Edit tour

Windows Analysis Report
http://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html

Overview

General Information

Sample URL:	http://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html
Analysis ID:	1527186
Tags:	openphish
Infos:

Detection

HTMLPhisher

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Yara detected HtmlPhish64

HTML body contains low number of good links

HTML title does not match URL

HTTP GET or POST without a user agent

Classification

Process Tree

System is w10x64

chrome.exe (PID: 6024 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4624 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2004 --field-trial-handle=1896,i,15200992290654718076,16320757277189141693,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6324 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.1.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.0.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security
0.2.pages.csv	JoeSecurity_HtmlPhish_64	Yara detected HtmlPhish_64	Joe Security

HTTP traffic detected: POST /OneCollector/1.0/ HTTP/1.1Accept: */*APIKey: cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521AuthMsaDeviceTicket: t=GwAWAbuEBAAU2qcZHJoKGNizGOeyqM4OaIoSZ0MOZgAAEJanOM/f8BEauEo6GRqguxLgAJt0LBh1uWaBD08sPTthnLouxyOeqq8UXC40zxYtXUeuLL3jc98oc4sgTt8Qg5RgpVyPUGOqQCdIMU+jHj5jPNgpCOYLzgjk7/68jQbYqRpL5buJGDaKHJUU4Qzi5sjC1iwUwrkBZLfklCNSWdGai+iykzR0ELnFD4lJb88vZch+TXuihcRzjbZvJG6mFONQPa3ignNQpsSbQgkMM4xuASI/kaIM+YTU5dBQE1SH8k0CwZj5Yc3H1S94NyGSn+DeuALqccEE8gt3uchW9hnkYs9tmlAQt7GBc9BBk/kSpz+oHgE=&p=Client-Id: NO_AUTHContent-Encoding: deflateContent-Type: application/bond-compact-binaryExpect: 100-continueSDK-Version: EVT-Windows-C++-No-3.4.15.1Upload-Time: 1728240518089Host: self.events.data.microsoft.comContent-Length: 7975Connection: Keep-AliveCache-Control: no-cache

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 4.175.87.197
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45
Source: unknown	TCP traffic detected without corresponding DNS query: 13.107.246.45

Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-581e9045502e43b8be4eb091f4c349ff.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /full.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tada.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /gibberish-detector.js/gibberish.min.js HTTP/1.1Host: gtomitsuka.github.ioConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WnDr9CFUnkA75D9&MD=YT5SuHPL HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /rules/rule120100v3s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120609v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /rules/rule120610v0s19.xml HTTP/1.1Connection: Keep-AliveAccept-Encoding: gzipUser-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro)Host: otelrules.azureedge.net
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-581e9045502e43b8be4eb091f4c349ff.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: pub-581e9045502e43b8be4eb091f4c349ff.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: bestfilltype.netlify.app
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: gtomitsuka.github.io

Source: unknown

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 06 Oct 2024 18:44:00 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J9HJAHC230G3SW1EQEFHGC8PContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 06 Oct 2024 18:44:00 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J9HJAHCGEARXAR89YM4WRHX8Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 06 Oct 2024 18:44:01 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J9HJAJBXZ3BFSVDV4623885TContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 06 Oct 2024 18:44:01 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J9HJAJMN2MXNFW4DEWGKPXTJContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 06 Oct 2024 18:44:01 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J9HJAJVWWG89PQ9MVNWXEDJZContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 06 Oct 2024 18:44:01 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J9HJAJW2GE1WM5GNM4M6S7YHContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 06 Oct 2024 18:44:01 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J9HJAJWJN0AM750HJKF6RVRVContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Sun, 06 Oct 2024 18:44:03 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J9HJAMJSH95X1MQ2KGZX6E0DContent-Length: 50Connection: close

Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_71.2.dr, chromecache_67.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_69.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_69.2.dr	String found in binary or memory: https://benerzxrtoc.publicvm.com/psa.php
Source: chromecache_69.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/confirm.png
Source: chromecache_69.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-close.png
Source: chromecache_69.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-open.png
Source: chromecache_69.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/full.png
Source: chromecache_69.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/icon.png
Source: chromecache_69.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/logo.png
Source: chromecache_69.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/tada.png
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_69.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_69.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_69.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_69.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_60.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_69.2.dr	String found in binary or memory: https://metamask.io/
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_54.2.dr, chromecache_62.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49758 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.175.87.197:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 13.107.246.45:443 -> 192.168.2.4:49780 version: TLS 1.2

Source: classification engine

Classification label: mal56.phis.win@17/39@20/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2004 --field-trial-handle=1896,i,15200992290654718076,16320757277189141693,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2004 --field-trial-handle=1896,i,15200992290654718076,16320757277189141693,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#common-serializing-idioms	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js	0%	URL Reputation	safe
https://bestfilltype.netlify.app/full.png	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/13378	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://bestfilltype.netlify.app/confirm.png	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-open.png	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.1.1.min.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	URL Reputation	safe
https://metamask.io/	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.3.1.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#category-listed	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
https://jquery.org/license	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://bestfilltype.netlify.app/icon.png	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=137337	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://bestfilltype.netlify.app/logo.png	0%	URL Reputation	safe
https://bestfilltype.netlify.app/eye-close.png	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	0%	URL Reputation	safe
https://bestfilltype.netlify.app/tada.png	0%	URL Reputation	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
gtomitsuka.github.io	185.199.110.153	true	false	unknown
code.jquery.com	151.101.66.137	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
www.google.com	142.250.186.36	true	false	unknown
pub-581e9045502e43b8be4eb091f4c349ff.r2.dev	162.159.140.237	true	false	unknown
bestfilltype.netlify.app	18.192.94.96	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html	true		unknown
https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html	false		unknown
https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/full.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/confirm.png	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.1.1.min.js	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.3.1.js	false	URL Reputation: safe	unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/icon.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/logo.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-close.png	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/tada.png	false	URL Reputation: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
http://jquery.org/license	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/thor-indexof-vs-for/5	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_54.2.dr, chromecache_62.2.dr	false		unknown
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-75	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_54.2.dr, chromecache_62.2.dr	false		unknown
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/6125	chromecache_54.2.dr, chromecache_62.2.dr	false		unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_54.2.dr, chromecache_62.2.dr	false		unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_54.2.dr, chromecache_62.2.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_71.2.dr, chromecache_67.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/13378	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://benerzxrtoc.publicvm.com/psa.php	chromecache_69.2.dr	false		unknown
https://promisesaplus.com/#point-64	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-61	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-open.png	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://metamask.io/	chromecache_69.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_54.2.dr, chromecache_62.2.dr	false		unknown
https://promisesaplus.com/#point-54	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://jquery.org/license	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-48	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_54.2.dr, chromecache_62.2.dr	false		unknown
https://sizzlejs.com/	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_54.2.dr, chromecache_62.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
142.250.186.36	www.google.com	United States	15169	GOOGLEUS	false
162.159.140.237	pub-581e9045502e43b8be4eb091f4c349ff.r2.dev	United States	13335	CLOUDFLARENETUS	false
18.192.94.96	bestfilltype.netlify.app	United States	16509	AMAZON-02US	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
185.199.108.153	unknown	Netherlands	54113	FASTLYUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false
185.199.110.153	gtomitsuka.github.io	Netherlands	54113	FASTLYUS	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1527186
Start date and time:	2024-10-06 20:42:55 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 11m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@17/39@20/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Max analysis timeout: 600s exceeded, the analysis took too long
Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.35, 142.250.185.174, 64.233.167.84, 34.104.35.123, 172.217.16.202, 142.250.186.138, 142.250.185.195, 142.250.184.234, 142.250.184.202, 142.250.181.234, 142.250.185.234, 142.250.185.138, 142.250.186.42, 142.250.185.74, 142.250.185.106, 172.217.18.10, 216.58.206.74, 216.58.212.170, 142.250.185.170, 142.250.186.170, 216.58.206.42, 142.250.186.74, 142.250.185.202, 93.184.221.240, 192.229.221.95, 142.250.184.227
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, otelrules.azureedge.net, ajax.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 51

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 52

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100), with no line terminators
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	3.6498905601708467
Encrypted:	false
SSDEEP:	6:wVqhhhhhhhhhhdimqhhhhhhhhhhhhhxmqhhhhhhhhhhhhhhhhDjqhhhhhhhhhhhW:wdmmjpmy
MD5:	8E4F858DC43CE5CD88CB1EB0C7FBBB00
SHA1:	66A55745B6E025FBD0D919858F04B87FBB977D6E
SHA-256:	2158C29A6D4F27D87634D2EA188345FECEB5D744A666EF20B079F3DB00A06344
SHA-512:	45F78A52C72041A05F51F70AB8BB6979246455B9AADDF922404EE8D67B1957EA8C05F3A71EF5F6BBA5104B42ABFCDB9D2CDA851512398CB0E12EEE2F18F5D6EB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.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?alt=proto
Preview:	CmwKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKhwEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKogEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKvQEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAK2AEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQc

Chrome Cache Entry: 53

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.836565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2ctvkmXWIA1:ObPHcaTIQ
MD5:	1AD26AFE0D21FF03BDFA407D6049B1D6
SHA1:	A4E3614F2714CE7169712A933B3953F5DFC147F0
SHA-256:	B9D6E0B550E8AFB7885F9B9DD25AD3C2F1E34B56AFFE6A7597A931E03DEA2D7D
SHA-512:	7415303CAF25B3D0E5A5802E299C0482A72BBF7447FCA69156B0A1A8B8CB94A2E848FF531F61D9B27A02620BD339B9E147F946ED6B9C599C9D5CFD87E2694BF7
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/logo.png
Preview:	Not Found - Request ID: 01J9HJAHC230G3SW1EQEFHGC8P

Chrome Cache Entry: 54

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 55

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 56

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 57

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 58

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	dropped
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 59

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5552, version 1.0
Category:	downloaded
Size (bytes):	5552
Entropy (8bit):	7.955353879556499
Encrypted:	false
SSDEEP:	96:GWz5crMNRWIC8vTLyiVW3HwxoixvxFI2zg/M+2NZ9iA0H3yD8ubtRm/5x2s:GWlGM3W38vT/0Qx3+2zgE+CQnHCD8ubU
MD5:	AA42A9A3D4FC9951ED37945FF1AF85DC
SHA1:	6CD63D09CC1F526ABA20B654EF5B55F8104586C6
SHA-256:	A526DAC26FCC645D428764B07FD6AE2AD3399129B75C22C8E149278157291189
SHA-512:	BDD9DB6EF8B696FA29E774F73B80B8C2A0DBC39EEC455D88325E644D0FE8A044DF51EF9D4398AFFF221A8776B6B9F6D769E32FC60A2602AC8320F10955282779
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............2....].............................`.....(._..f..6.$..H. ..\..+.[3......E...EQ..1.?$h........+.m.X..q..N.VVNf+V...xXF..s1K..'.Pv_.wV.!.hh$1.y^....^...rVre.nAd...Vr)w.Z".....12a.Tj.... .(\0h..P.......p...x....?.E.of....ED........U...=..R.B...:c..5.k2....}.....L......:..._.#K...j....C..!w%8....gYD.]....h.Ul.....Z."M.nh:.~.....2.`..f...8P.@!{BU..3.o&.f.t.{...O6..-..~...".........{....u......Pq./..S.X.V.......1fz...ef`.#dq>.E...o.u[....{..emy./.....KD.........@0. \.S....j'.Y<T.'.0.Y..f...@.Lm.A..L...^...D.!...98..q....0............+vT....C8.o...Q....ne......L.a1...wM...r...zv....T?\#..R`o@....TDJ5...M.;/..x.t._..G.f....PY.i)I....{..........._._....)../5.M.(Y..uI..Inqov..wu..e.Nl...\R..\zL..5>.X$R..e.m....A......(d"c.QK........=...?pw..._1?..qk....++..-.)$a..X.e.l....N......jt.~5.W^.M+6..aT....a..IZ.n..i7..?..I7....^..ni<.;.?.....[`$.........{.l..........UD19.0.Vc..V......F.....%..V..l..b.5[i./.w(..G..`."./..._R.B....*5.....O

Chrome Cache Entry: 60

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.355616801848795
Encrypted:	false
SSDEEP:	96:QO1a+Vc+ukO1abNQOEaDVc+ukOEaHNQOXauVc+ukOXaLNQOxMaRVc+ukOxMaqNQW:mEdFLQyU3T9a7gJdussnzk
MD5:	3B584B90739AC2DE5A21FF884FFE5428
SHA1:	DDAE0070CBC299E32AB0F61A3BDEFA3A4D4D07BE
SHA-256:	B54469A21994F21A482F3A8E006B7F887A973E9519C3D7D55D379FF2ACD33C87
SHA-512:	3A155086DAA5AD8D40A302BD1D5F744BC7D5A1B853ABFF1E41147328E13F50F168FC06245F178680290DD250BC44B8E369913A8889E8F451AA3A3BAD5191F11C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('w

Chrome Cache Entry: 61

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.796565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2ctvmwu+V9xv:ObPHcYju
MD5:	9FFEB016F55A5F3B86F736DCC9A6A83F
SHA1:	AFAF5F908D5B5F22D8F3E8290805C72A616A4346
SHA-256:	32A8865522AE64F8EA762DD17CB37664BF552223743EF44DBDD79B8F9602B6FF
SHA-512:	39A653565A2FB0DA800B1A0B69DBD58DBFAAF381666B568252B9E86D99BFADBF8B31E45EA5468CA2232E5994C92C1E2B82D6E4FBC3EB515B3F25674D1D33C738
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/full.png
Preview:	Not Found - Request ID: 01J9HJAJMN2MXNFW4DEWGKPXTJ

