Edit tour

Windows Analysis Report
https://img10.reactor.cc/pics/post/full/Sakimichan-artist-Iono-(Pokemon)-Pok%c3%a9mon-7823638.jpeg

Overview

General Information

Sample URL:	https://img10.reactor.cc/pics/post/full/Sakimichan-artist-Iono-(Pokemon)-Pok%c3%a9mon-7823638.jpeg
Analysis ID:	1577853
Infos:

Detection

HTMLPhisher

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Yara detected HtmlPhish62

Connects to several IPs in different countries

Detected suspicious crossdomain redirect

HTML page contains hidden javascript code

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3012 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4524 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2028,i,11434985802020511846,12363457118249299580,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5268 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=1008 --field-trial-handle=2028,i,11434985802020511846,12363457118249299580,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6496 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5780 --field-trial-handle=2028,i,11434985802020511846,12363457118249299580,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5160 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://img10.reactor.cc/pics/post/full/Sakimichan-artist-Iono-(Pokemon)-Pok%c3%a9mon-7823638.jpeg" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author	Strings
3.111..script.csv	JoeSecurity_HtmlPhish_62	Yara detected HtmlPhish_62	Joe Security

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2024-12-18T20:26:24.165107+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.5	50294	5.200.43.131	443	TCP
2024-12-18T20:26:26.368344+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.5	50303	5.200.43.131	443	TCP

HTTP traffic detected: POST /graphql HTTP/1.1Host: api.joyreactor.ccConnection: keep-aliveContent-Length: 188sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonAccept: */*Origin: https://joyreactor.ccSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://joyreactor.cc/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: surfer_uuid=526ddfbc-83b8-4add-83f7-468d53f4a29a; la_page_depth=%7B%22last%22%3A%22https%3A%2F%2Fjoyreactor.cc%2Fpost%2F5464556%22%2C%22depth%22%3A1%7D; page_load_uuid=b9fb6fcc-0396-4161-8864-43698a3afff3

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginx/1.23.2Date: Wed, 18 Dec 2024 19:26:20 GMTContent-Type: text/plainContent-Length: 18Connection: closeAccess-Control-Allow-Origin: *

Source: https://joyreactor.cc/	HTTP Parser: No favicon
Source: https://joyreactor.cc/	HTTP Parser: No favicon
Source: https://joyreactor.cc/	HTTP Parser: No favicon

Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:50303 -> 5.200.43.131:443
Source: Network traffic	Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.5:50294 -> 5.200.43.131:443

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.110
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.110
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.110
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.110
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.110
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.110
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.110
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.110
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.110
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.110
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.110
Source: unknown	TCP traffic detected without corresponding DNS query: 195.201.152.110
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75
Source: unknown	TCP traffic detected without corresponding DNS query: 138.201.65.75

Source: chromecache_381.2.dr, chromecache_450.2.dr	String found in binary or memory: return "http://www.linkedin.com/shareArticle?mini=true&url=" + (encodeURIComponent(url)) + "&summary=" + encoded_title + "&source=Coub"; equals www.linkedin.com (Linkedin)
Source: chromecache_381.2.dr, chromecache_450.2.dr	String found in binary or memory: return "https://www.facebook.com/sharer/sharer.php?u=" + (encodeURIComponent(url)) + "&title=" + encoded_title; equals www.facebook.com (Facebook)
Source: chromecache_313.2.dr, chromecache_430.2.dr	String found in binary or memory: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[9684],{69684:function(e,t,a){a.d(t,{Z:function(){return V}});var n=a(85893),l=a(67294),i=a(22578),r=a(25935),s=a(44012),u=a(46437);function o(e){let{anchor:t,content:a}=e,[i,r]=(0,l.useState)(!1);return(0,n.jsxs)("div",{className:"bg-gray-commentlight px-3 py-2",style:{},children:[(0,n.jsx)(u.ZP,{type:"link",className:"px-1.5 w-full flex justify-start",style:{height:"1.57rem"},onClick:()=>r(e=>!e),children:(0,n.jsx)("span",{className:"underline truncate max-w-full inline",children:t})}),!1,(0,n.jsx)("div",{className:` ${i?"px-1.5 sm:px-2":" hidden"}`,children:a})]})}var c=a(47915),d=function(e){let{attribute:t}=e,a=JSON.parse(t.value);return(0,n.jsx)("iframe",{title:null!==t.image.comment?t.image.comment:"",role:"img",src:`https://bandcamp.com/EmbeddedPlayer/${a.url}`,width:a.width,height:a.height,allowFullScreen:!0})},m=function(e){let{attribute:t}=e;return(0,n.jsx)("iframe",{title:null!==t.image.comment?t.image.comment:"",role:"img",src:`https://coub.com/embed/${t.value}?muted=false&autostart=false&originalSize=false&startWithHD=true&noSiteButtons=true&noHDControl=true`,allowFullScreen:!0})},g=function(e){let{attribute:t}=e,a=JSON.parse(t.value),l=`https://w.soundcloud.com/player/?url=${encodeURIComponent(a.url)}&color=%23ff5500&auto_play=false&hide_related=false&show_comments=true&show_user=true&show_reposts=false&show_teaser=true&visual=true`;return(0,n.jsx)("iframe",{title:null!==t.image.comment?t.image.comment:"",role:"img",src:l,height:a.height,allowFullScreen:!0})},p=function(e){let{attribute:t}=e;return(0,n.jsx)("iframe",{title:null!==t.image.comment?t.image.comment:"",role:"img",src:`https://player.vimeo.com/video/${t.value}`,allowFullScreen:!0})},f=function(e){let{attribute:t}=e,a=`https://www.youtube.com/embed/${t.value}`;return -1===a.indexOf("?")?a+="?":a+="&",a+="wmode=transparent&rel=0",(0,n.jsx)("iframe",{title:null!==t.image.comment?t.image.comment:"",role:"img",className:"youtube-player",src:a,allowFullScreen:!0})};let h=a(51221);function b(e){let{attribute:t}=e,a=(0,i.useFragment)(h,t);return(0,n.jsx)("div",{className:"attribute-embed",children:function(e){switch(e.type){case"BANDCAMP":return(0,n.jsx)(d,{attribute:e});case"COUB":return(0,n.jsx)(m,{attribute:e});case"SOUNDCLOUD":return(0,n.jsx)(g,{attribute:e});case"VIMEO":return(0,n.jsx)(p,{attribute:e});case"YOUTUBE":return(0,n.jsx)(f,{attribute:e});default:return(0,n.jsx)(s.Z,{id:"Post.UnknownAttribute",values:{attributeType:e.type},defaultMessage:" equals www.youtube.com (Youtube)
Source: chromecache_591.2.dr	String found in binary or memory: (g.Dq(V,"redirector.googlevideo.com"),N=V.toString()):V.T.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.Dq(V,"www.youtube.com"),N=V.toString()):(V=XQ9(N),XY(V)&&(N=V));V=new g.v1(N);V.set("cmo=pf","1");H&&V.set("cmo=td","a1.googlevideo.com");return V}; equals www.youtube.com (Youtube)
Source: chromecache_318.2.dr	String found in binary or memory: .</span></div><div class="single"><div class="attribute-embed"><iframe title="It's Midnight in Antarctica!" role="img" class="youtube-player" src="https://www.youtube.com/embed/d_LNSbStu9c?wmode=transparent&rel=0" allowfullscreen=""></iframe></div></div><div><span>" equals www.youtube.com (Youtube)
Source: chromecache_591.2.dr	String found in binary or memory: 0?"http":"https";this.Vn=H8((C?C.customBaseYoutubeUrl:p.BASE_YT_URL)\|\|"")\|\|H8(this.iW)\|\|this.protocol+"://www.youtube.com/";d=C?C.eventLabel:p.el;N="detailpage";d==="adunit"?N=this.S?"embedded":"detailpage":d==="embedded"\|\|this.D?(N=hm(N,d,gru),d!=="shortsaudiopivot"\|\|this.G("web_player_shorts_audio_pivot_event_label")\|\|(N="detailpage")):d&&(N="embedded");this.Wr=N;oQH();d=null;N=C?C.playerStyle:p.ps;X=g.W5(W$L,N);!N\|\|X&&!this.D\|\|(d=N);this.playerStyle=d;this.Y=g.W5(W$L,this.playerStyle);this.houseBrandUserStatus= equals www.youtube.com (Youtube)
Source: chromecache_591.2.dr	String found in binary or memory: C=this.api.K();p=this.api.getVideoData();var V="";C.V\|\|(C=g.zM(C),C.indexOf("www.")===0&&(C=C.substring(4)),V=g.t_(p)?"Watch on YouTube Music":C==="youtube.com"?"Watch on YouTube":g.Ks("Watch on $WEBSITE",{WEBSITE:C}));this.updateValue("title",V)}; equals www.youtube.com (Youtube)
Source: chromecache_591.2.dr	String found in binary or memory: GTy=function(p,C){if(!p.T["0"]){var V=new WB("0","fakesb",{video:new wO(0,0,0,void 0,void 0,"auto")});p.T["0"]=C?new zn(new g.v1("http://www.youtube.com/videoplayback"),V,"fake"):new VM(new g.v1("http://www.youtube.com/videoplayback"),V,new D0(0,0),new D0(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_567.2.dr, chromecache_328.2.dr, chromecache_321.2.dr, chromecache_291.2.dr	String found in binary or memory: Math.round(q);t["gtm.videoElapsedTime"]=Math.round(f);t["gtm.videoPercent"]=r;t["gtm.videoVisible"]=u;return t},Ik:function(){e=nb()},Gd:function(){d()}}};var Vb=wa(["data-gtm-yt-inspected-"]),XD=["www.youtube.com","www.youtube-nocookie.com"],YD,ZD=!1; equals www.youtube.com (Youtube)
Source: chromecache_591.2.dr	String found in binary or memory: YI.prototype.Wd=function(){return this.w7.l()};var Vry=(new Date).getTime();var dkY="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),ihu=/\bocr\b/;var soV=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var ZhY=0,uLH=0,Uk1=0;var e0=null,Po=!1,vcy=1,LX=Symbol("SIGNAL"),gE={version:0,lIa:0,d2:!1,F4:void 0,Qw:void 0,mF:void 0,KG:0,uf:void 0,Kg:void 0,bH:!1,pE:!1,kind:"unknown",zbV:function(){return!1}, equals www.youtube.com (Youtube)
Source: chromecache_567.2.dr, chromecache_328.2.dr, chromecache_321.2.dr, chromecache_291.2.dr	String found in binary or memory: c?"runIfCanceled":"runIfUncanceled",[]);if(!g.length)return!0;var k=DB(a,c,e);T(121);if(k["gtm.elementUrl"]==="https://www.facebook.com/tr/")return T(122),!0;if(d&&f){for(var m=yb(b,g.length),n=0;n<g.length;++n)g[n](k,m);return m.done}for(var p=0;p<g.length;++p)g[p](k,function(){});return!0},GB=function(){var a=[],b=function(c){return bb(a,function(d){return d.form===c})};return{store:function(c,d){var e=b(c);e?e.button=d:a.push({form:c,button:d})},get:function(c){var d=b(c);return d?d.button:null}}}, equals www.facebook.com (Facebook)
Source: chromecache_591.2.dr	String found in binary or memory: g.GM=function(p){var C=g.zM(p);Ha9.includes(C)&&(C="www.youtube.com");return p.protocol+"://"+C}; equals www.youtube.com (Youtube)
Source: chromecache_591.2.dr	String found in binary or memory: g.h.getVideoUrl=function(p,C,V,N,H,X,d){C={list:C};V&&(H?C.time_continue=V:C.t=V);V=d?"music.youtube.com":g.zM(this);H=V==="www.youtube.com";!X&&N&&H?X="https://youtu.be/"+p:g.yj(this)?(X="https://"+V+"/fire",C.v=p):(X&&H?(X=this.protocol+"://"+V+"/shorts/"+p,N&&(C.feature="share")):(X=this.protocol+"://"+V+"/watch",C.v=p),BW&&(p=LGj())&&(C.ebc=p));return g.GD(X,C)}; equals www.youtube.com (Youtube)
Source: chromecache_591.2.dr	String found in binary or memory: g.zM=function(p){p=AR(p.Vn);return p==="www.youtube-nocookie.com"?"www.youtube.com":p}; equals www.youtube.com (Youtube)
Source: chromecache_567.2.dr, chromecache_328.2.dr, chromecache_321.2.dr, chromecache_291.2.dr	String found in binary or memory: if(!(e\|\|f\|\|g\|\|k.length\|\|m.length))return;var p={Hh:e,Fh:f,Gh:g,mi:k,ni:m,Xe:n,Jb:b},q=A.YT;if(q)return q.ready&&q.ready(d),b;var r=A.onYouTubeIframeAPIReady;A.onYouTubeIframeAPIReady=function(){r&&r();d()};G(function(){for(var u=E.getElementsByTagName("script"),v=u.length,t=0;t<v;t++){var w=u[t].getAttribute("src");if(hE(w,"iframe_api")\|\|hE(w,"player_api"))return b}for(var x=E.getElementsByTagName("iframe"),y=x.length,B=0;B<y;B++)if(!ZD&&fE(x[B],p.Xe))return lc("https://www.youtube.com/iframe_api"), equals www.youtube.com (Youtube)
Source: chromecache_591.2.dr	String found in binary or memory: p))):this.api.K().G("enable_adb_handling_in_sabr")&&V==="BROWSER_OR_EXTENSION_ERROR"&&!N.Y?(N=N.hostLanguage,p="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",N&&(p=g.GD(p,{hl:N})),this.Jc(j4(this,"BROWSER_OR_EXTENSION_ERROR",p))):this.Jc(g.pZ(p.errorMessage)):this.Jc(j4(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(p=N.hostLanguage,V="//support.google.com/youtube/?p=player_error1",p&&(V=g.GD(V, equals www.youtube.com (Youtube)
Source: chromecache_591.2.dr	String found in binary or memory: p.details.rc!=="429"?p.errorCode==="ump.spsrejectfailure"&&(H="HTML5_SPS_UMP_STATUS_REJECTED"):(H="TOO_MANY_REQUESTS",X="6");this.Ta.a_(p.errorCode,p.severity,H,yu(p.details),X)}else this.Ta.publish("nonfatalerror",p),N=/^pp/.test(this.videoData.clientPlaybackNonce),this.oN(p.errorCode,p.details),N&&p.errorCode==="manifest.net.connect"&&(p="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.Ip)(),kv(p,"manifest",function(d){C.Y=!0;C.k_("pathprobe",d)},function(d){C.oN(d.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_510.2.dr, chromecache_429.2.dr	String found in binary or memory: return b}VD.F="internal.enableAutoEventOnTimer";var Vb=wa(["data-gtm-yt-inspected-"]),XD=["www.youtube.com","www.youtube-nocookie.com"],YD,ZD=!1; equals www.youtube.com (Youtube)
Source: chromecache_591.2.dr	String found in binary or memory: this.KS=!this.va;this.enabledEngageTypes=new Set;this.deviceIsAudioOnly=!(C==null\|\|!C.deviceIsAudioOnly);this.I6=sB(this.I6,p.ismb);this.MR?(M=p.vss_host\|\|"s.youtube.com",M==="s.youtube.com"&&(M=AR(this.Vn)\|\|"www.youtube.com")):M="video.google.com";this.jS=M;og(this,p,!0);this.vr=new CI;g.R(this,this.vr);T=C?C.innertubeApiKey:a_("",p.innertube_api_key);c=C?C.innertubeApiVersion:a_("",p.innertube_api_version);M=C?C.innertubeContextClientVersion:a_("",p.innertube_context_client_version);T=g.pO("INNERTUBE_API_KEY")\|\| equals www.youtube.com (Youtube)
Source: chromecache_591.2.dr	String found in binary or memory: this.yn.sY&&(p.authuser=this.yn.sY);this.yn.pageId&&(p.pageid=this.yn.pageId);isNaN(this.cryptoPeriodIndex)\|\|(p.cpi=this.cryptoPeriodIndex.toString());var H=(H=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.f0()))?H[1]:"";H==="ATV"&&(p.cdt=H);this.W=p;this.W.session_id=N;this.a$=!0;this.C.flavor==="widevine"&&(this.W.hdr="1");this.C.flavor==="playready"&&(C=Number(Wb(C.experiments,"playready_first_play_expiration")),!isNaN(C)&&C>=0&&(this.W.mfpe=""+C),this.a$=!1);C="";g.o5(this.C)?Az(this.C)?(N=V.C)&&(C="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_567.2.dr, chromecache_328.2.dr, chromecache_321.2.dr, chromecache_291.2.dr	String found in binary or memory: var jD=function(a,b,c,d,e){var f=aB("fsl",c?"nv.mwt":"mwt",0),g;g=c?aB("fsl","nv.ids",[]):aB("fsl","ids",[]);if(!g.length)return!0;var k=fB(a,"gtm.formSubmit",g),m=a.action;m&&m.tagName&&(m=a.cloneNode(!1).action);T(121);if(m==="https://www.facebook.com/tr/")return T(122),!0;k["gtm.elementUrl"]=m;k["gtm.formCanceled"]=c;a.getAttribute("name")!=null&&(k["gtm.interactedFormName"]=a.getAttribute("name"));e&&(k["gtm.formSubmitElement"]=e,k["gtm.formSubmitElementText"]=e.value);if(d&&f){if(!Mz(k,Oz(b, equals www.facebook.com (Facebook)
Source: chromecache_591.2.dr	String found in binary or memory: var uk={};var fmP={YE:[{Rn:/Unable to load player module/,weight:20},{Rn:/Failed to fetch/,weight:500},{Rn:/XHR API fetch failed/,weight:10},{Rn:/JSON parsing failed after XHR fetch/,weight:10},{Rn:/Retrying OnePlatform request/,weight:10},{Rn:/CSN Missing or undefined during playback association/,weight:100},{Rn:/Non-recoverable error. Do not retry./,weight:0},{Rn:/Internal Error. Retry with an exponential backoff./,weight:0},{Rn:/API disabled by application./,weight:0}],y8:[{callback:cu9,weight:500}]};var fPX=/[&\?]action_proxy=1/,UJs=/[&\?]token=([\w-])/,OLY=/[&\?]video_id=([\w-])/,yuQ=/[&\?]index=([\d-])/,qqv=/[&\?]m_pos_ms=([\d-])/,bLy=/[&\?]vvt=([\w-]*)/,mJV="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),IPH="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),SqX={android:"ANDROID", equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: img10.reactor.cc
Source: global traffic	DNS traffic detected: DNS query: joyreactor.cc
Source: global traffic	DNS traffic detected: DNS query: img10.joyreactor.cc
Source: global traffic	DNS traffic detected: DNS query: img2.joyreactor.cc
Source: global traffic	DNS traffic detected: DNS query: cmcxmh.com
Source: global traffic	DNS traffic detected: DNS query: ads.digitalcaramel.com
Source: global traffic	DNS traffic detected: DNS query: api.joyreactor.cc
Source: global traffic	DNS traffic detected: DNS query: yandex.ru
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: coub.com
Source: global traffic	DNS traffic detected: DNS query: sync.dmp.otm-r.com
Source: global traffic	DNS traffic detected: DNS query: assets-cdn-s.coub.com
Source: global traffic	DNS traffic detected: DNS query: attachments-cdn-s.coub.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: matchid.adfox.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: ads.betweendigital.com
Source: global traffic	DNS traffic detected: DNS query: yhb.p.otm-r.com
Source: global traffic	DNS traffic detected: DNS query: ssp.al-adtech.com
Source: global traffic	DNS traffic detected: DNS query: pb.adriver.ru
Source: global traffic	DNS traffic detected: DNS query: adfox-hb-bidder.rutarget.ru
Source: global traffic	DNS traffic detected: DNS query: a.utraff.com
Source: global traffic	DNS traffic detected: DNS query: adx.videonow.ru
Source: global traffic	DNS traffic detected: DNS query: otclick-adv.ru
Source: global traffic	DNS traffic detected: DNS query: yastatic.net
Source: global traffic	DNS traffic detected: DNS query: avatars.mds.yandex.net
Source: global traffic	DNS traffic detected: DNS query: ads.adfox.ru
Source: global traffic	DNS traffic detected: DNS query: reactor.cc
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: x.bidswitch.net
Source: global traffic	DNS traffic detected: DNS query: redirect.frontend.weborama.fr
Source: global traffic	DNS traffic detected: DNS query: x01.aidata.io
Source: global traffic	DNS traffic detected: DNS query: sync.dsp.solta.io
Source: global traffic	DNS traffic detected: DNS query: s.suprion.ru
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: gw-iad-bid.ymmobi.com
Source: global traffic	DNS traffic detected: DNS query: videotarget-sync.rutarget.ru
Source: global traffic	DNS traffic detected: DNS query: dsp.nrich.ai
Source: global traffic	DNS traffic detected: DNS query: rtb.moe.video
Source: global traffic	DNS traffic detected: DNS query: ads.adlook.me
Source: global traffic	DNS traffic detected: DNS query: mc.acint.net
Source: global traffic	DNS traffic detected: DNS query: js.onef.pro
Source: global traffic	DNS traffic detected: DNS query: ssp-rtb.sape.ru
Source: global traffic	DNS traffic detected: DNS query: acint.net

