Edit tour

Windows Analysis Report
https://en.newsnowbangla.com/archives/69912

Overview

General Information

Sample URL:	https://en.newsnowbangla.com/archives/69912
Analysis ID:	1580114
Infos:

Detection

HTMLPhisher, TechSupportScam

Score:	76
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Yara detected HtmlPhish54

Yara detected TechSupportScam

AI detected landing page (webpage, office document or email)

Detected suspicious crossdomain redirect

Form action URLs do not match main URL

HTML body contains low number of good links

HTML page contains hidden javascript code

HTML title does not match URL

Javascript checks online IP of machine

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4456 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6188 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2016,i,16803297982749172867,4069709086746350106,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 3668 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5776 --field-trial-handle=2016,i,16803297982749172867,4069709086746350106,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4120 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://en.newsnowbangla.com/archives/69912" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_170	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security

HTML

Source	Rule	Description	Author
2.9.pages.csv	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security
1.2.pages.csv	JoeSecurity_HtmlPhish_54	Yara detected HtmlPhish_54	Joe Security
1.0.pages.csv	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security
1.6.pages.csv	JoeSecurity_TechSupportScam	Yara detected TechSupportScam	Joe Security

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://en.newsnowbangla.com/archives/69912

SlashNext: detection malicious, Label: Scareware type: Phishing & Social Engineering

Antivirus detection for URL or domain

Source: https://newsite.omia.com.co/?p=5a1c2ec91dcf9196971e5cbca962e778&u=cd8c11a7a1ec59451547120b4a4c505517520f4510115442035814450c1244544f540e5c4a5c5b425c5a11024816421c02430a4757135500510e1052525052500a015701	Avira URL Cloud: Label: malware
Source: https://newsite.omia.com.co/?p=5a1c2ec91dcf9196971e5cbca962e778&u=cd8c11a7a1ec59451547120b4a4c505517	Avira URL Cloud: Label: malware
Source: https://infosystemsllc.com/?ctkv2ol3kl6c738a3ga0	Avira URL Cloud: Label: malware

Phishing

Yara detected HtmlPhish54

Source: Yara match

File source: 1.2.pages.csv, type: HTML

Yara detected TechSupportScam

Source: Yara match	File source: 2.9.pages.csv, type: HTML
Source: Yara match	File source: 1.0.pages.csv, type: HTML
Source: Yara match	File source: 1.6.pages.csv, type: HTML
Source: Yara match	File source: dropped/chromecache_170, type: DROPPED

AI detected landing page (webpage, office document or email)

Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555	Joe Sandbox AI: Page contains button: 'Scan' Source: '1.1.pages.csv'
Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555#	Joe Sandbox AI: Page contains button: 'Scan' Source: '2.7.pages.csv'
Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555#	Joe Sandbox AI: Page contains button: 'Scan' Source: '2.8.pages.csv'

Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555	HTTP Parser: Form action: https://login.microsoftonline.com/common/oauth2/v2.0/authorize?client_id=ee272b19-4411-433f-8f28-5c13cb6fd407&redirect_uri=https%3A%2F%2Fsupport.microsoft.com%2Fsignin-oidc&response_type=code%20id_token&scope=openid%20profile%20offline_access&response_mode=form_post&nonce=638705931449858957.MTRkZDI0MTgtODA0OC00M2UxLThiOGEtYTRiNzQyZjI3YTNlZmM3MTc5YzUtMjFmYS00N2JhLWE2YjQtN2JmOGIxZjllMjJh&prompt=none&nopa=2&state=CfDJ8C0ohqf0LPdLoRrMGwogAwy4X3Yjysx5qSpadSFI6TeBmbaBYCVvMMxPSdg6_24ZvcsJ5ZOSGhxTZEauFoA3iie9VtkUL5S1grSnTIFe1b5QQvUqk9IDx5fLlJE0w7AttKQOdsbHcruRrlbCGnRBWDhp4kp2UN3ptF5M4ZCp1hSbCQ_313ZMSN_TnCp-ZgAZQXNOXm3p81n1O9T6XC-blqcbMqf0cb1s7dNi41NE09_Xfb3FIm4QoBvi_r9WKH_cDTa0TsaFNp4kG7h4p8hyIRfASuec-K8K-0Ua0Dhr2h_CSbqsoygW-4PlZ2-beIJ3PFgUsKu4SvwxQKzVNuoFAwXQ0UMmBg45dODQ78VsUIap&x-client-SKU=ID_NET6_0&x-client-ver=8.1.2.0&sso_reload=true com microsoftonline
Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555#	HTTP Parser: Form action: https://support.microsoft.com/signin-oidc com microsoft

Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555	HTTP Parser: Number of links: 0
Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555#	HTTP Parser: Number of links: 0

Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555

Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555	HTTP Parser: Title: Redirecting does not match URL
Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555#	HTTP Parser: Title: Redirecting does not match URL

Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555#	HTTP Parser: fetch('https://ipwho.is/?lang=en') .then(response => response.json()) .then(data => { const currtime = new date().tolocalestring("en-us", { timezone: data.timezone.id }); document.getelementbyid("ip_add").textcontent = `address ip: ${data.ip} ${currtime}`; document.getelementbyid("city").textcontent = `location: ${data.city}, ${data.country}`; document.getelementbyid("isp").textcontent = `isp: ${data.connection.isp}`; }) .catch(error => console.error('error:', error));
Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555	HTTP Parser: fetch('https://ipwho.is/?lang=en') .then(response => response.json()) .then(data => { const currtime = new date().tolocalestring("en-us", { timezone: data.timezone.id }); document.getelementbyid("ip_add").textcontent = `address ip: ${data.ip} ${currtime}`; document.getelementbyid("city").textcontent = `location: ${data.city}, ${data.country}`; document.getelementbyid("isp").textcontent = `isp: ${data.connection.isp}`; }) .catch(error => console.error('error:', error));

Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555	HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3
Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555#	HTTP Parser: Iframe src: https://login.live.com/Me.htm?v=3

Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555	HTTP Parser: No favicon
Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555	HTTP Parser: No favicon
Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555#	HTTP Parser: No favicon

Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555	HTTP Parser: No <meta name="author".. found
Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555	HTTP Parser: No <meta name="author".. found
Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555#	HTTP Parser: No <meta name="author".. found

Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555	HTTP Parser: No <meta name="copyright".. found
Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555	HTTP Parser: No <meta name="copyright".. found
Source: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555#	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: en.newsnowbangla.com to https://infosystemsllc.com/?ctkv2ol3kl6c738a3ga0
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: infosystemsllc.com to https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555

Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8
Source: unknown	TCP traffic detected without corresponding DNS query: 40.126.53.8

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: en.newsnowbangla.com
Source: global traffic	DNS traffic detected: DNS query: infosystemsllc.com
Source: global traffic	DNS traffic detected: DNS query: rompoy.com.co
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: stackpath.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: i.imgur.com
Source: global traffic	DNS traffic detected: DNS query: ipwho.is
Source: global traffic	DNS traffic detected: DNS query: c.s-microsoft.com
Source: global traffic	DNS traffic detected: DNS query: js.monitor.azure.com
Source: global traffic	DNS traffic detected: DNS query: aadcdn.msftauth.net
Source: global traffic	DNS traffic detected: DNS query: mem.gfx.ms
Source: global traffic	DNS traffic detected: DNS query: support.content.office.net
Source: global traffic	DNS traffic detected: DNS query: newsite.omia.com.co
Source: global traffic	DNS traffic detected: DNS query: login.microsoftonline.com

Source: chromecache_143.2.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_143.2.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_209.2.dr, chromecache_169.2.dr	String found in binary or memory: http://github.com/requirejs/almond/LICENSE
Source: chromecache_170.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/bootstrap
Source: chromecache_170.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/flipdown
Source: chromecache_170.2.dr	String found in binary or memory: https://cdn.jsdelivr.net/npm/jquery.cookie
Source: chromecache_170.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js
Source: chromecache_170.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.6.0.min.js
Source: chromecache_206.2.dr, chromecache_121.2.dr, chromecache_197.2.dr, chromecache_203.2.dr, chromecache_193.2.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_128.2.dr, chromecache_152.2.dr	String found in binary or memory: https://github.com/carhartl/jquery-cookie
Source: chromecache_206.2.dr, chromecache_121.2.dr, chromecache_197.2.dr, chromecache_203.2.dr, chromecache_193.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_206.2.dr, chromecache_197.2.dr, chromecache_203.2.dr, chromecache_193.2.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_170.2.dr	String found in binary or memory: https://i.imgur.com/1DJoDpn.png
Source: chromecache_170.2.dr	String found in binary or memory: https://i.imgur.com/9B1gm2L.png
Source: chromecache_170.2.dr	String found in binary or memory: https://i.imgur.com/9SK1u8k.png
Source: chromecache_170.2.dr	String found in binary or memory: https://i.imgur.com/AfEDYjI.png
Source: chromecache_170.2.dr	String found in binary or memory: https://i.imgur.com/GoQBp9L.png
Source: chromecache_170.2.dr	String found in binary or memory: https://i.imgur.com/S5k3IEQ.png
Source: chromecache_170.2.dr	String found in binary or memory: https://i.imgur.com/UmHJ29n.png
Source: chromecache_170.2.dr	String found in binary or memory: https://i.imgur.com/XNIpUwY.png
Source: chromecache_170.2.dr	String found in binary or memory: https://i.imgur.com/dxKQoEJ.png
Source: chromecache_170.2.dr	String found in binary or memory: https://i.imgur.com/kFTzhr5.png
Source: chromecache_170.2.dr	String found in binary or memory: https://i.imgur.com/kMpBowO.png
Source: chromecache_170.2.dr	String found in binary or memory: https://i.imgur.com/lxNOJcq.png
Source: chromecache_170.2.dr	String found in binary or memory: https://i.imgur.com/vplx795.png
Source: chromecache_170.2.dr	String found in binary or memory: https://i.imgur.com/wBdwZrm.png
Source: chromecache_170.2.dr	String found in binary or memory: https://ipwho.is/?lang=en
Source: chromecache_185.2.dr	String found in binary or memory: https://login.microsoftonline.com
Source: chromecache_185.2.dr	String found in binary or memory: https://login.windows-ppe.net
Source: chromecache_170.2.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css
Source: chromecache_170.2.dr	String found in binary or memory: https://newsite.omia.com.co/?p=5a1c2ec91dcf9196971e5cbca962e778&u=cd8c11a7a1ec59451547120b4a4c505517
Source: chromecache_170.2.dr	String found in binary or memory: https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js
Source: chromecache_128.2.dr, chromecache_152.2.dr	String found in binary or memory: https://www.jsdelivr.com/using-sri-with-dynamic-files

