary or memory: http://www.opensource.org/licenses/mit-license.php
Source: AMTEmu #U2013 Universal Adobe Patcher.url	String found in binary or memory: https://adobeziipatcher.com/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/?s=
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/amt-emulator-0-8-1-mac/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/amtemu-2023/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/amtemu-2024/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/amtemu-mac-2024/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/amtemu-v0-9-2-patcher/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/amtemu-v0-9-4-patch/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/amtemu-v0-9-4-patcher/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/amt-emulator/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/amtemu-2018/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/amtemu-2019/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/amtemu-2020/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/amtemu-2021/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/amtemu-2022/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/amtemu-2023/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/amtemu-2024/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/amtemu-mac/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/amtemu-old-version/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/amtemu-patcher-update/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/amtemu/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/download-process/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/installation/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/latest-version/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/universal-patcher/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/category/upcoming-version/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/comments/feed/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/feed/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/how-to-download-amtemu/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/plugins/post-views-counter/css/frontend.min.css?ver=1.4.7
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/plugins/post-views-counter/js/frontend.min.js?ver=1.4.7
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/plugins/shortcodes-ultimate/includes/css/shortcodes.css?ver=7
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/plugins/wccp-pro/css-protect.css?wccp_ver_num=1&ver=10.9
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/plugins/wccp-pro/css/print-protection.css?wccp_ver_num=1&#038
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/plugins/wccp-pro/images/success.png
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/plugins/wccp-pro/images/warning.png
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/plugins/wccp-pro/js/admin_bar_ajax.js?ver=6.3.5
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=3
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/themes/AMTEmuOfficial/js/responsive-menu.js?ver=1.0.0
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/themes/AMTEmuOfficial/style.css?ver=2.2.3
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/themes/genesis/lib/js/menu/superfish.args.min.js?ver=3.5.0
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/themes/genesis/lib/js/menu/superfish.min.js?ver=1.7.10
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/themes/genesis/lib/js/skip-links.min.js?ver=3.5.0
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-1024x555.jpg
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-300x163.jpg
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-768x417.jpg
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-Windows-300x200.jpg
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-Windows.jpg
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator.jpg
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Download-300x164.jpg
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Download-768x419.jpg
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Download.jpg
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Latest-Version-300x179.png
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Latest-Version.png
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows-300x200.jpg
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows-Defender-300x207.png
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows-Defender-768x529.png
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows-Defender.png
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows.jpg
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-amtlib-1024x559.png
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-amtlib-300x164.png
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-amtlib-768x420.png
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-amtlib.png
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/amtemu-official.mp4
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/amtemu-official.mp4?_=1
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/cropped-AMTEmu-Logo-180x180.jpg
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/cropped-AMTEmu-Logo-192x192.jpg
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/cropped-AMTEmu-Logo-270x270.jpg
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-content/uploads/2020/03/cropped-AMTEmu-Logo-32x32.jpg
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-includes/css/dashicons.min.css?ver=6.3.5
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-includes/css/dist/block-library/style.min.css?ver=6.3.5
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.0
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.3.5
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.17
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.3.5
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.3.5
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-json/
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Famtemu-official.com%2F
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Famtemu-official.com%2F&f
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/wp-json/wp/v2/pages/14
Source: chromecache_75.2.dr	String found in binary or memory: https://amtemu-official.com/xmlrpc.php?rsd
Source: chromecache_75.2.dr	String found in binary or memory: https://api.w.org/
Source: chromecache_108.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuM2T7I-NP.woff2)
Source: chromecache_108.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuM3b7I-NP.woff2)
Source: chromecache_108.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuMw77I-NP.woff2)
Source: chromecache_108.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuMwT7I-NP.woff2)
Source: chromecache_108.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuMwX7I-NP.woff2)
Source: chromecache_108.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuMwf7I-NP.woff2)
Source: chromecache_108.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/lora/v35/0QIvMX1D_JOuMwr7Iw.woff2)
Source: chromecache_108.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUJiZTaR.woff2)
Source: chromecache_108.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUZiZQ.woff2)
Source: chromecache_108.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUhiZTaR.woff2)
Source: chromecache_108.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUliZTaR.woff2)
Source: chromecache_108.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/oswald/v53/TK3_WkUHHAIjg75cFRf3bXL8LICs1_FvsUtiZTaR.woff2)
Source: chromecache_75.2.dr	String found in binary or memory: https://schema.org/CreativeWork
Source: chromecache_75.2.dr	String found in binary or memory: https://schema.org/SearchAction
Source: chromecache_75.2.dr	String found in binary or memory: https://schema.org/SiteNavigationElement
Source: chromecache_75.2.dr	String found in binary or memory: https://schema.org/WPFooter
Source: chromecache_75.2.dr	String found in binary or memory: https://schema.org/WPHeader
Source: chromecache_75.2.dr	String found in binary or memory: https://schema.org/WPSideBar
Source: chromecache_75.2.dr	String found in binary or memory: https://schema.org/WebPage
Source: chromecache_75.2.dr	String found in binary or memory: https://schema.org/WebSite
Source: chromecache_75.2.dr	String found in binary or memory: https://tntzii.com/
Source: chromecache_75.2.dr	String found in binary or memory: https://wpadvancedads.com/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49771 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49847 version: TLS 1.2

Source: classification engine

Classification label: mal48.winURL@14/86@14/8

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://amtemu-official.com/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1912 --field-trial-handle=2020,i,6106424304714382276,7800768360948129297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1912 --field-trial-handle=2020,i,6106424304714382276,7800768360948129297,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
AMTEmu #U2013 Universal Adobe Patcher.url	0%	ReversingLabs

Source	Detection	Scanner	Label
http://www.opensource.org/licenses/mit-license.php	0%	URL Reputation	safe
https://amtemu-official.com/category/amtemu-2019/	100%	Avira URL Cloud	malware
https://amtemu-official.com/?s=	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-amtlib-300x164.png	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-json/	100%	Avira URL Cloud	malware
https://amtemu-official.com/amtemu-2024/	100%	Avira URL Cloud	malware
https://citizenhid.com/94/d3/a0/94d3a052a6f8134fcd0ff8af84cb1505.js	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/plugins/wccp-pro/css/print-protection.css?wccp_ver_num=1&#038	100%	Avira URL Cloud	malware
https://a.nel.cloudflare.com/report/v4?s=389Y2UEbD4GcclTowq3Um9Kz37G7VuTFKyKbtDt03naAshyZM7FJiQCJDvkx%2Fhv9ucoUEwSo0yFmwM7y1eycObST%2Bro3VEG2vK0kR%2B%2FB28wz%2BJEpHjdG2MOcP5uumeqxHC7UBg5P	0%	Avira URL Cloud	safe
https://amtemu-official.com/wp-content/plugins/wccp-pro/js/admin_bar_ajax.js?ver=6.3.5	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-includes/css/dashicons.min.css?ver=6.3.5	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/cropped-AMTEmu-Logo-270x270.jpg	100%	Avira URL Cloud	malware
https://amtemu-official.com/category/amtemu-2022/	100%	Avira URL Cloud	malware
https://amtemu-official.com/comments/feed/	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Latest-Version.png	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-amtlib-1024x559.png	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Latest-Version-300x179.png	100%	Avira URL Cloud	malware
https://schema.org/WPSideBar	0%	Avira URL Cloud	safe
https://amtemu-official.com/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.3.5	100%	Avira URL Cloud	malware
https://amtemu-official.com/amtemu-2023/	100%	Avira URL Cloud	malware
https://amtemu-official.com/category/amtemu-2018/	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Famtemu-official.com%2F&f	100%	Avira URL Cloud	malware
http://www.opensource.org/licenses/gpl-license.php	0%	Avira URL Cloud	safe
https://amtemu-official.com/wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.17	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2	100%	Avira URL Cloud	malware
http://www.mediaelementjs.com/	0%	Avira URL Cloud	safe
https://amtemu-official.com/amt-emulator-0-8-1-mac/	100%	Avira URL Cloud	malware
https://amtemu-official.com/category/amtemu-2021/	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=3.16.5	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-Windows-300x200.jpg	100%	Avira URL Cloud	malware
https://amtemu-official.com/category/amtemu/	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=3	100%	Avira URL Cloud	malware
https://tntzii.com/	0%	Avira URL Cloud	safe
https://ascertainintend.com/a767497648184538fa89f2458d6c0f08/invoke.js	100%	Avira URL Cloud	malware
https://a.nel.cloudflare.com/report/v4?s=ISQK5itgwHnKl79T%2FjQFLwsvJc%2BVKNi%2FXrFQRVSX9%2FUgaajFyZ8aW%2BRFiSR8TITLS7jU8S6w%2BrsJdEDjuPEbHyXAImXLU8RAV3vKnJnGx5%2FURVGRUwoRJqWR7GWMLRqPs6ySYoTj	0%	Avira URL Cloud	safe
https://citizenhid.com/7fd86c7dc98030c6b5c747948898e27f/invoke.js	100%	Avira URL Cloud	malware
https://amtemu-official.com/amtemu-v0-9-4-patch/	100%	Avira URL Cloud	malware
https://amtemu-official.com/category/amtemu-old-version/	100%	Avira URL Cloud	malware
https://amtemu-official.com/category/amt-emulator/	100%	Avira URL Cloud	malware
https://schema.org/SearchAction	0%	Avira URL Cloud	safe
https://amtemu-official.com/wp-content/plugins/wccp-pro/images/success.png	100%	Avira URL Cloud	malware
https://amtemu-official.com/category/amtemu-2024/	100%	Avira URL Cloud	malware
https://amtemu-official.com/amtemu-mac-2024/	100%	Avira URL Cloud	malware
https://schema.org/WPHeader	0%	Avira URL Cloud	safe
https://amtemu-official.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-768x417.jpg	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows-Defender.png	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/plugins/shortcodes-ultimate/includes/css/shortcodes.css?ver=7.2.2	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/cropped-AMTEmu-Logo-32x32.jpg	100%	Avira URL Cloud	malware
https://schema.org/CreativeWork	0%	Avira URL Cloud	safe
http://www.gnu.org/licenses/gpl.html	0%	Avira URL Cloud	safe
https://amtemu-official.com/wp-content/plugins/post-views-counter/css/frontend.min.css?ver=1.4.7	100%	Avira URL Cloud	malware
https://amtemu-official.com/category/amtemu-2023/	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/themes/genesis/lib/js/menu/superfish.args.min.js?ver=3.5.0	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17	100%	Avira URL Cloud	malware
https://amtemu-official.com/category/universal-patcher/	100%	Avira URL Cloud	malware
https://a.nel.cloudflare.com/report/v4?s=De2jvFyI7LRA1U630G5Adntud44mQ8roasJIsG233lRXcPitfW1UGkWkq3Sk6A8oDkclrf1V%2BhQ6yP5phVvzlQEW1W3M%2BhhIrisNWV4QFO2b3gVmmIoMA8eoGCSVLrx3yKaFxZl3	0%	Avira URL Cloud	safe
https://schema.org/WebSite	0%	Avira URL Cloud	safe
https://amtemu-official.com/category/upcoming-version/	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/amtemu-official.mp4	100%	Avira URL Cloud	malware
https://schema.org/WPFooter	0%	Avira URL Cloud	safe
https://amtemu-official.com/xmlrpc.php?rsd	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Famtemu-official.com%2F	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator.jpg	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/plugins/wccp-pro/images/warning.png	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows-300x200.jpg	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/cropped-AMTEmu-Logo-192x192.jpg	100%	Avira URL Cloud	malware
https://amtemu-official.com/amtemu-v0-9-4-patcher/	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/plugins/wccp-pro/css-protect.css?wccp_ver_num=1&ver=10.9	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/plugins/wccp-pro/css/print-protection.css?wccp_ver_num=1&ver=6.3.5	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.3.5	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows-Defender-300x207.png	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Download-768x419.jpg	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.3.5	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-1024x555.jpg	100%	Avira URL Cloud	malware
https://amtemu-official.com/category/installation/	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows.jpg	100%	Avira URL Cloud	malware
https://schema.org/SiteNavigationElement	0%	Avira URL Cloud	safe
https://amtemu-official.com/wp-content/plugins/wccp-pro/css-protect.css?wccp_ver_num=1&ver=10.9.2	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows-Defender-768x529.png	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Download-300x164.jpg	100%	Avira URL Cloud	malware
https://wpadvancedads.com/	0%	Avira URL Cloud	safe
https://amtemu-official.com/wp-includes/css/dist/block-library/style.min.css?ver=6.3.5	100%	Avira URL Cloud	malware
https://amtemu-official.com/category/amtemu-mac/	100%	Avira URL Cloud	malware
https://amtemu-official.com/feed/	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-admin/admin-ajax.php	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/uploads/2020/03/cropped-AMTEmu-Logo-180x180.jpg	100%	Avira URL Cloud	malware
http://twitter.github.io/bootstrap/assets/css/bootstrap-responsive.css	0%	Avira URL Cloud	safe
https://amtemu-official.com/wp-json/wp/v2/pages/14	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/plugins/shortcodes-ultimate/includes/css/shortcodes.css?ver=7	100%	Avira URL Cloud	malware
https://amtemu-official.com/category/latest-version/	100%	Avira URL Cloud	malware
https://amtemu-official.com/wp-content/plugins/post-views-counter/js/frontend.min.js?ver=1.4.7	100%	Avira URL Cloud	malware
https://adobeziipatcher.com/	0%	Avira URL Cloud	safe
https://amtemu-official.com/wp-content/themes/genesis/lib/js/menu/superfish.min.js?ver=1.7.10	100%	Avira URL Cloud	malware
http://j.hn/)	0%	Avira URL Cloud	safe
https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-300x163.jpg	100%	Avira URL Cloud	malware
https://schema.org/WebPage	0%	Avira URL Cloud	safe
https://citizenhid.com/a767497648184538fa89f2458d6c0f08/invoke.js	100%	Avira URL Cloud	malware

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
citizenhid.com	192.243.59.13	true	false	unknown
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
amtemu-official.com	188.114.96.3	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
ascertainintend.com	172.240.108.76	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://amtemu-official.com/wp-content/plugins/wccp-pro/js/admin_bar_ajax.js?ver=6.3.5	false	Avira URL Cloud: malware	unknown
https://a.nel.cloudflare.com/report/v4?s=389Y2UEbD4GcclTowq3Um9Kz37G7VuTFKyKbtDt03naAshyZM7FJiQCJDvkx%2Fhv9ucoUEwSo0yFmwM7y1eycObST%2Bro3VEG2vK0kR%2B%2FB28wz%2BJEpHjdG2MOcP5uumeqxHC7UBg5P	false	Avira URL Cloud: safe	unknown
https://citizenhid.com/94/d3/a0/94d3a052a6f8134fcd0ff8af84cb1505.js	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-includes/css/dashicons.min.css?ver=6.3.5	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.3.5	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.17	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=3.16.5	false	Avira URL Cloud: malware	unknown
https://ascertainintend.com/a767497648184538fa89f2458d6c0f08/invoke.js	false	Avira URL Cloud: malware	unknown
https://citizenhid.com/7fd86c7dc98030c6b5c747948898e27f/invoke.js	false	Avira URL Cloud: malware	unknown
https://a.nel.cloudflare.com/report/v4?s=ISQK5itgwHnKl79T%2FjQFLwsvJc%2BVKNi%2FXrFQRVSX9%2FUgaajFyZ8aW%2BRFiSR8TITLS7jU8S6w%2BrsJdEDjuPEbHyXAImXLU8RAV3vKnJnGx5%2FURVGRUwoRJqWR7GWMLRqPs6ySYoTj	false	Avira URL Cloud: safe	unknown
https://amtemu-official.com/wp-content/plugins/shortcodes-ultimate/includes/css/shortcodes.css?ver=7.2.2	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/cropped-AMTEmu-Logo-32x32.jpg	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/	false		unknown
https://amtemu-official.com/wp-content/plugins/post-views-counter/css/frontend.min.css?ver=1.4.7	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/themes/genesis/lib/js/menu/superfish.args.min.js?ver=3.5.0	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17	false	Avira URL Cloud: malware	unknown
https://a.nel.cloudflare.com/report/v4?s=De2jvFyI7LRA1U630G5Adntud44mQ8roasJIsG233lRXcPitfW1UGkWkq3Sk6A8oDkclrf1V%2BhQ6yP5phVvzlQEW1W3M%2BhhIrisNWV4QFO2b3gVmmIoMA8eoGCSVLrx3yKaFxZl3	false	Avira URL Cloud: safe	unknown
https://amtemu-official.com/wp-content/plugins/wccp-pro/css/print-protection.css?wccp_ver_num=1&ver=6.3.5	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.3.5	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.3.5	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows.jpg	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/plugins/wccp-pro/css-protect.css?wccp_ver_num=1&ver=10.9.2	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-includes/css/dist/block-library/style.min.css?ver=6.3.5	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-admin/admin-ajax.php	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/plugins/post-views-counter/js/frontend.min.js?ver=1.4.7	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/themes/genesis/lib/js/menu/superfish.min.js?ver=1.7.10	false	Avira URL Cloud: malware	unknown
https://citizenhid.com/a767497648184538fa89f2458d6c0f08/invoke.js	false	Avira URL Cloud: malware	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://amtemu-official.com/amtemu-2024/	chromecache_75.2.dr	true	Avira URL Cloud: malware	unknown
https://amtemu-official.com/category/amtemu-2019/	chromecache_75.2.dr	true	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/plugins/wccp-pro/css/print-protection.css?wccp_ver_num=1&#038	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/?s=	chromecache_75.2.dr	true	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-amtlib-300x164.png	chromecache_75.2.dr	true	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-json/	chromecache_75.2.dr	true	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/cropped-AMTEmu-Logo-270x270.jpg	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/comments/feed/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Latest-Version.png	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/category/amtemu-2022/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/amtemu-2023/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Latest-Version-300x179.png	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-amtlib-1024x559.png	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/category/amtemu-2018/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
http://www.opensource.org/licenses/mit-license.php	chromecache_97.2.dr, chromecache_88.2.dr	false	URL Reputation: safe	unknown
https://schema.org/WPSideBar	chromecache_75.2.dr	false	Avira URL Cloud: safe	unknown
https://amtemu-official.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Famtemu-official.com%2F&f	chromecache_75.2.dr	true	Avira URL Cloud: malware	unknown
http://www.opensource.org/licenses/gpl-license.php	chromecache_73.2.dr	false	Avira URL Cloud: safe	unknown
https://amtemu-official.com/category/amtemu/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/category/amtemu-2021/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
http://www.mediaelementjs.com/	chromecache_105.2.dr, chromecache_103.2.dr, chromecache_117.2.dr, chromecache_91.2.dr	false	Avira URL Cloud: safe	unknown
https://amtemu-official.com/amt-emulator-0-8-1-mac/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-Windows-300x200.jpg	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=3	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://tntzii.com/	chromecache_75.2.dr	false	Avira URL Cloud: safe	unknown
https://amtemu-official.com/amtemu-v0-9-4-patch/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/category/amtemu-old-version/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://schema.org/SearchAction	chromecache_75.2.dr	false	Avira URL Cloud: safe	unknown
https://amtemu-official.com/wp-content/plugins/wccp-pro/images/success.png	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/category/amt-emulator/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/category/amtemu-2024/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/amtemu-mac-2024/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://schema.org/WPHeader	chromecache_75.2.dr	false	Avira URL Cloud: safe	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-768x417.jpg	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows-Defender.png	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://schema.org/CreativeWork	chromecache_75.2.dr	false	Avira URL Cloud: safe	unknown
http://www.gnu.org/licenses/gpl.html	chromecache_97.2.dr, chromecache_88.2.dr	false	Avira URL Cloud: safe	unknown
https://amtemu-official.com/category/amtemu-2023/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/category/universal-patcher/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://schema.org/WPFooter	chromecache_75.2.dr	false	Avira URL Cloud: safe	unknown
https://schema.org/WebSite	chromecache_75.2.dr	false	Avira URL Cloud: safe	unknown
https://amtemu-official.com/category/upcoming-version/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/amtemu-official.mp4	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/xmlrpc.php?rsd	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator.jpg	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Famtemu-official.com%2F	chromecache_75.2.dr	true	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/plugins/wccp-pro/images/warning.png	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows-300x200.jpg	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/amtemu-v0-9-4-patcher/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/cropped-AMTEmu-Logo-192x192.jpg	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/plugins/wccp-pro/css-protect.css?wccp_ver_num=1&ver=10.9	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Download-768x419.jpg	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows-Defender-300x207.png	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-1024x555.jpg	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/category/installation/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/feed/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://schema.org/SiteNavigationElement	chromecache_75.2.dr	false	Avira URL Cloud: safe	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows-Defender-768x529.png	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Download-300x164.jpg	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://wpadvancedads.com/	chromecache_75.2.dr	false	Avira URL Cloud: safe	unknown
https://amtemu-official.com/category/amtemu-mac/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/cropped-AMTEmu-Logo-180x180.jpg	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
http://twitter.github.io/bootstrap/assets/css/bootstrap-responsive.css	chromecache_73.2.dr	false	Avira URL Cloud: safe	unknown
https://amtemu-official.com/wp-json/wp/v2/pages/14	chromecache_75.2.dr	true	Avira URL Cloud: malware	unknown
https://amtemu-official.com/wp-content/plugins/shortcodes-ultimate/includes/css/shortcodes.css?ver=7	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://amtemu-official.com/category/latest-version/	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://adobeziipatcher.com/	AMTEmu #U2013 Universal Adobe Patcher.url	false	Avira URL Cloud: safe	unknown
http://j.hn/)	chromecache_105.2.dr, chromecache_103.2.dr, chromecache_117.2.dr, chromecache_91.2.dr	false	Avira URL Cloud: safe	unknown
https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-300x163.jpg	chromecache_75.2.dr	false	Avira URL Cloud: malware	unknown
https://schema.org/WebPage	chromecache_75.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
172.240.108.76	ascertainintend.com	United States	7979	SERVERS-COMUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
188.114.96.3	amtemu-official.com	European Union	13335	CLOUDFLARENETUS	false
192.243.59.13	citizenhid.com	Dominica	39572	ADVANCEDHOSTERS-ASNL	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1518046
Start date and time:	2024-09-25 10:48:42 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 16s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	default.jbs
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	7
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Sample name:	AMTEmu #U2013 Universal Adobe Patcher.url renamed because original name is a hash value
Original Sample Name:	AMTEmu Universal Adobe Patcher.url
Detection:	MAL
Classification:	mal48.winURL@14/86@14/8
Cookbook Comments:	Found application associated with file extension: .url

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.250.186.110, 66.102.1.84, 34.104.35.123, 142.250.186.42, 142.250.186.131, 216.58.212.138, 142.250.186.138, 142.250.186.170, 172.217.18.106, 216.58.212.170, 142.250.181.234, 142.250.186.74, 172.217.18.10, 142.250.184.202, 216.58.206.42, 142.250.185.74, 172.217.16.138, 216.58.206.74, 172.217.16.202, 142.250.186.106, 93.184.221.240, 192.229.221.95, 216.58.206.67, 142.250.185.238
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: AMTEmu #U2013 Universal Adobe Patcher.url

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
172.240.108.76	http://peninsularesentmentcarla.com	Get hash	malicious	Unknown	Browse	peninsularesentmentcarla.com/
	http://zwgaleriamlodych.pl	Get hash	malicious	Unknown	Browse	highperformancedformats.com/anonymous/
	https://speakexecution.com/watch.820368645342?key=a9c769c35818c4211619b2fafc36eb98&kw=%5B%22arabanime%22%2C%22%D8%A7%D9%86%D9%85%D9%8A%22%2C%22%D8%AD%D9%84%D9%82%D8%A7%D8%AA%22%2C%22mobile%22%2C%22suit%22%2C%22gundam%22%2C%22wing%22%2C%22%D9%85%D8%AA%D8%B1%D8%AC%D9%85%22%2C%22%D9%85%D8%B4%D8%A7%D9%87%D8%AF%D8%A9%22%2C%22%D8%A7%D9%88%D9%86%22%2C%22%D9%84%D8%A7%D9%8A%D9%86%22%2C%22%D9%88%22%2C%22%D8%AA%D8%AD%D9%85%D9%8A%D9%84%22%5D&refer=https%3A%2F%2Fwww.arabanime.net%2Fshow-183%2Fmobile-suit-gundam-wing&tz=	Get hash	malicious	Unknown	Browse	highperformancedformats.com/anonymous/
	http://www.topcreativeformat.com	Get hash	malicious	Unknown	Browse	www.topcreativeformat.com/
239.255.255.250	MailAttachment.html	Get hash	malicious	HTMLPhisher	Browse
	Meeting-037-911.one	Get hash	malicious	HTMLPhisher	Browse
	https://www.canva.com/design/DAGRqYHU9fM/qLQ4eWyHLFZd4WO6lX1hvg/view?utm_content=DAGRqYHU9fM&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	HTMLPhisher	Browse
	https://www.dropbox.com/l/AACCJz_U-ZDLo7IXCzEFAx8aUAOQwxagfyU	Get hash	malicious	HTMLPhisher	Browse
	https://download.devscope.net/setups/PowerBITiles/PowerBITilesDesktopPowerPoint.zip	Get hash	malicious	Unknown	Browse
	http://pub-578040898e97448fab462cfa3f671292.r2.dev/gytdindex.html	Get hash	malicious	HTMLPhisher	Browse
	http://pub-ec6ee4fc5ef04d5a82d83c24992db464.r2.dev/poppps.html	Get hash	malicious	HTMLPhisher	Browse
	http://pub-778082f6319e43a8ba71b5ec9bd34253.r2.dev/gsecondcheck.html	Get hash	malicious	HTMLPhisher	Browse
	http://pub-28b78cc368104fdfb2ea280368fa70b5.r2.dev/ihil.html	Get hash	malicious	HTMLPhisher	Browse
	http://pub-44672067528c462ea47a10cc0c07ac29.r2.dev/faculty.html	Get hash	malicious	HTMLPhisher	Browse
188.114.96.3	PO23100072.exe	Get hash	malicious	FormBook	Browse	www.cc101.pro/ttiz/
	RFQ urrgently.exe	Get hash	malicious	FormBook	Browse	www.1win-moldovia.fun/1g7m/
	TNT AWB TRACKING DETAILS.exe	Get hash	malicious	FormBook	Browse	www.weight-loss-003.today/jd21/?Bl=8pSpW470ix&FjUh5xw=8QhlJgbwFiNHSz6ilu/NO/QAEgywgMMp9yv6yRtWAY1NzG57DnL+pjMXQcNu92teMaGp
	Petronas quotation request.exe	Get hash	malicious	FormBook	Browse	www.chinaen.org/zi4g/
	Shipping Documemt.vbs	Get hash	malicious	Lokibot	Browse	werdotx.shop/Devil/PWS/fre.php
	Quotes updates request.exe	Get hash	malicious	FormBook	Browse	www.1win-moldovia.fun/1g7m/
	PO-001.exe	Get hash	malicious	FormBook	Browse	www.1win-moldovia.fun/kslt/
	PO2024033194.exe	Get hash	malicious	FormBook	Browse	www.rtpngk.xyz/876i/
	LOL and profile.exe	Get hash	malicious	FormBook	Browse	www.chinaen.org/zi4g/
	QUOTATION_SEPQTRA071244#U00faPDF.scr.exe	Get hash	malicious	Snake Keylogger	Browse	filetransfer.io/data-package/STiUOnZN/download

