Edit tour

Windows Analysis Report
https://mrohailkhan.com/energyaustralia/auth/auhs1/

Overview

General Information

Sample URL:	https://mrohailkhan.com/energyaustralia/auth/auhs1/
Analysis ID:	1589773
Infos:

Detection

Score:	56
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

HTML body with high number of embedded SVGs detected

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5064 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1436 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2220,i,2144574249444189800,3910111029932465452,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 1244 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5784 --field-trial-handle=2220,i,2144574249444189800,3910111029932465452,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6848 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5844 --field-trial-handle=2220,i,2144574249444189800,3910111029932465452,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6832 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mrohailkhan.com/energyaustralia/auth/auhs1/" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

HTTP traffic detected: POST /youtubei/v1/guide?prettyPrint=false HTTP/1.1Host: www.youtube.comConnection: keep-aliveContent-Length: 2716sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-arch: "x86"sec-ch-ua-platform-version: "10.0.0"sec-ch-ua-full-version-list: "Google Chrome";v="117.0.5938.132", "Not;A=Brand";v="8.0.0.0", "Chromium";v="117.0.5938.132"sec-ch-ua-wow64: ?0sec-ch-ua-model: ""sec-ch-ua-bitness: "64"sec-ch-ua-platform: "Windows"X-Youtube-Bootstrap-Logged-In: falsesec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/jsonsec-ch-ua-full-version: "117.0.5938.132"X-Youtube-Client-Name: 1X-Youtube-Client-Version: 2.20250108.06.00X-Goog-Visitor-Id: CgtMb1J3NVVOTno2SSi1xZK8BjIKCgJVUxIEGgAgRA%3D%3DAccept: */*Origin: https://www.youtube.comX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEIoOHKAQiVocsBCJz+zAEIhaDNAQjcvc0BCLnKzQEIotHNAQiK080BCJ7WzQEIp9jNAQj5wNQVGPbJzQEYutLNARjrjaUXSec-Fetch-Site: same-originSec-Fetch-Mode: same-originSec-Fetch-Dest: emptyReferer: https://www.youtube.com/@rohailkhan6588Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: GPS=1; YSC=WELMQFwLr84; __Secure-ROLLOUT_TOKEN=CJKjo_TC4JnrpwEQw6vh3fnxigMYw6vh3fnxigM%3D; VISITOR_INFO1_LIVE=LoRw5UNNz6I; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgRA%3D%3D; PREF=tz=America.New_York

Source: https://mrohailkhan.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.34.0	Avira URL Cloud: Label: malware
Source: https://mrohailkhan.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3	Avira URL Cloud: Label: malware
Source: https://mrohailkhan.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.26.3	Avira URL Cloud: Label: malware
Source: https://mrohailkhan.com/wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.26.3	Avira URL Cloud: Label: malware
Source: https://mrohailkhan.com/wp-content/themes/hello-elementor/style.min.css?ver=3.2.1	Avira URL Cloud: Label: malware
Source: https://mrohailkhan.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	Avira URL Cloud: Label: malware
Source: https://mrohailkhan.com/wp-content/plugins/Elementor%20Pro%20v3.26.2%20-%20The%20Most%20Advanced%20Website%20Builder%20Plugin/assets/js/form.ae7f04a9f3cbc167835c.bundle.min.js	Avira URL Cloud: Label: malware
Source: https://mrohailkhan.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	Avira URL Cloud: Label: malware
Source: https://mrohailkhan.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.26.3	Avira URL Cloud: Label: malware
Source: https://mrohailkhan.com/wp-content/uploads/elementor/css/post-183.css?ver=1736349655	Avira URL Cloud: Label: malware
Source: https://mrohailkhan.com/wp-content/plugins/Elementor%20Pro%20v3.26.2%20-%20The%20Most%20Advanced%20Website%20Builder%20Plugin/assets/js/webpack-pro.runtime.min.js?ver=3.26.2	Avira URL Cloud: Label: malware
Source: https://mrohailkhan.com/wp-content/plugins/Elementor%20Pro%20v3.26.2%20-%20The%20Most%20Advanced%20Website%20Builder%20Plugin/assets/css/widget-form.min.css?ver=3.26.2	Avira URL Cloud: Label: malware
Source: https://mrohailkhan.com/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-shrink.min.css?ver=3.26.3	Avira URL Cloud: Label: malware
Source: https://mrohailkhan.com/wp-content/uploads/2024/12/cropped-cropped-cropped-M.-Rohail-Khan-1-1-1-32x32.png	Avira URL Cloud: Label: malware
Source: https://mrohailkhan.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.34.0	Avira URL Cloud: Label: malware

Source: https://mrohailkhan.com/energyaustralia/auth/auhs1/	HTTP Parser: No <meta name="author".. found
Source: https://www.instagram.com/rohail_gm/#	HTTP Parser: No <meta name="author".. found
Source: https://www.instagram.com/rohail_gm/#	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/rohail94	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/rohail94	HTTP Parser: No <meta name="author".. found
Source: https://www.facebook.com/rohail94	HTTP Parser: No <meta name="author".. found

Source: https://mrohailkhan.com/energyaustralia/auth/auhs1/	HTTP Parser: No <meta name="copyright".. found
Source: https://www.instagram.com/rohail_gm/#	HTTP Parser: No <meta name="copyright".. found
Source: https://www.instagram.com/rohail_gm/#	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/rohail94	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/rohail94	HTTP Parser: No <meta name="copyright".. found
Source: https://www.facebook.com/rohail94	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: mrohailkhan.com
Source: global traffic	DNS traffic detected: DNS query: www.snapchat.com
Source: global traffic	DNS traffic detected: DNS query: cf-st.sc-cdn.net
Source: global traffic	DNS traffic detected: DNS query: static.snapchat.com
Source: global traffic	DNS traffic detected: DNS query: app.snapchat.com
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: rr2---sn-q4flrnlz.googlevideo.com
Source: global traffic	DNS traffic detected: DNS query: yt3.googleusercontent.com
Source: global traffic	DNS traffic detected: DNS query: youtube.com
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: www.instagram.com
Source: global traffic	DNS traffic detected: DNS query: static.cdninstagram.com
Source: global traffic	DNS traffic detected: DNS query: www.facebook.com
Source: global traffic	DNS traffic detected: DNS query: scontent-hou1-1.cdninstagram.com
Source: global traffic	DNS traffic detected: DNS query: scontent.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: video.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: static.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: scontent-hou1-1.xx.fbcdn.net
Source: global traffic	DNS traffic detected: DNS query: graph.instagram.com

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 13 Jan 2025 05:20:47 GMTServer: Apache/2Expires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://mrohailkhan.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeVary: Accept-Encoding,User-AgentTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 13 Jan 2025 05:21:02 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 13 Jan 2025 05:21:02 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 13 Jan 2025 05:21:04 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 13 Jan 2025 05:21:04 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 13 Jan 2025 05:21:04 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenLast-Modified: Wed, 02 May 2007 10:26:10 GMTContent-Type: text/plainContent-Length: 0Connection: closeAccess-Control-Allow-Origin: https://www.youtube.comAccess-Control-Allow-Credentials: trueTiming-Allow-Origin: https://www.youtube.comAccess-Control-Expose-Headers: Client-Protocol, Content-Length, Content-Type, X-Bandwidth-Est, X-Bandwidth-Est2, X-Bandwidth-Est3, X-Bandwidth-App-Limited, X-Bandwidth-Est-App-Limited, X-Bandwidth-Est-Comp, X-Bandwidth-Avg, X-Head-Time-Millis, X-Head-Time-Sec, X-Head-Seqnum, X-Response-Itag, X-Restrict-Formats-Hint, X-Sequence-Num, X-Segment-Lmt, X-Walltime-MsVary: OriginCross-Origin-Resource-Policy: cross-originX-Content-Type-Options: nosniffDate: Mon, 13 Jan 2025 05:21:05 GMTServer: gvs 1.0
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1736745692; path=/; domain=.instagram.com; httponlySet-Cookie: _js_ig_did=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1736745692; path=/; domain=.instagram.com; httponlySet-Cookie: datr=06KEZ0l1Bkx82HrviQibr88d; expires=Tue, 17-Feb-2026 05:21:33 GMT; Max-Age=34560000; path=/; domain=.instagram.com; secure; httponly; SameSite=NoneSet-Cookie: ig_did=172EAEAA-88D6-44C7-839A-C8DE7AE6B502; expires=Tue, 13-Jan-2026 05:21:33 GMT; Max-Age=31536000; path=/; domain=.instagram.com; secure; httponly; SameSite=Noneaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMT
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: JfLh3sryTPA8QpNpcpRs9gXnVE0Ebts/QPnHJFopsxcKzhapj09muv4VF1HpmdFi8NJIhuVlEXN7amN2gVWiVg==Date: Mon, 13 Jan 2025 05:21:40 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTcontent-security-policy: default-src .facebook.com .fbcdn.net .instagram.com data: blob:;script-src .teststagram.com .instagram.com static.cdninstagram.com .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'nonce-ngzvOplu' blob: data: 'self' 'wasm-unsafe-eval' https://.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src .teststagram.com .instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' .fbcdn.net .facebook.com;connect-src .teststagram.com .instagram.com wss://edge-chat.instagram.com connect.facebook.net .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: ws://localhost:* blob: .cdninstagram.com wss://.instagram.com:* 'self';font-src .teststagram.com .instagram.com static.cdninstagram.com data: .fbcdn.net .intern.facebook.com .facebook.com https://fonts.gstatic.com;img-src .teststagram.com .instagram.com .facebook.com .fbcdn.net data: .igsonar.com .cdninstagram.com .whatsapp.net blob: .fbsbx.com android-webview-video-poster: .oculuscdn.com .giphy.com www.googleadservices.com .doubleclick.net .google.com .google.co.uk https://www.gstatic.com https://.google-analytics.com;media-src .facebook.com .fbcdn.net .instagram.com .cdninstagram.com cdn.fbsbx.com data: blob: https://.giphy.com;frame-src .instagram.com .facebook.com .fbsbx.com fbsbx.com data: www.googleadservices.com .doubleclick.net .google.com .google.co.uk;block-all-mixed-content;upgrade-insecure-requests;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: LVldX4DfoQN0TL8rMISQTLprmVa1w5F4lkodvM7faGLcv+u3TjlnsklHM2pQyvEVg8ME3YAKvP3x7VxtRJvp7g==Date: Mon, 13 Jan 2025 05:21:41 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTcontent-security-policy: default-src .facebook.com .fbcdn.net .instagram.com data: blob:;script-src .teststagram.com .instagram.com static.cdninstagram.com .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'nonce-CNs7kpcw' blob: data: 'self' 'wasm-unsafe-eval' https://.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src .teststagram.com .instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' .fbcdn.net .facebook.com;connect-src .teststagram.com .instagram.com wss://edge-chat.instagram.com connect.facebook.net .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: ws://localhost:* blob: .cdninstagram.com wss://.instagram.com:* 'self';font-src .teststagram.com .instagram.com static.cdninstagram.com data: .fbcdn.net .intern.facebook.com .facebook.com https://fonts.gstatic.com;img-src .teststagram.com .instagram.com .facebook.com .fbcdn.net data: .igsonar.com .cdninstagram.com .whatsapp.net blob: .fbsbx.com android-webview-video-poster: .oculuscdn.com .giphy.com www.googleadservices.com .doubleclick.net .google.com .google.co.uk https://www.gstatic.com https://.google-analytics.com;media-src .facebook.com .fbcdn.net .instagram.com .cdninstagram.com cdn.fbsbx.com data: blob: https://.giphy.com;frame-src .instagram.com .facebook.com .fbsbx.com fbsbx.com data: www.googleadservices.com .doubleclick.net .google.com .google.co.uk;block-all-mixed-content;upgrade-insecure-requests;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-Encodingaccept-ch-lifetime: 4838400accept-ch: viewport-width,dpr,Sec-CH-Prefers-Color-Scheme,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Platform-Version,Sec-CH-UA-ModelPragma: no-cacheCache-Control: private, no-cache, no-store, must-revalidateExpires: Sat, 01 Jan 2000 00:00:00 GMTcontent-security-policy: default-src .facebook.com .fbcdn.net .instagram.com data: blob:;script-src .teststagram.com .instagram.com static.cdninstagram.com .facebook.com .fbcdn.net .facebook.net 127.0.0.1:* 'nonce-tcuvJHB9' blob: data: 'self' 'wasm-unsafe-eval' https://.google-analytics.com https://translate.google.com https://apis.google.com https://accounts.google.com;style-src .teststagram.com .instagram.com static.cdninstagram.com data: blob: 'unsafe-inline' .fbcdn.net .facebook.com;connect-src .teststagram.com .instagram.com wss://edge-chat.instagram.com connect.facebook.net .facebook.com facebook.com .fbcdn.net .facebook.net wss://.facebook.com: ws://localhost:* blob: .cdninstagram.com wss://.instagram.com:* 'self';font-src .teststagram.com .instagram.com static.cdninstagram.com data: .fbcdn.net .intern.facebook.com .facebook.com https://fonts.gstatic.com;img-src .teststagram.com .instagram.com .facebook.com .fbcdn.net data: .igsonar.com .cdninstagram.com .whatsapp.net blob: .fbsbx.com android-webview-video-poster: .oculuscdn.com .giphy.com www.googleadservices.com .doubleclick.net .google.com .google.co.uk https://www.gstatic.com https://.google-analytics.com;media-src .facebook.com .fbcdn.net .instagram.com .cdninstagram.com cdn.fbsbx.com data: blob: https://.giphy.com;frame-src .instagram.com .facebook.com .fbsbx.com fbsbx.com data: www.googleadservices.com .doubleclick.net .google.com .google.co.uk;block-all-mixed-content;upgrade-insecure-requests;
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1736745701; path=/; domain=.facebook.com; httponlySet-Cookie: datr=3aKEZyNH_jMF0-DrsTQYI3ny; expires=Tue, 17-Feb-2026 05:21:42 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=NoneStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: DiY1X4UCbuxYZVPCE0Hr0X/Omiz6Sznn98jmvM5GpsZ0V1dFiFhia6gXaGaHxYQmkEL4/V1HRsefH2EjYwzi7A==Date: Mon, 13 Jan 2025 05:21:42 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1736745702; path=/; domain=.facebook.com; httponlySet-Cookie: datr=3aKEZyNH_jMF0-DrsTQYI3ny; expires=Tue, 17-Feb-2026 05:21:43 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=NoneStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: cvdcn10ddMWxQpzpG6ZEabtcG5Cf+WRI1ehgogRnxUmTIDpbxMthGdOq1UQyySv8Q3/1SnuUaCb8JRisrxs90g==Date: Mon, 13 Jan 2025 05:21:43 GMTTransfer-Encoding: chunked
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundVary: Accept-EncodingSet-Cookie: _js_datr=deleted; expires=Thu, 01-Jan-1970 00:00:01 GMT; Max-Age=-1736745704; path=/; domain=.facebook.com; httponlySet-Cookie: datr=3aKEZyNH_jMF0-DrsTQYI3ny; expires=Tue, 17-Feb-2026 05:21:45 GMT; Max-Age=34560000; path=/; domain=.facebook.com; secure; httponly; SameSite=NoneStrict-Transport-Security: max-age=15552000; preloadContent-Type: text/html; charset="utf-8"X-FB-Debug: ppeU8UO666BcKHtVes/j5oxpqV5VxmAS37EdXrsU7IeYICraSerGgqfEAWc/1EGawB95hGJN0auUspFvIldtZQ==Date: Mon, 13 Jan 2025 05:21:45 GMTTransfer-Encoding: chunked