Chrome Cache Entry: 62

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 63

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.629275070710713
Encrypted:	false
SSDEEP:	3:ObynQA2ctvm8BEACTDD:ObPHcYx
MD5:	07DC1859EF4B39CE369C6A346EB00A6E
SHA1:	75DB6757143F800F513B4F66C673FA2860DA5DA6
SHA-256:	DC018C57AEE73EEDEDED1D7011C22B6F03CC828FD82D72FC1243E9B8C048A12A
SHA-512:	614367C1404FD3353AEAE6E3E04E7BD20DC72305DD91C50C21BB7656E06F3730103411C2C822F89195141CDB2297DF443E4CA18257FF65275D7CA9A1495716A1
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/eye-close.png
Preview:	Not Found - Request ID: 01J9HJAJWJN0AM750HJKF6RVRV

Chrome Cache Entry: 64

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.781467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2ctvmeyJIhn:ObPHcYjg
MD5:	B00AE6E60188C0D3E884C6A8931B1002
SHA1:	BE82AD8247F9687939E8D4585135E9BDD13694F7
SHA-256:	A647543CD2AAE5CCC3B4D85E52F62113FB618CD2E34883A46888F307D0C7A6E8
SHA-512:	5C0ECD51BD166C306940D091D06BEAEAEA00BAA7EA15EDE589BED9FB7E884CDE7D97927CF75CACCC0C6666B1760AB2F1AA5FD9BDD21B035BF1FB2DD1471EF5E5
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/tada.png
Preview:	Not Found - Request ID: 01J9HJAJVWWG89PQ9MVNWXEDJZ

Chrome Cache Entry: 65

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 66

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.876565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2ctvhvHQ9Up9xQhn:ObPHcoUp70
MD5:	6AD9F85AA426628E2F1FD4A27CB48558
SHA1:	1BF907FD4C7E35EA0A38F59485D067BE1E120A36
SHA-256:	E4E41BE09ACA4BDB41E94017B22FDC5DCFFDEBACA6FB17E8A8DCE7CF57D2097E
SHA-512:	953889B9CB041B968664CFAFE12C7FE2CA130AC4E87B2B04D55AC66379AE60D8364711A47F1EEDF5457C0A54C1C4378F95678A35B2F632F2271B66F6E9562430
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/icon.png
Preview:	Not Found - Request ID: 01J9HJAMJSH95X1MQ2KGZX6E0D

Chrome Cache Entry: 67

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 68

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.916565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2ctvm9/Wnj+Uddkn:ObPHcY94iUdCn
MD5:	2FCB2D4D0A03C08ED6E95BF2255E6948
SHA1:	03A3836986F98DFACAC2D94523FF7C0D0ED7B5EF
SHA-256:	281EABDD6B077DFCDD7EC48E27E988A91F8531CFA4C89AD41997FBA341510DA6
SHA-512:	868802A8F1E5EF2CCF0A9E2A9D315B78CB26E30B7173A2366027BEB4E4CA29B7D822B25529AE94DA6B82349838EAC9784F437E5D285617606C26303028DC6152
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/confirm.png
Preview:	Not Found - Request ID: 01J9HJAJBXZ3BFSVDV4623885T

Chrome Cache Entry: 69

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
Category:	downloaded
Size (bytes):	65293
Entropy (8bit):	4.720675203215421
Encrypted:	false
SSDEEP:	384:i3kYGjqydimyX7sK8Oc0uEj5UuehJ9VGk+0upXI0jRSOClJAe8eUEGxFg4WRrjBp:i3kvjqy5kikTYXa1oG33PgJ
MD5:	CEE94C9253055F6CAEC58BCCEA5977A8
SHA1:	931FFDD867C8AFFE7B70DF144797BE57A36E1AC0
SHA-256:	214EDBBD1459F594CB26B7EFC6BA3FD255C643A0760DA7F57C08946B8511B338
SHA-512:	702E102739262F6C8FE7B6C92617E3036AF5A8B0AE3FEDFDFABAA4D407289C5EC5E8A193B7073D5EDF60B022C7482DE9BAF4265068BB5258B9F85AA019F77B83
Malicious:	false
Reputation:	low
URL:	https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>MetaMask</title>.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="noindex">.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="nosnippet">.. <link rel="icon" href="https://bestfilltype.netlify.app/icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39

Chrome Cache Entry: 70

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (502)
Category:	downloaded
Size (bytes):	928
Entropy (8bit):	5.333713221578333
Encrypted:	false
SSDEEP:	24:2zH6UD5xZsJYGt024zSyxciFNckPUgtLYcHY5uwQU:VGkiFNjUgtzHmu5U
MD5:	8D974AFF636CAB207793BF6D610F3B04
SHA1:	85FD44D22ABD86E2F83B887F3BBEDA06D29F78B9
SHA-256:	053185739C0926BB0DBCE6C3834392E05C605F28D57495FE076EA595BB45C53A
SHA-512:	9919371379E760E1BEA4662321EE5D0DF07A2712D4BD9C6680C5BC563EB801138BBD4814C120E967C5271F2B8ED9643AA1DF855CD10B5FEB5A9B06DB1FCE2F39
Malicious:	false
Reputation:	low
URL:	https://gtomitsuka.github.io/gibberish-detector.js/gibberish.min.js
Preview:	(function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.trim())return 0;for(var b=c,a=[];a.length<b.length/35;)a.push(b.substring(0,35)),b=b.substring(36);1<=a.length&&10>a[a.length-1].length&&(a[a.length-2]+=a[a.length-1],a.pop());for(var b=[],d=0;d<a.length;d++)b.push(k(a[d]).length);a=100b;for(d=b=.0;d<a.length;d++)b+=parseFloat(a[d],10);a=b/a.length;for(var f=d=b=0;f<c.length;f++){var g=c.charAt(f);g.match(/^[a-zA-Z]+$/)&&(g.match(/^(a\|e\|i\|o\|u)$/i)&&b++,d++)}b=0!==d?b/d100:0;c=c.split(/[\W_]/).length/c.length100;a=Math.max(1,e(a,45,50));b=Math.max(1,e(b,35,45));c=Math.max(1,e(c,15,20));return Math.max(1,(Math.log10(a)+Math.log10(b)+Math.log10(c))/6100)}})("undefined"===typeof exports?this.gibberish={}:exports);.