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2028,i,11434985802020511846,12363457118249299580,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://img10.reactor.cc/pics/post/full/Sakimichan-artist-Iono-(Pokemon)-Pok%c3%a9mon-7823638.jpeg"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=1008 --field-trial-handle=2028,i,11434985802020511846,12363457118249299580,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5780 --field-trial-handle=2028,i,11434985802020511846,12363457118249299580,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2060 --field-trial-handle=2028,i,11434985802020511846,12363457118249299580,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=1008 --field-trial-handle=2028,i,11434985802020511846,12363457118249299580,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5780 --field-trial-handle=2028,i,11434985802020511846,12363457118249299580,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://bayanometr.cc/	0%	Avira URL Cloud	safe
https://coub.page.link/?link=http://coub.com/view/	0%	Avira URL Cloud	safe
https://api.jrproxy.com/graphql	0%	Avira URL Cloud	safe
https://api.jr-proxy.com/graphql	0%	Avira URL Cloud	safe
http://surfingbird.ru/share?url=	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
mc.yandex.ru	87.250.250.119	true	false	high
ads.digitalcaramel.com	135.181.113.151	true	false	high
coub.com	95.213.253.85	true	false	high
i.ytimg.com	172.217.17.54	true	false	high
s.suprion.ru	213.248.44.211	true	false	high
adx.videonow.ru	158.160.17.80	true	false	high
otclick-adv.ru	139.45.228.135	true	false	high
user-data-eu.bidswitch.net	35.214.136.108	true	false	high
pb.adriver.ru	195.209.109.24	true	false	high
sync.dsp.solta.io	217.199.220.73	true	false	high
x01.aidata.io	89.108.120.68	true	false	high
ssp-rtb.sape.ru	193.3.184.24	true	false	high
api.joyreactor.cc	193.70.94.47	true	false	high
balance.segmento.ru	188.72.107.205	true	false	high
cmcxmh.com	62.76.25.28	true	false	high
photos-ugc.l.googleusercontent.com	172.217.19.161	true	false	high
www.google.com	142.250.181.132	true	false	high
img2.joyreactor.cc.cname.w.tools	88.198.157.228	true	false	unknown
lb-prod.adlook.me	5.200.43.131	true	false	high
bid-sin-ali.yeahtargeter.com	8.214.60.171	true	false	high
js.onef.pro	82.202.242.100	true	false	high
yastatic.net	178.154.131.217	true	false	high
p-vip.al-adtech.com	45.139.25.122	true	false	high
img10.joyreactor.cc.cname.w.tools	79.137.13.80	true	false	unknown
matchid-production.adfox.yandex.ru	93.158.134.118	true	false	high
ssp.ads.betweendigital.com	188.42.189.197	true	false	high
rtb.moe.video	46.148.230.54	true	false	high
yandex.ru	5.255.255.77	true	false	high
acint.net	142.132.138.212	true	false	high
img10.reactor.cc.cname.w.tools	54.38.58.119	true	false	unknown
static.doubleclick.net	172.217.19.6	true	false	high
redirect.frontend.weborama.fr	35.190.24.218	true	false	high
joyreactor.cc	193.70.94.47	true	false	high
a.utraff.com	104.26.6.189	true	false	high
ads.adfox.ru	77.88.21.179	true	false	high
youtube-ui.l.google.com	172.217.19.206	true	false	high
avatars.mds.yandex.net	87.250.247.183	true	false	high
googleads.g.doubleclick.net	172.217.17.34	true	false	high
play.google.com	142.250.181.110	true	false	high
dsp.nrich.ai	51.68.39.188	true	false	high

Name	Malicious	Reputation
https://img2.joyreactor.cc/pics/avatar/tag/1357459	false	high
https://yastatic.net/partner-code-bundles/1178457/3606d9822563bd5a5712.js	false	high
https://ssp.al-adtech.com/api/sync/otm	false	high
https://joyreactor.cc/_next/static/chunks/main-50d5a99ba25b4ea2.js	false	high
https://joyreactor.cc/_next/static/chunks/9181-a1c1f2abc39b0f0b.js	false	high
https://adfox-hb-bidder.rutarget.ru/bid	false	high
https://ads.betweendigital.com/sspmatch?p=41985&r=1734549948210	false	high
https://joyreactor.cc/_next/static/chunks/1154-c5a4654904d00968.js	false	high
https://joyreactor.cc/_next/static/chunks/9508-a831c1019663cf9f.js	false	high
https://sync.dmp.otm-r.com/match/aotm.js	false	high
https://joyreactor.cc/_next/static/chunks/618-9430272108768216.js	false	high
https://img2.joyreactor.cc/pics/avatar/tag/1451639	false	high
https://img2.joyreactor.cc/pics/post/Mita-(MiSide)-miside-%D0%98%D0%B3%D1%80%D1%8B-8716760.jpeg	false	high
https://assets-cdn-s.coub.com/assets/no_theme/embed-a9e6804230cdf2eb5af0c7377e51804de907ae675a067241bdaf67508939611f.css	false	high
https://joyreactor.cc/_next/static/chunks/8265-73b7a7f6bd827964.js	false	high
https://img2.joyreactor.cc/pics/post/Alien-Queen-Xenomorph-AVP-8717021.png	false	high
https://joyreactor.cc/_next/static/chunks/3080-4f6664feffce686e.js	false	high
https://joyreactor.cc/_next/static/chunks/pages/_app-2d4a8e93e567c8d0.js	false	high
https://joyreactor.cc/_next/static/chunks/3978.ab1b190f36943599.js	false	high
https://matchid.adfox.yandex.ru/getcookie	false	high
https://img2.joyreactor.cc/pics/post/Alien-Queen-Xenomorph-AVP-8717020.jpeg	false	high
https://www.youtube.com/s/player/03dbdfab/player_ias.vflset/en_US/embed.js	false	high
https://img2.joyreactor.cc/pics/post/R--Merryweather-artist-Clinic-of-Horrors-8717063.jpeg	false	high
https://img2.joyreactor.cc/pics/avatar/tag/big/27	false	high
https://img2.joyreactor.cc/pics/avatar/tag/big/1481	false	high
https://img2.joyreactor.cc/pics/post/%D0%BF%D0%B5%D1%81%D0%BE%D1%87%D0%BD%D0%B8%D1%86%D0%B0-%D1%81%D0%BF%D0%B8%D0%B7%D0%B6%D0%B5%D0%BD%D0%BE-%D1%81-9gag-%D0%BA%D0%BE%D1%82%D0%B5-8716961.jpeg	false	high
https://joyreactor.cc/_next/static/chunks/2282.42fcc2c3ef3194d7.js	false	high
https://joyreactor.cc/_next/static/chunks/pages/_ssg/%5Bcountry%5D/%5Bnsfw%5D/%5Bdomain%5D/search-074bfc52c85cf036.js	false	high
https://a.utraff.com/yandex	false	high
https://img10.joyreactor.cc/pics/avatar/tag/2447643	false	high
https://mc.yandex.com/watch/48571952?page-url=goal%3A%2F%2Fcoub.com%2Fplayer_embed_page_load&page-ref=https%3A%2F%2Fcoub.com%2Fembed%2F3hbkxg%3Fmuted%3Dfalse%26autostart%3Dfalse%26originalSize%3Dfalse%26startWithHD%3Dtrue%26noSiteButtons%3Dtrue%26noHDControl%3Dtrue&charset=utf-8&uah=chu%0A%22Google%20Chrome%22%3Bv%3D%22117%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228%22%2C%22Chromium%22%3Bv%3D%22117%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A117.0.5938.132%0Achl%0A%22Google%20Chrome%22%3Bv%3D%22117.0.5938.132%22%2C%22Not%3BA%3DBrand%22%3Bv%3D%228.0.0.0%22%2C%22Chromium%22%3Bv%3D%22117.0.5938.132%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&hittoken=1734549963_45e5caed4e26672835033ea48158263db3f936ecf058080f42cdd07a6d240e90&browser-info=ar%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A3%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1541%3Acn%3A1%3Adp%3A1%3Als%3A694139677802%3Ahid%3A212749393%3Az%3A-300%3Ai%3A20241218142603%3Aet%3A1734549963%3Ac%3A1%3Arn%3A927735071%3Arqn%3A2%3Au%3A1734549959209381931%3Aw%3A811x456%3As%3A1280x1024x24%3Ask%3A1%3Aifr%3A1%3Awv%3A2%3Ads%3A%2C%2C%2C%2C%2C%2C%2C%2C%2C9737%2C9737%2C1%2C%3Aco%3A0%3Acpf%3A1%3Antf%3A1%3Ans%3A1734549951397%3Aadb%3A2%3Arqnl%3A1%3Ast%3A1734549963%3At%3AMagic!%20-%20Coub&t=gdpr(14)mc(g-2)clc(0-0-0)rqnt(2)aw(1)rcm(1)cdl(na)eco(65540)ti(0)&force-urlencoded=1	false	high
https://yhb.p.otm-r.com/yhb	false	high
https://img2.joyreactor.cc/pics/avatar/tag/big/1243	false	high
https://joyreactor.cc/_next/static/chunks/2730.4b93a9cde3a1afb8.js	false	high
https://joyreactor.cc/_next/static/chunks/pages/_csr/%5Bnsfw%5D/%5Bdomain%5D/search-d3577999609178d6.js	false	high
https://img2.joyreactor.cc/pics/avatar/tag/820	false	high
https://yastatic.net/partner-code-bundles/1178457/05d675d5120043d3935a.js	false	high
https://ads.digitalcaramel.com/configs/joyreactor.cc.json?ts=1734549930254	false	high
https://yastatic.net/partner-code-bundles/1178457/2153fa8d5527f8221343.js	false	high
https://img2.joyreactor.cc/pics/avatar/tag/big/117740	false	high

IP	Domain	Country	ASN	ASN Name	Malicious
172.217.19.228	unknown	United States	15169	GOOGLEUS	false
188.72.107.205	balance.segmento.ru	Netherlands	196689	DIGICUBE01FR	false
87.250.250.119	mc.yandex.ru	Russian Federation	13238	YANDEXRU	false
45.139.25.122	p-vip.al-adtech.com	Russian Federation	47203	KTKRU-ASRU	false
142.250.181.132	www.google.com	United States	15169	GOOGLEUS	false
142.132.138.212	acint.net	Canada	22686	UNIVERSITYOFWINNIPEG-ASNCA	false
93.158.134.119	unknown	Russian Federation	13238	YANDEXRU	false
93.158.134.118	matchid-production.adfox.yandex.ru	Russian Federation	13238	YANDEXRU	false
88.198.157.228	img2.joyreactor.cc.cname.w.tools	Germany	24940	HETZNER-ASDE	false
46.148.230.54	rtb.moe.video	Russian Federation	49505	SELECTELRU	false
87.250.251.119	unknown	Russian Federation	13238	YANDEXRU	false
213.248.44.211	s.suprion.ru	Russian Federation	12695	DINET-ASRU	false
135.181.113.151	ads.digitalcaramel.com	Germany	24940	HETZNER-ASDE	false
79.137.13.80	img10.joyreactor.cc.cname.w.tools	France	16276	OVHFR	false
54.38.58.119	img10.reactor.cc.cname.w.tools	France	16276	OVHFR	false
172.217.17.34	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
168.119.55.94	unknown	Germany	24940	HETZNER-ASDE	false
172.217.19.14	unknown	United States	15169	GOOGLEUS	false
8.214.60.171	bid-sin-ali.yeahtargeter.com	Singapore	45102	CNNIC-ALIBABA-US-NET-APAlibabaUSTechnologyCoLtdC	false
138.201.65.75	unknown	Germany	24940	HETZNER-ASDE	false
87.250.247.183	avatars.mds.yandex.net	Russian Federation	13238	YANDEXRU	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
5.200.43.131	lb-prod.adlook.me	Russian Federation	48096	ITGRADRU	false
77.88.21.119	unknown	Russian Federation	13238	YANDEXRU	false
77.88.55.88	unknown	Russian Federation	13238	YANDEXRU	false
45.9.24.193	unknown	Russian Federation	210053	R5IT-ASRU	false
158.160.17.80	adx.videonow.ru	Venezuela	721	DNIC-ASBLK-00721-00726US	false
195.209.109.24	pb.adriver.ru	Russian Federation	52007	ADRIVER-ASRU	false
35.214.136.108	user-data-eu.bidswitch.net	United States	19527	GOOGLE-2US	false
193.70.94.47	api.joyreactor.cc	France	16276	OVHFR	false
5.255.255.77	yandex.ru	Russian Federation	13238	YANDEXRU	false
89.108.120.68	x01.aidata.io	Russian Federation	43146	AGAVA3RU	false
194.55.244.180	ad-ru.p.otm-r.com	unknown	34959	KVIKTEL_LLCRU	false
95.213.253.85	coub.com	Russian Federation	49505	SELECTELRU	false
51.68.39.188	dsp.nrich.ai	France	16276	OVHFR	false
178.154.131.217	yastatic.net	Russian Federation	13238	YANDEXRU	false
172.217.19.246	unknown	United States	15169	GOOGLEUS	false
142.250.181.110	play.google.com	United States	15169	GOOGLEUS	false
195.201.152.110	unknown	Germany	24940	HETZNER-ASDE	false
139.45.228.133	unknown	Netherlands	9002	RETN-ASEU	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1577853
Start date and time:	2024-12-18 20:24:15 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 4m 0s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://img10.reactor.cc/pics/post/full/Sakimichan-artist-Iono-(Pokemon)-Pok%c3%a9mon-7823638.jpeg
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.phis.win@24/539@162/54
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Name	Source	Malicious	Antivirus Detection	Reputation
https://img2.joyreactor.cc/pics/post/R--Merryweather-artist-Clinic-of-Horrors-8717079.jpeg	chromecache_318.2.dr	false		high
http://underscorejs.org	chromecache_381.2.dr, chromecache_450.2.dr	false		high
https://bayanometr.cc/	chromecache_311.2.dr, chromecache_406.2.dr	false	Avira URL Cloud: safe	unknown
https://coub-gtw.coub.com/personalize/protected/api/v1/events	chromecache_381.2.dr, chromecache_450.2.dr	false		high
https://coub.page.link/?link=http://coub.com/view/	chromecache_450.2.dr	false	Avira URL Cloud: safe	unknown
http://benalman.com/code/projects/jquery-postmessage/examples/iframe/	chromecache_381.2.dr, chromecache_450.2.dr	false		high
https://img2.joyreactor.cc/pics/post/R--Merryweather-artist-Clinic-of-Horrors-8717080.jpeg	chromecache_318.2.dr	false		high
http://www.opensource.org/licenses/mit-license.php	chromecache_381.2.dr, chromecache_450.2.dr	false		high
http://www.odnoklassniki.ru/dk?st.cmd=addShare&st._surl=	chromecache_381.2.dr, chromecache_450.2.dr	false		high
https://vipergirls.to/threads/12994923	chromecache_318.2.dr	false		high
https://developer.mozilla.org/en/dom/storage#localStorage	chromecache_381.2.dr, chromecache_450.2.dr	false		high
https://ads.digitalcaramel.com/caramel.js?ts=	chromecache_524.2.dr, chromecache_452.2.dr, chromecache_318.2.dr	false		high
https://www.youtube.com/generate_204?cpn=	chromecache_591.2.dr	false		high
https://w.soundcloud.com/player/?url=$	chromecache_313.2.dr, chromecache_430.2.dr	false		high
https://joyreactor.com	chromecache_358.2.dr	false		high
https://poweredby.jads.co/js/jads.js	chromecache_332.2.dr, chromecache_316.2.dr	false		high
https://assets-cdn-s.coub.com/assets/promo/pelmeshki/dj2-5d4b6f10118446ea53dccd53bece02448673b470278	chromecache_381.2.dr, chromecache_450.2.dr	false		high
https://img10.joyreactor.cc/pics/post/full/Sakimichan-artist-Iono-(Pokemon)-7823634.jpeg	chromecache_452.2.dr	false		high
https://attachments-cdn-s.coub.com/coub_storage/coub/simple/cw_looped_audio_med/92aaf6c9e5f/c1f8e309	chromecache_516.2.dr	false		high
https://api.jrproxy.com/graphql	chromecache_358.2.dr	false	Avira URL Cloud: safe	unknown
https://twitter.com/intent/tweet?text=	chromecache_381.2.dr, chromecache_450.2.dr	false		high
https://img2.joyreactor.cc/pics/post/Mita-(MiSide)-miside-	chromecache_318.2.dr	false		high
http://benalman.com/projects/jquery-postmessage-plugin/	chromecache_450.2.dr	false		high
https://assets-cdn-s.coub.com/assets/embed-df0b366df0c1603d1e3d2f40611ea967ca01de0778ea3aa937f81ebfa	chromecache_516.2.dr	false		high
https://api.jr-proxy.com/graphql	chromecache_358.2.dr	false	Avira URL Cloud: safe	unknown
https://img10.joyreactor.cc/pics/post/Tangled-	chromecache_318.2.dr	false		high
https://angular.dev/license	chromecache_591.2.dr, chromecache_549.2.dr	false		high
https://img2.joyreactor.cc/pics/post/full/Alien-Queen-Xenomorph-AVP-8717022.jpeg	chromecache_318.2.dr	false		high
https://youtu.be/	chromecache_591.2.dr	false		high
https://img2.joyreactor.cc/pics/comment/coub-	chromecache_318.2.dr	false		high
https://github.com/ridjohansen/css_browser_selector	chromecache_381.2.dr, chromecache_450.2.dr	false		high
https://img2.joyreactor.cc/pics/post/R--Merryweather-artist-Clinic-of-Horrors-8717072.jpeg	chromecache_318.2.dr	false		high
https://img10.joyreactor.cc/pics/post/full/zephy-Anime-Artist-artist-8716282.jpeg	chromecache_318.2.dr	false		high
https://img2.joyreactor.cc/pics/post/full/Alien-Queen-Xenomorph-AVP-8717023.jpeg	chromecache_318.2.dr	false		high
https://img10.joyreactor.cc/pics/post/full/Tangled-	chromecache_318.2.dr	false		high
http://surfingbird.ru/share?url=	chromecache_381.2.dr, chromecache_450.2.dr	false	Avira URL Cloud: safe	unknown
https://img2.joyreactor.cc/pics/post/R--Merryweather-artist-Clinic-of-Horrors-8717067.jpeg	chromecache_318.2.dr	false		high
https://yastatic.net/s3/gdpr/v3/gdpr	chromecache_522.2.dr, chromecache_619.2.dr	false		high
http://vk.com/share.php?url=	chromecache_381.2.dr, chromecache_450.2.dr	false		high
http://youtube.com/drm/2012/10/10	chromecache_591.2.dr	false		high
https://img2.joyreactor.cc/pics/post/R--Merryweather-artist-Clinic-of-Horrors-8717071.jpeg	chromecache_318.2.dr	false		high
https://adservice.google.com/pagead/regclk?	chromecache_291.2.dr	false		high
http://github.com/cowboy/jquery-postmessage/raw/master/jquery.ba-postmessage.js	chromecache_381.2.dr, chromecache_450.2.dr	false		high