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2220,i,2144574249444189800,3910111029932465452,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://mrohailkhan.com/energyaustralia/auth/auhs1/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5784 --field-trial-handle=2220,i,2144574249444189800,3910111029932465452,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5844 --field-trial-handle=2220,i,2144574249444189800,3910111029932465452,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2312 --field-trial-handle=2220,i,2144574249444189800,3910111029932465452,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --mojo-platform-channel-handle=5784 --field-trial-handle=2220,i,2144574249444189800,3910111029932465452,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5844 --field-trial-handle=2220,i,2144574249444189800,3910111029932465452,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=5844 --field-trial-handle=2220,i,2144574249444189800,3910111029932465452,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner	Label
https://mrohailkhan.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.34.0	100%	Avira URL Cloud	malware
https://mrohailkhan.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3	100%	Avira URL Cloud	malware
https://mrohailkhan.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.26.3	100%	Avira URL Cloud	malware
https://mrohailkhan.com/wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.26.3	100%	Avira URL Cloud	malware
https://mrohailkhan.com/wp-content/themes/hello-elementor/style.min.css?ver=3.2.1	100%	Avira URL Cloud	malware
https://mrohailkhan.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	100%	Avira URL Cloud	malware
https://mrohailkhan.com/wp-content/plugins/Elementor%20Pro%20v3.26.2%20-%20The%20Most%20Advanced%20Website%20Builder%20Plugin/assets/js/form.ae7f04a9f3cbc167835c.bundle.min.js	100%	Avira URL Cloud	malware
https://mrohailkhan.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	100%	Avira URL Cloud	malware
https://mrohailkhan.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.26.3	100%	Avira URL Cloud	malware
https://mrohailkhan.com/wp-content/uploads/elementor/css/post-183.css?ver=1736349655	100%	Avira URL Cloud	malware
https://mrohailkhan.com/wp-content/plugins/Elementor%20Pro%20v3.26.2%20-%20The%20Most%20Advanced%20Website%20Builder%20Plugin/assets/js/webpack-pro.runtime.min.js?ver=3.26.2	100%	Avira URL Cloud	malware
https://mrohailkhan.com/wp-content/plugins/Elementor%20Pro%20v3.26.2%20-%20The%20Most%20Advanced%20Website%20Builder%20Plugin/assets/css/widget-form.min.css?ver=3.26.2	100%	Avira URL Cloud	malware
https://mrohailkhan.com/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-shrink.min.css?ver=3.26.3	100%	Avira URL Cloud	malware
https://mrohailkhan.com/wp-content/uploads/2024/12/cropped-cropped-cropped-M.-Rohail-Khan-1-1-1-32x32.png	100%	Avira URL Cloud	malware
https://mrohailkhan.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.34.0	100%	Avira URL Cloud	malware

Name	IP	Active	Malicious	Reputation
mrohailkhan.com	138.201.222.163	true	false	high
cf-st.sc-cdn.net	3.163.248.4	true	false	high
web-gcp.api.sc-gw.com	34.149.46.130	true	false	high
i.ytimg.com	216.58.206.54	true	false	high
z-p42-instagram.c10r.instagram.com	157.240.0.174	true	false	high
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	high
scontent.xx.fbcdn.net	157.240.251.9	true	false	high
d1h99r20nnwifw.cloudfront.net	13.35.58.69	true	false	unknown
rr2.sn-q4flrnlz.googlevideo.com	74.125.3.135	true	false	high
scontent-hou1-1.xx.fbcdn.net	157.240.24.13	true	false	high
www.google.com	216.58.206.36	true	false	high
star-mini.c10r.facebook.com	157.240.0.35	true	false	high
feelinsonice.l.google.com	216.239.36.126	true	false	high
video.xx.fbcdn.net	157.240.253.2	true	false	high
s-part-0017.t-0009.t-msedge.net	13.107.246.45	true	false	high
static.doubleclick.net	142.250.184.198	true	false	high
scontent.cdninstagram.com	157.240.251.63	true	false	high
youtube.com	142.250.185.78	true	false	high
scontent-hou1-1.cdninstagram.com	157.240.24.63	true	false	high
bg.microsoft.map.fastly.net	199.232.214.172	true	false	high
youtube-ui.l.google.com	216.58.206.78	true	false	high
googleads.g.doubleclick.net	142.250.185.98	true	false	high
play.google.com	216.58.206.46	true	false	high
yt3.googleusercontent.com	142.250.185.225	true	false	high
instagram.c10r.instagram.com	157.240.252.63	true	false	high
www.facebook.com	unknown	unknown	false	high
rr2---sn-q4flrnlz.googlevideo.com	unknown	unknown	false	high
graph.instagram.com	unknown	unknown	false	high
app.snapchat.com	unknown	unknown	false	high
www.snapchat.com	unknown	unknown	false	high
static.snapchat.com	unknown	unknown	false	high
static.xx.fbcdn.net	unknown	unknown	false	high
static.cdninstagram.com	unknown	unknown	false	high
www.instagram.com	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high