Domains

⊘No context

ASNs

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
SERVERS-COMUS	https://www.canva.com/design/DAGRqYHU9fM/qLQ4eWyHLFZd4WO6lX1hvg/view?utm_content=DAGRqYHU9fM&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	HTMLPhisher	Browse	188.42.189.197
	http://whatsinks.com/	Get hash	malicious	Unknown	Browse	172.240.108.68
	https://bathingdelicatedemise.com	Get hash	malicious	Unknown	Browse	172.240.108.76
	https://bathingdelicatedemise.com/	Get hash	malicious	Unknown	Browse	172.240.108.84
	https://metamasskluginn.blogspot.com.mt/	Get hash	malicious	Unknown	Browse	172.240.127.234
	http://supermario-game.com/de	Get hash	malicious	Unknown	Browse	23.109.14.96
	http://xn--r1a.website/s/ogorodru	Get hash	malicious	Unknown	Browse	23.111.112.116
	https://onlyclips.site/?title=quinnfinite&ref=git	Get hash	malicious	Unknown	Browse	172.240.108.84
	SecuriteInfo.com.Linux.Siggen.9999.8163.26295.elf	Get hash	malicious	Mirai	Browse	103.70.118.114
	https://avehospitablestrangers.com/e9cd8d43f7b553278b4ed6dfbaf30e21/invoke.js	Get hash	malicious	Unknown	Browse	172.240.108.76
ADVANCEDHOSTERS-ASNL	https://klvegaold.com/clicks/MjM4ODJfMjgzMjU2XzIzLjAwMDg3XzEzXzE3MjcxNDM4MzU0OTMzNzQ5MTcyXzIwXjU0NjMwMDI5Yzk1YzNkZDljNjAxNmY0ZTQ4MDliODU1XjA1LjkuMjQuMjAyNA==	Get hash	malicious	Unknown	Browse	185.177.94.117
	http://fb.im.ru.com/79666783	Get hash	malicious	Unknown	Browse	192.243.59.20
	https://bathingdelicatedemise.com/watch.1377823260956.js	Get hash	malicious	Unknown	Browse	192.243.61.225
	https://lookebonyhill.com/watch.1141017708140?key=9520d47f71c17db6640a040ae7389eb1&kw=%5B%2225%22,%22ways%22,%22to%22,%22make%22,%22money%22,%22online%22,%22offline%22,%22and%22,%22at%22,%22home%22%5D&refer=https://affiliatesitemasters.com/adkernel/feed.php/?utm_source=outb-back&tz=4&dev=r&res=14.31&uuid=	Get hash	malicious	Anonymous Proxy	Browse	192.243.59.20
	https://klvegaold.com/clicks/MjM4ODJfMjgzMjU2XzIzLjAwMTk4XzEzXzE3MjcwODc0NzgzOTg5NjA1MTcyXzIwXjM4YWE4NTI4MzRhMDc0MGIyZGNhMGFlYmY2NjNiY2Q2XjEzLjkuMjMuMjAyNA==	Get hash	malicious	Unknown	Browse	185.177.94.117
	http://lookebonyhill.com	Get hash	malicious	Unknown	Browse	192.243.59.12
	https://metamasskluginn.blogspot.ug/	Get hash	malicious	Unknown	Browse	192.243.59.12
	http://xn--r1a.website/s/ogorodru	Get hash	malicious	Unknown	Browse	31.220.27.135
	https://passedawayarchives.com/2024/09/08/brooks-prejean-lsu-student/	Get hash	malicious	HTMLPhisher	Browse	192.243.61.227
	http://www.goo.su/fJu2F/	Get hash	malicious	Unknown	Browse	31.220.27.135
CLOUDFLARENETUS	MailAttachment.html	Get hash	malicious	HTMLPhisher	Browse	188.114.97.3
	(PO403810)_VOLEX_doc.exe	Get hash	malicious	Lokibot	Browse	188.114.97.3
	https://www.canva.com/design/DAGRqYHU9fM/qLQ4eWyHLFZd4WO6lX1hvg/view?utm_content=DAGRqYHU9fM&utm_campaign=designshare&utm_medium=link&utm_source=editor	Get hash	malicious	HTMLPhisher	Browse	104.18.38.76
	LaWl4DY2kW.exe	Get hash	malicious	LummaC	Browse	104.21.37.97
	CSBls4grBI.exe	Get hash	malicious	LummaC, Socks5Systemz	Browse	188.114.96.3
	AWS 1301241710.docx.doc	Get hash	malicious	Remcos, PureLog Stealer	Browse	188.114.97.9
	RFQ-948563836483638563735435376354.xls	Get hash	malicious	Remcos, GuLoader	Browse	188.114.96.3
	ACeTKO93e9.exe	Get hash	malicious	LummaC	Browse	104.21.58.182
	LNGHLELNes.exe	Get hash	malicious	LummaC	Browse	172.67.188.74
	New_Document-660128863990.wsf	Get hash	malicious	Unknown	Browse	188.114.96.3

JA3 Fingerprints

Match	Associated Sample Name / URL	SHA 256	Detection	Threat Name	Link	Context
28a2c9bd18a11de089ef85a160da29e4	MailAttachment.html	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27
	Meeting-037-911.one	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27
	New_Document-0706282.js	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27
	New_Document-0706282.js	Get hash	malicious	Unknown	Browse	4.175.87.197 184.28.90.27
	http://pub-578040898e97448fab462cfa3f671292.r2.dev/gytdindex.html	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27
	http://pub-ec6ee4fc5ef04d5a82d83c24992db464.r2.dev/poppps.html	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27
	http://pub-778082f6319e43a8ba71b5ec9bd34253.r2.dev/gsecondcheck.html	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27
	http://pub-28b78cc368104fdfb2ea280368fa70b5.r2.dev/ihil.html	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27
	http://pub-44672067528c462ea47a10cc0c07ac29.r2.dev/faculty.html	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27
	http://pub-3424228f58ac440c9523afb01100ed68.r2.dev/gold.html	Get hash	malicious	HTMLPhisher	Browse	4.175.87.197 184.28.90.27

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	data
Category:	downloaded
Size (bytes):	740747
Entropy (8bit):	0.6419094380708332
Encrypted:	false
SSDEEP:	768:3URqCyy0f0GdYhXC0KKoHe5EAx363tBdPvJOGkQ5b+5gPX2LFN1YWsAxFRNluHML:3h/MGQjEe3635Pv4Gni5iQlYZAbZi3bc
MD5:	27376BD9D25605531B40A6FEF7CEA8CE
SHA1:	3361F9D56F93C23DBB0D2DF2F9E5CFDC609D8FF8
SHA-256:	20F1300C2E08140017CAEBB6D9CA9F20E0614A0E2D73AB46A957939B5C1F520A
SHA-512:	6CFCDC374E9AD1467CEA98442E064D7469EE23310859E997DD98E3D4392DA9EAD66283C93F6D2C777B62C0F5A39467525FEB5932BFBB1B7E9C7249E75AEAD27A
Malicious:	false
Reputation:	low
URL:	https://amtemu-official.com/wp-content/uploads/2020/03/amtemu-official.mp4?_=1:2f8183fce0492c:11
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Source: https://amtemu-official.com/category/amtemu-2019/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/?s=	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-amtlib-300x164.png	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-json/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/amtemu-2024/	Avira URL Cloud: Label: malware
Source: https://citizenhid.com/94/d3/a0/94d3a052a6f8134fcd0ff8af84cb1505.js	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/plugins/wccp-pro/css/print-protection.css?wccp_ver_num=1&#038	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/plugins/wccp-pro/js/admin_bar_ajax.js?ver=6.3.5	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-includes/css/dashicons.min.css?ver=6.3.5	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/cropped-AMTEmu-Logo-270x270.jpg	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/category/amtemu-2022/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/comments/feed/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Latest-Version.png	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-amtlib-1024x559.png	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Latest-Version-300x179.png	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-includes/js/mediaelement/mediaelement-migrate.min.js?ver=6.3.5	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/amtemu-2023/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/category/amtemu-2018/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Famtemu-official.com%2F&f	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-includes/js/mediaelement/renderers/vimeo.min.js?ver=4.2.17	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-includes/js/hoverIntent.min.js?ver=1.10.2	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/amt-emulator-0-8-1-mac/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/category/amtemu-2021/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=3.16.5	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-Windows-300x200.jpg	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/category/amtemu/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/plugins/wp-smushit/app/assets/js/smush-lazy-load.min.js?ver=3	Avira URL Cloud: Label: malware
Source: https://ascertainintend.com/a767497648184538fa89f2458d6c0f08/invoke.js	Avira URL Cloud: Label: malware
Source: https://citizenhid.com/7fd86c7dc98030c6b5c747948898e27f/invoke.js	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/amtemu-v0-9-4-patch/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/category/amtemu-old-version/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/category/amt-emulator/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/plugins/wccp-pro/images/success.png	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/category/amtemu-2024/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/amtemu-mac-2024/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-includes/js/mediaelement/mediaelement-and-player.min.js?ver=4.2.17	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-768x417.jpg	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows-Defender.png	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/plugins/shortcodes-ultimate/includes/css/shortcodes.css?ver=7.2.2	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/cropped-AMTEmu-Logo-32x32.jpg	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/plugins/post-views-counter/css/frontend.min.css?ver=1.4.7	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/category/amtemu-2023/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/themes/genesis/lib/js/menu/superfish.args.min.js?ver=3.5.0	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/category/universal-patcher/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/category/upcoming-version/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/amtemu-official.mp4	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/xmlrpc.php?rsd	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Famtemu-official.com%2F	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator.jpg	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/plugins/wccp-pro/images/warning.png	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows-300x200.jpg	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/cropped-AMTEmu-Logo-192x192.jpg	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/amtemu-v0-9-4-patcher/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/plugins/wccp-pro/css-protect.css?wccp_ver_num=1&ver=10.9	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/plugins/wccp-pro/css/print-protection.css?wccp_ver_num=1&ver=6.3.5	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-includes/js/mediaelement/wp-mediaelement.min.js?ver=6.3.5	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows-Defender-300x207.png	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Download-768x419.jpg	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.3.5	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-1024x555.jpg	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/category/installation/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows.jpg	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/plugins/wccp-pro/css-protect.css?wccp_ver_num=1&ver=10.9.2	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Windows-Defender-768x529.png	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/AMTEmu-Download-300x164.jpg	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-includes/css/dist/block-library/style.min.css?ver=6.3.5	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/category/amtemu-mac/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/feed/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-admin/admin-ajax.php	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/cropped-AMTEmu-Logo-180x180.jpg	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-json/wp/v2/pages/14	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/plugins/shortcodes-ultimate/includes/css/shortcodes.css?ver=7	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/category/latest-version/	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/plugins/post-views-counter/js/frontend.min.js?ver=1.4.7	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/themes/genesis/lib/js/menu/superfish.min.js?ver=1.7.10	Avira URL Cloud: Label: malware
Source: https://amtemu-official.com/wp-content/uploads/2020/03/AMT-Emulator-300x163.jpg	Avira URL Cloud: Label: malware
Source: https://citizenhid.com/a767497648184538fa89f2458d6c0f08/invoke.js	Avira URL Cloud: Label: malware

File type:	ASCII text, with CRLF line terminators
Entropy (8bit):	5.139272123235854
TrID:	Windows URL shortcut (11001/1) 91.66% Generic INI configuration (1001/1) 8.34%
File name:	AMTEmu #U2013 Universal Adobe Patcher.url
File size:	177 bytes
MD5:	9bf1453a3d8d72054e1b961da2784e3e
SHA1:	25b696be0079929f7fbd3653d17eec0c1676ecc1
SHA256:	956ddfaa048dabef6edfedfbb37d169398bd8f076715206700e7f37d46504237
SHA512:	f0e2eac8adf972da2256c8bd869d33eb91fef4404263c7cd587b2dca06171cc355733ee689ff0698e3e95fe953a50ee22c0037fb1e59c4657d42f9e9e93aad75
SSDEEP:	3:9mw322fpgcRGNykc5YdimVVG/VClAWPUyxAbABGQYm2fpu9Izv4HKsv:8wm4TIykc54vVG/4xPpuFVm4uIzv5sv
TLSH:	0DC080FF554D8786D6431D4690F4F44C940F7CA44DD6D1599745C9DA0CD90D3D468522
File Content Preview:	[DEFAULT]..BASEURL=https://adobeziipatcher.com/..[{000214A0-0000-0000-C000-000000000046}]..Prop3=19,11..[InternetShortcut]..URL=https://amtemu-official.com/..IDList=..HotKey=0..

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Sep 25, 2024 10:49:37.727338076 CEST	55255	53	192.168.2.4	1.1.1.1
Sep 25, 2024 10:49:37.727644920 CEST	52309	53	192.168.2.4	1.1.1.1
Sep 25, 2024 10:49:37.734375000 CEST	53	56669	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:37.737083912 CEST	53	56698	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:37.912828922 CEST	53	55255	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:37.913026094 CEST	53	52309	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:38.810954094 CEST	53	63278	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:40.351721048 CEST	53	55041	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:40.387862921 CEST	58329	53	192.168.2.4	1.1.1.1
Sep 25, 2024 10:49:40.388047934 CEST	52912	53	192.168.2.4	1.1.1.1
Sep 25, 2024 10:49:40.410911083 CEST	53	58329	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:40.443089962 CEST	53	52912	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:41.842283010 CEST	62518	53	192.168.2.4	1.1.1.1
Sep 25, 2024 10:49:41.842518091 CEST	63962	53	192.168.2.4	1.1.1.1
Sep 25, 2024 10:49:41.849473000 CEST	53	62518	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:41.849792004 CEST	53	63962	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:42.426525116 CEST	49991	53	192.168.2.4	1.1.1.1
Sep 25, 2024 10:49:42.426655054 CEST	56662	53	192.168.2.4	1.1.1.1
Sep 25, 2024 10:49:42.441438913 CEST	53	49991	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:42.468535900 CEST	53	56662	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:46.049129963 CEST	53390	53	192.168.2.4	1.1.1.1
Sep 25, 2024 10:49:46.049263000 CEST	53578	53	192.168.2.4	1.1.1.1
Sep 25, 2024 10:49:46.099252939 CEST	53	53390	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:46.135308027 CEST	53	53578	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:48.322329044 CEST	53	50026	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:48.335110903 CEST	50807	53	192.168.2.4	1.1.1.1
Sep 25, 2024 10:49:48.335673094 CEST	53561	53	192.168.2.4	1.1.1.1
Sep 25, 2024 10:49:48.342812061 CEST	53	50807	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:48.342858076 CEST	53	53561	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:55.872982979 CEST	53	49231	1.1.1.1	192.168.2.4
Sep 25, 2024 10:49:55.911484003 CEST	138	138	192.168.2.4	192.168.2.255
Sep 25, 2024 10:50:14.803435087 CEST	53	58554	1.1.1.1	192.168.2.4
Sep 25, 2024 10:50:37.071243048 CEST	53	55813	1.1.1.1	192.168.2.4
Sep 25, 2024 10:50:37.474734068 CEST	53	50104	1.1.1.1	192.168.2.4
Sep 25, 2024 10:50:48.345890999 CEST	59946	53	192.168.2.4	1.1.1.1
Sep 25, 2024 10:50:48.346049070 CEST	61637	53	192.168.2.4	1.1.1.1
Sep 25, 2024 10:50:48.365245104 CEST	53	61637	1.1.1.1	192.168.2.4
Sep 25, 2024 10:50:48.365334034 CEST	53	59946	1.1.1.1	192.168.2.4
Sep 25, 2024 10:51:05.802170992 CEST	53	56820	1.1.1.1	192.168.2.4

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Sep 25, 2024 10:49:40.443155050 CEST	192.168.2.4	1.1.1.1	c228	(Port unreachable)	Destination Unreachable
Sep 25, 2024 10:49:46.135416031 CEST	192.168.2.4	1.1.1.1	c22d	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:38 UTC	662	OUT	GET / HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:40 UTC	1015	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:40 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close x-powered-by: PHP/8.0.30 x-powered-by: PleskLin link: <https://amtemu-official.com/wp-json/>; rel="https://api.w.org/", <https://amtemu-official.com/wp-json/wp/v2/pages/14>; rel="alternate"; type="application/json", <https://amtemu-official.com/>; rel=shortlink set-cookie: wccp_pro_functionality=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=0; path=/ CF-Cache-Status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KO3J6bGt450g3uyqs7TkL8321AKhRBorv8ephrMyeuNd2hdThhmUBB0V5odwjzkioU96Hcr62ehOZ6oyxboABEOVdedv8fNj0ZookBNePiNa1GYpmOkf%2BPfQ82lBbW73vbFGqgIQ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c31aafd0428e-EWR
2024-09-25 08:49:40 UTC	354	IN	Data Raw: 37 62 61 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 20 69 74 65 6d 73 63 6f 70 65 20 69 74 65 6d 74 79 70 65 3d 22 68 74 74 70 73 3a 2f 2f 73 63 68 65 6d 61 2e 6f 72 67 2f 57 65 62 53 69 74 65 22 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 64 65 73 63 72 69 70 74 69 6f 6e 22 20 63 6f 6e 74 65 6e 74 3d 22 41 4d 54 45 6d 75 20 69 73 20 61 20 44 65 76 69 63 65 20 77 68 69 63 68 20 69 73 20 46 61 6d 69 6c 69 61 72 20 74 6f 20 61 63 74 69 76 61 74 65 20 41 64 6f 62 65 20 50 72 6f 64 75 63 74 73 2e 20 49 74 20 69 73 20 61 20 55 6e 69 71 75 65 20 61 6e 64 20 62 65 73 74 20 74 6f 6f 6c 20 65 76 65 72 20 Data Ascii: 7ba7<!DOCTYPE html><html lang="en-US"><head itemscope itemtype="https://schema.org/WebSite"><meta charset="UTF-8" /><meta name="description" content="AMTEmu is a Device which is Familiar to activate Adobe Products. It is a Unique and best tool ever
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 65 20 50 61 74 63 68 65 72 20 28 55 41 50 29 20 77 69 74 68 69 6e 20 70 65 6f 70 6c 65 2e 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 6b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 55 6e 69 76 65 72 73 61 6c 20 41 64 6f 62 65 20 50 61 74 63 68 65 72 2c 20 41 6d 74 65 6d 75 20 57 69 6e 64 6f 77 73 2c 20 41 6d 74 65 6d 75 20 43 43 2c 20 44 6f 77 6e 6c 6f 61 64 20 41 6d 74 65 6d 75 2c 20 41 6d 74 65 6d 75 20 50 61 69 6e 74 65 72 20 44 6f 77 6e 6c 6f 61 64 22 20 2f 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 41 4d 54 45 6d 75 20 e2 80 93 20 55 6e 69 Data Ascii: e Patcher (UAP) within people." /><meta name="keywords" content="Universal Adobe Patcher, Amtemu Windows, Amtemu CC, Download Amtemu, Amtemu Painter Download" /><meta name="viewport" content="width=device-width, initial-scale=1" /><title>AMTEmu Uni
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 5f 69 73 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 5f 66 6c 61 67 20 3d 20 66 61 6c 73 65 3b 0a 09 0a 09 77 63 63 70 5f 70 72 6f 5f 6c 6f 67 5f 74 6f 5f 63 6f 6e 73 6f 6c 65 5f 69 66 5f 61 6c 6c 6f 77 65 64 28 22 66 75 6e 63 74 69 6f 6e 22 2c 20 22 64 69 73 61 62 6c 65 5f 63 6f 70 79 22 29 3b 0a 09 0a 09 76 61 72 20 65 20 3d 20 65 20 7c 7c 20 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 20 2f 2f 20 61 6c 73 6f 20 74 68 65 72 65 20 69 73 20 6e 6f 20 65 2e 74 61 72 67 65 74 20 70 72 6f 70 65 72 74 79 20 69 6e 20 49 45 2e 20 69 6e 73 74 65 61 64 20 49 45 20 75 73 65 73 20 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2e 73 72 63 45 6c 65 6d 65 6e 74 0a 20 20 09 0a 09 76 61 72 20 74 61 72 67 65 74 20 3d 20 65 2e 74 61 72 67 65 74 20 7c 7c 20 65 2e 73 72 63 45 6c 65 6d 65 Data Ascii: _iscontenteditable_flag = false;wccp_pro_log_to_console_if_allowed("function", "disable_copy");var e = e \|\| window.event; // also there is no e.target property in IE. instead IE uses window.event.srcElement var target = e.target \|\| e.srcEleme
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 0a 09 09 09 73 68 6f 77 5f 77 63 63 70 5f 70 72 6f 5f 6d 65 73 73 61 67 65 20 28 73 6d 65 73 73 61 67 65 29 3b 0a 09 09 09 77 63 63 70 5f 70 72 6f 5f 63 6c 65 61 72 5f 61 6e 79 5f 73 65 6c 65 63 74 69 6f 6e 28 29 3b 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 7d 0a 09 09 09 0a 09 09 09 77 63 63 70 5f 70 72 6f 5f 63 6c 65 61 72 5f 61 6e 79 5f 73 65 6c 65 63 74 69 6f 6e 28 29 3b 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 09 7d 0a 09 0a 09 69 66 28 65 2e 77 68 69 63 68 20 3d 3d 3d 20 32 20 29 7b 0a 09 76 61 72 20 63 6c 69 63 6b 65 64 54 61 67 5f 61 20 3d 20 28 65 3d 3d 6e 75 6c 6c 29 20 3f 20 65 76 65 6e 74 2e 73 72 63 45 6c 65 6d 65 6e 74 2e 74 61 67 4e 61 6d 65 20 3a 20 65 2e 74 61 72 67 65 74 2e 74 61 67 4e 61 6d Data Ascii: show_wccp_pro_message (smessage);wccp_pro_clear_any_selection();return false;}wccp_pro_clear_any_selection();return false;}}if(e.which === 2 ){var clickedTag_a = (e==null) ? event.srcElement.tagName : e.target.tagNam
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 20 65 6c 65 6d 74 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 3b 0a 0a 09 69 66 28 77 63 63 70 5f 70 72 6f 5f 69 73 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 28 65 29 20 3d 3d 20 74 72 75 65 29 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 09 0a 09 69 66 20 28 61 70 70 6c 79 5f 63 6c 61 73 73 5f 65 78 63 6c 75 73 69 6f 6e 28 65 29 20 3d 3d 20 22 59 65 73 22 29 20 72 65 74 75 72 6e 20 74 72 75 65 3b 0a 09 0a 09 69 66 20 28 65 6c 65 6d 74 79 70 65 20 3d 3d 20 22 49 4d 47 22 29 20 7b 73 68 6f 77 5f 77 63 63 70 5f 70 72 6f 5f 6d 65 73 73 61 67 65 28 61 6c 65 72 74 4d 73 67 5f 49 4d 47 29 3b 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 7d 0a 09 0a 09 2f 2f 65 6c 65 6d 74 79 70 65 20 6d 75 73 74 20 62 65 20 6d 65 72 67 65 64 20 62 79 20 65 6c 65 6d 74 79 70 65 Data Ascii: elemtype.toUpperCase();if(wccp_pro_iscontenteditable(e) == true) return true;if (apply_class_exclusion(e) == "Yes") return true;if (elemtype == "IMG") {show_wccp_pro_message(alertMsg_IMG);return false;}//elemtype must be merged by elemtype
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 2a 6c 65 6e 67 74 68 20 6f 66 20 74 69 6d 65 20 77 65 20 77 61 6e 74 20 74 68 65 20 75 73 65 72 20 74 6f 20 74 6f 75 63 68 20 62 65 66 6f 72 65 20 77 65 20 64 6f 20 73 6f 6d 65 74 68 69 6e 67 2a 2f 0a 0a 76 61 72 20 65 6c 65 6d 74 79 70 65 20 3d 20 22 22 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 75 63 68 73 74 61 72 74 28 65 29 0a 7b 0a 09 77 63 63 70 5f 70 72 6f 5f 6c 6f 67 5f 74 6f 5f 63 6f 6e 73 6f 6c 65 5f 69 66 5f 61 6c 6c 6f 77 65 64 28 22 66 75 6e 63 74 69 6f 6e 22 2c 20 22 74 6f 75 63 68 73 74 61 72 74 22 29 3b 0a 09 0a 09 76 61 72 20 65 20 3d 20 65 20 7c 7c 20 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 0a 09 2f 2a 61 6c 73 6f 20 74 68 65 72 65 20 69 73 20 6e 6f 20 65 2e 74 61 72 67 65 74 20 70 72 6f 70 65 72 74 79 20 69 6e 20 49 45 2e 2a 2f 0a 09 2f Data Ascii: length of time we want the user to touch before we do something/var elemtype = "";function touchstart(e){wccp_pro_log_to_console_if_allowed("function", "touchstart");var e = e \|\| window.event;/also there is no e.target property in IE.//
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 09 74 65 78 74 52 61 6e 67 65 2e 73 65 6c 65 63 74 28 29 3b 0a 0a 09 09 09 64 6f 63 75 6d 65 6e 74 2e 73 65 6c 65 63 74 69 6f 6e 2e 65 6d 70 74 79 28 29 3b 0a 09 09 7d 0a 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 7d 0a 7d 3b 0a 0a 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 22 2c 20 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 0a 09 7b 20 0a 09 09 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 73 74 61 72 74 22 2c 20 74 6f 75 63 68 73 74 61 72 74 2c 20 66 61 6c 73 65 29 3b 0a 09 09 77 69 6e 64 6f 77 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 74 6f 75 63 68 65 6e 64 22 2c 20 74 6f 75 63 68 65 6e 64 2c 20 66 Data Ascii: textRange.select();document.selection.empty();}return false;}};document.addEventListener("DOMContentLoaded", function(event){ window.addEventListener("touchstart", touchstart, false);window.addEventListener("touchend", touchend, f
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 20 73 65 74 5f 63 75 72 72 65 6e 74 5f 63 6c 69 63 6b 65 64 5f 65 6c 65 6d 65 6e 74 28 65 29 0a 7b 0a 09 76 61 72 20 65 20 3d 20 65 20 7c 7c 20 77 69 6e 64 6f 77 2e 65 76 65 6e 74 3b 20 2f 2f 20 61 6c 73 6f 20 74 68 65 72 65 20 69 73 20 6e 6f 20 65 2e 74 61 72 67 65 74 20 70 72 6f 70 65 72 74 79 20 69 6e 20 49 45 2e 20 69 6e 73 74 65 61 64 20 49 45 20 75 73 65 73 20 77 69 6e 64 6f 77 2e 65 76 65 6e 74 2e 73 72 63 45 6c 65 6d 65 6e 74 0a 20 20 09 0a 09 76 61 72 20 74 61 72 67 65 74 20 3d 20 65 2e 74 61 72 67 65 74 20 7c 7c 20 65 2e 73 72 63 45 6c 65 6d 65 6e 74 3b 0a 0a 09 76 61 72 20 65 6c 65 6d 74 79 70 65 20 3d 20 65 2e 74 61 72 67 65 74 2e 6e 6f 64 65 4e 61 6d 65 3b 0a 09 0a 09 65 6c 65 6d 74 79 70 65 20 3d 20 65 6c 65 6d 74 79 70 65 2e 74 6f 55 70 70 Data Ascii: set_current_clicked_element(e){var e = e \|\| window.event; // also there is no e.target property in IE. instead IE uses window.event.srcElement var target = e.target \|\| e.srcElement;var elemtype = e.target.nodeName;elemtype = elemtype.toUpp
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 62 6c 65 3b 0a 09 0a 09 69 66 20 28 69 73 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 20 3d 3d 20 22 74 72 75 65 22 20 7c 7c 20 69 73 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 20 3d 3d 20 74 72 75 65 20 7c 7c 20 69 73 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 32 20 3d 3d 20 74 72 75 65 29 0a 09 7b 0a 09 09 69 66 28 74 79 70 65 6f 66 20 74 61 72 67 65 74 2e 73 74 79 6c 65 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 20 29 20 74 61 72 67 65 74 2e 73 74 79 6c 65 2e 63 75 72 73 6f 72 20 3d 20 22 74 65 78 74 22 3b 0a 09 09 0a 09 09 2f 2f 77 63 63 70 5f 70 72 6f 5f 6c 6f 67 5f 74 6f 5f 63 6f 6e 73 6f 6c 65 5f 69 66 5f 61 6c 6c 6f 77 65 64 28 22 22 2c 20 69 73 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 20 2b 20 22 20 22 20 2b 20 69 73 63 6f 6e 74 65 6e 74 65 Data Ascii: ble;if (iscontenteditable == "true" \|\| iscontenteditable == true \|\| iscontenteditable2 == true){if(typeof target.style!="undefined" ) target.style.cursor = "text";//wccp_pro_log_to_console_if_allowed("", iscontenteditable + " " + iscontente
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 65 72 61 74 69 6f 6e 22 29 3b 0a 7d 0a 0a 0a 2f 2a 49 73 20 63 6f 6e 74 65 6e 74 5f 65 64 69 74 61 62 6c 65 20 65 6c 65 6d 65 6e 74 2a 2f 0a 66 75 6e 63 74 69 6f 6e 20 69 73 5f 63 6f 6e 74 65 6e 74 5f 65 64 69 74 61 62 6c 65 5f 65 6c 65 6d 65 6e 74 28 65 6c 65 6d 65 6e 74 5f 6e 61 6d 65 20 3d 20 22 22 29 0a 7b 0a 09 69 66 20 28 65 6c 65 6d 65 6e 74 5f 6e 61 6d 65 20 3d 3d 20 22 54 45 58 54 22 20 7c 7c 20 65 6c 65 6d 65 6e 74 5f 6e 61 6d 65 20 3d 3d 20 22 23 54 45 58 54 22 20 7c 7c 20 65 6c 65 6d 65 6e 74 5f 6e 61 6d 65 20 3d 3d 20 22 54 45 58 54 41 52 45 41 22 20 7c 7c 20 65 6c 65 6d 65 6e 74 5f 6e 61 6d 65 20 3d 3d 20 22 49 4e 50 55 54 22 20 7c 7c 20 65 6c 65 6d 65 6e 74 5f 6e 61 6d 65 20 3d 3d 20 22 50 41 53 53 57 4f 52 44 22 20 7c 7c 20 65 6c 65 6d 65 Data Ascii: eration");}/Is content_editable element/function is_content_editable_element(element_name = ""){if (element_name == "TEXT" \|\| element_name == "#TEXT" \|\| element_name == "TEXTAREA" \|\| element_name == "INPUT" \|\| element_name == "PASSWORD" \|\| eleme