Input	Output
URL: https://img10.reactor.cc Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": true, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": true }
URL: https://img10.reactor.cc
URL: https://www.gstatic.com/cv/js/sender/v1/cast_sende... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet appears to be a legitimate script that loads the Google Cast SDK for Chrome. It checks the user agent, Chrome version, and other contextual factors to determine the appropriate script URLs to load. While it uses some dynamic code execution techniques like `eval()` and the `Function` constructor, these are likely for legitimate purposes related to the Cast SDK integration. The script does not exhibit any clear signs of malicious intent or data exfiltration, and the use of trusted domains like `www.gstatic.com` suggests this is a benign script. Overall, the risk score is low, with some minor concerns around the use of dynamic code execution." }
(function(){/* Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0 */ 'use strict';var l=function(){var a=h,b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},m=this\|\|self,n=/^[\w+/_-]+[=]{0,2}$/,p=null,q=function(a){return(a=a.querySelector&&a.querySelector("script[nonce]"))&&(a=a.nonce\|\|a.getAttribute("nonce"))&&n.test(a)?a:""},r=function(a,b){function e(){}e.prototype=b.prototype;a.i=b.prototype;a.prototype=new e;a.prototype.constructor=a;a.h=function(c,g,k){for(var f=Array(arguments.length-2),d=2;d<arguments.length;d++)f[d-2]=arguments[d]; return b.prototype[g].apply(c,f)}},t=function(a){return a};function u(a){if(Error.captureStackTrace)Error.captureStackTrace(this,u);else{var b=Error().stack;b&&(this.stack=b)}a&&(this.message=String(a))}r(u,Error);u.prototype.name="CustomError";var v=function(a,b){a=a.split("%s");for(var e="",c=a.length-1,g=0;g<c;g++)e+=a[g]+(g<b.length?b[g]:"%s");u.call(this,e+a[c])};r(v,u);v.prototype.name="AssertionError";var w=function(a,b){throw new v("Failure"+(a?": "+a:""),Array.prototype.slice.call(arguments,1));};var x;var A=function(a,b){this.g=b===z?a:""};A.prototype.toString=function(){return this.g+""};var z={};var B=function(){var a=window.navigator.userAgent.match(/Chrome\/([0-9]+)/);return a?parseInt(a[1],10):0},C=function(a){return!!document.currentScript&&(-1!=document.currentScript.src.indexOf("?"+a)\|\|-1!=document.currentScript.src.indexOf("&"+a))},D=function(){return"function"==typeof window.__onGCastApiAvailable?window.__onGCastApiAvailable:null},F=function(a){a.length?E(a.shift(),function(){F(a)}):G()},H=function(a){return"chrome-extension://"+a+"/cast_sender.js"},E=function(a,b,e){var c=document.createElement("script"); c.onerror=b;e&&(c.onload=e);if(void 0===x)if(b=null,(e=m.trustedTypes)&&e.createPolicy){try{b=e.createPolicy("goog#html",{createHTML:t,createScript:t,createScriptURL:t})}catch(y){m.console&&m.console.error(y.message)}x=b}else x=b;a=(b=x)?b.createScriptURL(a):a;a=new A(a,z);a:{try{var g=c&&c.ownerDocument,k=g&&(g.defaultView\|\|g.parentWindow);k=k\|\|m;if(k.Element&&k.Location){var f=k;break a}}catch(y){}f=null}if(f&&"undefined"!=typeof f.HTMLScriptElement&&(!c\|\|!(c instanceof f.HTMLScriptElement)&&(c instanceof f.Location\|\|c instanceof f.Element))){f=typeof c;if("object"==f&&null!=c\|\|"function"==f)try{var d=c.constructor.displayName\|\|c.constructor.name\|\|Object.prototype.toString.call(c)}catch(y){d="<object could not be stringified>"}else d=void 0===c?"undefined":null===c?"null":typeof c;w("Argument is not a %s (or a non-Element, non-Location mock); got: %s","HTMLScriptElement",d)}a instanceof A&&a.constructor===A?d=a.g:(d=typeof a,w("expected object of type TrustedResourceUrl, got '"+a+"' of type "+("object"!= d?d:a?Array.isArray(a)?"array":d:"null")),d="type_error:TrustedResourceUrl");c.src=d;(d=c.ownerDocument&&c.ownerDocument.defaultView)&&d!=m?d=q(d.document):(null===p&&(p=q(m.document)),d=p);d&&c.setAttribute("nonce",d);(document.head\|\|document.documentElement).appendChild(c)},I=function(){var a=B(),b=[];if(1<a){var e=a-1;b.push("//www.gstatic.com/eureka/clank/"+a+"/cast_sender.js");b.push("//www.gstatic.com/eureka/clank/"+e+"/cast_sender.js")}return b},G=function(){var a=D();a&&a(!1,"No cast extension found")}, K=function(){if(J){var a=2,b=D(),e=function(){a--;0==a&&b&&b(!0)};window.__onGCastApiAvailable=e;E("//www.gstatic.com/cast/sdk/libs/sender/1.0/cast_framework.js",G,e)}},J=C("loadCastFramework")\|\|C("loadCastApplicationFramework"),L=["pkedcjkdefgpdelpbcmbmeomcjbeemfm","enhhojjnijigcajfphajepfemndkmdlo"];if(0<=window.navigator.userAgent.indexOf("Android")&&0<=window.navigator.userAgent.indexOf("Chrome/")&&window.navigator.presentation){if(60<=B()){K();var M=I();M.push("//www.gstatic.com/eureka/clank/cast_sender.js");F(M)}}else if(!window.chrome\|\|!window.navigator.presentation\|\|0<=window.navigator.userAgent.indexOf("Edge"))G();else if(89<=B()){K();var N=I(),O=N.push,P=O.apply,h=L.map(H),Q;if(h instanceof Array)Q=h;e
URL: https://joyreactor.cc/post/5464556 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://joyreactor.cc/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": " ?", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://joyreactor.cc/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": " ?", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://joyreactor.cc/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": " ?", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://joyreactor.cc/search Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": " -? .", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://joyreactor.cc/ Model: Joe Sandbox AI	{ "brands": [ "JoyReactor" ] }
	{ "brands": [ "JoyReactor" ] }
URL: https://joyreactor.cc/post/5464556 Model: Joe Sandbox AI	{ "brands": [ "JoyReactor" ] }
	{ "brands": [ "JoyReactor" ] }
URL: https://joyreactor.cc/ Model: Joe Sandbox AI	{ "brands": [ "JoyReactor" ] }
	{ "brands": [ "JoyReactor" ] }
URL: https://joyreactor.cc/ Model: Joe Sandbox AI	{ "brands": [ "JoyReactor" ] }
	{ "brands": [ "JoyReactor" ] }
URL: https://joyreactor.cc/search Model: Joe Sandbox AI	{ "brands": [ "JoyReactor" ] }
	{ "brands": [ "JoyReactor" ] }

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Wed Dec 18 18:25:11 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.979223255471773
Encrypted:	false
SSDEEP:	48:8Sjd/T3DLHkidAKZdA19ehwiZUklqehLy+3:8SN/eky
MD5:	A18DDFA961B960D4F899BFDE22FE40BC
SHA1:	85B571E6D42B85FB453C20B16530E7CE4CD00972
SHA-256:	397FC95F1998FF789B4E4AA199EBDA2851CFCC95CFAC5DC31E3612CAB8C036B8
SHA-512:	99E51DEAC0476FE60CE2BF4508A2A81575BCE1CD17FC85C45A669CEA4B8065921957D306BC56FD540917E7410D6D1BF11F8823C2AC22AA9313B83D7DF33493F2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....t.4..Q..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y$.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y$.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y$.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y$............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y&............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i...........T.b......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Dec 18, 2024 20:25:13.543219090 CET	192.168.2.5	1.1.1.1	0x1e3e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:13.543349028 CET	192.168.2.5	1.1.1.1	0x5633	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:15.024507046 CET	192.168.2.5	1.1.1.1	0xdb45	Standard query (0)	img10.reactor.cc	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:15.025006056 CET	192.168.2.5	1.1.1.1	0x12d7	Standard query (0)	img10.reactor.cc	65	IN (0x0001)	false
Dec 18, 2024 20:25:16.044471025 CET	192.168.2.5	1.1.1.1	0x31e7	Standard query (0)	img10.reactor.cc	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:16.044739008 CET	192.168.2.5	1.1.1.1	0xceb9	Standard query (0)	img10.reactor.cc	65	IN (0x0001)	false
Dec 18, 2024 20:25:18.493851900 CET	192.168.2.5	1.1.1.1	0xdb47	Standard query (0)	joyreactor.cc	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:18.493985891 CET	192.168.2.5	1.1.1.1	0xb215	Standard query (0)	joyreactor.cc	65	IN (0x0001)	false
Dec 18, 2024 20:25:21.236341953 CET	192.168.2.5	1.1.1.1	0x90ea	Standard query (0)	img10.joyreactor.cc	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:21.236505032 CET	192.168.2.5	1.1.1.1	0xb500	Standard query (0)	img10.joyreactor.cc	65	IN (0x0001)	false
Dec 18, 2024 20:25:21.236895084 CET	192.168.2.5	1.1.1.1	0x3f15	Standard query (0)	img2.joyreactor.cc	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:21.237034082 CET	192.168.2.5	1.1.1.1	0x65db	Standard query (0)	img2.joyreactor.cc	65	IN (0x0001)	false
Dec 18, 2024 20:25:22.247083902 CET	192.168.2.5	1.1.1.1	0xc04d	Standard query (0)	img10.joyreactor.cc	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:22.247205019 CET	192.168.2.5	1.1.1.1	0xb7c9	Standard query (0)	img10.joyreactor.cc	65	IN (0x0001)	false
Dec 18, 2024 20:25:22.247430086 CET	192.168.2.5	1.1.1.1	0xcfbc	Standard query (0)	img2.joyreactor.cc	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:22.247595072 CET	192.168.2.5	1.1.1.1	0x5373	Standard query (0)	img2.joyreactor.cc	65	IN (0x0001)	false
Dec 18, 2024 20:25:24.426433086 CET	192.168.2.5	1.1.1.1	0x8768	Standard query (0)	joyreactor.cc	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:24.443949938 CET	192.168.2.5	1.1.1.1	0xeded	Standard query (0)	joyreactor.cc	65	IN (0x0001)	false
Dec 18, 2024 20:25:24.445415020 CET	192.168.2.5	1.1.1.1	0x81f1	Standard query (0)	img2.joyreactor.cc	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:24.445573092 CET	192.168.2.5	1.1.1.1	0x22d9	Standard query (0)	img2.joyreactor.cc	65	IN (0x0001)	false
Dec 18, 2024 20:25:25.236051083 CET	192.168.2.5	1.1.1.1	0x44a6	Standard query (0)	img10.joyreactor.cc	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:25.236200094 CET	192.168.2.5	1.1.1.1	0xe3fc	Standard query (0)	img10.joyreactor.cc	65	IN (0x0001)	false
Dec 18, 2024 20:25:26.932260990 CET	192.168.2.5	1.1.1.1	0x591	Standard query (0)	cmcxmh.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:26.932715893 CET	192.168.2.5	1.1.1.1	0x1502	Standard query (0)	cmcxmh.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:27.713953972 CET	192.168.2.5	1.1.1.1	0x7c09	Standard query (0)	ads.digitalcaramel.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:27.714108944 CET	192.168.2.5	1.1.1.1	0xe61a	Standard query (0)	ads.digitalcaramel.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:28.934806108 CET	192.168.2.5	1.1.1.1	0xe4a8	Standard query (0)	api.joyreactor.cc	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:28.936194897 CET	192.168.2.5	1.1.1.1	0xe5e4	Standard query (0)	api.joyreactor.cc	65	IN (0x0001)	false
Dec 18, 2024 20:25:29.945672035 CET	192.168.2.5	1.1.1.1	0xa6ce	Standard query (0)	cmcxmh.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:29.945888996 CET	192.168.2.5	1.1.1.1	0x5ac0	Standard query (0)	cmcxmh.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:30.638092995 CET	192.168.2.5	1.1.1.1	0xa09b	Standard query (0)	ads.digitalcaramel.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:30.638710022 CET	192.168.2.5	1.1.1.1	0xd8eb	Standard query (0)	ads.digitalcaramel.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:33.374897957 CET	192.168.2.5	1.1.1.1	0x6393	Standard query (0)	api.joyreactor.cc	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:33.375240088 CET	192.168.2.5	1.1.1.1	0x1c1c	Standard query (0)	api.joyreactor.cc	65	IN (0x0001)	false
Dec 18, 2024 20:25:42.268354893 CET	192.168.2.5	1.1.1.1	0x7ede	Standard query (0)	yandex.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:42.268481970 CET	192.168.2.5	1.1.1.1	0x1b7b	Standard query (0)	yandex.ru	65	IN (0x0001)	false
Dec 18, 2024 20:25:43.177840948 CET	192.168.2.5	1.1.1.1	0x2f1d	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:43.178035975 CET	192.168.2.5	1.1.1.1	0xbcaf	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:43.382268906 CET	192.168.2.5	1.1.1.1	0x2bf8	Standard query (0)	coub.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:43.382417917 CET	192.168.2.5	1.1.1.1	0xc1fc	Standard query (0)	coub.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:44.187603951 CET	192.168.2.5	1.1.1.1	0xb118	Standard query (0)	sync.dmp.otm-r.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:44.187829971 CET	192.168.2.5	1.1.1.1	0xae55	Standard query (0)	sync.dmp.otm-r.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:45.126060963 CET	192.168.2.5	1.1.1.1	0x5554	Standard query (0)	yandex.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:45.126213074 CET	192.168.2.5	1.1.1.1	0x538d	Standard query (0)	yandex.ru	65	IN (0x0001)	false
Dec 18, 2024 20:25:45.978028059 CET	192.168.2.5	1.1.1.1	0x68d4	Standard query (0)	assets-cdn-s.coub.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:45.978188038 CET	192.168.2.5	1.1.1.1	0x1f11	Standard query (0)	assets-cdn-s.coub.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:45.978770018 CET	192.168.2.5	1.1.1.1	0x5d08	Standard query (0)	attachments-cdn-s.coub.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:45.978935003 CET	192.168.2.5	1.1.1.1	0xff27	Standard query (0)	attachments-cdn-s.coub.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:46.449161053 CET	192.168.2.5	1.1.1.1	0x12ce	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:46.449558973 CET	192.168.2.5	1.1.1.1	0xe7f7	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:48.794456005 CET	192.168.2.5	1.1.1.1	0xbbc1	Standard query (0)	attachments-cdn-s.coub.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:48.794778109 CET	192.168.2.5	1.1.1.1	0x72e6	Standard query (0)	attachments-cdn-s.coub.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:49.244594097 CET	192.168.2.5	1.1.1.1	0x164c	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:49.244797945 CET	192.168.2.5	1.1.1.1	0x2cb5	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Dec 18, 2024 20:25:49.326296091 CET	192.168.2.5	1.1.1.1	0xeb2e	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:49.326436996 CET	192.168.2.5	1.1.1.1	0x3c3c	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:52.249521971 CET	192.168.2.5	1.1.1.1	0x5502	Standard query (0)	assets-cdn-s.coub.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:52.249679089 CET	192.168.2.5	1.1.1.1	0xc87a	Standard query (0)	assets-cdn-s.coub.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:54.611208916 CET	192.168.2.5	1.1.1.1	0x8bf9	Standard query (0)	matchid.adfox.yandex.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:54.611598015 CET	192.168.2.5	1.1.1.1	0xc402	Standard query (0)	matchid.adfox.yandex.ru	65	IN (0x0001)	false
Dec 18, 2024 20:25:54.619762897 CET	192.168.2.5	1.1.1.1	0x81c	Standard query (0)	ads.betweendigital.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:54.620167017 CET	192.168.2.5	1.1.1.1	0x2744	Standard query (0)	ads.betweendigital.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:54.627607107 CET	192.168.2.5	1.1.1.1	0x72e5	Standard query (0)	yhb.p.otm-r.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:54.627804041 CET	192.168.2.5	1.1.1.1	0x8172	Standard query (0)	yhb.p.otm-r.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:54.628279924 CET	192.168.2.5	1.1.1.1	0xff38	Standard query (0)	ssp.al-adtech.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:54.628432035 CET	192.168.2.5	1.1.1.1	0x5b64	Standard query (0)	ssp.al-adtech.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:54.628812075 CET	192.168.2.5	1.1.1.1	0x3d81	Standard query (0)	pb.adriver.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:54.628956079 CET	192.168.2.5	1.1.1.1	0xcb8c	Standard query (0)	pb.adriver.ru	65	IN (0x0001)	false
Dec 18, 2024 20:25:54.629314899 CET	192.168.2.5	1.1.1.1	0x640c	Standard query (0)	adfox-hb-bidder.rutarget.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:54.629446030 CET	192.168.2.5	1.1.1.1	0xfff9	Standard query (0)	adfox-hb-bidder.rutarget.ru	65	IN (0x0001)	false
Dec 18, 2024 20:25:54.631939888 CET	192.168.2.5	1.1.1.1	0x4f83	Standard query (0)	a.utraff.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:54.632116079 CET	192.168.2.5	1.1.1.1	0x253d	Standard query (0)	a.utraff.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:54.633455992 CET	192.168.2.5	1.1.1.1	0x6b7f	Standard query (0)	adx.videonow.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:54.634351015 CET	192.168.2.5	1.1.1.1	0xe4f6	Standard query (0)	adx.videonow.ru	65	IN (0x0001)	false
Dec 18, 2024 20:25:54.634957075 CET	192.168.2.5	1.1.1.1	0xae22	Standard query (0)	otclick-adv.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:54.635099888 CET	192.168.2.5	1.1.1.1	0x841	Standard query (0)	otclick-adv.ru	65	IN (0x0001)	false
Dec 18, 2024 20:25:54.644685984 CET	192.168.2.5	1.1.1.1	0x4314	Standard query (0)	yastatic.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:54.644916058 CET	192.168.2.5	1.1.1.1	0x33ba	Standard query (0)	yastatic.net	65	IN (0x0001)	false
Dec 18, 2024 20:25:54.657569885 CET	192.168.2.5	1.1.1.1	0x113e	Standard query (0)	avatars.mds.yandex.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:54.658020020 CET	192.168.2.5	1.1.1.1	0x840d	Standard query (0)	avatars.mds.yandex.net	65	IN (0x0001)	false
Dec 18, 2024 20:25:54.658735991 CET	192.168.2.5	1.1.1.1	0x21e2	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:54.658905029 CET	192.168.2.5	1.1.1.1	0xf4ee	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Dec 18, 2024 20:25:54.785177946 CET	192.168.2.5	1.1.1.1	0x822d	Standard query (0)	ads.adfox.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:54.785301924 CET	192.168.2.5	1.1.1.1	0xc917	Standard query (0)	ads.adfox.ru	65	IN (0x0001)	false
Dec 18, 2024 20:25:57.099287987 CET	192.168.2.5	1.1.1.1	0xea17	Standard query (0)	sync.dmp.otm-r.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:57.099426031 CET	192.168.2.5	1.1.1.1	0xdb1e	Standard query (0)	sync.dmp.otm-r.com	65	IN (0x0001)	false
Dec 18, 2024 20:25:57.371865034 CET	192.168.2.5	1.1.1.1	0x1076	Standard query (0)	matchid.adfox.yandex.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:57.372102976 CET	192.168.2.5	1.1.1.1	0x119b	Standard query (0)	matchid.adfox.yandex.ru	65	IN (0x0001)	false
Dec 18, 2024 20:25:57.808619976 CET	192.168.2.5	1.1.1.1	0x324b	Standard query (0)	reactor.cc	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:57.808790922 CET	192.168.2.5	1.1.1.1	0x4dcb	Standard query (0)	reactor.cc	65	IN (0x0001)	false
Dec 18, 2024 20:25:59.126744032 CET	192.168.2.5	1.1.1.1	0x350c	Standard query (0)	mc.yandex.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:59.126893997 CET	192.168.2.5	1.1.1.1	0x2a8f	Standard query (0)	mc.yandex.ru	65	IN (0x0001)	false
Dec 18, 2024 20:25:59.155670881 CET	192.168.2.5	1.1.1.1	0xee2c	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:25:59.155826092 CET	192.168.2.5	1.1.1.1	0xc74a	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Dec 18, 2024 20:26:01.604024887 CET	192.168.2.5	1.1.1.1	0xd0a3	Standard query (0)	reactor.cc	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:01.604482889 CET	192.168.2.5	1.1.1.1	0x37dd	Standard query (0)	reactor.cc	65	IN (0x0001)	false
Dec 18, 2024 20:26:01.664777040 CET	192.168.2.5	1.1.1.1	0xf23a	Standard query (0)	mc.yandex.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:01.664937973 CET	192.168.2.5	1.1.1.1	0xd0ce	Standard query (0)	mc.yandex.com	65	IN (0x0001)	false
Dec 18, 2024 20:26:01.784287930 CET	192.168.2.5	1.1.1.1	0x62ba	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:01.784972906 CET	192.168.2.5	1.1.1.1	0x3d6c	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Dec 18, 2024 20:26:01.792988062 CET	192.168.2.5	1.1.1.1	0x1e36	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:01.793220043 CET	192.168.2.5	1.1.1.1	0xb33b	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Dec 18, 2024 20:26:01.989090919 CET	192.168.2.5	1.1.1.1	0xb30f	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:01.989698887 CET	192.168.2.5	1.1.1.1	0xb85b	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Dec 18, 2024 20:26:02.819498062 CET	192.168.2.5	1.1.1.1	0xd77f	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:02.819634914 CET	192.168.2.5	1.1.1.1	0x3b5a	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Dec 18, 2024 20:26:03.361574888 CET	192.168.2.5	1.1.1.1	0xcaca	Standard query (0)	yastatic.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:03.361741066 CET	192.168.2.5	1.1.1.1	0x4b58	Standard query (0)	yastatic.net	65	IN (0x0001)	false
Dec 18, 2024 20:26:04.354500055 CET	192.168.2.5	1.1.1.1	0xaef	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:04.354652882 CET	192.168.2.5	1.1.1.1	0xab7f	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Dec 18, 2024 20:26:04.540713072 CET	192.168.2.5	1.1.1.1	0xeaff	Standard query (0)	yt3.ggpht.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:04.540868998 CET	192.168.2.5	1.1.1.1	0x4a2e	Standard query (0)	yt3.ggpht.com	65	IN (0x0001)	false
Dec 18, 2024 20:26:05.239608049 CET	192.168.2.5	1.1.1.1	0x2196	Standard query (0)	x.bidswitch.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:05.239748001 CET	192.168.2.5	1.1.1.1	0xbb49	Standard query (0)	x.bidswitch.net	65	IN (0x0001)	false
Dec 18, 2024 20:26:05.285836935 CET	192.168.2.5	1.1.1.1	0x5f4b	Standard query (0)	redirect.frontend.weborama.fr	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:05.286021948 CET	192.168.2.5	1.1.1.1	0xfae8	Standard query (0)	redirect.frontend.weborama.fr	65	IN (0x0001)	false
Dec 18, 2024 20:26:06.454660892 CET	192.168.2.5	1.1.1.1	0x4d2e	Standard query (0)	x01.aidata.io	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:06.454864979 CET	192.168.2.5	1.1.1.1	0xece4	Standard query (0)	x01.aidata.io	65	IN (0x0001)	false
Dec 18, 2024 20:26:07.219558001 CET	192.168.2.5	1.1.1.1	0x266c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:07.219701052 CET	192.168.2.5	1.1.1.1	0x936c	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 18, 2024 20:26:07.322130919 CET	192.168.2.5	1.1.1.1	0x13f7	Standard query (0)	sync.dsp.solta.io	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:07.322267056 CET	192.168.2.5	1.1.1.1	0x7927	Standard query (0)	sync.dsp.solta.io	65	IN (0x0001)	false
Dec 18, 2024 20:26:07.583825111 CET	192.168.2.5	1.1.1.1	0x40c	Standard query (0)	s.suprion.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:07.583971977 CET	192.168.2.5	1.1.1.1	0x8577	Standard query (0)	s.suprion.ru	65	IN (0x0001)	false
Dec 18, 2024 20:26:07.998821974 CET	192.168.2.5	1.1.1.1	0xb3d6	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:07.999064922 CET	192.168.2.5	1.1.1.1	0x4e0f	Standard query (0)	play.google.com	65	IN (0x0001)	false
Dec 18, 2024 20:26:09.419141054 CET	192.168.2.5	1.1.1.1	0x40ab	Standard query (0)	gw-iad-bid.ymmobi.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:09.419275999 CET	192.168.2.5	1.1.1.1	0x319a	Standard query (0)	gw-iad-bid.ymmobi.com	65	IN (0x0001)	false
Dec 18, 2024 20:26:09.913111925 CET	192.168.2.5	1.1.1.1	0xf875	Standard query (0)	videotarget-sync.rutarget.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:09.913259983 CET	192.168.2.5	1.1.1.1	0xe77a	Standard query (0)	videotarget-sync.rutarget.ru	65	IN (0x0001)	false
Dec 18, 2024 20:26:09.914971113 CET	192.168.2.5	1.1.1.1	0xade0	Standard query (0)	s.suprion.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:09.915277958 CET	192.168.2.5	1.1.1.1	0xebce	Standard query (0)	s.suprion.ru	65	IN (0x0001)	false
Dec 18, 2024 20:26:10.349131107 CET	192.168.2.5	1.1.1.1	0xdb7	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:10.349287033 CET	192.168.2.5	1.1.1.1	0xcd9f	Standard query (0)	www.google.com	65	IN (0x0001)	false
Dec 18, 2024 20:26:11.324889898 CET	192.168.2.5	1.1.1.1	0xd786	Standard query (0)	dsp.nrich.ai	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:11.325028896 CET	192.168.2.5	1.1.1.1	0x187b	Standard query (0)	dsp.nrich.ai	65	IN (0x0001)	false
Dec 18, 2024 20:26:11.424221039 CET	192.168.2.5	1.1.1.1	0x379f	Standard query (0)	rtb.moe.video	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:11.424345016 CET	192.168.2.5	1.1.1.1	0x7703	Standard query (0)	rtb.moe.video	65	IN (0x0001)	false
Dec 18, 2024 20:26:17.513369083 CET	192.168.2.5	1.1.1.1	0xc177	Standard query (0)	yhb.p.otm-r.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:17.513571978 CET	192.168.2.5	1.1.1.1	0x4f76	Standard query (0)	yhb.p.otm-r.com	65	IN (0x0001)	false
Dec 18, 2024 20:26:17.551345110 CET	192.168.2.5	1.1.1.1	0x5782	Standard query (0)	adfox-hb-bidder.rutarget.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:17.551476955 CET	192.168.2.5	1.1.1.1	0x374f	Standard query (0)	adfox-hb-bidder.rutarget.ru	65	IN (0x0001)	false
Dec 18, 2024 20:26:17.557495117 CET	192.168.2.5	1.1.1.1	0xe0cc	Standard query (0)	ssp.al-adtech.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:17.557635069 CET	192.168.2.5	1.1.1.1	0x3f2e	Standard query (0)	ssp.al-adtech.com	65	IN (0x0001)	false
Dec 18, 2024 20:26:17.565033913 CET	192.168.2.5	1.1.1.1	0x17d1	Standard query (0)	otclick-adv.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:17.565267086 CET	192.168.2.5	1.1.1.1	0x2b07	Standard query (0)	otclick-adv.ru	65	IN (0x0001)	false
Dec 18, 2024 20:26:17.940502882 CET	192.168.2.5	1.1.1.1	0x59c9	Standard query (0)	adx.videonow.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:17.940712929 CET	192.168.2.5	1.1.1.1	0xd8e1	Standard query (0)	adx.videonow.ru	65	IN (0x0001)	false
Dec 18, 2024 20:26:21.489212036 CET	192.168.2.5	1.1.1.1	0x160b	Standard query (0)	ads.adlook.me	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:21.489634037 CET	192.168.2.5	1.1.1.1	0xa712	Standard query (0)	ads.adlook.me	65	IN (0x0001)	false
Dec 18, 2024 20:26:22.717051029 CET	192.168.2.5	1.1.1.1	0x890a	Standard query (0)	mc.acint.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:22.717190981 CET	192.168.2.5	1.1.1.1	0x5177	Standard query (0)	mc.acint.net	65	IN (0x0001)	false
Dec 18, 2024 20:26:24.946361065 CET	192.168.2.5	1.1.1.1	0xbb9b	Standard query (0)	js.onef.pro	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:24.946746111 CET	192.168.2.5	1.1.1.1	0xae05	Standard query (0)	js.onef.pro	65	IN (0x0001)	false
Dec 18, 2024 20:26:26.195458889 CET	192.168.2.5	1.1.1.1	0x467	Standard query (0)	ads.betweendigital.com	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:26.195595026 CET	192.168.2.5	1.1.1.1	0x8f7f	Standard query (0)	ads.betweendigital.com	65	IN (0x0001)	false
Dec 18, 2024 20:26:27.661566019 CET	192.168.2.5	1.1.1.1	0xe2df	Standard query (0)	ssp-rtb.sape.ru	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:27.661674023 CET	192.168.2.5	1.1.1.1	0x2d0a	Standard query (0)	ssp-rtb.sape.ru	65	IN (0x0001)	false
Dec 18, 2024 20:26:30.182480097 CET	192.168.2.5	1.1.1.1	0xbc41	Standard query (0)	acint.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:30.182636976 CET	192.168.2.5	1.1.1.1	0xa8fb	Standard query (0)	acint.net	65	IN (0x0001)	false
Dec 18, 2024 20:26:32.381145954 CET	192.168.2.5	1.1.1.1	0xe92b	Standard query (0)	acint.net	A (IP address)	IN (0x0001)	false
Dec 18, 2024 20:26:32.381359100 CET	192.168.2.5	1.1.1.1	0xeebf	Standard query (0)	acint.net	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:25:17 UTC	732	OUT	GET /pics/post/full/Sakimichan-artist-Iono-(Pokemon)-Pok%c3%a9mon-7823638.jpeg HTTP/1.1 Host: img10.reactor.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 19:25:18 UTC	345	IN	HTTP/1.1 302 Found content-type: text/html; charset=utf-8 cache-control: no-cache, private date: Wed, 18 Dec 2024 19:25:18 GMT x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block x-content-type-options: nosniff location: https://joyreactor.cc/post/5464556 age: 0 wsr-cache: MISS (405) content-length: 382 connection: close
2024-12-18 19:25:18 UTC	382	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 3e 0a 20 20 20 20 3c 68 65 61 64 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 20 2f 3e 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 30 3b 75 72 6c 3d 27 68 74 74 70 73 3a 2f 2f 6a 6f 79 72 65 61 63 74 6f 72 2e 63 63 2f 70 6f 73 74 2f 35 34 36 34 35 35 36 27 22 20 2f 3e 0a 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 6a 6f 79 72 65 61 63 74 6f 72 2e 63 63 2f 70 6f 73 74 2f 35 34 36 34 35 35 36 3c 2f 74 69 74 6c 65 3e 0a 20 20 20 20 3c 2f 68 65 61 64 3e 0a 20 20 20 20 3c 62 6f 64 79 3e 0a Data Ascii: <!DOCTYPE html><html> <head> <meta charset="UTF-8" /> <meta http-equiv="refresh" content="0;url='https://joyreactor.cc/post/5464556'" /> <title>Redirecting to https://joyreactor.cc/post/5464556</title> </head> <body>