Source: chromecache_950.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/-chchjkxRCr/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/5RZXhVZje9T/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/9cisb7Fe7ih/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/CCT5pM3qiNk/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/KRXTwBoPvVj/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr, chromecache_852.2.dr, chromecache_485.2.dr, chromecache_561.2.dr, chromecache_785.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/MDzNl_j9yvg/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr, chromecache_941.2.dr, chromecache_561.2.dr, chromecache_445.2.dr, chromecache_785.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/OKBVmODmb-W/ equals www.facebook.com (Facebook)
Source: chromecache_607.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V8_l6oUwABQ/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/V9vdYColc4k/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/VZYwkcc3BWr/ equals www.facebook.com (Facebook)
Source: chromecache_925.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/Vkd8AdLnKqZ/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/WRsJ32R7YJG/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/aJoeSHn7XcN/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/cr2jmG-CdKo/ equals www.facebook.com (Facebook)
Source: chromecache_950.2.dr, chromecache_561.2.dr, chromecache_785.2.dr	String found in binary or memory: * License: https://www.facebook.com/legal/license/t3hOLs8wlXy/ equals www.facebook.com (Facebook)
Source: chromecache_883.2.dr	String found in binary or memory: </span><a href="/help/?ref=404" data-gt="{"target":"help","marketing_page_click":"1","conversion":"1"}">Visit our Help Centre</a></div></div></div><div class="_cqu"><div id="pageFooter" data-referrer="page_footer" data-testid="page_footer"><ul class="uiList localeSelectorList _2pid _509- _4ki _6-h _6-j _6-i" data-nocookies="1"><li>English (UK)</li><li><a class="_sv4" dir="ltr" href="https://www.facebook.com/ajax/bulk-route-definitions/" title="Afrikaans" id="u_0_7_Rm">Afrikaans</a></li><li><a class="_sv4" dir="ltr" href="https://af-za.facebook.com/ajax/bulk-route-definitions/" title="French (France)" id="u_0_8_BU">Fran equals www.facebook.com (Facebook)
Source: chromecache_883.2.dr	String found in binary or memory: </span><a href="https://www.facebook.com/" data-gt="{"target":"home","marketing_page_click":"1","conversion":"1"}">Go to Feed</a><span role="presentation" aria-hidden="true"> equals www.facebook.com (Facebook)
Source: chromecache_883.2.dr	String found in binary or memory: <i class="_3jii img sp_Wo20Djo2KpL sx_83e197" id="u_0_1_Q6"></i></span></a><div class="_yl7 _ylb __tw hidden_elem" id="u_0_2_7L"><div class="beeperNub"></div><div class="_yl8"><div class=""><form id="login_form" action="https://www.facebook.com/login/device-based/regular/login/?login_attempt=1&lwv=110" method="post" novalidate="1"><input type="hidden" name="jazoest" value="2993" autocomplete="off" /><input type="hidden" name="lsd" value="AVpa7tfS9is" autocomplete="off" /><div class="_erp"><div class="_err"><label for="email">Email or phone</label></div><div class="_err"><input type="email" class="inputtext login_form_input_box" name="email" id="email" data-testid="royal_email" /></div><div class="_ers"><label for="pass">Password</label></div><div class="_ers"><input type="password" class="inputtext login_form_input_box" name="pass" id="pass" data-testid="royal_pass" /></div><div class="_er_"><a href="https://www.facebook.com/recover/initiate?lwv=110&ars=royal_blue_bar">Forgotten account?</a></div><button value="1" class="_42ft _4jy0 _es1 _3jd8 login_form_login_button _4jy5 _4jy1 selected _51sy" id="loginbutton" data-testid="royal_login_button" type="submit">Log in</button></div><input type="hidden" autocomplete="off" name="timezone" value="" id="u_0_3_j6" /><input type="hidden" autocomplete="off" name="lgndim" value="" id="u_0_4_FS" /><input type="hidden" name="lgnrnd" value="212145_opoY" /><input type="hidden" id="lgnjs" name="lgnjs" value="n" /><input type="hidden" autocomplete="off" name="ab_test_data" value="" /><input type="hidden" autocomplete="off" id="locale" name="locale" value="en_GB" /><input type="hidden" autocomplete="off" name="login_source" value="login_bluebar" /><input type="hidden" autocomplete="off" name="guid" value="" /><input type="hidden" autocomplete="off" id="prefill_contact_point" name="prefill_contact_point" /><input type="hidden" autocomplete="off" id="prefill_source" name="prefill_source" /><input type="hidden" autocomplete="off" id="prefill_type" name="prefill_type" /></form></div><div class="_yl9">Do you want to join Facebook?</div><a role="button" class="_42ft _4jy0 _yla _4jy3 _4jy2 selected _51sy mrm" href="/reg/?privacy_mutation_token=eyJ0eXBlIjowLCJjcmVhdGlvbl90aW1lIjoxNzM2NzQ1NzA1LCJjYWxsc2l0ZV9pZCI6MzYzOTY5MDQ0ODc4OTI4fQ%3D%3D" tabindex="4">Sign Up</a></div></div></div></div></div><div class="signupBanner"><div class="signup_bar_container"><div class="signup_box clearfix"><span class="signup_box_content"><a role="button" class="_42ft _4jy0 signup_btn _4jy4 _4jy2 selected _51sy" href="/r.php?locale=en_GB">Sign Up</a></span></div></div></div></div></div></div><div id="globalContainer" class="_cqt"><div class="fb_content clearfix " id="content" role="main"><div class="pvl _4-do"><h2 class="_4-dp">This page isn't available</h2><h3 class="_4-dq">The link you followed may be broken, or the page may have been removed.</h3><i class="mvl img sp_Wo20Djo2KpL sx_11e845"></i><div class="mbl pvl _4-dr fsm fwn
Source: chromecache_933.2.dr	String found in binary or memory: ba",AdvertisersList:['<a href="https://help.twitter.com/rules-and-policies/twitter-cookies" target="_blank" rel="noopener">Twitter</a>','<a href="https://policy.pinterest.com/cookies" target="_blank" rel="noopener">Pinterest</a>','<a href="https://policies.google.com/technologies/cookies" target="_blank" rel="noopener">Google</a>','<a href="https://www.linkedin.com/legal/cookie-policy" target="_blank" rel="noopener">LinkedIn</a>','<a href="https://privacy.microsoft.com/privacystatement" target="_blank" rel="noopener">Bing</a>','<a href="https://www.salesforce.com/company/privacy" target="_blank" rel="noopener">Pardot</a>','<a href="https://www.facebook.com/policies/cookies/" target="_blank" rel="noopener">Facebook</a>'],ThirdPartyAdvertisersPopupText:"C\xe1c equals www.facebook.com (Facebook)
Source: chromecache_933.2.dr	String found in binary or memory: ba",AdvertisersList:['<a href="https://help.twitter.com/rules-and-policies/twitter-cookies" target="_blank" rel="noopener">Twitter</a>','<a href="https://policy.pinterest.com/cookies" target="_blank" rel="noopener">Pinterest</a>','<a href="https://policies.google.com/technologies/cookies" target="_blank" rel="noopener">Google</a>','<a href="https://www.linkedin.com/legal/cookie-policy" target="_blank" rel="noopener">LinkedIn</a>','<a href="https://privacy.microsoft.com/privacystatement" target="_blank" rel="noopener">Bing</a>','<a href="https://www.salesforce.com/company/privacy" target="_blank" rel="noopener">Pardot</a>','<a href="https://www.facebook.com/policies/cookies/" target="_blank" rel="noopener">Facebook</a>'],ThirdPartyAdvertisersPopupText:"C\xe1c equals www.linkedin.com (Linkedin)
Source: chromecache_933.2.dr	String found in binary or memory: ba",AdvertisersList:['<a href="https://help.twitter.com/rules-and-policies/twitter-cookies" target="_blank" rel="noopener">Twitter</a>','<a href="https://policy.pinterest.com/cookies" target="_blank" rel="noopener">Pinterest</a>','<a href="https://policies.google.com/technologies/cookies" target="_blank" rel="noopener">Google</a>','<a href="https://www.linkedin.com/legal/cookie-policy" target="_blank" rel="noopener">LinkedIn</a>','<a href="https://privacy.microsoft.com/privacystatement" target="_blank" rel="noopener">Bing</a>','<a href="https://www.salesforce.com/company/privacy" target="_blank" rel="noopener">Pardot</a>','<a href="https://www.facebook.com/policies/cookies/" target="_blank" rel="noopener">Facebook</a>'],ThirdPartyAdvertisersPopupText:"C\xe1c equals www.twitter.com (Twitter)
Source: chromecache_933.2.dr	String found in binary or memory: naruszenie",Spotlight:"Polecane"},"pt-br":{"Snap Inc.":"Snap Inc.",Snapchat:"Snapchat",Spectacles:"Spectacles",Live:"Ao Vivo",Ads:"An\xfancios",Company:"Empresa",Home:"P\xe1gina inicial",Blog:"Blog",Jobs:"Empregos",Careers:"Carreiras",Press:"Imprensa",News:"Not\xedcias","Press Inquiries":"Assessoria de Imprensa",Twitter:"Twitter",Language:"Idioma","Download Snapchat":"Baixar o Snapchat",Download:"Baixar",Kit:"Kit",Stories:"Hist\xf3rias","Lens Studio":"Lens Studio",Store:"Loja","Snapchat for iOS":"Snapchat para iOS","Snapchat for Android":"Snapchat para Android",Community:"Comunidade",Support:"Suporte","Community Guidelines":"Diretrizes Comunit\xe1rias","Safety Center":"Centro de Seguran\xe7a",Snapcodes:"Snapcodes",Geofilters:"Filtros Geogr\xe1ficos",Create:"Filtros e Lentes",Map:"Mapa",Advertising:"Publicidade","Buy Ads":"Comprar an\xfancios","Advertising Policies":"Pol\xedticas de Publicidade","Political Ads Library":"Biblioteca de An\xfancios Pol\xedticos","Brand Guidelines":"Diretrizes de Marca","Promotions Rules":"Regras de Promo\xe7\xf5es",Legal:"Direito","Terms of Service":"Termos de Servi\xe7o",Impressum:"Impressum","Privacy Policy":"Pol\xedtica de Privacidade","Privacy Center":"Centro de Privacidade","Cookie Policy":"Pol\xedtica de Cookies","Memories Terms of Service":"Termos de Servi\xe7o das Mem\xf3rias",CUSTOM_CREATIVE_TOOLS_TOS:"Termos das Ferramentas Criativas Personalizadas",COMMUNITY_TOS:"Termos dos Filtros Geogr\xe1ficos Comunit\xe1rios",LENS_STUDIO_TOS:"Termos do Lens Studio","Your Privacy Choices":"Suas op\xe7\xf5es de privacidade",COOKIE_SETTINGS_SECTIONS:{Necessary:{headline:"Cookies necess\xe1rios",content:['<a class="textarticle-button" href="https://snap.com/privacy/cookie-information#Necessary">Usamos estes cookies</a> para ajudar no funcionamento do site. Como esses cookies s\xe3o necess\xe1rios, voc\xea n\xe3o pode desativ\xe1-los.']},Preferences:{headline:"Prefer\xeancias",content:['<a class="textarticle-button" href="https://snap.com/privacy/cookie-information#Preferences">Usamos estes cookies</a> para lembrar das suas prefer\xeancias e melhorar sua experi\xeancia no nosso site.']},Performance:{headline:"Desempenho e An\xe1lise",content:['<a class="textarticle-button" href="https://snap.com/privacy/cookie-information#Performance">Usamos estes cookies</a> para coletar dados sobre como voc\xea usa nosso site, monitorar o desempenho dele e melhor\xe1-lo em conjunto com a sua experi\xeancia.']},Marketing:{headline:"Marketing",content:['<a class="textarticle-button" href="https://snap.com/privacy/cookie-information#Marketing">Usamos estes cookies</a> para fazer publicidade relevante e medir a efic\xe1cia de nossas campanhas publicit\xe1rias. Nossos parceiros de publicidade terceirizados podem usar esses cookies para criar um perfil de seus interesses e exibir an\xfancios relevantes em outros sites.']}},ThirdPartyAdvertisersText:"parceiros de publicidade terceirizados",AdvertisersList:['<a href="https://help.twitter.com/rul
Source: chromecache_933.2.dr	String found in binary or memory: naruszenie",Spotlight:"Polecane"},"pt-br":{"Snap Inc.":"Snap Inc.",Snapchat:"Snapchat",Spectacles:"Spectacles",Live:"Ao Vivo",Ads:"An\xfancios",Company:"Empresa",Home:"P\xe1gina inicial",Blog:"Blog",Jobs:"Empregos",Careers:"Carreiras",Press:"Imprensa",News:"Not\xedcias","Press Inquiries":"Assessoria de Imprensa",Twitter:"Twitter",Language:"Idioma","Download Snapchat":"Baixar o Snapchat",Download:"Baixar",Kit:"Kit",Stories:"Hist\xf3rias","Lens Studio":"Lens Studio",Store:"Loja","Snapchat for iOS":"Snapchat para iOS","Snapchat for Android":"Snapchat para Android",Community:"Comunidade",Support:"Suporte","Community Guidelines":"Diretrizes Comunit\xe1rias","Safety Center":"Centro de Seguran\xe7a",Snapcodes:"Snapcodes",Geofilters:"Filtros Geogr\xe1ficos",Create:"Filtros e Lentes",Map:"Mapa",Advertising:"Publicidade","Buy Ads":"Comprar an\xfancios","Advertising Policies":"Pol\xedticas de Publicidade","Political Ads Library":"Biblioteca de An\xfancios Pol\xedticos","Brand Guidelines":"Diretrizes de Marca","Promotions Rules":"Regras de Promo\xe7\xf5es",Legal:"Direito","Terms of Service":"Termos de Servi\xe7o",Impressum:"Impressum","Privacy Policy":"Pol\xedtica de Privacidade","Privacy Center":"Centro de Privacidade","Cookie Policy":"Pol\xedtica de Cookies","Memories Terms of Service":"Termos de Servi\xe7o das Mem\xf3rias",CUSTOM_CREATIVE_TOOLS_TOS:"Termos das Ferramentas Criativas Personalizadas",COMMUNITY_TOS:"Termos dos Filtros Geogr\xe1ficos Comunit\xe1rios",LENS_STUDIO_TOS:"Termos do Lens Studio","Your Privacy Choices":"Suas op\xe7\xf5es de privacidade",COOKIE_SETTINGS_SECTIONS:{Necessary:{headline:"Cookies necess\xe1rios",content:['<a class="textarticle-button" href="https://snap.com/privacy/cookie-information#Necessary">Usamos estes cookies</a> para ajudar no funcionamento do site. Como esses cookies s\xe3o necess\xe1rios, voc\xea n\xe3o pode desativ\xe1-los.']},Preferences:{headline:"Prefer\xeancias",content:['<a class="textarticle-button" href="https://snap.com/privacy/cookie-information#Preferences">Usamos estes cookies</a> para lembrar das suas prefer\xeancias e melhorar sua experi\xeancia no nosso site.']},Performance:{headline:"Desempenho e An\xe1lise",content:['<a class="textarticle-button" href="https://snap.com/privacy/cookie-information#Performance">Usamos estes cookies</a> para coletar dados sobre como voc\xea usa nosso site, monitorar o desempenho dele e melhor\xe1-lo em conjunto com a sua experi\xeancia.']},Marketing:{headline:"Marketing",content:['<a class="textarticle-button" href="https://snap.com/privacy/cookie-information#Marketing">Usamos estes cookies</a> para fazer publicidade relevante e medir a efic\xe1cia de nossas campanhas publicit\xe1rias. Nossos parceiros de publicidade terceirizados podem usar esses cookies para criar um perfil de seus interesses e exibir an\xfancios relevantes em outros sites.']}},ThirdPartyAdvertisersText:"parceiros de publicidade terceirizados",AdvertisersList:['<a href="https://help.twitter.com/rul
Source: chromecache_933.2.dr	String found in binary or memory: naruszenie",Spotlight:"Polecane"},"pt-br":{"Snap Inc.":"Snap Inc.",Snapchat:"Snapchat",Spectacles:"Spectacles",Live:"Ao Vivo",Ads:"An\xfancios",Company:"Empresa",Home:"P\xe1gina inicial",Blog:"Blog",Jobs:"Empregos",Careers:"Carreiras",Press:"Imprensa",News:"Not\xedcias","Press Inquiries":"Assessoria de Imprensa",Twitter:"Twitter",Language:"Idioma","Download Snapchat":"Baixar o Snapchat",Download:"Baixar",Kit:"Kit",Stories:"Hist\xf3rias","Lens Studio":"Lens Studio",Store:"Loja","Snapchat for iOS":"Snapchat para iOS","Snapchat for Android":"Snapchat para Android",Community:"Comunidade",Support:"Suporte","Community Guidelines":"Diretrizes Comunit\xe1rias","Safety Center":"Centro de Seguran\xe7a",Snapcodes:"Snapcodes",Geofilters:"Filtros Geogr\xe1ficos",Create:"Filtros e Lentes",Map:"Mapa",Advertising:"Publicidade","Buy Ads":"Comprar an\xfancios","Advertising Policies":"Pol\xedticas de Publicidade","Political Ads Library":"Biblioteca de An\xfancios Pol\xedticos","Brand Guidelines":"Diretrizes de Marca","Promotions Rules":"Regras de Promo\xe7\xf5es",Legal:"Direito","Terms of Service":"Termos de Servi\xe7o",Impressum:"Impressum","Privacy Policy":"Pol\xedtica de Privacidade","Privacy Center":"Centro de Privacidade","Cookie Policy":"Pol\xedtica de Cookies","Memories Terms of Service":"Termos de Servi\xe7o das Mem\xf3rias",CUSTOM_CREATIVE_TOOLS_TOS:"Termos das Ferramentas Criativas Personalizadas",COMMUNITY_TOS:"Termos dos Filtros Geogr\xe1ficos Comunit\xe1rios",LENS_STUDIO_TOS:"Termos do Lens Studio","Your Privacy Choices":"Suas op\xe7\xf5es de privacidade",COOKIE_SETTINGS_SECTIONS:{Necessary:{headline:"Cookies necess\xe1rios",content:['<a class="textarticle-button" href="https://snap.com/privacy/cookie-information#Necessary">Usamos estes cookies</a> para ajudar no funcionamento do site. Como esses cookies s\xe3o necess\xe1rios, voc\xea n\xe3o pode desativ\xe1-los.']},Preferences:{headline:"Prefer\xeancias",content:['<a class="textarticle-button" href="https://snap.com/privacy/cookie-information#Preferences">Usamos estes cookies</a> para lembrar das suas prefer\xeancias e melhorar sua experi\xeancia no nosso site.']},Performance:{headline:"Desempenho e An\xe1lise",content:['<a class="textarticle-button" href="https://snap.com/privacy/cookie-information#Performance">Usamos estes cookies</a> para coletar dados sobre como voc\xea usa nosso site, monitorar o desempenho dele e melhor\xe1-lo em conjunto com a sua experi\xeancia.']},Marketing:{headline:"Marketing",content:['<a class="textarticle-button" href="https://snap.com/privacy/cookie-information#Marketing">Usamos estes cookies</a> para fazer publicidade relevante e medir a efic\xe1cia de nossas campanhas publicit\xe1rias. Nossos parceiros de publicidade terceirizados podem usar esses cookies para criar um perfil de seus interesses e exibir an\xfancios relevantes em outros sites.']}},ThirdPartyAdvertisersText:"parceiros de publicidade terceirizados",AdvertisersList:['<a href="https://help.twitter.com/rul
Source: chromecache_933.2.dr	String found in binary or memory: parte",AdvertisersList:['<a href="https://help.twitter.com/rules-and-policies/twitter-cookies" target="_blank" rel="noopener">Twitter</a>','<a href="https://policy.pinterest.com/cookies" target="_blank" rel="noopener">Pinterest</a>','<a href="https://policies.google.com/technologies/cookies" target="_blank" rel="noopener">Google</a>','<a href="https://www.linkedin.com/legal/cookie-policy" target="_blank" rel="noopener">LinkedIn</a>','<a href="https://privacy.microsoft.com/privacystatement" target="_blank" rel="noopener">Bing</a>','<a href="https://www.salesforce.com/company/privacy" target="_blank" rel="noopener">Pardot</a>','<a href="https://www.facebook.com/policies/cookies/" target="_blank" rel="noopener">Facebook</a>'],ThirdPartyAdvertisersPopupText:"Parteneri de publicitate de ter equals www.facebook.com (Facebook)
Source: chromecache_933.2.dr	String found in binary or memory: parte",AdvertisersList:['<a href="https://help.twitter.com/rules-and-policies/twitter-cookies" target="_blank" rel="noopener">Twitter</a>','<a href="https://policy.pinterest.com/cookies" target="_blank" rel="noopener">Pinterest</a>','<a href="https://policies.google.com/technologies/cookies" target="_blank" rel="noopener">Google</a>','<a href="https://www.linkedin.com/legal/cookie-policy" target="_blank" rel="noopener">LinkedIn</a>','<a href="https://privacy.microsoft.com/privacystatement" target="_blank" rel="noopener">Bing</a>','<a href="https://www.salesforce.com/company/privacy" target="_blank" rel="noopener">Pardot</a>','<a href="https://www.facebook.com/policies/cookies/" target="_blank" rel="noopener">Facebook</a>'],ThirdPartyAdvertisersPopupText:"Parteneri de publicitate de ter equals www.linkedin.com (Linkedin)
Source: chromecache_933.2.dr	String found in binary or memory: parte",AdvertisersList:['<a href="https://help.twitter.com/rules-and-policies/twitter-cookies" target="_blank" rel="noopener">Twitter</a>','<a href="https://policy.pinterest.com/cookies" target="_blank" rel="noopener">Pinterest</a>','<a href="https://policies.google.com/technologies/cookies" target="_blank" rel="noopener">Google</a>','<a href="https://www.linkedin.com/legal/cookie-policy" target="_blank" rel="noopener">LinkedIn</a>','<a href="https://privacy.microsoft.com/privacystatement" target="_blank" rel="noopener">Bing</a>','<a href="https://www.salesforce.com/company/privacy" target="_blank" rel="noopener">Pardot</a>','<a href="https://www.facebook.com/policies/cookies/" target="_blank" rel="noopener">Facebook</a>'],ThirdPartyAdvertisersPopupText:"Parteneri de publicitate de ter equals www.twitter.com (Twitter)
Source: chromecache_781.2.dr	String found in binary or memory: "&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+fa+";dc_exteid="+Tb+";met="+fa+";ecn"+fa+"="+fa+";etm1="+fa+";eid1="+Ib+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],closePings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+x+"&cid="+ea+"&label=adclose&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}],progressPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+ equals www.youtube.com (Youtube)
Source: chromecache_781.2.dr	String found in binary or memory: "&sig="+zb+"&ad_cpn=[AD_CPN]&id="+ac+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]&avm="+fa},{baseUrl:"https://pagead2.googlesyndication.com/activeview_ext?id="+ac+"&avm="+fa+"&dc_pubid="+fa+"&dc_exteid="+Tb+"&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]?"}],abandonPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+zd+"&cid="+ea+"&label=video_abandon&ad_mt=[AD_MT]&ad_tos=[AD_TOS]&ad_wat=[AD_WAT]&final=[FINAL]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"}, equals www.youtube.com (Youtube)
Source: chromecache_781.2.dr	String found in binary or memory: "&uga="+jb+"&vm="+hd},videostatsDelayplayUrl:{baseUrl:"https://s.youtube.com/api/stats/delayplay?cl="+gd+"&docid="+x+"&ei="+R+"&feature="+m+"&fexp="+Dq+"&ns="+qa+"&plid="+O+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+kf+"&el="+If+"&len="+vc+"&of="+eb+"&uga="+jb+"&vm="+hd},videostatsWatchtimeUrl:{baseUrl:"https://s.youtube.com/api/stats/watchtime?cl="+gd+"&docid="+x+"&ei="+R+"&feature="+m+"&fexp="+Dq+"&ns="+qa+"&plid="+O+"&referrer=https%3A%2F%2Fwww.youtube.com%2F&sdetail=p%3A%2F&sourceid="+ equals www.youtube.com (Youtube)
Source: chromecache_933.2.dr	String found in binary or memory: ",AdvertisersList:['<a href="https://help.twitter.com/rules-and-policies/twitter-cookies" target="_blank" rel="noopener">Twitter</a>','<a href="https://policy.pinterest.com/cookies" target="_blank" rel="noopener">Pinterest</a>','<a href="https://policies.google.com/technologies/cookies" target="_blank" rel="noopener">Google</a>','<a href="https://www.linkedin.com/legal/cookie-policy" target="_blank" rel="noopener"> equals www.linkedin.com (Linkedin)
Source: chromecache_933.2.dr	String found in binary or memory: ",AdvertisersList:['<a href="https://help.twitter.com/rules-and-policies/twitter-cookies" target="_blank" rel="noopener">Twitter</a>','<a href="https://policy.pinterest.com/cookies" target="_blank" rel="noopener">Pinterest</a>','<a href="https://policies.google.com/technologies/cookies" target="_blank" rel="noopener">Google</a>','<a href="https://www.linkedin.com/legal/cookie-policy" target="_blank" rel="noopener"> equals www.twitter.com (Twitter)
Source: chromecache_933.2.dr	String found in binary or memory: ",AdvertisersList:['<a href="https://help.twitter.com/rules-and-policies/twitter-cookies" target="_blank" rel="noopener">Twitter</a>','<a href="https://policy.pinterest.com/cookies" target="_blank" rel="noopener">Pinterest</a>','<a href="https://policies.google.com/technologies/cookies" target="_blank" rel="noopener">Google</a>','<a href="https://www.linkedin.com/legal/cookie-policy" target="_blank" rel="noopener">LinkedIn</a>','<a href="https://privacy.microsoft.com/privacystatement" target="_blank" rel="noopener">Bing</a>','<a href="https://www.salesforce.com/company/privacy" target="_blank" rel="noopener">Pardot</a>','<a href="https://www.facebook.com/policies/cookies/" target="_blank" rel="noopener">Facebook</a>'],ThirdPartyAdvertisersPopupText:" equals www.facebook.com (Facebook)
Source: chromecache_933.2.dr	String found in binary or memory: ",AdvertisersList:['<a href="https://help.twitter.com/rules-and-policies/twitter-cookies" target="_blank" rel="noopener">Twitter</a>','<a href="https://policy.pinterest.com/cookies" target="_blank" rel="noopener">Pinterest</a>','<a href="https://policies.google.com/technologies/cookies" target="_blank" rel="noopener">Google</a>','<a href="https://www.linkedin.com/legal/cookie-policy" target="_blank" rel="noopener">LinkedIn</a>','<a href="https://privacy.microsoft.com/privacystatement" target="_blank" rel="noopener">Bing</a>','<a href="https://www.salesforce.com/company/privacy" target="_blank" rel="noopener">Pardot</a>','<a href="https://www.facebook.com/policies/cookies/" target="_blank" rel="noopener">Facebook</a>'],ThirdPartyAdvertisersPopupText:" equals www.linkedin.com (Linkedin)
Source: chromecache_933.2.dr	String found in binary or memory: ",AdvertisersList:['<a href="https://help.twitter.com/rules-and-policies/twitter-cookies" target="_blank" rel="noopener">Twitter</a>','<a href="https://policy.pinterest.com/cookies" target="_blank" rel="noopener">Pinterest</a>','<a href="https://policies.google.com/technologies/cookies" target="_blank" rel="noopener">Google</a>','<a href="https://www.linkedin.com/legal/cookie-policy" target="_blank" rel="noopener">LinkedIn</a>','<a href="https://privacy.microsoft.com/privacystatement" target="_blank" rel="noopener">Bing</a>','<a href="https://www.salesforce.com/company/privacy" target="_blank" rel="noopener">Pardot</a>','<a href="https://www.facebook.com/policies/cookies/" target="_blank" rel="noopener">Facebook</a>'],ThirdPartyAdvertisersPopupText:" equals www.twitter.com (Twitter)
Source: chromecache_933.2.dr	String found in binary or memory: ",AdvertisersList:['<a href="https://help.twitter.com/rules-and-policies/twitter-cookies" target="_blank" rel="noopener">Twitter</a>','<a href="https://policy.pinterest.com/cookies" target="_blank" rel="noopener">Pinterest</a>','<a href="https://policies.google.com/technologies/cookies" target="_blank" rel="noopener">Google</a>','<a href="https://www.linkedin.com/legal/cookie-policy" target="_blank" rel="noopener">LinkedIn</a>','<a href="https://privacy.microsoft.com/privacystatement" target="_blank" rel="noopener">Bing</a>','<a href="https://www.salesforce.com/company/privacy" target="_blank" rel="noopener">Pardot</a>','<a href="https://www.facebook.com/policies/cookies/" target="_blank" rel="noopener">Facebook</a>'],ThirdPartyAdvertisersPopupText:"\xdc\xe7\xfcnc\xfc taraf reklam ortaklar equals www.facebook.com (Facebook)
Source: chromecache_933.2.dr	String found in binary or memory: ",AdvertisersList:['<a href="https://help.twitter.com/rules-and-policies/twitter-cookies" target="_blank" rel="noopener">Twitter</a>','<a href="https://policy.pinterest.com/cookies" target="_blank" rel="noopener">Pinterest</a>','<a href="https://policies.google.com/technologies/cookies" target="_blank" rel="noopener">Google</a>','<a href="https://www.linkedin.com/legal/cookie-policy" target="_blank" rel="noopener">LinkedIn</a>','<a href="https://privacy.microsoft.com/privacystatement" target="_blank" rel="noopener">Bing</a>','<a href="https://www.salesforce.com/company/privacy" target="_blank" rel="noopener">Pardot</a>','<a href="https://www.facebook.com/policies/cookies/" target="_blank" rel="noopener">Facebook</a>'],ThirdPartyAdvertisersPopupText:"\xdc\xe7\xfcnc\xfc taraf reklam ortaklar equals www.linkedin.com (Linkedin)
Source: chromecache_933.2.dr	String found in binary or memory: ",AdvertisersList:['<a href="https://help.twitter.com/rules-and-policies/twitter-cookies" target="_blank" rel="noopener">Twitter</a>','<a href="https://policy.pinterest.com/cookies" target="_blank" rel="noopener">Pinterest</a>','<a href="https://policies.google.com/technologies/cookies" target="_blank" rel="noopener">Google</a>','<a href="https://www.linkedin.com/legal/cookie-policy" target="_blank" rel="noopener">LinkedIn</a>','<a href="https://privacy.microsoft.com/privacystatement" target="_blank" rel="noopener">Bing</a>','<a href="https://www.salesforce.com/company/privacy" target="_blank" rel="noopener">Pardot</a>','<a href="https://www.facebook.com/policies/cookies/" target="_blank" rel="noopener">Facebook</a>'],ThirdPartyAdvertisersPopupText:"\xdc\xe7\xfcnc\xfc taraf reklam ortaklar equals www.twitter.com (Twitter)
Source: chromecache_781.2.dr	String found in binary or memory: "=",adInfoRenderer:{adHoverTextButtonRenderer:{button:{buttonRenderer:{style:"STYLE_UNKNOWN",size:"SIZE_DEFAULT",isDisabled:!1,icon:{iconType:"INFO_OUTLINE"},navigationEndpoint:{clickTrackingParams:Fd,openPopupAction:{popup:{aboutThisAdRenderer:{url:(NH.privateDoNotAccessOrElseTrustedResourceUrlWrappedValue="https://www.youtube.com/aboutthisad?pf=web&source=youtube&reasons=A"+N+"&hl="+qa+"&origin=www.youtube.com&ata_theme="+xi,NH),trackingParams:Eb+"="}},popupType:"DIALOG"}},trackingParams:Eb+"="}}, equals www.youtube.com (Youtube)
Source: chromecache_781.2.dr	String found in binary or memory: "="},trackingParams:Eb+"="}},adLayoutLoggingData:{serializedAdServingDataEntry:ac},skipPings:[{baseUrl:"https://www.youtube.com/pagead/interaction/?ai=C"+B+"____________"+D+"AxAA&sigh="+x+"&cid="+ea+"&label=videoskipped&ad_mt=[AD_MT]&acvw=[VIEWABILITY]&gv=[GOOGLE_VIEWABILITY]"},{baseUrl:"https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid="+fa+";dc_exteid="+Tb+";met="+fa+";ecn"+fa+"="+fa+";etm1="+fa+";eid1="+Ib+";acvw=[VIEWABILITY];gv=[GOOGLE_VIEWABILITY]?"}],layoutId:"1ID7Gdwk2vV7OZ1A"}}, equals www.youtube.com (Youtube)