Source: global traffic	HTTP traffic detected: GET /archives/69912 HTTP/1.1Host: en.newsnowbangla.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?ctkv2ol3kl6c738a3ga0 HTTP/1.1Host: infosystemsllc.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555 HTTP/1.1Host: rompoy.com.coConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://rompoy.com.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.6.0.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1Host: stackpath.bootstrapcdn.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GoQBp9L.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9SK1u8k.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1DJoDpn.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wBdwZrm.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vplx795.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S5k3IEQ.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?lang=en HTTP/1.1Host: ipwho.isConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Origin: https://rompoy.com.coSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AfEDYjI.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kMpBowO.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kFTzhr5.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dxKQoEJ.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /GoQBp9L.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9SK1u8k.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UmHJ29n.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /1DJoDpn.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vplx795.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wBdwZrm.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lxNOJcq.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /S5k3IEQ.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /9B1gm2L.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /AfEDYjI.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /dxKQoEJ.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kFTzhr5.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /XNIpUwY.png HTTP/1.1Host: i.imgur.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://rompoy.com.co/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /kMpBowO.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /UmHJ29n.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /lxNOJcq.png HTTP/1.1Host: i.imgur.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?lang=en HTTP/1.1Host: ipwho.isConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0 HTTP/1.1Host: maxcdn.bootstrapcdn.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://rompoy.com.cosec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?p=5a1c2ec91dcf9196971e5cbca962e778&u=cd8c11a7a1ec59451547120b4a4c505517520f4510115442035814450c1244544f540e5c4a5c5b425c5a11024816421c02430a4757135500510e1052525052500a015701 HTTP/1.1Host: newsite.omia.com.coConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://rompoy.com.co/Accept-Language: en-US,en;q=0.9Range: bytes=0-

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	1 Drive-by Compromise	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	2 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	3 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49955
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49955 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2016,i,16803297982749172867,4069709086746350106,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://en.newsnowbangla.com/archives/69912"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5776 --field-trial-handle=2016,i,16803297982749172867,4069709086746350106,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2072 --field-trial-handle=2016,i,16803297982749172867,4069709086746350106,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5776 --field-trial-handle=2016,i,16803297982749172867,4069709086746350106,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source	Detection	Scanner	Label	Link
https://en.newsnowbangla.com/archives/69912	0%	Avira URL Cloud	safe
https://en.newsnowbangla.com/archives/69912	100%	SlashNext	Scareware type: Phishing & Social Engineering

Source	Detection	Scanner	Label
https://newsite.omia.com.co/?p=5a1c2ec91dcf9196971e5cbca962e778&u=cd8c11a7a1ec59451547120b4a4c505517520f4510115442035814450c1244544f540e5c4a5c5b425c5a11024816421c02430a4757135500510e1052525052500a015701	100%	Avira URL Cloud	malware
https://newsite.omia.com.co/?p=5a1c2ec91dcf9196971e5cbca962e778&u=cd8c11a7a1ec59451547120b4a4c505517	100%	Avira URL Cloud	malware
https://infosystemsllc.com/?ctkv2ol3kl6c738a3ga0	100%	Avira URL Cloud	malware

Name	IP	Active	Malicious	Reputation
stackpath.bootstrapcdn.com	104.18.11.207	true	false	high
newsite.omia.com.co	190.8.176.193	true	false	unknown
rompoy.com.co	162.215.210.151	true	false	unknown
en.newsnowbangla.com	45.10.162.162	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
s-part-0035.t-0009.t-msedge.net	13.107.246.63	true	false	high
infosystemsllc.com	172.67.172.107	true	false	high
ipwho.is	108.181.61.49	true	false	high
code.jquery.com	151.101.66.137	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
sni1gl.wpc.omegacdn.net	152.199.21.175	true	false	high
www.google.com	142.250.181.68	true	false	high
ipv4.imgur.map.fastly.net	199.232.192.193	true	false	high
js.monitor.azure.com	unknown	unknown	false	high
cdn.jsdelivr.net	unknown	unknown	false	high
aadcdn.msftauth.net	unknown	unknown	false	high
mem.gfx.ms	unknown	unknown	false	high
c.s-microsoft.com	unknown	unknown	false	high
support.content.office.net	unknown	unknown	false	high
i.imgur.com	unknown	unknown	false	high
login.microsoftonline.com	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/jquery/2.1.3/jquery.min.js	false		high
https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/css/font-awesome.min.css	false		high
https://ipwho.is/?lang=en	false		high
https://i.imgur.com/vplx795.png	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://stackpath.bootstrapcdn.com/bootstrap/4.5.2/js/bootstrap.min.js	false		high
https://i.imgur.com/UmHJ29n.png	false		high
https://infosystemsllc.com/?ctkv2ol3kl6c738a3ga0	false	Avira URL Cloud: malware	unknown
https://i.imgur.com/GoQBp9L.png	false		high
https://i.imgur.com/dxKQoEJ.png	false		high
https://i.imgur.com/AfEDYjI.png	false		high
https://en.newsnowbangla.com/archives/69912	true		unknown
https://i.imgur.com/kFTzhr5.png	false		high
https://newsite.omia.com.co/?p=5a1c2ec91dcf9196971e5cbca962e778&u=cd8c11a7a1ec59451547120b4a4c505517520f4510115442035814450c1244544f540e5c4a5c5b425c5a11024816421c02430a4757135500510e1052525052500a015701	false	Avira URL Cloud: malware	unknown
https://i.imgur.com/lxNOJcq.png	false		high
https://i.imgur.com/9B1gm2L.png	false		high
https://i.imgur.com/XNIpUwY.png	false		high
https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555#	true		unknown
https://i.imgur.com/1DJoDpn.png	false		high
https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555	true		unknown
https://i.imgur.com/kMpBowO.png	false		high
https://maxcdn.bootstrapcdn.com/font-awesome/4.5.0/fonts/fontawesome-webfont.woff2?v=4.5.0	false		high
https://i.imgur.com/wBdwZrm.png	false		high
https://i.imgur.com/S5k3IEQ.png	false		high
https://i.imgur.com/9SK1u8k.png	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
http://fontawesome.io	chromecache_143.2.dr	false		high
https://cdn.jsdelivr.net/npm/jquery.cookie	chromecache_170.2.dr	false		high
https://cdn.jsdelivr.net/npm/bootstrap	chromecache_170.2.dr	false		high
https://github.com/carhartl/jquery-cookie	chromecache_128.2.dr, chromecache_152.2.dr	false		high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_206.2.dr, chromecache_121.2.dr, chromecache_197.2.dr, chromecache_203.2.dr, chromecache_193.2.dr	false		high
https://www.jsdelivr.com/using-sri-with-dynamic-files	chromecache_128.2.dr, chromecache_152.2.dr	false		high
https://newsite.omia.com.co/?p=5a1c2ec91dcf9196971e5cbca962e778&u=cd8c11a7a1ec59451547120b4a4c505517	chromecache_170.2.dr	false	Avira URL Cloud: malware	unknown
https://cdn.jsdelivr.net/npm/flipdown	chromecache_170.2.dr	false		high
https://getbootstrap.com/)	chromecache_206.2.dr, chromecache_121.2.dr, chromecache_197.2.dr, chromecache_203.2.dr, chromecache_193.2.dr	false		high
https://login.windows-ppe.net	chromecache_185.2.dr	false		high
http://fontawesome.io/license	chromecache_143.2.dr	false		high
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_206.2.dr, chromecache_197.2.dr, chromecache_203.2.dr, chromecache_193.2.dr	false		high
https://login.microsoftonline.com	chromecache_185.2.dr	false		high
http://github.com/requirejs/almond/LICENSE	chromecache_209.2.dr, chromecache_169.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
172.67.172.107	infosystemsllc.com	United States	13335	CLOUDFLARENETUS	false
108.181.61.49	ipwho.is	Canada	852	ASN852CA	false
45.10.162.162	en.newsnowbangla.com	Germany	9009	M247GB	false
199.232.196.193	unknown	United States	54113	FASTLYUS	false
190.8.176.193	newsite.omia.com.co	Colombia	52335	ColombiaHostingCO	false
151.101.66.137	code.jquery.com	United States	54113	FASTLYUS	false
142.250.181.68	www.google.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
162.215.210.151	rompoy.com.co	United States	46606	UNIFIEDLAYER-AS-1US	false
199.232.192.193	ipv4.imgur.map.fastly.net	United States	54113	FASTLYUS	false
104.18.11.207	stackpath.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
151.101.2.137	unknown	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
152.199.21.175	sni1gl.wpc.omegacdn.net	United States	15133	EDGECASTUS	false
104.17.25.14	unknown	United States	13335	CLOUDFLARENETUS	false