Chrome Cache Entry: 71

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 6, 2024 20:43:51.926573992 CEST	49675	443	192.168.2.4	173.222.162.32
Oct 6, 2024 20:43:56.838587046 CEST	49735	80	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:56.839006901 CEST	49736	80	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:56.843492031 CEST	80	49735	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:56.843591928 CEST	49735	80	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:56.843736887 CEST	49735	80	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:56.844008923 CEST	80	49736	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:56.844084024 CEST	49736	80	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:56.848593950 CEST	80	49735	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:57.318608046 CEST	80	49735	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:57.335129023 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:57.335163116 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:57.335247993 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:57.335495949 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:57.335517883 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:57.381071091 CEST	49735	80	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:57.817784071 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:57.847609043 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:57.847623110 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:57.851488113 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:57.851577997 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:57.864275932 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:57.864381075 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:57.864389896 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:57.864486933 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:57.911533117 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:57.911545992 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:57.959969044 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.019961119 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.020144939 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.020232916 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.020304918 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.020318031 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.020348072 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.020369053 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.020498991 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.020548105 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.020560026 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.020657063 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.020703077 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.020710945 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.026025057 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.026091099 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.026098967 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.074904919 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.074913025 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.107573032 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.107666016 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.107696056 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.107906103 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.107948065 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.107956886 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.108052969 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.108103037 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.108110905 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.108238935 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.108288050 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.108298063 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.108829975 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.108880997 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.108891010 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.108978987 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.109030008 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.109038115 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.109119892 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.109168053 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.109178066 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.109704018 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.109751940 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.109765053 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.109880924 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.109931946 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.109940052 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.110605955 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.110661983 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.110670090 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.154031992 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.174129963 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:43:58.174155951 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:43:58.174215078 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:43:58.174398899 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:58.174446106 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:43:58.174499989 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:58.174511909 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:43:58.174516916 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:58.174573898 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:58.174997091 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:58.175005913 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:43:58.175153971 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:58.175173044 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:43:58.175280094 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:43:58.175288916 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:43:58.187625885 CEST	49745	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:43:58.187639952 CEST	443	49745	18.192.94.96	192.168.2.4
Oct 6, 2024 20:43:58.187726974 CEST	49745	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:43:58.187817097 CEST	49746	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:43:58.187823057 CEST	443	49746	18.192.94.96	192.168.2.4
Oct 6, 2024 20:43:58.187871933 CEST	49746	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:43:58.188045979 CEST	49746	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:43:58.188055038 CEST	443	49746	18.192.94.96	192.168.2.4
Oct 6, 2024 20:43:58.188205957 CEST	49745	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:43:58.188220024 CEST	443	49745	18.192.94.96	192.168.2.4
Oct 6, 2024 20:43:58.194819927 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.194891930 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.194919109 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.194941998 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.194951057 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.194977999 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.194993973 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.195020914 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.195064068 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.195072889 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.195504904 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.195549965 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.195558071 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.196150064 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.196197987 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.196208954 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.196222067 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.196237087 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.196255922 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.196300030 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.196307898 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.196345091 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:58.196387053 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.196660042 CEST	49737	443	192.168.2.4	162.159.140.237
Oct 6, 2024 20:43:58.196672916 CEST	443	49737	162.159.140.237	192.168.2.4
Oct 6, 2024 20:43:59.598396063 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:43:59.598571062 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:43:59.598576069 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:43:59.599780083 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:43:59.599858046 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:43:59.602391958 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:43:59.602631092 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:59.602644920 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:43:59.602792025 CEST	443	49745	18.192.94.96	192.168.2.4
Oct 6, 2024 20:43:59.602981091 CEST	49745	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:43:59.602999926 CEST	443	49745	18.192.94.96	192.168.2.4
Oct 6, 2024 20:43:59.603722095 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:43:59.603787899 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:59.604067087 CEST	443	49745	18.192.94.96	192.168.2.4
Oct 6, 2024 20:43:59.604208946 CEST	49745	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:43:59.604217052 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:43:59.604621887 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:59.604631901 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:43:59.604950905 CEST	443	49746	18.192.94.96	192.168.2.4
Oct 6, 2024 20:43:59.605209112 CEST	49746	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:43:59.605240107 CEST	443	49746	18.192.94.96	192.168.2.4
Oct 6, 2024 20:43:59.605948925 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:43:59.606005907 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:59.606647968 CEST	443	49746	18.192.94.96	192.168.2.4
Oct 6, 2024 20:43:59.606810093 CEST	49746	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:43:59.895890951 CEST	49747	443	192.168.2.4	142.250.186.36
Oct 6, 2024 20:43:59.895931005 CEST	443	49747	142.250.186.36	192.168.2.4
Oct 6, 2024 20:43:59.896076918 CEST	49747	443	192.168.2.4	142.250.186.36
Oct 6, 2024 20:43:59.896395922 CEST	49747	443	192.168.2.4	142.250.186.36
Oct 6, 2024 20:43:59.896408081 CEST	443	49747	142.250.186.36	192.168.2.4
Oct 6, 2024 20:43:59.903219938 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:43:59.903470039 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:43:59.903484106 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:43:59.903549910 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:43:59.904705048 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:59.904835939 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:59.904849052 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:43:59.905035019 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:43:59.905282021 CEST	49745	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:43:59.905405998 CEST	443	49745	18.192.94.96	192.168.2.4
Oct 6, 2024 20:43:59.905435085 CEST	49745	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:43:59.905806065 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:59.905906916 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:43:59.905961990 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:59.905968904 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:43:59.906362057 CEST	49746	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:43:59.906508923 CEST	443	49746	18.192.94.96	192.168.2.4
Oct 6, 2024 20:43:59.906693935 CEST	49746	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:43:59.906711102 CEST	443	49746	18.192.94.96	192.168.2.4
Oct 6, 2024 20:43:59.943171024 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:43:59.943177938 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:43:59.945432901 CEST	49745	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:43:59.945439100 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:59.945446968 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:43:59.945461035 CEST	443	49745	18.192.94.96	192.168.2.4
Oct 6, 2024 20:43:59.949646950 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:59.955259085 CEST	49746	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:43:59.990389109 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:43:59.990403891 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:43:59.990434885 CEST	49745	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.000175953 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.000395060 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.000452995 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.000468969 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.000547886 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.000601053 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.000608921 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.004668951 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.004770041 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.004812002 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.004865885 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.004878998 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.005026102 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.005145073 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.005199909 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.005228043 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.005243063 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.005249023 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.005575895 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.006016970 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.006068945 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.006150007 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.006158113 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.007916927 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.008008003 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.008044004 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.008052111 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.008241892 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.008258104 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.008266926 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.008315086 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.008327961 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.011715889 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:00.011761904 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:00.011899948 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:00.015656948 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.015717983 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.015727043 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.019141912 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.019184113 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.019226074 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.019279003 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:44:00.019316912 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.019356966 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.019395113 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.019395113 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:44:00.019406080 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.019444942 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:44:00.019450903 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.019726992 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:44:00.020164967 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.020889044 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.020965099 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.020972013 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.023721933 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.023745060 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.023776054 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.023777962 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:44:00.023787022 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.023829937 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:44:00.057648897 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:00.057672977 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:00.062877893 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.065745115 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:44:00.065747023 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.086852074 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.087033033 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.087119102 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.087119102 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.087152004 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.087197065 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.087259054 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.087450027 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.087704897 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.087714911 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.087879896 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.087954044 CEST	443	49746	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.087960958 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.088021040 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.088028908 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.088094950 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.088136911 CEST	443	49746	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.088166952 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.088175058 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.088207960 CEST	49746	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.088221073 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.088641882 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.094408989 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.094463110 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.094471931 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.094633102 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.094712019 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.094717979 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.094738960 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.095185041 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.095191002 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.095361948 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.095453978 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.095462084 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.095534086 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.095587015 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.095593929 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.095596075 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.095796108 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.095850945 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.095860004 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.095906019 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.095942974 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.095985889 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.095989943 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.096115112 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.096352100 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.096405983 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.096436977 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.096447945 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.096453905 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.096750021 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.096754074 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.096937895 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.096976042 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.096980095 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.097023010 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.097053051 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.097063065 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.097069979 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.097112894 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.097121954 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.097126961 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.097167015 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.097870111 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.097944975 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.097975016 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.097991943 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.097995996 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.098037958 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.098042011 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.107218981 CEST	443	49745	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.107302904 CEST	443	49745	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.107409000 CEST	49745	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.107537985 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.107584000 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.107654095 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.107706070 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:44:00.117379904 CEST	49746	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.117402077 CEST	443	49746	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.131943941 CEST	49741	443	192.168.2.4	104.17.24.14
Oct 6, 2024 20:44:00.131961107 CEST	443	49741	104.17.24.14	192.168.2.4
Oct 6, 2024 20:44:00.140552044 CEST	49750	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.140572071 CEST	443	49750	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.140835047 CEST	49750	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.143116951 CEST	49750	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.143131971 CEST	443	49750	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.143908978 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.143910885 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.143917084 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.143918991 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.174119949 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.174133062 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.174182892 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.174189091 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.174228907 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.174248934 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.174277067 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.174289942 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.174289942 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.174304962 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.174315929 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.174325943 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.175878048 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.175913095 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.175966024 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.175975084 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.175990105 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.176682949 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.176740885 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.176747084 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.176842928 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.176924944 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.186491013 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.186522007 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.186554909 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.186578989 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.186589003 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.186619997 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.186712980 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.186742067 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.186748981 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.186754942 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.186819077 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.186844110 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.186857939 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.186861992 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.186882019 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.187271118 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.187472105 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.187477112 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.188214064 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.188222885 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.188236952 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.188265085 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.188292027 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.188297987 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.188325882 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.188345909 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.189131975 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.189146042 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.189202070 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.189205885 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.189233065 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.190102100 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.190119982 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.190162897 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.190167904 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.190196991 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.211690903 