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:25:20 UTC	668	OUT	GET /post/5464556 HTTP/1.1 Host: joyreactor.cc Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 19:25:21 UTC	394	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 18 Dec 2024 19:25:20 GMT Content-Type: text/html; charset=utf-8 Content-Length: 99774 Connection: close Vary: Accept-Encoding Vary: Accept-Encoding x-nextjs-cache: STALE Cache-Control: s-maxage=300, stale-while-revalidate ETag: "2qhj43a5a723s0" X-Frame-Options: SAMEORIGIN X-XSS-Protection: 1; mode=block X-Content-Type-Options: nosniff
2024-12-18 19:25:21 UTC	15990	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 72 75 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 68 65 69 67 68 74 3d 64 65 76 69 63 65 2d 68 65 69 67 68 74 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 2c 6d 61 78 69 6d 75 6d 2d 73 63 61 6c 65 3d 31 2e 30 22 2f 3e 3c 74 69 74 6c 65 3e 53 61 6b 69 6d 69 63 68 61 6e 20 3a 3a 20 61 72 74 69 73 74 20 3a 3a 20 49 6f 6e 6f 20 28 50 6f 6b 65 6d 6f 6e 29 20 3a 3a 20 50 6f 6b c3 a9 6d 6f 6e 20 3a 3a 20 d1 84 d1 8d d0 bd d0 b4 d0 be d0 bc d1 8b 20 3a 3a 20 50 6f 6b c3 a9 Data Ascii: <!DOCTYPE html><html lang="ru"><head><meta charSet="utf-8"/><meta name="viewport" content="width=device-width, height=device-height, initial-scale=1.0,maximum-scale=1.0"/><title>Sakimichan :: artist :: Iono (Pokemon) :: Pokmon :: :: Pok
2024-12-18 19:25:21 UTC	16384	IN	Data Raw: 38 2d 30 33 30 39 2c 55 2b 30 33 32 33 2c 55 2b 30 33 32 39 2c 55 2b 31 45 41 30 2d 31 45 46 39 2c 55 2b 32 30 41 42 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 37 30 30 3b 66 6f 6e 74 2d 64 69 73 70 6c 61 79 3a 73 77 61 70 3b 73 72 63 3a 75 72 6c 28 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 33 32 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 57 55 6c 66 43 68 63 34 41 4d 50 36 6c 62 42 50 2e 77 6f 66 66 32 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 31 30 30 2d 30 32 42 41 2c 55 2b Data Ascii: 8-0309,U+0323,U+0329,U+1EA0-1EF9,U+20AB}@font-face{font-family:'Roboto';font-style:normal;font-weight:700;font-display:swap;src:url(https://fonts.gstatic.com/s/roboto/v32/KFOlCnqEu92Fr1MmWUlfChc4AMP6lbBP.woff2) format('woff2');unicode-range:U+0100-02BA,U+
2024-12-18 19:25:21 UTC	16384	IN	Data Raw: 6a 6f 79 72 65 61 63 74 6f 72 2e 63 63 2f 70 69 63 73 2f 70 6f 73 74 2f 66 75 6c 6c 2f 53 61 6b 69 6d 69 63 68 61 6e 2d 61 72 74 69 73 74 2d 49 6f 6e 6f 2d 28 50 6f 6b 65 6d 6f 6e 29 2d 37 38 32 33 36 33 37 2e 6a 70 65 67 22 3e 3c 64 69 76 3e 3c 64 69 76 20 72 6f 6c 65 3d 22 70 72 65 73 65 6e 74 61 74 69 6f 6e 22 20 63 6c 61 73 73 3d 22 69 6d 61 67 65 2d 7a 6f 6f 6d 2d 75 6e 7a 6f 6f 6d 65 64 22 3e 3c 69 6d 67 20 61 6c 74 3d 22 2c 53 61 6b 69 6d 69 63 68 61 6e 2c 61 72 74 69 73 74 2c 49 6f 6e 6f 20 28 50 6f 6b 65 6d 6f 6e 29 2c 50 6f 6b c3 a9 6d 6f 6e 2c d0 9f d0 be d0 ba d0 b5 d0 bc d0 be d0 bd d1 8b 2c d1 84 d1 8d d0 bd d0 b4 d0 be d0 bc d1 8b 2c 50 6f 6b c3 a9 6d 6f 6e 20 45 72 6f 2c d0 bf d0 be d0 b4 20 d0 ba d0 b0 d1 82 d0 be d0 bc 20 d0 b5 d1 89 d0 Data Ascii: joyreactor.cc/pics/post/full/Sakimichan-artist-Iono-(Pokemon)-7823637.jpeg"><div><div role="presentation" class="image-zoom-unzoomed"><img alt=",Sakimichan,artist,Iono (Pokemon),Pokmon,,,Pokmon Ero,
2024-12-18 19:25:21 UTC	16384	IN	Data Raw: 2e 4c 2e 4b 2e 45 2e 52 22 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 77 2d 61 76 61 74 61 72 6d 65 64 69 75 6d 20 68 2d 61 76 61 74 61 72 6d 65 64 69 75 6d 20 72 6f 75 6e 64 65 64 20 6d 72 2d 32 20 63 75 72 73 6f 72 2d 70 6f 69 6e 74 65 72 22 3e 3c 69 6d 67 20 74 69 74 6c 65 3d 22 53 2e 54 2e 41 2e 4c 2e 4b 2e 45 2e 52 22 20 61 6c 74 3d 22 53 2e 54 2e 41 2e 4c 2e 4b 2e 45 2e 52 22 20 6c 6f 61 64 69 6e 67 3d 22 6c 61 7a 79 22 20 77 69 64 74 68 3d 22 31 30 30 22 20 68 65 69 67 68 74 3d 22 31 30 30 22 20 64 65 63 6f 64 69 6e 67 3d 22 61 73 79 6e 63 22 20 64 61 74 61 2d 6e 69 6d 67 3d 22 31 22 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 34 70 78 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f Data Ascii: .L.K.E.R"><div class="w-avatarmedium h-avatarmedium rounded mr-2 cursor-pointer"><img title="S.T.A.L.K.E.R" alt="S.T.A.L.K.E.R" loading="lazy" width="100" height="100" decoding="async" data-nimg="1" style="color:transparent;border-radius:4px" src="https:/
2024-12-18 19:25:21 UTC	16384	IN	Data Raw: 68 65 69 67 68 74 3d 22 31 65 6d 22 20 66 69 6c 6c 3d 22 63 75 72 72 65 6e 74 43 6f 6c 6f 72 22 20 61 72 69 61 2d 68 69 64 64 65 6e 3d 22 74 72 75 65 22 3e 3c 70 61 74 68 20 64 3d 22 4d 37 36 34 20 32 38 30 2e 39 63 2d 31 34 2d 33 30 2e 36 2d 33 33 2e 39 2d 35 38 2e 31 2d 35 39 2e 33 2d 38 31 2e 36 43 36 35 33 2e 31 20 31 35 31 2e 34 20 35 38 34 2e 36 20 31 32 35 20 35 31 32 20 31 32 35 73 2d 31 34 31 2e 31 20 32 36 2e 34 2d 31 39 32 2e 37 20 37 34 2e 32 63 2d 32 35 2e 34 20 32 33 2e 36 2d 34 35 2e 33 20 35 31 2d 35 39 2e 33 20 38 31 2e 37 2d 31 34 2e 36 20 33 32 2d 32 32 20 36 35 2e 39 2d 32 32 20 31 30 30 2e 39 76 32 37 63 30 20 36 2e 32 20 35 20 31 31 2e 32 20 31 31 2e 32 20 31 31 2e 32 68 35 34 63 36 2e 32 20 30 20 31 31 2e 32 2d 35 20 31 31 2e 32 2d Data Ascii: height="1em" fill="currentColor" aria-hidden="true"><path d="M764 280.9c-14-30.6-33.9-58.1-59.3-81.6C653.1 151.4 584.6 125 512 125s-141.1 26.4-192.7 74.2c-25.4 23.6-45.3 51-59.3 81.7-14.6 32-22 65.9-22 100.9v27c0 6.2 5 11.2 11.2 11.2h54c6.2 0 11.2-5 11.2-
2024-12-18 19:25:21 UTC	16384	IN	Data Raw: 69 6e 54 61 67 22 3a 7b 22 5f 5f 72 65 66 22 3a 22 56 47 46 6e 4f 6a 6b 34 4e 44 6b 79 4f 51 3d 3d 22 7d 2c 22 6e 73 66 77 22 3a 66 61 6c 73 65 2c 22 75 6e 73 61 66 65 22 3a 66 61 6c 73 65 2c 22 63 61 74 65 67 6f 72 79 22 3a 7b 22 5f 5f 72 65 66 22 3a 22 56 47 46 6e 4f 6a 4d 77 4d 6a 51 79 22 7d 7d 2c 22 56 47 46 6e 4f 6a 67 32 4d 54 4d 30 4d 51 3d 3d 22 3a 7b 22 5f 5f 69 64 22 3a 22 56 47 46 6e 4f 6a 67 32 4d 54 4d 30 4d 51 3d 3d 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 54 61 67 22 2c 22 69 64 22 3a 22 56 47 46 6e 4f 6a 67 32 4d 54 4d 30 4d 51 3d 3d 22 2c 22 6e 61 6d 65 22 3a 22 4b 72 61 6b 65 6e 6b 61 74 7a 22 2c 22 73 65 6f 4e 61 6d 65 22 3a 22 4b 72 61 6b 65 6e 6b 61 74 7a 22 2c 22 63 6f 75 6e 74 22 3a 32 35 32 2c 22 73 75 62 73 63 72 69 62 65 Data Ascii: inTag":{"__ref":"VGFnOjk4NDkyOQ=="},"nsfw":false,"unsafe":false,"category":{"__ref":"VGFnOjMwMjQy"}},"VGFnOjg2MTM0MQ==":{"__id":"VGFnOjg2MTM0MQ==","__typename":"Tag","id":"VGFnOjg2MTM0MQ==","name":"Krakenkatz","seoName":"Krakenkatz","count":252,"subscribe
2024-12-18 19:25:21 UTC	1864	IN	Data Raw: bb bf 5c 74 d1 82 20 2d d0 b6 20 2c 27 63 6a 66 5c 74 5c 74 5c 72 5c 6e 5c 74 5c 74 5c 74 5c 72 5c 6e 5c 74 5c 74 5c 74 5c 72 5c 6e 4a 20 5c 5c 5c 5c 20 5e 31 5c 74 6a 6a 5e 62 5c 74 d1 8c 20 57 53 5c 74 d1 89 22 2c 22 68 61 73 56 69 64 65 6f 22 3a 66 61 6c 73 65 2c 22 69 64 22 3a 22 53 57 31 68 5a 32 55 36 4e 54 59 30 4d 44 49 33 4e 7a 6b 3d 22 7d 2c 22 55 47 39 7a 64 45 46 30 64 48 4a 70 59 6e 56 30 5a 56 42 70 59 33 52 31 63 6d 55 36 4e 7a 67 79 4d 7a 59 7a 4e 67 3d 3d 22 3a 7b 22 5f 5f 69 64 22 3a 22 55 47 39 7a 64 45 46 30 64 48 4a 70 59 6e 56 30 5a 56 42 70 59 33 52 31 63 6d 55 36 4e 7a 67 79 4d 7a 59 7a 4e 67 3d 3d 22 2c 22 5f 5f 74 79 70 65 6e 61 6d 65 22 3a 22 50 6f 73 74 41 74 74 72 69 62 75 74 65 50 69 63 74 75 72 65 22 2c 22 69 64 22 3a 22 55 Data Ascii: \t - ,'cjf\t\t\r\n\t\t\t\r\n\t\t\t\r\nJ \\\\ ^1\tjj^b\t WS\t","hasVideo":false,"id":"SW1hZ2U6NTY0MDI3Nzk="},"UG9zdEF0dHJpYnV0ZVBpY3R1cmU6NzgyMzYzNg==":{"__id":"UG9zdEF0dHJpYnV0ZVBpY3R1cmU6NzgyMzYzNg==","__typename":"PostAttributePicture","id":"U