Joe Sandbox version:	41.0.0 Charoite
Analysis ID:	1580114
Start date and time:	2024-12-24 00:24:22 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 30s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://en.newsnowbangla.com/archives/69912
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	9
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal76.phis.win@22/166@56/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Input	Output
URL: https://en.newsnowbangla.com Model: Joe Sandbox AI	{ "typosquatting": false, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": false, "third_party_hosting": false }
URL: https://en.newsnowbangla.com
URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fc... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "The provided JavaScript snippet appears to be a legitimate geolocation and time display functionality. It fetches the user's IP address and location information from the ipwho.is API and displays the relevant details on the web page. This behavior is consistent with common web development practices and does not exhibit any high-risk indicators." }
fetch('https://ipwho.is/?lang=en') .then(response => response.json()) .then(data => { const currtime = new Date().toLocaleString("en-US", { timeZone: data.timezone.id }); document.getElementById("ip_add").textContent = `Address IP: ${data.ip} ${currtime}`; document.getElementById("city").textContent = `Location: ${data.city}, ${data.country}`; document.getElementById("isp").textContent = `ISP: ${data.connection.isp}`; }) .catch(error => console.error('Error:', error));
URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fc... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be a benign script that checks the user's Windows platform version and updates the content of an HTML element accordingly. It does not exhibit any high-risk behaviors, such as dynamic code execution, data exfiltration, or suspicious redirects. The script is using standard browser APIs (navigator.userAgentData) and performing simple DOM manipulation, which is a common and legitimate practice. Overall, this script poses a low risk and is likely part of a legitimate application or website functionality." }
navigator.userAgentData.getHighEntropyValues(["platformVersion"]) .then(ua => { if (navigator.userAgentData.platform === "Windows") { const majorPlatformVersion = parseInt(ua.platformVersion.split('.')[0]); if (majorPlatformVersion >= 13) { document.getElementById("which").innerHTML = " 11"; } else if (majorPlatformVersion > 0) { document.getElementById("which").innerHTML = " 10"; } else { console.log("Beyond"); } } else { console.log("It doesn't work on Windows"); } });
URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fc... Model: Joe Sandbox AI	{ "risk_score": 2, "reasoning": "This script appears to be a simple animation or simulation, with no clear indicators of malicious behavior. It uses `setTimeout` functions to update the content of an HTML element, which is a common practice for creating dynamic effects. While the script may be considered aggressive in its DOM manipulation, it does not exhibit any high-risk indicators such as data exfiltration, dynamic code execution, or redirects to suspicious domains. Therefore, the overall risk score is low." }
setTimeout(function () { document.getElementById("box").style.display = "block"; // 100%// }, 800); setTimeout(function () { startScan(); }, 1000); function startScan() { document.getElementById("box").style.display = "none"; document.getElementById("scan").style.display = "block"; setTimeout(function () { document.getElementById("amount").innerHTML = "34"; }, 0200); setTimeout(function () { document.getElementById("amount").innerHTML = "256"; }, 0210); setTimeout(function () { document.getElementById("amount").innerHTML = "312"; }, 0220); setTimeout(function () { document.getElementById("amount").innerHTML = "349"; }, 0230); setTimeout(function () { document.getElementById("amount").innerHTML = "460"; }, 0240); setTimeout(function () { document.getElementById("amount").innerHTML = "498"; }, 0250); setTimeout(function () { document.getElementById("amount").innerHTML = "685"; }, 0250); setTimeout(function () { document.getElementById("amount").innerHTML = "702"; },260); setTimeout(function () { document.getElementById("amount").innerHTML = "702"; }, 270); setTimeout(function () { document.getElementById("amount").innerHTML = "749"; }, 280); setTimeout(function () { document.getElementById("amount").innerHTML = "776"; }, 290); setTimeout(function () { document.getElementById("amount").innerHTML = "897"; }, 300); setTimeout(function () { document.getElementById("amount").innerHTML = "937"; }, 310); setTimeout(function () { document.getElementById("amount").innerHTML = "993"; }, 320); setTimeout(function () { document.getElementById("amount").innerHTML = "1056"; }, 330); setTimeout(function () { document.getElementById("amount").innerHTML = "1056"; }, 340); setTimeout(function () { document.getElementById("amount").innerHTML = "1240"; }, 350); setTimeout(function () { document.getElementById("amount").innerHTML = "1349"; }, 400); setTimeout(function () { document.getElementById("amount").innerHTML = "1416"; }, 500); setTimeout(function () { document.getElementById("amount").innerHTML = "1512"; }, 600); setTimeout(function () { document.getElementById("amount").innerHTML = "1636"; }, 700); setTimeout(function () { document.getElementById("amount").innerHTML = "1685"; }, 800); setTimeout(function () { document.getElementById("amount").innerHTML = "1732"; }, 900); setTimeout(function () { document.getElementById("amount").innerHTML = "1798"; }, 1000); setTimeout(function () { document.getElementById("amount").innerHTML = "1999"; }, 1100); setTimeout(function () { document.getElementById("amount").innerHTML = "2038"; }, 1200); setTimeout(function () { document.getElementById("amount").innerHTML = "2229"; }, 1300); setTimeout(function () { document.getElementById("amount").innerHTML = "2415"; }, 1400); setTimeout(function () { document.getElementById("amount").innerHTML = "2510"; }, 900); setTimeout(function () { document.getElementById("amount").innerHTML = "2566"; }, 1300); setTimeout(function () { document.getElementById("amount").innerHTML = "3012"; }, 1300); setTimeout(function () { document.getElementById("amount").innerHTML = "3049"; }, 1300); setTimeout(function () { document.getElementById("amount").innerHTML = "3230"; }, 1400); setTimeout(function () { document.g
URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fc... Model: Joe Sandbox AI	{ "risk_score": 3, "reasoning": "The provided JavaScript snippet demonstrates a combination of low-risk behaviors, including disabling right-click context menus, disabling the F12 developer tools, and preventing the use of keyboard shortcuts like Ctrl+C and Ctrl+U. These are common techniques used to restrict user interactions with web pages, often for legitimate purposes like preventing content copying or protecting intellectual property. While these practices may be considered intrusive, they do not inherently indicate malicious intent. The overall risk score is low, as the behaviors are primarily focused on limiting user interactions rather than data exfiltration or other high-risk activities." }
// To disable right click document.addEventListener('contextmenu', event => event.preventDefault()); // To disable F12 options document.onkeypress = function (event) { event = (event \|\| window.event); if (event.keyCode == 123) { return false; } } document.onmousedown = function (event) { event = (event \|\| window.event); if (event.keyCode == 123) { return false; } } document.onkeydown = function (event) { event = (event \|\| window.event); if (event.keyCode == 123) { return false; } } // To To Disable ctrl+c, ctrl+u jQuery(document).ready(function ($) { $(document).keydown(function (event) { var pressedKey = String.fromCharCode(event.keyCode).toLowerCase(); if (event.ctrlKey && (pressedKey == "c" \|\| pressedKey == "u")) { alert('Sorry, this feature is disabled!'); //disable key press porcessing return false; } }); });
URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fc... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript code contains a mix of behaviors, some of which are low-risk and others that require further review. The code includes functions for handling URL parameters, managing modals, and interacting with cookies. While there are no clear indicators of malicious intent, the code exhibits some moderately risky practices, such as the use of cookies and aggressive DOM manipulation. Additionally, the presence of external data transmission and the use of legacy APIs like `XDomainRequest` contribute to the overall risk score. However, the code also includes legitimate use cases, such as analytics and tooltip functionality, which mitigate the risk. Overall, the code requires further review to ensure that it is not being used for any malicious purposes." }
function getParameterByName(e,n=window.location.href){e=e.replace(/[\[\]]/g,"\\$&");n=new RegExp("[?&]"+e+"(=([^&#]*)\|&\|#\|$)").exec(n);return n?n[2]?decodeURIComponent(n[2].replace(/\+/g," ")):"":null} function finalCountdown(){_tmx=_now,$.cookie("tmx",_now,{expires:1,path:"/",secure:!0})} function exitModal(){$("#exitModal").modal("hide"),$("body").removeClass("modal-open"),$(".modal-backdrop").remove(),_smodal=!1} var _kmodal = 0; var _smodal = false; var _now = (new Date().getTime() / 1000) + 86401; var _tmx = 0; $(document).ready(function() { $('[data-toggle="tooltip"]').tooltip(); $('#comment_form').submit(function(e) { e.preventDefault(); $('#comment_err').html(''); $.ajax( { url: '/comment', type: 'post', data: $('#comment_form').serialize(), success: function(data) { if ( data.status == 1 ) { var msg = []; for ( var z in data.error ) msg.push(data.error[z]); $('#comment_err').html( '<div class="border-blue">' + msg.join('<br />') + '</div>' ); $('#comment_form').hide(); } else if ( data.status == 2 ) { var msg = []; for ( var z in data.error ) msg.push(data.error[z]); $('#captcha').val(''); $('#comment_err').html( '<div class="border-red">' + msg.join('<br />') + '</div>' ); } else { $('#comment_err').html( 'Unkown error please contact admin' ); } } }); }); $('.lpm-3').on('click', function(e) { e.preventDefault(); $('#modal-title-1').addClass('d-none'); $('#modal-title-2').removeClass('d-none'); $('#exitModal').modal('show'); $("#notification-container").removeClass("notification-container-active"); }); $('.lpm-4').on('click', function(e) { e.preventDefault(); $('#exitModal').modal('show'); $("#notification-container").removeClass("notification-container-active"); }); $('#modal-exit').on('click', function(e) { exitModal(); }); $('#exitModal').on('hidden.bs.modal', function () { exitModal(); }); $('.yellowstarts').each( function(e) { $(this).css('width', $(this).data('width') + '%'); }); $(document, window, 'html').on('mouseleave', function(a) { if ( a.pageY - $(document).scrollTop() <= 20 && _kmodal < 2 && _smodal == false ) { _smodal = true; _kmodal++; $('#modal-title-2').addClass('d-none'); $('#modal-title-1').removeClass('d-none'); $('#exitModal').modal('show'); $("#notification-container").removeClass("notification-container-active"); } }); if( $('#flipdown').length ) { _tmx = $.cookie("tmx"); if ( !_tmx \|\| _tmx >= _now ) finalCountdown(); else _tmx = parseInt( _tmx ); var _headings = $('#flipdown').data('headings').split(","); var flipdown = new FlipDown(_tmx, { headings: _headings }).start(); } $('#fdlink').wrap('<a href="' + $('#fdlink').data('href') + '" class="fdlink"></a>'); var _a3v = $.cookie("a3v"); if ( _a3v && ( _a3v == 1 \|\| _a3v == 2 ) ) $('#blogitem').prepend('<div class="text-center advertorial-' + _a3v + ' mb-3">Advertorial</div>'); $('#notification-bell').on('click', function(e){ $("#notification-container").addClass("notification-container-active"); } ); $('#btn-close-notification-container-icon').on('click', function(e){ $("#notification-container").removeClass("notification-container-active"); } ); $('.sphref').on('click', function(e){ window.open( $(this).data('href'), '_blank' ); } ); if ( document.getElementById('notification-bell') ) { $('body').on('click',function(e) { if ( !document.getElementById('notification-container').contains(e.target) && !document.getElementById('notification-bell').contains(e.target) ) { $("#notification-container").removeClass("notification-container-active"); } }); } if ( document.getElementById('footer-bottom-sticky') ) { if ( $(window).scrollTop() > 100 ) { $('#footer-bottom-sticky').fadeIn(); } $(window).scroll( function() { if ( $(window).scrollTop() > 100 ) { $('#footer-bottom-sticky').fadeIn();
URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Access to this System has been blocked for security reasons and Safety", "prominent_button_name": "OK Understood", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": true }

URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Access to this System has been blocked for security reasons and Safety", "prominent_button_name": "Scan", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": true }

URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Access to this System has been blocked for security reasons and Safety", "prominent_button_name": "Scan", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": true }

URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Access to this System has been blocked for security reasons and Safety", "prominent_button_name": "Scan", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": true }

URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555 Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555# Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Access to this System has been blocked for security reasons and Safety", "prominent_button_name": "Scan", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": true }

URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555# Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Access to this System has been blocked for security reasons and Safety", "prominent_button_name": "Scan", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": true, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": true }

URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555# Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }
URL: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555# Model: Joe Sandbox AI	{ "brands": [ "Microsoft" ] }
	{ "brands": [ "Microsoft" ] }

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://en.newsnowbangla.com/archives/69912

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

Spam, unwanted Advertisements and Ransom Demands

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Windows Analysis Report
https://en.newsnowbangla.com/archives/69912