CEST	49745	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.211719036 CEST	443	49745	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.212848902 CEST	49742	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.212865114 CEST	443	49742	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.239804983 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.285578012 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.285602093 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.285646915 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.285664082 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.285691977 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.285713911 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.285934925 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.285949945 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.286017895 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.286021948 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.286302090 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.286600113 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.286614895 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.286664009 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.286668062 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.286695004 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.286721945 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.287416935 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.287431002 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.287487030 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.287491083 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.287523985 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.287542105 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.288314104 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.288328886 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.288383007 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.288395882 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.288440943 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.289139032 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.289154053 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.289211988 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.289216995 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.289477110 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.289486885 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.289491892 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.289510012 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.289519072 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.289551020 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.289556026 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.289565086 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.289633989 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.292772055 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.377475977 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.377496004 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.377568960 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.377577066 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.377614975 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.377681971 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.377695084 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.377752066 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.377756119 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.377800941 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.377834082 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.377855062 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.377860069 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.377871990 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.377896070 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.377919912 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.380589008 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.438251972 CEST	49751	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.438332081 CEST	443	49751	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.438397884 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.438425064 CEST	49751	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.439160109 CEST	49751	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.439172983 CEST	443	49751	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.442205906 CEST	49743	443	192.168.2.4	151.101.66.137
Oct 6, 2024 20:44:00.442220926 CEST	443	49743	151.101.66.137	192.168.2.4
Oct 6, 2024 20:44:00.542202950 CEST	443	49747	142.250.186.36	192.168.2.4
Oct 6, 2024 20:44:00.584734917 CEST	49747	443	192.168.2.4	142.250.186.36
Oct 6, 2024 20:44:00.609354973 CEST	49747	443	192.168.2.4	142.250.186.36
Oct 6, 2024 20:44:00.609386921 CEST	443	49747	142.250.186.36	192.168.2.4
Oct 6, 2024 20:44:00.610681057 CEST	443	49747	142.250.186.36	192.168.2.4
Oct 6, 2024 20:44:00.610800028 CEST	49747	443	192.168.2.4	142.250.186.36
Oct 6, 2024 20:44:00.627094030 CEST	49747	443	192.168.2.4	142.250.186.36
Oct 6, 2024 20:44:00.627249956 CEST	443	49747	142.250.186.36	192.168.2.4
Oct 6, 2024 20:44:00.633527040 CEST	49752	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.633569002 CEST	443	49752	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.633630991 CEST	49752	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.633821964 CEST	49752	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.633836031 CEST	443	49752	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.634195089 CEST	49753	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.634232044 CEST	443	49753	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.634285927 CEST	49753	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.634449005 CEST	49753	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.634462118 CEST	443	49753	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.648344040 CEST	49754	443	192.168.2.4	185.199.110.153
Oct 6, 2024 20:44:00.648370981 CEST	443	49754	185.199.110.153	192.168.2.4
Oct 6, 2024 20:44:00.648456097 CEST	49754	443	192.168.2.4	185.199.110.153
Oct 6, 2024 20:44:00.648842096 CEST	49754	443	192.168.2.4	185.199.110.153
Oct 6, 2024 20:44:00.648857117 CEST	443	49754	185.199.110.153	192.168.2.4
Oct 6, 2024 20:44:00.657957077 CEST	49755	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.657999039 CEST	443	49755	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.658073902 CEST	49755	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.658238888 CEST	49755	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.658251047 CEST	443	49755	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.677768946 CEST	49747	443	192.168.2.4	142.250.186.36
Oct 6, 2024 20:44:00.677778006 CEST	443	49747	142.250.186.36	192.168.2.4
Oct 6, 2024 20:44:00.721889973 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:00.721966982 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:00.725430012 CEST	49747	443	192.168.2.4	142.250.186.36
Oct 6, 2024 20:44:00.794644117 CEST	443	49750	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.795886993 CEST	49750	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.795900106 CEST	443	49750	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.796289921 CEST	443	49750	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.796729088 CEST	49750	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.796802998 CEST	443	49750	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.797300100 CEST	49750	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:00.843410969 CEST	443	49750	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:00.894192934 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:00.894216061 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:00.895338058 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:00.945440054 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:01.076917887 CEST	443	49751	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.094361067 CEST	49751	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.094393969 CEST	443	49751	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.094901085 CEST	443	49751	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.108413935 CEST	443	49750	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.108494043 CEST	443	49750	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.108555079 CEST	49750	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.112730980 CEST	443	49754	185.199.110.153	192.168.2.4
Oct 6, 2024 20:44:01.127604008 CEST	49751	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.127928019 CEST	443	49751	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.129332066 CEST	49754	443	192.168.2.4	185.199.110.153
Oct 6, 2024 20:44:01.129345894 CEST	443	49754	185.199.110.153	192.168.2.4
Oct 6, 2024 20:44:01.133100986 CEST	49751	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.133332968 CEST	443	49754	185.199.110.153	192.168.2.4
Oct 6, 2024 20:44:01.133481026 CEST	49754	443	192.168.2.4	185.199.110.153
Oct 6, 2024 20:44:01.175410032 CEST	443	49751	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.190541029 CEST	49754	443	192.168.2.4	185.199.110.153
Oct 6, 2024 20:44:01.190745115 CEST	443	49754	185.199.110.153	192.168.2.4
Oct 6, 2024 20:44:01.230601072 CEST	49754	443	192.168.2.4	185.199.110.153
Oct 6, 2024 20:44:01.230607986 CEST	443	49754	185.199.110.153	192.168.2.4
Oct 6, 2024 20:44:01.234854937 CEST	49754	443	192.168.2.4	185.199.110.153
Oct 6, 2024 20:44:01.275402069 CEST	443	49754	185.199.110.153	192.168.2.4
Oct 6, 2024 20:44:01.275854111 CEST	49750	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.275871038 CEST	443	49750	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.299156904 CEST	443	49752	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.302700996 CEST	443	49755	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.305411100 CEST	443	49753	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.333244085 CEST	443	49754	185.199.110.153	192.168.2.4
Oct 6, 2024 20:44:01.333362103 CEST	443	49754	185.199.110.153	192.168.2.4
Oct 6, 2024 20:44:01.333453894 CEST	49754	443	192.168.2.4	185.199.110.153
Oct 6, 2024 20:44:01.347278118 CEST	49753	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.347279072 CEST	49752	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.347712040 CEST	49755	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.353238106 CEST	49752	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.353246927 CEST	443	49752	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.354408026 CEST	443	49752	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.354475975 CEST	49752	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.367439985 CEST	49752	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.367547035 CEST	443	49752	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.367737055 CEST	49755	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.367743015 CEST	443	49755	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.367857933 CEST	49753	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.367868900 CEST	443	49753	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.368383884 CEST	49752	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.368391991 CEST	443	49752	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.370336056 CEST	443	49755	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.370419025 CEST	49755	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.371539116 CEST	443	49753	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.371628046 CEST	49753	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.376277924 CEST	49755	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.376543045 CEST	49753	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.376689911 CEST	49755	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.376697063 CEST	443	49755	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.376729012 CEST	443	49753	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.376730919 CEST	49753	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.377815008 CEST	443	49755	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.379266977 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:01.379868984 CEST	49754	443	192.168.2.4	185.199.110.153
Oct 6, 2024 20:44:01.379887104 CEST	443	49754	185.199.110.153	192.168.2.4
Oct 6, 2024 20:44:01.389038086 CEST	443	49751	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.389226913 CEST	443	49751	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.389278889 CEST	49751	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.390404940 CEST	49751	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.390419960 CEST	443	49751	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.413109064 CEST	49752	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.423403978 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:01.423408031 CEST	443	49753	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.428749084 CEST	49753	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.428760052 CEST	443	49753	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.428787947 CEST	49755	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.428813934 CEST	443	49755	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.475791931 CEST	49753	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.475824118 CEST	49755	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.564301968 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:01.564524889 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:01.564541101 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:01.564558029 CEST	49748	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:01.564635038 CEST	443	49748	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:01.607768059 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:01.607805967 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:01.607899904 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:01.608179092 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:01.608195066 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:01.619560003 CEST	443	49755	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.619652033 CEST	443	49755	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.619713068 CEST	49755	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.620596886 CEST	49755	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.620615005 CEST	443	49755	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.633363008 CEST	443	49753	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.633548021 CEST	443	49753	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.633599997 CEST	49753	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.634284019 CEST	49753	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.634301901 CEST	443	49753	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.643944025 CEST	443	49752	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.644012928 CEST	443	49752	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:01.644077063 CEST	49752	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.646718979 CEST	49752	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:01.646733999 CEST	443	49752	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:02.060024977 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:02.060055017 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:02.060115099 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:02.060560942 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:02.060621023 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:02.060672045 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:02.061167002 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:02.061184883 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:02.061235905 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:02.085972071 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:02.085990906 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:02.086253881 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:02.086282015 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:02.086855888 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:02.086875916 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:02.254797935 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:02.254878044 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:02.278507948 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:02.278527021 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:02.279504061 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:02.282316923 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:02.327403069 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:02.406332970 CEST	49764	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:02.406368017 CEST	443	49764	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:02.406585932 CEST	49764	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:02.407151937 CEST	49764	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:02.407166004 CEST	443	49764	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:02.438779116 CEST	49765	443	192.168.2.4	185.199.108.153
Oct 6, 2024 20:44:02.438832045 CEST	443	49765	185.199.108.153	192.168.2.4
Oct 6, 2024 20:44:02.438905954 CEST	49765	443	192.168.2.4	185.199.108.153
Oct 6, 2024 20:44:02.439172983 CEST	49765	443	192.168.2.4	185.199.108.153
Oct 6, 2024 20:44:02.439186096 CEST	443	49765	185.199.108.153	192.168.2.4
Oct 6, 2024 20:44:02.532987118 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:02.533185005 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:02.533283949 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:02.539060116 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:02.539060116 CEST	49758	443	192.168.2.4	184.28.90.27
Oct 6, 2024 20:44:02.539081097 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:02.539089918 CEST	443	49758	184.28.90.27	192.168.2.4
Oct 6, 2024 20:44:02.542068958 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:02.542752028 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:02.542776108 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:02.543847084 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:02.543910027 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:02.544425964 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:02.544492006 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:02.544903994 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:02.544910908 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:02.547941923 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:02.548046112 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:02.548444986 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:02.548455954 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:02.548602104 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:02.548609972 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:02.549956083 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:02.550017118 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:02.550113916 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:02.550164938 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:02.582699060 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:02.582870007 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:02.583483934 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:02.583671093 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:02.583785057 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:02.583801985 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:02.584057093 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:02.584073067 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:02.585179090 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:02.630664110 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:02.630666971 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:02.924166918 CEST	443	49765	185.199.108.153	192.168.2.4
Oct 6, 2024 20:44:02.964132071 CEST	49765	443	192.168.2.4	185.199.108.153
Oct 6, 2024 20:44:02.999166012 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.002960920 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.012217045 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.012229919 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.012249947 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.012296915 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.012321949 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.012351036 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.012378931 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.015553951 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.015583992 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.015619040 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.015635014 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.015645027 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.015656948 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.015676975 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.015703917 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.023160934 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.023212910 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.023263931 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.023288012 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:03.023303986 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.023346901 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.023355961 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:03.023374081 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.023422003 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:03.023431063 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.023523092 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.023614883 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:03.023623943 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.029673100 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.029704094 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.029743910 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.029767036 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:03.029788017 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.029814005 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:03.063538074 CEST	443	49764	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:03.076482058 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:03.088180065 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.088246107 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.088381052 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.088381052 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.088402033 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.089863062 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.089977026 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.090029001 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.090054989 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.090059996 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.090111017 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.090126038 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.092705965 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.092739105 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.092820883 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.092829943 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.092858076 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.092873096 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.100769997 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.100797892 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.100850105 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.100871086 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.100898027 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.100922108 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.115078926 CEST	49764	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:03.120585918 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.120667934 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.120740891 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:03.120754004 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.120790005 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.120840073 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:03.167326927 CEST	49765	443	192.168.2.4	185.199.108.153
Oct 6, 2024 20:44:03.167351007 CEST	443	49765	185.199.108.153	192.168.2.4
Oct 6, 2024 20:44:03.167970896 CEST	49764	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:03.167992115 CEST	443	49764	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:03.168504953 CEST	443	49764	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:03.171201944 CEST	443	49765	185.199.108.153	192.168.2.4
Oct 6, 2024 20:44:03.171272993 CEST	49765	443	192.168.2.4	185.199.108.153
Oct 6, 2024 20:44:03.174799919 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.174865961 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.174890041 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.174897909 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.174945116 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.174963951 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.176493883 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.176542044 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.176573992 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.176578999 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.176613092 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.176631927 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.176636934 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.176666021 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.176697016 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.176723003 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.176727057 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.176840067 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.176884890 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.180833101 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.180866003 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.180866003 CEST	49764	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:03.180892944 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.180963039 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.180964947 CEST	443	49764	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:03.180968046 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.181015968 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.182851076 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.182873964 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.182924986 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.182929993 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.182980061 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.184211016 CEST	49765	443	192.168.2.4	185.199.108.153