Source: chromecache_950.2.dr	String found in binary or memory: http://fb.me/use-check-prop-types
Source: chromecache_781.2.dr	String found in binary or memory: http://hammerjs.github.io/
Source: chromecache_781.2.dr	String found in binary or memory: http://i1.ytimg.com/vi/
Source: chromecache_781.2.dr	String found in binary or memory: http://jsbin.com/temexa/4
Source: chromecache_781.2.dr	String found in binary or memory: http://mathiasbynens.be/
Source: chromecache_781.2.dr	String found in binary or memory: http://mths.be/fromcodepoint
Source: chromecache_781.2.dr	String found in binary or memory: http://polymer.github.io/AUTHORS.txt
Source: chromecache_781.2.dr	String found in binary or memory: http://polymer.github.io/CONTRIBUTORS.txt
Source: chromecache_781.2.dr	String found in binary or memory: http://polymer.github.io/LICENSE.txt
Source: chromecache_781.2.dr	String found in binary or memory: http://polymer.github.io/PATENTS.txt
Source: chromecache_781.2.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_781.2.dr	String found in binary or memory: http://www.apache.org/licenses/LICENSE-2.0
Source: chromecache_781.2.dr	String found in binary or memory: http://www.broofa.com
Source: chromecache_852.2.dr, chromecache_485.2.dr	String found in binary or memory: http://www.windowsphone.com/s?appid=3222a126-7f20-4273-ab4a-161120b21aea
Source: chromecache_781.2.dr	String found in binary or memory: http://www.youtube.com/
Source: chromecache_781.2.dr	String found in binary or memory: http://www.youtube.com/video/
Source: chromecache_950.2.dr	String found in binary or memory: https://about.instagram.com
Source: chromecache_950.2.dr	String found in binary or memory: https://about.instagram.com/blog/
Source: chromecache_950.2.dr	String found in binary or memory: https://about.meta.com
Source: chromecache_781.2.dr	String found in binary or memory: https://accounts.google.com/AddSession
Source: chromecache_781.2.dr	String found in binary or memory: https://accounts.google.com/ServiceLogin
Source: chromecache_781.2.dr	String found in binary or memory: https://accounts.youtube.com/RotateCookiesPage?origin=https://www.youtube.com&yt_pid=
Source: chromecache_781.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackclk/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_781.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N1957659.127733GOOGLE-YOUTUBE/B29940965.366940103;dc_trk_aid
Source: chromecache_781.2.dr	String found in binary or memory: https://ad.doubleclick.net/ddm/trackimp/N444803.2428500DBMSITEID/B30029229.368252041;dc_trk_aid=
Source: chromecache_781.2.dr	String found in binary or memory: https://ade.googlesyndication.com/ddm/activity_ext/dc_pubid=
Source: chromecache_635.2.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_865.2.dr, chromecache_923.2.dr, chromecache_960.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/spf/2.4.0/LICENSE
Source: chromecache_660.2.dr	String found in binary or memory: https://ampcid.google.com/v1/publisher:getClientId
Source: chromecache_781.2.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_781.2.dr	String found in binary or memory: https://angular.io/license
Source: chromecache_473.2.dr	String found in binary or memory: https://api.jqueryui.com/position/
Source: chromecache_781.2.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_781.2.dr	String found in binary or memory: https://apis.google.com/js/api.js
Source: chromecache_852.2.dr, chromecache_485.2.dr	String found in binary or memory: https://apps.apple.com/app/instagram/id
Source: chromecache_699.2.dr	String found in binary or memory: https://apps.apple.com/us/app/instagram/id389801252
Source: chromecache_635.2.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_781.2.dr	String found in binary or memory: https://clients2.google.com/gr/gr_sync.js
Source: chromecache_781.2.dr	String found in binary or memory: https://docs.google.com/picker
Source: chromecache_950.2.dr	String found in binary or memory: https://e2e.instagram.com

IP	Domain	Country	ASN	ASN Name	Malicious
216.58.206.54	i.ytimg.com	United States	15169	GOOGLEUS	false
34.149.46.130	web-gcp.api.sc-gw.com	United States	2686	ATGS-MMD-ASUS	false
142.250.185.225	yt3.googleusercontent.com	United States	15169	GOOGLEUS	false
13.35.58.69	d1h99r20nnwifw.cloudfront.net	United States	16509	AMAZON-02US	false
157.240.0.174	z-p42-instagram.c10r.instagram.com	United States	32934	FACEBOOKUS	false
142.250.184.198	static.doubleclick.net	United States	15169	GOOGLEUS	false
157.240.0.35	star-mini.c10r.facebook.com	United States	32934	FACEBOOKUS	false
216.58.206.86	unknown	United States	15169	GOOGLEUS	false
13.35.58.13	unknown	United States	16509	AMAZON-02US	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
157.240.252.63	instagram.c10r.instagram.com	United States	32934	FACEBOOKUS	false
172.217.16.193	unknown	United States	15169	GOOGLEUS	false
138.201.222.163	mrohailkhan.com	Germany	24940	HETZNER-ASDE	false
157.240.253.174	unknown	United States	32934	FACEBOOKUS	false
157.240.24.13	scontent-hou1-1.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
216.239.36.126	feelinsonice.l.google.com	United States	15169	GOOGLEUS	false
142.250.185.78	youtube.com	United States	15169	GOOGLEUS	false
157.240.24.63	scontent-hou1-1.cdninstagram.com	United States	32934	FACEBOOKUS	false
142.250.186.130	unknown	United States	15169	GOOGLEUS	false
216.58.206.78	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
216.58.206.36	www.google.com	United States	15169	GOOGLEUS	false
157.240.0.6	unknown	United States	32934	FACEBOOKUS	false
3.163.248.4	cf-st.sc-cdn.net	United States	16509	AMAZON-02US	false
157.240.251.63	scontent.cdninstagram.com	United States	32934	FACEBOOKUS	false
216.58.212.174	unknown	United States	15169	GOOGLEUS	false
157.240.252.35	unknown	United States	32934	FACEBOOKUS	false
157.240.251.9	scontent.xx.fbcdn.net	United States	32934	FACEBOOKUS	false
142.250.186.166	unknown	United States	15169	GOOGLEUS	false
142.250.185.98	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
74.125.3.135	rr2.sn-q4flrnlz.googlevideo.com	United States	15169	GOOGLEUS	false