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:40 UTC	589	OUT	GET /wp-content/themes/AMTEmuOfficial/style.css?ver=2.2.3 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:40 UTC	772	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:40 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Thu, 19 Mar 2020 17:59:34 GMT etag: W/"5e73b306-8ecf" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=cp0rdMTWOna%2F3trT2qfF2Jd8GcsCT0uv9w0xLc6F%2FEOdKOGpyvG1q%2BPB7Sz1SnDQXSlaMyUvY9hvp04yiJAT9RwP76uzLKdFKTHYHoR%2BO1RyCsteWgnvIQjotfIsk2AO9Y196by%2F"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c3239d908c0c-EWR
2024-09-25 08:49:40 UTC	597	IN	Data Raw: 37 63 39 62 0d 0a 2f 2a 0a 09 54 68 65 6d 65 20 4e 61 6d 65 3a 20 41 4d 54 45 6d 75 4f 66 66 69 63 69 61 6c 0a 09 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 61 6d 74 65 6d 75 2d 6f 66 66 69 63 69 61 6c 2e 63 6f 6d 2f 0a 09 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 46 6f 72 6d 20 61 6e 64 20 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 76 65 72 67 65 20 61 74 20 41 4d 54 45 6d 75 4f 66 66 69 63 69 61 6c 20 74 6f 20 63 72 65 61 74 65 20 61 20 6c 6f 6f 6b 2e 2e 2e 0a 09 41 75 74 68 6f 72 3a 20 41 4d 54 45 6d 75 4f 66 66 69 63 69 61 6c 0a 09 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 61 6d 74 65 6d 75 2d 6f 66 66 69 63 69 61 6c 2e 63 6f 6d 2f 0a 0a 09 56 65 72 73 69 6f 6e 3a 20 31 2e 30 2e 31 0a 0a 09 54 61 67 73 3a 20 6f 6e 65 2d 63 6f 6c Data Ascii: 7c9b/*Theme Name: AMTEmuOfficialTheme URI: https://amtemu-official.com/Description: Form and function converge at AMTEmuOfficial to create a look...Author: AMTEmuOfficialAuthor URI: https://amtemu-official.com/Version: 1.0.1Tags: one-col
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 74 73 0a 09 09 2d 20 48 65 61 64 69 6e 67 73 0a 09 09 2d 20 4f 62 6a 65 63 74 73 0a 09 09 2d 20 47 61 6c 6c 65 72 69 65 73 0a 09 09 2d 20 46 6f 72 6d 73 0a 09 09 2d 20 54 61 62 6c 65 73 0a 09 09 2d 20 53 63 72 65 65 6e 20 52 65 61 64 65 72 20 54 65 78 74 0a 09 2d 20 53 74 72 75 63 74 75 72 65 20 61 6e 64 20 4c 61 79 6f 75 74 0a 09 09 2d 20 53 69 74 65 20 43 6f 6e 74 61 69 6e 65 72 73 0a 09 09 2d 20 50 61 67 65 20 54 69 74 6c 65 0a 09 09 2d 20 43 6f 6c 75 6d 6e 20 57 69 64 74 68 73 20 61 6e 64 20 50 6f 73 69 74 69 6f 6e 73 0a 09 09 2d 20 47 65 6e 65 73 69 73 20 47 72 69 64 20 4c 6f 6f 70 0a 09 09 2d 20 43 6f 6c 75 6d 6e 20 43 6c 61 73 73 65 73 0a 09 2d 20 43 6f 6d 6d 6f 6e 20 43 6c 61 73 73 65 73 0a 09 09 2d 20 57 6f 72 64 50 72 65 73 73 0a 09 09 2d 20 47 Data Ascii: ts- Headings- Objects- Galleries- Forms- Tables- Screen Reader Text- Structure and Layout- Site Containers- Page Title- Column Widths and Positions- Genesis Grid Loop- Column Classes- Common Classes- WordPress- G
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 7d 61 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 74 68 69 6e 20 64 6f 74 74 65 64 7d 61 3a 61 63 74 69 76 65 2c 61 3a 68 6f 76 65 72 7b 6f 75 74 6c 69 6e 65 3a 30 7d 68 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 3b 6d 61 72 67 69 6e 3a 2e 36 37 65 6d 20 30 7d 61 62 62 72 5b 74 69 74 6c 65 5d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 64 6f 74 74 65 64 7d 62 2c 73 74 72 6f 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 62 6f 6c 64 7d 64 66 6e 7b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 74 61 6c 69 63 7d 68 72 7b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 3b 68 65 69 67 68 74 3a 30 7d 6d 61 72 6b 7b 62 61 Data Ascii: ody{margin:0}a:focus{outline:thin dotted}a:active,a:hover{outline:0}h1{font-size:2em;margin:.67em 0}abbr[title]{border-bottom:1px dotted}b,strong{font-weight:bold}dfn{font-style:italic}hr{-moz-box-sizing:content-box;box-sizing:content-box;height:0}mark{ba
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 7a 2d 66 6f 63 75 73 2d 69 6e 6e 65 72 7b 62 6f 72 64 65 72 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 74 65 78 74 61 72 65 61 7b 6f 76 65 72 66 6c 6f 77 3a 61 75 74 6f 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 7d 74 61 62 6c 65 7b 62 6f 72 64 65 72 2d 63 6f 6c 6c 61 70 73 65 3a 63 6f 6c 6c 61 70 73 65 3b 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 3a 30 7d 0a 0a 2f 2a 20 42 6f 78 20 53 69 7a 69 6e 67 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 0a 2a 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 65 61 72 63 68 22 5d 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 20 62 6f 72 64 65 72 2d 62 6f 78 3b 0a 09 2d 6d 6f 7a 2d 62 Data Ascii: z-focus-inner{border:0;padding:0}textarea{overflow:auto;vertical-align:top}table{border-collapse:collapse;border-spacing:0}/* Box Sizing--------------------------------------------- /,input[type="search"] {-webkit-box-sizing: border-box;-moz-b
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 2e 38 72 65 6d 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 32 35 3b 0a 09 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 20 61 6e 74 69 61 6c 69 61 73 65 64 3b 0a 7d 0a 0a 62 6f 64 79 2e 65 6c 65 76 65 6e 34 30 2d 6c 61 6e 64 69 6e 67 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 7d 0a 0a 61 2c 0a 62 75 74 74 6f 6e 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2c 0a 2e 62 75 74 74 6f 6e 20 7b 0a 09 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 20 Data Ascii: t-size: 18px;font-size: 1.8rem;line-height: 1.625;-webkit-font-smoothing: antialiased;}body.eleven40-landing {background-color: #000;}a,button,input[type="button"],input[type="reset"],input[type="submit"],.button {-webkit-transition:
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 2c 0a 68 35 2c 0a 68 36 20 7b 0a 09 63 6f 6c 6f 72 3a 20 23 30 30 30 3b 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 27 4f 73 77 61 6c 64 27 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 34 30 30 3b 0a 09 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 32 3b 0a 09 6d 61 72 67 69 6e 3a 20 30 3b 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 36 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 7d 0a 0a 68 31 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 36 70 78 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 2e 36 72 65 6d 3b 0a 7d 0a 0a 68 32 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 30 70 78 3b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 33 72 65 6d 3b 0a 7d 0a 0a 68 33 20 7b 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: ,h5,h6 {color: #000;font-family: 'Oswald', sans-serif;font-weight: 400;line-height: 1.2;margin: 0;margin-bottom: 16px;padding: 0;}h1 {font-size: 36px;font-size: 3.6rem;}h2 {font-size: 30px;font-size: 3rem;}h3 {font-size:
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 65 72 79 2d 63 6f 6c 75 6d 6e 73 2d 35 20 2e 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 63 68 69 6c 64 28 35 6e 2b 31 29 2c 0a 2e 67 61 6c 6c 65 72 79 2d 63 6f 6c 75 6d 6e 73 2d 36 20 2e 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 63 68 69 6c 64 28 36 6e 2b 31 29 2c 0a 2e 67 61 6c 6c 65 72 79 2d 63 6f 6c 75 6d 6e 73 2d 37 20 2e 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 63 68 69 6c 64 28 37 6e 2b 31 29 2c 0a 2e 67 61 6c 6c 65 72 79 2d 63 6f 6c 75 6d 6e 73 2d 38 20 2e 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 63 68 69 6c 64 28 38 6e 2b 31 29 2c 0a 2e 67 61 6c 6c 65 72 79 2d 63 6f 6c 75 6d 6e 73 2d 39 20 2e 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 63 68 69 6c 64 28 39 6e 2b 31 29 20 7b 0a 09 63 6c 65 61 72 3a 20 6c Data Ascii: ery-columns-5 .gallery-item:nth-child(5n+1),.gallery-columns-6 .gallery-item:nth-child(6n+1),.gallery-columns-7 .gallery-item:nth-child(7n+1),.gallery-columns-8 .gallery-item:nth-child(8n+1),.gallery-columns-9 .gallery-item:nth-child(9n+1) {clear: l
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 72 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2c 0a 69 6e 70 75 74 3a 68 6f 76 65 72 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2c 0a 2e 62 75 74 74 6f 6e 3a 66 6f 63 75 73 2c 0a 2e 62 75 74 74 6f 6e 3a 68 6f 76 65 72 20 7b 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 64 37 30 32 62 3b 0a 09 63 6f 6c 6f 72 3a 20 23 66 66 66 3b 0a 7d 0a 0a 62 75 74 74 6f 6e 2e 73 6d 61 6c 6c 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 62 75 74 74 6f 6e 22 5d 2e 73 6d 61 6c 6c 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 65 73 65 74 22 5d 2e 73 6d 61 6c 6c 2c 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 73 75 62 6d 69 74 22 5d 2e 73 6d 61 6c 6c 2c 0a 2e 62 75 74 74 6f 6e 2e 73 6d 61 6c 6c 20 7b 0a 09 70 61 64 64 69 6e 67 3a 20 38 70 78 20 31 32 70 78 3b 0a 7d Data Ascii: r[type="reset"],input:hover[type="submit"],.button:focus,.button:hover {background-color: #ed702b;color: #fff;}button.small,input[type="button"].small,input[type="reset"].small,input[type="submit"].small,.button.small {padding: 8px 12px;}
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 3a 20 6c 65 66 74 3b 0a 7d 0a 0a 74 68 20 7b 0a 09 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 62 6f 6c 64 3b 0a 09 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 75 70 70 65 72 63 61 73 65 3b 0a 7d 0a 0a 74 64 20 7b 0a 09 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 64 64 64 3b 0a 09 70 61 64 64 69 6e 67 3a 20 36 70 78 20 30 3b 0a 7d 0a 0a 2f 2a 20 53 63 72 65 65 6e 20 52 65 61 64 65 72 20 54 65 78 74 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 0a 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 73 68 6f 72 74 63 75 74 2c 0a 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 2c 0a 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 Data Ascii: : left;}th {font-weight: bold;text-transform: uppercase;}td {border-top: 1px solid #ddd;padding: 6px 0;}/* Screen Reader Text--------------------------------------------- */.screen-reader-shortcut,.screen-reader-text,.screen-reader-t
2024-09-25 08:49:40 UTC	1369	IN	Data Raw: 6e 6e 65 72 20 2e 77 72 61 70 20 7b 0a 09 62 6f 72 64 65 72 3a 20 6e 6f 6e 65 3b 0a 7d 0a 0a 2f 2a 20 43 6f 6c 75 6d 6e 20 57 69 64 74 68 73 20 61 6e 64 20 50 6f 73 69 74 69 6f 6e 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 0a 2f 2a 20 57 72 61 70 70 69 6e 67 20 64 69 76 20 66 6f 72 20 2e 63 6f 6e 74 65 6e 74 20 61 6e 64 20 2e 73 69 64 65 62 61 72 2d 70 72 69 6d 61 72 79 20 2a 2f 0a 0a 2e 63 6f 6e 74 65 6e 74 2d 73 69 64 65 62 61 72 2d 73 69 64 65 62 61 72 20 2e 63 6f 6e 74 65 6e 74 2d 73 69 64 65 62 61 72 2d 77 72 61 70 2c 0a 2e 73 69 64 65 62 61 72 2d 63 6f 6e 74 65 6e 74 2d 73 69 64 65 62 61 72 20 2e 63 6f 6e 74 65 6e 74 2d 73 69 64 65 62 61 72 Data Ascii: nner .wrap {border: none;}/* Column Widths and Positions--------------------------------------------- // Wrapping div for .content and .sidebar-primary */.content-sidebar-sidebar .content-sidebar-wrap,.sidebar-content-sidebar .content-sidebar

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:41 UTC	561	OUT	GET /94/d3/a0/94d3a052a6f8134fcd0ff8af84cb1505.js HTTP/1.1 Host: citizenhid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:41 UTC	540	IN	HTTP/1.1 403 Forbidden Server: nginx/1.19.5 Date: Wed, 25 Sep 2024 08:49:41 GMT Content-Type: application/javascript Content-Length: 0 Connection: close P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Access-Control-Allow-Origin: * Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:41 UTC	595	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.3.5 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:41 UTC	773	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:41 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Tue, 19 Sep 2023 12:32:44 GMT etag: W/"650994ec-19824" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lU8Nt7bv8F9XO8FL%2Bm1vmyl%2BH%2BYTTjq3VaXV3CbcXLEf0YGxHsLXhaaFrEZ6gHp5cBJyrGS0iZ1%2FyR1nT9xSgild8vv9v7vBG%2BZBBfgZ5w6i0ifDy8kpxGS6zmD64K1PZfzEiJvi"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c329ac5842cd-EWR
2024-09-25 08:49:41 UTC	596	IN	Data Raw: 37 63 39 39 0d 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 Data Ascii: 7c99@charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-b
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 6c 69 67 6e 72 69 67 68 74 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 72 69 67 68 74 7d 3a 77 68 65 72 65 28 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 29 7b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 39 39 39 39 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 6e 6f 6e 65 3b 70 61 64 64 69 6e 67 3a 63 61 6c 63 28 2e 36 36 37 65 6d 20 2b 20 32 70 78 29 20 63 61 6c 63 28 31 2e 33 33 33 65 6d 20 2b 20 32 70 78 29 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5b 73 74 79 6c 65 2a 3d 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 5d 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d Data Ascii: lignright{text-align:right}:where(.wp-block-button__link){border-radius:9999px;box-shadow:none;padding:calc(.667em + 2px) calc(1.333em + 2px);text-decoration:none}.wp-block-button[style*=text-decoration] .wp-block-button__link{text-decoration:inherit}.wp-
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 30 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 3b 70 61 64 64 69 6e 67 3a 2e 36 36 37 65 6d 20 31 2e 33 33 33 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 2e 69 73 2d 73 74 79 6c 65 2d 6f 75 74 6c 69 6e 65 3a 6e 6f 74 28 2e 68 61 73 2d 74 65 78 74 2d 63 6f 6c 6f Data Ascii: border-radius:0!important}.wp-block-button .wp-block-button__link.is-style-outline,.wp-block-button.is-style-outline>.wp-block-button__link{border:2px solid;padding:.667em 1.333em}.wp-block-button .wp-block-button__link.is-style-outline:not(.has-text-colo
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 73 74 79 6c 65 5d 29 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 2d 77 69 64 74 68 3a 6d 65 64 69 75 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 3a 77 68 65 72 65 28 5b 73 74 79 6c 65 2a 3d 62 6f 72 64 65 72 2d 6c 65 66 74 2d 73 74 79 6c 65 5d 29 7b 62 6f 72 64 65 72 2d 6c 65 66 74 2d 77 69 64 74 68 3a 6d 65 64 69 75 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 76 65 72 74 69 63 61 6c 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 73 2e 69 73 2d 76 65 72 74 69 63 61 6c 3e 2e 77 70 2d Data Ascii: __link:where([style=border-bottom-style]){border-bottom-width:medium}.wp-block-button .wp-block-button__link:where([style=border-left-style]){border-left-width:medium}.wp-block-buttons.is-vertical{flex-direction:column}.wp-block-buttons.is-vertical>.wp-
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 73 74 6f 6d 2d 66 6f 6e 74 2d 73 69 7a 65 20 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 5f 5f 6c 69 6e 6b 7b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 62 75 74 74 6f 6e 2e 61 6c 69 67 6e 63 65 6e 74 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 68 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 3b 70 61 64 64 69 6e 67 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 74 68 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 61 6c 65 6e 64 61 72 20 63 Data Ascii: stom-font-size .wp-block-button__link{font-size:inherit}.wp-block-button.aligncenter,.wp-block-calendar{text-align:center}.wp-block-calendar td,.wp-block-calendar th{border:1px solid;padding:.25em}.wp-block-calendar th{font-weight:400}.wp-block-calendar c
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 63 65 6e 74 65 72 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 2e 61 72 65 2d 76 65 72 74 69 63 61 6c 6c 79 2d 61 6c 69 67 6e 65 64 2d 62 6f 74 74 6f 6d 7b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 66 6c 65 78 2d 65 6e 64 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 38 31 70 78 29 7b 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 73 3a 6e 6f 74 28 2e 69 73 2d 6e 6f 74 2d 73 74 61 63 6b 65 64 2d 6f 6e 2d 6d 6f 62 69 6c 65 29 3e 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6c 75 6d 6e 7b 66 6c 65 78 2d 62 61 73 69 73 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 38 32 70 Data Ascii: -vertically-aligned-center{align-items:center}.wp-block-columns.are-vertically-aligned-bottom{align-items:flex-end}@media (max-width:781px){.wp-block-columns:not(.is-not-stacked-on-mobile)>.wp-block-column{flex-basis:100%!important}}@media (min-width:782p
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 67 68 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 6e 61 76 69 67 61 74 69 6f 6e 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 63 6f 6e 74 65 6e 74 3a 22 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 6c 69 73 74 20 2e 63 6f 6d 6d 65 6e 74 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 32 2e 32 35 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c Data Ascii: ght}.wp-block-post-comments .navigation:after{clear:both;content:"";display:table}.wp-block-post-comments .commentlist{clear:both;list-style:none;margin:0;padding:0}.wp-block-post-comments .commentlist .comment{min-height:2.25em;padding-left:3.25em}.wp-bl
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 72 65 61 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 63 6f 6f 6b 69 65 73 2d 63 6f 6e 73 65 6e 74 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 67 61 70 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 63 6f 6f 6b 69 65 73 2d 63 6f 6e 73 65 6e 74 20 23 77 70 2d 63 6f 6d 6d 65 6e 74 2d 63 6f 6f 6b 69 65 73 2d 63 6f 6e 73 65 6e 74 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 33 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d Data Ascii: rea{box-sizing:border-box;display:block;width:100%}.wp-block-post-comments .comment-form-cookies-consent{display:flex;gap:.25em}.wp-block-post-comments .comment-form-cookies-consent #wp-comment-cookies-consent{margin-top:.35em}.wp-block-post-comments .com
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 2d 70 72 65 76 69 6f 75 73 2d 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 63 68 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 70 72 65 76 69 6f 75 73 2d 61 72 72 6f 77 3a 6e 6f 74 28 2e 69 73 2d 61 72 72 6f 77 2d 63 68 65 76 72 6f 6e 29 7b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 58 28 31 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 6d 6d 65 6e 74 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 6e 65 78 74 2d 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 Data Ascii: -previous-arrow{display:inline-block;margin-right:1ch}.wp-block-comments-pagination .wp-block-comments-pagination-previous-arrow:not(.is-arrow-chevron){transform:scaleX(1)}.wp-block-comments-pagination .wp-block-comments-pagination-next-arrow{display:inli
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 67 72 6f 75 6e 64 2d 64 69 6d 3a 6e 6f 74 28 5b 63 6c 61 73 73 2a 3d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 5d 29 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 20 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 20 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e Data Ascii: ground-dim:not([class*=-background-color]){background-color:#000}.wp-block-cover .has-background-dim.has-background-gradient,.wp-block-cover-image .has-background-dim.has-background-gradient{background-color:transparent}.wp-block-cover-image.has-backgroun