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:25:21 UTC	574	OUT	GET /_next/static/css/94a19acadc13a9e1.css HTTP/1.1 Host: joyreactor.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://joyreactor.cc/post/5464556 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 19:25:21 UTC	323	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 18 Dec 2024 19:25:21 GMT Content-Type: text/css Content-Length: 80050 Last-Modified: Wed, 18 Dec 2024 11:38:36 GMT Connection: close Vary: Accept-Encoding ETag: "6762b43c-138b2" Expires: Wed, 25 Dec 2024 19:25:21 GMT Cache-Control: max-age=604800 Accept-Ranges: bytes
2024-12-18 19:25:21 UTC	16061	IN	Data Raw: 2a 2c 3a 3a 62 61 63 6b 64 72 6f 70 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 2d 2d 74 77 2d 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 2d 78 3a 30 3b 2d 2d 74 77 2d 62 6f 72 64 65 72 2d 73 70 61 63 69 6e 67 2d 79 3a 30 3b 2d 2d 74 77 2d 74 72 61 6e 73 6c 61 74 65 2d 78 3a 30 3b 2d 2d 74 77 2d 74 72 61 6e 73 6c 61 74 65 2d 79 3a 30 3b 2d 2d 74 77 2d 72 6f 74 61 74 65 3a 30 3b 2d 2d 74 77 2d 73 6b 65 77 2d 78 3a 30 3b 2d 2d 74 77 2d 73 6b 65 77 2d 79 3a 30 3b 2d 2d 74 77 2d 73 63 61 6c 65 2d 78 3a 31 3b 2d 2d 74 77 2d 73 63 61 6c 65 2d 79 3a 31 3b 2d 2d 74 77 2d 70 61 6e 2d 78 3a 20 3b 2d 2d 74 77 2d 70 61 6e 2d 79 3a 20 3b 2d 2d 74 77 2d 70 69 6e 63 68 2d 7a 6f 6f 6d 3a 20 3b 2d 2d 74 77 2d 73 63 72 6f 6c 6c 2d 73 6e 61 70 2d 73 74 72 69 63 74 6e 65 Data Ascii: *,::backdrop,:after,:before{--tw-border-spacing-x:0;--tw-border-spacing-y:0;--tw-translate-x:0;--tw-translate-y:0;--tw-rotate:0;--tw-skew-x:0;--tw-skew-y:0;--tw-scale-x:1;--tw-scale-y:1;--tw-pan-x: ;--tw-pan-y: ;--tw-pinch-zoom: ;--tw-scroll-snap-strictne
2024-12-18 19:25:21 UTC	16384	IN	Data Raw: 2d 62 67 2d 6f 70 61 63 69 74 79 2c 31 29 29 7d 2e 64 61 72 6b 5c 3a 62 67 2d 67 72 61 79 2d 63 6f 6d 6d 65 6e 74 64 61 72 6b 6e 65 77 3a 69 73 28 2e 64 61 72 6b 20 2a 29 7b 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 31 31 33 20 31 31 33 20 31 31 33 2f 76 61 72 28 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 2c 31 29 29 7d 2e 64 61 72 6b 5c 3a 62 67 2d 67 72 61 79 2d 68 65 61 64 6c 69 6e 65 3a 69 73 28 2e 64 61 72 6b 20 2a 29 7b 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 3a 31 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 72 67 62 28 36 38 20 36 38 20 36 38 2f 76 61 72 28 2d 2d 74 77 2d 62 67 2d 6f 70 61 63 69 74 79 2c 31 29 29 7d 2e 64 61 72 6b 5c 3a 62 67 2d 67 72 61 79 Data Ascii: -bg-opacity,1))}.dark\:bg-gray-commentdarknew:is(.dark ){--tw-bg-opacity:1;background-color:rgb(113 113 113/var(--tw-bg-opacity,1))}.dark\:bg-gray-headline:is(.dark ){--tw-bg-opacity:1;background-color:rgb(68 68 68/var(--tw-bg-opacity,1))}.dark\:bg-gray
2024-12-18 19:25:22 UTC	16384	IN	Data Raw: 61 72 28 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 2c 31 29 29 7d 2e 61 74 74 72 69 62 75 74 65 2d 65 6d 62 65 64 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 77 69 64 74 68 3a 31 30 30 25 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 35 36 2e 32 35 25 7d 2e 61 74 74 72 69 62 75 74 65 2d 65 6d 62 65 64 20 69 66 72 61 6d 65 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 62 6f 74 74 6f 6d 3a 30 3b 72 69 67 68 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 72 65 73 70 6f 6e 73 69 76 65 7b 6d 61 78 2d 77 69 64 74 68 3a 6d 69 6e 28 38 31 31 70 78 2c 31 30 30 25 29 3b 68 65 69 67 68 74 3a 61 75 74 6f 3b 64 69 73 70 Data Ascii: ar(--tw-text-opacity,1))}.attribute-embed{position:relative;overflow:hidden;width:100%;padding-top:56.25%}.attribute-embed iframe{position:absolute;top:0;left:0;bottom:0;right:0;width:100%;height:100%}.responsive{max-width:min(811px,100%);height:auto;disp
2024-12-18 19:25:22 UTC	16384	IN	Data Raw: 20 32 30 31 2f 76 61 72 28 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 2c 31 29 29 7d 2e 6d 65 6e 75 2d 6e 61 6d 65 3a 69 73 28 2e 64 61 72 6b 20 2a 29 7b 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 3a 31 3b 63 6f 6c 6f 72 3a 72 67 62 28 31 37 33 20 31 37 33 20 31 37 33 2f 76 61 72 28 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 2c 31 29 29 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 37 36 38 70 78 29 7b 2e 6d 65 6e 75 2d 6e 61 6d 65 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 35 72 65 6d 3b 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 3a 31 3b 63 6f 6c 6f 72 3a 72 67 62 28 36 39 20 36 39 20 36 39 2f 76 61 72 28 2d 2d 74 77 2d 74 65 78 74 2d 6f 70 61 63 69 74 79 2c 31 29 29 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d Data Ascii: 201/var(--tw-text-opacity,1))}.menu-name:is(.dark *){--tw-text-opacity:1;color:rgb(173 173 173/var(--tw-text-opacity,1))}@media (min-width:768px){.menu-name{padding-left:.5rem;--tw-text-opacity:1;color:rgb(69 69 69/var(--tw-text-opacity,1))}}@media (min-
2024-12-18 19:25:22 UTC	14837	IN	Data Raw: 65 2d 68 65 69 67 68 74 3a 31 2e 32 35 72 65 6d 7d 2e 79 65 61 72 2d 70 61 67 69 6e 61 74 6f 72 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 69 74 65 6d 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 2e 37 35 72 65 6d 7d 2e 79 65 61 72 2d 70 61 67 69 6e 61 74 6f 72 20 2e 70 61 67 69 6e 61 74 69 6f 6e 2d 65 6c 6c 69 70 73 69 73 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 35 72 65 6d 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 2e 32 35 72 65 6d 3b 70 61 64 64 69 6e 67 2d 74 6f 70 3a 2e 33 37 35 72 65 6d 7d 2e 79 65 61 72 2d Data Ascii: e-height:1.25rem}.year-paginator .pagination-item{margin-bottom:.5rem;margin-right:.25rem;padding:.5rem .75rem}.year-paginator .pagination-ellipsis{margin-bottom:.5rem;margin-right:.25rem;padding-left:.25rem;padding-right:.25rem;padding-top:.375rem}.year-

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:25:23 UTC	596	OUT	GET /pics/avatar/tag/big/27 HTTP/1.1 Host: img2.joyreactor.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://joyreactor.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 19:25:24 UTC	348	IN	HTTP/1.1 200 OK date: Wed, 11 Dec 2024 22:23:12 GMT content-type: image/jpeg content-length: 10440 last-modified: Fri, 06 Aug 2021 04:15:04 GMT expires: Mon, 06 Sep 2027 22:23:12 GMT cache-control: public, max-age=86313600, stale-while-revalidate=17262720 age: 594131 accept-ranges: bytes wsr-cache: HIT 676650 (204) connection: close
2024-12-18 19:25:24 UTC	3909	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xm
2024-12-18 19:25:24 UTC	4257	IN	Data Raw: b5 66 da 01 41 06 c1 10 00 45 39 08 88 d9 11 3d 49 5a 99 92 40 7f 99 7b 37 74 ee e8 18 fc 6e 17 36 38 86 41 e2 59 c2 6a f0 a3 a2 48 88 d9 21 30 40 4a ac 95 c8 41 57 4a aa fa aa fe 83 55 6e c4 9c a7 0e 3c 30 ea 34 de 83 96 4e 86 8f 2f bc c1 c7 e7 47 2d 00 06 48 c1 da cd b5 1d fc fc e2 44 49 3d 14 56 9d 75 ee 09 d3 73 53 4a 6a 2b 75 d2 b7 5b 54 eb 34 6e df 0b aa ad cc 78 57 46 c1 6e ed 6a b6 1c fd e7 06 e2 1d ff 00 b9 27 64 f6 66 05 f7 99 c2 36 8d 65 73 91 51 c7 4d f6 45 6c d3 8e 80 5c 01 b1 e9 f7 4a d7 b7 35 e0 95 e8 79 66 96 76 ad d2 6f 3e 8d 85 4b d3 4d e0 5f fe 51 f9 a6 c7 98 98 59 12 96 1a c1 c9 e3 d4 1b c8 31 d4 13 03 22 1f b5 69 2f d4 40 5b 71 d4 9c 15 6d 75 af 3b af d0 bd 3c a9 5a c5 e4 5b b5 77 89 07 35 44 dc 2a 01 50 13 92 66 78 2d 98 f4 bd 2a 7d Data Ascii: fAE9=IZ@{7tn68AYjH!0@JAWJUn<04N/G-HDI=VusSJj+u[T4nxWFnj'df6esQMEl\J5yfvo>KM_QY1"i/@[qmu;<Z[w5DPfx-}
2024-12-18 19:25:24 UTC	2274	IN	Data Raw: d7 47 b7 d6 58 ac 76 1a a3 3d 83 58 ed 78 9d b1 23 c4 68 1e af fc a1 15 35 db bd 65 d3 e9 a3 4f 6f ac 55 6c 39 5f ce a6 8a 5f 99 7b a5 98 ac f8 48 cf 4b c7 32 20 e8 74 05 9d 51 91 01 0c 7f 46 9f 82 ba 16 70 8a de 53 b8 aa fd 05 97 f7 60 c0 e0 31 d3 33 b8 d9 8c 9c 6d f5 8f 71 c6 33 30 a5 88 16 a8 28 ba 74 30 9f 44 5e d2 ae af 1b f7 7e 6a d6 8d 54 9b 49 fe 53 76 9d 2a d3 a4 e8 2c 34 48 63 ba a3 74 a3 b4 d1 b5 0e 43 8a 4d 80 02 aa 1b 8d 05 97 4a 22 af ba b4 d1 66 c9 d5 24 92 0c 55 2e 96 ab e5 32 15 31 d1 f6 ee 1a 59 e1 a0 1c a9 65 a9 de 9e b5 37 e4 be 6b 64 27 5e 74 b5 17 15 e2 44 5c 07 97 2b 50 11 bb d3 6f 6d 99 78 43 c9 ee 1d bf 13 39 3a 23 41 71 46 04 dc 22 ba 22 83 44 48 4e 20 ea 2b da f4 03 e7 31 0b 81 c6 b0 ce d2 c5 c3 8e d0 49 6c a4 e3 d9 6c 23 8b 8c Data Ascii: GXv=Xx#h5eOoUl9__{HK2 tQFpS`13mq30(t0D^~jTISv*,4HctCMJ"f$U.21Ye7kd'^tD\+PomxC9:#AqF""DHN +1Ill#

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:25:23 UTC	657	OUT	GET /_next/static/media/reactor_bg_middle.f002acdf.jpg HTTP/1.1 Host: joyreactor.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://joyreactor.cc/_next/static/css/94a19acadc13a9e1.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 19:25:24 UTC	303	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 18 Dec 2024 19:25:24 GMT Content-Type: image/jpeg Content-Length: 106260 Last-Modified: Wed, 18 Dec 2024 11:38:36 GMT Connection: close ETag: "6762b43c-19f14" Expires: Wed, 25 Dec 2024 19:25:24 GMT Cache-Control: max-age=604800 Accept-Ranges: bytes
2024-12-18 19:25:24 UTC	16081	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 73 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<shttp://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xm
2024-12-18 19:25:24 UTC	16384	IN	Data Raw: 14 1a 4e 69 61 d2 16 0d 24 08 9f dd 2a af 15 32 30 9a 75 e9 0d 2b 1a 2d 3d 30 c9 df 1a 74 32 89 56 86 aa 97 e1 32 cd 3d a3 e6 84 14 ac 2a d2 d2 33 4c c2 41 45 ac 02 bd 3a 40 8e 6a 8e 36 3d b1 17 a7 2e 5a 5e 87 49 a7 77 57 1f 12 af 1d 03 56 b3 0e 17 be d6 98 57 4f cb 09 a4 05 16 eb 22 34 e2 15 57 a2 c3 3d d4 dc af 8d 0a c8 93 ab 06 dc b4 59 a7 59 c2 21 a5 81 5a 53 53 23 0d 4f 22 f5 d6 46 70 98 a9 b1 82 44 e5 c6 2d d6 17 29 62 cb 73 73 2a e8 1b 5a f2 1e 46 55 81 27 b6 55 5a 1c 96 bd 24 66 9f fc 20 35 15 84 aa c7 a8 84 58 c6 19 a4 71 85 2d b0 24 e5 0d 25 92 ab 7d 60 83 70 d6 05 86 fe 30 96 0d d9 5e 64 50 3b 61 92 73 45 fb d3 4b 12 eb 92 95 f8 42 ce 1c 60 9a cd 3d 0e 8f 6c de 59 9a e5 f6 47 42 e3 d6 65 ca 91 37 a0 b4 00 ab d6 92 ae aa bd 44 ac 02 a7 76 d9 16 Data Ascii: Nia$20u+-=0t2V2=3LAE:@j6=.Z^IwWVWO"4W=YY!ZSS#O"FpD-)bss*ZFU'UZ$f 5Xq-$%}`p0^dP;asEKB`=lYGBe7Dv
2024-12-18 19:25:24 UTC	16384	IN	Data Raw: a4 b4 36 66 3f 86 17 b0 72 a5 b1 17 85 80 16 56 f9 61 3c a3 ec da 65 51 5a 36 30 1b 65 a9 da d2 11 2c 57 5e b2 ac 46 4a d8 ae 52 b5 e1 ba a6 3d d3 2e 76 e9 13 c7 96 4f 75 94 e7 f0 cf 2e 3c b1 58 6b 90 19 0e ab 0a 39 0f 18 d1 71 5f 48 84 eb 2a 5b 95 85 d6 95 3e 59 71 67 54 3a d5 af df 0d ca be 35 66 cb a9 f4 c6 b3 da e0 1c 4d bb d5 e9 8d 3d c9 5b 1b 19 a6 ac d4 fd 55 0e a0 2d 9b 6b 4c e2 7a 29 f3 d4 ad a6 88 87 6e 9d b2 46 a0 53 c6 2d 8e e9 4b ab c9 be 9d 3c b3 2c e7 2a cf 1c 69 09 84 e7 cf 0b 3e 0c 73 6e c8 79 64 c4 bd 02 f2 87 e4 cc da 0f 4c 98 90 40 e4 af 69 95 6c e1 62 da f6 c8 ca d5 43 74 fc 50 ce a8 83 8d 06 92 20 5b f2 61 8c 17 c0 6c 96 16 72 36 05 ad ff 00 14 21 02 dd c2 55 a4 31 d0 e9 02 72 e8 25 6b 10 5f f8 c3 58 b3 6b 65 23 25 9e 3a eb 18 60 66 Data Ascii: 6f?rVa<eQZ60e,W^FJR=.vOu.<Xk9q_H[>YqgT:5fM=[U-kLz)nFS-K<,i>snydL@ilbCtP [alr6!U1r%k_Xke#%:`f
2024-12-18 19:25:24 UTC	16384	IN	Data Raw: 5c a1 65 0f 6b 4a 42 65 60 b6 82 18 10 29 8c 21 d6 10 81 51 dc b1 8b 66 b4 0c 0b 77 48 c6 0f 2e 38 c2 16 ba b4 34 0b 78 41 86 4d 6d da 65 64 8a 83 af 74 8d 4a 1b 14 b0 fc b2 a4 25 56 2b be 90 ba 75 53 e5 81 9d 2a b4 c4 6b 2a ba 36 99 96 10 07 1a b5 47 6c 2f 29 66 ae 8b 2a c8 44 d6 da ca a9 37 b6 3d 20 0a 87 1a f4 f9 a1 6d 08 e3 4e df 9a 0b 0d bf e3 04 5e e4 6d ba 48 cf 91 60 df 3f e9 86 7f 06 76 9f ea 57 1f 96 17 cf 82 6a 00 a7 ac 45 81 8f 68 34 a4 18 49 c9 56 6a ca 58 79 f1 a9 6a fe 91 22 65 ac c1 5c ea 16 b2 b4 d0 32 e1 79 13 15 c5 76 2c 75 58 67 b3 3a b0 ee 86 d6 0d 1a 9f dd ed 86 02 3a b7 db 0b 66 32 7b a8 d3 59 5b 8d 97 97 8f a6 d9 9c 73 bd 6a 95 38 f5 0d 5f bd 09 6d 27 14 6a 8b 56 22 c4 93 8f cd 29 39 09 c9 45 6a ac 2d 80 0d b5 f2 c2 01 c7 c6 19 a8 Data Ascii: \ekJBe`)!QfwH.84xAMmedtJ%V+uSk6Gl/)f*D7= mN^mH`?vWjEh4IVjXyj"e\2yv,uXg::f2{Y[sj8_m'jV")9Ej-
2024-12-18 19:25:24 UTC	16384	IN	Data Raw: a2 aa 9b 6b 23 27 e5 b4 a8 40 5a 86 df 6f 48 5a 5d ab 6d c2 17 c9 a8 52 7e 68 4a aa 64 2b 94 89 e1 c1 fe e1 67 50 34 51 3a f4 7a 3e 87 6f 10 c7 8d 40 f2 8d d3 9d 79 ef 34 f0 07 76 b8 c8 69 8c 8f 77 6c ac ac b0 c6 85 76 99 0c 41 56 2d 6f fb 60 72 fb 9e 2f a8 cd 92 90 e9 4c 7d 3f 6c dc b8 eb f5 f6 c6 fc 43 9d 78 95 70 a8 1b 76 99 75 cf b6 5b ae 7e 6e 0f 71 c7 c8 bc a7 8f 12 c7 6e 27 28 d7 5e bd fa d9 9a ea e2 e3 6e 34 dd b8 9b b4 c5 ba e5 da eb 0e 2e 55 7c b9 db b3 b7 e5 55 9a ad f7 e9 9c 34 e4 e7 e1 54 fa 8a a4 81 e9 89 12 74 b7 87 2e 5c 7c be e1 49 42 86 87 e5 9a cc 8e b9 67 55 d7 98 76 fe 62 24 4f ea 54 f7 07 b5 92 ff 00 08 e0 fe ab e1 47 36 e4 73 59 2d 4e f7 e1 6b ec f8 9b 22 ce f5 fb 5a 4f 66 2f d9 62 79 38 91 15 8e 4c 07 da d2 eb 52 e8 c3 db 22 7d 52 Data Ascii: k#'@ZoHZ]mR~hJd+gP4Q:z>o@y4viwlvAV-o`r/L}?lCxpvu[~nqn'(^n4.U\|U4Tt.\\|IBgUvb$OTG6sY-Nk"ZOf/by8LR"}R
2024-12-18 19:25:24 UTC	16384	IN	Data Raw: 24 22 4b b4 2e 62 58 72 06 cc d7 6f a7 cc b3 48 b4 6a 2d a6 4a 4c b9 35 ad 58 59 c1 0a 8d b2 83 76 a1 85 e0 55 2d 76 a7 a7 e6 91 92 cf 05 a8 ee 86 b3 54 98 95 23 a3 79 a1 9a 15 54 58 41 69 86 01 5b 74 18 af a9 46 fd dd d0 98 0b 9f a7 dc 4c 89 9c b3 73 55 55 f2 b6 d9 63 51 b6 1c 7a 9d b2 31 b5 45 d4 ab 30 f3 7f 76 46 71 2c f9 28 05 72 95 af 54 90 69 7a 52 1a d0 00 6c 42 c1 e0 37 1b 23 59 47 cd 12 a4 ba f3 b8 b3 f7 3e e5 d8 68 0f 9a 74 bc 3d 3d bf af 57 a0 03 16 5f db 19 87 9c d0 39 3e 26 42 b4 e3 e4 be d5 2f f6 49 8c 76 85 8b 16 ab 28 f9 56 04 15 52 5b 92 c3 cb 2b 5b f8 58 51 4b c2 32 fa 89 a2 aa e7 e9 86 b2 97 f5 51 57 6e 3e a5 94 f2 8a 33 fd e1 e5 95 bf 0d 32 e4 7b 15 c4 c8 ce 48 4c d4 b2 f9 60 91 1f 51 c2 d0 ac d3 58 90 ae 17 6c aa d0 85 18 93 ac c3 01 Data Ascii: $"K.bXroHj-JL5XYvU-vT#yTXAi[tFLsUUcQz1E0vFq,(rTizRlB7#YG>ht==W_9>&B/Iv(VR[+[XQK2QWn>32{HL`QXl
2024-12-18 19:25:24 UTC	8259	IN	Data Raw: f2 00 51 ac a1 12 dd 21 42 aa ab 50 c8 97 96 a3 8c 15 be 9e a6 91 8d 4b 16 5b 0e d9 a5 8c d9 4b 62 0b 43 64 e0 03 89 f2 cd 2c 01 2a b6 90 f6 23 b6 d2 af 94 ab 31 6a 0e b0 58 a4 4a 8a 18 2d 2c 15 56 90 9a 05 29 db 7f 54 29 b1 c6 e3 ac 89 39 4a 3e 39 55 65 6a cd 1f 53 ac 62 61 e5 55 b6 b0 62 77 18 55 03 d6 06 bf 5b 6c 8e 7e 83 25 3a c8 61 01 c2 16 b9 7e 59 a3 94 13 5b 06 35 f4 c3 49 a1 16 c6 15 61 18 58 2e b0 ce 90 e3 ad ab 43 0b a9 5e e8 6a ae 8a 6e 7a 43 20 d0 8b d6 04 d0 2d f1 85 f2 b1 bd 6e bf 89 a1 8b c2 be 9e 77 e8 36 cc 9b 85 45 36 f0 9a 35 24 ae 56 ef 91 43 21 39 13 d2 55 d6 dc 6a a5 76 df e5 99 72 bc 0e 44 c4 e4 1b 74 69 3b 6f 0c cb 39 6a 9b 4d 37 88 c6 81 b9 3e 30 d6 fe 08 62 4c 28 c2 8b 58 37 52 cd 0b 20 39 36 26 0f 0b 6e 2b d7 af cc 61 9f 64 d0 Data Ascii: Q!BPK[KbCd,*#1jXJ-,V)T)9J>9UejSbaUbwU[l~%:a~Y[5IaX.C^jnzC -nw6E65$VC!9UjvrDti;o9jM7>0bL(X7R 96&n+ad