IP
192.168.2.4
192.168.2.23

Name	Malicious	Antivirus Detection	Reputation
https://mrohailkhan.com/wp-content/themes/hello-elementor/style.min.css?ver=3.2.1	false	Avira URL Cloud: malware	unknown
https://www.youtube.com/s/_/ytmainappweb/_/ss/k=ytmainappweb.kevlar_base.7hiJwkXlKs8.L.B1.O/am=AABBAg/d=0/rs=AGKMywGGJrddI2OdqQpm3Rz8uCoVK9lqTQ	false		high
https://www.youtube.com/sw.js	false		high
https://static.cdninstagram.com/rsrc.php/v5/y_/l/0,cross/sqkjizs0qJWGQn3pMOj4Wmcyf8QhNEWE-MbVu6J6TSgCAgbkPiBd1Gm.css	false		high
https://static.cdninstagram.com/rsrc.php/v4/y8/r/ZWR9C7_JdnP.png	false		high
https://static.snapchat.com/profiles/_next/static/wLOGCd_5yRtxW95bvo-0v/_buildManifest.js	false		high
https://mrohailkhan.com/wp-content/plugins/elementor/assets/css/widget-text-editor.min.css?ver=3.26.3	false	Avira URL Cloud: malware	unknown
https://mrohailkhan.com/wp-content/plugins/elementor/assets/lib/eicons/css/elementor-icons.min.css?ver=5.34.0	false	Avira URL Cloud: malware	unknown
https://www.youtube.com/s/desktop/b5305900/img/logos/favicon_32x32.png	false		high
https://static.xx.fbcdn.net/rsrc.php/v4iRLi4/yt/l/en_GB/EAPAOW-Vn0xvnwQLmA429Zd4T_kTAwk45F2D8Ykitchx5GfKijsdr983psDsePFWjRJu8ooRRp2kIKnHXJCjBnOs7__2mMPI0TRYS8tN-2Yf8UPt_wyhohAbttffuGzS3UPTb9W06b5yTsKwwlrOhVfcLF8YpyZZxiWXT.js	false		high
https://www.instagram.com/api/v1/users/web_profile_info/?username=rohail_gm	false		high
https://static.cdninstagram.com/rsrc.php/v4ih3v4/yw/l/en_US/2HlSV6wz_Ae.js	false		high
https://static.cdninstagram.com/rsrc.php/v4iLpP4/yW/l/en_US/eVEHfF6Kk3k.js	false		high
https://i.ytimg.com/vi/OmVK2n1pmu0/hqdefault.jpg?sqp=-oaymwEnCPYBEIoBSFryq4qpAxkIARUAAIhCGAHYAQHiAQoIGBACGAY4AUAB&rs=AOn4CLBciljPquE7ATj5fwuzKBAJZXamnw	false		high
https://static.cdninstagram.com/rsrc.php/v4/y2/r/UK_NJrs4tTe.js	false		high
https://static.xx.fbcdn.net/rsrc.php/v4izEF4/yc/l/en_GB/1WaMoTxxFlhxeM7JyUk_WJ.js	false		high
https://www.instagram.com/ajax/bz?__a=1&__ccg=UNKNOWN&__comet_req=7&__d=www&__hs=20101.HYP%3Ainstagram_web_pkg.2.1.0.0.0&__hsi=7459265910909680541&__req=e&__rev=1019285071&__s=59cdbm%3Asc5tl8%3Awp1csp&__spin_b=trunk&__spin_r=1019285071&__spin_t=1736745683&__user=0&dpr=1&jazoest=21113&lsd=AVrPtnXylvk&ph=C3	false		high
https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/remote.js	false		high
https://static.cdninstagram.com/rsrc.php/v4/y0/r/zaPaQAgWpzQ.js	false		high
https://www.instagram.com/ajax/bootloader-endpoint/?modules=PolarisLoggedOutContentWallDialog.react&__d=www&__user=0&__a=1&__req=h&__hs=20101.HYP%3Ainstagram_web_pkg.2.1.0.0.0&dpr=1&__ccg=UNKNOWN&__rev=1019285071&__s=59cdbm%3Asc5tl8%3Awp1csp&__hsi=7459265910909680541&__dyn=7xeUjG1mxu1syUbFp41twpUnwgU7SbzEdF8aUco2qwJw5ux609vCwjE1EE2Cw8G11wBz81s8hwGxu786a3a1YwBgao6C0Mo2swtUd8-U2zxe2GewGw9a361qw8Xxm16wa-0nKq2-azo7u3C2u2J0bS1LwTwKG1pg2fwxyo6O1FwlEcUed6goK2O4UrAwCAxW1oCz84u2G0CpWy9rDyo&__csr=grMghcx4LjJILGpRihel4FAaiGQAApVVLWLpEDV7GZ2qKnAhHChQeijih9JeQubUyqWXx1qCBl6WzppXh8x5BG8G8DGijxah6KjGq8KQ9Dh9UG8CxvhXXGVpaQdCheqamqu8GjyqhEpgOEeqx24poO4p8-00kdy0w81Mo9E1lGCg943y3W0R84O1VwO4xa1Hg980mLwdy0TE2nhFQ3e057cWx51jz83jm8wg32e3Yol2FU5kx9REs5K1ku1CwhpXaEhgDg22ccwCga8COpHIE5C2yEW3s9R70kUmG3C15xMMO2p0jQ2yh1Z0EzQ0Ko6l0Mc0xWw084O0aWw4Sw&__comet_req=7&__spin_r=1019285071&__spin_b=trunk&__spin_t=1736745683	false		high
https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/endscreen.js	false		high
https://static.cdninstagram.com/rsrc.php/v4/yC/r/vOT3VYikDNz.js	false		high
https://mrohailkhan.com/wp-content/plugins/Elementor%20Pro%20v3.26.2%20-%20The%20Most%20Advanced%20Website%20Builder%20Plugin/assets/js/form.ae7f04a9f3cbc167835c.bundle.min.js	false	Avira URL Cloud: malware	unknown
https://i.ytimg.com/vi/qsvSLGCMmPQ/hq720_2.jpg?sqp=-oaymwEoCKACEOADSFryq4qpAxoIARUAAIhC0AEB2AEB4gEKCBgQAhgGOAFAAQ==&rs=AOn4CLDvOqgT2DThFIOlP43FpwCG407Plw	false		high
https://mrohailkhan.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/solid.min.css?ver=5.15.3	false	Avira URL Cloud: malware	unknown
https://scontent-hou1-1.cdninstagram.com/v/t51.2885-19/461921890_1285214869573749_7249990667782651180_n.jpg?stp=dst-jpg_s150x150_tt6&_nc_ht=scontent-hou1-1.cdninstagram.com&_nc_cat=109&_nc_ohc=zPqjhG_ygiUQ7kNvgF5HLqq&_nc_gid=11f2b6c5f7d048c592ced40d32072d37&edm=AOQ1c0wBAAAA&ccb=7-5&oh=00_AYB13WXYxBtMvI-txoYq8jbkGL_XNY1kEVnpGCKVtFPj_g&oe=678A6964&_nc_sid=8b3546	false		high
https://mrohailkhan.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1	false	Avira URL Cloud: malware	unknown
https://www.youtube.com/s/desktop/b5305900/cssbin/www-main-desktop-watch-page-skeleton.css	false		high
https://mrohailkhan.com/wp-content/plugins/elementor/assets/js/frontend-modules.min.js?ver=3.26.3	false	Avira URL Cloud: malware	unknown
https://googleads.g.doubleclick.net/pagead/id?slf_rd=1	false		high
https://static.snapchat.com/profiles/_next/static/chunks/1dd05252-5e78ef4f262286a1.js	false		high
https://youtube.com/	false		high
https://www.instagram.com/ajax/bz?__a=1&__ccg=UNKNOWN&__comet_req=7&__d=www&__hs=20101.HYP%3Ainstagram_web_pkg.2.1.0.0.0&__hsi=7459265910909680541&__req=n&__rev=1019285071&__s=59cdbm%3Asc5tl8%3Awp1csp&__spin_b=trunk&__spin_r=1019285071&__spin_t=1736745683&__user=0&dpr=1&jazoest=21113&lsd=AVrPtnXylvk&ph=C3	false		high
https://static.xx.fbcdn.net/rsrc.php/v4/yf/r/sqTChaOpMTh.js	false		high
https://static.cdninstagram.com/rsrc.php/v4iE3S4/y5/l/en_US/1M8hJ58R7rV.js	false		high
https://static.cdninstagram.com/rsrc.php/v5/yZ/l/0,cross/iw3q0l6gZUhyiGI8oEHDF82Q5D9bVLKtS1pZI-MdSFsy.css	false		high
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=20101.HYP%3Acomet_loggedout_pkg.2.1.0.0.0&__hsi=7459265955011899481&__req=5&__rev=1019285144&__s=zd3jpg%3A2o5mtb%3Aeob3oy&__spin_b=trunk&__spin_r=1019285144&__spin_t=1736745693&__user=0&dpr=1&jazoest=2938&lsd=AVpa7tfSq94&ph=C3	false		high
https://mrohailkhan.com/wp-content/plugins/elementor/assets/js/frontend.min.js?ver=3.26.3	false	Avira URL Cloud: malware	unknown
https://static.snapchat.com/profiles/_next/static/chunks/4878-8eacf45e520902ef.js	false		high
https://static.snapchat.com/fonts/AvenirNext-Bold.woff2	false		high
https://static.cdninstagram.com/rsrc.php/v4iBVF4/ya/l/en_US/Id4Ky7bP6nW.js	false		high
https://mrohailkhan.com/wp-includes/js/jquery/jquery.min.js?ver=3.7.1	false	Avira URL Cloud: malware	unknown
https://static.xx.fbcdn.net/rsrc.php/v4/y0/r/eFZD1KABzRA.png	false		high
https://static.xx.fbcdn.net/rsrc.php/v4i2VD4/yT/l/en_GB/y9NW9e0pFg0.js	false		high
https://mrohailkhan.com/wp-content/uploads/elementor/css/post-183.css?ver=1736349655	false	Avira URL Cloud: malware	unknown
https://www.instagram.com/data/manifest.json	false		high
https://www.youtube.com/s/desktop/b5305900/jsbin/spf.vflset/spf.js	false		high
https://mrohailkhan.com/wp-content/plugins/Elementor%20Pro%20v3.26.2%20-%20The%20Most%20Advanced%20Website%20Builder%20Plugin/assets/js/webpack-pro.runtime.min.js?ver=3.26.2	false	Avira URL Cloud: malware	unknown
https://static.xx.fbcdn.net/rsrc.php/v4i9qq4/y8/l/en_GB/kfEOO2-2iMY.js	false		high
https://mrohailkhan.com/wp-content/plugins/Elementor%20Pro%20v3.26.2%20-%20The%20Most%20Advanced%20Website%20Builder%20Plugin/assets/css/widget-form.min.css?ver=3.26.2	false	Avira URL Cloud: malware	unknown
https://static.xx.fbcdn.net/rsrc.php/v4ilgK4/yh/l/en_GB/ThWAK9ab9eS.js	false		high
https://scontent-hou1-1.xx.fbcdn.net/v/t39.30808-1/459725154_122117548928441653_6905480166644665508_n.jpg?stp=cp0_dst-jpg_s40x40_tt6&_nc_cat=101&ccb=1-7&_nc_sid=fe756c&_nc_ohc=odLK4S4EdlYQ7kNvgEU2wqY&_nc_zt=24&_nc_ht=scontent-hou1-1.xx&_nc_gid=AiZ7XspTWQ9wIXHP7HEZPMJ&oh=00_AYCu1FFT3Zq5ATy7fXqKjfcY14a5LOHHR8BoNauUDxr_Ng&oe=678A87BB	false		high
https://mrohailkhan.com/wp-content/plugins/elementor/assets/lib/animations/styles/e-animation-shrink.min.css?ver=3.26.3	false	Avira URL Cloud: malware	unknown
https://www.facebook.com/ajax/bz?__a=1&__aaid=0&__ccg=GOOD&__comet_req=15&__hs=20101.HYP%3Acomet_loggedout_pkg.2.1.0.0.0&__hsi=7459265955011899481&__req=d&__rev=1019285144&__s=zd3jpg%3A2o5mtb%3Aeob3oy&__spin_b=trunk&__spin_r=1019285144&__spin_t=1736745693&__user=0&dpr=1&jazoest=2938&lsd=AVpa7tfSq94&ph=C3	false		high
https://mrohailkhan.com/wp-content/plugins/elementor/assets/lib/eicons/fonts/eicons.woff2?5.34.0	false	Avira URL Cloud: malware	unknown
https://www.youtube.com/s/desktop/b5305900/jsbin/custom-elements-es5-adapter.vflset/custom-elements-es5-adapter.js	false		high
https://mrohailkhan.com/wp-content/uploads/2024/12/cropped-cropped-cropped-M.-Rohail-Khan-1-1-1-32x32.png	false	Avira URL Cloud: malware	unknown
https://www.youtube.com/api/jnn/v1/GenerateIT	false		high
https://static.snapchat.com/profiles/_next/static/chunks/pages/_app-b93d63c621b63ff4.js	false		high
https://www.facebook.com/data/manifest/	false		high
https://app.snapchat.com/web/deeplink/snapcode?username=rohail_khan195&type=SVG&bitmoji=enable	false		high
https://www.instagram.com/graphql/query	false		high

Name	Source	Malicious	Reputation
https://help.instagram.com/370452623149242	chromecache_950.2.dr	false	high
https://stats.g.doubleclick.net/g/collect	chromecache_635.2.dr	false	high
https://s.youtube.com/api/stats/delayplay?cl=	chromecache_781.2.dr	false	high
https://messenger.com/	chromecache_883.2.dr	false	high
https://support.google.com	chromecache_781.2.dr	false	high
https://www.youtube.com/embed/	chromecache_781.2.dr	false	high
https://github.com/zloirock/core-js	chromecache_848.2.dr	false	high
https://ampcid.google.com/v1/publisher:getClientId	chromecache_660.2.dr	false	high
https://policies.google.com/technologies/cookies	chromecache_933.2.dr	false	high
http://polymer.github.io/AUTHORS.txt	chromecache_781.2.dr	false	high
https://www.youtube.com	chromecache_781.2.dr	false	high
https://fontawesome.com	chromecache_679.2.dr	false	high
https://help.instagram.com/cookie_settings	chromecache_561.2.dr, chromecache_785.2.dr	false	high
https://www.google.com/get/videoqualityreport/?v=	chromecache_781.2.dr	false	high
https://www.instagram.com	chromecache_950.2.dr, chromecache_952.2.dr	false	high
https://help.instagram.com/155833707900388	chromecache_950.2.dr	false	high
https://help.instagram.com/222826637847963	chromecache_950.2.dr	false	high
https://youradchoices.ca/	chromecache_950.2.dr, chromecache_941.2.dr, chromecache_445.2.dr	false	high
https://www.instagram.com/support/chat/embed/ig/	chromecache_950.2.dr	false	high
https://s.youtube.com	chromecache_781.2.dr	false	high
https://i.ytimg.com/an/	chromecache_781.2.dr	false	high
https://www.youtube.com/api/stats/ads?ver=	chromecache_781.2.dr	false	high
https://stats.g.doubleclick.net/j/collect	chromecache_660.2.dr	false	high
https://www.google.com/tools/feedback	chromecache_781.2.dr	false	high
https://www.youtube.com/youtubei/v1/player?key=AIzaSyAO_FJ2SlqU8Q4STEHLGCilw_Y9_11qcW8&prettyPrint=f	chromecache_781.2.dr	false	high
https://www.youtube.com/pagead/interaction/?ai=C	chromecache_781.2.dr	false	high
https://about.instagram.com/blog/	chromecache_950.2.dr	false	high
https://static.xx.fbcdn.net/rsrc.php/v4/y_/r/TMJXg0wObWB.js	chromecache_883.2.dr	false	high
https://www.google.com/recaptcha/api.js?trustedtypes=true	chromecache_781.2.dr	false	high
https://apis.google.com/js/api.js	chromecache_781.2.dr	false	high
http://polymer.github.io/PATENTS.txt	chromecache_781.2.dr	false	high
https://s.youtube.com/api/stats/qoe?cl=	chromecache_781.2.dr	false	high
https://docs.google.com/picker	chromecache_781.2.dr	false	high
https://help.instagram.com/626057554667531	chromecache_950.2.dr	false	high
https://www.youtube.com/	chromecache_781.2.dr	false	high
http://mathiasbynens.be/	chromecache_781.2.dr	false	high
https://youtube.com/watch?v=	chromecache_781.2.dr	false	high
https://www.youtube.com/ptracking?ei=	chromecache_781.2.dr	false	high