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:41 UTC	580	OUT	GET /wp-includes/css/dashicons.min.css?ver=6.3.5 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:41 UTC	772	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:41 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Thu, 15 Apr 2021 10:19:28 GMT etag: W/"60781330-e688" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e5iT2LzfmPdwF5LWcw%2Fto6OkKt0l9ooZxnZbPpdMdv4bvk7EiEdkJ%2Bg%2FvaBS7%2FbOfteu0cDYhRMvf1RVAaP4uSQWz%2Fn81RT7sOzHMtE8Mig7FFEmhquxgzBhKujToxDLz5I4MFW6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c329cba98cba-EWR
2024-09-25 08:49:41 UTC	597	IN	Data Raw: 37 63 39 62 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 64 61 73 68 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 3f 39 39 61 63 37 32 36 32 32 33 63 37 34 39 34 34 33 62 36 34 32 63 65 33 33 64 66 38 62 38 30 30 22 29 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 3f 39 39 61 63 37 32 36 32 32 33 63 37 34 39 34 34 33 62 36 34 32 63 65 33 33 64 66 38 62 38 30 30 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 22 64 61 74 61 3a 61 70 70 Data Ascii: 7c9b/! This file is auto-generated /@font-face{font-family:dashicons;src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800");src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800#iefix") format("embedded-opentype"),url("data:app
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 59 57 31 6c 41 41 42 78 42 41 41 41 41 54 41 41 41 41 49 69 77 79 74 66 38 6e 42 76 63 33 51 41 41 48 49 30 41 41 41 4a 76 41 41 41 45 68 6f 6a 4d 6c 7a 32 65 4a 78 6a 59 47 52 67 59 4f 42 69 6b 47 50 51 59 57 42 30 63 66 4d 4a 59 65 42 67 59 47 47 41 41 4a 41 4d 59 30 35 6d 65 69 4a 51 44 4d 6f 44 79 72 47 41 61 51 34 67 5a 6f 4f 49 41 67 43 4b 49 77 4e 50 41 48 69 63 59 32 42 6b 2f 4d 63 34 67 59 47 56 67 59 4f 42 68 7a 47 4e 67 59 48 42 48 55 70 2f 5a 5a 42 6b 61 47 46 67 59 47 4a 67 5a 57 62 41 43 67 4c 53 58 46 4d 59 48 44 34 79 66 48 56 6e 41 6e 48 31 6d 42 67 5a 47 49 45 30 43 44 4d 41 41 49 2f 7a 43 47 6c 34 6e 4e 33 59 39 33 2f 65 56 52 6e 47 38 63 2f 39 4a 45 32 62 73 74 4c 64 51 49 46 30 4e 38 78 30 74 38 77 30 70 53 4d 74 30 42 5a 4b 53 35 6d Data Ascii: YW1lAABxBAAAATAAAAIiwytf8nBvc3QAAHI0AAAJvAAAEhojMlz2eJxjYGRgYOBikGPQYWB0cfMJYeBgYGGAAJAMY05meiJQDMoDyrGAaQ4gZoOIAgCKIwNPAHicY2Bk/Mc4gYGVgYOBhzGNgYHBHUp/ZZBkaGFgYGJgZWbACgLSXFMYHD4yfHVnAnH1mBgZGIE0CDMAAI/zCGl4nN3Y93/eVRnG8c/9JE2bstLdQIF0N8x0t8w0pSMt0BZKS5m
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 73 70 42 32 74 69 34 54 4f 4d 6d 70 6d 70 43 32 74 52 55 56 30 69 62 6d 53 6f 4d 71 63 31 55 61 30 69 44 4c 46 66 77 4e 4e 68 79 70 55 35 44 54 4a 57 49 4e 4e 54 51 47 71 52 68 46 6f 73 30 44 72 64 59 72 48 47 45 78 55 4b 4e 49 79 31 36 4e 62 61 62 71 68 68 70 63 31 4d 39 49 32 31 68 71 6d 79 6b 55 61 59 61 52 39 72 53 79 4d 2b 37 6c 5a 47 66 64 32 73 6a 50 32 2b 48 78 52 4b 4e 6f 30 31 56 6b 54 54 47 56 42 39 4a 59 34 30 48 4e 59 36 7a 79 47 73 32 33 6c 51 39 53 52 4e 4d 64 5a 51 30 30 56 52 52 53 5a 4e 4d 74 5a 58 55 61 65 51 35 62 6d 4f 71 74 36 52 74 54 5a 57 58 74 4a 32 70 42 70 4f 32 4e 31 56 6a 30 67 36 6d 75 6b 7a 61 30 56 53 68 53 56 32 6d 57 6b 32 61 62 4b 72 61 70 43 6c 47 76 74 75 6d 57 75 53 31 6d 6d 62 6b 4e 5a 35 75 35 48 57 64 59 65 51 31 Data Ascii: spB2ti4TOMmpmpC2tRUV0ibmSoMqc1Ua0iDLFfwNNhypU5DTJWINNTQGqRhFos0DrdYrHGExUKNIy16Nbabqhhpc1M9I21hqmykUaYaR9rSyM+7lZGfd2sjP2+HxRKNo01VkTTGVB9JY40HNY6zyGs23lQ9SRNMdZQ00VRRSZNMtZXUaeQ5bmOqt6RtTZWXtJ2pBpO2N1Vj0g6mukza0VShSV2mWk2abKrapClGvtumWuS1mmbkNZ5u5HWdYeQ1
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 35 6a 35 44 6e 4f 74 66 79 62 67 33 49 50 49 38 39 6a 6e 70 48 6e 4d 64 2f 49 36 37 54 41 79 4f 75 30 30 4a 53 7a 4b 48 74 4e 69 59 74 71 6f 53 6c 37 55 66 57 61 55 68 6a 56 55 6c 4d 65 6f 31 70 6d 53 6d 5a 55 2b 35 67 79 47 74 57 2b 70 72 52 47 74 64 79 55 32 36 6a 32 4d 79 55 34 71 68 57 6d 4c 45 65 31 30 6c 42 76 56 4b 30 79 35 54 75 71 31 61 61 6b 52 37 58 47 63 71 32 75 44 72 66 49 58 33 2b 45 4b 51 64 53 48 57 6c 4b 68 46 52 48 6d 62 49 68 31 64 47 47 61 6d 68 31 6a 43 6b 76 55 68 31 72 35 47 64 5a 61 36 45 39 56 35 31 69 53 70 4e 55 70 78 71 36 64 36 76 54 54 41 6d 54 36 6e 52 54 31 71 51 36 77 35 51 6e 71 63 34 30 35 55 2b 71 73 77 79 39 6c 39 58 5a 46 6a 6f 37 31 54 6d 6d 64 45 71 31 7a 70 52 54 71 53 34 79 38 6a 70 64 62 4c 79 69 38 52 4b 4c 76 Data Ascii: 5j5DnOtfybg3IPI89jnpHnMd/I67TAyOu00JSzKHtNiYtqoSl7UfWaUhjVUlMeo1pmSmZU+5gyGtW+prRGtdyU26j2MyU4qhWmLEe10lBvVK0y5Tuq1aakR7XGcq2uDrfIX3+EKQdSHWlKhFRHmbIh1dGGamh1jCkvUh1r5GdZa6E9V51iSpNUpxq6d6vTTAmT6nRT1qQ6w5Qnqc405U+qswy9l9XZFjo71TmmdEq1zpRTqS4y8jpdbLyi8RKLv
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 51 51 35 4c 77 41 72 6c 74 5a 35 55 55 4b 55 58 4c 39 51 76 6f 35 78 6d 4a 30 55 6b 66 49 43 67 57 6c 4d 64 76 52 39 68 33 4b 32 32 2f 58 58 50 52 4d 4d 78 39 39 4b 4f 35 58 2b 69 33 68 73 50 78 31 56 45 66 4e 5a 50 7a 61 47 46 2f 66 2f 2b 6c 77 57 44 36 6e 71 2b 69 2f 38 78 34 54 4a 55 35 44 6e 46 6f 59 51 50 70 43 41 59 73 31 4d 42 41 54 52 69 57 32 38 68 4c 6b 56 4d 79 57 68 32 76 67 37 73 65 76 57 57 4e 70 64 64 38 47 4d 7a 65 4a 76 71 73 61 78 68 75 36 4a 37 49 50 32 75 57 31 38 78 6e 73 55 35 4f 54 76 7a 32 50 78 63 74 58 2f 78 4f 30 66 54 56 5a 30 56 49 38 6f 36 66 57 49 62 37 46 74 7a 6a 68 57 65 74 79 69 72 36 39 33 41 50 33 4b 6a 6a 5a 38 32 31 73 76 6c 73 6e 70 77 59 78 76 68 4c 2f 31 7a 30 54 59 52 70 47 4e 46 55 54 39 65 58 5a 37 64 57 53 4c Data Ascii: QQ5LwArltZ5UUKUXL9Qvo5xmJ0UkfICgWlMdvR9h3K22/XXPRMMx99KO5X+i3hsPx1VEfNZPzaGF/f/+lwWD6nq+i/8x4TJU5DnFoYQPpCAYs1MBATRiW28hLkVMyWh2vg7sevWWNpdd8GMzeJvqsaxhu6J7IP2uW18xnsU5OTvz2PxctX/xO0fTVZ0VI8o6fWIb7FtzjhWetyir693AP3KjjZ821svlsnpwYxvhL/1z0TYRpGNFUT9eXZ7dWSL
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 43 47 6d 6a 6b 56 55 76 4a 4f 32 6a 6f 32 59 58 6d 73 72 7a 79 61 58 6d 4f 6e 4c 58 59 43 4b 51 78 76 50 49 64 43 55 44 46 4b 37 46 4c 55 66 2b 42 5a 63 30 49 63 53 32 57 65 69 41 75 54 5a 54 65 55 6c 6b 65 56 33 6c 55 71 37 47 61 36 4a 54 4e 4e 51 30 4a 78 6c 69 4b 46 73 50 57 54 6c 57 51 6b 37 75 51 6d 70 54 63 51 52 73 42 78 42 57 4e 5a 39 6e 57 56 5a 6a 4f 59 37 6e 30 72 77 6f 61 42 69 58 2f 42 72 6d 49 44 47 46 72 62 4b 53 59 68 47 62 55 72 78 37 58 33 2f 4d 39 65 65 62 63 50 78 4c 57 45 4b 69 79 49 6f 46 51 30 75 72 43 50 45 34 6c 54 4a 56 68 44 6d 66 46 77 73 5a 53 38 37 5a 58 41 6c 61 53 34 42 4c 4c 4d 65 37 37 78 51 4d 53 59 59 73 44 46 37 55 65 46 62 69 42 4d 6e 7a 63 78 35 62 39 46 52 58 46 36 44 41 64 55 38 78 70 41 61 30 39 74 71 57 5a 54 70 Data Ascii: CGmjkVUvJO2jo2YXmsrzyaXmOnLXYCKQxvPIdCUDFK7FLUf+BZc0IcS2WeiAuTZTeUlkeV3lUq7Ga6JTNNQ0JxliKFsPWTlWQk7uQmpTcQRsBxBWNZ9nWVZjOY7n0rwoaBiX/BrmIDGFrbKSYhGbUrx7X3/M9eebcPxLWEKiyIoFQ0urCPE4lTJVhDmfFwsZS87ZXAlaS4BLLMe77xQMSYYsDF7UeFbiBMnzcx5b9FRXF6DAdU8xpAa09tqWZTp
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 56 4e 49 6b 67 55 6b 4b 6b 38 61 6b 6f 42 6b 6d 55 64 51 58 4d 33 69 57 55 48 6d 2f 4b 36 74 38 30 69 43 76 4a 42 51 74 48 49 38 79 79 74 63 65 59 6f 54 72 67 42 4f 53 41 45 79 67 6b 58 46 72 72 51 72 71 46 31 78 4d 52 78 37 71 41 39 35 52 41 43 6b 61 47 51 41 73 65 47 77 48 38 33 47 2b 75 51 35 51 42 63 56 79 79 64 50 48 6f 79 48 4d 4d 79 75 4d 77 63 6b 67 46 76 35 47 39 35 76 41 42 36 6b 65 64 69 41 4f 68 73 52 42 50 44 6c 4a 33 6b 64 48 71 4a 73 44 2f 37 47 31 2b 59 79 33 49 75 47 30 58 37 30 4e 63 70 61 51 4e 4f 79 51 71 5a 48 69 7a 70 35 5a 6a 68 35 70 67 73 64 32 6b 33 79 50 64 77 66 41 5a 4f 79 44 2b 68 6b 66 50 55 4b 35 44 4b 58 78 2f 54 2b 42 74 77 66 77 74 30 75 66 4e 48 42 66 6d 76 36 77 4c 57 6f 46 54 47 76 58 6a 39 61 4c 38 69 6d 46 6c 47 49 Data Ascii: VNIkgUkKk8akoBkmUdQXM3iWUHm/K6t80iCvJBQtHI8yytceYoTrgBOSAEygkXFrrQrqF1xMRx7qA95RACkaGQAseGwH83G+uQ5QBcVyydPHoyHMMyuMwckgFv5G95vAB6kediAOhsRBPDlJ3kdHqJsD/7G1+Yy3IuG0X70NcpaQNOyQqZHizp5Zjh5pgsd2k3yPdwfAZOyD+hkfPUK5DKXx/T+Btwfwt0ufNHBfmv6wLWoFTGvXj9aL8imFlGI
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 49 67 66 62 4b 65 4b 32 32 61 4e 72 30 4e 62 6d 35 6d 37 76 31 67 5a 76 4f 6b 38 45 64 59 34 56 39 38 38 57 49 48 73 54 4f 61 50 51 4c 71 4b 51 49 75 4e 51 46 48 51 66 2f 43 5a 4f 56 78 46 45 62 4a 6c 35 41 4b 42 4f 74 59 66 7a 7a 69 64 38 53 49 33 38 48 77 46 63 63 6a 53 72 74 48 65 39 6b 73 6a 43 48 79 64 35 33 49 46 32 4d 73 67 54 36 50 50 67 38 34 59 6f 46 70 4d 2b 63 41 53 62 79 52 6f 4b 49 45 72 75 4b 51 6f 42 30 69 6b 59 33 46 73 6b 42 36 49 62 6c 42 5a 62 46 77 72 65 55 54 6d 45 69 36 67 6b 6f 48 5a 69 64 43 74 5a 74 67 53 41 4c 75 6e 47 36 7a 31 67 46 63 41 6f 38 43 68 69 51 55 58 67 42 53 48 54 6b 45 56 61 49 6e 4b 32 6d 50 30 31 53 64 38 31 32 6c 6f 65 31 6f 57 74 72 51 39 65 65 30 68 76 49 52 54 2b 66 47 2f 7a 4d 53 54 45 36 37 79 2b 51 63 51 Data Ascii: IgfbKeK22aNr0Nbm5m7v1gZvOk8EdY4V988WIHsTOaPQLqKQIuNQFHQf/CZOVxFEbJl5AKBOtYfzzid8SI38HwFccjSrtHe9ksjCHyd53IF2MsgT6PPg84YoFpM+cASbyRoKIEruKQoB0ikY3FskB6IblBZbFwreUTmEi6gkoHZidCtZtgSALunG6z1gFcAo8ChiQUXgBSHTkEVaInK2mP01Sd812loe1oWtrQ9ee0hvIRT+fG/zMSTE67y+QcQ
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 35 76 6c 30 50 66 4a 72 66 68 48 5a 66 67 62 6b 69 30 68 6d 39 47 4e 4e 75 75 78 56 43 71 30 42 39 75 35 4d 49 62 70 4f 70 55 49 67 54 35 2b 49 2b 55 4b 63 62 70 68 45 38 4d 46 48 46 62 56 4a 59 73 41 33 74 4f 74 45 32 75 58 48 7a 6e 6b 5a 54 64 64 31 68 56 6a 5a 4e 78 39 67 4c 36 42 7a 61 69 79 64 47 63 75 68 76 4c 50 68 6c 4c 2f 44 4b 2f 73 4b 47 37 53 36 4a 74 71 66 61 56 61 4a 46 45 70 63 57 44 6b 78 48 58 5a 49 71 74 6d 59 63 75 2f 6a 36 69 38 64 30 77 79 35 4c 6a 71 63 36 36 43 43 54 6b 77 75 75 61 63 6a 4a 38 62 32 50 4b 49 59 70 48 77 33 4d 2f 4c 70 2b 78 76 52 39 63 33 65 58 68 47 66 30 39 65 4f 65 72 36 57 77 78 41 6b 43 4a 2b 47 55 74 76 6f 57 49 57 57 78 41 44 37 38 58 6e 34 39 6c 31 76 50 39 33 7a 46 6b 6c 68 52 53 67 6b 7a 33 6f 4f 73 6f 7a Data Ascii: 5vl0PfJrfhHZfgbki0hm9GNNuuxVCq0B9u5MIbpOpUIgT5+I+UKcbphE8MFHFbVJYsA3tOtE2uXHznkZTdd1hVjZNx9gL6BzaiydGcuhvLPhlL/DK/sKG7S6JtqfaVaJFEpcWDkxHXZIqtmYcu/j6i8d0wy5Ljqc66CCTkwuuacjJ8b2PKIYpHw3M/Lp+xvR9c3eXhGf09eOer6WwxAkCJ+GUtvoWIWWxAD78Xn49l1vP93zFklhRSgkz3oOsoz
2024-09-25 08:49:41 UTC	1369	IN	Data Raw: 57 4e 2f 34 70 67 79 41 74 6f 57 67 6c 6d 6e 75 4f 49 47 39 30 2f 52 38 4d 30 51 58 66 36 50 75 32 62 5a 58 2f 30 49 6d 68 2b 36 75 62 37 69 4b 49 64 36 6c 76 6d 4f 46 79 36 36 35 33 78 31 34 71 31 37 41 46 31 7a 67 5a 79 68 64 5a 70 6b 35 6d 5a 54 50 35 49 44 7a 71 67 45 2f 75 41 79 7a 50 32 4b 36 7a 42 5a 7a 68 6d 45 49 59 76 56 72 37 57 6a 79 78 66 2b 41 4f 4a 47 59 55 45 6c 57 50 34 72 32 57 73 42 38 52 36 4e 58 6a 2f 53 4a 77 41 72 2b 57 4b 5a 48 44 74 47 41 34 4f 6e 57 49 49 37 54 38 48 43 66 78 4f 5a 6c 69 37 2f 4b 4e 4a 67 31 71 6d 2b 50 70 32 49 4e 2b 79 34 4f 32 39 32 77 47 75 75 6d 43 42 74 41 46 6b 38 43 43 72 73 41 39 53 69 41 61 61 49 44 7a 63 6f 6f 51 64 70 65 4e 49 4d 67 76 65 7a 61 32 59 79 4d 4a 5a 46 33 38 35 58 31 7a 51 76 62 4a 66 4f Data Ascii: WN/4pgyAtoWglmnuOIG90/R8M0QXf6Pu2bZX/0Imh+6ub7iKId6lvmOFy6653x14q17AF1zgZyhdZpk5mZTP5IDzqgE/uAyzP2K6zBZzhmEIYvVr7Wjyxf+AOJGYUElWP4r2WsB8R6NXj/SJwAr+WKZHDtGA4OnWII7T8HCfxOZli7/KNJg1qm+Pp2IN+y4O292wGuumCBtAFk8CCrsA9SiAaaIDzcooQdpeNIMgveza2YyMJZF385X1zQvbJfO

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:41 UTC	605	OUT	GET /wp-content/plugins/post-views-counter/css/frontend.min.css?ver=1.4.7 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:41 UTC	773	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:41 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Thu, 20 Jun 2024 22:50:05 GMT etag: W/"6674b21d-422" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=GzQ0I2h4O8dpiCpFteF1BI4p58%2Blcf56Q%2BeaEPUfSu3dEaonRCI0YSm%2By8ly%2B7pgPA4x2P4%2BFbFEeH9tI5wXQ08R4MJ5BocabzDk1R2k68MCQN5EydECZKeUzbf6Oup3%2BN0gZfiO"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c329aa3142e2-EWR
2024-09-25 08:49:41 UTC	596	IN	Data Raw: 34 32 32 0d 0a 2e 70 6f 73 74 2d 76 69 65 77 73 2e 65 6e 74 72 79 2d 6d 65 74 61 3e 73 70 61 6e 7b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 66 6f 6e 74 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 7d 2e 70 6f 73 74 2d 76 69 65 77 73 2e 65 6e 74 72 79 2d 6d 65 74 61 3e 73 70 61 6e 2e 70 6f 73 74 2d 76 69 65 77 73 2d 69 63 6f 6e 2e 64 61 73 68 69 63 6f 6e 73 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 69 6e 68 65 72 69 74 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 6d 69 64 64 6c 65 7d 2e 70 6f 73 74 2d 76 69 65 77 73 2e 6c 6f 61 64 2d 64 79 6e 61 6d 69 Data Ascii: 422.post-views.entry-meta>span{margin-right:0!important;font:16px;line-height:1}.post-views.entry-meta>span.post-views-icon.dashicons{display:inline-block;font-size:16px;line-height:1;text-decoration:inherit;vertical-align:middle}.post-views.load-dynami
2024-09-25 08:49:41 UTC	469	IN	Data Raw: 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 30 2e 33 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 63 6f 6c 6f 72 3a 23 36 36 31 30 66 32 7d 2e 70 6f 73 74 2d 76 69 65 77 73 2e 6c 6f 61 64 2d 64 79 6e 61 6d 69 63 2e 6c 6f 61 64 69 6e 67 20 2e 70 6f 73 74 2d 76 69 65 77 73 2d 63 6f 75 6e 74 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 36 70 78 3b 68 65 69 67 68 74 3a 31 36 70 78 70 78 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 62 6f 72 64 65 72 3a 32 70 78 20 73 6f 6c 69 64 20 63 75 72 72 65 6e 74 43 6f 6c 6f 72 3b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 63 75 72 72 65 6e 74 43 6f 6c 6f 72 20 23 66 66 66 30 20 63 75 72 72 Data Ascii: sition:opacity 0.3s ease-in-out;position:relative;color:#6610f2}.post-views.load-dynamic.loading .post-views-count:after{content:'';display:block;width:16px;height:16pxpx;border-radius:50%;border:2px solid currentColor;border-color:currentColor #fff0 curr
2024-09-25 08:49:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65266)
Category:	dropped
Size (bytes):	158005
Entropy (8bit):	5.284310833637965
Encrypted:	false
SSDEEP:	3072:cWdIxUMz/tGzT3+XtHi2iX6JPMupdggt1YHWyFxAcDHzEJLDnWTnWNBEBysX6qMa:dwhggc1l7
MD5:	E53EC3D6E21BE78115810135F5E956FE
SHA1:	523892839B88351523E0498BA881C4431197B54E
SHA-256:	B15C3EA03D50C2430490E7416733A254FEEA4237BB60B54181BD3473EBE4149F
SHA-512:	84B080EAAA043928F038421CEB18BBA7483AFEE5B6480A92EE01992317CDE2361A6DD255B16EC036E51E8A1FEF46B5379C6A5FF5C9EC69D682F96DEAA03A8842
Malicious:	false
Reputation:	moderate, very likely benign file
Preview:	/!. MediaElement.js. * http://www.mediaelementjs.com/. . Wrapper that mimics native HTML5 MediaElement (audio and video). * using a variety of technologies (pure JavaScript, Flash, iframe). . Copyright 2010-2017, John Dyer (http://j.hn/). * License: MIT. . /.!function r(a,s,l){function d(n,e){if(!s[n]){if(!a[n]){var t="function"==typeof require&&require;if(!e&&t)return t(n,!0);if(u)return u(n,!0);var o=new Error("Cannot find module '"+n+"'");throw o.code="MODULE_NOT_FOUND",o}var i=s[n]={exports:{}};a[n][0].call(i.exports,function(e){var t=a[n][1][e];return d(t\|\|e)},i,i.exports,r,a,s,l)}return s[n].exports}for(var u="function"==typeof require&&require,e=0;e<l.length;e++)d(l[e]);return d}({1:[function(e,t,n){},{}],2:[function(i,r,e){(function(e){var t,n=void 0!==e?e:"undefined"!=typeof window?window:{},o=i(1);"undefined"!=typeof document?t=document:(t=n["__GLOBAL_DOCUMENT_CACHE@4"])\|\|(t=n["__GLOBAL_DOCUMENT_CACHE@4"]=o),r.exports=t}).call(this,"undefined"!=typeof global?global

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (13479)
Category:	downloaded
Size (bytes):	13577
Entropy (8bit):	5.272065782731947
Encrypted:	false
SSDEEP:	192:5rprDN+sag6ifKIUpQI99P1tLm9kdgyq1+J3aCJQ+h4MPLORq:5rprxaefKI0LP19m4q1WW+h4Mjp
MD5:	9FFEB32E2D9EFBF8F70CAABDED242267
SHA1:	3AD0C10E501AC2A9BFA18F9CD7E700219B378738
SHA-256:	5274F11E6FB32AE0CF2DFB9F8043272865C397A7C4223B4CFA7D50EA52FBDE89
SHA-512:	8D6BE545508A1C38278B8AD780C3758AE48A25E4E12EEE443375AA56031D9B356F8C90F22D4F251140FA3F65603AF40523165E33CAE2E2D62FC78EC106E3D731
Malicious:	false
Reputation:	high, very likely benign file
URL:	https://amtemu-official.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1
Preview:	/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /."undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){return t(e,window)}):"object"==typeof module&&module.exports?module.exports=t(require("jquery"),window):t(jQuery,window)}(function(s,n){"use strict";function e(e){return 0<=function(e,t){for(var r=/^(\d+)\.(\d+)\.(\d+)/,n=r.exec(e)\|\|[],o=r.exec(t)\|\|[],a=1;a<=3;a++){if(+o[a]<+n[a])return 1;if(+n[a]<+o[a])return-1}return 0}(s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.migrateIsPatchEnabled=function(e){return!t[e]},n.console&&n.console.log&&(s&&e("3.0.0")&&!e("5.0.0")\|\|n.console.log("JQMIGRATE: jQuery 3.x-4.x REQUIRED"),s.migrateWarnings

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (6194)
Category:	dropped
Size (bytes):	6464
Entropy (8bit):	5.237796564656252
Encrypted:	false
SSDEEP:	192:nuKZ7HKiSON64sKenMsCUV2E4eTwEFgImI9lJy6yrEZBd:nuYHKiSOmK9+TwEFgImIRy6yrEl
MD5:	170687433986A4A559FA4F16B1D7C70E
SHA1:	84349B5FB0FCB057AE1768667F480FD607A1DA49
SHA-256:	722A90D42EF2BD0EA38F0FDAC6B4C0523AA4A027E9FFE889972100746E165582
SHA-512:	56A266D6ABC2690A87954AF3BC88B15C0FA08C3A8E9047741E8B18FD4179FBC107573BF19C242341BD5A7F7955DB1C6394A2E9240332BFCCA1785B47ADB6CEE2
Malicious:	false
Preview:	/!. MediaElement.js. * http://www.mediaelementjs.com/. . Wrapper that mimics native HTML5 MediaElement (audio and video). * using a variety of technologies (pure JavaScript, Flash, iframe). . Copyright 2010-2017, John Dyer (http://j.hn/). * License: MIT. . /.!function a(o,s,u){function c(n,e){if(!s[n]){if(!o[n]){var t="function"==typeof require&&require;if(!e&&t)return t(n,!0);if(l)return l(n,!0);var r=new Error("Cannot find module '"+n+"'");throw r.code="MODULE_NOT_FOUND",r}var i=s[n]={exports:{}};o[n][0].call(i.exports,function(e){var t=o[n][1][e];return c(t\|\|e)},i,i.exports,a,o,s,u)}return s[n].exports}for(var l="function"==typeof require&&require,e=0;e<u.length;e++)c(u[e]);return c}({1:[function(e,t,n){"use strict";var T={promise:null,load:function(e){"undefined"!=typeof Vimeo?T._createPlayer(e):(T.promise=T.promise\|\|mejs.Utils.loadScript("https://player.vimeo.com/api/player.js"),T.promise.then(function(){T._createPlayer(e)}))},_createPlayer:function(e){var t=new Vimeo.P