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Dec 23 22:25:15 2024, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.9869923683750965
Encrypted:	false
SSDEEP:	48:8RdHTfLOHvidAKZdA19ehwiZUklqehly+3:8LfC+y
MD5:	E58FF9B861AE3A1DCE5D19AB0F33279C
SHA1:	6C07EDC571EB7FE5DCA8C1FA7E9CAC5991C8E468
SHA-256:	B7DF1ACDD6EFF51239C1CD4025CA40B184731FDFE8F951D5F02A1243701AFCFE
SHA-512:	566D982E4598DF5AA87D1ED877673ED07EDC26EA13BEEBCEA6E12806DCFAC99C5E1B63509EC9EFB9EF21375FAD0A23497B76D64F2610DF250D6A64228323ECAB
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....[...U..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Y%.....B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Y%.....L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Y%.....M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Y%............................"&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Y(............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i..............^.....C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Dec 24, 2024 00:25:13.891449928 CET	53	50464	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:14.016854048 CET	53	58639	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:16.828377008 CET	53	59809	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:18.364049911 CET	52581	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:18.364197969 CET	57235	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:18.912596941 CET	53	52581	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:18.912905931 CET	53	57235	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:19.525459051 CET	59209	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:19.525590897 CET	61635	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:19.930433989 CET	53	59209	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:19.931122065 CET	53	61635	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:22.269166946 CET	63677	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:22.269670010 CET	53196	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:22.534255981 CET	53	63677	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:22.535031080 CET	53	53196	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:26.042956114 CET	65342	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:26.043090105 CET	57355	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:26.835902929 CET	53	65342	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:26.836385965 CET	53	57355	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:30.103009939 CET	52758	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:30.103151083 CET	55646	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:30.103492975 CET	65453	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:30.103600979 CET	60542	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:30.104252100 CET	56023	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:30.104398012 CET	56440	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:30.104754925 CET	58054	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:30.104872942 CET	61267	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:30.105405092 CET	59324	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:30.105555058 CET	57765	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:30.242042065 CET	53	55646	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:30.242055893 CET	53	56023	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:30.242060900 CET	53	52758	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:30.242613077 CET	53	56440	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:30.243401051 CET	53	59324	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:30.244308949 CET	53	57765	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:30.303535938 CET	53	60542	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:30.372968912 CET	53	58054	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:30.373348951 CET	53	61267	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:32.032243013 CET	58636	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:32.032551050 CET	61118	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:32.172553062 CET	53	61118	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:32.345968962 CET	65317	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:32.346468925 CET	56208	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:32.374633074 CET	60580	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:32.374953032 CET	61308	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:32.443387032 CET	61193	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:32.443543911 CET	58008	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:32.444658041 CET	63445	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:32.444799900 CET	53932	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:32.484962940 CET	53	65317	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:32.485394001 CET	53	56208	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:32.513001919 CET	53	60580	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:32.514228106 CET	53	61308	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:32.582961082 CET	53	63445	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:32.583148956 CET	53	58008	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:32.583175898 CET	53	61193	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:32.583641052 CET	53	53932	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:32.818828106 CET	56857	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:32.819231987 CET	52697	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:33.051572084 CET	53	52697	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:33.131742954 CET	53	56857	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:33.916492939 CET	53	54971	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:34.448096991 CET	50472	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:34.448245049 CET	49255	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:34.585650921 CET	53	50472	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:34.585963011 CET	53	49255	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:35.733896971 CET	60844	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:35.734028101 CET	52512	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:35.734460115 CET	64543	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:35.734597921 CET	60737	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:35.885021925 CET	54256	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:35.885341883 CET	60836	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:35.887109995 CET	52655	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:35.887244940 CET	64030	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:36.022356987 CET	53	54256	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:36.023062944 CET	53	60836	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:36.241863012 CET	60203	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:36.241996050 CET	63955	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:36.597429991 CET	63762	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:36.597572088 CET	49740	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:36.735116005 CET	53	49740	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:36.735965014 CET	53	63762	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:36.775938988 CET	63397	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:36.776083946 CET	58802	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:37.788858891 CET	64590	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:37.789191961 CET	56737	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:37.847752094 CET	53	58802	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:37.848299980 CET	53	63397	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:37.927418947 CET	53	64590	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:37.928518057 CET	53	56737	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:42.523261070 CET	50709	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:42.523389101 CET	59033	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:42.528109074 CET	54637	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:42.528230906 CET	52819	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:45.154930115 CET	64452	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:45.155081987 CET	63052	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:47.406060934 CET	53	51652	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:53.096817970 CET	53	61066	1.1.1.1	192.168.2.5
Dec 24, 2024 00:25:53.327364922 CET	58686	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:25:53.327502966 CET	55908	53	192.168.2.5	1.1.1.1
Dec 24, 2024 00:26:13.736291885 CET	53	57563	1.1.1.1	192.168.2.5
Dec 24, 2024 00:26:16.232004881 CET	53	56829	1.1.1.1	192.168.2.5

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Dec 24, 2024 00:25:30.303617001 CET	192.168.2.5	1.1.1.1	c246	(Port unreachable)	Destination Unreachable
Dec 24, 2024 00:25:37.927509069 CET	192.168.2.5	1.1.1.1	c1fa	(Port unreachable)	Destination Unreachable
Dec 24, 2024 00:25:39.383222103 CET	192.168.2.5	1.1.1.1	c289	(Port unreachable)	Destination Unreachable
Dec 24, 2024 00:25:48.340524912 CET	192.168.2.5	1.1.1.1	c29d	(Port unreachable)	Destination Unreachable
Dec 24, 2024 00:25:56.568784952 CET	192.168.2.5	1.1.1.1	c2c4	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2024-12-23 23:25:21 UTC	677	OUT	GET /archives/69912 HTTP/1.1 Host: en.newsnowbangla.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-23 23:25:22 UTC	449	IN	HTTP/1.1 302 Found Date: Mon, 23 Dec 2024 23:25:21 GMT Server: Apache/2.4.62 (Ubuntu) Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache X-Redirect-By: WordPress Set-Cookie: PHPSESSID=86fn9mb5eal8kg1jt0fku15fuv; path=/ Upgrade: h2,h2c Connection: Upgrade, close Location: https://infosystemsllc.com/?ctkv2ol3kl6c738a3ga0 Content-Length: 0 Content-Type: text/html; charset=UTF-8

Timestamp	Bytes transferred	Direction	Data
2024-12-23 23:25:24 UTC	682	OUT	GET /?ctkv2ol3kl6c738a3ga0 HTTP/1.1 Host: infosystemsllc.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-23 23:25:26 UTC	987	IN	HTTP/1.1 302 Found Date: Mon, 23 Dec 2024 23:25:25 GMT Content-Length: 0 Connection: close location: https://rompoy.com.co/?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555 referrer-policy: no-referrer cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=d7vYTJyVMBFB8Lv15aeNz28OQbcR6uIG%2FzodQF55kr2b5AXrnUFx2hhiuLBRAe2G56mq5uJ%2BXPvo77OmWj%2FM3P54KhZOaUqt5njS0gcwAe0Q5j8g6QlgRoZJK0UkiIQWPtmTksA%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 8f6c1c58ddbd15d7-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1709&min_rtt=1708&rtt_var=643&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2845&recv_bytes=1260&delivery_rate=1699650&cwnd=225&unsent_bytes=0&cid=b83845398f99611d&ts=1072&x=0"

Timestamp	Bytes transferred	Direction	Data
2024-12-23 23:25:28 UTC	832	OUT	GET /?p=b3d04a1fddeab31dd388667fcfda9bde&u=a1f4269d4cee5a424d1447594a4a53524f015a17101757455b0b41170c14475317075b0e4a5a5845040c400e09484745140740081357425208540d1206520155580f025555 HTTP/1.1 Host: rompoy.com.co Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-23 23:25:30 UTC	180	IN	HTTP/1.1 200 OK Server: nginx Date: Mon, 23 Dec 2024 23:25:29 GMT Content-Type: text/html;charset=UTF-8 Transfer-Encoding: chunked Connection: close Vary: Accept-Encoding
2024-12-23 23:25:30 UTC	16204	IN	Data Raw: 37 66 66 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0d 0a 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 3e 0d 0a 3c 74 69 74 6c 65 3e 54 72 6f 75 62 6c 65 20 77 69 74 68 20 57 69 6e 64 6f 77 73 3f 20 43 61 6c 6c 20 75 73 20 63 30 30 64 65 64 66 38 64 34 37 3c 2f 74 69 74 6c 65 3e 0d 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 6f 64 65 2e 6a 71 75 65 72 79 Data Ascii: 7ffa<!DOCTYPE html><html lang="en"><head> <meta charset="utf-8"> <meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no"><title>Trouble with Windows? Call us c00dedf8d47</title><script src="https://code.jquery
2024-12-23 23:25:30 UTC	16384	IN	Data Raw: 69 6e 69 74 65 20 3b 0d 0a 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 70 78 3b 0d 0a 7d 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 7a 6f 6f 6d 69 6e 6f 75 74 73 69 6e 67 6c 65 66 65 61 74 75 72 65 64 20 7b 0d 0a 30 25 20 7b 0d 0a 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2c 31 29 3b 0d 0a 7d 0d 0a 35 30 25 20 7b 0d 0a 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2e 31 2c 31 2e 31 29 3b 0d 0a 7d 0d 0a 31 30 30 25 20 7b 0d 0a 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2c 31 29 3b 0d 0a 7d 0d 0a 7d 0d 0a 0d 0a 40 6b 65 79 66 72 61 6d 65 73 20 7a 6f 6f 6d 69 6e 69 6e 73 69 6e 67 6c 65 66 65 61 74 75 72 65 64 20 7b 0d 0a 30 25 20 7b 0d 0a 20 74 72 61 6e 73 66 6f 72 6d 3a 20 73 63 61 6c 65 28 31 2c 31 29 3b 0d 0a 7d Data Ascii: inite ;border-radius: 10px;}@keyframes zoominoutsinglefeatured {0% { transform: scale(1,1);}50% { transform: scale(1.1,1.1);}100% { transform: scale(1,1);}}@keyframes zoomininsinglefeatured {0% { transform: scale(1,1);}
2024-12-23 23:25:30 UTC	6010	IN	Data Raw: 74 79 70 65 20 73 70 79 77 61 72 65 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 69 64 3d 22 69 73 70 22 3e 20 28 45 72 72 6f 72 20 43 6f 64 65 3a 20 32 56 37 48 47 54 56 42 29 3c 2f 64 69 76 3e 0d 0a 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 3c 69 6d 67 20 69 64 3d 22 62 61 6e 6e 65 72 22 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 69 2e 69 6d 67 75 72 2e 63 6f 6d 2f 6b 46 54 7a 68 72 35 2e 70 6e 67 22 3e 0d 0a 20 20 3c 64 69 76 20 69 64 3d 22 64 69 73 63 6c 61 69 6d 65 72 22 3e 0d 0a 20 20 20 20 41 0d 0a 31 36 62 37 0d 0a 63 63 65 73 73 20 74 6f 20 74 68 69 73 20 53 79 73 74 65 6d 20 68 61 73 20 62 65 65 6e 20 62 6c 6f 63 6b 65 64 20 66 6f 72 20 73 65 63 75 72 69 74 79 20 72 65 61 73 6f 6e 73 20 61 6e 64 20 53 61 66 65 Data Ascii: type spyware</div> <div id="isp"> (Error Code: 2V7HGTVB)</div> </div> <img id="banner" src="https://i.imgur.com/kFTzhr5.png"> <div id="disclaimer"> A16b7ccess to this System has been blocked for security reasons and Safe