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1589773
Start date and time:	2025-01-13 06:19:14 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 5m 11s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://mrohailkhan.com/energyaustralia/auth/auhs1/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	10
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.win@27/848@84/32
Cookbook Comments:	Browse: https://www.snapchat.com/add/rohail_khan195?share_id=HmLugnT-6pE&locale=en-US Browse: https://www.youtube.com/@rohailkhan6588 Browse: https://www.instagram.com/rohail_gm Browse: https://www.facebook.com/rohail94

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (612)
Category:	downloaded
Size (bytes):	34430
Entropy (8bit):	5.410361721219071
Encrypted:	false
SSDEEP:	384:IwmJSf5lT4TmulJgyJxCOecEP4SPZuAr/9yRJstmKhWEseER6Z4ZBbNjUs6/CSd:IwzlT4T53C6oJoRJDQPE8Z
MD5:	E4DE82256BB1D92FE0FF0C4505695568
SHA1:	3AFED1A7019FDBE2FFA59DCD198DBD3F6F0C4F1B
SHA-256:	263060790676953B348347B4927CDF0D8633216557E6C26A91E79623E4FF2470
SHA-512:	D3CF1177AE9333FCA18AA6C93B7F4D9216D7D45B3B5F1F30504F356B7D27273907578ED6410966519C32F4C6CDFC131F70B9CCE28861D45339D01B80E9527723
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/3ede36f2/player_ias.vflset/en_US/endscreen.js
Preview:	(function(g){var window=this;'use strict';var TAv=function(p,C){p.Jk("onAutonavCoundownStarted",C)},MSE=function(p){var C,V,N;.return p==null?void 0:(C=p.playerOverlays)==null?void 0:(V=C.playerOverlayRenderer)==null?void 0:(N=V.autoplay)==null?void 0:N.playerOverlayAutoplayRenderer},H9=function(p,C,V){g.aL(p.element,"ytp-suggestion-set",!!C.videoId);.var N=C.playlistId;V=C.b8(V?V:"mqdefault.jpg");var H=null,X=null;C instanceof g.ls&&(C.lengthText?(H=C.lengthText\|\|null,X=C.uN\|\|null):C.lengthSeconds&&(H=g.u$(C.lengthSeconds),X=g.u$(C.lengthSeconds,!0)));var d=!!N;N=d&&g.aI(N).type==="RD";var a=C instanceof g.ls?C.isLivePlayback:null,E=C instanceof g.ls?C.isUpcoming:null,l=C.author,t=C.shortViewCount,c=C.publishedTimeText,T=[],M=[];l&&T.push(l);t&&(T.push(t),M.push(t));c&&M.push(c);V={title:C.title,author:l,author_and_views:T.join(" \u2022 "),aria_label:C.ariaLabel\|\|.g.c8("Watch $TITLE",{TITLE:C.title}),duration:H,timestamp:X,url:C.uT(),is_live:a,is_upcoming:E,is_list:d,is_mix:N,backgrou

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Jan 13, 2025 06:20:18.048985958 CET	192.168.2.4	1.1.1.1	0xd117	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:20:18.049117088 CET	192.168.2.4	1.1.1.1	0x4806	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 13, 2025 06:20:20.972496033 CET	192.168.2.4	1.1.1.1	0xd7b2	Standard query (0)	mrohailkhan.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:20:20.972676039 CET	192.168.2.4	1.1.1.1	0x4696	Standard query (0)	mrohailkhan.com	65	IN (0x0001)	false
Jan 13, 2025 06:20:26.558687925 CET	192.168.2.4	1.1.1.1	0xce37	Standard query (0)	mrohailkhan.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:20:26.558851957 CET	192.168.2.4	1.1.1.1	0xcab	Standard query (0)	mrohailkhan.com	65	IN (0x0001)	false
Jan 13, 2025 06:20:41.661932945 CET	192.168.2.4	1.1.1.1	0xf557	Standard query (0)	www.snapchat.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:20:41.662033081 CET	192.168.2.4	1.1.1.1	0xe1b3	Standard query (0)	www.snapchat.com	65	IN (0x0001)	false
Jan 13, 2025 06:20:42.725069046 CET	192.168.2.4	1.1.1.1	0x8cfa	Standard query (0)	cf-st.sc-cdn.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:20:42.725271940 CET	192.168.2.4	1.1.1.1	0xf49d	Standard query (0)	cf-st.sc-cdn.net	65	IN (0x0001)	false
Jan 13, 2025 06:20:42.768692017 CET	192.168.2.4	1.1.1.1	0x460f	Standard query (0)	static.snapchat.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:20:42.768896103 CET	192.168.2.4	1.1.1.1	0x3af4	Standard query (0)	static.snapchat.com	65	IN (0x0001)	false
Jan 13, 2025 06:20:43.980016947 CET	192.168.2.4	1.1.1.1	0xcab7	Standard query (0)	app.snapchat.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:20:43.980375051 CET	192.168.2.4	1.1.1.1	0x18fb	Standard query (0)	app.snapchat.com	65	IN (0x0001)	false
Jan 13, 2025 06:20:45.261823893 CET	192.168.2.4	1.1.1.1	0x1c11	Standard query (0)	app.snapchat.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:20:45.262028933 CET	192.168.2.4	1.1.1.1	0x42f2	Standard query (0)	app.snapchat.com	65	IN (0x0001)	false
Jan 13, 2025 06:20:45.268501997 CET	192.168.2.4	1.1.1.1	0xa850	Standard query (0)	static.snapchat.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:20:45.268773079 CET	192.168.2.4	1.1.1.1	0x6356	Standard query (0)	static.snapchat.com	65	IN (0x0001)	false
Jan 13, 2025 06:20:52.255445957 CET	192.168.2.4	1.1.1.1	0x6a5a	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:20:52.255647898 CET	192.168.2.4	1.1.1.1	0x2510	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jan 13, 2025 06:20:53.420159101 CET	192.168.2.4	1.1.1.1	0x8597	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:20:53.420419931 CET	192.168.2.4	1.1.1.1	0x43fb	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jan 13, 2025 06:20:54.773019075 CET	192.168.2.4	1.1.1.1	0x7aea	Standard query (0)	www.youtube.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:20:54.773175001 CET	192.168.2.4	1.1.1.1	0x2fd5	Standard query (0)	www.youtube.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:01.803972006 CET	192.168.2.4	1.1.1.1	0xd74b	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:01.805572033 CET	192.168.2.4	1.1.1.1	0xc9ec	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 13, 2025 06:21:01.811263084 CET	192.168.2.4	1.1.1.1	0x6ddf	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:01.811670065 CET	192.168.2.4	1.1.1.1	0xa8e0	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:01.880923033 CET	192.168.2.4	1.1.1.1	0x8e8d	Standard query (0)	rr2---sn-q4flrnlz.googlevideo.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:01.881381989 CET	192.168.2.4	1.1.1.1	0x2419	Standard query (0)	rr2---sn-q4flrnlz.googlevideo.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:02.688410997 CET	192.168.2.4	1.1.1.1	0xac37	Standard query (0)	yt3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:02.689501047 CET	192.168.2.4	1.1.1.1	0x1f72	Standard query (0)	yt3.googleusercontent.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:02.773195028 CET	192.168.2.4	1.1.1.1	0x1f	Standard query (0)	youtube.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:02.774636030 CET	192.168.2.4	1.1.1.1	0x35f	Standard query (0)	youtube.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:04.099297047 CET	192.168.2.4	1.1.1.1	0xba51	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:04.099636078 CET	192.168.2.4	1.1.1.1	0x7cf4	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:04.724231958 CET	192.168.2.4	1.1.1.1	0xfc0b	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:04.724422932 CET	192.168.2.4	1.1.1.1	0x155	Standard query (0)	www.google.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:04.726075888 CET	192.168.2.4	1.1.1.1	0xb894	Standard query (0)	i.ytimg.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:04.726253986 CET	192.168.2.4	1.1.1.1	0xa939	Standard query (0)	i.ytimg.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:04.743995905 CET	192.168.2.4	1.1.1.1	0x1c9	Standard query (0)	yt3.googleusercontent.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:04.744159937 CET	192.168.2.4	1.1.1.1	0xf907	Standard query (0)	yt3.googleusercontent.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:04.748070002 CET	192.168.2.4	1.1.1.1	0xbf02	Standard query (0)	googleads.g.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:04.748070002 CET	192.168.2.4	1.1.1.1	0x6b32	Standard query (0)	googleads.g.doubleclick.net	65	IN (0x0001)	false
Jan 13, 2025 06:21:06.418786049 CET	192.168.2.4	1.1.1.1	0xece0	Standard query (0)	play.google.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:06.418786049 CET	192.168.2.4	1.1.1.1	0xec86	Standard query (0)	play.google.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:21.536005974 CET	192.168.2.4	1.1.1.1	0x92b2	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:21.536287069 CET	192.168.2.4	1.1.1.1	0xc849	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Jan 13, 2025 06:21:22.209028959 CET	192.168.2.4	1.1.1.1	0x18d3	Standard query (0)	www.instagram.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:22.209317923 CET	192.168.2.4	1.1.1.1	0xb968	Standard query (0)	www.instagram.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:23.123224020 CET	192.168.2.4	1.1.1.1	0x20eb	Standard query (0)	static.doubleclick.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:23.123852015 CET	192.168.2.4	1.1.1.1	0x2793	Standard query (0)	static.doubleclick.net	65	IN (0x0001)	false
Jan 13, 2025 06:21:23.951138020 CET	192.168.2.4	1.1.1.1	0x8d49	Standard query (0)	static.cdninstagram.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:23.951524019 CET	192.168.2.4	1.1.1.1	0xd18a	Standard query (0)	static.cdninstagram.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:26.930134058 CET	192.168.2.4	1.1.1.1	0xf807	Standard query (0)	static.cdninstagram.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:26.930411100 CET	192.168.2.4	1.1.1.1	0x9928	Standard query (0)	static.cdninstagram.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:32.372241020 CET	192.168.2.4	1.1.1.1	0x5422	Standard query (0)	www.instagram.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:32.373044968 CET	192.168.2.4	1.1.1.1	0xb28f	Standard query (0)	www.instagram.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:32.579265118 CET	192.168.2.4	1.1.1.1	0xcf5f	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:32.580915928 CET	192.168.2.4	1.1.1.1	0x449c	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:33.936816931 CET	192.168.2.4	1.1.1.1	0x7ce8	Standard query (0)	scontent-hou1-1.cdninstagram.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:33.937015057 CET	192.168.2.4	1.1.1.1	0x873d	Standard query (0)	scontent-hou1-1.cdninstagram.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:34.263358116 CET	192.168.2.4	1.1.1.1	0x7fe6	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:34.264070034 CET	192.168.2.4	1.1.1.1	0x2f5b	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
Jan 13, 2025 06:21:34.273699045 CET	192.168.2.4	1.1.1.1	0x5faf	Standard query (0)	video.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:34.274770975 CET	192.168.2.4	1.1.1.1	0x159d	Standard query (0)	video.xx.fbcdn.net	65	IN (0x0001)	false
Jan 13, 2025 06:21:34.277734041 CET	192.168.2.4	1.1.1.1	0x73e5	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:34.278067112 CET	192.168.2.4	1.1.1.1	0x20e0	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Jan 13, 2025 06:21:34.765151978 CET	192.168.2.4	1.1.1.1	0xa069	Standard query (0)	scontent-hou1-1.cdninstagram.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:34.765470028 CET	192.168.2.4	1.1.1.1	0xd3f5	Standard query (0)	scontent-hou1-1.cdninstagram.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:37.894845963 CET	192.168.2.4	1.1.1.1	0x2b41	Standard query (0)	static.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:37.894975901 CET	192.168.2.4	1.1.1.1	0x6831	Standard query (0)	static.xx.fbcdn.net	65	IN (0x0001)	false
Jan 13, 2025 06:21:38.292272091 CET	192.168.2.4	1.1.1.1	0xdd36	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:38.292433023 CET	192.168.2.4	1.1.1.1	0xca7c	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	65	IN (0x0001)	false
Jan 13, 2025 06:21:39.226855040 CET	192.168.2.4	1.1.1.1	0x1ce0	Standard query (0)	www.facebook.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:39.226855040 CET	192.168.2.4	1.1.1.1	0x9619	Standard query (0)	www.facebook.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:39.352812052 CET	192.168.2.4	1.1.1.1	0x2db4	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:39.352812052 CET	192.168.2.4	1.1.1.1	0x1cba	Standard query (0)	scontent-hou1-1.xx.fbcdn.net	65	IN (0x0001)	false
Jan 13, 2025 06:21:39.577438116 CET	192.168.2.4	1.1.1.1	0xa0b3	Standard query (0)	graph.instagram.com	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:39.577796936 CET	192.168.2.4	1.1.1.1	0xf313	Standard query (0)	graph.instagram.com	65	IN (0x0001)	false
Jan 13, 2025 06:21:44.001369953 CET	192.168.2.4	1.1.1.1	0x77aa	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:44.001791000 CET	192.168.2.4	1.1.1.1	0x9ca	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false
Jan 13, 2025 06:21:44.159148932 CET	192.168.2.4	1.1.1.1	0x68dd	Standard query (0)	scontent.xx.fbcdn.net	A (IP address)	IN (0x0001)	false
Jan 13, 2025 06:21:44.161648035 CET	192.168.2.4	1.1.1.1	0xf69d	Standard query (0)	scontent.xx.fbcdn.net	65	IN (0x0001)	false