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:41 UTC	606	OUT	GET /wp-content/plugins/wccp-pro/css-protect.css?wccp_ver_num=1&ver=10.9.2 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:41 UTC	767	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:41 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Mon, 05 Aug 2024 22:49:27 GMT etag: W/"66b156f7-65a" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WnzUEM8LotT%2Fvn83%2FFZfexYxK3kfJPHmsbFShQquT6QJX67dNEOg0OdvzuQUDRX4qLwyhCT7ehZr%2Fne09wvYhwrr60V7EImVjCDAnoUGnzDp47gwy3tu743LpUMJzpyE1EKqoaqJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c329cd3d3338-EWR
2024-09-25 08:49:41 UTC	602	IN	Data Raw: 36 35 61 0d 0a 2a 3a 6e 6f 74 28 69 6e 70 75 74 29 3a 6e 6f 74 28 74 65 78 74 61 72 65 61 29 3a 6e 6f 74 28 74 65 78 74 29 3a 6e 6f 74 28 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3d 22 74 72 75 65 22 5d 29 3a 6e 6f 74 28 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3d 22 74 72 75 65 22 5d 20 2a 29 3a 6e 6f 74 28 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 5d 29 3a 6e 6f 74 28 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 5d 20 2a 29 3a 6e 6f 74 28 63 6f 64 65 29 3a 6e 6f 74 28 63 6f 64 65 20 2a 29 20 2c 0d 0a 2a 3a 3a 61 66 74 65 72 2c 0d 0a 2a 3a 3a 62 61 63 6b 64 72 6f 70 2c 0d 0a 2a 3a 3a 62 65 66 6f 72 65 2c 0d 0a 2a 3a 3a 63 75 65 2c 0d 0a 2a 3a 3a 6d 61 72 6b 65 72 2c 0d 0a 2a 3a 3a 70 6c 61 63 65 68 6f 6c 64 65 72 0d 0a 7b 0d 0a 09 Data Ascii: 65a:not(input):not(textarea):not(text):not([contenteditable="true"]):not([contenteditable="true"] ):not([contenteditable]):not([contenteditable] ):not(code):not(code ) ,::after,::backdrop,::before,::cue,::marker,::placeholder{
2024-09-25 08:49:41 UTC	1031	IN	Data Raw: 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 7d 0d 0a 2a 3a 6e 6f 74 28 69 6e 70 75 74 29 3a 6e 6f 74 28 74 65 78 74 61 72 65 61 29 3a 6e 6f 74 28 74 65 78 74 29 3a 6e 6f 74 28 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3d 22 74 72 75 65 22 5d 29 3a 6e 6f 74 28 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3d 22 74 72 75 65 22 5d 20 2a 29 3a 6e 6f 74 28 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 5d 29 3a 6e 6f 74 28 5b 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 5d 20 2a 29 3a 6e 6f 74 28 63 6f 64 65 29 3a 6e 6f 74 28 63 6f 64 65 20 2a 29 3a 3a 2d 6d 6f 7a 2d 73 65 6c 65 63 74 69 6f 6e 20 7b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 3b 20 7d 0d 0a 0d 0a 0d 0a 2e 63 6f 76 65 72 2d 63 6f Data Ascii: ackground: transparent; }:not(input):not(textarea):not(text):not([contenteditable="true"]):not([contenteditable="true"] ):not([contenteditable]):not([contenteditable] ):not(code):not(code )::-moz-selection { background: transparent; }.cover-co
2024-09-25 08:49:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:41 UTC	614	OUT	GET /wp-content/plugins/wccp-pro/css/print-protection.css?wccp_ver_num=1&ver=6.3.5 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:41 UTC	807	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:41 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close vary: Referer x-accel-version: 0.01 last-modified: Mon, 05 Aug 2024 22:49:27 GMT etag: W/"e0-61ef77d47ec15" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8mEHCvlM9jjAEH%2BtKzvAFkoN17hG9Px5k14e42tzS0na5j1GUWZ%2FZSHR3JAdzEXZfL2PobkJM5boKMs2oBbvAcywbLWF1AuGLEXI5SDt1VyUwK7MIbJsNFwfngZGTOednZZryP36"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c329da29726b-EWR
2024-09-25 08:49:41 UTC	230	IN	Data Raw: 65 30 0d 0a 2f 2a 20 42 45 47 49 4e 20 77 70 63 70 5f 70 72 69 6e 74 5f 70 61 67 65 5f 70 72 65 76 65 6e 74 65 72 5f 73 63 72 69 70 74 20 2a 2f 0a 09 09 40 6d 65 64 69 61 20 70 72 69 6e 74 20 7b 0a 09 09 09 62 6f 64 79 20 2a 20 7b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 20 21 69 6d 70 6f 72 74 61 6e 74 3b 7d 0a 09 09 09 62 6f 64 79 3a 61 66 74 65 72 20 7b 0a 09 09 09 09 63 6f 6e 74 65 6e 74 3a 20 22 59 6f 75 20 61 72 65 20 6e 6f 74 20 61 6c 6c 6f 77 65 64 20 74 6f 20 70 72 69 6e 74 20 74 68 69 73 20 70 61 67 65 21 22 3b 20 7d 0a 09 09 09 7d 0a 2f 2a 20 45 4e 44 20 77 70 63 70 5f 70 72 69 6e 74 5f 70 61 67 65 5f 70 72 65 76 65 6e 74 65 72 5f 73 63 72 69 70 74 20 2a 2f 0a 0a 0d 0a Data Ascii: e0/* BEGIN wpcp_print_page_preventer_script /@media print {body { display: none !important;}body:after {content: "You are not allowed to print this page!"; }}/* END wpcp_print_page_preventer_script */
2024-09-25 08:49:41 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:41 UTC	589	OUT	GET /wp-content/plugins/post-views-counter/js/frontend.min.js?ver=1.4.7 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:42 UTC	775	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:42 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Thu, 20 Jun 2024 22:50:05 GMT etag: W/"6674b21d-aec" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JYdrAmrBIQ8Uf4t7HN8aGBi5Rbb1W8yFwIANBJyfjjdUclmtYbHUfKZDWs3lVjhXKVYx4PF3aorzWWPguh96PgRvacIS6UBOt814Vb45M98J7RGifRPJQp80PwBlJgkK77EnIQMV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c32d58264273-EWR
2024-09-25 08:49:42 UTC	594	IN	Data Raw: 61 65 63 0d 0a 76 61 72 20 69 6e 69 74 50 6f 73 74 56 69 65 77 73 43 6f 75 6e 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 28 50 6f 73 74 56 69 65 77 73 43 6f 75 6e 74 65 72 3d 7b 70 72 6f 6d 69 73 65 3a 6e 75 6c 6c 2c 61 72 67 73 3a 7b 7d 2c 69 6e 69 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 61 72 67 73 3d 65 3b 6c 65 74 20 74 3d 7b 7d 2c 61 3d 22 70 76 63 5f 76 69 73 69 74 73 22 2b 28 21 31 21 3d 3d 65 2e 6d 75 6c 74 69 73 69 74 65 3f 22 5f 22 2b 70 61 72 73 65 49 6e 74 28 65 2e 6d 75 6c 74 69 73 69 74 65 29 3a 22 22 29 3b 22 63 6f 6f 6b 69 65 6c 65 73 73 22 3d 3d 3d 65 2e 64 61 74 61 53 74 6f 72 61 67 65 26 26 74 68 69 73 2e 69 73 4c 6f 63 61 6c 53 74 6f 72 61 67 65 41 76 61 69 6c 61 62 6c 65 28 29 3f 28 74 2e 73 74 6f 72 61 67 65 5f 74 Data Ascii: aecvar initPostViewsCounter=function(){(PostViewsCounter={promise:null,args:{},init:function(e){this.args=e;let t={},a="pvc_visits"+(!1!==e.multisite?"_"+parseInt(e.multisite):"");"cookieless"===e.dataStorage&&this.isLocalStorageAvailable()?(t.storage_t
2024-09-25 08:49:42 UTC	1369	IN	Data Raw: 74 49 44 2c 74 68 69 73 2e 70 72 6f 6d 69 73 65 3d 74 68 69 73 2e 72 65 71 75 65 73 74 28 65 2e 72 65 71 75 65 73 74 55 52 4c 2c 74 2c 22 50 4f 53 54 22 2c 7b 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 3b 20 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 7d 2c 61 29 29 7d 2c 72 65 71 75 65 73 74 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 61 2c 6f 2c 72 3d 22 22 29 7b 6c 65 74 20 6e 3d 7b 6d 65 74 68 6f 64 3a 61 2c 6d 6f 64 65 3a 22 63 6f 72 73 22 2c 63 61 63 68 65 3a 22 6e 6f 2d 63 61 63 68 65 22 2c 63 72 65 64 65 6e 74 69 61 6c 73 3a 22 73 61 6d 65 2d 6f 72 69 67 69 6e 22 2c 68 65 61 64 65 72 73 3a 6f 2c 62 6f 64 79 3a 74 68 69 73 2e 70 72 65 70 61 72 65 52 Data Ascii: tID,this.promise=this.request(e.requestURL,t,"POST",{"Content-Type":"application/x-www-form-urlencoded; charset=utf-8"},a))},request:function(e,t,a,o,r=""){let n={method:a,mode:"cors",cache:"no-cache",credentials:"same-origin",headers:o,body:this.prepareR
2024-09-25 08:49:42 UTC	840	IN	Data Raw: 6d 65 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 7b 76 61 72 20 72 3d 6e 65 77 20 44 61 74 65 2c 6e 3d 70 61 72 73 65 49 6e 74 28 74 2e 65 78 70 69 72 79 5b 6f 5d 29 3b 6e 3f 6e 2a 3d 31 65 33 3a 6e 3d 72 2e 67 65 74 54 69 6d 65 28 29 2b 38 36 34 65 35 2c 72 2e 73 65 74 54 69 6d 65 28 6e 29 2c 64 6f 63 75 6d 65 6e 74 2e 63 6f 6f 6b 69 65 3d 74 2e 6e 61 6d 65 5b 6f 5d 2b 22 3d 22 2b 74 2e 76 61 6c 75 65 5b 6f 5d 2b 22 3b 65 78 70 69 72 65 73 3d 22 2b 72 2e 74 6f 55 54 43 53 74 72 69 6e 67 28 29 2b 22 3b 70 61 74 68 3d 2f 22 2b 28 22 2f 22 3d 3d 3d 74 68 69 73 2e 61 72 67 73 2e 70 61 74 68 3f 22 22 3a 74 68 69 73 2e 61 72 67 73 2e 70 61 74 68 29 2b 22 3b 64 6f 6d 61 69 6e 3d 22 2b 74 68 69 73 2e 61 72 67 73 2e 64 6f 6d 61 69 6e 2b 61 2b 22 3b 53 61 6d 65 53 69 74 Data Ascii: me.length;o++){var r=new Date,n=parseInt(t.expiry[o]);n?n*=1e3:n=r.getTime()+864e5,r.setTime(n),document.cookie=t.name[o]+"="+t.value[o]+";expires="+r.toUTCString()+";path=/"+("/"===this.args.path?"":this.args.path)+";domain="+this.args.domain+a+";SameSit
2024-09-25 08:49:42 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:42 UTC	568	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.0 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:43 UTC	783	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:43 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Tue, 19 Sep 2023 12:32:44 GMT etag: W/"650994ec-155ba" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qliv772FRQkKLOE7wgW4lUpTXCPrEAfP%2BiEI5FDHdwuuiLyJDtUrJbwMD0jpoP3lbZd1Ird%2F5MUP8jT4CMRIXLu2E%2B0NhELmbZnVGn4n0gvTbG6sLozs5aaLxACJp5jV6FWeBsVq"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c332aa2742e3-EWR
2024-09-25 08:49:43 UTC	586	IN	Data Raw: 37 63 39 30 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7c90/! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 65 2e 74 6f 53 74 72 69 6e 67 2c 61 3d 6f 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 6c 65 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 2e 69 74 65 6d 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 43 3d 69 65 2e 64 6f 63 75 6d 65 6e 74 2c 75 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 Data Ascii: e.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n){var r,i
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: s.pushStack(ce.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(ce.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return th
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 76 61 72 20 74 2c 6e 3d 22 22 2c 72 3d 30 2c 69 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 69 29 7b 69 66 28 31 3d 3d 3d 69 7c 7c 39 3d 3d 3d 69 7c 7c 31 31 3d 3d 3d 69 29 72 65 74 75 72 6e 20 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3b 69 66 28 33 3d 3d 3d 69 7c 7c 34 3d 3d 3d 69 29 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 56 61 6c 75 65 7d 65 6c 73 65 20 77 68 69 6c 65 28 74 3d 65 5b 72 2b 2b 5d 29 6e 2b 3d 63 65 2e 74 65 78 74 28 74 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 63 28 4f 62 6a 65 63 74 28 65 29 29 3f 63 65 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 3f 5b Data Ascii: var t,n="",r=0,i=e.nodeType;if(i){if(1===i\|\|9===i\|\|11===i)return e.textContent;if(3===i\|\|4===i)return e.nodeValue}else while(t=e[r++])n+=ce.text(t);return n},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(c(Object(e))?ce.merge(n,"string"==typeof e?[
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 78 38 30 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 5c 30 22 3d 3d 3d 65 3f 22 5c 75 66 66 66 64 22 3a 65 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2b 22 5c 5c 22 2b 65 2e 63 68 61 72 43 6f 64 65 41 74 28 65 2e 6c 65 6e 67 74 68 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 63 65 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 65 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 66 2c 70 29 7d 3b 76 61 72 20 79 65 3d 43 2c 6d 65 3d 73 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 62 2c 77 2c 6f 2c 61 2c 54 2c 72 2c 43 2c Data Ascii: \x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g;function p(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e}ce.escapeSelector=function(e){return(e+"").replace(f,p)};var ye=C,me=s;!function(){var e,b,w,o,a,T,r,C,
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 2b 67 65 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 4e 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 71 3d 2f 5e 68 5c 64 24 2f 69 2c 4c 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 48 3d 2f 5b 2b 7e 5d 2f 2c 4f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 67 65 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 Data Ascii: +ge+"((?:-\\d)?\\d)"+ge+"*\\)\|)(?=[^-]\|$)","i")},N=/^(?:input\|select\|textarea\|button)$/i,q=/^h\d$/i,L=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,H=/[+~]/,O=new RegExp("\\\\[\\da-fA-F]{1,6}"+ge+"?\|\\\\([^\\r\\n\\f])","g"),P=function(e,t){var n="0x"+e.slice(1)-65
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 51 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 6b 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 65 29 7b 68 28 74 2c 21 30 29 7d 66 69 6e 61 6c 6c 79 7b 73 3d 3d 3d 53 26 26 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 72 65 28 74 2e 72 65 70 6c 61 63 65 28 76 65 2c 22 24 31 22 29 2c 65 2c 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 57 28 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 28 74 2c 6e 29 7b 72 65 Data Ascii: .length;while(o--)l[o]=(s?"#"+s:":scope")+" "+Q(l[o]);c=l.join(",")}try{return k.apply(n,f.querySelectorAll(c)),n}catch(e){h(t,!0)}finally{s===S&&e.removeAttribute("id")}}}return re(t.replace(ve,"$1"),e,n,r)}function W(){var r=[];return function e(t,n){re
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 2e 67 65 74 42 79 49 64 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d 63 65 2e 65 78 70 61 6e 64 6f 2c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 63 65 2e 65 78 70 61 6e 64 6f 29 2e 6c 65 6e 67 74 68 7d 29 2c 6c 65 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 22 2a 22 29 7d 29 2c 6c 65 2e 73 63 6f 70 65 3d 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 22 29 7d 29 2c 6c 65 2e 63 73 73 48 61 73 3d 24 28 Data Ascii: .getById=$(function(e){return r.appendChild(e).id=ce.expando,!T.getElementsByName\|\|!T.getElementsByName(ce.expando).length}),le.disconnectedMatch=$(function(e){return i.call(e,"*")}),le.scope=$(function(){return T.querySelectorAll(":scope")}),le.cssHas=$(
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 67 65 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 66 2b 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 53 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 7e 3d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a Data Ascii: '><option selected=''></option></select>",e.querySelectorAll("[selected]").length\|\|d.push("\\["+ge+"(?:value\|"+f+")"),e.querySelectorAll("[id~="+S+"-]").length\|\|d.push("~="),e.querySelectorAll("a#"+S+"+").length\|\|d.push(".#.+[+~]"),e.querySelectorAll(":
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 2e 6c 65 6e 67 74 68 7d 2c 49 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 21 3d 54 26 26 56 28 65 29 2c 63 65 2e 63 6f 6e 74 61 69 6e 73 28 65 2c 74 29 7d 2c 49 2e 61 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 21 3d 54 26 26 56 28 65 29 3b 76 61 72 20 6e 3d 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 72 3d 6e 26 26 75 65 2e 63 61 6c 6c 28 62 2e 61 74 74 72 48 61 6e 64 6c 65 2c 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 6e 28 65 2c 74 2c 21 43 29 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 30 21 3d 3d 72 3f 72 3a Data Ascii: .length},I.contains=function(e,t){return(e.ownerDocument\|\|e)!=T&&V(e),ce.contains(e,t)},I.attr=function(e,t){(e.ownerDocument\|\|e)!=T&&V(e);var n=b.attrHandle[t.toLowerCase()],r=n&&ue.call(b.attrHandle,t.toLowerCase())?n(e,t,!C):void 0;return void 0!==r?r:

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:42 UTC	576	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:43 UTC	786	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:43 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Tue, 19 Sep 2023 12:32:44 GMT etag: W/"650994ec-3509" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=0r71E9SV%2Faw4YhEeHBrGx5mqBfwZ%2BrrkrrkeBjaD7tW99FZ%2FFT9VtIYpWOKFZjZZJYRc5Z5EWeAVmbjJNj6pnFTWEUTl8HE6H9PB%2BIaCcJ%2B8IU7rqBynmBWqx7Oah7qoOjaqJSF7"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c332cfa48c4e-EWR
2024-09-25 08:49:43 UTC	583	IN	Data Raw: 33 35 30 39 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f Data Ascii: 3509/! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],functio
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 28 73 2e 66 6e 2e 6a 71 75 65 72 79 2c 65 29 7d 73 2e 6d 69 67 72 61 74 65 56 65 72 73 69 6f 6e 3d 22 33 2e 34 2e 31 22 3b 76 61 72 20 74 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 65 28 6e 75 6c 6c 29 3b 73 2e 6d 69 67 72 61 74 65 44 69 73 61 62 6c 65 50 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 74 5b 61 72 67 75 6d 65 6e 74 73 5b 65 5d 5d 3d 21 30 7d 2c 73 2e 6d 69 67 72 61 74 65 45 6e 61 62 6c 65 50 61 74 63 68 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 65 3d 30 3b 65 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 65 2b 2b 29 64 65 6c 65 74 65 20 74 5b 61 72 67 75 6d 65 6e 74 73 5b 65 5d 5d 7d 2c 73 2e 6d 69 67 Data Ascii: (s.fn.jquery,e)}s.migrateVersion="3.4.1";var t=Object.create(null);s.migrateDisablePatches=function(){for(var e=0;e<arguments.length;e++)t[arguments[e]]=!0},s.migrateEnablePatches=function(){for(var e=0;e<arguments.length;e++)delete t[arguments[e]]},s.mig
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 65 73 65 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6f 3d 7b 7d 2c 73 2e 6d 69 67 72 61 74 65 57 61 72 6e 69 6e 67 73 2e 6c 65 6e 67 74 68 3d 30 7d 2c 22 42 61 63 6b 43 6f 6d 70 61 74 22 3d 3d 3d 6e 2e 64 6f 63 75 6d 65 6e 74 2e 63 6f 6d 70 61 74 4d 6f 64 65 26 26 75 28 22 71 75 69 72 6b 73 22 2c 22 6a 51 75 65 72 79 20 69 73 20 6e 6f 74 20 63 6f 6d 70 61 74 69 62 6c 65 20 77 69 74 68 20 51 75 69 72 6b 73 20 4d 6f 64 65 22 29 3b 76 61 72 20 64 2c 6c 2c 70 2c 66 3d 7b 7d 2c 6d 3d 73 2e 66 6e 2e 69 6e 69 74 2c 79 3d 73 2e 66 69 6e 64 2c 68 3d 2f 5c 5b 28 5c 73 2a 5b 2d 5c 77 5d 2b 5c 73 2a 29 28 5b 7e 7c 5e 24 2a 5d 3f 3d 29 5c 73 2a 28 5b 2d 5c 77 23 5d 2a 3f 23 5b 2d 5c 77 23 5d 2a 29 5c 73 2a 5c 5d 2f 2c 67 3d 2f 5c 5b 28 5c 73 2a 5b 2d 5c 77 5d 2b 5c 73 2a Data Ascii: eset=function(){o={},s.migrateWarnings.length=0},"BackCompat"===n.document.compatMode&&u("quirks","jQuery is not compatible with Quirks Mode");var d,l,p,f={},m=s.fn.init,y=s.find,h=/\[(\s[-\w]+\s)([~\|^$]?=)\s([-\w#]?#[-\w#])\s\]/,g=/\[(\s[-\w]+\s*
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 4a 53 4f 4e 2e 70 61 72 73 65 22 29 2c 63 28 73 2c 22 68 6f 6c 64 52 65 61 64 79 22 2c 73 2e 68 6f 6c 64 52 65 61 64 79 2c 22 68 6f 6c 64 52 65 61 64 79 22 2c 22 6a 51 75 65 72 79 2e 68 6f 6c 64 52 65 61 64 79 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 63 28 73 2c 22 75 6e 69 71 75 65 22 2c 73 2e 75 6e 69 71 75 65 53 6f 72 74 2c 22 75 6e 69 71 75 65 22 2c 22 6a 51 75 65 72 79 2e 75 6e 69 71 75 65 20 69 73 20 64 65 70 72 65 63 61 74 65 64 3b 20 75 73 65 20 6a 51 75 65 72 79 2e 75 6e 69 71 75 65 53 6f 72 74 22 29 2c 72 28 73 2e 65 78 70 72 2c 22 66 69 6c 74 65 72 73 22 2c 73 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2c 22 65 78 70 72 2d 70 72 65 2d 70 73 65 75 64 6f 73 22 2c 22 6a 51 75 65 72 79 2e 65 78 70 72 Data Ascii: precated; use JSON.parse"),c(s,"holdReady",s.holdReady,"holdReady","jQuery.holdReady is deprecated"),c(s,"unique",s.uniqueSort,"unique","jQuery.unique is deprecated; use jQuery.uniqueSort"),r(s.expr,"filters",s.expr.pseudos,"expr-pre-pseudos","jQuery.expr
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 65 63 61 74 65 64 22 29 2c 63 28 73 2c 22 69 73 57 69 6e 64 6f 77 22 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 22 69 73 57 69 6e 64 6f 77 22 2c 22 6a 51 75 65 72 79 2e 69 73 57 69 6e 64 6f 77 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 29 2c 73 2e 61 6a 61 78 26 26 28 6c 3d 73 2e 61 6a 61 78 2c 70 3d 2f 28 3d 29 5c 3f 28 3f 3d 26 7c 24 29 7c 5c 3f 5c 3f 2f 2c 69 28 73 2c 22 61 6a 61 78 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 6c 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 3b 72 65 74 75 72 6e 20 65 2e 70 72 6f 6d 69 73 65 26 26 28 63 28 65 2c 22 73 75 63 63 65 73 73 22 2c 65 2e 64 6f 6e 65 2c 22 6a 71 58 48 52 2d 6d 65 74 Data Ascii: ecated"),c(s,"isWindow",function(e){return null!=e&&e===e.window},"isWindow","jQuery.isWindow() is deprecated")),s.ajax&&(l=s.ajax,p=/(=)\?(?=&\|$)\|\?\?/,i(s,"ajax",function(){var e=l.apply(this,arguments);return e.promise&&(c(e,"success",e.done,"jqXHR-met
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 26 26 74 68 69 73 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 29 7c 7c 22 22 3b 65 26 26 73 2e 64 61 74 61 28 74 68 69 73 2c 22 5f 5f 63 6c 61 73 73 4e 61 6d 65 5f 5f 22 2c 65 29 2c 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 26 26 74 68 69 73 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 22 2c 21 65 26 26 21 31 21 3d 3d 74 26 26 73 2e 64 61 74 61 28 74 68 69 73 2c 22 5f 5f 63 6c 61 73 73 4e 61 6d 65 5f 5f 22 29 7c 7c 22 22 29 7d 29 29 7d 2c 22 74 6f 67 67 6c 65 43 6c 61 73 73 2d 62 6f 6f 6c 22 29 3b 76 61 72 20 51 2c 41 2c 52 3d 21 31 2c 43 3d 2f 5e 5b 61 2d 7a 5d 2f 2c 4e 3d 2f 5e 28 3f 3a 42 6f 72 64 65 Data Ascii: ch(function(){var e=this.getAttribute&&this.getAttribute("class")\|\|"";e&&s.data(this,"__className__",e),this.setAttribute&&this.setAttribute("class",!e&&!1!==t&&s.data(this,"__className__")\|\|"")}))},"toggleClass-bool");var Q,A,R=!1,C=/^[a-z]/,N=/^(?:Borde
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 29 2c 52 65 66 6c 65 63 74 2e 67 65 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 22 63 73 73 2d 6e 75 6d 62 65 72 22 2c 22 6a 51 75 65 72 79 2e 63 73 73 4e 75 6d 62 65 72 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 52 65 66 6c 65 63 74 2e 73 65 74 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 29 3a 73 2e 63 73 73 4e 75 6d 62 65 72 3d 41 29 3a 41 3d 73 2e 63 73 73 4e 75 6d 62 65 72 2c 51 3d 73 2e 66 6e 2e 63 73 73 2c 69 28 73 2e 66 6e 2c 22 63 73 73 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 72 2c 6e 2c 6f 3d 74 68 69 73 3b 72 65 74 75 72 6e 20 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 Data Ascii: ),Reflect.get.apply(this,arguments)},set:function(){return u("css-number","jQuery.cssNumber is deprecated"),Reflect.set.apply(this,arguments)}}):s.cssNumber=A):A=s.cssNumber,Q=s.fn.css,i(s.fn,"css",function(e,t){var r,n,o=this;return e&&"object"==typeof e
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 3d 22 6a 51 75 65 72 79 2e 66 78 2e 69 6e 74 65 72 76 61 6c 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 2c 6e 2e 72 65 71 75 65 73 74 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 73 2e 66 78 2c 22 69 6e 74 65 72 76 61 6c 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 2e 64 6f 63 75 6d 65 6e 74 2e 68 69 64 64 65 6e 7c 7c 75 28 22 66 78 2d 69 6e 74 65 72 76 61 6c 22 2c 50 29 2c 73 2e 6d 69 67 72 61 74 65 49 73 50 61 74 63 68 45 6e 61 62 6c 65 64 28 22 66 78 2d 69 6e 74 65 72 76 61 6c 22 29 26 26 76 6f 69 64 20 30 3d 3d 3d 53 3f 31 33 3a 53 7d 2c 73 65 74 3a 66 75 6e 63 Data Ascii: ="jQuery.fx.interval is deprecated",n.requestAnimationFrame&&Object.defineProperty(s.fx,"interval",{configurable:!0,enumerable:!0,get:function(){return n.document.hidden\|\|u("fx-interval",P),s.migrateIsPatchEnabled("fx-interval")&&void 0===S?13:S},set:func
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 2c 22 6a 51 75 65 72 79 2e 66 6e 2e 22 2b 74 2b 22 28 29 20 69 73 20 64 65 70 72 65 63 61 74 65 64 22 29 2c 65 2e 73 70 6c 69 63 65 28 30 2c 30 2c 74 29 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3f 74 68 69 73 2e 6f 6e 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 3a 28 74 68 69 73 2e 74 72 69 67 67 65 72 48 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 65 29 2c 74 68 69 73 29 29 7d 2c 22 73 68 6f 72 74 68 61 6e 64 2d 72 65 6d 6f 76 65 64 2d 76 33 22 29 7d 29 2c 73 2e 65 61 63 68 28 22 62 6c 75 72 20 66 6f 63 75 73 20 66 6f 63 75 73 69 6e 20 66 6f 63 75 73 6f 75 74 20 72 65 73 69 7a 65 20 73 63 72 6f 6c 6c 20 63 6c 69 63 6b 20 64 62 6c 63 6c 69 63 6b 20 6d 6f 75 73 65 64 6f 77 6e 20 6d 6f 75 73 65 75 70 20 6d 6f 75 73 65 6d 6f 76 65 20 6d 6f Data Ascii: ,"jQuery.fn."+t+"() is deprecated"),e.splice(0,0,t),arguments.length?this.on.apply(this,e):(this.triggerHandler.apply(this,e),this))},"shorthand-removed-v3")}),s.each("blur focus focusin focusout resize scroll click dblclick mousedown mouseup mousemove mo
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 6d 65 6e 74 61 74 69 6f 6e 2e 63 72 65 61 74 65 48 54 4d 4c 44 6f 63 75 6d 65 6e 74 28 22 22 29 3b 72 65 74 75 72 6e 20 74 2e 62 6f 64 79 2e 69 6e 6e 65 72 48 54 4d 4c 3d 65 2c 74 2e 62 6f 64 79 26 26 74 2e 62 6f 64 79 2e 69 6e 6e 65 72 48 54 4d 4c 7d 76 61 72 20 46 3d 2f 3c 28 3f 21 61 72 65 61 7c 62 72 7c 63 6f 6c 7c 65 6d 62 65 64 7c 68 72 7c 69 6d 67 7c 69 6e 70 75 74 7c 6c 69 6e 6b 7c 6d 65 74 61 7c 70 61 72 61 6d 29 28 28 5b 61 2d 7a 5d 5b 5e 5c 2f 5c 30 3e 5c 78 32 30 5c 74 5c 72 5c 6e 5c 66 5d 2a 29 5b 5e 3e 5d 2a 29 5c 2f 3e 2f 67 69 3b 73 2e 55 4e 53 41 46 45 5f 72 65 73 74 6f 72 65 4c 65 67 61 63 79 48 74 6d 6c 50 72 65 66 69 6c 74 65 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 73 2e 6d 69 67 72 61 74 65 45 6e 61 62 6c 65 50 61 74 63 68 65 73 28 22 Data Ascii: mentation.createHTMLDocument("");return t.body.innerHTML=e,t.body&&t.body.innerHTML}var F=/<(?!area\|br\|col\|embed\|hr\|img\|input\|link\|meta\|param)(([a-z][^\/\0>\x20\t\r\n\f])[^>])\/>/gi;s.UNSAFE_restoreLegacyHtmlPrefilter=function(){s.migrateEnablePatches("