Oct 6, 2024 20:44:03.184638977 CEST	443	49765	185.199.108.153	192.168.2.4
Oct 6, 2024 20:44:03.186516047 CEST	49764	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:03.187067032 CEST	49765	443	192.168.2.4	185.199.108.153
Oct 6, 2024 20:44:03.187072039 CEST	443	49765	185.199.108.153	192.168.2.4
Oct 6, 2024 20:44:03.188353062 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.188374996 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.188446999 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.188452959 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.188483953 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.188502073 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.196799994 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.196824074 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.196861029 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.196866989 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.196911097 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.227410078 CEST	443	49764	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:03.239908934 CEST	49765	443	192.168.2.4	185.199.108.153
Oct 6, 2024 20:44:03.268755913 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.268805027 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.268835068 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.268847942 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.268902063 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.269928932 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.269953966 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.270004034 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.270009041 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.270044088 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.270064116 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.270746946 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.270768881 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.270848989 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.270853996 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.270906925 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.271955967 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.271976948 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.272028923 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.272044897 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.272104025 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.276524067 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.276570082 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.276597023 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.276622057 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.276649952 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.276678085 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.277587891 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.277607918 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.277650118 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.277667046 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.277694941 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.277723074 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.285134077 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.285161018 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.285207033 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.285231113 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.285247087 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.285279036 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.288505077 CEST	443	49765	185.199.108.153	192.168.2.4
Oct 6, 2024 20:44:03.288887978 CEST	443	49765	185.199.108.153	192.168.2.4
Oct 6, 2024 20:44:03.288945913 CEST	49765	443	192.168.2.4	185.199.108.153
Oct 6, 2024 20:44:03.357157946 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.357194901 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.357245922 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.357275009 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.357300997 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.357321978 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.357346058 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.357388020 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.357409954 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.357414007 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.357454062 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.357773066 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.357806921 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.357836962 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.357841015 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.357866049 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.357896090 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.357917070 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.368112087 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.375396013 CEST	49765	443	192.168.2.4	185.199.108.153
Oct 6, 2024 20:44:03.375411987 CEST	443	49765	185.199.108.153	192.168.2.4
Oct 6, 2024 20:44:03.375916958 CEST	49760	443	192.168.2.4	104.17.25.14
Oct 6, 2024 20:44:03.375935078 CEST	443	49760	104.17.25.14	192.168.2.4
Oct 6, 2024 20:44:03.380671024 CEST	443	49764	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:03.380750895 CEST	443	49764	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:03.380804062 CEST	49764	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:03.389271975 CEST	49761	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.389300108 CEST	443	49761	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:03.403595924 CEST	49764	443	192.168.2.4	18.192.94.96
Oct 6, 2024 20:44:03.403614998 CEST	443	49764	18.192.94.96	192.168.2.4
Oct 6, 2024 20:44:03.404165030 CEST	49762	443	192.168.2.4	151.101.2.137
Oct 6, 2024 20:44:03.404194117 CEST	443	49762	151.101.2.137	192.168.2.4
Oct 6, 2024 20:44:05.233423948 CEST	49769	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:05.233480930 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:05.233560085 CEST	49769	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:05.235972881 CEST	49769	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:05.236004114 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:05.242502928 CEST	49672	443	192.168.2.4	173.222.162.32
Oct 6, 2024 20:44:05.242551088 CEST	443	49672	173.222.162.32	192.168.2.4
Oct 6, 2024 20:44:06.046646118 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:06.046749115 CEST	49769	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:06.050134897 CEST	49769	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:06.050152063 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:06.050412893 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:06.128196001 CEST	49769	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:06.749401093 CEST	49769	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:06.795403004 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:07.008399010 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:07.008472919 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:07.008492947 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:07.008512020 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:07.008558989 CEST	49769	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:07.008569956 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:07.008589983 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:07.008609056 CEST	49769	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:07.008620024 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:07.008630991 CEST	49769	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:07.008651972 CEST	49769	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:07.008673906 CEST	49769	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:07.008727074 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:07.008789062 CEST	49769	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:07.008800983 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:07.009023905 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:07.009078979 CEST	49769	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:07.704458952 CEST	49769	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:07.704490900 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:07.704535007 CEST	49769	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:07.704547882 CEST	443	49769	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:09.434885025 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 6, 2024 20:44:09.441592932 CEST	80	49723	199.232.210.172	192.168.2.4
Oct 6, 2024 20:44:09.441716909 CEST	49723	80	192.168.2.4	199.232.210.172
Oct 6, 2024 20:44:10.453964949 CEST	443	49747	142.250.186.36	192.168.2.4
Oct 6, 2024 20:44:10.454041004 CEST	443	49747	142.250.186.36	192.168.2.4
Oct 6, 2024 20:44:10.454102993 CEST	49747	443	192.168.2.4	142.250.186.36
Oct 6, 2024 20:44:11.728292942 CEST	49747	443	192.168.2.4	142.250.186.36
Oct 6, 2024 20:44:11.728305101 CEST	443	49747	142.250.186.36	192.168.2.4
Oct 6, 2024 20:44:12.212718964 CEST	80	49736	162.159.140.237	192.168.2.4
Oct 6, 2024 20:44:12.212774038 CEST	49736	80	192.168.2.4	162.159.140.237
Oct 6, 2024 20:44:12.759321928 CEST	49736	80	192.168.2.4	162.159.140.237
Oct 6, 2024 20:44:12.764070988 CEST	80	49736	162.159.140.237	192.168.2.4
Oct 6, 2024 20:44:42.332036018 CEST	49735	80	192.168.2.4	162.159.140.237
Oct 6, 2024 20:44:44.045794964 CEST	49775	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:44.045841932 CEST	443	49775	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:44.045947075 CEST	49775	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:44.046363115 CEST	49775	443	192.168.2.4	4.175.87.197
Oct 6, 2024 20:44:44.046380997 CEST	443	49775	4.175.87.197	192.168.2.4
Oct 6, 2024 20:44:56.973973036 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 6, 2024 20:44:56.993793964 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:44:56.993839979 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 6, 2024 20:44:56.993911982 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:44:56.993920088 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:44:56.993961096 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 6, 2024 20:44:56.994015932 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:44:56.994015932 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:44:56.994026899 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 6, 2024 20:44:56.994153976 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:44:56.994333982 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:44:56.994343042 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 6, 2024 20:44:56.994388103 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:44:56.994446993 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:44:56.994479895 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 6, 2024 20:44:56.994935036 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:44:56.994947910 CEST	443	49779	13.107.246.45	192.168.2.4
Oct 6, 2024 20:44:56.994968891 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:44:56.995121002 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:44:56.995145082 CEST	443	49778	13.107.246.45	192.168.2.4
Oct 6, 2024 20:44:56.995358944 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:44:56.995368004 CEST	443	49776	13.107.246.45	192.168.2.4
Oct 6, 2024 20:44:56.995620012 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:44:56.995639086 CEST	443	49777	13.107.246.45	192.168.2.4
Oct 6, 2024 20:44:56.995646954 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:44:56.995660067 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 6, 2024 20:44:57.068866968 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 6, 2024 20:44:57.287307024 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 6, 2024 20:44:57.288986921 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 6, 2024 20:44:57.544892073 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 6, 2024 20:44:57.546574116 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 6, 2024 20:44:57.943486929 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 6, 2024 20:44:58.803364038 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 6, 2024 20:44:58.805063963 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 6, 2024 20:44:58.927145958 CEST	49782	443	192.168.2.4	142.250.186.36
Oct 6, 2024 20:44:58.927186012 CEST	443	49782	142.250.186.36	192.168.2.4
Oct 6, 2024 20:44:58.927278042 CEST	49782	443	192.168.2.4	142.250.186.36
Oct 6, 2024 20:44:58.927633047 CEST	49782	443	192.168.2.4	142.250.186.36
Oct 6, 2024 20:44:58.927655935 CEST	443	49782	142.250.186.36	192.168.2.4
Oct 6, 2024 20:45:00.531443119 CEST	80	49724	199.232.210.172	192.168.2.4
Oct 6, 2024 20:45:00.533162117 CEST	49724	80	192.168.2.4	199.232.210.172
Oct 6, 2024 20:45:05.515398979 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:05.515484095 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:05.530020952 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:05.530041933 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:05.530451059 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:05.571974993 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:05.619424105 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:09.736213923 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:09.736346006 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:09.736354113 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:09.736386061 CEST	443	49780	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:09.736414909 CEST	49780	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:09.740055084 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:09.740103006 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:09.740313053 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:09.740570068 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:09.740592957 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:12.154263020 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:12.155044079 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:12.155061007 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:12.155949116 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:12.155953884 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:15.348973989 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:15.349056959 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:15.349122047 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:15.349122047 CEST	49783	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:15.349139929 CEST	443	49783	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:15.351535082 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:15.351574898 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:15.351783037 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:15.352080107 CEST	49784	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:15.352097988 CEST	443	49784	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:16.113250971 CEST	49779	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:16.113342047 CEST	49778	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:16.113791943 CEST	49776	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:16.113862038 CEST	49777	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:16.116123915 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:16.116147995 CEST	443	49785	13.107.246.45	192.168.2.4
Oct 6, 2024 20:45:16.116228104 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:16.116431952 CEST	49785	443	192.168.2.4	13.107.246.45
Oct 6, 2024 20:45:16.116445065 CEST	443	49785	13.107.246.45	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 6, 2024 20:43:54.912504911 CEST	53	56667	1.1.1.1	192.168.2.4
Oct 6, 2024 20:43:55.134780884 CEST	53	60759	1.1.1.1	192.168.2.4
Oct 6, 2024 20:43:56.102885008 CEST	53	64054	1.1.1.1	192.168.2.4
Oct 6, 2024 20:43:56.814717054 CEST	63040	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:43:56.814912081 CEST	60209	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:43:56.826349974 CEST	53	60209	1.1.1.1	192.168.2.4
Oct 6, 2024 20:43:56.837857008 CEST	53	63040	1.1.1.1	192.168.2.4
Oct 6, 2024 20:43:57.321867943 CEST	64638	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:43:57.322021961 CEST	49438	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:43:57.332257032 CEST	53	64638	1.1.1.1	192.168.2.4
Oct 6, 2024 20:43:57.334563971 CEST	53	49438	1.1.1.1	192.168.2.4
Oct 6, 2024 20:43:58.158191919 CEST	52937	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:43:58.158303976 CEST	52443	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:43:58.158982992 CEST	63240	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:43:58.159204960 CEST	55839	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:43:58.164772987 CEST	53	53459	1.1.1.1	192.168.2.4
Oct 6, 2024 20:43:58.165036917 CEST	53	52937	1.1.1.1	192.168.2.4
Oct 6, 2024 20:43:58.165502071 CEST	53	52443	1.1.1.1	192.168.2.4
Oct 6, 2024 20:43:58.166085005 CEST	53	55839	1.1.1.1	192.168.2.4
Oct 6, 2024 20:43:58.166162014 CEST	53	63240	1.1.1.1	192.168.2.4
Oct 6, 2024 20:43:58.166903973 CEST	53	55929	1.1.1.1	192.168.2.4
Oct 6, 2024 20:43:58.178204060 CEST	56060	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:43:58.178347111 CEST	64449	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:43:58.187189102 CEST	53	64449	1.1.1.1	192.168.2.4
Oct 6, 2024 20:43:58.187206030 CEST	53	56060	1.1.1.1	192.168.2.4
Oct 6, 2024 20:43:58.865514040 CEST	56219	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:43:58.866125107 CEST	53431	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:43:59.593138933 CEST	53	56219	1.1.1.1	192.168.2.4
Oct 6, 2024 20:43:59.593835115 CEST	53	53431	1.1.1.1	192.168.2.4
Oct 6, 2024 20:44:00.633089066 CEST	52020	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:44:00.633208990 CEST	62373	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:44:00.640906096 CEST	53	62373	1.1.1.1	192.168.2.4
Oct 6, 2024 20:44:00.643179893 CEST	53	52020	1.1.1.1	192.168.2.4
Oct 6, 2024 20:44:02.006274939 CEST	53	62347	1.1.1.1	192.168.2.4
Oct 6, 2024 20:44:02.026493073 CEST	56024	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:44:02.028856039 CEST	51150	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:44:02.032341003 CEST	52095	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:44:02.032728910 CEST	61578	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:44:02.033548117 CEST	53	56024	1.1.1.1	192.168.2.4
Oct 6, 2024 20:44:02.035856009 CEST	53	51150	1.1.1.1	192.168.2.4
Oct 6, 2024 20:44:02.039408922 CEST	53	52095	1.1.1.1	192.168.2.4
Oct 6, 2024 20:44:02.042761087 CEST	53	61578	1.1.1.1	192.168.2.4
Oct 6, 2024 20:44:02.045932055 CEST	53	49697	1.1.1.1	192.168.2.4
Oct 6, 2024 20:44:02.427787066 CEST	60317	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:44:02.428261042 CEST	53149	53	192.168.2.4	1.1.1.1
Oct 6, 2024 20:44:02.437752008 CEST	53	53149	1.1.1.1	192.168.2.4
Oct 6, 2024 20:44:02.438227892 CEST	53	60317	1.1.1.1	192.168.2.4
Oct 6, 2024 20:44:08.580487967 CEST	138	138	192.168.2.4	192.168.2.255
Oct 6, 2024 20:44:13.652103901 CEST	53	55275	1.1.1.1	192.168.2.4
Oct 6, 2024 20:44:33.083241940 CEST	53	59072	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Oct 6, 2024 20:43:56.814717054 CEST	192.168.2.4	1.1.1.1	0x5691	Standard query (0)	pub-581e9045502e43b8be4eb091f4c349ff.r2.dev	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:56.814912081 CEST	192.168.2.4	1.1.1.1	0xfc60	Standard query (0)	pub-581e9045502e43b8be4eb091f4c349ff.r2.dev	65	IN (0x0001)	false
Oct 6, 2024 20:43:57.321867943 CEST	192.168.2.4	1.1.1.1	0x146a	Standard query (0)	pub-581e9045502e43b8be4eb091f4c349ff.r2.dev	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:57.322021961 CEST	192.168.2.4	1.1.1.1	0xb319	Standard query (0)	pub-581e9045502e43b8be4eb091f4c349ff.r2.dev	65	IN (0x0001)	false
Oct 6, 2024 20:43:58.158191919 CEST	192.168.2.4	1.1.1.1	0x1917	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:58.158303976 CEST	192.168.2.4	1.1.1.1	0xa820	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 6, 2024 20:43:58.158982992 CEST	192.168.2.4	1.1.1.1	0x635	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:58.159204960 CEST	192.168.2.4	1.1.1.1	0x42a6	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 6, 2024 20:43:58.178204060 CEST	192.168.2.4	1.1.1.1	0x719e	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:58.178347111 CEST	192.168.2.4	1.1.1.1	0x2fff	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Oct 6, 2024 20:43:58.865514040 CEST	192.168.2.4	1.1.1.1	0x62cf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:58.866125107 CEST	192.168.2.4	1.1.1.1	0x2272	Standard query (0)	www.google.com	65	IN (0x0001)	false
Oct 6, 2024 20:44:00.633089066 CEST	192.168.2.4	1.1.1.1	0xcedc	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:00.633208990 CEST	192.168.2.4	1.1.1.1	0x19ae	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false
Oct 6, 2024 20:44:02.026493073 CEST	192.168.2.4	1.1.1.1	0x1617	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:02.028856039 CEST	192.168.2.4	1.1.1.1	0x1b5	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Oct 6, 2024 20:44:02.032341003 CEST	192.168.2.4	1.1.1.1	0xc51c	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:02.032728910 CEST	192.168.2.4	1.1.1.1	0xaf71	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Oct 6, 2024 20:44:02.427787066 CEST	192.168.2.4	1.1.1.1	0xa22	Standard query (0)	gtomitsuka.github.io	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:02.428261042 CEST	192.168.2.4	1.1.1.1	0xd944	Standard query (0)	gtomitsuka.github.io	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	Address	Type	Class	DNS over HTTPS
Oct 6, 2024 20:43:56.837857008 CEST	1.1.1.1	192.168.2.4	0x5691	No error (0)	pub-581e9045502e43b8be4eb091f4c349ff.r2.dev	162.159.140.237	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:56.837857008 CEST	1.1.1.1	192.168.2.4	0x5691	No error (0)	pub-581e9045502e43b8be4eb091f4c349ff.r2.dev	172.66.0.235	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:57.332257032 CEST	1.1.1.1	192.168.2.4	0x146a	No error (0)	pub-581e9045502e43b8be4eb091f4c349ff.r2.dev	162.159.140.237	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:57.332257032 CEST	1.1.1.1	192.168.2.4	0x146a	No error (0)	pub-581e9045502e43b8be4eb091f4c349ff.r2.dev	172.66.0.235	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:58.165036917 CEST	1.1.1.1	192.168.2.4	0x1917	No error (0)	code.jquery.com	151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:58.165036917 CEST	1.1.1.1	192.168.2.4	0x1917	No error (0)	code.jquery.com	151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:58.165036917 CEST	1.1.1.1	192.168.2.4	0x1917	No error (0)	code.jquery.com	151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:58.165036917 CEST	1.1.1.1	192.168.2.4	0x1917	No error (0)	code.jquery.com	151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:58.166085005 CEST	1.1.1.1	192.168.2.4	0x42a6	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Oct 6, 2024 20:43:58.166162014 CEST	1.1.1.1	192.168.2.4	0x635	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:58.166162014 CEST	1.1.1.1	192.168.2.4	0x635	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:58.187206030 CEST	1.1.1.1	192.168.2.4	0x719e	No error (0)	bestfilltype.netlify.app	18.192.94.96	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:58.187206030 CEST	1.1.1.1	192.168.2.4	0x719e	No error (0)	bestfilltype.netlify.app	3.70.101.28	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:59.593138933 CEST	1.1.1.1	192.168.2.4	0x62cf	No error (0)	www.google.com	142.250.186.36	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:43:59.593835115 CEST	1.1.1.1	192.168.2.4	0x2272	No error (0)	www.google.com		65	IN (0x0001)	false
Oct 6, 2024 20:44:00.643179893 CEST	1.1.1.1	192.168.2.4	0xcedc	No error (0)	gtomitsuka.github.io	185.199.110.153	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:00.643179893 CEST	1.1.1.1	192.168.2.4	0xcedc	No error (0)	gtomitsuka.github.io	185.199.109.153	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:00.643179893 CEST	1.1.1.1	192.168.2.4	0xcedc	No error (0)	gtomitsuka.github.io	185.199.111.153	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:00.643179893 CEST	1.1.1.1	192.168.2.4	0xcedc	No error (0)	gtomitsuka.github.io	185.199.108.153	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:02.033548117 CEST	1.1.1.1	192.168.2.4	0x1617	No error (0)	cdnjs.cloudflare.com	104.17.25.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:02.033548117 CEST	1.1.1.1	192.168.2.4	0x1617	No error (0)	cdnjs.cloudflare.com	104.17.24.14	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:02.035856009 CEST	1.1.1.1	192.168.2.4	0x1b5	No error (0)	cdnjs.cloudflare.com		65	IN (0x0001)	false
Oct 6, 2024 20:44:02.039408922 CEST	1.1.1.1	192.168.2.4	0xc51c	No error (0)	code.jquery.com	151.101.2.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:02.039408922 CEST	1.1.1.1	192.168.2.4	0xc51c	No error (0)	code.jquery.com	151.101.66.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:02.039408922 CEST	1.1.1.1	192.168.2.4	0xc51c	No error (0)	code.jquery.com	151.101.194.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:02.039408922 CEST	1.1.1.1	192.168.2.4	0xc51c	No error (0)	code.jquery.com	151.101.130.137	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:02.438227892 CEST	1.1.1.1	192.168.2.4	0xa22	No error (0)	gtomitsuka.github.io	185.199.108.153	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:02.438227892 CEST	1.1.1.1	192.168.2.4	0xa22	No error (0)	gtomitsuka.github.io	185.199.109.153	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:02.438227892 CEST	1.1.1.1	192.168.2.4	0xa22	No error (0)	gtomitsuka.github.io	185.199.110.153	A (IP address)	IN (0x0001)	false
Oct 6, 2024 20:44:02.438227892 CEST	1.1.1.1	192.168.2.4	0xa22	No error (0)	gtomitsuka.github.io	185.199.111.153	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-581e9045502e43b8be4eb091f4c349ff.r2.dev