Timestamp	Bytes transferred	Direction	Data
2025-01-13 05:20:21 UTC	685	OUT	GET /energyaustralia/auth/auhs1/ HTTP/1.1 Host: mrohailkhan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 05:20:22 UTC	389	IN	HTTP/1.1 404 Not Found Date: Mon, 13 Jan 2025 05:20:47 GMT Server: Apache/2 Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://mrohailkhan.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding,User-Agent Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-01-13 05:20:22 UTC	7803	IN	Data Raw: 32 30 30 30 0d 0a 3c 21 64 6f 63 74 79 70 65 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 55 53 22 3e 0a 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 6f 66 69 6c 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 67 6d 70 67 2e 6f 72 67 2f 78 66 6e 2f 31 31 22 3e 0a 09 3c 74 69 74 6c 65 3e 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 20 26 23 38 32 31 31 3b 20 4d 2e 52 6f 68 61 69 6c 20 4b 68 61 6e 3c 2f 74 69 74 6c 65 3e 0a 3c 6d 65 74 61 20 Data Ascii: 2000<!doctype html><html lang="en-US"><head><meta charset="UTF-8"><meta name="viewport" content="width=device-width, initial-scale=1"><link rel="profile" href="https://gmpg.org/xfn/11"><title>Page not found – M.Rohail Khan</title><meta
2025-01-13 05:20:22 UTC	395	IN	Data Raw: 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 61 75 74 6f 3b 20 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 20 61 75 74 6f 3b 20 7d 3a 77 68 65 72 65 28 2e 77 70 2d 73 69 74 65 2d 62 6c 6f 63 6b 73 29 20 3e 20 2a 20 7b 20 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 3a 20 32 34 70 78 3b 20 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b 2d 65 6e 64 3a 20 30 3b 20 7d 3a 77 68 65 72 65 28 2e 77 70 2d 73 69 74 65 2d 62 6c 6f 63 6b 73 29 20 3e 20 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 20 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 3a 20 30 3b 20 7d 3a 77 68 65 72 65 28 2e 77 70 2d 73 69 74 65 2d 62 6c 6f 63 6b 73 29 20 3e 20 3a 6c 61 73 74 2d 63 68 69 6c 64 20 7b 20 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b 2d 65 6e 64 3a 20 30 3b 20 7d 3a 72 6f 6f 74 20 7b 20 2d Data Ascii: margin-left: auto; margin-right: auto; }:where(.wp-site-blocks) > * { margin-block-start: 24px; margin-block-end: 0; }:where(.wp-site-blocks) > :first-child { margin-block-start: 0; }:where(.wp-site-blocks) > :last-child { margin-block-end: 0; }:root { -
2025-01-13 05:20:22 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 05:20:22 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 64 7b 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b 2d 65 6e 64 3a 20 30 3b 7d 3a 72 6f 6f 74 20 3a 77 68 65 72 65 28 2e 69 73 2d 6c 61 79 6f 75 74 2d 66 6c 6f 77 29 20 3e 20 2a 7b 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 3a 20 32 34 70 78 3b 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b 2d 65 6e 64 3a 20 30 3b 7d 3a 72 6f 6f 74 20 3a 77 68 65 72 65 28 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 29 20 3e 20 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 3a 20 30 3b 7d 3a 72 6f 6f 74 20 3a 77 68 65 72 65 28 2e 69 73 2d 6c 61 79 6f 75 74 2d 63 6f 6e 73 74 72 61 69 6e 65 64 29 20 3e 20 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 6d 61 72 67 69 6e 2d 62 6c 6f 63 6b 2d 65 6e 64 3a 20 30 3b Data Ascii: 2000d{margin-block-end: 0;}:root :where(.is-layout-flow) > *{margin-block-start: 24px;margin-block-end: 0;}:root :where(.is-layout-constrained) > :first-child{margin-block-start: 0;}:root :where(.is-layout-constrained) > :last-child{margin-block-end: 0;
2025-01-13 05:20:22 UTC	6	IN	Data Raw: 73 2f 73 74 79 6c Data Ascii: s/styl
2025-01-13 05:20:22 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 05:20:22 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 65 73 2f 65 2d 61 6e 69 6d 61 74 69 6f 6e 2d 67 72 6f 77 2e 6d 69 6e 2e 63 73 73 3f 76 65 72 3d 33 2e 32 36 2e 33 27 20 6d 65 64 69 61 3d 27 61 6c 6c 27 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 20 69 64 3d 27 77 69 64 67 65 74 2d 6e 61 76 2d 6d 65 6e 75 2d 63 73 73 27 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 6d 72 6f 68 61 69 6c 6b 68 61 6e 2e 63 6f 6d 2f 77 70 2d 63 6f 6e 74 65 6e 74 2f 70 6c 75 67 69 6e 73 2f 45 6c 65 6d 65 6e 74 6f 72 25 32 30 50 72 6f 25 32 30 76 33 2e 32 36 2e 32 25 32 30 2d 25 32 30 54 68 65 25 32 30 4d 6f 73 74 25 32 30 41 64 76 61 6e 63 65 64 25 32 30 57 65 62 73 69 74 65 25 32 30 42 75 69 6c 64 65 72 25 32 30 50 6c 75 67 69 6e 2f 61 73 73 65 74 73 2f 63 73 73 2f 77 69 64 Data Ascii: 2000es/e-animation-grow.min.css?ver=3.26.3' media='all' /><link rel='stylesheet' id='widget-nav-menu-css' href='https://mrohailkhan.com/wp-content/plugins/Elementor%20Pro%20v3.26.2%20-%20The%20Most%20Advanced%20Website%20Builder%20Plugin/assets/css/wid
2025-01-13 05:20:22 UTC	6	IN	Data Raw: 75 2d 69 74 65 6d Data Ascii: u-item
2025-01-13 05:20:22 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-01-13 05:20:22 UTC	8192	IN	Data Raw: 32 30 30 30 0d 0a 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 31 37 31 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 72 6f 68 61 69 6c 6b 68 61 6e 2e 63 6f 6d 2f 61 62 6f 75 74 2d 6d 65 2f 22 20 63 6c 61 73 73 3d 22 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 22 3e 41 42 4f 55 54 20 4d 45 3c 2f 61 3e 3c 2f 6c 69 3e 0a 3c 6c 69 20 63 6c 61 73 73 3d 22 6d 65 6e 75 2d 69 74 65 6d 20 6d 65 6e 75 2d 69 74 65 6d 2d 74 79 70 65 2d 70 6f 73 74 5f 74 79 70 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 6f 62 6a 65 63 74 2d 70 61 67 65 20 6d 65 6e 75 2d 69 74 65 6d 2d 31 37 30 22 3e 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6d 72 6f 68 61 69 6c 6b 68 61 6e 2e 63 6f 6d 2f 6d 79 2d 74 65 61 6d 2f 22 20 63 6c 61 73 73 3d 22 65 6c 65 Data Ascii: 2000-object-page menu-item-171"><a href="https://mrohailkhan.com/about-me/" class="elementor-item">ABOUT ME</a></li><li class="menu-item menu-item-type-post_type menu-item-object-page menu-item-170"><a href="https://mrohailkhan.com/my-team/" class="ele

Timestamp	Bytes transferred	Direction	Data
2025-01-13 05:20:22 UTC	614	OUT	GET /wp-includes/css/dist/block-library/style.min.css?ver=6.7.1 HTTP/1.1 Host: mrohailkhan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mrohailkhan.com/energyaustralia/auth/auhs1/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 05:20:22 UTC	298	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 05:20:48 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 07 Nov 2024 16:35:24 GMT ETag: "1c012-62655389aab00" Accept-Ranges: bytes Content-Length: 114706 Vary: Accept-Encoding,User-Agent Content-Type: text/css
2025-01-13 05:20:22 UTC	7894	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 72 63 68 69 76 65 73 2d 64 72 6f 70 64 6f 77 6e 20 6c 61 62 65 6c 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 20 69 6d 67 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 76 61 74 61 72 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 61 Data Ascii: @charset "UTF-8";.wp-block-archives{box-sizing:border-box}.wp-block-archives-dropdown label{display:block}.wp-block-avatar{line-height:0}.wp-block-avatar,.wp-block-avatar img{box-sizing:border-box}.wp-block-avatar.aligncenter{text-align:center}.wp-block-a
2025-01-13 05:20:22 UTC	8000	IN	Data Raw: 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 2e 32 35 65 6d 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 6e 6f 74 28 5b 74 79 70 65 3d 73 75 62 6d 69 74 5d 29 3a 6e 6f 74 28 5b 74 79 70 65 3d 63 68 65 63 6b 62 6f 78 5d 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 20 74 65 78 74 61 72 65 61 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 70 6f 73 74 2d 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 72 6d 2d 63 6f 6f 6b Data Ascii: {display:block;margin-bottom:.25em}.wp-block-post-comments .comment-form input:not([type=submit]):not([type=checkbox]),.wp-block-post-comments .comment-form textarea{box-sizing:border-box;display:block;width:100%}.wp-block-post-comments .comment-form-cook
2025-01-13 05:20:22 UTC	8000	IN	Data Raw: 75 6e 64 2d 64 69 6d 2d 38 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 38 30 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 67 72 61 64 69 65 6e 74 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 64 69 6d 2d 38 30 3a 6e 6f 74 28 2e 68 61 73 2d 62 61 63 6b 67 72 6f 75 6e 64 2d 67 72 61 64 69 65 6e 74 29 3a 62 65 66 6f 72 65 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2e Data Ascii: und-dim-80 .wp-block-cover__background,.wp-block-cover-image.has-background-dim.has-background-dim-80 .wp-block-cover__gradient-background,.wp-block-cover-image.has-background-dim.has-background-dim-80:not(.has-background-gradient):before,.wp-block-cover.
2025-01-13 05:20:22 UTC	8000	IN	Data Raw: 6f 6d 2d 6c 65 66 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 70 6f 73 69 74 69 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 70 6f 73 69 74 69 6f 6e 2e 69 73 2d 70 6f 73 69 74 69 6f 6e 2d 62 6f 74 74 6f 6d 2d 72 69 67 68 74 20 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 5f 5f 69 6e 6e 65 72 2d 63 6f 6e 74 61 69 6e 65 72 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 63 6f 76 65 72 2d 69 6d 61 67 65 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 70 6f 73 69 74 69 6f 6e 2e 68 61 73 2d 63 75 73 74 6f 6d 2d 63 6f 6e 74 65 6e 74 2d 70 6f 73 69 74 69 6f 6e 2e Data Ascii: om-left .wp-block-cover__inner-container,.wp-block-cover-image.has-custom-content-position.has-custom-content-position.is-position-bottom-right .wp-block-cover__inner-container,.wp-block-cover-image.has-custom-content-position.has-custom-content-position.
2025-01-13 05:20:22 UTC	8000	IN	Data Raw: 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 64 61 74 65 74 69 6d 65 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 65 6d 61 69 6c 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 6d 6f 6e 74 68 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 6e 75 6d 62 65 72 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 70 61 73 73 77 6f 72 64 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e 70 75 74 5b 74 79 70 65 3d 73 65 61 72 63 68 5d 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 66 6f 72 6d 2d 69 6e 70 75 74 5f 5f 69 6e Data Ascii: put__input[type=datetime],.wp-block-form-input__input[type=email],.wp-block-form-input__input[type=month],.wp-block-form-input__input[type=number],.wp-block-form-input__input[type=password],.wp-block-form-input__input[type=search],.wp-block-form-input__in
2025-01-13 05:20:22 UTC	8000	IN	Data Raw: 6c 75 6d 6e 73 2d 32 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 32 6e 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 33 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 6d 61 67 65 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 33 6e 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 29 2e 63 6f 6c 75 6d 6e 73 2d 33 20 2e 62 6c 6f 63 6b 73 2d 67 61 6c 6c 65 72 79 2d 69 74 65 6d 3a 6e 74 68 2d 6f 66 2d 74 79 70 65 28 33 6e 29 2c 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 3a 6e 6f 74 28 2e 68 61 73 2d 6e 65 73 74 Data Ascii: lumns-2 .blocks-gallery-item:nth-of-type(2n),.wp-block-gallery:not(.has-nested-images).columns-3 .blocks-gallery-image:nth-of-type(3n),.wp-block-gallery:not(.has-nested-images).columns-3 .blocks-gallery-item:nth-of-type(3n),.wp-block-gallery:not(.has-nest
2025-01-13 05:20:22 UTC	8000	IN	Data Raw: 2d 6c 61 73 74 2d 63 68 69 6c 64 28 32 29 7e 66 69 67 75 72 65 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 3a 6e 6f 74 28 23 69 6e 64 69 76 69 64 75 61 6c 2d 69 6d 61 67 65 29 7b 77 69 64 74 68 3a 63 61 6c 63 28 35 30 25 20 2d 20 76 61 72 28 2d 2d 77 70 2d 2d 73 74 79 6c 65 2d 2d 75 6e 73 74 61 62 6c 65 2d 67 61 6c 6c 65 72 79 2d 67 61 70 2c 20 31 36 70 78 29 2a 2e 35 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 67 61 6c 6c 65 72 79 2e 68 61 73 2d 6e 65 73 74 65 64 2d 69 6d 61 67 65 73 2e 63 6f 6c 75 6d 6e 73 2d 64 65 66 61 75 6c 74 20 66 69 67 75 72 65 2e 77 70 2d 62 6c 6f 63 6b 2d 69 6d 61 67 65 3a 6e 6f 74 28 23 69 6e 64 69 76 69 64 75 61 6c 2d 69 6d 61 67 65 29 3a 66 69 72 73 74 2d 63 68 69 6c 64 3a 6c 61 73 74 2d 63 68 69 6c 64 7b 77 69 64 74 68 3a 31 30 30 Data Ascii: -last-child(2)~figure.wp-block-image:not(#individual-image){width:calc(50% - var(--wp--style--unstable-gallery-gap, 16px)*.5)}.wp-block-gallery.has-nested-images.columns-default figure.wp-block-image:not(#individual-image):first-child:last-child{width:100
2025-01-13 05:20:22 UTC	8000	IN	Data Raw: 25 2c 2d 35 30 25 29 20 73 63 61 6c 65 28 31 29 3b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 39 39 25 7b 76 69 73 69 62 69 6c 69 74 79 3a 76 69 73 69 62 6c 65 7d 74 6f 7b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 28 63 61 6c 63 28 28 2d 31 30 30 76 77 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 73 63 72 6f 6c 6c 62 61 72 2d 77 69 64 74 68 29 29 2f 32 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 69 6e 69 74 69 61 6c 2d 6c 65 66 74 2d 70 6f 73 69 74 69 6f 6e 29 29 2c 63 61 6c 63 28 2d 35 30 76 68 20 2b 20 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 67 68 74 62 6f 78 2d 69 6e 69 74 69 61 6c 2d 74 6f 70 2d 70 6f 73 69 74 69 6f 6e 29 29 29 20 73 63 61 6c 65 28 76 61 72 28 2d 2d 77 70 2d 2d 6c 69 Data Ascii: %,-50%) scale(1);visibility:visible}99%{visibility:visible}to{transform:translate(calc((-100vw + var(--wp--lightbox-scrollbar-width))/2 + var(--wp--lightbox-initial-left-position)),calc(-50vh + var(--wp--lightbox-initial-top-position))) scale(var(--wp--li
2025-01-13 05:20:22 UTC	8000	IN	Data Raw: 6f 6c 6f 72 3b 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 2e 30 37 35 65 6d 3b 77 69 64 74 68 3a 69 6e 68 65 72 69 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 69 73 2d 76 65 72 74 69 63 61 6c 7b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 64 69 72 65 63 74 69 6f 6e 3a 63 6f 6c 75 6d 6e 3b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 79 3a 69 6e 69 74 69 61 6c 3b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 61 6c 69 67 6e 3a 66 6c 65 78 2d 73 74 61 72 74 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 2e 6e 6f 2d 77 72 61 70 7b 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 77 72 61 70 3a 6e 6f 77 72 61 70 Data Ascii: olor;height:inherit;margin-top:.075em;width:inherit}.wp-block-navigation.is-vertical{--navigation-layout-direction:column;--navigation-layout-justify:initial;--navigation-layout-align:flex-start}.wp-block-navigation.no-wrap{--navigation-layout-wrap:nowrap
2025-01-13 05:20:22 UTC	8000	IN	Data Raw: 69 67 6e 2c 69 6e 69 74 69 61 6c 29 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 64 69 72 65 63 74 69 6f 6e 2c 69 6e 69 74 69 61 6c 29 3b 66 6c 65 78 2d 77 72 61 70 3a 76 61 72 28 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 77 72 61 70 2c 77 72 61 70 29 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 76 61 72 28 2d 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 6c 61 79 6f 75 74 2d 6a 75 73 74 69 66 79 2c 69 6e 69 74 69 61 6c 29 7d 2e 77 70 2d 62 6c 6f 63 6b 2d 6e 61 76 69 67 61 74 69 6f 6e 5f 5f 72 65 73 70 6f 6e 73 69 76 65 2d 63 6f 6e 74 61 69 6e 65 72 3a 6e 6f 74 28 2e 69 73 2d 6d 65 6e 75 2d 6f 70 65 6e 2e 69 73 2d 6d 65 6e 75 2d Data Ascii: ign,initial);display:flex;flex-direction:var(--navigation-layout-direction,initial);flex-wrap:var(--navigation-layout-wrap,wrap);justify-content:var(--navigation-layout-justify,initial)}.wp-block-navigation__responsive-container:not(.is-menu-open.is-menu-