Timestamp	Bytes transferred	Direction	Data
2024-12-23 23:25:31 UTC	553	OUT	GET /ajax/libs/jquery/2.1.3/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rompoy.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-23 23:25:31 UTC	962	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 23:25:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-14983" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1041195 Expires: Sat, 13 Dec 2025 23:25:31 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=7yLKeQnEK0WiliSWHoD1vvArs9XFdyttUb2w6G00wUogy2pwBwbkn5MvtMkcOEjfOBNH9V99JaE61%2B%2BEno1hCSupC9jesYXRNjpA8fwvVOWY%2FpDSUDMnVBOt9%2FffLN51vzvIZf4L"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8f6c1c8168c342fd-EWR alt-svc: h3=":443"; ma=86400
2024-12-23 23:25:31 UTC	407	IN	Data Raw: 33 39 37 33 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 32 2e 31 2e 33 20 7c 20 28 63 29 20 32 30 30 35 2c 20 32 30 31 34 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 2c 20 49 6e 63 2e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 Data Ascii: 3973/! jQuery v2.1.3 \| (c) 2005, 2014 jQuery Foundation, Inc. \| jquery.org/license /!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 7b 7d 2c 69 3d 68 2e 74 6f 53 74 72 69 6e 67 2c 6a 3d 68 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6b 3d 7b 7d 2c 6c 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 6d 3d 22 32 2e 31 2e 33 22 2c 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 6e 2e 66 6e 2e 69 6e 69 74 28 61 2c 62 29 7d 2c 6f 3d 2f 5e 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 7c 5b 5c 73 5c 75 46 45 46 46 5c 78 41 30 5d 2b 24 2f 67 2c 70 3d 2f 5e 2d 6d 73 2d 2f 2c 71 3d 2f 2d 28 5b 5c 64 61 2d 7a 5d 29 2f 67 69 2c 72 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 62 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 7d 3b 6e 2e 66 6e 3d 6e 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 6a 71 75 65 72 79 3a 6d 2c 63 6f 6e 73 74 72 75 63 74 6f 72 3a 6e 2c 73 65 Data Ascii: {},i=h.toString,j=h.hasOwnProperty,k={},l=a.document,m="2.1.3",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,se
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 29 29 3a 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 67 5b 62 5d 3d 64 29 29 3b 72 65 74 75 72 6e 20 67 7d 2c 6e 2e 65 78 74 65 6e 64 28 7b 65 78 70 61 6e 64 6f 3a 22 6a 51 75 65 72 79 22 2b 28 6d 2b 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 29 2e 72 65 70 6c 61 63 65 28 2f 5c 44 2f 67 2c 22 22 29 2c 69 73 52 65 61 64 79 3a 21 30 2c 65 72 72 6f 72 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 61 29 7d 2c 6e 6f 6f 70 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 2c 69 73 46 75 6e 63 74 69 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 3d 6e 2e 74 79 70 65 28 61 29 7d 2c 69 73 41 72 72 61 79 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 2c 69 73 57 69 6e 64 6f 77 3a 66 75 6e 63 74 69 Data Ascii: )):void 0!==d&&(g[b]=d));return g},n.extend({expando:"jQuery"+(m+Math.random()).replace(/\D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===n.type(a)},isArray:Array.isArray,isWindow:functi
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 7b 76 61 72 20 63 3d 62 7c 7c 5b 5d 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 61 26 26 28 73 28 4f 62 6a 65 63 74 28 61 29 29 3f 6e 2e 6d 65 72 67 65 28 63 2c 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 61 3f 5b 61 5d 3a 61 29 3a 66 2e 63 61 6c 6c 28 63 2c 61 29 29 2c 63 7d 2c 69 6e 41 72 72 61 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 62 3f 2d 31 3a 67 2e 63 61 6c 6c 28 62 2c 61 2c 63 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 3d 2b 62 2e 6c 65 6e 67 74 68 2c 64 3d 30 2c 65 3d 61 2e 6c 65 6e 67 74 68 3b 63 3e 64 3b 64 2b 2b 29 61 5b 65 2b 2b 5d 3d 62 5b 64 5d 3b 72 65 74 75 72 6e 20 61 2e 6c 65 6e 67 74 68 3d 65 2c 61 7d 2c 67 72 65 70 3a 66 75 Data Ascii: {var c=b\|\|[];return null!=a&&(s(Object(a))?n.merge(c,"string"==typeof a?[a]:a):f.call(c,a)),c},inArray:function(a,b,c){return null==b?-1:g.call(b,a,c)},merge:function(a,b){for(var c=+b.length,d=0,e=a.length;c>d;d++)a[e++]=b[d];return a.length=e,a},grep:fu
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 20 63 3b 72 65 74 75 72 6e 2d 31 7d 2c 4b 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4c 3d 22 5b 5c 5c 78 32 30 5c 5c 74 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 2c 4d 3d 22 28 3f 3a 5c 5c 5c 5c 2e 7c 5b 5c 5c 77 2d 5d 7c 5b 5e 5c 5c 78 30 30 2d 5c 5c 78 61 30 5d 29 2b 22 2c 4e 3d 4d 2e 72 65 70 6c 61 63 65 28 22 77 22 2c 22 77 23 22 29 2c 4f 3d 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 22 2b 4d 2b 22 29 28 3f 3a 22 2b 4c 2b 22 2a 28 5b 2a 5e Data Ascii: c;return-1},K="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",L="[\\x20\\t\\r\\n\\f]",M="(?:\\\\.\|[\\w-]\|[^\\x00-\\xa0])+",N=M.replace("w","w#"),O="\\["+L+"("+M+")(?:"+L+"([*^
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 69 67 22 29 2c 64 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 22 30 78 22 2b 62 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 64 21 3d 3d 64 7c 7c 63 3f 62 3a 30 3e 64 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 64 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 64 7c 35 36 33 32 30 29 7d 2c 65 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 6d 28 29 7d 3b 74 72 79 7b 48 2e 61 70 70 6c 79 28 45 3d 49 2e 63 61 6c 6c 28 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 76 2e 63 68 69 6c 64 4e 6f 64 65 73 29 2c 45 5b 76 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 5d 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 66 62 29 7b 48 3d 7b 61 Data Ascii: ig"),db=function(a,b,c){var d="0x"+b-65536;return d!==d\|\|c?b:0>d?String.fromCharCode(d+65536):String.fromCharCode(d>>10\|55296,1023&d\|56320)},eb=function(){m()};try{H.apply(E=I.call(v.childNodes),v.childNodes),E[v.childNodes.length].nodeType}catch(fb){H={a
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 29 7b 72 65 74 75 72 6e 20 61 2e 70 75 73 68 28 63 2b 22 20 22 29 3e 64 2e 63 61 63 68 65 4c 65 6e 67 74 68 26 26 64 65 6c 65 74 65 20 62 5b 61 2e 73 68 69 66 74 28 29 5d 2c 62 5b 63 2b 22 20 22 5d 3d 65 7d 72 65 74 75 72 6e 20 62 7d 66 75 6e 63 74 69 6f 6e 20 69 62 28 61 29 7b 72 65 74 75 72 6e 20 61 5b 75 5d 3d 21 30 2c 61 7d 66 75 6e 63 74 69 6f 6e 20 6a 62 28 61 29 7b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 21 21 61 28 62 29 7d 63 61 74 63 68 28 63 29 7b 72 65 74 75 72 6e 21 31 7d 66 69 6e 61 6c 6c 79 7b 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 62 29 2c 62 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e Data Ascii: ){return a.push(c+" ")>d.cacheLength&&delete b[a.shift()],b[c+" "]=e}return b}function ib(a){return a[u]=!0,a}function jb(a){var b=n.createElement("div");try{return!!a(b)}catch(c){return!1}finally{b.parentNode&&b.parentNode.removeChild(b),b=null}}function
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 22 2c 21 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 6a 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 67 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 24 2e 74 65 73 74 28 67 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 2c 63 2e 67 65 74 42 79 49 64 3d 6a 62 28 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6f 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 Data Ascii: ",!a.getAttribute("className")}),c.getElementsByTagName=jb(function(a){return a.appendChild(g.createComment("")),!a.getElementsByTagName("*").length}),c.getElementsByClassName=$.test(g.getElementsByClassName),c.getById=jb(function(a){return o.appendChild(
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 22 5b 2a 5e 24 5d 3d 22 2b 4c 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 73 65 6c 65 63 74 65 64 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 5c 5c 5b 22 2b 4c 2b 22 2a 28 3f 3a 76 61 6c 75 65 7c 22 2b 4b 2b 22 29 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 69 64 7e 3d 22 2b 75 2b 22 2d 5d 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 7e 3d 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 71 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 75 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 Data Ascii: "[^$]="+L+"(?:''\|\"\")"),a.querySelectorAll("[selected]").length\|\|q.push("\\["+L+"(?:value\|"+K+")"),a.querySelectorAll("[id~="+u+"-]").length\|\|q.push("~="),a.querySelectorAll(":checked").length\|\|q.push(":checked"),a.querySelectorAll("a#"+u+"+").length
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 62 29 3a 31 2c 31 26 64 7c 7c 21 63 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 62 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 61 29 3d 3d 3d 64 3f 61 3d 3d 3d 67 7c 7c 61 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 61 29 3f 2d 31 3a 62 3d 3d 3d 67 7c 7c 62 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 4a 28 6b 2c 61 29 2d 4a 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 Data Ascii: ocumentPosition(b):1,1&d\|\|!c.sortDetached&&b.compareDocumentPosition(a)===d?a===g\|\|a.ownerDocument===v&&t(v,a)?-1:b===g\|\|b.ownerDocument===v&&t(v,b)?1:k?J(k,a)-J(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNod

Timestamp	Bytes transferred	Direction	Data
2024-12-23 23:25:31 UTC	531	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://rompoy.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-23 23:25:31 UTC	611	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 3517864 Date: Mon, 23 Dec 2024 23:25:31 GMT X-Served-By: cache-lga21931-LGA, cache-nyc-kteb1890078-NYC X-Cache: HIT, HIT X-Cache-Hits: 55, 0 X-Timer: S1734996332.742147,VS0,VE1 Vary: Accept-Encoding
2024-12-23 23:25:31 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2024-12-23 23:25:31 UTC	1378	IN	Data Raw: 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 65 3f 73 2e 63 61 6c 6c 28 74 68 69 73 29 3a 65 3c 30 3f 74 68 69 73 5b 65 2b 74 68 69 73 2e 6c 65 6e 67 74 68 5d 3a 74 68 69 73 5b 65 5d 7d 2c 70 75 73 68 53 74 61 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 53 2e 6d 65 72 67 65 28 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 2c 65 29 3b 72 65 74 75 72 6e 20 74 2e 70 72 65 76 4f 62 6a 65 63 74 3d 74 68 69 73 2c 74 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 2e 65 61 63 68 28 74 68 69 73 2c 65 29 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 53 2e 6d 61 70 28 74 68 69 73 2c 66 Data Ascii: },get:function(e){return null==e?s.call(this):e<0?this[e+this.length]:this[e]},pushStack:function(e){var t=S.merge(this.constructor(),e);return t.prevObject=this,t},each:function(e){return S.each(this,e)},map:function(n){return this.pushStack(S.map(this,f
2024-12-23 23:25:31 UTC	1378	IN	Data Raw: 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3b 72 65 74 75 72 6e 21 28 21 65 7c 7c 22 5b 6f 62 6a 65 63 74 20 4f 62 6a 65 63 74 5d 22 21 3d 3d 6f 2e 63 61 6c 6c 28 65 29 29 26 26 28 21 28 74 3d 72 28 65 29 29 7c 7c 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6e 3d 76 2e 63 61 6c 6c 28 74 2c 22 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 26 26 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 26 26 61 2e 63 61 6c 6c 28 6e 29 3d 3d 3d 6c 29 7d 2c 69 73 45 6d 70 74 79 4f 62 6a 65 63 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 66 6f 72 28 74 20 69 6e 20 65 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 67 6c 6f 62 61 6c 45 76 61 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 62 28 65 2c 7b 6e 6f 6e 63 65 3a 74 26 26 74 2e 6e 6f Data Ascii: on(e){var t,n;return!(!e\|\|"[object Object]"!==o.call(e))&&(!(t=r(e))\|\|"function"==typeof(n=v.call(t,"constructor")&&t.constructor)&&a.call(n)===l)},isEmptyObject:function(e){var t;for(t in e)return!1;return!0},globalEval:function(e,t,n){b(e,{nonce:t&&t.no
2024-12-23 23:25:31 UTC	1378	IN	Data Raw: 5d 2c 71 3d 74 2e 70 6f 70 2c 4c 3d 74 2e 70 75 73 68 2c 48 3d 74 2e 70 75 73 68 2c 4f 3d 74 2e 73 6c 69 63 65 2c 50 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 2c 72 3d 65 2e 6c 65 6e 67 74 68 3b 6e 3c 72 3b 6e 2b 2b 29 69 66 28 65 5b 6e 5d 3d 3d 3d 74 29 72 65 74 75 72 6e 20 6e 3b 72 65 74 75 72 6e 2d 31 7d 2c 52 3d 22 63 68 65 63 6b 65 64 7c 73 65 6c 65 63 74 65 64 7c 61 73 79 6e 63 7c 61 75 74 6f 66 6f 63 75 73 7c 61 75 74 6f 70 6c 61 79 7c 63 6f 6e 74 72 6f 6c 73 7c 64 65 66 65 72 7c 64 69 73 61 62 6c 65 64 7c 68 69 64 64 65 6e 7c 69 73 6d 61 70 7c 6c 6f 6f 70 7c 6d 75 6c 74 69 70 6c 65 7c 6f 70 65 6e 7c 72 65 61 64 6f 6e 6c 79 7c 72 65 71 75 69 72 65 64 7c 73 63 6f 70 65 64 22 2c 4d 3d 22 5b 5c 5c 78 32 30 5c 5c 74 Data Ascii: ],q=t.pop,L=t.push,H=t.push,O=t.slice,P=function(e,t){for(var n=0,r=e.length;n<r;n++)if(e[n]===t)return n;return-1},R="checked\|selected\|async\|autofocus\|autoplay\|controls\|defer\|disabled\|hidden\|ismap\|loop\|multiple\|open\|readonly\|required\|scoped",M="[\\x20\\t
2024-12-23 23:25:31 UTC	1378	IN	Data Raw: 2c 65 65 3d 2f 5b 2b 7e 5d 2f 2c 74 65 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 5b 5c 5c 64 61 2d 66 41 2d 46 5d 7b 31 2c 36 7d 22 2b 4d 2b 22 3f 7c 5c 5c 5c 5c 28 5b 5e 5c 5c 72 5c 5c 6e 5c 5c 66 5d 29 22 2c 22 67 22 29 2c 6e 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 22 30 78 22 2b 65 2e 73 6c 69 63 65 28 31 29 2d 36 35 35 33 36 3b 72 65 74 75 72 6e 20 74 7c 7c 28 6e 3c 30 3f 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 2b 36 35 35 33 36 29 3a 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 6e 3e 3e 31 30 7c 35 35 32 39 36 2c 31 30 32 33 26 6e 7c 35 36 33 32 30 29 29 7d 2c 72 65 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 30 2d 5c 78 31 66 5c Data Ascii: ,ee=/[+~]/,te=new RegExp("\\\\[\\da-fA-F]{1,6}"+M+"?\|\\\\([^\\r\\n\\f])","g"),ne=function(e,t){var n="0x"+e.slice(1)-65536;return t\|\|(n<0?String.fromCharCode(n+65536):String.fromCharCode(n>>10\|55296,1023&n\|56320))},re=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\0-\x1f\
2024-12-23 23:25:31 UTC	1378	IN	Data Raw: 29 29 7b 28 66 3d 65 65 2e 74 65 73 74 28 74 29 26 26 79 65 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 3d 65 26 26 64 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 73 2e 72 65 70 6c 61 63 65 28 72 65 2c 69 65 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 68 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 78 65 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b 72 65 74 75 72 6e 20 48 2e 61 70 70 6c 79 28 6e 2c 66 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 63 29 29 2c 6e 7d 63 61 74 63 68 28 Data Ascii: )){(f=ee.test(t)&&ye(e.parentNode)\|\|e)===e&&d.scope\|\|((s=e.getAttribute("id"))?s=s.replace(re,ie):e.setAttribute("id",s=S)),o=(l=h(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+xe(l[o]);c=l.join(",")}try{return H.apply(n,f.querySelectorAll(c)),n}catch(
2024-12-23 23:25:31 UTC	1378	IN	Data Raw: 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 61 28 5b 5d 2c 65 2e 6c 65 6e 67 74 68 2c 6f 29 2c 69 3d 72 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 69 2d 2d 29 65 5b 6e 3d 72 5b 69 5d 5d 26 26 28 65 5b 6e 5d 3d 21 28 74 5b 6e 5d 3d 65 5b 6e 5d 29 29 7d 29 7d 29 7d 66 75 6e 63 74 69 6f 6e 20 79 65 28 65 29 7b 72 65 74 75 72 6e 20 65 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 26 26 65 7d 66 6f 72 28 65 20 69 6e 20 64 3d 73 65 2e 73 75 70 70 6f 72 74 3d 7b 7d 2c 69 3d 73 65 2e 69 73 58 4d 4c 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 26 26 65 2e 6e 61 6d 65 73 70 61 63 65 55 52 49 2c 6e 3d 65 26 26 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c Data Ascii: ion(e,t){var n,r=a([],e.length,o),i=r.length;while(i--)e[n=r[i]]&&(e[n]=!(t[n]=e[n]))})})}function ye(e){return e&&"undefined"!=typeof e.getElementsByTagName&&e}for(e in d=se.support={},i=se.isXML=function(e){var t=e&&e.namespaceURI,n=e&&(e.ownerDocument\|
2024-12-23 23:25:31 UTC	1378	IN	Data Raw: 74 69 6f 6e 28 65 29 7b 76 61 72 20 6e 3d 65 2e 72 65 70 6c 61 63 65 28 74 65 2c 6e 65 29 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 74 26 26 74 2e 76 61 6c 75 65 3d 3d 3d 6e 7d 7d 2c 62 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 45 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 3d 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 65 29 3b 69 66 28 6f 29 7b 69 66 28 28 Data Ascii: tion(e){var n=e.replace(te,ne);return function(e){var t="undefined"!=typeof e.getAttributeNode&&e.getAttributeNode("id");return t&&t.value===n}},b.find.ID=function(e,t){if("undefined"!=typeof t.getElementById&&E){var n,r,i,o=t.getElementById(e);if(o){if((
2024-12-23 23:25:31 UTC	1378	IN	Data Raw: 5b 22 2b 4d 2b 22 2a 6e 61 6d 65 22 2b 4d 2b 22 2a 3d 22 2b 4d 2b 22 2a 28 3f 3a 27 27 7c 5c 22 5c 22 29 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 3a 63 68 65 63 6b 65 64 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 3a 63 68 65 63 6b 65 64 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 61 23 22 2b 53 2b 22 2b 2a 22 29 2e 6c 65 6e 67 74 68 7c 7c 76 2e 70 75 73 68 28 22 2e 23 2e 2b 5b 2b 7e 5d 22 29 2c 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5c 5c 5c 66 22 29 2c 76 2e 70 75 73 68 28 22 5b 5c 5c 72 5c 5c 6e 5c 5c 66 5d 22 29 7d 29 2c 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 Data Ascii: ["+M+"name"+M+"="+M+"(?:''\|\"\")"),e.querySelectorAll(":checked").length\|\|v.push(":checked"),e.querySelectorAll("a#"+S+"+").length\|\|v.push(".#.+[+~]"),e.querySelectorAll("\\\f"),v.push("[\\r\\n\\f]")}),ce(function(e){e.innerHTML="<a href='' disabled='
2024-12-23 23:25:32 UTC	1378	IN	Data Raw: 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 2d 21 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 3b 72 65 74 75 72 6e 20 6e 7c 7c 28 31 26 28 6e 3d 28 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 65 29 3d 3d 28 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 7c 7c 74 29 3f 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 74 29 3a 31 29 7c 7c 21 64 2e 73 6f 72 74 44 65 74 61 63 68 65 64 26 26 74 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 65 29 3d 3d 3d 6e 3f 65 3d 3d 43 7c 7c 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 26 26 79 28 70 2c 65 29 3f 2d 31 3a 74 3d 3d 43 7c 7c 74 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3d 3d 70 Data Ascii: e.compareDocumentPosition-!t.compareDocumentPosition;return n\|\|(1&(n=(e.ownerDocument\|\|e)==(t.ownerDocument\|\|t)?e.compareDocumentPosition(t):1)\|\|!d.sortDetached&&t.compareDocumentPosition(e)===n?e==C\|\|e.ownerDocument==p&&y(p,e)?-1:t==C\|\|t.ownerDocument==p