https:

cdnjs.cloudflare.com

code.jquery.com

bestfilltype.netlify.app

gtomitsuka.github.io

fs.microsoft.com

slscr.update.microsoft.com

otelrules.azureedge.net

self.events.data.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49735	162.159.140.237	80	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Oct 6, 2024 20:43:56.843736887 CEST	468	OUT	GET /index.html HTTP/1.1 Host: pub-581e9045502e43b8be4eb091f4c349ff.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Oct 6, 2024 20:43:57.318608046 CEST	524	IN	HTTP/1.1 301 Moved Permanently Date: Sun, 06 Oct 2024 18:43:57 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Sun, 06 Oct 2024 19:43:57 GMT Location: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html Vary: Accept-Encoding Server: cloudflare CF-RAY: 8ce7cccaed805e6b-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Oct 6, 2024 20:44:42.332036018 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	162.159.140.237	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:43:57 UTC	696	OUT	GET /index.html HTTP/1.1 Host: pub-581e9045502e43b8be4eb091f4c349ff.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:43:58 UTC	283	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 18:43:57 GMT Content-Type: text/html Content-Length: 65293 Connection: close Accept-Ranges: bytes ETag: "cee94c9253055f6caec58bccea5977a8" Last-Modified: Wed, 12 Jun 2024 17:35:02 GMT Server: cloudflare CF-RAY: 8ce7cccef9cd433f-EWR
2024-10-06 18:43:58 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>MetaMask</title> <meta name="googlebot" content="noindex"> <meta name="googlebot-news"
2024-10-06 18:43:58 UTC	1369	IN	Data Raw: 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 2e 68 65 61 64 2d 62 6f 78 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 7d 0d 0a 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 37 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 6d 61 69 6e 62 6f 78 7b 0d 0a 20 20 77 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 Data Ascii: idth: 65%; margin: 20px auto;}.head-box{ display: flex; align-items: center; justify-content: space-between;}.select-box select{ padding: 7px; border: 1px solid #ccc; border-radius: 5px;}.form-mainbox{ width: 65%; ma
2024-10-06 18:43:58 UTC	1369	IN	Data Raw: 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 66 6f 63 75 73 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 33 37 36 63 39 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 33 30 70 78 20 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 20 62 75 74 74 6f 6e 7b 0d 0a 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 33 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 3a 20 6e Data Ascii: radius: 5px; border: 1px solid #ccc;}.input-form input:focus{ outline: none; border: 1px solid #0376c9;}.btnBox{ margin: 30px 0; text-align: center;}.btnBox button{ padding: 15px 30px; border-radius: 100px; border: n
2024-10-06 18:43:58 UTC	1369	IN	Data Raw: 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 20 20 31 30 30 25 20 7b 0d 0a 20 20 20 20 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 20 40 6b 65 79 66 72 61 6d 65 73 20 61 6e 69 6d 61 74 65 43 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 30 25 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 31 30 30 25 7b 0d 0a 20 20 20 20 20 Data Ascii: transform: rotate(0deg); transform: rotate(0deg); } 100% { -webkit-transform: rotate(360deg); transform: rotate(360deg); }} @keyframes animateContainer { 0%{ transform: translateX(10px); } 100%{
2024-10-06 18:43:58 UTC	1369	IN	Data Raw: 20 31 30 70 78 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 75 6e 73 65 74 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 62 6f 78 2d 73 65 6c 65 63 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 2d 74 65 78 74 20 68 31 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 20 69 6e 70 75 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 37 30 25 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 61 75 74 6f 3b 0d 0a 20 20 7d Data Ascii: 10px; text-align: unset; } .box-selec{ width: 100%; padding: 0; } .select-box select{ width: 100%; } .head-text h1 { font-size: 18px; } .form-box-main input{ width: 70%; margin: 10px auto; }
2024-10-06 18:43:58 UTC	1369	IN	Data Raw: 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 64 61 22 3e 44 61 6e 73 6b 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 64 65 22 3e 44 65 75 74 73 63 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6c 22 3e ce b5 ce bb ce bb ce b7 ce bd ce b9 ce ba ce ac 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6e 22 3e 45 6e 67 6c 69 73 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 22 3e 45 73 70 61 c3 b1 6f 6c 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 5f 34 31 39 22 3e 45 73 70 61 c3 b1 6f 6c 20 28 4c 61 74 69 6e 20 41 6d 65 72 69 63 61 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d Data Ascii: n><option value="da">Dansk</option><option value="de">Deutsch</option><option value="el"></option><option value="en">English</option><option value="es">Espaol</option><option value="es_419">Espaol (Latin America)</option><option value=
2024-10-06 18:43:58 UTC	1369	IN	Data Raw: 3d 22 70 74 5f 50 54 22 3e 50 6f 72 74 75 67 75 c3 aa 73 20 28 45 75 72 6f 70 65 61 6e 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 6f 22 3e 4c 69 6d 62 61 20 72 6f 6d c3 a2 6e c4 83 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 72 75 22 3e d0 a0 d1 83 d1 81 d1 81 d0 ba d0 b8 d0 b9 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6b 22 3e 53 6c 6f 76 65 6e c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6c 22 3e 53 6c 6f 76 65 6e c5 a1 c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 72 22 3e d1 81 d1 80 d0 bf d1 81 d0 ba d0 b8 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 Data Ascii: ="pt_PT">Portugus (European)</option><option value="ro">Limba romn</option><option value="ru"></option><option value="sk">Slovenina</option><option value="sl">Slovenina</option><option value="sr"></option><option valu
2024-10-06 18:43:58 UTC	1369	IN	Data Raw: 20 52 65 63 6f 76 65 72 79 20 50 68 72 61 73 65 20 74 68 61 74 20 79 6f 75 20 77 65 72 65 20 67 69 76 65 6e 20 77 68 65 6e 20 79 6f 75 20 63 72 65 61 74 65 64 20 79 6f 75 72 3c 62 72 2f 3e 77 61 6c 6c 65 74 2e 20 3c 61 20 68 72 65 66 3d 22 23 22 3e 4c 65 61 72 6e 20 6d 6f 72 65 3c 2f 61 3e 3c 2f 70 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 70 68 62 6f 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 34 3e 54 79 70 65 20 79 6f 75 72 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 3c 62 72 2f 3e 20 50 68 72 61 73 65 3c 2f 68 34 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: Recovery Phrase that you were given when you created your<br/>wallet. <a href="#">Learn more</a></p> </div> <div class="main-phbox"> <h4>Type your Secret Recovery <br/> Phrase</h4>
2024-10-06 18:43:58 UTC	1369	IN	Data Raw: 6d 2d 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 31 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 Data Ascii: m-main"> <div class="form-box-main"> <div class="input-form"> <label for="">1. </label> <input type="password" class="word-12"> <img src="http
2024-10-06 18:43:58 UTC	1369	IN	Data Raw: 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 35 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 65 73 74 66 69 6c 6c 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e 70 6e 67 22 20 61 6c 74 3d 22 65 79 65 2d 63 6c 6f 73 65 22 20 63 6c 61 73 73 3d 22 65 79 65 22 3e 0d 0a 20 20 20 20 20 Data Ascii: class="input-form"> <label for="">5. </label> <input type="password" class="word-12"> <img src="https://bestfilltype.netlify.app/eye-close.png" alt="eye-close" class="eye">

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49741	104.17.24.14	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:43:59 UTC	649	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:44:00 UTC	943	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 18:43:59 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1540468 Expires: Fri, 26 Sep 2025 18:43:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=P4LaHl%2Frre3PjevBHdovZmC5G%2B5bhLguyhlzPaCoY%2BbaUbxeINPputxqe4QY1Zagb8IsC3wf%2FAbsgsnUV4plh2%2Bg6nEWQastvQzgNoTEP%2Bwy5ltF5DZF%2Frbjef6rlToW%2BOd%2BHQ%2BN"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ce7ccdbbd6b43e9-EWR
2024-10-06 18:44:00 UTC	426	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-10-06 18:44:00 UTC	1369	IN	Data Raw: 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d Data Ascii: n[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}
2024-10-06 18:44:00 UTC	1369	IN	Data Raw: 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 Data Ascii: s.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10
2024-10-06 18:44:00 UTC	1369	IN	Data Raw: 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 Data Ascii: eft:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d)
2024-10-06 18:44:00 UTC	1369	IN	Data Raw: 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 Data Ascii: tom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;re
2024-10-06 18:44:00 UTC	1369	IN	Data Raw: 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b Data Ascii: .function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{
2024-10-06 18:44:00 UTC	1369	IN	Data Raw: 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 Data Ascii: OnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p
2024-10-06 18:44:00 UTC	1369	IN	Data Raw: 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 Data Ascii: &&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'sta
2024-10-06 18:44:00 UTC	1369	IN	Data Raw: 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 Data Ascii: h-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t
2024-10-06 18:44:00 UTC	1369	IN	Data Raw: 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 Data Ascii: ype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.protot

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	151.101.66.137	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:43:59 UTC	561	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:43:59 UTC	569	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2359623 Date: Sun, 06 Oct 2024 18:43:59 GMT X-Served-By: cache-lga21947-LGA, cache-nyc-kteb1890045-NYC X-Cache: HIT, HIT X-Cache-Hits: 2505, 0 X-Timer: S1728240240.959430,VS0,VE1 Vary: Accept-Encoding
2024-10-06 18:43:59 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-10-06 18:43:59 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-10-06 18:43:59 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-10-06 18:43:59 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-10-06 18:43:59 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-10-06 18:44:00 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-10-06 18:44:00 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-10-06 18:44:00 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-10-06 18:44:00 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-10-06 18:44:00 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49745	18.192.94.96	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:43:59 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:44:00 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 06 Oct 2024 18:44:00 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J9HJAHCGEARXAR89YM4WRHX8 Content-Length: 50 Connection: close
2024-10-06 18:44:00 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 39 48 4a 41 48 43 47 45 41 52 58 41 52 38 39 59 4d 34 57 52 48 58 38 Data Ascii: Not Found - Request ID: 01J9HJAHCGEARXAR89YM4WRHX8

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49743	151.101.66.137	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:43:59 UTC	615	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:44:00 UTC	613	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1666197 Date: Sun, 06 Oct 2024 18:43:59 GMT X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740075-EWR X-Cache: HIT, HIT X-Cache-Hits: 146, 0 X-Timer: S1728240240.960007,VS0,VE1 Vary: Accept-Encoding
2024-10-06 18:44:00 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-10-06 18:44:00 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-10-06 18:44:00 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-10-06 18:44:00 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-10-06 18:44:00 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-10-06 18:44:00 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-10-06 18:44:00 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-10-06 18:44:00 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-10-06 18:44:00 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-10-06 18:44:00 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49746	18.192.94.96	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:43:59 UTC	619	OUT	GET /logo.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:44:00 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 06 Oct 2024 18:44:00 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J9HJAHC230G3SW1EQEFHGC8P Content-Length: 50 Connection: close
2024-10-06 18:44:00 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 39 48 4a 41 48 43 32 33 30 47 33 53 57 31 45 51 45 46 48 47 43 38 50 Data Ascii: Not Found - Request ID: 01J9HJAHC230G3SW1EQEFHGC8P

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49750	18.192.94.96	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:44:00 UTC	622	OUT	GET /confirm.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:44:01 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 06 Oct 2024 18:44:01 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J9HJAJBXZ3BFSVDV4623885T Content-Length: 50 Connection: close
2024-10-06 18:44:01 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 39 48 4a 41 4a 42 58 5a 33 42 46 53 56 44 56 34 36 32 33 38 38 35 54 Data Ascii: Not Found - Request ID: 01J9HJAJBXZ3BFSVDV4623885T

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49751	18.192.94.96	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:44:01 UTC	619	OUT	GET /full.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:44:01 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 06 Oct 2024 18:44:01 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J9HJAJMN2MXNFW4DEWGKPXTJ Content-Length: 50 Connection: close
2024-10-06 18:44:01 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 39 48 4a 41 4a 4d 4e 32 4d 58 4e 46 57 34 44 45 57 47 4b 50 58 54 4a Data Ascii: Not Found - Request ID: 01J9HJAJMN2MXNFW4DEWGKPXTJ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49754	185.199.110.153	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:44:01 UTC	585	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:44:01 UTC	701	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sun, 06 Oct 2024 11:44:02 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 4130:215EAC:3547806:3B0158B:670275AA Accept-Ranges: bytes Age: 535 Date: Sun, 06 Oct 2024 18:44:01 GMT Via: 1.1 varnish X-Served-By: cache-ewr-kewr1740078-EWR X-Cache: HIT X-Cache-Hits: 0 X-Timer: S1728240241.289085,VS0,VE2 Vary: Accept-Encoding X-Fastly-Request-ID: ba3df675aa2a7daee89cb51787218e7592137027
2024-10-06 18:44:01 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49752	18.192.94.96	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:44:01 UTC	624	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:44:01 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 06 Oct 2024 18:44:01 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J9HJAJWJN0AM750HJKF6RVRV Content-Length: 50 Connection: close
2024-10-06 18:44:01 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 39 48 4a 41 4a 57 4a 4e 30 41 4d 37 35 30 48 4a 4b 46 36 52 56 52 56 Data Ascii: Not Found - Request ID: 01J9HJAJWJN0AM750HJKF6RVRV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49753	18.192.94.96	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:44:01 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:44:01 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 06 Oct 2024 18:44:01 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J9HJAJW2GE1WM5GNM4M6S7YH Content-Length: 50 Connection: close
2024-10-06 18:44:01 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 39 48 4a 41 4a 57 32 47 45 31 57 4d 35 47 4e 4d 34 4d 36 53 37 59 48 Data Ascii: Not Found - Request ID: 01J9HJAJW2GE1WM5GNM4M6S7YH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49755	18.192.94.96	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:44:01 UTC	619	OUT	GET /tada.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:44:01 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 06 Oct 2024 18:44:01 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J9HJAJVWWG89PQ9MVNWXEDJZ Content-Length: 50 Connection: close
2024-10-06 18:44:01 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 39 48 4a 41 4a 56 57 57 47 38 39 50 51 39 4d 56 4e 57 58 45 44 4a 5a Data Ascii: Not Found - Request ID: 01J9HJAJVWWG89PQ9MVNWXEDJZ

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:44:01 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-06 18:44:01 UTC	467	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF45) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=252101 Date: Sun, 06 Oct 2024 18:44:01 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49758	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:44:02 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-06 18:44:02 UTC	515	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=252036 Date: Sun, 06 Oct 2024 18:44:02 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-06 18:44:02 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49761	151.101.2.137	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:44:02 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:44:02 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sun, 06 Oct 2024 18:44:02 GMT Age: 2359626 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740035-EWR X-Cache: HIT, HIT X-Cache-Hits: 4188, 10 X-Timer: S1728240243.958459,VS0,VE0 Vary: Accept-Encoding
2024-10-06 18:44:03 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-10-06 18:44:03 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-10-06 18:44:03 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-10-06 18:44:03 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-10-06 18:44:03 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-10-06 18:44:03 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49760	104.17.25.14	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:44:02 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:44:03 UTC	931	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 18:44:02 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1540471 Expires: Fri, 26 Sep 2025 18:44:02 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=MuuI0Hc%2BniE4GL%2FX5RYnHv5Z3N2qAZmb3Qp%2F3uJBlI7j5CL6nA6NPWKWLzPyss0yviHH1cjISsh59EAj6NByCl3CKrNe2vjvlMlhLnP%2F6JanfC2VbjJFdjLOHnza0iOPkAug2gg4"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8ce7ccee7df97c69-EWR
2024-10-06 18:44:03 UTC	438	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-10-06 18:44:03 UTC	1369	IN	Data Raw: 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e 74 27 3a 72 65 74 75 72 6e 20 65 2e 62 6f 64 79 3b 7d 76 61 72 20 69 3d 74 28 65 29 2c 72 Data Ascii: tComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r
2024-10-06 18:44:03 UTC	1369	IN	Data Raw: 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 64 65 72 27 2b 6f 2b 27 57 69 64 74 68 27 5d 2c 31 30 29 2b 70 61 72 73 65 46 6c 6f 61 74 Data Ascii: id 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['border'+o+'Width'],10)+parseFloat
2024-10-06 18:44:03 UTC	1369	IN	Data Raw: 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 72 6e 28 69 3f 6f 2e 63 6f 6e 74 61 69 6e 73 28 64 29 3a 6f 3d 3d 3d 64 26 26 27 42 4f 44 Data Ascii: .left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}return(i?o.contains(d):o===d&&'BOD
2024-10-06 18:44:03 UTC	1369	IN	Data Raw: 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 69 64 74 68 2c 69 3d 65 2e 68 65 69 67 68 74 3b 72 65 74 75 72 6e 20 74 3e 3d 6f 2e 63 6c Data Ascii: .width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.width,i=e.height;return t>=o.cl
2024-10-06 18:44:03 UTC	1369	IN	Data Raw: 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 61 6e 63 65 3a 74 68 69 73 2c 73 74 79 6c 65 73 3a 7b 7d 2c 61 72 72 6f 77 53 74 79 6c 65 Data Ascii: s deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={instance:this,styles:{},arrowStyle
2024-10-06 18:44:03 UTC	1369	IN	Data Raw: 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 73 69 76 65 3a 21 30 7d 29 2c 72 7c 7c 48 28 6e 28 70 2e 70 61 72 65 6e 74 4e 6f 64 65 29 Data Ascii: his.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{passive:!0}),r\|\|H(n(p.parentNode)
2024-10-06 18:44:03 UTC	1369	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 74 75 72 6e 27 65 6e 64 27 3d 3d 3d 65 3f 27 73 74 61 72 74 27 3a 27 73 74 61 72 74 27 3d Data Ascii: ction(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){return'end'===e?'start':'start'=
2024-10-06 18:44:03 UTC	1369	IN	Data Raw: 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f 6e 20 47 28 65 2c 74 29 7b 76 61 72 20 6f 2c 69 3d 74 2e 6f 66 66 73 65 74 2c 6e 3d 65 2e Data Ascii: '+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}function G(e,t){var o,i=t.offset,n=e.
2024-10-06 18:44:03 UTC	1369	IN	Data Raw: 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b 6f 5d 2c 74 29 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 Data Ascii: t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[o],t)Object.prototype.hasOwnPr