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:42 UTC	587	OUT	GET /wp-content/themes/AMTEmuOfficial/js/responsive-menu.js?ver=1.0.0 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:43 UTC	824	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:43 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close vary: Referer x-accel-version: 0.01 last-modified: Thu, 26 Oct 2017 12:50:10 GMT etag: W/"342-55c729cc90480" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LZSGKg8cHG9nBp4Zed9GmepYs9ZWYlgwFm8R1fpeB8Vb1MxJ2B%2Bx3s%2FWiKj8fU5fwBIRkzr9zvhoa%2BMWeCfWJ2gyKxKtCthwmSVqDZYlAtq6sp9oDBsx9Fk25ITfoSoQL8HQeKmj"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c332dca65e6a-EWR
2024-09-25 08:49:43 UTC	545	IN	Data Raw: 33 34 32 0d 0a 2f 2a 2a 0a 20 2a 20 54 68 69 73 20 73 63 72 69 70 74 20 61 64 64 73 20 74 68 65 20 72 65 73 70 6f 6e 73 69 76 65 20 6d 65 6e 75 20 74 6f 20 74 68 65 20 65 6c 65 76 65 6e 34 30 20 50 72 6f 20 74 68 65 6d 65 2e 0a 20 2a 0a 20 2a 20 40 70 61 63 6b 61 67 65 20 65 6c 65 76 65 6e 34 30 5c 4a 53 0a 20 2a 20 40 61 75 74 68 6f 72 20 53 74 75 64 69 6f 50 72 65 73 73 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 47 50 4c 2d 32 2e 30 2b 0a 20 2a 2f 0a 0a 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 20 24 20 29 7b 0a 0a 09 24 28 22 2e 6e 61 76 2d 70 72 69 6d 61 72 79 20 2e 67 65 6e 65 73 69 73 2d 6e 61 76 2d 6d 65 6e 75 22 29 2e 61 64 64 43 6c 61 73 73 28 22 72 65 73 70 6f 6e 73 69 76 65 2d 6d 65 6e 75 22 29 2e 62 65 66 6f 72 65 28 27 3c 64 69 76 20 63 6c Data Ascii: 342/** * This script adds the responsive menu to the eleven40 Pro theme. * * @package eleven40\JS * @author StudioPress * @license GPL-2.0+ */jQuery(function( $ ){$(".nav-primary .genesis-nav-menu").addClass("responsive-menu").before('<div cl
2024-09-25 08:49:43 UTC	296	IN	Data Raw: 0a 09 09 09 24 28 22 2e 72 65 73 70 6f 6e 73 69 76 65 2d 6d 65 6e 75 20 3e 20 2e 6d 65 6e 75 2d 69 74 65 6d 22 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 22 6d 65 6e 75 2d 6f 70 65 6e 22 29 3b 0a 09 09 7d 0a 09 7d 29 3b 0a 0a 09 24 28 22 2e 72 65 73 70 6f 6e 73 69 76 65 2d 6d 65 6e 75 20 3e 20 2e 6d 65 6e 75 2d 69 74 65 6d 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 65 76 65 6e 74 29 7b 0a 09 09 69 66 20 28 65 76 65 6e 74 2e 74 61 72 67 65 74 20 21 3d 3d 20 74 68 69 73 29 0a 09 09 72 65 74 75 72 6e 3b 0a 09 09 09 24 28 74 68 69 73 29 2e 66 69 6e 64 28 22 2e 73 75 62 2d 6d 65 6e 75 3a 66 69 72 73 74 22 29 2e 73 6c 69 64 65 54 6f 67 67 6c 65 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 24 28 74 68 69 73 29 2e 70 61 72 65 6e 74 28 29 2e 74 6f Data Ascii: $(".responsive-menu > .menu-item").removeClass("menu-open");}});$(".responsive-menu > .menu-item").click(function(event){if (event.target !== this)return;$(this).find(".sub-menu:first").slideToggle(function() {$(this).parent().to
2024-09-25 08:49:43 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:42 UTC	628	OUT	GET /wp-content/uploads/2020/03/AMTEmu-Windows.jpg HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:43 UTC	790	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:43 GMT Content-Type: image/jpeg Content-Length: 79648 Connection: close last-modified: Thu, 19 Mar 2020 17:13:52 GMT etag: "5e73a850-13720" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CAzindjzNiHHig2o%2FRxL1bGHV5%2F4ohd3sPvwnpG3JDf1DLqQdg9uD%2BCxIpIM79VvnxcipvRClGtZ1ULjGBSFaR7C9cOg44vwdO1xAeHUhSIq7UnJ%2F659kLSGCCycDMCbui2Y%2FkFh"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c333ba680c74-EWR
2024-09-25 08:49:43 UTC	579	IN	Data Raw: ff d8 ff e1 19 db 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 01 2c 00 00 01 01 00 03 00 00 00 01 00 a9 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d2 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 30 3a 30 33 3a 31 39 20 31 37 3a 30 33 3a 35 35 00 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: ExifMM*,(12i ''Adobe Photoshop CS6 (Windows)2020:03:19 17:03:550
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 Data Ascii: ?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCSc
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: cf f4 31 19 b6 9c 9a 77 0d d5 ba cb 6d dc f7 33 fe 09 07 33 ae e0 bf ea 6e 37 5a a7 a1 74 ea f2 73 b2 2e c4 2d 6d 4d 1b 03 59 79 f5 6a b0 33 7f a9 fa 15 7b 23 eb 86 2e 66 61 c8 c9 65 ec a7 f6 7d 98 0f 61 af 9c 8c 82 d7 58 f6 57 bb df 4d 9f 67 66 cb 17 2d 91 9f 8a df aa bd 3f a0 80 ef b6 61 e5 bb 26 e7 6d fd 09 63 d9 78 fd 1d a4 fb 9f ba d6 7b 36 24 a7 ab fa 91 43 32 7a 16 5e 56 36 1d 1d 43 25 b6 57 e8 b3 20 37 8d ac f5 59 ea 58 3f 47 b7 df fd b5 93 99 f5 5f eb 1f d6 0a b2 2c a2 8c 7c 5b 5b d4 1f f6 8c 5f 50 06 36 cf 4d b5 fb 2d 6b 4e e6 d0 c6 55 f9 9e ff 00 59 56 fa bb d4 fa 26 0f 41 cd e9 7d 59 d9 6d a7 a8 5b 55 81 d8 71 b9 a5 a2 b7 7f 39 2d f4 fd 4b 2a 5a 9d 3b a9 f4 fa f1 eb c2 c4 39 0d fb 37 57 19 63 ed 00 b6 c1 5b 5a 1a ea af b5 c7 fa 4b fd fe 9f a9 Data Ascii: 1wm33n7Zts.-mMYyj3{#.fae}aXWMgf-?a&mcx{6$C2z^V6C%W 7YX?G_,\|[[_P6M-kNUYV&A}Ym[Uq9-K*Z;97Wc[ZK
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 55 6d 54 e7 54 01 2d 19 6d dc f6 c9 ff 00 04 f7 9a 32 2b 66 df f4 39 36 ab 39 16 66 56 dc 9c 9f 42 ba 1b e9 eb 75 60 49 68 fa 5e b5 4f 77 a1 6f bb f3 2e af d4 58 1d 6b 23 d6 b1 d8 d9 4c 38 d7 48 36 9c 69 7d 31 13 fa 4c 0b b7 59 8f 63 7f 3f d0 b7 62 4a 73 32 ab e8 87 70 a3 01 ec 76 b2 ef b4 5b b0 76 fa 36 d7 bb ff 00 05 56 70 f3 2d b2 a6 df 79 99 6b 68 c6 60 10 d6 d7 50 fd c6 ff 00 d5 ff 00 a5 b5 65 e5 39 8c 02 b6 dc cb 58 ed 77 30 39 80 7f 21 ed b3 e8 b9 ad 57 fe db 85 5d 4c a9 96 b0 ec 6c 03 f1 fa 49 29 7c bc ab 7d 07 7a 7a 91 c7 61 33 12 3f aa a9 9d ed ad 83 53 3a 4f 79 f1 52 b3 32 88 da d7 82 38 e5 06 db d8 74 07 81 0d f9 a4 a6 25 d0 00 71 e7 4d be 1f bc 7f cd 50 26 b0 0b bc 7b 79 a8 8b 1a 09 27 58 e0 28 97 84 94 c2 d7 45 2f 27 93 aa df ff 00 18 04 7f Data Ascii: UmTT-m2+f969fVBu`Ih^Owo.Xk#L8H6i}1LYc?bJs2pv[v6Vp-ykh`Pe9Xw09!W]LlI)\|}zza3?S:OyR28t%qMP&{y'X(E/'
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 61 d3 f3 3f 5c 75 8e 77 ae fa cd 85 af fa 22 c7 39 ae f4 bd cf ff 00 4b 6a 6a 6f 6e 17 53 6e 23 ae a6 9a eb 7e cc 8e a0 ea 3e d2 58 e8 dd 75 95 53 3b 9c c6 db ec fd 17 bd 53 be ba 99 4b 83 1a 1a 1d 13 e7 af 9a 86 00 77 db 28 0c c4 19 ee dd ed c2 21 ce 16 e8 7f 45 b2 9f d2 bf f7 fd 9f b8 a5 c2 41 04 8d 01 2d 1f 89 47 24 72 63 8e 49 09 cc 63 00 c8 75 fd 66 4a 77 fa 77 d6 5c 8f b2 83 94 fc 41 21 c1 d8 ed 07 19 e3 58 66 cb 71 de da ff 00 48 df 55 ff 00 cc db fe 09 6d e3 df 85 97 73 db 81 d5 5d 90 6a ac 38 e2 93 36 6c 92 e7 7a 7b 48 ae ef 43 fe eb 7d 0f f0 94 7e 7a e2 b1 5f 8e 30 da 2c c0 76 49 01 ff 00 ac 87 11 3e e6 6e 9d ad ff 00 05 fa 2a bf eb 9f cb 56 29 bd 8c cb 75 98 9d 31 ec ba b2 0b 00 73 b7 d7 63 5d 63 8d 95 fe 73 1d f9 9b 6b fa 1e 8a 91 a2 ef dd 7d Data Ascii: a?\uw"9KjjonSn#~>XuS;SKw(!EA-G$rcIcufJww\A!XfqHUms]j86lz{HC}~z_0,vI>n*V)u1sc]csk}
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: fe 7d 94 b2 8f fa e2 cb 1a 80 47 05 25 30 bb f9 a7 7c 17 45 f5 ff 00 ff 00 16 9d 57 fa f4 ff 00 ed be 3a e7 6e 07 d2 76 9d 97 45 f5 ff 00 ff 00 16 9d 57 fa f4 ff 00 ed bd 09 29 ff d5 e4 fa 0f 56 77 45 eb 18 bd 55 b5 0c 87 62 b9 e4 52 5d b0 3b 7b 1f 4f f3 9b 6c db b7 d5 dd f4 16 a3 3a ff 00 d5 73 cf d5 1c 50 00 ff 00 b9 2f ff 00 d2 2b 9c 1f eb e2 a6 38 49 4f 42 ef ac 7f 55 da 3f f1 25 8b 27 b7 da 1d ff 00 a4 14 0f d6 3f aa e4 c9 fa a5 8b ff 00 b1 2f ff 00 d2 0b 9d 3c 9f 8f 7e 7e 69 24 a7 a1 ff 00 9c 7f 55 ff 00 f9 d1 c5 ff 00 d8 97 ff 00 e9 14 bf e7 1f d5 7f fe 74 71 7f f6 25 ff 00 fa 41 73 c9 24 a7 a1 ff 00 9c 7f 55 ff 00 f9 d1 c5 ff 00 d8 97 ff 00 e9 04 ff 00 f3 8f ea bf ff 00 3a 38 bf fb 12 ff 00 fd 20 b9 d4 92 53 d1 7f ce 3f aa ff 00 fc e8 e2 ff 00 ec Data Ascii: }G%0\|EW:nvEW)VwEUbR];{Ol:sP/+8IOBU?%'?/<~~i$Utq%As$U:8 S?
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 74 74 6f 6d 6c 6f 6e 67 00 00 00 00 00 00 00 0c 63 72 6f 70 52 65 63 74 4c 65 66 74 6c 6f 6e 67 00 00 00 00 00 00 00 0d 63 72 6f 70 52 65 63 74 52 69 67 68 74 6c 6f 6e 67 00 00 00 00 00 00 00 0b 63 72 6f 70 52 65 63 74 54 6f 70 6c 6f 6e 67 00 00 00 00 00 38 42 49 4d 03 ed 00 00 00 00 00 10 00 48 00 00 00 01 00 02 00 48 00 00 00 01 00 02 38 42 49 4d 04 26 00 00 00 00 00 0e 00 00 00 00 00 00 00 00 00 00 3f 80 00 00 38 42 49 4d 04 0d 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 04 19 00 00 00 00 00 04 00 00 00 1e 38 42 49 4d 03 f3 00 00 00 00 00 09 00 00 00 00 00 00 00 00 01 00 38 42 49 4d 27 10 00 00 00 00 00 0a 00 01 00 00 00 00 00 00 00 02 38 42 49 4d 03 f5 00 00 00 00 00 48 00 2f 66 66 00 01 00 6c 66 66 00 06 00 00 00 00 00 01 00 2f 66 66 00 01 00 a1 99 9a Data Ascii: ttomlongcropRectLeftlongcropRectRightlongcropRectToplong8BIMHH8BIM&?8BIM8BIM8BIM8BIM'8BIMH/fflff/ff
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: 49 4d 04 14 00 00 00 00 00 04 00 00 00 01 38 42 49 4d 04 0c 00 00 00 00 18 71 00 00 00 01 00 00 00 a0 00 00 00 6b 00 00 01 e0 00 00 c8 a0 00 00 18 55 00 18 00 01 ff d8 ff ed 00 0c 41 64 6f 62 65 5f 43 4d 00 02 ff ee 00 0e 41 64 6f 62 65 00 64 80 00 00 00 01 ff db 00 84 00 0c 08 08 08 09 08 0c 09 09 0c 11 0b 0a 0b 11 15 0f 0c 0c 0f 15 18 13 13 15 13 13 18 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 01 0d 0b 0b 0d 0e 0d 10 0e 0e 10 14 0e 0e 0e 14 14 0e 0e 0e 0e 14 11 0c 0c 0c 0c 0c 11 11 0c 0c 0c 0c 0c 0c 11 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 00 6b 00 a0 03 01 22 00 02 11 01 03 11 01 ff dd 00 04 00 0a ff c4 01 3f 00 00 01 05 01 01 Data Ascii: IM8BIMqkUAdobe_CMAdobedk"?
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: cc ac f6 d6 f7 d2 e6 ba ac 32 43 d8 1e 0e ea ed ea 6f af f4 6c a6 b7 7b be c0 cb 2c cc cb 7f e8 b6 51 46 fb 15 df ae 5d 5a aa b1 47 45 a1 ee ba fb 1e db 32 dd 32 e1 ee f5 f6 5c 1b ff 00 6b 33 32 9d eb db 5f f8 3f e6 d2 52 7f f1 71 87 d2 de cc ee a1 d4 a9 df 4e 0b 5a d7 ba c8 75 4e 16 92 d6 31 f5 3f d8 ff 00 4b 66 f7 6f fd fa d6 bf 43 fa af d3 b0 3e b6 75 2a b3 b1 a9 b7 0a ac 7b 1d 58 b0 0b 18 ca ec b6 b7 e3 fb 6c 0e d9 67 a2 5d 5f f6 14 7e af e7 bb a0 7d 51 a2 8c 6a 9b 91 91 6e fc 9c a0 e0 5c d7 3e c3 15 d3 48 6f f3 bf e0 ea 7b ff 00 c1 fa 6a f6 67 d6 0e 9f 99 89 91 65 65 c3 a8 66 61 37 1d f0 d2 ca c4 3a c6 fa db cf e9 2a 6b 5f 65 9f 4d 89 2a 9c ae 97 f5 46 8e 9d f5 73 eb 1b 33 ea 65 b9 c1 b9 6d e9 ef b5 81 cf f4 31 19 b6 9c 9a 77 0d d5 ba cb 6d dc f7 33 Data Ascii: 2Col{,QF]ZGE22\k32_?RqNZuN1?KfoC>u{Xlg]_~}Qjn\>Ho{jgeefa7:k_eM*Fs3em1wm3
2024-09-25 08:49:43 UTC	1369	IN	Data Raw: ea c3 5b b5 de 9f af fa 2f 53 d5 77 e7 20 fa db 6c 0e 8d d0 46 9c 82 46 95 ee ff 00 83 6f e7 7f c1 ab 58 cf cb 7e 5e 25 38 0d 6d d9 76 3e 69 ad e1 a4 3a 03 be 9b 6e 3e 8f e9 1f bb f9 c5 36 3c 82 62 c0 23 a3 97 ce 72 92 e5 72 8c 73 90 91 31 13 06 3d b5 8f e9 7f 75 ab 45 3d 3d d8 ec af 26 c7 b6 ef f0 8c 0d 96 c4 80 c3 c7 b7 da db 3f b6 b6 70 5d d3 ed 25 a6 eb ee 65 4d 0d ab 29 95 ee b5 ad 05 db f1 b2 6b ff 00 b5 f8 8c af 67 a7 67 f4 85 9f 81 f6 b3 86 d7 d3 89 5d f4 80 f1 55 8e 92 f9 dc cd fa cb 5c df 7f a5 ff 00 6d ad 9c 56 64 ee 73 6d c4 ae a7 fb 2c 7b 58 d8 13 b9 fb 6d 9d c1 bb 9d 66 ff 00 d2 ff 00 e0 49 ed 66 fd 95 f4 e7 61 b2 d1 77 a9 5b db b6 9c 9a c8 73 09 9f e6 fd 67 0f fd 94 cc 66 fa d5 1e b2 fa 2d a8 55 6d 54 e7 54 01 2d 19 6d dc f6 c9 ff 00 04 f7 Data Ascii: [/Sw lFFoX~^%8mv>i:n>6<b#rrs1=uE==&?p]%eM)kgg]U\mVdsm,{XmfIfaw[sgf-UmTT-m

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:43 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-25 08:49:43 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF67) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=201327 Date: Wed, 25 Sep 2024 08:49:43 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:43 UTC	388	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.0 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:44 UTC	791	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:44 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Tue, 19 Sep 2023 12:32:44 GMT etag: W/"650994ec-155ba" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: HIT Age: 1 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lBfpLTJK2rTLGxdM8%2BflxpKzqS3M4%2FjIokV5%2Bb0J8%2BoV72vl71hjQy4fZ%2FN5jPT6PYOp6WfVhA34pjukCXLSZsam0YRJZ0U3Z1A1msJPQmH2kI21m308%2BRje8ApBKnMH4eBUht%2BS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c33a7bd74244-EWR
2024-09-25 08:49:44 UTC	578	IN	Data Raw: 37 63 38 37 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7c87/! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 65 72 74 79 2c 6f 3d 75 65 2e 74 6f 53 74 72 69 6e 67 2c 61 3d 6f 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 6c 65 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 26 26 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 2e 69 74 65 6d 7d 2c 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 43 3d 69 65 2e 64 6f 63 75 6d 65 6e 74 2c 75 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 30 2c 6e 6f 6e 63 65 3a 21 30 2c 6e 6f 4d 6f 64 75 6c 65 3a 21 30 7d 3b 66 75 6e 63 74 69 6f 6e 20 6d 28 65 2c 74 2c 6e 29 Data Ascii: erty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType&&"function"!=typeof e.item},y=function(e){return null!=e&&e===e.window},C=ie.document,u={type:!0,src:!0,nonce:!0,noModule:!0};function m(e,t,n)
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 25 32 7d 29 29 7d 2c 65 71 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 74 68 69 73 2e 6c 65 6e 67 74 68 2c 6e 3d 2b 65 2b 28 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 Data Ascii: turn this.pushStack(ce.grep(this,function(e,t){return(t+1)%2}))},odd:function(){return this.pushStack(ce.grep(this,function(e,t){return t%2}))},eq:function(e){var t=this.length,n=+e+(e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){r
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 22 22 2c 72 3d 30 2c 69 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 69 29 7b 69 66 28 31 3d 3d 3d 69 7c 7c 39 3d 3d 3d 69 7c 7c 31 31 3d 3d 3d 69 29 72 65 74 75 72 6e 20 65 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3b 69 66 28 33 3d 3d 3d 69 7c 7c 34 3d 3d 3d 69 29 72 65 74 75 72 6e 20 65 2e 6e 6f 64 65 56 61 6c 75 65 7d 65 6c 73 65 20 77 68 69 6c 65 28 74 3d 65 5b 72 2b 2b 5d 29 6e 2b 3d 63 65 2e 74 65 78 74 28 74 29 3b 72 65 74 75 72 6e 20 6e 7d 2c 6d 61 6b 65 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 28 63 28 4f 62 6a 65 63 74 28 65 29 29 3f 63 65 2e 6d 65 72 67 65 28 6e 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 Data Ascii: tion(e){var t,n="",r=0,i=e.nodeType;if(i){if(1===i\|\|9===i\|\|11===i)return e.textContent;if(3===i\|\|4===i)return e.nodeValue}else while(t=e[r++])n+=ce.text(t);return n},makeArray:function(e,t){var n=t\|\|[];return null!=e&&(c(Object(e))?ce.merge(n,"string"==ty
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 66 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 78 38 30 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 5c 30 22 3d 3d 3d 65 3f 22 5c 75 66 66 66 64 22 3a 65 2e 73 6c 69 63 65 28 30 2c 2d 31 29 2b 22 5c 5c 22 2b 65 2e 63 68 61 72 43 6f 64 65 41 74 28 65 2e 6c 65 6e 67 74 68 2d 31 29 2e 74 6f 53 74 72 69 6e 67 28 31 36 29 2b 22 20 22 3a 22 5c 5c 22 2b 65 7d 63 65 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 65 2b 22 22 29 2e 72 65 70 6c 61 63 65 28 66 2c 70 29 7d 3b 76 61 72 20 79 65 3d 43 2c 6d 65 3d 73 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 62 2c 77 2c 6f 2c Data Ascii: f=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g;function p(e,t){return t?"\0"===e?"\ufffd":e.slice(0,-1)+"\\"+e.charCodeAt(e.length-1).toString(16)+" ":"\\"+e}ce.escapeSelector=function(e){return(e+"").replace(f,p)};var ye=C,me=s;!function(){var e,b,w,o,
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 29 28 3f 3a 5c 5c 28 22 2b 67 65 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 4e 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 71 3d 2f 5e 68 5c 64 24 2f 69 2c 4c 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 48 3d 2f 5b 2b 7e 5d 2f 2c 4f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 67 65 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 Data Ascii: )(?:\\("+ge+"((?:-\\d)?\\d)"+ge+"*\\)\|)(?=[^-]\|$)","i")},N=/^(?:input\|select\|textarea\|button)$/i,q=/^h\d$/i,L=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,H=/[+~]/,O=new RegExp("\\\\[\\da-fA-F]{1,6}"+ge+"?\|\\\\([^\\r\\n\\f])","g"),P=function(e,t){var n="0x"+e.sli
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 28 6c 3d 59 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 51 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 6b 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 65 29 7b 68 28 74 2c 21 30 29 7d 66 69 6e 61 6c 6c 79 7b 73 3d 3d 3d 53 26 26 65 2e 72 65 6d 6f 76 65 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 7d 7d 7d 72 65 74 75 72 6e 20 72 65 28 74 2e 72 65 70 6c 61 63 65 28 76 65 2c 22 24 31 22 29 2c 65 2c 6e 2c 72 29 7d 66 75 6e 63 74 69 6f 6e 20 57 28 29 7b 76 61 72 20 72 3d 5b 5d 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 65 Data Ascii: (l=Y(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+Q(l[o]);c=l.join(",")}try{return k.apply(n,f.querySelectorAll(c)),n}catch(e){h(t,!0)}finally{s===S&&e.removeAttribute("id")}}}return re(t.replace(ve,"$1"),e,n,r)}function W(){var r=[];return function e
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 64 22 2c 52 29 2c 6c 65 2e 67 65 74 42 79 49 64 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d 63 65 2e 65 78 70 61 6e 64 6f 2c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 7c 7c 21 54 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 4e 61 6d 65 28 63 65 2e 65 78 70 61 6e 64 6f 29 2e 6c 65 6e 67 74 68 7d 29 2c 6c 65 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 69 2e 63 61 6c 6c 28 65 2c 22 2a 22 29 7d 29 2c 6c 65 2e 73 63 6f 70 65 3d 24 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 54 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 73 63 6f 70 65 22 29 7d 29 2c 6c 65 2e 63 Data Ascii: d",R),le.getById=$(function(e){return r.appendChild(e).id=ce.expando,!T.getElementsByName\|\|!T.getElementsByName(ce.expando).length}),le.disconnectedMatch=$(function(e){return i.call(e,"*")}),le.scope=$(function(){return T.querySelectorAll(":scope")}),le.c
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 67 65 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 66 2b 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 53 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 7e 3d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 64 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 Data Ascii: disabled'><option selected=''></option></select>",e.querySelectorAll("[selected]").length\|\|d.push("\\["+ge+"(?:value\|"+f+")"),e.querySelectorAll("[id~="+S+"-]").length\|\|d.push("~="),e.querySelectorAll("a#"+S+"+").length\|\|d.push(".#.+[+~]"),e.querySelect
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 75 6c 6c 2c 5b 65 5d 29 2e 6c 65 6e 67 74 68 7d 2c 49 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 21 3d 54 26 26 56 28 65 29 2c 63 65 2e 63 6f 6e 74 61 69 6e 73 28 65 2c 74 29 7d 2c 49 2e 61 74 74 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 21 3d 54 26 26 56 28 65 29 3b 76 61 72 20 6e 3d 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 2c 72 3d 6e 26 26 75 65 2e 63 61 6c 6c 28 62 2e 61 74 74 72 48 61 6e 64 6c 65 2c 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 3f 6e 28 65 2c 74 2c 21 43 29 3a 76 6f 69 64 20 30 3b 72 65 74 75 72 6e 20 76 6f 69 64 20 Data Ascii: ull,[e]).length},I.contains=function(e,t){return(e.ownerDocument\|\|e)!=T&&V(e),ce.contains(e,t)},I.attr=function(e,t){(e.ownerDocument\|\|e)!=T&&V(e);var n=b.attrHandle[t.toLowerCase()],r=n&&ue.call(b.attrHandle,t.toLowerCase())?n(e,t,!C):void 0;return void

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:44 UTC	647	OUT	GET /a767497648184538fa89f2458d6c0f08/invoke.js HTTP/1.1 Host: citizenhid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:44 UTC	540	IN	HTTP/1.1 403 Forbidden Server: nginx/1.19.5 Date: Wed, 25 Sep 2024 08:49:44 GMT Content-Type: application/javascript Content-Length: 0 Connection: close P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Access-Control-Allow-Origin: * Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report AMTEmu #U2013 Universal Adobe Patcher.url

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Windows Analysis Report
AMTEmu #U2013 Universal Adobe Patcher.url