Timestamp	Bytes transferred	Direction	Data
2024-12-23 23:25:31 UTC	577	OUT	GET /font-awesome/4.5.0/css/font-awesome.min.css HTTP/1.1 Host: maxcdn.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://rompoy.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-23 23:25:31 UTC	953	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 23:25:31 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"4fbd15cb6047af93373f4f895639c8bf" Last-Modified: Mon, 25 Jan 2021 22:04:54 GMT CDN-ProxyVer: 1.04 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 10/17/2024 08:42:07 CDN-EdgeStorageId: 1029 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 0 CDN-RequestId: e5b0dab32359374cca78275ba8acb177 CDN-Cache: HIT CF-Cache-Status: HIT Age: 2217445 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f6c1c816a0443a5-EWR alt-svc: h3=":443"; ma=86400
2024-12-23 23:25:31 UTC	416	IN	Data Raw: 36 62 34 61 0d 0a 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 35 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 35 Data Ascii: 6b4a/! Font Awesome 4.5.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.5
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 77 6f 66 66 3f 76 3d 34 2e 35 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 77 6f 66 66 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 74 74 66 3f 76 3d 34 2e 35 2e 30 27 29 20 66 6f 72 6d 61 74 28 27 74 72 75 65 74 79 70 65 27 29 2c 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 73 76 67 3f 76 3d 34 2e 35 2e 30 23 66 6f 6e 74 61 77 65 73 6f 6d 65 72 65 67 75 6c 61 72 27 29 20 66 6f 72 6d 61 74 28 27 73 76 67 27 29 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 7d 2e 66 61 7b 64 69 73 70 6c Data Ascii: ('../fonts/fontawesome-webfont.woff?v=4.5.0') format('woff'),url('../fonts/fontawesome-webfont.ttf?v=4.5.0') format('truetype'),url('../fonts/fontawesome-webfont.svg?v=4.5.0#fontawesomeregular') format('svg');font-weight:normal;font-style:normal}.fa{displ
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 70 69 6e 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 31 30 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 33 35 39 Data Ascii: 0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359deg)}}@keyframes fa-spin{0%{-webkit-transform:rotate(0deg);transform:rotate(0deg)}100%{-webkit-transform:rotate(359deg);transform:rotate(359
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 3a 61 62 73 6f 6c 75 74 65 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 66 61 2d 73 74 61 63 6b 2d 31 78 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 7d 2e 66 61 2d 73 74 61 63 6b 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 69 6e 76 65 72 73 65 7b 63 6f 6c 6f 72 3a 23 66 66 66 7d 2e 66 61 2d 67 6c 61 73 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 30 22 7d 2e 66 61 2d 6d 75 73 69 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 31 22 7d 2e 66 61 2d 73 65 61 72 63 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 30 32 22 7d 2e 66 61 2d 65 6e 76 65 6c 6f 70 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 Data Ascii: :absolute;left:0;width:100%;text-align:center}.fa-stack-1x{line-height:inherit}.fa-stack-2x{font-size:2em}.fa-inverse{color:#fff}.fa-glass:before{content:"\f000"}.fa-music:before{content:"\f001"}.fa-search:before{content:"\f002"}.fa-envelope-o:before{cont
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 34 22 7d 2e 66 61 2d 68 65 61 64 70 68 6f 6e 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 35 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 6f 66 66 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 36 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 37 22 7d 2e 66 61 2d 76 6f 6c 75 6d 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 38 22 7d 2e 66 61 2d 71 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 39 22 7d 2e 66 61 2d 62 61 72 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 32 61 22 7d 2e 66 61 2d 74 61 67 3a 62 65 66 Data Ascii: before{content:"\f024"}.fa-headphones:before{content:"\f025"}.fa-volume-off:before{content:"\f026"}.fa-volume-down:before{content:"\f027"}.fa-volume-up:before{content:"\f028"}.fa-qrcode:before{content:"\f029"}.fa-barcode:before{content:"\f02a"}.fa-tag:bef
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 39 22 7d 2e 66 61 2d 62 61 63 6b 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 61 22 7d 2e 66 61 2d 70 6c 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 62 22 7d 2e 66 61 2d 70 61 75 73 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 63 22 7d 2e 66 61 2d 73 74 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 64 22 7d 2e 66 61 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 65 22 7d 2e 66 61 2d 66 61 73 74 2d 66 6f 72 77 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 30 22 7d 2e 66 61 2d 73 74 65 70 2d 66 6f 72 77 61 Data Ascii: -backward:before{content:"\f049"}.fa-backward:before{content:"\f04a"}.fa-play:before{content:"\f04b"}.fa-pause:before{content:"\f04c"}.fa-stop:before{content:"\f04d"}.fa-forward:before{content:"\f04e"}.fa-fast-forward:before{content:"\f050"}.fa-step-forwa
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 3a 22 5c 66 30 37 30 22 7d 2e 66 61 2d 77 61 72 6e 69 6e 67 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 65 78 63 6c 61 6d 61 74 69 6f 6e 2d 74 72 69 61 6e 67 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 31 22 7d 2e 66 61 2d 70 6c 61 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 33 22 7d 2e 66 61 2d 72 61 6e 64 6f 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 34 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 35 22 7d 2e 66 61 2d 6d 61 67 6e 65 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 36 22 7d 2e 66 61 2d 63 68 65 Data Ascii: :"\f070"}.fa-warning:before,.fa-exclamation-triangle:before{content:"\f071"}.fa-plane:before{content:"\f072"}.fa-calendar:before{content:"\f073"}.fa-random:before{content:"\f074"}.fa-comment:before{content:"\f075"}.fa-magnet:before{content:"\f076"}.fa-che
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 7d 2e 66 61 2d 73 71 75 61 72 65 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 36 22 7d 2e 66 61 2d 62 6f 6f 6b 6d 61 72 6b 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 37 22 7d 2e 66 61 2d 70 68 6f 6e 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 38 22 7d 2e 66 61 2d 74 77 69 74 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 39 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 66 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 61 22 7d 2e 66 61 2d 67 69 74 68 75 62 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 62 22 7d 2e 66 61 2d 75 6e 6c 6f 63 6b 3a 62 65 Data Ascii: }.fa-square-o:before{content:"\f096"}.fa-bookmark-o:before{content:"\f097"}.fa-phone-square:before{content:"\f098"}.fa-twitter:before{content:"\f099"}.fa-facebook-f:before,.fa-facebook:before{content:"\f09a"}.fa-github:before{content:"\f09b"}.fa-unlock:be
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 66 6c 6f 70 70 79 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 37 22 7d 2e 66 61 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 38 22 7d 2e 66 61 2d 6e 61 76 69 63 6f 6e 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 72 65 6f 72 64 65 72 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 62 61 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 39 22 7d 2e 66 61 2d 6c 69 73 74 2d 75 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 61 22 7d 2e 66 61 2d 6c 69 73 74 2d 6f 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 62 22 7d 2e 66 61 2d 73 74 72 69 6b 65 74 68 72 6f 75 67 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 63 63 22 7d 2e 66 61 2d 75 6e 64 65 Data Ascii: floppy-o:before{content:"\f0c7"}.fa-square:before{content:"\f0c8"}.fa-navicon:before,.fa-reorder:before,.fa-bars:before{content:"\f0c9"}.fa-list-ul:before{content:"\f0ca"}.fa-list-ol:before{content:"\f0cb"}.fa-strikethrough:before{content:"\f0cc"}.fa-unde
2024-12-23 23:25:31 UTC	1369	IN	Data Raw: 61 73 74 65 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6c 69 70 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 61 22 7d 2e 66 61 2d 6c 69 67 68 74 62 75 6c 62 2d 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 62 22 7d 2e 66 61 2d 65 78 63 68 61 6e 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 63 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 64 6f 77 6e 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 64 22 7d 2e 66 61 2d 63 6c 6f 75 64 2d 75 70 6c 6f 61 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 65 65 22 7d 2e 66 61 2d 75 73 65 72 2d 6d 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 30 22 7d 2e 66 61 2d 73 74 65 74 68 6f 73 63 6f 70 Data Ascii: aste:before,.fa-clipboard:before{content:"\f0ea"}.fa-lightbulb-o:before{content:"\f0eb"}.fa-exchange:before{content:"\f0ec"}.fa-cloud-download:before{content:"\f0ed"}.fa-cloud-upload:before{content:"\f0ee"}.fa-user-md:before{content:"\f0f0"}.fa-stethoscop