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:25:23 UTC	597	OUT	GET /pics/avatar/tag/big/116 HTTP/1.1 Host: img2.joyreactor.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://joyreactor.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 19:25:24 UTC	347	IN	HTTP/1.1 200 OK date: Wed, 11 Dec 2024 10:53:27 GMT content-type: image/gif content-length: 21416 last-modified: Sun, 08 Aug 2021 21:25:14 GMT expires: Mon, 06 Sep 2027 10:53:27 GMT cache-control: public, max-age=86313600, stale-while-revalidate=17262720 age: 635516 accept-ranges: bytes wsr-cache: HIT 742333 (248) connection: close
2024-12-18 19:25:24 UTC	3910	IN	Data Raw: 47 49 46 38 39 61 2c 01 4b 00 d5 3f 00 21 1c 0e a6 97 68 ac 9c 6a 62 55 35 a3 93 61 7d 78 5f b8 ab 77 95 8b 62 5a 54 3b 6d 62 45 16 10 08 8e 89 70 bc b0 7f 79 73 59 b9 ad 86 a5 9c 76 af a5 7d 94 8d 72 9a 94 75 7d 70 50 bf b3 86 63 5d 43 76 69 49 2c 4e 28 b1 a2 6e 6d 5e 3b aa a2 77 b0 9f 72 74 6d 53 a8 9f 6e a5 a1 84 b7 a6 75 69 68 51 40 68 3e 5d 84 58 5a 7a 51 9c 99 82 3b 6f 40 c2 b2 7f b7 a7 7d b3 c1 a3 64 79 54 77 90 69 92 a6 83 cb d5 b7 e4 eb d0 82 9b 76 b4 a9 74 9c 92 64 b4 ab 7b 49 79 49 39 32 20 2d 27 17 94 87 59 89 83 67 45 3b 26 9d 8d 5e 18 34 13 b2 a4 72 85 78 59 50 47 2e 87 7c 62 bb ad 7c ff ff ff 21 ff 0b 4e 45 54 53 43 41 50 45 32 2e 30 03 01 00 00 00 21 ff 0b 58 4d 50 20 44 61 74 61 58 4d 50 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 Data Ascii: GIF89a,K?!hjbU5a}x_wbZT;mbEpysYv}ru}pPc]CviI,N(nm^;wrtmSnuihQ@h>]XZzQ;o@}dyTwivtd{IyI92 -'YgE;&^4rxYPG.\|b\|!NETSCAPE2.0!XMP DataXMP<?xpacket begin="
2024-12-18 19:25:24 UTC	4257	IN	Data Raw: 35 38 70 d5 37 7d a8 96 55 6c a7 55 36 c4 55 f1 e4 35 ca d3 35 a3 74 27 87 f2 00 a3 94 30 73 c2 71 be 91 1b ea d5 19 20 f7 5e 05 d2 7e 45 81 03 31 d1 72 39 22 7f d1 e6 66 8a f7 6c f8 47 1c b4 f1 78 92 e7 7f f9 f7 65 1c 50 01 72 86 4c a0 e7 80 39 a7 52 0e b8 80 a6 d5 52 a6 35 53 1c c6 01 f1 87 0c b4 60 3f b7 b0 15 18 88 0b 2a d1 81 95 a1 4b 5d 86 0a 89 26 0d f0 f6 5a 90 75 32 08 60 7c c5 c7 88 2b 78 69 2e 38 5c 94 c6 75 92 08 7d c2 f5 7c d0 05 5d f7 52 6a 07 87 70 41 76 2f 60 95 7d 96 d4 35 43 06 71 6c c3 36 89 52 21 ac 24 00 7c f3 29 9f 72 14 00 b2 57 54 58 20 ab a1 13 68 86 78 4e b1 15 ae 70 78 d2 86 8b ff a4 02 73 a5 72 1c 13 13 6d 5b 01 02 9a a7 86 d9 26 87 3c c7 52 3a e7 67 3d 97 80 a0 97 80 d8 a6 6d 09 90 5f c8 f1 5f c3 a0 15 b4 e7 81 7d 18 88 de 48 Data Ascii: 58p7}UlU6U55t'0sq ^~E1r9"flGxePrL9RR5S`?*K]&Zu2`\|+xi.8\u}\|]RjpAv/`}5Cql6R!$\|)rWTX hxNpxsrm[&<R:g=m__}H
2024-12-18 19:25:24 UTC	4257	IN	Data Raw: 5c b6 41 97 80 05 4c 6e f2 ab 01 c1 12 64 96 ba 31 8c 7f fd d2 97 5c 94 d3 03 36 d4 81 06 08 c8 47 e8 ee b1 a1 05 22 2e 01 0c d4 ff cc 50 20 02 41 90 9c e6 82 21 5b 08 8b 5c 84 1a d9 cc 46 66 6b 20 e0 3d 10 07 90 04 f4 08 22 5f 48 11 0a b1 e0 99 1b 54 00 80 2f 34 e5 29 73 40 83 0a 48 46 68 36 98 92 0e 8d 13 9d 0b 3c 20 2a c7 9b c6 2c 66 21 9e 25 c2 8b 2c 48 dc 45 2f a1 c6 0b e5 c1 49 3e 5a 5a 17 59 66 f1 01 74 c5 a9 2c ee 32 47 7c 16 95 0c 08 24 43 7c 6a 39 df fe b4 e1 af c1 c8 65 30 6d 3b 80 38 f0 a2 17 37 c6 71 3e 78 bb 23 9f aa 11 28 18 14 0e 04 2f 0a 19 0f 0e 88 b1 3f 54 62 90 f9 70 4c 21 ef 99 80 0c c8 ce 23 4f d0 02 17 3e d3 10 77 42 c1 57 b6 69 15 44 28 49 49 15 5d e4 80 82 dc 07 24 9c 70 03 d2 74 12 01 07 39 8d 67 52 72 03 54 6e 34 07 33 48 00 25 Data Ascii: \ALnd1\6G".P A![\Ffk ="_HT/4)s@HFh6< *,f!%,HE/I>ZZYft,2G\|$C\|j9e0m;87q>x#(/?TbpL!#O>wBWiD(II]$pt9gRrTn43H%
2024-12-18 19:25:24 UTC	4257	IN	Data Raw: 56 7b 6d e8 26 4b 33 fa 11 c1 a5 49 04 83 04 0f 3f 70 ba 87 7b 36 6e 69 e5 a6 12 d2 a8 55 98 e3 cc 73 04 26 0d 60 72 26 12 1c bc f8 28 52 eb d1 30 e4 a4 7c 6a 82 aa 04 11 e0 99 84 a7 4c 08 7a e3 7d 47 08 da e6 8d 0e 26 57 40 98 69 d0 d3 c0 b3 6d e8 e1 c6 0e cd fe 70 a6 0d d8 d2 d3 c3 04 8d 5a 90 40 05 5a f1 c0 c3 7d 0b 92 d1 e7 a4 a8 92 30 ff 65 0f 08 fc f9 03 b1 7e dc 90 dc b9 48 2c 07 6f 7d c4 72 ca e2 2d b7 3c bb 06 1b ff ce 43 6d b5 69 70 92 68 0f 36 b4 c1 ea 1a 3b 78 9b 95 a7 c9 dd ea 87 92 7e 90 20 c1 89 11 f4 00 02 02 c0 22 4b 86 8d c4 0a 3a 61 a9 5e ee d1 40 0f 69 f0 bb 2a 1a 6a 5c e2 72 b3 6e d0 53 e8 ca 52 04 2c 2d 27 3f 58 00 e3 00 7b dd d7 56 9f 95 ee 71 69 af d6 fe 90 40 12 f0 32 91 25 8d 4a cf 60 6c b1 58 70 b0 00 d1 4c 44 8b c6 3c 3d 0c 5c Data Ascii: V{m&K3I?p{6niUs&`r&(R0\|jLz}G&W@impZ@Z}0e~H,o}r-<Cmiph6;x~ "K:a^@i*j\rnSR,-'?X{Vqi@2%J`lXpLD<=\
2024-12-18 19:25:24 UTC	4257	IN	Data Raw: 61 15 17 3b 34 d0 bf 10 86 40 c8 ec 82 76 b9 30 4d 80 03 1c b0 00 d9 7e 23 a7 b3 01 28 19 17 68 cf 1f 6a b0 03 96 d8 a3 82 7c fb 81 dc cc 34 be 48 34 2d 7f b0 c3 5b 25 16 20 81 08 48 40 7d e7 eb 42 fa 94 06 82 b5 48 0e 4e 23 4b 17 00 e2 77 83 92 8d 4c 71 47 c0 e1 fc be f4 a5 28 f4 6f 07 05 00 e2 0e 84 78 84 c5 08 01 21 c6 60 de 8c 64 44 26 84 88 cd 79 44 f8 9c f4 66 40 45 ff 54 b0 18 14 04 e0 fa 84 70 80 1a 6c f0 12 5c 68 5a 08 c5 f7 37 24 e4 4f 08 ea 83 12 09 50 28 04 12 ac 51 8c 85 13 82 0b e9 74 2b fa b9 ff cf 86 3f 48 57 15 73 88 2b 0e 2c 80 79 f0 c0 54 14 24 56 0c cc 19 43 6c 7f 80 84 00 21 d1 30 cc 61 ae 01 5b 1a 80 14 bf 85 91 2c 66 d1 0d 2d 89 42 d3 f8 16 c2 f2 ad ee 8c 5f 0b 25 eb 98 f6 41 09 3c 4d 69 88 1c 15 a9 b0 b6 3b f9 21 a1 5d 78 3a d9 0c Data Ascii: a;4@v0M~#(hj\|4H4-[% H@}BHN#KwLqG(ox!`dD&yDf@ETpl\hZ7$OP(Qt+?HWs+,yT$VCl!0a[,f-B_%A<Mi;!]x:
2024-12-18 19:25:24 UTC	478	IN	Data Raw: 94 bb 87 ee 5d 50 a1 69 43 db ff 47 67 74 ff 3e 3f 4c 19 d7 b5 25 0c 8b f0 da 46 3a ba 44 7c d1 bf ea f4 64 bf 7f 48 7f 70 b5 be e8 4b 00 0c fc c0 e2 48 30 f2 8e 50 df f7 4e f5 95 b0 61 b8 42 b4 47 75 9c 13 b5 f1 be 3a f7 e3 be 61 6b 61 ed da 4c ea eb 8b d3 7f 3e 2a 1f fd 38 ea e2 65 4e 75 77 c5 61 6f fc 27 3c aa cd 3e bf bb d8 ec b7 33 29 7f e9 f5 9d 0c ba 51 df c0 bd d0 94 50 f5 17 fd 1b c9 19 05 3d 9d 5b 13 3a bf 42 70 9c ef cb c6 a9 1c bf 4c ce 7f 65 7c b7 93 0f f7 ab 9b da 81 d5 4a aa 4d b4 26 a3 fb 41 27 2b 89 d3 fc f8 58 3d 87 63 dc 6e 00 03 7e af 0d 8d d1 e5 ae 7f 04 48 9d f2 4d 8e 06 79 92 2e 86 ff 07 e1 ef 65 cb af de bc 13 05 ed 92 58 f9 76 b6 69 eb c9 1b 36 3c 8e f6 be 6a 6c 09 ff ec 06 4c 8e e3 b5 35 f5 5c 04 04 bf 43 ed 20 ac fd 90 49 65 12 Data Ascii: ]PiCGgt>?L%F:D\|dHpKH0PNaBGu:akaL>*8eNuwao'<>3)QP=[:BpLe\|JM&A'+X=cn~HMy.eXvi6<jlL5\C Ie

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://img10.reactor.cc/pics/post/full/Sakimichan-artist-Iono-(Pokemon)-Pok%c3%a9mon-7823638.jpeg

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 272

Chrome Cache Entry: 273

Chrome Cache Entry: 274

Chrome Cache Entry: 275

Chrome Cache Entry: 276

Chrome Cache Entry: 277

Chrome Cache Entry: 278

Chrome Cache Entry: 279

Chrome Cache Entry: 280

Chrome Cache Entry: 281

Chrome Cache Entry: 282

Chrome Cache Entry: 283

Chrome Cache Entry: 284

Chrome Cache Entry: 285

Chrome Cache Entry: 286

Chrome Cache Entry: 287

Chrome Cache Entry: 288

Chrome Cache Entry: 289

Chrome Cache Entry: 290

Chrome Cache Entry: 291

Chrome Cache Entry: 292

Windows Analysis Report
https://img10.reactor.cc/pics/post/full/Sakimichan-artist-Iono-(Pokemon)-Pok%c3%a9mon-7823638.jpeg

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:25:23 UTC	595	OUT	GET /pics/avatar/tag/big/8 HTTP/1.1 Host: img2.joyreactor.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://joyreactor.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 19:25:24 UTC	347	IN	HTTP/1.1 200 OK date: Thu, 12 Dec 2024 01:53:46 GMT content-type: image/jpeg content-length: 9992 last-modified: Fri, 06 Aug 2021 02:40:02 GMT expires: Tue, 07 Sep 2027 01:53:46 GMT cache-control: public, max-age=86313600, stale-while-revalidate=17262720 age: 581498 accept-ranges: bytes wsr-cache: HIT 666127 (201) connection: close
2024-12-18 19:25:24 UTC	3910	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xm
2024-12-18 19:25:24 UTC	2713	IN	Data Raw: 69 14 6e 51 cc f7 21 52 3d 12 ca 48 11 fb 47 1f 66 2c 9e 84 7a 83 7e 9d 2f 0d 69 5a 52 95 35 e3 4e cc 10 f2 1b 34 b3 dc 5f 44 2e ed a0 33 cd 0b 74 ba b3 69 11 b3 9a 99 65 cf 90 c9 50 9e 14 c7 25 54 2d 1b 8f 97 d1 7f 53 ba f6 e4 d4 a5 31 e3 f5 7f d0 4f b9 95 8a fe e4 46 c5 d7 51 01 98 11 50 39 d0 e3 a6 8f 43 8e eb 50 ab 0d 8a ea 19 76 9b eb 90 8b 65 7d 70 8a 8c 1d 09 a0 71 5a a8 25 86 5d a3 13 c9 91 71 b2 5b a4 5b 0e 37 ca b3 b3 68 a7 77 54 b7 be 64 8c ea 24 b1 06 9c 6a c4 0c 1c 2e 6a 98 b9 ea ab 66 97 88 c9 f7 2d a9 ad 06 df 14 6c a3 42 0e a1 20 6b 64 ab 12 dd ee da 40 15 cb 13 f6 ed 3c 98 fe e5 63 88 89 a1 74 74 ac 6c 3a a3 54 60 f1 23 b7 e5 8e 93 9a 0e 20 22 a7 b7 3c 10 12 47 6e 24 9c b8 0e cc 63 41 7a 4e c5 68 4e 43 95 31 85 68 7f e9 39 7a 97 7e 51 dc Data Ascii: inQ!R=HGf,z~/iZR5N4_D.3tieP%T-S1OFQP9CPve}pqZ%]q[[7hwTd$j.jf-lB kd@<cttl:T`# "<Gn$cAzNhNC1h9z~Q
2024-12-18 19:25:24 UTC	3369	IN	Data Raw: af a8 dc 2c ba 0a 76 65 56 dd ad d1 81 2a cf a4 aa e6 73 ec a6 78 2a 13 d4 d6 98 d0 d9 b5 8e ca a4 2f 96 62 e7 2d 2c e6 b5 f6 16 c5 b9 63 dd 1c fc 6f 25 7e 5a cb a9 a7 c8 27 4f dd aa be da e3 73 af 90 dc 6d e6 63 18 ba 9a 72 c4 0b 1e 32 b1 8e 87 97 66 31 8e 23 bb 1a 53 ba 98 c6 3d 3e b4 50 8c 29 f7 bb f1 82 3d b1 f4 9d dc 90 ac 93 96 86 32 35 13 a0 9c bd b9 0c 3a 48 9d ac 76 3b 7d ae 0a 9e 99 90 8c b5 3d 69 f0 c5 6a aa 89 37 66 07 b6 48 e9 75 34 89 55 76 cc 10 32 03 89 ec c4 ea e1 8f 65 a0 ea 3d ca 77 31 2e b6 01 cd 3a b9 e9 fe 9c 59 5d b2 4e a9 1a ef 4c 5a 5d 48 16 4e 8f 50 b1 a3 4d f5 35 2b c0 0a 8f 86 3a 29 68 44 2f 59 66 97 78 8a 1b 45 86 38 d1 95 d9 6b 29 7a a9 a9 e5 4c 53 16 4b 3d c4 bd 12 d8 c4 c3 12 5c ee 51 8b 9d b9 4d 9f 53 4c ee ba 55 ca 92 6a Data Ascii: ,veVsx/b-,co%~Z'Osmcr2f1#S=>P)=25:Hv;}=ij7fHu4Uv2e=w1.:Y]NLZ]HNPM5+:)hD/YfxE8k)zLSK=\QMSLUj

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:25:23 UTC	651	OUT	GET /_next/static/media/reactorlogo.6887f6ad.png HTTP/1.1 Host: joyreactor.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://joyreactor.cc/_next/static/css/94a19acadc13a9e1.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 19:25:24 UTC	300	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 18 Dec 2024 19:25:24 GMT Content-Type: image/png Content-Length: 19929 Last-Modified: Wed, 18 Dec 2024 11:38:36 GMT Connection: close ETag: "6762b43c-4dd9" Expires: Wed, 25 Dec 2024 19:25:24 GMT Cache-Control: max-age=604800 Accept-Ranges: bytes
2024-12-18 19:25:24 UTC	16084	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 36 00 00 00 6b 08 06 00 00 00 fd db ae 34 00 00 20 00 49 44 41 54 78 9c ed bd 09 94 24 57 75 26 7c ef 7b 11 91 4b ed 4b 57 f5 de 2d a9 a5 d6 d2 52 ab b5 80 41 18 84 97 31 78 19 63 1b b0 35 5e 00 1b 8c 01 1b ec 1f fe 31 07 86 c1 e3 c1 36 3f c6 3e c6 c3 62 c4 3a 2c 66 1b 63 cf 60 0c f6 39 3e 67 6c 10 18 b4 40 b7 24 84 24 5a bd af d5 b5 65 55 65 66 2c ef dd ff dc 1b 91 99 91 91 91 a5 6e b5 ba 5a 6e c5 07 a9 ac ce 8c e5 c5 cb 78 5f dc fd 42 81 02 05 0a 5c 6a c0 e8 eb 37 ff 7b ba 24 04 00 ea f9 b4 c0 e3 42 df 76 4f 31 49 05 ba 80 88 97 ec 84 38 3d 9f 3c b5 90 37 f3 e9 cf 2e 24 c9 e5 9d 3b 8d 82 60 0b 14 78 8a e2 09 11 9b de bc bb e7 b3 27 13 e6 e8 de 36 a9 a8 e1 f5 08 da 41 3b 7f d4 e6 9c 02 f5 e6 dd 4f Data Ascii: PNGIHDR6k4 IDATx$Wu&\|{KKW-RA1xc5^16?>b:,fc`9>gl@$$ZeUef,nZnx_B\j7{$BvO1I8=<7.$;`x'6A;O
2024-12-18 19:25:24 UTC	3845	IN	Data Raw: 55 53 ac 8c c6 cf bd c8 e7 e4 79 c0 a1 75 1e ba 95 67 4a cf 84 5e 58 b0 d1 2c 34 97 8f 50 e4 9f 90 ea ba 59 70 4c 9b 57 bd 0e 07 27 27 63 45 48 4e 85 71 3f 96 2e 3b 45 0f b2 a4 96 34 da 48 19 87 29 fd de be 84 e4 5d c8 c3 1e 79 ff 21 9a bf ff 57 81 cc e1 9e 13 64 40 2b 87 df 60 bf f7 86 af 64 48 ad 15 9b 64 ec c3 ff f9 3b 92 86 d3 42 58 fb 7c 46 42 33 99 bf bb 86 9f d9 a6 23 35 1d 79 ef 2c 9d fe da f3 38 81 be 67 50 b9 a0 45 a8 4b dd 3c b0 47 fe e6 9d 92 06 d5 0f 9c f5 b0 f0 c0 ab 80 a2 24 fd 47 48 b6 15 9a 20 ef 66 df 2b df 0b c1 e2 3b fb 1c a1 0b 64 83 5a db 7e e4 cf ff 49 cf 06 19 d8 23 ef 3d 72 1e f3 1f 75 79 5f b9 b6 60 6f 55 12 7e 7f ac e7 60 72 40 e9 a8 a6 52 77 17 99 ef be fc bd 5c ed a4 67 db 1c 90 91 c0 71 b4 87 fe fc 30 cd 7c f3 97 57 9d e7 36 Data Ascii: USyugJ^X,4PYpLW''cEHNq?.;E4H)]y!Wd@+`dHd;BX\|FB3#5y,8gPEK<G$GH f+;dZ~I#=ruy_`oU~`r@Rw\gq0\|W6