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:44 UTC	634	OUT	GET /wp-content/uploads/2020/03/AMT-Emulator-Windows.jpg HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:44 UTC	786	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:44 GMT Content-Type: image/jpeg Content-Length: 73754 Connection: close last-modified: Thu, 19 Mar 2020 17:29:32 GMT etag: "5e73abfc-1201a" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Whddj8Klof3%2B87MZbrDsUdfA9G2w5oA3wbEA5B9jxcaVNOSzbkSmrbXBsMJFXGjUPm9g3S3PMdShmmoMXRwZoBwGQ5IL8%2BFgbeR%2Fu2VpVjM1cHtXHX0ms3jxLunfMKcVmfy9AZXx"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c33bfdce41ef-EWR
2024-09-25 08:49:44 UTC	583	IN	Data Raw: ff d8 ff e1 18 73 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 0c 01 00 00 03 00 00 00 01 01 29 00 00 01 01 00 03 00 00 00 01 00 aa 00 00 01 02 00 03 00 00 00 03 00 00 00 9e 01 06 00 03 00 00 00 01 00 02 00 00 01 12 00 03 00 00 00 01 00 01 00 00 01 15 00 03 00 00 00 01 00 03 00 00 01 1a 00 05 00 00 00 01 00 00 00 a4 01 1b 00 05 00 00 00 01 00 00 00 ac 01 28 00 03 00 00 00 01 00 02 00 00 01 31 00 02 00 00 00 1e 00 00 00 b4 01 32 00 02 00 00 00 14 00 00 00 d2 87 69 00 04 00 00 00 01 00 00 00 e8 00 00 01 20 00 08 00 08 00 08 00 0a fc 80 00 00 27 10 00 0a fc 80 00 00 27 10 41 64 6f 62 65 20 50 68 6f 74 6f 73 68 6f 70 20 43 53 36 20 28 57 69 6e 64 6f 77 73 29 00 32 30 32 30 3a 30 33 3a 31 39 20 31 37 3a 32 38 3a 30 32 00 00 00 00 04 90 00 00 07 00 00 00 04 30 Data Ascii: sExifMM*)(12i ''Adobe Photoshop CS6 (Windows)2020:03:19 17:28:020
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 00 0a ff c4 01 3f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 03 00 01 02 04 05 06 07 08 09 0a 0b 01 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 01 00 02 03 04 05 06 07 08 09 0a 0b 10 00 01 04 01 03 02 04 02 05 07 06 08 05 03 0c 33 01 00 02 11 03 04 21 12 31 05 41 51 61 13 22 71 81 32 06 14 91 a1 b1 42 23 24 15 52 c1 62 33 34 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 Data Ascii: ?3!1AQa"q2B#$Rb34rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 63 a2 74 b7 8b 71 71 9b eb 0e 2e b0 9b 1e 3f aa fb 37 7a 7f f5 ad 8b 1f fc 65 81 fb 13 1b ff 00 0e 33 ff 00 3d de a7 3c bf 0c 4c a4 6e ba 47 f8 b9 31 f8 d9 cf cc 63 c3 cb c0 44 4c f0 9c 99 87 17 fe 37 8e 71 ff 00 d2 8f 9f 5d 4d d4 5a ea 2f ad f4 dc cf a5 55 8d 2d 70 ef ab 1d ee 51 95 a5 4f 5e b9 d4 b3 1b a9 d1 5f 54 c6 66 8c 19 1b 85 cc 1c 96 d1 9b 59 f5 eb fe df a8 8a ec 3e 8f 99 d2 73 fa 8e 15 59 18 97 e0 9a 4b a8 b2 d6 db 51 17 59 e8 fb 1f e9 b2 ef 6f f2 94 3c 20 fc a7 a5 d1 f9 b4 74 fd f9 c2 86 5c 64 5c a3 0f 73 19 13 c5 c5 92 5e dc 3f d6 c7 d5 2f f3 6e 44 a9 7d 6f ff 00 c4 df d5 9f eb 75 0f fc fb 52 82 9f d6 ef fc 4d 7d 59 fe b7 50 ff 00 cf b5 29 79 5f e7 0f f7 4b 9f ff 00 18 3f dc 90 ff 00 6b 1f fa 19 1f ff d1 f2 c5 d0 db 4e 1d 4f c4 c5 a3 a5 d3 95 Data Ascii: ctqq.?7ze3=<LnG1cDL7q]MZ/U-pQO^_TfY>sYKQYo< t\d\s^?/nD}ouRM}YP)y_K?kNO
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 9c 98 60 12 40 5a 95 fd 5b cc 6d 6d bf a8 9a ba 56 3b c6 e6 59 98 4b 1e f1 a6 b8 f8 35 b5 f9 f9 0d 76 ef e7 2b c6 f4 7f e1 94 87 5e 38 c3 6f 46 c6 af a6 f6 fb 48 3e b6 61 d2 27 ed d7 37 f4 0f ff 00 d3 7d 38 49 f1 b0 ea 03 f6 af 5c 75 8e a6 e9 7d 34 07 7e b1 96 ee 0b 85 b6 6f 75 38 5b db fa 6c eb 3f e2 70 fd 6b 7d 6f 41 29 bd d3 f0 7e ae d5 45 d9 9e 9b ee c3 a0 ec 7f 51 cd 6e d6 ba df a4 dc 6e 99 d2 31 ed 6b b2 f2 fe 83 bf 5b ce 7e 35 35 fe 93 3a 9a 7f c2 6b fd 4e fa c1 97 d5 7e bb 74 ea ac fd 0e 1d 15 64 33 13 0d 91 b2 b0 29 b4 ee fd 1b 6a 65 99 16 7f 86 bf d3 af fe 0a ba a8 f4 ea 5c 76 77 50 c8 ce b0 3e ed ac 63 06 da 28 a8 6d aa aa e7 73 68 c7 af fc 1d 7f f8 2d d6 fe 9b 22 cb 6e fd 22 dc ff 00 16 df f8 b6 e9 df d5 c9 ff 00 db 7b 92 29 06 8f f2 ea 96 bf Data Ascii: `@Z[mmV;YK5v+^8oFH>a'7}8I\u}4~ou8[l?pk}oA)~EQnn1k[~55:kN~td3)je\vwP>c(msh-"n"{)
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 79 5c 48 68 fd c1 f7 05 36 ed 1c 00 3c 60 42 74 31 42 06 e2 3c 18 39 9f 88 f3 1c cc 04 32 c8 18 83 c5 a4 44 7d 5f 2f fd d3 ff d4 f2 d0 b5 07 59 c7 75 75 36 fc 0a ae b2 9a d9 57 aa 6c b9 a5 cd 60 d8 c9 65 56 b5 9f 45 53 af 03 2e cc 3b 33 99 51 76 2d 36 32 9b 2c 11 a5 96 87 ba a6 6d fa 4e dd e9 3f fd 5e 9f 17 a6 e6 64 9c 81 55 67 f5 4a 9d 7d fb bd bb 58 df a5 f4 e3 dd af b5 88 18 83 ba e8 c8 c7 6f e2 db fd ab 83 df a5 d2 7f eb d9 1f fa 59 46 fe ab 4b f1 6e c6 a3 0a bc 6f 5f 68 7b da fb 5e 61 8e f5 03 5b eb 58 f6 fd 34 f6 fd 5d eb 54 e2 59 99 66 2b 9b 8d 55 14 65 3e dd cd 8f 47 2c ec c2 b3 da ef 77 ae ff 00 6e c6 fb d9 f9 ea 8f a3 74 96 fa 6f 96 97 07 0d a6 41 68 2e 7b 4e 9f 98 d6 fb d0 f6 e3 be bf e3 49 27 24 88 ad 35 fe ac 58 23 e1 e1 e4 e7 64 d7 8b 8b 59 Data Ascii: y\Hh6<`Bt1B<92D}_/Yuu6Wl`eVES.;3Qv-62,mN?^dUgJ}XoYFKno_h{^a[X4]TYf+Ue>G,wntoAh.{NI'$5X#dY
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: c7 35 b5 b9 f4 d9 53 1f 8a 5c c8 6b 6d a7 23 33 d4 b3 23 7e d6 3f d2 c5 fe 6b 67 f8 6f e7 19 fc da 06 46 df 5a cf f9 4e 37 1f e7 37 6f e3 0b e9 ff 00 2b f7 ff 00 f6 94 96 2e cf 52 9f f9 4f 91 fc de ed dc 66 ff 00 31 fe bf f9 66 92 99 75 1f a9 bd 6f 03 2a cc 77 d2 e7 7a 35 50 f7 d8 e1 b1 a6 cb be cc c7 e3 50 f9 7b 32 5f 46 56 75 38 db ea 7e cf f0 96 7a 28 f9 1f e2 fb eb 56 2b 6e 75 d8 d5 b7 d0 0f 73 9b eb d7 b9 cd ad 9f 68 7b e9 af 76 fb 7d 9f ba aa 5f b7 65 b1 fb 47 f9 9b 3f 9e dd b7 fe d3 ff 00 3b 3f f6 97 fe e4 ff 00 e8 1a 95 fb 3d 6c 9f f9 4f e9 d9 fc e6 fd df 41 bf d2 bf e1 7f d3 ff 00 c0 24 a7 ff d9 ff ed 20 1a 50 68 6f 74 6f 73 68 6f 70 20 33 2e 30 00 38 42 49 4d 04 04 00 00 00 00 00 0f 1c 01 5a 00 03 1b 25 47 1c 02 00 00 02 0c 88 00 38 42 49 4d 04 Data Ascii: 5S\km#3#~?kgoFZN77o+.ROf1fuo*wz5PP{2_FVu8~z(V+nush{v}_eG?;?=lOA$ Photoshop 3.08BIMZ%G8BIM
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 00 00 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 03 e8 00 00 38 42 49 4d 04 08 00 00 00 00 00 10 00 00 00 01 00 00 02 40 00 00 02 40 00 00 00 00 38 42 49 4d 04 1e 00 00 00 00 00 04 00 00 00 00 38 42 49 4d 04 1a 00 00 00 00 03 59 00 00 00 06 00 00 00 00 00 00 00 00 00 00 01 2c 00 00 01 c2 00 00 00 12 00 30 00 5f 00 41 00 4f 00 7a 00 6b 00 57 00 6b 00 63 00 56 00 68 00 57 00 5a 00 4b 00 6c 00 6b 00 7a 00 79 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 01 c2 00 00 01 2c 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 10 00 00 00 Data Ascii: 8BIM@@8BIM8BIMY,0_AOzkWkcVhWZKlkzy,
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 72 82 d1 43 07 25 92 53 f0 e1 f1 63 73 35 16 a2 b2 83 26 44 93 54 64 45 c2 a3 74 36 17 d2 55 e2 65 f2 b3 84 c3 d3 75 e3 f3 46 27 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 37 47 57 67 77 87 97 a7 b7 c7 d7 e7 f7 11 00 02 02 01 02 04 04 03 04 05 06 07 07 06 05 35 01 00 02 11 03 21 31 12 04 41 51 61 71 22 13 05 32 81 91 14 a1 b1 42 23 c1 52 d1 f0 33 24 62 e1 72 82 92 43 53 15 63 73 34 f1 25 06 16 a2 b2 83 07 26 35 c2 d2 44 93 54 a3 17 64 45 55 36 74 65 e2 f2 b3 84 c3 d3 75 e3 f3 46 94 a4 85 b4 95 c4 d4 e4 f4 a5 b5 c5 d5 e5 f5 56 66 76 86 96 a6 b6 c6 d6 e6 f6 27 37 47 57 67 77 87 97 a7 b7 c7 ff da 00 0c 03 01 00 02 11 03 11 00 3f 00 f2 c4 66 e2 e5 38 07 36 9b 1c d3 a8 21 8e 20 8f b9 05 75 4c 77 54 ca cd c1 e9 d8 99 96 d0 6d Data Ascii: rC%Scs5&DTdEt6UeuF'Vfv7GWgw5!1AQaq"2B#R3$brCScs4%&5DTdEU6teuFVfv'7GWgw?f86! uLwTm
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 1c 96 d1 9b 59 f5 eb fe df a8 8a ec 3e 8f 99 d2 73 fa 8e 15 59 18 97 e0 9a 4b a8 b2 d6 db 51 17 59 e8 fb 1f e9 b2 ef 6f f2 94 3c 20 fc a7 a5 d1 f9 b4 74 fd f9 c2 86 5c 64 5c a3 0f 73 19 13 c5 c5 92 5e dc 3f d6 c7 d5 2f f3 6e 44 a9 7d 6f ff 00 c4 df d5 9f eb 75 0f fc fb 52 82 9f d6 ef fc 4d 7d 59 fe b7 50 ff 00 cf b5 29 79 5f e7 0f f7 4b 9f ff 00 18 3f dc 90 ff 00 6b 1f fa 19 1f ff d1 f2 c5 d0 db 4e 1d 4f c4 c5 a3 a5 d3 95 6d b8 d8 f6 6a 72 1d 65 96 5b 53 2d 7c 32 8c 8a db f4 dd f4 2b ad 73 cb b0 e9 86 3e b4 f4 22 04 c3 3a 7f fe 79 ad 4b 84 02 4d 8b 64 c4 01 26 c5 b9 b9 22 bc 4b 3d 1c ae 89 46 3d b0 1d e9 da 32 d8 e8 3f 9d b6 cc a6 a8 96 e0 e4 f4 fe a0 e6 e0 51 8f 6e 35 2c b6 ab 6a 75 db 83 9d 7e 3e 3b bf 9e be e6 39 be 9d af fc c5 d0 31 fd 37 31 f8 9d 36 Data Ascii: Y>sYKQYo< t\d\s^?/nD}ouRM}YP)y_K?kNOmjre[S-\|2+s>":yKMd&"K=F=2?Qn5,ju~>;91716
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: d5 45 d9 9e 9b ee c3 a0 ec 7f 51 cd 6e d6 ba df a4 dc 6e 99 d2 31 ed 6b b2 f2 fe 83 bf 5b ce 7e 35 35 fe 93 3a 9a 7f c2 6b fd 4e fa c1 97 d5 7e bb 74 ea ac fd 0e 1d 15 64 33 13 0d 91 b2 b0 29 b4 ee fd 1b 6a 65 99 16 7f 86 bf d3 af fe 0a ba a8 f4 ea 5c 76 77 50 c8 ce b0 3e ed ac 63 06 da 28 a8 6d aa aa e7 73 68 c7 af fc 1d 7f f8 2d d6 fe 9b 22 cb 6e fd 22 dc ff 00 16 df f8 b6 e9 df d5 c9 ff 00 db 7b 92 29 06 8f f2 ea 96 bf a0 df 82 92 8d 67 d8 df 80 52 59 4f 7e ec 51 99 87 d5 31 6a c0 ea 76 0c 7c ac 76 8a f0 7a 8b b5 68 64 fb 30 f3 ff 00 ee b6 e3 fa 2c 8f fb 4d fd 4f 53 d4 db fa 8d d3 b3 7a 77 d6 6b e9 cc a8 d6 e3 86 f2 c7 7d 26 3d be a6 39 f5 29 b5 be cb 59 ee fc d5 c6 4a bb 8d d6 fa be 26 23 f0 b1 73 2d a7 1a ce 6b 69 e3 5d df a2 7f f3 94 6e 77 d3 f4 1d Data Ascii: EQnn1k[~55:kN~td3)je\vwP>c(msh-"n"{)gRYO~Q1jv\|vzhd0,MOSzwk}&=9)YJ&#s-ki]nw

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:44 UTC	609	OUT	GET /wp-includes/js/mediaelement/mediaelementplayer-legacy.min.css?ver=4.2.17 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:44 UTC	770	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:44 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Sat, 12 Dec 2020 22:57:08 GMT etag: W/"5fd54ac4-2bf8" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=T8oBZkZ6j3djOXFgwFHLQjX6Uq27YPsiMFgX6keHigghImE7z%2FcYDEbw%2BUCDNZDiHmkkBFP9lfbf9HHo92Wm1k5HlUGXuw0bF%2F2iCuP3WMi13yH4uT3WOf7dPlSoSlXkKSvXUzz%2B"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c33c09ca4328-EWR
2024-09-25 08:49:44 UTC	599	IN	Data Raw: 32 62 66 38 0d 0a 2e 6d 65 6a 73 2d 6f 66 66 73 63 72 65 65 6e 7b 62 6f 72 64 65 72 3a 30 3b 63 6c 69 70 3a 72 65 63 74 28 31 70 78 2c 31 70 78 2c 31 70 78 2c 31 70 78 29 3b 2d 77 65 62 6b 69 74 2d 63 6c 69 70 2d 70 61 74 68 3a 69 6e 73 65 74 28 35 30 25 29 3b 63 6c 69 70 2d 70 61 74 68 3a 69 6e 73 65 74 28 35 30 25 29 3b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 61 64 64 69 6e 67 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 31 70 78 3b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 30 30 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 Data Ascii: 2bf8.mejs-offscreen{border:0;clip:rect(1px,1px,1px,1px);-webkit-clip-path:inset(50%);clip-path:inset(50%);height:1px;margin:-1px;overflow:hidden;padding:0;position:absolute;width:1px;word-wrap:normal}.mejs-container{background:#000;font-family:Helvetica
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 61 72 74 2d 70 6c 61 79 62 61 63 6b 2d 62 75 74 74 6f 6e 7b 2d 77 65 62 6b 69 74 2d 61 70 70 65 61 72 61 6e 63 65 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 6d 65 6a 73 2d 66 69 6c 6c 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 6d 65 6a 73 2d 66 69 6c 6c 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 65 6a 73 2d 66 69 6c 6c 2d 63 6f 6e 74 61 69 6e 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 Data Ascii: art-playback-button{-webkit-appearance:none;display:none!important}.mejs-fill-container,.mejs-fill-container .mejs-container{height:100%;width:100%}.mejs-fill-container{background:transparent;margin:0 auto;overflow:hidden;position:relative}.mejs-container
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 76 65 72 6c 61 79 2d 70 6c 61 79 7b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 7d 2e 6d 65 6a 73 2d 6f 76 65 72 6c 61 79 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 2e 73 76 67 29 20 6e 6f 2d 72 65 70 65 61 74 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 2d 33 39 70 78 3b 68 65 69 67 68 74 3a 38 30 70 78 3b 77 69 64 74 68 3a 38 30 70 78 7d 2e 6d 65 6a 73 2d 6f 76 65 72 6c 61 79 3a 68 6f 76 65 72 3e 2e 6d 65 6a 73 2d 6f 76 65 72 6c 61 79 2d 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 38 30 70 78 20 2d 33 39 70 78 7d 2e 6d 65 6a 73 2d 6f 76 65 72 6c 61 79 2d 6c 6f 61 64 69 6e 67 7b 68 65 69 67 68 74 3a 38 30 70 78 3b 77 69 64 74 68 Data Ascii: verlay-play{cursor:pointer}.mejs-overlay-button{background:url(mejs-controls.svg) no-repeat;background-position:0 -39px;height:80px;width:80px}.mejs-overlay:hover>.mejs-overlay-button{background-position:-80px -39px}.mejs-overlay-loading{height:80px;width
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 75 74 74 6f 6e 3e 62 75 74 74 6f 6e 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 31 70 78 20 64 6f 74 74 65 64 20 23 39 39 39 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 6b 65 79 62 6f 61 72 64 2d 69 6e 61 63 74 69 76 65 20 5b 72 6f 6c 65 3d 73 6c 69 64 65 72 5d 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 6b 65 79 62 6f 61 72 64 2d 69 6e 61 63 74 69 76 65 20 5b 72 6f 6c 65 3d 73 6c 69 64 65 72 5d 3a 66 6f 63 75 73 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 6b 65 79 62 6f 61 72 64 2d 69 6e 61 63 74 69 76 65 20 61 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 6b 65 79 62 6f 61 72 64 2d 69 6e 61 63 74 69 76 65 20 61 3a 66 6f 63 75 73 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2d 6b 65 79 62 6f 61 72 64 2d 69 6e 61 63 74 69 76 Data Ascii: utton>button:focus{outline:1px dotted #999}.mejs-container-keyboard-inactive [role=slider],.mejs-container-keyboard-inactive [role=slider]:focus,.mejs-container-keyboard-inactive a,.mejs-container-keyboard-inactive a:focus,.mejs-container-keyboard-inactiv
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 2d 34 35 64 65 67 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 20 32 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 30 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 35 30 25 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 20 30 2c 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 34 29 20 37 35 25 2c 74 72 61 6e 73 70 61 72 65 6e 74 20 30 2c 74 72 61 6e 73 70 61 72 65 6e 74 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 31 35 70 78 20 31 35 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 62 7b 30 25 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 7d 74 6f 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a Data Ascii: linear-gradient(-45deg,hsla(0,0%,100%,.4) 25%,transparent 0,transparent 50%,hsla(0,0%,100%,.4) 0,hsla(0,0%,100%,.4) 75%,transparent 0,transparent);background-size:15px 15px;width:100%}@-webkit-keyframes b{0%{background-position:0 0}to{background-position:
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 7a 2d 69 6e 64 65 78 3a 31 31 7d 2e 6d 65 6a 73 2d 74 69 6d 65 2d 68 61 6e 64 6c 65 2d 63 6f 6e 74 65 6e 74 7b 62 6f 72 64 65 72 3a 34 70 78 20 73 6f 6c 69 64 20 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 39 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 35 30 25 3b 68 65 69 67 68 74 3a 31 30 70 78 3b 6c 65 66 74 3a 2d 37 70 78 3b 74 6f 70 3a 2d 34 70 78 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 30 29 3b 77 69 64 74 68 3a 31 30 70 78 7d 2e 6d 65 6a 73 2d Data Ascii: ransform:translateX(0);transform:translateX(0);z-index:11}.mejs-time-handle-content{border:4px solid hsla(0,0%,100%,.9);border-radius:50%;height:10px;left:-7px;top:-4px;-webkit-transform:scale(0);-ms-transform:scale(0);transform:scale(0);width:10px}.mejs-
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 31 30 30 70 78 20 30 7d 2e 6d 65 6a 73 2d 6d 75 74 65 3e 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 36 30 70 78 20 30 7d 2e 6d 65 6a 73 2d 75 6e 6d 75 74 65 3e 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 2d 34 30 70 78 20 30 7d 2e 6d 65 6a 73 2d 76 6f 6c 75 6d 65 2d 62 75 74 74 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6d 65 6a 73 2d 76 6f 6c 75 6d 65 2d 62 75 74 74 6f 6e 3e 2e 6d 65 6a 73 2d 76 6f 6c 75 6d 65 2d 73 6c 69 64 65 72 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 66 61 63 65 2d 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 35 30 2c 35 30 2c Data Ascii: kground-position:-100px 0}.mejs-mute>button{background-position:-60px 0}.mejs-unmute>button{background-position:-40px 0}.mejs-volume-button{position:relative}.mejs-volume-button>.mejs-volume-slider{-webkit-backface-visibility:hidden;background:rgba(50,50,
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 3a 61 62 73 6f 6c 75 74 65 7d 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 76 6f 6c 75 6d 65 2d 63 75 72 72 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 38 29 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 74 6f 70 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 76 6f 6c 75 6d 65 2d 68 61 6e 64 6c 65 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 62 75 74 74 6f 6e 2c 2e 6d 65 6a 73 2d 63 68 61 70 74 65 72 73 2d 62 75 74 74 6f 6e 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 62 75 74 74 6f 6e 3e 62 75 74 74 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e Data Ascii: :absolute}.mejs-horizontal-volume-current{background:hsla(0,0%,100%,.8);height:100%;top:0;width:100%}.mejs-horizontal-volume-handle{display:none}.mejs-captions-button,.mejs-chapters-button{position:relative}.mejs-captions-button>button{background-position
2024-09-25 08:49:44 UTC	1082	IN	Data Raw: 74 2d 73 69 7a 65 3a 31 30 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 3a 34 70 78 20 31 30 70 78 20 30 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 73 65 6c 65 63 74 65 64 2c 2e 6d 65 6a 73 2d 63 68 61 70 74 65 72 73 2d 73 65 6c 65 63 74 65 64 7b 63 6f 6c 6f 72 3a 23 32 31 66 38 66 38 7d 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 74 72 61 6e 73 6c 61 74 69 6f 6e 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 30 70 78 3b 6d 61 72 67 69 6e 3a 30 20 30 20 35 70 78 7d 2e 6d 65 6a 73 2d 63 61 70 74 69 6f 6e 73 2d 6c 61 79 65 72 7b 62 6f 74 74 6f 6d 3a 30 3b 63 6f 6c 6f 72 3a 23 66 66 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6c 65 66 74 3a 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 32 Data Ascii: t-size:10px;line-height:15px;padding:4px 10px 0;width:100%}.mejs-captions-selected,.mejs-chapters-selected{color:#21f8f8}.mejs-captions-translations{font-size:10px;margin:0 0 5px}.mejs-captions-layer{bottom:0;color:#fff;font-size:16px;left:0;line-height:2
2024-09-25 08:49:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:44 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-09-25 08:49:44 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=201298 Date: Wed, 25 Sep 2024 08:49:44 GMT Content-Length: 55 Connection: close X-CID: 2
2024-09-25 08:49:44 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:44 UTC	598	OUT	GET /wp-includes/js/mediaelement/wp-mediaelement.min.css?ver=6.3.5 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:44 UTC	772	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:44 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Thu, 19 Mar 2020 13:00:26 GMT etag: W/"5e736cea-105a" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Z%2BggCZgwGDSRwsUa3T1taI5kbh3faOv0fawR7Ns5gG2yEEoyEkF1aF62X%2FKGnQ7ey6v1egKg4zJqRhOnw9mKMih%2BZ8PoCVYuFDhDW5Ong8QD3LH1Mi%2FzD2Ek8egbPfq1hWa%2B9RGV"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c33ceed77285-EWR
2024-09-25 08:49:44 UTC	597	IN	Data Raw: 31 30 35 61 0d 0a 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2a 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 2c 2e 6d 65 6a 73 2d 65 6d 62 65 64 2c 2e 6d 65 6a 73 2d 65 6d 62 65 64 20 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 32 32 32 7d 2e 6d 65 6a 73 2d 74 69 6d 65 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 77 6f 72 64 2d 77 72 61 70 3a 6e 6f 72 6d 61 6c 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 61 2e 6d 65 6a 73 2d 68 6f 72 Data Ascii: 105a.mejs-container{clear:both;max-width:100%}.mejs-container *{font-family:Helvetica,Arial}.mejs-container,.mejs-container .mejs-controls,.mejs-embed,.mejs-embed body{background:#222}.mejs-time{font-weight:400;word-wrap:normal}.mejs-controls a.mejs-hor
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 6a 73 2d 74 69 6d 65 2d 72 61 69 6c 20 2e 6d 65 6a 73 2d 74 69 6d 65 2d 74 6f 74 61 6c 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 33 33 29 7d 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 76 6f 6c 75 6d 65 2d 73 6c 69 64 65 72 20 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 76 6f 6c 75 6d 65 2d 63 75 72 72 65 6e 74 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 76 6f 6c 75 6d 65 2d 73 6c 69 64 65 72 20 2e 6d 65 6a 73 2d 68 6f 72 69 7a 6f 6e 74 61 6c 2d 76 6f 6c 75 6d 65 2d 74 6f 74 61 6c 2c 2e 6d 65 6a 73 2d 63 6f 6e 74 72 6f 6c 73 20 2e 6d 65 6a 73 2d 74 69 6d 65 2d 72 61 69 6c 20 73 70 61 6e 7b 62 6f Data Ascii: js-time-rail .mejs-time-total{background:rgba(255,255,255,.33)}.mejs-controls .mejs-horizontal-volume-slider .mejs-horizontal-volume-current,.mejs-controls .mejs-horizontal-volume-slider .mejs-horizontal-volume-total,.mejs-controls .mejs-time-rail span{bo
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 64 65 6f 2d 73 68 6f 72 74 63 6f 64 65 7b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 76 69 64 65 6f 2d 64 65 74 61 69 6c 73 20 2e 77 70 2d 76 69 64 65 6f 2d 68 6f 6c 64 65 72 7b 77 69 64 74 68 3a 31 30 30 25 3b 6d 61 78 2d 77 69 64 74 68 3a 36 34 30 70 78 7d 2e 77 70 2d 70 6c 61 79 6c 69 73 74 7b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 70 61 64 64 69 6e 67 3a 31 30 70 78 3b 6d 61 72 67 69 6e 3a 31 32 70 78 20 30 20 31 38 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 35 7d 2e 77 70 2d 61 64 6d 69 6e 20 2e 77 70 2d 70 6c 61 79 6c 69 73 74 7b 6d 61 72 67 69 6e 3a 30 20 30 20 31 38 70 78 7d 2e 77 70 2d 70 6c 61 79 6c Data Ascii: deo-shortcode{max-width:100%;display:inline-block}.video-details .wp-video-holder{width:100%;max-width:640px}.wp-playlist{border:1px solid #ccc;padding:10px;margin:12px 0 18px;font-size:14px;line-height:1.5}.wp-admin .wp-playlist{margin:0 0 18px}.wp-playl
2024-09-25 08:49:44 UTC	859	IN	Data Raw: 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 7d 2e 77 70 2d 70 6c 61 79 6c 69 73 74 2d 69 74 65 6d 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 77 70 2d 70 6c 61 79 6c 69 73 74 2d 6c 69 67 68 74 20 2e 77 70 2d 70 6c 61 79 6c 69 73 74 2d 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 77 70 2d 70 6c 61 79 6c 69 73 74 2d 64 61 72 6b 20 2e 77 70 2d 70 6c 61 79 6c 69 73 74 2d 63 61 70 74 69 6f 6e 7b 63 6f 6c 6f 72 3a 23 64 64 64 7d 2e 77 70 2d 70 6c 61 79 6c 69 73 74 2d 70 6c 61 79 69 6e 67 7b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 37 66 37 66 37 7d 2e 77 70 2d 70 6c 61 79 6c 69 73 74 2d 6c 69 67 68 74 20 2e 77 70 2d 70 6c 61 79 6c 69 Data Ascii: r-bottom:1px solid #ccc}.wp-playlist-item:last-child{border-bottom:0}.wp-playlist-light .wp-playlist-caption{color:#333}.wp-playlist-dark .wp-playlist-caption{color:#ddd}.wp-playlist-playing{font-weight:700;background:#f7f7f7}.wp-playlist-light .wp-playli
2024-09-25 08:49:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:44 UTC	613	OUT	GET /wp-content/plugins/shortcodes-ultimate/includes/css/shortcodes.css?ver=7.2.2 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:44 UTC	768	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:44 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close last-modified: Sat, 10 Aug 2024 22:49:32 GMT etag: W/"66b7ee7c-b0bf" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kH4Z52B3KvqzqgD0Fy0zfac8VGbMjViGhj2HxF1hnq1U0ZYa%2BhTzmF7sWE0XUBA3EBwRHWVONb7B%2BOyDl6vyJiW92llnBSRf78Lqv514RHQgQyr5GoT%2Bkc3u8HS33Qi0TEhGizpR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c33d694b42d1-EWR
2024-09-25 08:49:44 UTC	601	IN	Data Raw: 37 63 39 66 0d 0a 2e 73 75 2d 75 2d 63 6c 65 61 72 66 69 78 3a 3a 61 66 74 65 72 7b 63 6f 6e 74 65 6e 74 3a 27 27 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 3b 63 6c 65 61 72 3a 62 6f 74 68 7d 2e 73 75 2d 75 2d 74 72 69 6d 3e 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 30 7d 2e 73 75 2d 75 2d 74 72 69 6d 3e 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 73 75 2d 75 2d 72 65 73 70 6f 6e 73 69 76 65 2d 6d 65 64 69 61 2d 79 65 73 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 35 36 2e 32 35 25 3b 68 65 69 67 68 74 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 73 75 2d 75 2d 72 65 73 70 6f 6e 73 69 76 65 2d 6d 65 64 69 61 2d Data Ascii: 7c9f.su-u-clearfix::after{content:'';display:table;clear:both}.su-u-trim>:first-child{margin-top:0}.su-u-trim>:last-child{margin-bottom:0}.su-u-responsive-media-yes{position:relative;padding-bottom:56.25%;height:0;overflow:hidden}.su-u-responsive-media-
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 69 6c 65 72 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 65 6d 7d 2e 73 75 2d 61 75 64 69 6f 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 33 30 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 65 6d 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 37 63 38 37 38 31 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 20 62 6f 74 74 6f 6d 2c 23 37 63 38 37 38 31 20 30 2c 23 30 61 30 38 30 39 20 31 30 30 25 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 7d 2e 73 75 2d 61 75 64 69 6f 20 2e 6a 70 2d 70 61 75 73 65 2c 2e 73 75 2d 61 75 64 69 6f 20 2e 6a 70 2d 70 6c 61 79 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a Data Ascii: iler{margin-bottom:.5em}.su-audio{position:relative;width:100%;height:30px;margin-bottom:1.5em;background:#7c8781;background:linear-gradient(to bottom,#7c8781 0,#0a0809 100%);border-radius:3px}.su-audio .jp-pause,.su-audio .jp-play{position:absolute;left:
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 7d 2e 73 75 2d 62 6f 78 2d 74 69 74 6c 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 61 64 64 69 6e 67 3a 2e 35 65 6d 20 31 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 31 65 6d 7d 2e 73 75 2d 62 6f 78 2d 63 6f 6e 74 65 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 63 6f 6c 6f 72 3a 23 34 34 34 3b 70 61 64 64 69 6e 67 3a 31 65 6d 7d 2e 73 75 2d 62 6f 78 2d 73 74 79 6c 65 2d 73 6f 66 74 20 2e 73 75 2d 62 6f 78 2d 74 69 74 6c 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 73 74 79 6c 65 73 2f 73 74 79 6c 65 2d 73 6f 66 74 2e 70 6e 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 70 6f 73 69 74 69 6f 6e 3a 30 20 30 3b 62 61 63 6b 67 Data Ascii: }.su-box-title{display:block;padding:.5em 1em;font-weight:700;font-size:1.1em}.su-box-content{background-color:#fff;color:#444;padding:1em}.su-box-style-soft .su-box-title{background-image:url(../images/styles/style-soft.png);background-position:0 0;backg
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 73 75 2d 62 75 74 74 6f 6e 20 73 6d 61 6c 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 3a 2d 2e 32 65 6d 20 30 20 30 3b 63 6f 6c 6f 72 3a 69 6e 68 65 72 69 74 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 6f 70 61 63 69 74 79 3a 2e 37 7d 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 73 75 2d 62 75 74 74 6f 6e 20 73 70 61 6e 7b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 32 35 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 2e 32 35 65 6d 21 69 6d 70 6f 72 74 61 6e 74 3b 6c 69 6e 65 2d 68 65 Data Ascii: su-button small{display:block;margin:-.2em 0 0;color:inherit;text-align:center;font-style:normal;font-size:.8em;line-height:1;opacity:.7}@media screen and (max-width:768px){.su-button span{padding-top:.25em!important;padding-bottom:.25em!important;line-he
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 3a 68 6f 76 65 72 20 73 70 61 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 2d 37 31 30 70 78 20 35 30 25 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 73 74 79 6c 65 73 2f 73 74 79 6c 65 2d 62 75 62 62 6c 65 73 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 7d 2e 73 75 2d 62 75 74 74 6f 6e 2d 73 74 79 6c 65 2d 6e 6f 69 73 65 20 73 70 61 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 73 74 79 6c 65 73 2f 73 74 79 6c 65 2d 6e 6f 69 73 65 2e 70 6e 67 29 20 72 65 70 65 61 74 2d 78 7d 2e 73 75 2d 62 75 74 74 6f 6e 2d 73 74 79 6c 65 2d 6e 6f 69 73 65 3a 68 6f 76 65 72 20 73 70 61 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 30 20 30 20 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 73 74 79 6c 65 73 2f 73 74 79 6c 65 2d 6e 6f 69 73 65 Data Ascii: :hover span{background:-710px 50% url(../images/styles/style-bubbles.png) no-repeat}.su-button-style-noise span{background:0 0 url(../images/styles/style-noise.png) repeat-x}.su-button-style-noise:hover span{background:0 0 url(../images/styles/style-noise
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 3b 2d 6d 73 2d 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 2d 6d 73 2d 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 70 72 6f 70 65 72 74 79 3a 74 72 61 6e 73 66 6f 72 6d 2c 6c 65 66 74 2c 74 6f 70 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 33 64 28 30 2c 30 2c 30 29 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 65 61 73 65 7d 2e 73 77 69 70 65 72 2d 66 72 65 65 2d 6d 6f 64 65 3e 2e 73 75 2d 63 61 72 6f 75 73 65 6c 2d 73 6c 69 64 65 73 7b 74 Data Ascii: -transition-duration:0s;-ms-transform:translate3d(0,0,0);-ms-transition-timing-function:ease;transition-property:transform,left,top;transition-duration:0s;transform:translate3d(0,0,0);transition-timing-function:ease}.swiper-free-mode>.su-carousel-slides{t
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 31 73 3b 2d 6f 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 31 73 3b 2d 6d 6f 7a 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 31 73 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 31 73 7d 2e 73 75 2d 63 61 72 6f 75 73 65 6c 20 2e 73 75 2d 63 61 72 6f 75 73 65 6c 2d 6e 65 78 74 2c 2e 73 75 2d 63 61 72 6f 75 73 65 6c 20 2e 73 75 2d 63 61 72 6f 75 73 65 6c 2d 70 72 65 76 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 35 30 25 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 34 30 70 78 3b 68 65 69 67 68 74 3a 34 30 70 78 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2d 32 30 70 78 3b 62 61 63 6b 67 72 6f 75 Data Ascii: ;transition:opacity 1s;-o-transition:opacity 1s;-moz-transition:opacity 1s;-webkit-transition:opacity 1s}.su-carousel .su-carousel-next,.su-carousel .su-carousel-prev{position:absolute;top:50%;display:block;width:40px;height:40px;margin-top:-20px;backgrou
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 72 6f 75 73 65 6c 3a 68 6f 76 65 72 20 2e 73 75 2d 63 61 72 6f 75 73 65 6c 2d 70 61 67 69 6e 61 74 69 6f 6e 20 73 70 61 6e 7b 6d 61 72 67 69 6e 3a 30 20 33 70 78 7d 2e 73 75 2d 63 61 72 6f 75 73 65 6c 20 2e 73 75 2d 63 61 72 6f 75 73 65 6c 2d 70 61 67 69 6e 61 74 69 6f 6e 20 73 70 61 6e 2e 73 77 69 70 65 72 2d 76 69 73 69 62 6c 65 2d 73 77 69 74 63 68 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 35 2c 32 35 35 2c 32 35 35 2c 2e 35 29 7d 2e 73 75 2d 63 61 72 6f 75 73 65 6c 20 2e 73 75 2d 63 61 72 6f 75 73 65 6c 2d 70 61 67 69 6e 61 74 69 6f 6e 20 73 70 61 6e 2e 73 77 69 70 65 72 2d 61 63 74 69 76 65 2d 73 77 69 74 63 68 2c 2e 73 75 2d 63 61 72 6f 75 73 65 6c 20 Data Ascii: rousel:hover .su-carousel-pagination span{margin:0 3px}.su-carousel .su-carousel-pagination span.swiper-visible-switch{background-color:#fff;background-color:rgba(255,255,255,.5)}.su-carousel .su-carousel-pagination span.swiper-active-switch,.su-carousel
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 2d 63 6f 6c 75 6d 6e 2b 2e 73 75 2d 63 6f 6c 75 6d 6e 7b 6d 61 72 67 69 6e 3a 31 2e 35 72 65 6d 20 30 20 30 7d 7d 2e 73 75 2d 63 75 73 74 6f 6d 2d 67 61 6c 6c 65 72 79 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 2e 35 65 6d 7d 2e 73 75 2d 63 75 73 74 6f 6d 2d 67 61 6c 6c 65 72 79 2d 61 6c 69 67 6e 2d 6c 65 66 74 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 73 75 2d 63 75 73 74 6f 6d 2d 67 61 6c 6c 65 72 79 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 7b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 73 75 2d 63 75 73 74 6f 6d 2d 67 61 6c 6c 65 72 79 2d 61 6c 69 67 6e 2d 72 69 67 68 74 7b 6a 75 73 74 69 66 79 Data Ascii: -column+.su-column{margin:1.5rem 0 0}}.su-custom-gallery{display:flex;flex-wrap:wrap;margin-bottom:1.5em}.su-custom-gallery-align-left{justify-content:flex-start}.su-custom-gallery-align-center{justify-content:center}.su-custom-gallery-align-right{justify
2024-09-25 08:49:44 UTC	1369	IN	Data Raw: 20 30 20 30 3b 77 69 64 74 68 3a 38 2e 32 35 65 6d 7d 2e 73 75 2d 64 69 73 70 6c 61 79 2d 70 6f 73 74 73 2d 74 65 6d 70 6c 61 74 65 2d 64 65 66 61 75 6c 74 20 2e 73 75 2d 70 6f 73 74 2d 74 68 75 6d 62 6e 61 69 6c 20 61 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 73 75 2d 64 69 73 70 6c 61 79 2d 70 6f 73 74 73 2d 74 65 6d 70 6c 61 74 65 2d 64 65 66 61 75 6c 74 20 2e 73 75 2d 70 6f 73 74 2d 74 68 75 6d 62 6e 61 69 6c 20 69 6d 67 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 72 67 69 6e 3a 30 21 69 6d 70 6f 72 74 61 6e 74 3b 6d 61 78 2d 77 69 64 74 68 3a 31 30 30 25 21 69 6d 70 6f 72 74 61 6e 74 3b Data Ascii: 0 0;width:8.25em}.su-display-posts-template-default .su-post-thumbnail a{display:block!important;text-decoration:none!important}.su-display-posts-template-default .su-post-thumbnail img{display:block!important;margin:0!important;max-width:100%!important;