Timestamp	Bytes transferred	Direction	Data
2024-12-23 23:25:31 UTC	586	OUT	GET /bootstrap/4.5.2/js/bootstrap.min.js HTTP/1.1 Host: stackpath.bootstrapcdn.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://rompoy.com.co sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://rompoy.com.co/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-12-23 23:25:32 UTC	965	IN	HTTP/1.1 200 OK Date: Mon, 23 Dec 2024 23:25:31 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close CDN-PullZone: 252412 CDN-Uid: b1941f61-b576-4f40-80de-5677acb38f74 CDN-RequestCountryCode: US Vary: Accept-Encoding Access-Control-Allow-Origin: * Cache-Control: public, max-age=31919000 ETag: W/"02d223393e00c273efdcb1ade8f4f8b1" Last-Modified: Mon, 25 Jan 2021 22:04:11 GMT CDN-ProxyVer: 1.07 CDN-RequestPullSuccess: True CDN-RequestPullCode: 200 CDN-CachedAt: 12/15/2024 14:03:42 CDN-EdgeStorageId: 1236 timing-allow-origin: * cross-origin-resource-policy: cross-origin X-Content-Type-Options: nosniff CDN-Status: 200 CDN-RequestTime: 1 CDN-RequestId: f55139279e66fed7c6e634b94b4abc54 CDN-Cache: HIT CF-Cache-Status: HIT Age: 18868 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Server: cloudflare CF-RAY: 8f6c1c822c494277-EWR alt-svc: h3=":443"; ma=86400
2024-12-23 23:25:32 UTC	404	IN	Data Raw: 37 62 65 65 0d 0a 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 34 2e 35 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c Data Ascii: 7bee/! Bootstrap v4.5.2 (https://getbootstrap.com/) * Copyright 2011-2020 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,
2024-12-23 23:25:32 UTC	1369	IN	Data Raw: 65 28 5b 22 65 78 70 6f 72 74 73 22 2c 22 6a 71 75 65 72 79 22 2c 22 70 6f 70 70 65 72 2e 6a 73 22 5d 2c 65 29 3a 65 28 28 74 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 54 68 69 73 3f 67 6c 6f 62 61 6c 54 68 69 73 3a 74 7c 7c 73 65 6c 66 29 2e 62 6f 6f 74 73 74 72 61 70 3d 7b 7d 2c 74 2e 6a 51 75 65 72 79 2c 74 2e 50 6f 70 70 65 72 29 7d 28 74 68 69 73 2c 28 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 69 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 6e 3d 30 3b 6e 3c 65 2e 6c 65 6e 67 74 68 3b 6e 2b 2b 29 7b 76 61 72 20 69 3d 65 5b 6e 5d 3b 69 2e 65 6e 75 6d 65 72 61 62 6c 65 3d 69 2e 65 6e 75 6d 65 72 61 62 6c 65 7c 7c 21 31 2c 69 2e 63 6f 6e 66 69 67 Data Ascii: e(["exports","jquery","popper.js"],e):e((t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap={},t.jQuery,t.Popper)}(this,(function(t,e,n){"use strict";function i(t,e){for(var n=0;n<e.length;n++){var i=e[n];i.enumerable=i.enumerable\|\|!1,i.config
2024-12-23 23:25:32 UTC	1369	IN	Data Raw: 74 28 69 29 3b 72 65 74 75 72 6e 20 6f 7c 7c 73 3f 28 6e 3d 6e 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 69 3d 69 2e 73 70 6c 69 74 28 22 2c 22 29 5b 30 5d 2c 31 65 33 2a 28 70 61 72 73 65 46 6c 6f 61 74 28 6e 29 2b 70 61 72 73 65 46 6c 6f 61 74 28 69 29 29 29 3a 30 7d 2c 72 65 66 6c 6f 77 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 2e 6f 66 66 73 65 74 48 65 69 67 68 74 7d 2c 74 72 69 67 67 65 72 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 65 28 74 29 2e 74 72 69 67 67 65 72 28 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 29 7d 2c 73 75 70 70 6f 72 74 73 54 72 61 6e 73 69 74 69 6f 6e 45 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 42 6f 6f 6c 65 61 6e 28 22 74 72 61 6e 73 69 74 69 Data Ascii: t(i);return o\|\|s?(n=n.split(",")[0],i=i.split(",")[0],1e3*(parseFloat(n)+parseFloat(i))):0},reflow:function(t){return t.offsetHeight},triggerTransitionEnd:function(t){e(t).trigger("transitionend")},supportsTransitionEnd:function(){return Boolean("transiti
2024-12-23 23:25:32 UTC	1369	IN	Data Raw: 70 65 63 69 61 6c 5b 61 2e 54 52 41 4e 53 49 54 49 4f 4e 5f 45 4e 44 5d 3d 7b 62 69 6e 64 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 64 65 6c 65 67 61 74 65 54 79 70 65 3a 22 74 72 61 6e 73 69 74 69 6f 6e 65 6e 64 22 2c 68 61 6e 64 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 69 66 28 65 28 74 2e 74 61 72 67 65 74 29 2e 69 73 28 74 68 69 73 29 29 72 65 74 75 72 6e 20 74 2e 68 61 6e 64 6c 65 4f 62 6a 2e 68 61 6e 64 6c 65 72 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 3b 76 61 72 20 6c 3d 22 61 6c 65 72 74 22 2c 63 3d 65 2e 66 6e 5b 6c 5d 2c 68 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 29 7b 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 3d 74 7d 76 61 72 20 6e 3d 74 2e 70 72 6f 74 6f 74 Data Ascii: pecial[a.TRANSITION_END]={bindType:"transitionend",delegateType:"transitionend",handle:function(t){if(e(t.target).is(this))return t.handleObj.handler.apply(this,arguments)}};var l="alert",c=e.fn[l],h=function(){function t(t){this._element=t}var n=t.protot
2024-12-23 23:25:32 UTC	1369	IN	Data Raw: 22 7d 7d 5d 29 2c 74 7d 28 29 3b 65 28 64 6f 63 75 6d 65 6e 74 29 2e 6f 6e 28 22 63 6c 69 63 6b 2e 62 73 2e 61 6c 65 72 74 2e 64 61 74 61 2d 61 70 69 22 2c 27 5b 64 61 74 61 2d 64 69 73 6d 69 73 73 3d 22 61 6c 65 72 74 22 5d 27 2c 68 2e 5f 68 61 6e 64 6c 65 44 69 73 6d 69 73 73 28 6e 65 77 20 68 29 29 2c 65 2e 66 6e 5b 6c 5d 3d 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 2c 65 2e 66 6e 5b 6c 5d 2e 43 6f 6e 73 74 72 75 63 74 6f 72 3d 68 2c 65 2e 66 6e 5b 6c 5d 2e 6e 6f 43 6f 6e 66 6c 69 63 74 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 2e 66 6e 5b 6c 5d 3d 63 2c 68 2e 5f 6a 51 75 65 72 79 49 6e 74 65 72 66 61 63 65 7d 3b 76 61 72 20 75 3d 65 2e 66 6e 2e 62 75 74 74 6f 6e 2c 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 Data Ascii: "}}]),t}();e(document).on("click.bs.alert.data-api",'[data-dismiss="alert"]',h._handleDismiss(new h)),e.fn[l]=h._jQueryInterface,e.fn[l].Constructor=h,e.fn[l].noConflict=function(){return e.fn[l]=c,h._jQueryInterface};var u=e.fn.button,d=function(){functi
2024-12-23 23:25:32 UTC	1369	IN	Data Raw: 7b 76 61 72 20 6e 3d 74 2e 74 61 72 67 65 74 2c 69 3d 6e 3b 69 66 28 65 28 6e 29 2e 68 61 73 43 6c 61 73 73 28 22 62 74 6e 22 29 7c 7c 28 6e 3d 65 28 6e 29 2e 63 6c 6f 73 65 73 74 28 22 2e 62 74 6e 22 29 5b 30 5d 29 2c 21 6e 7c 7c 6e 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6e 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 29 74 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 3b 65 6c 73 65 7b 76 61 72 20 6f 3d 6e 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 22 68 69 64 64 65 6e 22 5d 29 27 29 3b 69 66 28 6f 26 26 28 6f 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 6f 2e 63 6c 61 73 Data Ascii: {var n=t.target,i=n;if(e(n).hasClass("btn")\|\|(n=e(n).closest(".btn")[0]),!n\|\|n.hasAttribute("disabled")\|\|n.classList.contains("disabled"))t.preventDefault();else{var o=n.querySelector('input:not([type="hidden"])');if(o&&(o.hasAttribute("disabled")\|\|o.clas
2024-12-23 23:25:32 UTC	1369	IN	Data Raw: 28 6e 75 6d 62 65 72 7c 62 6f 6f 6c 65 61 6e 29 22 2c 6b 65 79 62 6f 61 72 64 3a 22 62 6f 6f 6c 65 61 6e 22 2c 73 6c 69 64 65 3a 22 28 62 6f 6f 6c 65 61 6e 7c 73 74 72 69 6e 67 29 22 2c 70 61 75 73 65 3a 22 28 73 74 72 69 6e 67 7c 62 6f 6f 6c 65 61 6e 29 22 2c 77 72 61 70 3a 22 62 6f 6f 6c 65 61 6e 22 2c 74 6f 75 63 68 3a 22 62 6f 6f 6c 65 61 6e 22 7d 2c 76 3d 7b 54 4f 55 43 48 3a 22 74 6f 75 63 68 22 2c 50 45 4e 3a 22 70 65 6e 22 7d 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 74 28 74 2c 65 29 7b 74 68 69 73 2e 5f 69 74 65 6d 73 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 6e 74 65 72 76 61 6c 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 6e 75 6c 6c 2c 74 68 69 73 2e 5f 69 73 50 61 75 73 65 64 3d 21 31 Data Ascii: (number\|boolean)",keyboard:"boolean",slide:"(boolean\|string)",pause:"(string\|boolean)",wrap:"boolean",touch:"boolean"},v={TOUCH:"touch",PEN:"pen"},b=function(){function t(t,e){this._items=null,this._interval=null,this._activeElement=null,this._isPaused=!1
2024-12-23 23:25:32 UTC	1369	IN	Data Raw: 62 6c 65 3a 74 68 69 73 2e 6e 65 78 74 29 2e 62 69 6e 64 28 74 68 69 73 29 2c 74 68 69 73 2e 5f 63 6f 6e 66 69 67 2e 69 6e 74 65 72 76 61 6c 29 29 7d 2c 6e 2e 74 6f 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 6e 3d 74 68 69 73 3b 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 3d 74 68 69 73 2e 5f 65 6c 65 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 22 2e 61 63 74 69 76 65 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 3b 76 61 72 20 69 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 74 68 69 73 2e 5f 61 63 74 69 76 65 45 6c 65 6d 65 6e 74 29 3b 69 66 28 21 28 74 3e 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d 31 7c 7c 74 3c 30 29 29 69 66 28 74 68 69 73 2e 5f 69 73 53 6c 69 64 69 6e 67 29 65 28 74 68 Data Ascii: ble:this.next).bind(this),this._config.interval))},n.to=function(t){var n=this;this._activeElement=this._element.querySelector(".active.carousel-item");var i=this._getItemIndex(this._activeElement);if(!(t>this._items.length-1\|\|t<0))if(this._isSliding)e(th
2024-12-23 23:25:32 UTC	1369	IN	Data Raw: 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 3f 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 63 6c 69 65 6e 74 58 3a 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 7c 7c 28 74 2e 74 6f 75 63 68 53 74 61 72 74 58 3d 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 74 6f 75 63 68 65 73 5b 30 5d 2e 63 6c 69 65 6e 74 58 29 7d 2c 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 2e 5f 70 6f 69 6e 74 65 72 45 76 65 6e 74 26 26 76 5b 65 2e 6f 72 69 67 69 6e 61 6c 45 76 65 6e 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 2e 74 6f 55 70 70 65 72 43 61 73 65 28 29 5d 26 26 28 74 2e 74 6f 75 63 68 44 Data Ascii: t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]?t.touchStartX=e.originalEvent.clientX:t._pointerEvent\|\|(t.touchStartX=e.originalEvent.touches[0].clientX)},i=function(e){t._pointerEvent&&v[e.originalEvent.pointerType.toUpperCase()]&&(t.touchD
2024-12-23 23:25:32 UTC	1369	IN	Data Raw: 6d 49 6e 64 65 78 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 69 74 65 6d 73 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 5b 5d 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 2e 63 61 72 6f 75 73 65 6c 2d 69 74 65 6d 22 29 29 3a 5b 5d 2c 74 68 69 73 2e 5f 69 74 65 6d 73 2e 69 6e 64 65 78 4f 66 28 74 29 7d 2c 6e 2e 5f 67 65 74 49 74 65 6d 42 79 44 69 72 65 63 74 69 6f 6e 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 76 61 72 20 6e 3d 22 6e 65 78 74 22 3d 3d 3d 74 2c 69 3d 22 70 72 65 76 22 3d 3d 3d 74 2c 6f 3d 74 68 69 73 2e 5f 67 65 74 49 74 65 6d 49 6e 64 65 78 28 65 29 2c 73 3d 74 68 69 73 2e 5f 69 74 65 6d 73 2e 6c 65 6e 67 74 68 2d Data Ascii: mIndex=function(t){return this._items=t&&t.parentNode?[].slice.call(t.parentNode.querySelectorAll(".carousel-item")):[],this._items.indexOf(t)},n._getItemByDirection=function(t,e){var n="next"===t,i="prev"===t,o=this._getItemIndex(e),s=this._items.length-