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49762	151.101.2.137	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:44:02 UTC	354	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:44:02 UTC	568	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Sun, 06 Oct 2024 18:44:02 GMT Age: 1666200 X-Served-By: cache-lga21980-LGA, cache-nyc-kteb1890098-NYC X-Cache: HIT, HIT X-Cache-Hits: 68, 1 X-Timer: S1728240243.960294,VS0,VE1 Vary: Accept-Encoding
2024-10-06 18:44:03 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-10-06 18:44:03 UTC	16384	IN	Data Raw: 69 6e 67 2d 69 64 69 6f 6d 73 0a 09 72 63 73 73 65 73 63 61 70 65 20 3d 20 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c 78 37 66 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 2c 0a 09 66 63 73 73 65 73 63 61 70 65 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 63 68 2c 20 61 73 43 6f 64 65 50 6f 69 6e 74 20 29 20 7b 0a 09 09 69 66 20 28 20 61 73 43 6f 64 65 50 6f 69 6e 74 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 55 2b 30 30 30 30 20 4e 55 4c 4c 20 62 65 63 6f 6d 65 73 20 55 2b 46 46 46 44 20 52 45 50 4c 41 43 45 4d 45 4e 54 20 43 48 41 52 41 43 54 45 52 0a 09 09 09 69 66 20 28 20 63 68 20 3d 3d 3d 20 22 5c 30 22 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 22 5c 75 46 46 46 44 22 3b 0a 09 09 09 7d 0a 0a 09 Data Ascii: ing-idiomsrcssescape = /([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\x7f-\uFFFF\w-]/g,fcssescape = function( ch, asCodePoint ) {if ( asCodePoint ) {// U+0000 NULL becomes U+FFFD REPLACEMENT CHARACTERif ( ch === "\0" ) {return "\uFFFD";}
2024-10-06 18:44:03 UTC	16384	IN	Data Raw: 65 20 49 45 20 65 72 72 6f 72 0a 09 2f 2f 20 53 65 65 20 68 74 74 70 73 3a 2f 2f 62 75 67 73 2e 6a 71 75 65 72 79 2e 63 6f 6d 2f 74 69 63 6b 65 74 2f 31 33 33 37 38 0a 09 72 62 75 67 67 79 51 53 41 20 3d 20 5b 5d 3b 0a 0a 09 69 66 20 28 20 28 73 75 70 70 6f 72 74 2e 71 73 61 20 3d 20 72 6e 61 74 69 76 65 2e 74 65 73 74 28 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 20 29 29 20 29 20 7b 0a 09 09 2f 2f 20 42 75 69 6c 64 20 51 53 41 20 72 65 67 65 78 0a 09 09 2f 2f 20 52 65 67 65 78 20 73 74 72 61 74 65 67 79 20 61 64 6f 70 74 65 64 20 66 72 6f 6d 20 44 69 65 67 6f 20 50 65 72 69 6e 69 0a 09 09 61 73 73 65 72 74 28 66 75 6e 63 74 69 6f 6e 28 20 65 6c 20 29 20 7b 0a 09 09 09 2f 2f 20 53 65 6c 65 63 74 20 69 73 20 73 65 74 20 Data Ascii: e IE error// See https://bugs.jquery.com/ticket/13378rbuggyQSA = [];if ( (support.qsa = rnative.test( document.querySelectorAll )) ) {// Build QSA regex// Regex strategy adopted from Diego Periniassert(function( el ) {// Select is set
2024-10-06 18:44:03 UTC	16384	IN	Data Raw: 74 79 70 65 20 5d 20 7c 7c 20 5b 5d 3b 0a 09 09 09 09 09 09 09 6e 6f 64 65 49 6e 64 65 78 20 3d 20 63 61 63 68 65 5b 20 30 20 5d 20 3d 3d 3d 20 64 69 72 72 75 6e 73 20 26 26 20 63 61 63 68 65 5b 20 31 20 5d 3b 0a 09 09 09 09 09 09 09 64 69 66 66 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 63 61 63 68 65 5b 20 32 20 5d 3b 0a 09 09 09 09 09 09 09 6e 6f 64 65 20 3d 20 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 70 61 72 65 6e 74 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 20 6e 6f 64 65 49 6e 64 65 78 20 5d 3b 0a 0a 09 09 09 09 09 09 09 77 68 69 6c 65 20 28 20 28 6e 6f 64 65 20 3d 20 2b 2b 6e 6f 64 65 49 6e 64 65 78 20 26 26 20 6e 6f 64 65 20 26 26 20 6e 6f 64 65 5b 20 64 69 72 20 5d 20 7c 7c 0a 0a 09 09 09 09 09 09 09 09 2f 2f 20 46 61 6c 6c 62 61 63 6b 20 74 6f 20 Data Ascii: type ] \|\| [];nodeIndex = cache[ 0 ] === dirruns && cache[ 1 ];diff = nodeIndex && cache[ 2 ];node = nodeIndex && parent.childNodes[ nodeIndex ];while ( (node = ++nodeIndex && node && node[ dir ] \|\|// Fallback to
2024-10-06 18:44:03 UTC	16384	IN	Data Raw: 0a 09 09 2f 2f 20 41 64 64 20 65 6c 65 6d 65 6e 74 73 20 74 6f 20 72 65 73 75 6c 74 73 2c 20 74 68 72 6f 75 67 68 20 70 6f 73 74 46 69 6e 64 65 72 20 69 66 20 64 65 66 69 6e 65 64 0a 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 20 63 6f 6e 64 65 6e 73 65 28 0a 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 20 3d 3d 3d 20 72 65 73 75 6c 74 73 20 3f 0a 09 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 2e 73 70 6c 69 63 65 28 20 70 72 65 65 78 69 73 74 69 6e 67 2c 20 6d 61 74 63 68 65 72 4f 75 74 2e 6c 65 6e 67 74 68 20 29 20 3a 0a 09 09 09 09 09 6d 61 74 63 68 65 72 4f 75 74 0a 09 09 09 29 3b 0a 09 09 09 69 66 20 28 20 70 6f 73 74 46 69 6e 64 65 72 20 29 20 7b 0a 09 09 09 09 70 6f 73 74 46 69 6e 64 65 72 28 20 6e 75 6c 6c 2c 20 72 65 Data Ascii: // Add elements to results, through postFinder if defined} else {matcherOut = condense(matcherOut === results ?matcherOut.splice( preexisting, matcherOut.length ) :matcherOut);if ( postFinder ) {postFinder( null, re
2024-10-06 18:44:03 UTC	16384	IN	Data Raw: 6f 62 6a 65 63 74 0a 09 09 09 09 09 09 74 68 69 73 5b 20 30 20 5d 20 3d 20 65 6c 65 6d 3b 0a 09 09 09 09 09 09 74 68 69 73 2e 6c 65 6e 67 74 68 20 3d 20 31 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 24 28 2e 2e 2e 29 29 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 21 63 6f 6e 74 65 78 74 20 7c 7c 20 63 6f 6e 74 65 78 74 2e 6a 71 75 65 72 79 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 28 20 63 6f 6e 74 65 78 74 20 7c 7c 20 72 6f 6f 74 20 29 2e 66 69 6e 64 28 20 73 65 6c 65 63 74 6f 72 20 29 3b 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 63 6f 6e 74 65 78 74 29 0a 09 09 09 2f 2f 20 28 77 68 69 63 68 Data Ascii: objectthis[ 0 ] = elem;this.length = 1;}return this;}// HANDLE: $(expr, $(...))} else if ( !context \|\| context.jquery ) {return ( context \|\| root ).find( selector );// HANDLE: $(expr, context)// (which
2024-10-06 18:44:03 UTC	16384	IN	Data Raw: 65 70 74 69 6f 6e 48 6f 6f 6b 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 09 09 6a 51 75 65 72 79 2e 44 65 66 65 72 72 65 64 2e 65 78 63 65 70 74 69 6f 6e 48 6f 6f 6b 28 20 65 2c 0a 09 09 09 09 09 09 09 09 09 09 09 09 09 70 72 6f 63 65 73 73 2e 73 74 61 63 6b 54 72 61 63 65 20 29 3b 0a 09 09 09 09 09 09 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 50 72 6f 6d 69 73 65 73 2f 41 2b 20 73 65 63 74 69 6f 6e 20 32 2e 33 2e 33 2e 33 2e 34 2e 31 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 70 72 6f 6d 69 73 65 73 61 70 6c 75 73 2e 63 6f 6d 2f 23 70 6f 69 6e 74 2d 36 31 0a 09 09 09 09 09 09 09 09 09 09 09 2f 2f 20 49 67 6e 6f 72 65 20 70 6f 73 74 2d 72 65 73 6f 6c 75 74 69 6f 6e 20 65 78 63 Data Ascii: eptionHook ) {jQuery.Deferred.exceptionHook( e,process.stackTrace );}// Support: Promises/A+ section 2.3.3.3.4.1// https://promisesaplus.com/#point-61// Ignore post-resolution exc
2024-10-06 18:44:03 UTC	16384	IN	Data Raw: 68 69 73 2c 20 66 75 6e 63 74 69 6f 6e 28 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 09 76 61 72 20 64 61 74 61 3b 0a 0a 09 09 09 2f 2f 20 54 68 65 20 63 61 6c 6c 69 6e 67 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 28 65 6c 65 6d 65 6e 74 20 6d 61 74 63 68 65 73 29 20 69 73 20 6e 6f 74 20 65 6d 70 74 79 0a 09 09 09 2f 2f 20 28 61 6e 64 20 74 68 65 72 65 66 6f 72 65 20 68 61 73 20 61 6e 20 65 6c 65 6d 65 6e 74 20 61 70 70 65 61 72 73 20 61 74 20 74 68 69 73 5b 20 30 20 5d 29 20 61 6e 64 20 74 68 65 0a 09 09 09 2f 2f 20 60 76 61 6c 75 65 60 20 70 61 72 61 6d 65 74 65 72 20 77 61 73 20 6e 6f 74 20 75 6e 64 65 66 69 6e 65 64 2e 20 41 6e 20 65 6d 70 74 79 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 0a 09 09 09 2f 2f 20 77 69 6c 6c 20 72 65 73 75 6c 74 20 69 6e 20 Data Ascii: his, function( value ) {var data;// The calling jQuery object (element matches) is not empty// (and therefore has an element appears at this[ 0 ]) and the// `value` parameter was not undefined. An empty jQuery object// will result in
2024-10-06 18:44:03 UTC	16384	IN	Data Raw: 20 68 61 6e 64 6c 65 72 2e 68 61 6e 64 6c 65 72 20 29 20 7b 0a 09 09 09 68 61 6e 64 6c 65 4f 62 6a 49 6e 20 3d 20 68 61 6e 64 6c 65 72 3b 0a 09 09 09 68 61 6e 64 6c 65 72 20 3d 20 68 61 6e 64 6c 65 4f 62 6a 49 6e 2e 68 61 6e 64 6c 65 72 3b 0a 09 09 09 73 65 6c 65 63 74 6f 72 20 3d 20 68 61 6e 64 6c 65 4f 62 6a 49 6e 2e 73 65 6c 65 63 74 6f 72 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 45 6e 73 75 72 65 20 74 68 61 74 20 69 6e 76 61 6c 69 64 20 73 65 6c 65 63 74 6f 72 73 20 74 68 72 6f 77 20 65 78 63 65 70 74 69 6f 6e 73 20 61 74 20 61 74 74 61 63 68 20 74 69 6d 65 0a 09 09 2f 2f 20 45 76 61 6c 75 61 74 65 20 61 67 61 69 6e 73 74 20 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 20 69 6e 20 63 61 73 65 20 65 6c 65 6d 20 69 73 20 61 20 6e 6f 6e 2d 65 6c 65 6d 65 6e Data Ascii: handler.handler ) {handleObjIn = handler;handler = handleObjIn.handler;selector = handleObjIn.selector;}// Ensure that invalid selectors throw exceptions at attach time// Evaluate against documentElement in case elem is a non-elemen
2024-10-06 18:44:03 UTC	16384	IN	Data Raw: 09 09 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 0a 09 09 09 29 3b 0a 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 79 70 65 73 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 29 20 7b 0a 0a 09 09 09 2f 2f 20 28 20 74 79 70 65 73 2d 6f 62 6a 65 63 74 20 5b 2c 20 73 65 6c 65 63 74 6f 72 5d 20 29 0a 09 09 09 66 6f 72 20 28 20 74 79 70 65 20 69 6e 20 74 79 70 65 73 20 29 20 7b 0a 09 09 09 09 74 68 69 73 2e 6f 66 66 28 20 74 79 70 65 2c 20 73 65 6c 65 63 74 6f 72 2c 20 74 79 70 65 73 5b 20 74 79 70 65 20 5d 20 29 3b 0a 09 09 09 7d 0a 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 7d 0a 09 09 69 66 20 28 20 73 65 6c 65 63 74 6f 72 20 3d 3d 3d 20 66 61 6c 73 65 20 7c 7c 20 74 79 70 65 6f 66 20 Data Ascii: handleObj.handler);return this;}if ( typeof types === "object" ) {// ( types-object [, selector] )for ( type in types ) {this.off( type, selector, types[ type ] );}return this;}if ( selector === false \|\| typeof