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:44 UTC	567	OUT	GET /wp-includes/js/hoverIntent.min.js?ver=1.10.2 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:44 UTC	789	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:44 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Sun, 05 Jun 2022 18:00:22 GMT etag: W/"629cef36-5db" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ESQkNloS%2FfNXbrYLDmDcgmnIp%2BMH1tOOQYOZCpa%2FLZaRWrXkcg%2F7jmlSDiGyEZBPDDC5S655nqYCzUaUcEGaReAr9biUawbF3DYOIWF9g%2FV%2Fi9EtZmaiT8U9mc5oSCvARKZ4Ip%2Bm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c33d69285e5f-EWR
2024-09-25 08:49:44 UTC	580	IN	Data Raw: 35 64 62 0d 0a 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 65 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 28 72 65 71 75 69 72 65 28 22 6a 71 75 65 72 79 22 29 29 3a 6a 51 75 65 72 79 26 26 21 6a 51 75 65 72 79 2e 66 6e 2e 68 6f 76 65 72 49 6e 74 65 6e 74 26 26 65 28 6a 51 75 65 72 79 29 7d 28 66 75 6e 63 74 69 6f 6e 28 66 29 Data Ascii: 5db/! This file is auto-generated /!function(e){"use strict";"function"==typeof define&&define.amd?define(["jquery"],e):"object"==typeof module&&module.exports?module.exports=e(require("jquery")):jQuery&&!jQuery.fn.hoverIntent&&e(jQuery)}(function(f)
2024-09-25 08:49:44 UTC	926	IN	Data Raw: 70 59 2c 6f 2e 6f 76 65 72 2e 61 70 70 6c 79 28 74 5b 30 5d 2c 5b 65 5d 29 3b 6e 2e 70 58 3d 69 2c 6e 2e 70 59 3d 72 2c 6e 2e 74 69 6d 65 6f 75 74 49 64 3d 73 65 74 54 69 6d 65 6f 75 74 28 66 75 6e 63 74 69 6f 6e 28 29 7b 70 28 65 2c 74 2c 6e 2c 6f 29 7d 2c 6f 2e 69 6e 74 65 72 76 61 6c 29 7d 3b 66 2e 66 6e 2e 68 6f 76 65 72 49 6e 74 65 6e 74 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 76 61 72 20 75 3d 66 2e 65 78 74 65 6e 64 28 7b 7d 2c 65 29 2c 72 3d 66 28 74 68 69 73 29 2c 76 3d 28 28 74 3d 72 2e 64 61 74 61 28 22 68 6f 76 65 72 49 6e 74 65 6e 74 22 29 29 7c 7c 72 2e 64 61 74 61 28 22 68 6f 76 65 72 49 6e 74 65 6e 74 22 2c 74 3d 7b 7d 29 2c 74 5b 69 5d 29 2c 74 3d 28 76 7c 7c 28 74 5b 69 5d 3d 76 3d 7b Data Ascii: pY,o.over.apply(t[0],[e]);n.pX=i,n.pY=r,n.timeoutId=setTimeout(function(){p(e,t,n,o)},o.interval)};f.fn.hoverIntent=function(e,t,n){function o(e){var u=f.extend({},e),r=f(this),v=((t=r.data("hoverIntent"))\|\|r.data("hoverIntent",t={}),t[i]),t=(v\|\|(t[i]=v={
2024-09-25 08:49:44 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:44 UTC	647	OUT	GET /7fd86c7dc98030c6b5c747948898e27f/invoke.js HTTP/1.1 Host: citizenhid.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:44 UTC	540	IN	HTTP/1.1 403 Forbidden Server: nginx/1.19.5 Date: Wed, 25 Sep 2024 08:49:44 GMT Content-Type: application/javascript Content-Length: 0 Connection: close P3P: CP="IDC DSP COR ADM DEVi TAIi PSA PSD IVAi IVDi CONi HIS OUR IND CNT" Access-Control-Allow-Origin: * Accept-CH: Device-Stock-UA,Sec-CH-UA,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Mobile,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version,Sec-CH-UA-PlatformUser-Agent,User-Agent,X-Device-User-Agent,X-OperaMini-Phone-UA,X-UCBrowser-Device-UA

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:45 UTC	588	OUT	GET /wp-content/themes/genesis/lib/js/menu/superfish.min.js?ver=1.7.10 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:45 UTC	780	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:45 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close last-modified: Tue, 23 Jan 2024 22:49:50 GMT etag: W/"65b0428e-1193" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=qJSNyTTiUFyxZx83rl776sZ2SXBskoQEE0IMaR8QwJbT%2FfCoqFzVuIOeZhUJh3D1uprqsTmeJ4mlI1zR4lCsLeRa870nWKmLWxigo8merol97zCP5hEfiB%2Bg2KMn6Z1aYrLuSqPR"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c342c8530f9f-EWR
2024-09-25 08:49:45 UTC	589	IN	Data Raw: 31 31 39 33 0d 0a 2f 2a 0a 20 2a 20 6a 51 75 65 72 79 20 53 75 70 65 72 66 69 73 68 20 4d 65 6e 75 20 50 6c 75 67 69 6e 20 2d 20 76 31 2e 37 2e 31 30 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 32 30 31 38 20 4a 6f 65 6c 20 42 69 72 63 68 0a 20 2a 0a 20 2a 20 44 75 61 6c 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 61 6e 64 20 47 50 4c 20 6c 69 63 65 6e 73 65 73 3a 0a 20 2a 09 68 74 74 70 3a 2f 2f 77 77 77 2e 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 6d 69 74 2d 6c 69 63 65 6e 73 65 2e 70 68 70 0a 20 2a 09 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6e 75 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 67 70 6c 2e 68 74 6d 6c 0a 20 2a 2f 0a 0a 3b 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 Data Ascii: 1193/* * jQuery Superfish Menu Plugin - v1.7.10 * Copyright (c) 2018 Joel Birch * * Dual licensed under the MIT and GPL licenses: http://www.opensource.org/licenses/mit-license.php http://www.gnu.org/licenses/gpl.html */;!function(a,b){"use
2024-09-25 08:49:45 UTC	1369	IN	Data Raw: 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 3b 72 65 74 75 72 6e 22 62 65 68 61 76 69 6f 72 22 69 6e 20 61 26 26 22 66 69 6c 6c 22 69 6e 20 61 26 26 2f 69 65 6d 6f 62 69 6c 65 2f 69 2e 74 65 73 74 28 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 29 7d 28 29 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 21 62 2e 50 6f 69 6e 74 65 72 45 76 65 6e 74 7d 28 29 2c 67 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 64 29 7b 76 61 72 20 65 2c 66 3d 63 2e 6d 65 6e 75 43 6c 61 73 73 3b 62 2e 63 73 73 41 72 72 6f 77 73 26 26 28 66 2b 3d 22 20 22 2b 63 2e 6d 65 6e 75 41 72 72 6f 77 43 6c 61 73 73 29 2c 65 3d 64 3f 22 61 64 64 43 6c 61 73 73 22 3a 22 72 65 6d 6f 76 65 43 6c 61 73 73 22 2c 61 5b 65 5d 28 66 29 7d 2c 68 3d 66 75 6e 63 74 Data Ascii: umentElement.style;return"behavior"in a&&"fill"in a&&/iemobile/i.test(navigator.userAgent)}(),f=function(){return!!b.PointerEvent}(),g=function(a,b,d){var e,f=c.menuClass;b.cssArrows&&(f+=" "+c.menuArrowClass),e=d?"addClass":"removeClass",a[e](f)},h=funct
2024-09-25 08:49:45 UTC	1369	IN	Data Raw: 6c 69 63 6b 2e 73 75 70 65 72 66 69 73 68 22 2c 21 31 29 2c 22 4d 53 50 6f 69 6e 74 65 72 44 6f 77 6e 22 3d 3d 3d 62 2e 74 79 70 65 7c 7c 22 70 6f 69 6e 74 65 72 64 6f 77 6e 22 3d 3d 3d 62 2e 74 79 70 65 3f 63 2e 74 72 69 67 67 65 72 28 22 66 6f 63 75 73 22 29 3a 61 2e 70 72 6f 78 79 28 6d 2c 63 2e 70 61 72 65 6e 74 28 22 6c 69 22 29 29 28 29 29 29 7d 2c 71 3d 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 67 3d 22 6c 69 3a 68 61 73 28 22 2b 63 2e 70 6f 70 55 70 53 65 6c 65 63 74 6f 72 2b 22 29 22 3b 61 2e 66 6e 2e 68 6f 76 65 72 49 6e 74 65 6e 74 26 26 21 63 2e 64 69 73 61 62 6c 65 48 49 3f 62 2e 68 6f 76 65 72 49 6e 74 65 6e 74 28 6d 2c 6f 2c 67 29 3a 62 2e 6f 6e 28 22 6d 6f 75 73 65 65 6e 74 65 72 2e 73 75 70 65 72 66 69 73 68 22 2c 67 2c 6d 29 Data Ascii: lick.superfish",!1),"MSPointerDown"===b.type\|\|"pointerdown"===b.type?c.trigger("focus"):a.proxy(m,c.parent("li"))()))},q=function(b,c){var g="li:has("+c.popUpSelector+")";a.fn.hoverIntent&&!c.disableHI?b.hoverIntent(m,o,g):b.on("mouseenter.superfish",g,m)
2024-09-25 08:49:45 UTC	1180	IN	Data Raw: 73 74 79 6c 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 29 72 65 74 75 72 6e 20 62 2e 72 65 70 6c 61 63 65 28 2f 64 69 73 70 6c 61 79 5b 5e 3b 5d 2b 3b 3f 2f 67 2c 22 22 29 7d 29 2c 65 2e 24 70 61 74 68 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 65 2e 68 6f 76 65 72 43 6c 61 73 73 2b 22 20 22 2b 63 2e 62 63 43 6c 61 73 73 29 2e 61 64 64 43 6c 61 73 73 28 65 2e 70 61 74 68 43 6c 61 73 73 29 2c 64 2e 66 69 6e 64 28 22 2e 22 2b 65 2e 68 6f 76 65 72 43 6c 61 73 73 29 2e 72 65 6d 6f 76 65 43 6c 61 73 73 28 65 2e 68 6f 76 65 72 43 6c 61 73 73 29 2c 65 2e 6f 6e 44 65 73 74 72 6f 79 2e 63 61 6c 6c 28 64 29 2c 76 6f 69 64 20 64 2e 72 65 6d 6f 76 65 44 61 74 61 28 22 73 66 4f 70 74 69 6f 6e Data Ascii: style",function(a,b){if("undefined"!=typeof b)return b.replace(/display[^;]+;?/g,"")}),e.$path.removeClass(e.hoverClass+" "+c.bcClass).addClass(e.pathClass),d.find("."+e.hoverClass).removeClass(e.hoverClass),e.onDestroy.call(d),void d.removeData("sfOption
2024-09-25 08:49:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:45 UTC	592	OUT	GET /wp-content/themes/genesis/lib/js/menu/superfish.args.min.js?ver=3.5.0 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:46 UTC	825	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:46 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close vary: Referer x-accel-version: 0.01 last-modified: Tue, 23 Jan 2024 22:49:50 GMT etag: W/"84-60fa4c38cb427" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MZLv42NgYo6Pv1cI7az8mi2H6wF%2BdfU6LN3xVP2csVYA7%2BvQHxjfi9Y2FUoszMk2bSJEDmIL5FB5bU7R%2BFq62LpxM6%2BDmeor2A7uzx2baFWVh2eHQqSzHO1cLKUUSxZWzbmqRxiJ"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c3462d437280-EWR
2024-09-25 08:49:46 UTC	138	IN	Data Raw: 38 34 0d 0a 6a 51 75 65 72 79 28 66 75 6e 63 74 69 6f 6e 28 24 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 24 28 22 2e 6a 73 2d 73 75 70 65 72 66 69 73 68 22 29 2e 73 75 70 65 72 66 69 73 68 28 7b 64 65 6c 61 79 3a 31 30 30 2c 61 6e 69 6d 61 74 69 6f 6e 3a 7b 6f 70 61 63 69 74 79 3a 22 73 68 6f 77 22 2c 68 65 69 67 68 74 3a 22 73 68 6f 77 22 7d 2c 64 72 6f 70 53 68 61 64 6f 77 73 3a 21 31 7d 29 7d 29 3b 0d 0a Data Ascii: 84jQuery(function($){"use strict";$(".js-superfish").superfish({delay:100,animation:{opacity:"show",height:"show"},dropShadows:!1})});
2024-09-25 08:49:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-09-25 08:49:45 UTC	583	OUT	GET /wp-content/themes/genesis/lib/js/skip-links.min.js?ver=3.5.0 HTTP/1.1 Host: amtemu-official.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://amtemu-official.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-09-25 08:49:46 UTC	832	IN	HTTP/1.1 200 OK Date: Wed, 25 Sep 2024 08:49:46 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close vary: Referer x-accel-version: 0.01 last-modified: Tue, 23 Jan 2024 22:49:50 GMT etag: W/"182-60fa4c38ca487" x-powered-by: PleskLin Cache-Control: max-age=31536000 CF-Cache-Status: REVALIDATED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IaVPej8IaMfv6UxPaUaPBXz7SJ3AANZTL%2F3%2ByAa9J8L0zwFjcnB4lcgtxBxS4WpZxFpncnyLX4nLfZoY%2BtjD%2B1l%2BJnDa3ERZmqmgM3nI%2Fy7krHyM4hFpFlLVkimORZicSnJnG%2Bj6"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15552000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 8c89c34649037cea-EWR
2024-09-25 08:49:46 UTC	393	IN	Data Raw: 31 38 32 0d 0a 66 75 6e 63 74 69 6f 6e 20 67 61 5f 73 6b 69 70 6c 69 6e 6b 73 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 66 72 61 67 6d 65 6e 74 49 44 3d 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 2e 73 75 62 73 74 72 69 6e 67 28 31 29 3b 69 66 28 66 72 61 67 6d 65 6e 74 49 44 29 7b 76 61 72 20 65 6c 65 6d 65 6e 74 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 66 72 61 67 6d 65 6e 74 49 44 29 3b 65 6c 65 6d 65 6e 74 26 26 28 21 31 3d 3d 3d 2f 5e 28 3f 3a 61 7c 73 65 6c 65 63 74 7c 69 6e 70 75 74 7c 62 75 74 74 6f 6e 7c 74 65 78 74 61 72 65 61 29 24 2f 69 2e 74 65 73 74 28 65 6c 65 6d 65 6e 74 2e 74 61 67 4e 61 6d 65 29 26 26 28 65 6c 65 6d 65 6e 74 2e 74 61 62 49 6e 64 65 78 3d 2d 31 29 2c 65 6c 65 6d 65 6e 74 2e Data Ascii: 182function ga_skiplinks(){"use strict";var fragmentID=location.hash.substring(1);if(fragmentID){var element=document.getElementById(fragmentID);element&&(!1===/^(?:a\|select\|input\|button\|textarea)$/i.test(element.tagName)&&(element.tabIndex=-1),element.
2024-09-25 08:49:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0