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:25:23 UTC	599	OUT	GET /pics/avatar/tag/big/10891 HTTP/1.1 Host: img2.joyreactor.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://joyreactor.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 19:25:24 UTC	348	IN	HTTP/1.1 200 OK date: Wed, 11 Dec 2024 16:25:07 GMT content-type: image/jpeg content-length: 11844 last-modified: Wed, 04 Aug 2021 21:40:02 GMT expires: Mon, 06 Sep 2027 16:25:07 GMT cache-control: public, max-age=86313600, stale-while-revalidate=17262720 age: 615616 accept-ranges: bytes wsr-cache: HIT 706659 (212) connection: close
2024-12-18 19:25:24 UTC	3909	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xm
2024-12-18 19:25:24 UTC	4257	IN	Data Raw: 64 55 72 34 c0 aa b8 40 de cb 63 07 fe 62 af 7a 9e eb 70 b6 bb 67 32 74 e4 e8 8b a5 07 dd 8b 94 d5 93 d3 eb 69 3e 5c 6a c1 64 ff 00 53 3e 4a b5 fa 19 15 b6 d8 f3 00 4d 10 1e 1d b8 73 b0 54 c0 df a0 77 60 f8 75 bb ef b7 6b 6f 60 ad 21 66 0a cd a7 20 4e 7d f9 d0 67 8c f9 7c ba 51 c3 df d3 51 bf 8b ea 69 dd 1f f0 5a f3 a7 fa d7 d5 6e 17 ab 2e cf b7 81 3e df 70 b9 2c d7 7a 2b 11 31 d4 e9 e5 ea d5 9f 77 b7 0b fc ca 5d 7d 2c 8f c5 75 d5 ec 6a 72 c1 24 85 ef 6c a1 8a f7 72 59 53 9b 7c c1 41 58 94 1a b9 d5 91 08 1b 86 0b 0d 6f 76 e3 64 4b c2 aa 46 69 bc f5 9f 53 59 5e de 5a 6d 5b 8a db 46 8c 60 2c ae 39 af a5 88 76 46 00 81 53 dd f3 e1 b5 aa 99 68 cd 7f 46 54 a6 dc f7 f3 70 d7 73 5c 5d 49 33 79 5a e0 ca ce c4 78 92 d5 a6 34 57 27 1d b4 10 e8 d9 2a 1e b2 df 2d e6 Data Ascii: dUr4@cbzpg2ti>\jdS>JMsTw`uko`!f N}g\|QQiZn.>p,z+1w]},ujr$lrYS\|AXovdKFiSY^Zm[F`,9vFShFTps\]I3yZx4W'*-
2024-12-18 19:25:24 UTC	3678	IN	Data Raw: 9f 5d b5 ab 7a 68 0f f0 c6 68 4f ca d5 c7 5b c6 a7 1a 2f 53 9d 95 cd 80 16 c6 86 46 ee 8d be 9f 2f ef c3 c5 89 b5 6d 37 31 37 73 af ed c4 21 26 7d d3 73 16 6d b5 1b 99 3d 02 48 5c 5a ea 3a 03 02 73 a6 07 85 66 63 52 e4 4b ee fb a3 ed c9 b6 3d dc ad b7 c6 e6 48 ed 4b 1e 58 73 da 17 86 22 a5 53 e5 1a 92 46 a2 1f e5 67 f6 a7 ef c1 14 32 a3 53 01 df 88 43 ad 7e 1a 6e 1e ab a0 76 39 18 8a 2d b8 89 ab 9e 71 31 4f f9 71 c9 f2 54 5d 9d 6f 1d fd 08 9d d7 1d 5b 61 d2 3d 31 3e ed 36 96 9b f0 ec ad b8 73 6e 18 1d 22 9d c3 de 6f 0c 06 1c 7c dc 13 2e 4e 0a 4e 44 bb ba bc dc 6f 67 bb b8 76 9e ea e1 da 69 e4 39 96 66 3a 98 e3 b2 94 1c a6 e5 c9 1c 96 34 04 d6 82 82 bd 83 10 a2 76 d1 b7 9b eb 86 8e 3b a8 ad ae 11 75 db f3 58 a7 32 40 45 23 47 e0 ac 7b 35 10 30 9c f9 bd b4 Data Ascii: ]zhhO[/SF/m717s!&}sm=H\Z:sfcRK=HKXs"SFg2SC~nv9-q1OqT]o[a=1>6sn"o\|.NNDogvi9f:4v;uX2@E#G{50

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:25:23 UTC	649	OUT	GET /_next/static/media/icon_home.27bd4cd5.png HTTP/1.1 Host: joyreactor.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://joyreactor.cc/_next/static/css/94a19acadc13a9e1.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 19:25:24 UTC	298	IN	HTTP/1.1 200 OK Server: nginx Date: Wed, 18 Dec 2024 19:25:24 GMT Content-Type: image/png Content-Length: 1338 Last-Modified: Wed, 18 Dec 2024 11:38:36 GMT Connection: close ETag: "6762b43c-53a" Expires: Wed, 25 Dec 2024 19:25:24 GMT Cache-Control: max-age=604800 Accept-Ranges: bytes
2024-12-18 19:25:24 UTC	1338	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 11 00 00 00 10 08 06 00 00 00 f0 31 94 5f 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 03 22 69 54 58 74 58 4d 4c 3a 63 6f 6d 2e 61 64 6f 62 65 2e 78 6d 70 00 00 00 00 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 35 2e 33 2d 63 30 31 31 20 36 36 2e 31 34 35 36 36 31 2c 20 32 30 31 32 2f 30 32 2f 30 36 2d 31 34 3a 35 36 3a 32 37 20 20 Data Ascii: PNGIHDR1_tEXtSoftwareAdobe ImageReadyqe<"iTXtXML:com.adobe.xmp<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 5.3-c011 66.145661, 2012/02/06-14:56:27

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:25:23 UTC	598	OUT	GET /pics/avatar/tag/big/1481 HTTP/1.1 Host: img2.joyreactor.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://joyreactor.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 19:25:24 UTC	347	IN	HTTP/1.1 200 OK date: Thu, 12 Dec 2024 18:21:51 GMT content-type: image/jpeg content-length: 6919 last-modified: Wed, 04 Aug 2021 21:35:02 GMT expires: Tue, 07 Sep 2027 18:21:51 GMT cache-control: public, max-age=86313600, stale-while-revalidate=17262720 age: 522212 accept-ranges: bytes wsr-cache: HIT 595252 (215) connection: close
2024-12-18 19:25:24 UTC	3910	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xm
2024-12-18 19:25:24 UTC	3009	IN	Data Raw: 03 6c 96 53 b6 c4 75 65 fd 42 d5 fa fd 36 ce b2 fe 23 e0 ef 2c b6 7a 65 6a f1 bc 19 31 1a 24 2c 63 d8 c5 64 81 b4 62 ea 4e c7 b8 b1 da 2a 6d 4d 5b f7 16 8e 9c 76 3a bf d7 b1 4b 7c 6f 6f 5a f1 de ef 4c 7a 48 d2 a2 95 b4 a8 07 ad 50 d3 d6 81 c2 a0 35 40 a0 46 81 0a 00 68 05 02 34 02 f4 04 50 3c 03 d6 80 fa 74 a0 15 40 d7 d6 a7 40 2d 40 d2 28 01 f9 74 a0 14 08 0a 07 68 3a e8 28 af 17 25 cf 71 3c 64 3d dc dc 85 88 6e 08 a9 7b bb 31 d0 2a a8 d4 93 f0 ad 4d 6d 62 ef 22 9d e4 3f 91 fe dd b2 31 a0 06 3c 85 5f f4 71 84 32 3c ae cb 70 ad d5 50 11 ad cf ec 36 35 db 5e 27 1b cb 6f 65 6f 1f cb f9 fc d6 95 f2 b3 17 2a 38 e2 62 50 29 89 43 05 04 1d a7 eb 31 b1 b6 9e be 86 b7 e1 22 75 f5 51 39 56 89 d2 67 99 99 66 3b 81 75 f7 5e 4b df db a9 f5 ae ac 7a ad 1e 27 24 2a b1 Data Ascii: lSueB6#,zej1$,cdbNmM[v:K\|ooZLzHP5@Fh4P<t@@-@(th:(%q<d=n{1Mmb"?1<_q2<pP65^'oeo8bP)C1"uQ9Vgf;u^Kz'$

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:25:23 UTC	597	OUT	GET /pics/avatar/tag/big/227 HTTP/1.1 Host: img2.joyreactor.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://joyreactor.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 19:25:24 UTC	347	IN	HTTP/1.1 200 OK date: Mon, 16 Dec 2024 02:30:19 GMT content-type: image/jpeg content-length: 8932 last-modified: Mon, 09 Aug 2021 07:45:01 GMT expires: Sat, 11 Sep 2027 02:30:19 GMT cache-control: public, max-age=86313600, stale-while-revalidate=17262720 age: 233704 accept-ranges: bytes wsr-cache: HIT 269694 (214) connection: close
2024-12-18 19:25:24 UTC	3910	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xm
2024-12-18 19:25:24 UTC	4257	IN	Data Raw: 06 d8 ae 9c 03 bb 39 50 57 bb 2a 6b df 86 7a 29 55 dd a5 cb 33 2c 6d 38 64 15 dc 64 ca b9 8a 76 62 74 99 48 c1 2f 50 b3 b9 63 18 e6 4a 44 d5 69 52 45 59 02 8a 0c b2 03 8f 7e 33 d3 2d 38 03 14 7c be 7c 9b 62 22 27 e5 12 a5 e0 6a d4 05 a5 05 38 e5 85 4d 0c 96 8e fa 4c c2 5b 39 14 57 70 91 8a ee 93 9a 72 34 20 9a 9a 76 53 09 c3 91 2d 63 38 cf d6 ab 85 ff 00 94 24 63 31 e9 62 af 71 2e d8 d1 d1 2f 01 4c c8 59 dc 38 b8 e7 45 5d a8 cb bf fb a1 8d 41 3d 98 ad cf 1c 94 8b c3 54 24 49 14 3a f0 0b b8 0e 04 80 69 ef c6 6a 46 ce ab d3 e2 4f 65 38 e1 4b 9f 12 36 11 43 ec c1 6c 18 54 d4 dd 42 28 78 63 90 48 ee 1a 54 57 4c 03 88 2c 24 67 5c bb 31 a7 44 25 c9 24 01 5f 16 06 9d 84 d2 2a 50 53 c3 a5 71 de 78 09 5d f8 31 db 38 50 94 60 41 12 1f 78 52 33 a7 b7 01 57 d0 85 9d Data Ascii: 9PWkz)U3,m8ddvbtH/PcJDiREY~3-8\|\|b"'j8ML[9Wpr4 vS-c8$c1bq./LY8E]A=T$I:ijFOe8K6ClTB(xcHTWL,$g\1D%$_PSqx]18P`AxR3W
2024-12-18 19:25:24 UTC	765	IN	Data Raw: 10 0b 46 73 e6 be 5b f5 8b 7a 66 63 b5 46 27 4a 99 03 3d 6b fe 2c 7a 1f 1d 7e 26 6b fe 46 7c cd 20 19 fb 00 c5 f0 2e 8f 12 f1 c6 be cc 76 0a ad e8 47 a9 3c aa d3 c5 a6 3b 0b fb f0 76 21 e5 c7 8e 7a c7 87 cc 7d b8 0c 3f 50 08 b6 ff 00 c9 ba 76 ea 53 7c 75 e6 57 67 ea 0d 76 e7 b7 b7 0d fd 4c 9d be 4f d0 b6 55 de da f9 5b db f6 60 c7 83 1d 06 c9 fc bc 54 af 96 2d 3f af 86 16 85 1a ae 91 eb e5 1e cc 68 5e 04 a2 13 6f e6 be de 4f 93 2d db 77 ff 00 9b 87 67 7e 2b 24 98 1c 7e a7 9c 69 bb e1 af a6 e4 73 29 9e b5 f8 3d fa e2 9f 50 16 5d 73 f6 36 ee 7f 98 fe af 2b 6e 8b fa 9b 7f a6 b8 74 06 01 2f 33 d1 b6 ef f6 fa 6e 1f a9 b3 6e bf c3 f1 fd f8 ea 39 79 02 b0 f4 94 8e be 83 46 af a5 f5 15 d5 3c b4 f7 fd 98 9c 0c cd 3f 45 e4 72 4f 26 b4 a2 69 ce a7 97 2a 73 b3 c3 3f Data Ascii: Fs[zfcF'J=k,z~&kF\| .vG<;v!z}?PvS\|uWgvLOU[`T-?h^oO-wg~+$~is)=P]s6+nt/3nn9yF<?ErO&i*s?