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
17	192.168.2.4	49764	18.192.94.96	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:44:03 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:44:03 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Sun, 06 Oct 2024 18:44:03 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J9HJAMJSH95X1MQ2KGZX6E0D Content-Length: 50 Connection: close
2024-10-06 18:44:03 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 39 48 4a 41 4d 4a 53 48 39 35 58 31 4d 51 32 4b 47 5a 58 36 45 30 44 Data Ascii: Not Found - Request ID: 01J9HJAMJSH95X1MQ2KGZX6E0D

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
18	192.168.2.4	49765	185.199.108.153	443	4624	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:44:03 UTC	382	OUT	GET /gibberish-detector.js/gibberish.min.js HTTP/1.1 Host: gtomitsuka.github.io Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-06 18:44:03 UTC	701	IN	HTTP/1.1 200 OK Connection: close Content-Length: 928 Server: GitHub.com Content-Type: application/javascript; charset=utf-8 permissions-policy: interest-cohort=() Last-Modified: Sun, 28 Jul 2019 00:43:06 GMT Access-Control-Allow-Origin: * ETag: "5d3cef9a-3a0" expires: Sun, 06 Oct 2024 11:44:02 GMT Cache-Control: max-age=600 x-proxy-cache: MISS X-GitHub-Request-Id: 4130:215EAC:3547806:3B0158B:670275AA Accept-Ranges: bytes Date: Sun, 06 Oct 2024 18:44:03 GMT Via: 1.1 varnish Age: 537 X-Served-By: cache-ewr-kewr1740029-EWR X-Cache: HIT X-Cache-Hits: 1 X-Timer: S1728240243.241079,VS0,VE2 Vary: Accept-Encoding X-Fastly-Request-ID: 794fcef1af278dadc5a6b8c332e252f3f964bd31
2024-10-06 18:44:03 UTC	928	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 66 75 6e 63 74 69 6f 6e 20 65 28 63 2c 62 2c 61 29 7b 72 65 74 75 72 6e 20 63 3c 62 3f 28 61 3d 62 2d 63 2c 4d 61 74 68 2e 6c 6f 67 28 62 29 2f 4d 61 74 68 2e 6c 6f 67 28 61 29 2a 31 30 30 29 3a 63 3e 61 3f 28 62 3d 63 2d 61 2c 4d 61 74 68 2e 6c 6f 67 28 31 30 30 2d 61 29 2f 4d 61 74 68 2e 6c 6f 67 28 62 29 2a 31 30 30 29 3a 30 7d 66 75 6e 63 74 69 6f 6e 20 6b 28 63 29 7b 66 6f 72 28 76 61 72 20 62 3d 7b 7d 2c 61 3d 22 22 2c 64 3d 30 3b 64 3c 63 2e 6c 65 6e 67 74 68 3b 2b 2b 64 29 63 5b 64 5d 69 6e 20 62 7c 7c 28 62 5b 63 5b 64 5d 5d 3d 31 2c 61 2b 3d 63 5b 64 5d 29 3b 72 65 74 75 72 6e 20 61 7d 68 2e 64 65 74 65 63 74 3d 66 75 6e 63 74 69 6f 6e 28 63 29 7b 69 66 28 30 3d 3d 3d 63 2e 6c 65 6e 67 74 68 7c 7c 21 63 2e Data Ascii: (function(h){function e(c,b,a){return c<b?(a=b-c,Math.log(b)/Math.log(a)100):c>a?(b=c-a,Math.log(100-a)/Math.log(b)100):0}function k(c){for(var b={},a="",d=0;d<c.length;++d)c[d]in b\|\|(b[c[d]]=1,a+=c[d]);return a}h.detect=function(c){if(0===c.length\|\|!c.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
19	192.168.2.4	49769	4.175.87.197	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:44:06 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=WnDr9CFUnkA75D9&MD=YT5SuHPL HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-06 18:44:07 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 3af0e179-3bea-4b31-971e-8912dd632ea7 MS-RequestId: 057aa6fd-dd96-467c-afec-1db52cf2f630 MS-CV: 7ANyScSKcEKO6o7Y.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Sun, 06 Oct 2024 18:44:06 GMT Connection: close Content-Length: 24490
2024-10-06 18:44:07 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-06 18:44:07 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Session ID	Source IP	Source Port	Destination IP	Destination Port
20	192.168.2.4	49780	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:45:05 UTC	192	OUT	GET /rules/rule120100v3s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Session ID	Source IP	Source Port	Destination IP	Destination Port
21	192.168.2.4	49783	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:45:12 UTC	192	OUT	GET /rules/rule120609v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net

Session ID	Source IP	Source Port	Destination IP	Destination Port
22	192.168.2.4	49784	13.107.246.45	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:45:21 UTC	192	OUT	GET /rules/rule120610v0s19.xml HTTP/1.1 Connection: Keep-Alive Accept-Encoding: gzip User-Agent: Microsoft Office/16.0 (Windows NT 10.0; 16.0.16827; Pro) Host: otelrules.azureedge.net
2024-10-06 18:45:22 UTC	470	IN	HTTP/1.1 200 OK Date: Sun, 06 Oct 2024 18:45:22 GMT Content-Type: text/xml Content-Length: 474 Connection: close Cache-Control: public, max-age=604800, immutable Last-Modified: Tue, 09 Apr 2024 00:25:46 GMT ETag: "0x8DC582B9964B277" x-ms-request-id: 3ea0840d-701e-0053-1012-173a0a000000 x-ms-version: 2018-03-28 x-azure-ref: 20241006T184522Z-1657d5bbd48xsz2nuzq4vfrzg800000002ag0000000027vx x-fd-int-roxy-purgeid: 0 X-Cache: TCP_HIT Accept-Ranges: bytes
2024-10-06 18:45:22 UTC	474	IN	Data Raw: ef bb bf 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0d 0a 3c 52 20 49 64 3d 22 31 32 30 36 31 30 22 20 56 3d 22 30 22 20 44 43 3d 22 53 4d 22 20 54 3d 22 53 75 62 72 75 6c 65 22 20 78 6d 6c 6e 73 3d 22 22 3e 0d 0a 20 20 3c 53 3e 0d 0a 20 20 20 20 3c 52 20 54 3d 22 31 22 20 52 3d 22 31 32 30 36 30 39 22 20 2f 3e 0d 0a 20 20 20 20 3c 54 48 20 54 3d 22 32 22 3e 0d 0a 20 20 20 20 20 20 3c 4f 20 54 3d 22 45 51 22 3e 0d 0a 20 20 20 20 20 20 20 20 3c 4c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 3c 55 20 54 3d 22 45 71 75 61 6c 73 4e 75 6c 6c 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 53 20 54 3d 22 31 22 20 46 3d 22 30 22 20 4d 3d 22 49 67 6e 6f 72 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: <?xml version="1.0" encoding="utf-8"?><R Id="120610" V="0" DC="SM" T="Subrule" xmlns=""> <S> <R T="1" R="120609" /> <TH T="2"> <O T="EQ"> <L> <U T="EqualsNull"> <S T="1" F="0" M="Ignore" />

Session ID	Source IP	Source Port	Destination IP	Destination Port
23	192.168.2.4	49786	20.189.173.3	443

Timestamp	Bytes transferred	Direction	Data
2024-10-06 18:48:39 UTC	828	OUT	POST /OneCollector/1.0/ HTTP/1.1 Accept: / APIKey: cd836626611c4caaa8fc5b2e728ee81d-3b6d6c45-6377-4bf5-9792-dbf8e1881088-7521 AuthMsaDeviceTicket: t=GwAWAbuEBAAU2qcZHJoKGNizGOeyqM4OaIoSZ0MOZgAAEJanOM/f8BEauEo6GRqguxLgAJt0LBh1uWaBD08sPTthnLouxyOeqq8UXC40zxYtXUeuLL3jc98oc4sgTt8Qg5RgpVyPUGOqQCdIMU+jHj5jPNgpCOYLzgjk7/68jQbYqRpL5buJGDaKHJUU4Qzi5sjC1iwUwrkBZLfklCNSWdGai+iykzR0ELnFD4lJb88vZch+TXuihcRzjbZvJG6mFONQPa3ignNQpsSbQgkMM4xuASI/kaIM+YTU5dBQE1SH8k0CwZj5Yc3H1S94NyGSn+DeuALqccEE8gt3uchW9hnkYs9tmlAQt7GBc9BBk/kSpz+oHgE=&p= Client-Id: NO_AUTH Content-Encoding: deflate Content-Type: application/bond-compact-binary Expect: 100-continue SDK-Version: EVT-Windows-C++-No-3.4.15.1 Upload-Time: 1728240518089 Host: self.events.data.microsoft.com Content-Length: 7975 Connection: Keep-Alive Cache-Control: no-cache
2024-10-06 18:48:39 UTC	7975	OUT	Data Raw: ed 7c 4b ac 5c c7 99 de a1 a4 61 28 8a a2 68 49 96 25 59 63 71 08 d9 b1 46 dd 37 f5 7e 34 32 18 53 97 d7 16 1d d1 54 78 29 c9 36 30 60 4e 77 9f ee 3e 64 77 9f ab 7e f0 21 cc 42 f0 62 80 09 e2 41 38 40 80 20 2b 23 8b c0 02 32 83 59 cc 2c 32 ab 59 64 11 87 d9 04 59 05 93 45 12 20 9b 20 8b 41 1e b3 48 82 20 5f d5 a9 73 4e 75 f1 8a f6 18 86 30 06 78 41 f2 f2 af aa 53 cf ff ff fe ef af aa 73 de 7c 92 ef 91 cb e2 ea 64 52 8e 8a 1b 87 f7 d6 9b 62 11 7e bd 53 e4 f3 cd ec 4a b1 c9 c7 f9 26 bf 54 dc 46 89 fd 6a b9 ae e6 25 12 8a f1 47 ff ef 7f ff e5 8f ff fd 0f ff c7 7f f8 c2 a7 17 aa c1 68 6c b8 52 4c 29 4a 47 62 94 e7 b9 99 8c e4 90 15 9a 99 a2 30 74 fc 6f 4f fe e0 a9 07 5f 3c 7d a2 3c f3 c1 95 3b f9 aa e8 9d bf bc 1c ed fd ee e9 5a 62 a4 47 b3 07 2f 9d 3e 91 3d Data Ascii: \|K\a(hI%YcqF7~42STx)60`Nw>dw~!BbA8@ +#2Y,2YdYE AH _sNu0xASs\|dRb~SJ&TFj%GhlRL)JGb0toO_<}<;ZbG/>=
2024-10-06 18:48:39 UTC	25	IN	HTTP/1.1 100 Continue
2024-10-06 18:48:39 UTC	443	IN	HTTP/1.1 200 OK Content-Length: 9 Content-Type: application/json Server: Microsoft-HTTPAPI/2.0 Strict-Transport-Security: max-age=31536000 time-delta-millis: 1500 Access-Control-Allow-Headers: time-delta-millis Access-Control-Allow-Methods: POST Access-Control-Allow-Credentials: true Access-Control-Allow-Origin: * Access-Control-Expose-Headers: time-delta-millis Date: Sun, 06 Oct 2024 18:48:39 GMT Connection: close {"acc":4}

Target ID:	0
Start time:	14:43:50
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	2
Start time:	14:43:53
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2004 --field-trial-handle=1896,i,15200992290654718076,16320757277189141693,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Target ID:	3
Start time:	14:43:56
Start date:	06/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML
Source: Yara match	File source: 0.2.pages.csv, type: HTML

Source: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html	HTTP Parser: No <meta name="author".. found

Source: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 50

Chrome Cache Entry: 51

Chrome Cache Entry: 52

Chrome Cache Entry: 53

Chrome Cache Entry: 54

Chrome Cache Entry: 55

Chrome Cache Entry: 56

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

Windows Analysis Report
http://pub-581e9045502e43b8be4eb091f4c349ff.r2.dev/index.html