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:25:23 UTC	630	OUT	GET /pics/post/Sakimichan-artist-Iono-(Pokemon)-7823633.jpeg HTTP/1.1 Host: img10.joyreactor.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://joyreactor.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 19:25:24 UTC	341	IN	HTTP/1.1 200 OK date: Wed, 18 Dec 2024 19:17:37 GMT content-type: image/jpeg content-length: 326364 last-modified: Sun, 19 Feb 2023 09:25:05 GMT expires: Mon, 13 Sep 2027 19:17:37 GMT cache-control: public, max-age=86313600, stale-while-revalidate=17262720 age: 466 accept-ranges: bytes wsr-cache: HIT 1 (417) connection: close
2024-12-18 19:25:24 UTC	3916	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 02 01 01 01 01 01 02 01 01 01 02 02 02 02 02 04 03 02 02 02 02 05 04 04 03 04 06 05 06 06 06 05 06 06 06 07 09 08 06 07 09 07 06 06 08 0b 08 09 0a 0a 0a 0a 0a 06 08 0b 0c 0b 0a 0c 09 0a 0a 0a ff db 00 43 01 02 02 02 02 02 02 05 03 03 05 0a 07 06 07 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a 0a ff c0 00 11 08 04 c1 03 2b 03 01 22 00 02 11 01 03 11 01 ff c4 00 1e 00 00 01 04 03 01 01 01 00 00 00 00 00 00 00 00 00 06 04 05 07 08 02 03 09 01 00 0a ff c4 00 5a 10 00 01 03 02 04 03 05 05 05 04 07 04 08 03 02 0f 01 02 03 04 05 11 00 06 07 21 12 31 41 08 13 22 51 61 14 32 71 81 91 09 23 Data Ascii: JFIFCC+"Z!1A"Qa2q#
2024-12-18 19:25:24 UTC	4257	IN	Data Raw: 96 10 ca a0 a7 7b 26 de 84 62 47 7f 2e a8 73 6b 73 d6 d8 43 27 2d 5c 7f 56 3d 6f 88 cc a1 6f ea 2f 23 65 1a cb a2 1b 10 a4 7c ed 86 e9 54 52 05 80 fa 8e 78 92 65 65 b2 92 40 67 ae 1a e6 e5 c2 49 21 04 7a 11 8f 09 01 5a 3a 85 c3 92 8e 25 d2 4a 7d e6 ec 7c c6 10 48 a6 b8 37 48 bf 9e 24 09 d9 75 48 27 c1 7b 73 db 0c f3 68 5c cf 0d ad d3 ae 36 0f 05 07 25 33 9b c9 06 bb 1f 82 fe 1b 79 e3 43 ac 6f 71 f5 c1 1c ca 4f 77 70 5b bf ae 1a e4 c1 29 b8 17 b7 a8 c6 e3 29 43 b9 84 26 97 63 8b 71 7a ef 84 cf 47 b7 88 0e 98 74 71 8e 13 c2 05 f0 9d 6c f0 93 6b 73 c6 84 15 ae c9 ad c6 8f 31 bf 9e 35 2d b5 7b c1 3f 2c 39 b8 cf 42 30 9d c6 2c 4e d8 d4 b5 79 21 5a 38 85 ed 6f 2c 6b 53 7e 96 c2 c5 36 01 d8 63 5a 91 be db 63 42 3c 17 92 42 de db 7e 43 1a 5c 6b f1 5b e3 85 ab 6f Data Ascii: {&bG.sksC'-\V=oo/#e\|TRxee@gI!zZ:%J}\|H7H$uH'{sh\6%3yCoqOwp[))C&cqzGtqlks15-{?,9B0,Ny!Z8o,kS~6cZcB<B~C\k[o
2024-12-18 19:25:24 UTC	4257	IN	Data Raw: b8 9a d1 db 1a 9c e1 61 ce 17 e8 7a 76 49 4b 4c 23 9a 57 3a df d6 2b 97 dc 8f 08 fc 57 e4 0e 3b 09 76 56 a6 6b 86 a8 49 ed 91 9e b2 fb 88 cb d0 26 ba 8d 32 a1 4e 1c 41 b4 25 44 09 ce 03 ef 2c 0d 90 7a 12 48 e4 2d 74 2a f1 d0 1b 22 dd 30 15 55 61 73 b2 b5 12 c8 f2 6f ba 8a 33 16 57 a6 d1 e9 a8 a5 d2 29 cc 45 8a c3 61 b6 23 c7 68 21 0d a0 72 4a 52 00 00 0f 21 b6 21 ed 40 a5 84 a5 67 bb e5 cb 16 07 38 30 0c 72 7a e2 19 d4 28 a0 85 82 45 fe 18 c5 3b b5 5a bc 69 65 5f f3 95 3f 89 e7 5d 70 12 49 24 9c 47 39 8e 02 41 27 87 af 96 25 fc e9 10 02 bd b1 19 e6 76 82 54 45 ba 61 98 71 b2 9a 06 6a 14 71 59 a5 85 92 10 84 82 09 be dc f0 03 99 34 b2 2c 99 4b ae 65 5e 1a 7d 4a f7 5f 05 c3 4f 9f e3 48 eb fc 43 7f 8f 2c 4a 35 36 be f1 57 37 db 0d 2f 32 92 e8 b8 02 f8 d1 da Data Ascii: azvIKL#W:+W;vVkI&2NA%D,zH-t*"0Uaso3W)Ea#h!rJR!!@g80rz(E;Zie_?]pI$G9A'%vTEaqjqY4,Ke^}J_OHC,J56W7/2
2024-12-18 19:25:24 UTC	4257	IN	Data Raw: 15 b1 60 db 48 4f 0a 47 e5 bf a9 38 6f ab 01 dd 9f 2b 1c 3c 49 25 0c 85 2f 7b 8e 98 62 ad ba 94 b6 77 e6 0e 01 e6 a7 e4 83 33 69 bb 0a f8 e2 1c d4 3f 09 5e d8 97 33 63 e0 32 52 0e 21 7d 4a 96 08 71 3c 5f 1c 30 a7 06 ea 27 95 0f e7 77 d2 82 bb 7a e2 30 cc 6f 25 45 42 dc bd 70 7d 9e 25 27 c7 65 75 c4 65 98 65 d9 6a 49 57 c2 d8 6a d1 dd 52 c0 49 70 4c 35 16 82 ae b0 6f d3 6c 33 c9 4f 76 f5 c8 db 8b 06 74 dc a7 16 b7 4c 4c c4 d4 5c 69 76 3d e0 28 04 5e e6 d6 df 95 ad f3 be 05 aa 31 38 15 c3 c5 7b 13 63 6c 0a 27 63 dc 40 3b 2b 55 3c 4e 6c 6d 71 e6 9c 28 d0 9a 98 c0 43 89 b8 b7 cf 00 99 86 94 e6 9e ea 92 02 56 04 6a cb 45 c4 d8 d8 07 01 b1 3f 3e 7f 1b e2 45 cb 8d 14 90 c1 e6 00 36 27 03 9d a6 28 e5 39 62 93 9a 9a 47 de 53 ea 41 25 63 98 42 d3 7b 7d 51 f9 e3 66 Data Ascii: `HOG8o+<I%/{bw3i?^3c2R!}Jq<_0'wz0o%EBp}%'eueejIWjRIpL5ol3OvtLL\iv=(^18{cl'c@;+U<Nlmq(CVjE?>E6'(9bGSA%cB{}Qf
2024-12-18 19:25:24 UTC	4257	IN	Data Raw: d8 0b 1c 34 a7 6e aa 37 0b 90 14 1d af ff 00 68 ce 9a e5 7a 9b b4 7c 99 09 ca fb c8 59 4b 8e c6 50 4b 29 b1 de ce 2b 65 7f 76 ff 00 1c 44 b4 af b4 6e 8d 56 a9 06 73 66 44 91 0d 85 2b fe f1 15 f0 e9 48 f3 29 d8 fd 2f 89 1a 81 d8 87 48 32 85 39 1f d2 b8 ea ae d4 6c 0b af 3c b5 21 94 91 d1 08 04 5c 7a ab 9f 90 e5 86 4d 43 ec 7d a3 d9 a2 94 fc 4a 2e 5b 66 93 30 a4 98 f2 e1 95 0e 05 74 e2 4d ec a1 e6 30 c4 be 16 8b 14 c6 8e 99 cf 37 62 99 b4 c7 52 b2 fe 7a ca 08 a8 e5 0a 8b 32 99 90 d9 2d b8 95 6c 09 e5 7b 6f d2 de 62 c7 ae d8 5d 0f 2e aa ab 50 6a 12 d2 78 96 e8 4a b8 47 21 cc e2 a1 76 4f 73 39 68 97 68 75 69 1d 79 d5 f7 33 9d ee 8b 69 51 2d 95 14 95 21 d4 fc 40 e7 e9 e9 8b df a7 74 af 6f ac 2e 6a 93 b3 40 6f fc 44 7f 85 f0 ae 56 08 1e 48 e6 ad 54 ce ed 62 00 Data Ascii: 4n7hz\|YKPK)+evDnVsfD+H)/H29l<!\zMC}J.[f0tM07bRz2-l{ob].PjxJG!vOs9hhuiy3iQ-!@to.j@oDVHTb
2024-12-18 19:25:24 UTC	4257	IN	Data Raw: bf 4c 59 6c a9 97 c6 5f a7 a1 b5 fb ee a4 29 5b 7e 23 cc 7c b6 c3 3e 94 64 2a 7c f9 a9 91 5c aa 35 4e 8a cb 0b 74 be f2 09 03 85 25 41 21 23 75 2d 64 04 a5 3d 49 b9 b0 18 2e 99 53 91 39 96 65 cc 01 3d c3 08 6a 2b 08 d9 28 40 3b 93 ea 49 51 27 9a 94 49 f8 02 f9 0c b2 88 c7 2d d3 56 b5 ac 04 85 e5 59 f6 a3 d3 9e 71 d4 78 43 64 5b e5 8a 75 db b3 3e 33 36 b9 97 b4 fe 23 e9 3c 04 cb 92 12 6e 2c ae 57 fe eb 6b 3f de 18 b4 5a 97 9a 1b a2 e5 c5 cd 32 9b 65 a6 fe f2 53 ae 9d 90 ca 41 2b 3e 9b 0c 51 75 a2 56 ad ea 5c ad 4a cc 60 7b 34 94 83 4f 85 bf 81 9d 82 38 bf f9 68 46 c3 f7 89 3c ed 86 d4 d0 e6 d9 68 e9 32 b2 dc ca 7e ca ab 92 e5 2e 3c 87 50 42 16 78 1a 0a fc 5e 76 ff 00 1c 16 e5 6c c3 a2 ee e6 c6 53 a9 b9 dd 14 ba 62 24 71 35 12 3c 77 1f 91 24 24 04 95 25 08 Data Ascii: LYl_)[~#\|>d*\|\5Nt%A!#u-d=I.S9e=j+(@;IQ'I-VYqxCd[u>36#<n,Wk?Z2eSA+>QuV\J`{4O8hF<h2~.<PBx^vlSb$q5<w$$%
2024-12-18 19:25:24 UTC	4257	IN	Data Raw: a2 69 44 7c 85 96 62 3e 89 73 24 3c fd 6a a2 ed 85 90 a2 02 23 b2 01 d8 14 a6 eb 70 f8 95 c4 10 90 94 85 15 c9 5d 87 32 a5 23 4c 3b 28 e7 cc f7 53 54 57 6a 73 a3 7b 04 07 12 b0 be f6 4b f7 6d 3d d9 ea 10 d1 5a bf 3c 47 4f 51 11 4f b2 4b 7b 01 61 b6 3a b7 09 49 25 4e 1f 92 40 6c c3 a7 8e 9f 4d 55 76 ba 47 53 54 93 11 b1 22 c6 dd 0a 1c 8d 47 b0 b9 1f 96 17 c6 a4 05 38 9b a7 ae 1c 92 d2 12 7d d0 3e 58 df 15 85 b8 f2 52 11 d7 cb 17 3b d8 24 ce 08 a7 4a a1 b7 02 bf 12 6b 8d f8 50 f2 49 f8 5f 17 81 19 aa 9a ec dc bb c0 b4 84 3b 48 ee 09 2b e6 4d d4 07 e5 f9 e2 a4 e9 8e 53 33 5d 6f 8a e0 5c 74 c5 e5 ec 97 a2 b4 3c c9 09 ca de 60 8c 99 8f 47 a6 3c c5 25 b7 47 12 63 b8 a4 14 f7 a0 1f c6 36 09 3d 37 b6 e7 14 8e 2c 96 06 35 b2 9d 4b 6f f3 56 ae 18 70 a3 7c 92 48 34 Data Ascii: iD\|b>s$<j#p]2#L;(STWjs{Km=Z<GOQOK{a:I%N@lMUvGST"G8}>XR;$JkPI_;H+MS3]o\t<`G<%Gc6=7,5KoVp\|H4
2024-12-18 19:25:24 UTC	1822	IN	Data Raw: 82 96 69 cf 70 2a e9 45 c9 d5 3a cc b4 c1 a4 40 76 4b ce 6c 12 ca 38 94 7f c0 7a e2 52 c8 fd 94 2a 73 52 99 b9 ce 42 99 6f 98 85 10 8e 2b 7f 13 87 61 fd db fc 71 61 e2 e5 9c b7 96 da 08 81 4c 8e cf 0a 02 01 6d a4 a7 61 d3 61 cb 0c 99 af 3b 40 a2 c6 52 dc 79 20 81 70 2f 81 9f 52 48 b0 4c a2 c2 a1 8f bd 29 b9 42 d1 b2 16 57 c8 b4 f5 47 a4 40 8b 09 16 f1 16 53 75 af fb 4a 3b ab e6 71 11 6a f6 77 a2 d3 50 eb 09 94 a5 9b 10 47 15 b1 9e b1 eb eb 6d 21 d6 63 4a 04 ef b8 56 2b 8e 72 ce d3 f3 04 95 ad 6f 28 f1 1d f7 c0 8f 98 85 ad 44 d1 b1 b9 58 12 5c f9 99 58 ab d4 54 a6 99 1b 5c 02 77 c0 e3 71 9d 79 5c 56 fa 0c 2b 6e 13 92 1d ef 1c df 7d cd b0 e1 16 0a 1b 00 25 3b e2 10 1e e3 72 94 39 d7 37 49 e1 52 ec 90 a5 24 61 ca 34 44 a3 7e 1d f0 a2 2c 25 2c db 86 df 01 81 Data Ascii: ipE:@vKl8zRsRBo+aqaLmaa;@Ry p/RHL)BWG@SuJ;qjwPGm!cJV+ro(DX\XT\wqy\V+n}%;r97IR$a4D~,%,
2024-12-18 19:25:24 UTC	4257	IN	Data Raw: aa 36 d1 52 5a 4f 0a 8a 76 b8 f5 fa 9b 1e 9f 3c 3e 9e 2e e5 f9 aa 26 07 89 ba 86 60 c7 7b 24 a9 93 4a 28 10 e9 4c 36 84 21 4b 51 1e 35 93 b9 f5 27 16 bf b2 fb 50 a1 e6 a6 5c 7d 56 25 bf 0a 79 1f f1 c5 67 c9 88 0a 5b 4d c5 36 bd 89 23 a0 e9 8b 07 a1 6a a9 d3 2b d0 cc 5b a9 d5 10 0a 00 ba 94 93 e9 d0 7c 71 59 ad 0e 92 17 01 ba e9 a3 12 82 26 f7 9d 60 55 ea c8 cf c6 7a 10 4b 8e b6 d8 52 6c 38 ee 49 fe 78 47 9a 68 cf 2d e5 b7 72 50 3a f0 f4 c2 1c 8b 26 4c 38 8d f7 ce f0 95 01 c4 91 fc cf 5c 15 d5 1a 45 4e 05 db 3e 20 2e 13 6f 78 62 98 22 73 25 b9 48 e7 c5 80 71 ec 8a 8d 67 d2 a1 c1 0a 5b 80 83 fc 27 73 86 5a b3 8c b7 15 7d e3 3d db 64 12 a4 5f de f8 e1 f3 33 c7 91 16 59 e2 59 16 26 d6 4e e3 00 19 ae a0 ea 1a 52 a4 ac 21 09 b9 0d aa db 81 d5 47 0d 58 cb 91 65 Data Ascii: 6RZOv<>.&`{$J(L6!KQ5'P\}V%yg[M6#j+[\|qY&`UzKRl8IxGh-rP:&L8\EN> .oxb"s%Hqg['sZ}=d_3YY&NR!GXe
2024-12-18 19:25:24 UTC	4257	IN	Data Raw: c5 c3 60 00 29 f2 24 91 7e 86 d8 c3 43 58 52 c9 aa 6c fc aa 0c 7e 10 6d f4 a0 9f 79 41 23 6f 51 89 63 35 d4 59 89 a2 53 5b 71 c4 a4 bb 4b 52 90 9b f3 e2 75 29 1f ae 01 f3 85 11 70 b3 2a 20 46 48 37 20 b6 40 ff 00 56 c2 7d 58 cc 6f 3d 42 66 8e 87 2c 95 2d b4 00 39 70 36 36 fc ed 89 a9 e1 32 4e 0a 47 8b 56 b6 2a 67 81 b9 08 38 54 0b 6a b2 49 e2 5e c9 18 98 f4 33 21 4c cc 6e 34 c2 5a f0 71 dd d7 14 3d 2e 46 21 ac b7 4f 72 a3 57 41 3e 24 b6 6c 3e 38 bf 9d 88 f4 6d 0a cb 70 f3 55 62 10 4c 62 9e 26 02 d3 b3 cb 26 f7 f5 48 b7 cf 0c 2b e5 11 42 5c 55 12 08 64 9a 60 c6 0b 92 83 73 0e 5c 9d a6 35 88 b1 14 d5 bd a5 08 7a 39 f2 69 5d 08 e8 6f 71 be 2c 6e 84 33 fb 12 43 52 25 10 64 b8 13 c6 a3 cd 17 e9 f1 38 18 ed 0b 94 db a8 66 66 eb 8d 30 2f 09 48 29 16 05 45 be 01 Data Ascii: `)$~CXRl~myA#oQc5YS[qKRu)p* FH7 @V}Xo=Bf,-9p662NGV*g8TjI^3!Ln4Zq=.F!OrWA>$l>8mpUbLb&&H+B\Ud`s\5z9i]oq,n3CR%d8ff0/H)E

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:25:25 UTC	595	OUT	GET /pics/avatar/tag/big/7 HTTP/1.1 Host: img2.joyreactor.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://joyreactor.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 19:25:26 UTC	347	IN	HTTP/1.1 200 OK date: Thu, 12 Dec 2024 10:23:49 GMT content-type: image/jpeg content-length: 8747 last-modified: Fri, 06 Aug 2021 03:45:02 GMT expires: Tue, 07 Sep 2027 10:23:49 GMT cache-control: public, max-age=86313600, stale-while-revalidate=17262720 age: 550895 accept-ranges: bytes wsr-cache: HIT 636966 (202) connection: close
2024-12-18 19:25:26 UTC	3910	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xm
2024-12-18 19:25:26 UTC	4257	IN	Data Raw: 43 b7 08 d4 85 b5 73 2a e3 a6 ea 18 58 77 bb bc 0b 34 e2 9f ca c7 34 35 49 b6 54 66 7d 80 fd 1b 98 3c 25 32 07 48 8c ed 77 4d bb 38 29 5a 74 94 4d 6d 2b 51 82 6e 33 e2 3a d4 3a 45 b6 e8 91 7a b5 ad 2f 5a 9e e8 23 32 09 dd 28 ab a3 66 ce fc 7a 6e 2e 9b 91 d9 e5 2d 67 e3 77 7e bc 36 c3 e4 2a af 52 9c a4 88 d9 95 a6 67 42 f2 63 31 4e 77 88 e7 dd 1d bb c1 37 28 9a 56 d4 88 e1 73 0e dc b7 a3 a4 72 24 b8 8d cd 0a 0f 81 52 3d 71 4e 7a 6a fa 2c b1 1c b7 c5 09 aa 89 d4 cc 60 ae c8 ad 3d 3e 6b 76 d3 aa ca 8b ec 11 5b 2f 20 62 82 04 57 9e 3c e3 bd 1d a3 76 2f 73 12 c2 58 ed 8e 47 40 24 46 fc 20 03 86 38 c3 00 c0 f4 88 8f 48 85 04 a5 39 48 75 42 03 89 4a 8c 88 9f 44 00 13 82 d9 ea 87 51 9d c1 4c e5 8c a0 a8 8f 46 3d a6 09 5a 8a 5a 58 24 9d d1 e2 ff 00 10 ea 7a 4e 81 Data Ascii: CsXw445ITf}<%2HwM8)ZtMm+Qn3::Ez/Z#2(fzn.-gw~6RgBc1Nw7(Vsr$R=qNzj,`=>kv[/ bW<v/sXG@$F 8H9HuBJDQLF=ZZX$zN
2024-12-18 19:25:26 UTC	580	IN	Data Raw: 37 71 f3 a5 05 ec 14 7a b6 d2 dd 45 25 56 9d b8 3f 6e ab 29 35 34 e1 87 12 55 92 72 04 e5 f0 e3 88 8e 98 7a bd 9b 69 c5 ca 32 84 b7 ae a5 b4 86 6e 97 2b ad 4e 29 c6 f4 3d 99 52 b4 ae fd 9c f9 13 32 b0 cb 1d 09 72 07 a9 a7 65 17 1e ab a7 b7 ec c7 ce bd 26 3f e4 fa a7 df ff 00 28 8a 3d c2 85 28 bb a2 ee 64 1f 08 e1 3b 84 4b f3 2d 3d ee 8a fb 4b d2 39 e9 7a a7 0b df ca 02 eb ac f4 eb 15 16 ed 29 73 a5 af 68 85 d3 bf 91 c2 10 b1 b0 c8 85 09 74 e1 0e 3a 96 1c 7d 68 2a 4d 6e 75 25 6f 4b d4 1d 61 7a e2 9d a9 6c 92 e9 de bc bc 19 b7 f2 2a c1 74 b6 e9 ca eb a5 d5 21 aa eb fd 57 b6 9a 70 25 c3 6f 2e 54 05 4f 62 8e 26 5b a3 e7 da f6 a0 b2 2f b6 b8 7c a7 b0 d3 f1 15 9b 6a 2b 75 36 79 16 e3 46 5a 84 79 e9 33 41 08 a9 49 88 d4 98 43 2e 88 41 40 30 e8 82 a1 40 26 20 a8 Data Ascii: 7qzE%V?n)54Urzi2n+N)=R2re&?(=(d;K-=K9z)sht:}hMnu%oKazlt!Wp%o.TOb&[/\|j+u6yFZy3AIC.A@0@&

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:25:25 UTC	598	OUT	GET /pics/avatar/tag/big/1243 HTTP/1.1 Host: img2.joyreactor.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://joyreactor.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 19:25:26 UTC	347	IN	HTTP/1.1 200 OK date: Thu, 12 Dec 2024 18:21:51 GMT content-type: image/jpeg content-length: 7697 last-modified: Mon, 09 Aug 2021 07:45:01 GMT expires: Tue, 07 Sep 2027 18:21:51 GMT cache-control: public, max-age=86313600, stale-while-revalidate=17262720 age: 522214 accept-ranges: bytes wsr-cache: HIT 595524 (215) connection: close
2024-12-18 19:25:26 UTC	3910	IN	Data Raw: ff d8 ff e1 00 18 45 78 69 66 00 00 49 49 2a 00 08 00 00 00 00 00 00 00 00 00 00 00 ff ec 00 11 44 75 63 6b 79 00 01 00 04 00 00 00 3c 00 00 ff e1 03 2e 68 74 74 70 3a 2f 2f 6e 73 2e 61 64 6f 62 65 2e 63 6f 6d 2f 78 61 70 2f 31 2e 30 2f 00 3c 3f 78 70 61 63 6b 65 74 20 62 65 67 69 6e 3d 22 ef bb bf 22 20 69 64 3d 22 57 35 4d 30 4d 70 43 65 68 69 48 7a 72 65 53 7a 4e 54 63 7a 6b 63 39 64 22 3f 3e 20 3c 78 3a 78 6d 70 6d 65 74 61 20 78 6d 6c 6e 73 3a 78 3d 22 61 64 6f 62 65 3a 6e 73 3a 6d 65 74 61 2f 22 20 78 3a 78 6d 70 74 6b 3d 22 41 64 6f 62 65 20 58 4d 50 20 43 6f 72 65 20 36 2e 30 2d 63 30 30 32 20 37 39 2e 31 36 34 34 36 30 2c 20 32 30 32 30 2f 30 35 2f 31 32 2d 31 36 3a 30 34 3a 31 37 20 20 20 20 20 20 20 20 22 3e 20 3c 72 64 66 3a 52 44 46 20 78 6d Data Ascii: ExifII*Ducky<.http://ns.adobe.com/xap/1.0/<?xpacket begin="" id="W5M0MpCehiHzreSzNTczkc9d"?> <x:xmpmeta xmlns:x="adobe:ns:meta/" x:xmptk="Adobe XMP Core 6.0-c002 79.164460, 2020/05/12-16:04:17 "> <rdf:RDF xm
2024-12-18 19:25:26 UTC	3787	IN	Data Raw: 09 07 29 e3 df dd 3d d8 93 db 15 6b 00 1b c1 9c 91 9f b3 5c 47 c6 95 95 d8 c9 19 0d 0e 91 89 72 f7 e2 dd 1b 60 1d bf cf 12 c8 52 bb 84 8c 80 10 a0 6b f6 62 09 79 55 36 6d 83 11 af dd 9d 30 3a 63 8b 59 59 b5 4b 8a 5c 61 3f 29 78 94 d7 69 82 0c 6b a6 3b bc b2 2f ed 68 53 a3 49 56 8e d6 e5 9e 70 50 22 27 28 69 27 4f e9 ec 1b 8b 9b 57 63 4c f3 9b cc 06 d6 58 c8 e8 46 7c 71 92 b5 a3 6c 8f 26 9b 67 1a 41 00 08 03 56 8c 44 53 d0 0d 10 20 a0 25 8a 8d 09 88 26 06 24 92 82 f2 01 58 04 c7 8d 2a 64 b1 dd 07 bb 01 4a 2b 0d 94 ea 6d da 54 92 01 27 39 d3 4c f1 24 21 a1 b9 a0 78 44 ed 07 21 9f db 84 08 5a 4a c3 70 3a 80 73 c8 48 ee 9e fc 04 af 4c 06 4d 84 b1 cb 71 50 67 bf 2c 48 50 e9 bd 46 b4 72 ed ea 32 1d 25 08 e1 20 e0 d8 71 f3 77 ae 7a 07 ac 6d fd 59 d6 6e 2e ad ea Data Ascii: )=k\Gr`RkbyU6m0:cYYK\a?)xik;/hSIVpP"'(i'OWcLXF\|ql&gAVDS %&$X*dJ+mT'9L$!xD!ZJp:sHLMqPg,HPFr2% qwzmYn.

Timestamp	Bytes transferred	Direction	Data
2024-12-18 19:25:25 UTC	597	OUT	GET /pics/avatar/user/631260 HTTP/1.1 Host: img2.joyreactor.cc Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://joyreactor.cc/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-18 19:25:26 UTC	345	IN	HTTP/1.1 200 OK date: Thu, 12 Dec 2024 01:53:42 GMT content-type: image/gif content-length: 2047 last-modified: Mon, 20 Sep 2021 10:40:03 GMT expires: Tue, 07 Sep 2027 01:53:42 GMT cache-control: public, max-age=86313600, stale-while-revalidate=17262720 age: 581503 accept-ranges: bytes wsr-cache: HIT 86546 (201) connection: close
2024-12-18 19:25:26 UTC	2047	IN	Data Raw: 47 49 46 38 39 61 32 00 32 00 f7 00 00 ff fa b0 c7 55 92 01 01 01 fe fe fe 60 5d 5c 61 b0 49 ff fc cf 45 63 a2 8c cb 00 99 94 9f 5e 55 20 8f 54 08 db ed f7 f7 ec 1f 5c ad a3 4f 35 78 ee ad 00 fe fb 91 e9 ea 49 9d 95 73 55 26 17 96 8e 14 d5 c8 dc 32 31 2d ff fd e7 ed f7 fe 33 6c 32 99 0e 22 96 cb df cd 0c 2b a8 d4 43 cc 86 01 30 2b 10 30 69 4e e7 ef f9 9d ae c8 c9 bd ce da 5d 2a 82 76 63 c4 b1 8b 3c 3b 48 88 c5 b5 8b 39 79 22 13 0c d6 ab 63 d2 cd 8f ce ce af df ec b0 d6 5b 4d ef de ac d7 ac 03 ea ea e8 dd 38 83 f1 be 30 e4 95 00 24 1e 23 d5 db e3 d6 ad 2e 14 2a 2f 13 13 15 d1 e3 89 1b 1e 12 f6 c3 c6 c0 91 27 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: GIF89a22U`]\aIEc^U T\O5xIsU&21-3l2"+C0+0iN]vc<;H9y"c[M80$#./'