Timestamp	Bytes transferred	Direction	Data
2025-01-13 05:20:23 UTC	613	OUT	GET /wp-content/themes/hello-elementor/style.min.css?ver=3.2.1 HTTP/1.1 Host: mrohailkhan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mrohailkhan.com/energyaustralia/auth/auhs1/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 05:20:23 UTC	295	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 05:20:48 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 30 Dec 2024 04:20:24 GMT ETag: "157d-62a7521a0f200" Accept-Ranges: bytes Content-Length: 5501 Vary: Accept-Encoding,User-Agent Content-Type: text/css
2025-01-13 05:20:23 UTC	5501	IN	Data Raw: 68 74 6d 6c 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 31 35 3b 2d 77 65 62 6b 69 74 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 7d 2a 2c 3a 61 66 74 65 72 2c 3a 62 65 66 6f 72 65 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 2d 61 70 70 6c 65 2d 73 79 73 74 65 6d 2c 42 6c 69 6e 6b 4d 61 63 53 79 73 74 65 6d 46 6f 6e 74 2c 53 65 67 6f 65 20 55 49 2c 52 6f 62 6f 74 6f 2c 48 65 6c 76 65 74 69 63 61 20 4e 65 75 65 2c 41 72 69 61 6c 2c 4e 6f 74 6f 20 53 61 6e 73 2c 73 61 6e 73 2d 73 65 72 69 66 2c 41 70 70 6c 65 20 43 6f 6c 6f 72 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 45 6d 6f 6a 69 2c 53 65 67 6f 65 20 55 49 20 53 79 6d 62 6f Data Ascii: html{line-height:1.15;-webkit-text-size-adjust:100%}*,:after,:before{box-sizing:border-box}body{margin:0;font-family:-apple-system,BlinkMacSystemFont,Segoe UI,Roboto,Helvetica Neue,Arial,Noto Sans,sans-serif,Apple Color Emoji,Segoe UI Emoji,Segoe UI Symbo

Timestamp	Bytes transferred	Direction	Data
2025-01-13 05:20:23 UTC	613	OUT	GET /wp-content/themes/hello-elementor/theme.min.css?ver=3.2.1 HTTP/1.1 Host: mrohailkhan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mrohailkhan.com/energyaustralia/auth/auhs1/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 05:20:23 UTC	295	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 05:20:48 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 30 Dec 2024 04:20:24 GMT ETag: "13cd-62a7521a0f200" Accept-Ranges: bytes Content-Length: 5069 Vary: Accept-Encoding,User-Agent Content-Type: text/css
2025-01-13 05:20:23 UTC	5069	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 63 6f 6d 6d 65 6e 74 73 2d 61 72 65 61 20 61 2c 2e 70 61 67 65 2d 63 6f 6e 74 65 6e 74 20 61 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 75 6e 64 65 72 6c 69 6e 65 7d 2e 61 6c 69 67 6e 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 31 72 65 6d 7d 2e 61 6c 69 67 6e 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 72 65 6d 7d 2e 61 6c 69 67 6e 63 65 6e 74 65 72 7b 63 6c 65 61 72 3a 62 6f 74 68 3b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 3a 61 75 74 6f 7d 2e 61 6c 69 67 6e 77 69 64 65 7b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 3a 2d 38 30 70 78 7d 2e 61 6c 69 67 6e 66 75 6c 6c Data Ascii: @charset "UTF-8";.comments-area a,.page-content a{text-decoration:underline}.alignright{float:right;margin-left:1rem}.alignleft{float:left;margin-right:1rem}.aligncenter{clear:both;display:block;margin-inline:auto}.alignwide{margin-inline:-80px}.alignfull

Timestamp	Bytes transferred	Direction	Data
2025-01-13 05:20:23 UTC	621	OUT	GET /wp-content/themes/hello-elementor/header-footer.min.css?ver=3.2.1 HTTP/1.1 Host: mrohailkhan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mrohailkhan.com/energyaustralia/auth/auhs1/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 05:20:23 UTC	295	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 05:20:48 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 30 Dec 2024 04:20:24 GMT ETag: "1c2c-62a7521a0f200" Accept-Ranges: bytes Content-Length: 7212 Vary: Accept-Encoding,User-Agent Content-Type: text/css
2025-01-13 05:20:23 UTC	7212	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 73 69 74 65 2d 68 65 61 64 65 72 7b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 70 61 64 64 69 6e 67 2d 62 6c 6f 63 6b 2d 73 74 61 72 74 3a 31 72 65 6d 3b 70 61 64 64 69 6e 67 2d 62 6c 6f 63 6b 2d 65 6e 64 3a 31 72 65 6d 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 73 69 74 65 2d 68 65 61 64 65 72 20 2e 73 69 74 65 2d 74 69 74 6c 65 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 2e 35 72 65 6d 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 32 7d 2e 73 69 74 65 2d 68 65 61 64 65 72 20 2e 73 69 74 65 2d 62 72 61 6e 64 69 6e 67 Data Ascii: @charset "UTF-8";.site-header{display:flex;flex-wrap:wrap;justify-content:space-between;padding-block-start:1rem;padding-block-end:1rem;position:relative}.site-header .site-title{font-size:2.5rem;font-weight:500;line-height:1.2}.site-header .site-branding

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://mrohailkhan.com/energyaustralia/auth/auhs1/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 415

Chrome Cache Entry: 416

Chrome Cache Entry: 417

Chrome Cache Entry: 418

Chrome Cache Entry: 419

Chrome Cache Entry: 420

Chrome Cache Entry: 421

Chrome Cache Entry: 422

Chrome Cache Entry: 423

Chrome Cache Entry: 424

Chrome Cache Entry: 425

Chrome Cache Entry: 426

Chrome Cache Entry: 427

Chrome Cache Entry: 428

Chrome Cache Entry: 429

Chrome Cache Entry: 430

Chrome Cache Entry: 431

Chrome Cache Entry: 432

Chrome Cache Entry: 433

Chrome Cache Entry: 434

Chrome Cache Entry: 435

Chrome Cache Entry: 436

Chrome Cache Entry: 437

Chrome Cache Entry: 438

Chrome Cache Entry: 439

Chrome Cache Entry: 440

Chrome Cache Entry: 441

Chrome Cache Entry: 442

Windows Analysis Report
https://mrohailkhan.com/energyaustralia/auth/auhs1/

Timestamp	Bytes transferred	Direction	Data
2025-01-13 05:20:23 UTC	623	OUT	GET /wp-content/plugins/elementor/assets/css/frontend.min.css?ver=3.26.3 HTTP/1.1 Host: mrohailkhan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mrohailkhan.com/energyaustralia/auth/auhs1/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 05:20:23 UTC	296	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 05:20:48 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 30 Dec 2024 04:18:12 GMT ETag: "cfe6-62a7519c2c900" Accept-Ranges: bytes Content-Length: 53222 Vary: Accept-Encoding,User-Agent Content-Type: text/css
2025-01-13 05:20:23 UTC	7896	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 20 2d 20 76 33 2e 32 36 2e 30 20 2d 20 32 32 2d 31 32 2d 32 30 32 34 20 2a 2f 0a 2e 65 6c 65 6d 65 6e 74 6f 72 2d 68 69 64 64 65 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 76 69 73 69 62 69 6c 69 74 79 2d 68 69 64 64 65 6e 7b 76 69 73 69 62 69 6c 69 74 79 3a 68 69 64 64 65 6e 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 63 72 65 65 6e 2d 6f 6e 6c 79 2c 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 2c 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 74 65 78 74 20 73 70 61 6e 2c 2e 75 69 2d 68 65 6c 70 65 72 2d 68 69 64 64 65 6e 2d 61 63 63 65 73 73 69 62 6c 65 7b 68 65 69 67 68 74 3a 31 70 78 3b 6d 61 72 67 69 6e 3a 2d 31 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 70 Data Ascii: /! elementor - v3.26.0 - 22-12-2024 /.elementor-hidden{display:none}.elementor-visibility-hidden{visibility:hidden}.elementor-screen-only,.screen-reader-text,.screen-reader-text span,.ui-helper-hidden-accessible{height:1px;margin:-1px;overflow:hidden;p
2025-01-13 05:20:23 UTC	8000	IN	Data Raw: 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 30 32 34 70 78 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 66 6c 65 78 2d 77 72 61 70 3a 77 72 61 70 7d 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 2d 62 6f 78 65 64 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 78 2d 77 69 64 74 68 3a 31 31 34 30 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 63 74 69 6f 6e 2d 73 74 72 65 74 63 68 65 64 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 Data Ascii: osition:relative}@media (max-width:1024px){.elementor-section .elementor-container{flex-wrap:wrap}}.elementor-section.elementor-section-boxed>.elementor-container{max-width:1140px}.elementor-section.elementor-section-stretched{position:relative;width:100%
2025-01-13 05:20:23 UTC	8000	IN	Data Raw: 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 39 29 7b 6f 72 64 65 72 3a 32 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 3a 6e 74 68 2d 63 68 69 6c 64 28 31 30 29 7b 6f 72 64 65 72 3a 31 7d 7d 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 2d 31 29 20 61 6e 64 20 28 6d 61 78 2d 77 69 64 74 68 3a 2d 31 29 7b 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 63 6f 6e 74 61 69 6e 65 72 3e 3a 66 69 72 73 74 2d 63 68 69 6c 64 7b 6f 72 64 65 72 3a 31 30 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 72 65 76 65 72 73 65 2d 6c 61 70 74 6f 70 3e 2e 65 6c 65 Data Ascii: >.elementor-container>:nth-child(9){order:2}.elementor-reverse-laptop>.elementor-container>:nth-child(10){order:1}}@media (min-width:-1) and (max-width:-1){.elementor-reverse-laptop>.elementor-container>:first-child{order:10}.elementor-reverse-laptop>.ele
2025-01-13 05:20:23 UTC	8000	IN	Data Raw: 77 69 64 65 73 63 72 65 65 6e 2d 37 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 37 2c 31 66 72 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 77 69 64 65 73 63 72 65 65 6e 2d 38 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 38 2c 31 66 72 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 77 69 64 65 73 63 72 65 65 6e 2d 39 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 7b 67 72 69 64 2d 74 65 6d 70 6c 61 74 65 2d 63 6f 6c 75 6d 6e 73 3a 72 65 70 65 61 74 28 39 2c 31 66 72 29 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 67 72 69 64 2d 77 69 64 65 73 63 72 65 65 6e 2d 31 Data Ascii: widescreen-7 .elementor-grid{grid-template-columns:repeat(7,1fr)}.elementor-grid-widescreen-8 .elementor-grid{grid-template-columns:repeat(8,1fr)}.elementor-grid-widescreen-9 .elementor-grid{grid-template-columns:repeat(9,1fr)}.elementor-grid-widescreen-1
2025-01-13 05:20:23 UTC	8000	IN	Data Raw: 67 2d 72 69 67 68 74 2c 31 30 70 78 29 3b 2d 2d 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 76 61 72 28 2d 2d 63 6f 6e 74 61 69 6e 65 72 2d 64 65 66 61 75 6c 74 2d 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 2c 31 30 70 78 29 3b 2d 2d 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 63 6f 6e 74 61 69 6e 65 72 2d 64 65 66 61 75 6c 74 2d 70 61 64 64 69 6e 67 2d 6c 65 66 74 2c 31 30 70 78 29 3b 2d 2d 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 2d 2d 7a 2d 69 6e 64 65 78 3a 72 65 76 65 72 74 3b 2d 2d 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 2d 2d 67 61 70 3a 76 61 72 28 2d 2d 77 69 64 67 65 74 73 2d 73 70 61 63 69 6e 67 2c 32 30 70 78 29 3b 2d 2d 72 6f 77 2d 67 61 70 3a 76 61 72 28 2d 2d 77 69 64 67 65 74 73 2d 73 70 61 63 69 6e 67 Data Ascii: g-right,10px);--padding-bottom:var(--container-default-padding-bottom,10px);--padding-left:var(--container-default-padding-left,10px);--position:relative;--z-index:revert;--overflow:visible;--gap:var(--widgets-spacing,20px);--row-gap:var(--widgets-spacing
2025-01-13 05:20:23 UTC	8000	IN	Data Raw: 6f 6e 74 2d 66 61 6d 69 6c 79 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 69 6e 68 65 72 69 74 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 6c 65 74 74 65 72 2d 73 70 61 63 69 6e 67 3a 69 6e 68 65 72 69 74 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 69 6e 68 65 72 69 74 3b 70 61 64 64 69 6e 67 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 32 30 70 78 3b 74 65 78 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 69 6e 68 65 72 69 74 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 69 65 6c 64 2d 67 72 6f 75 70 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 65 6c 65 63 74 2d 77 72 61 70 70 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 65 39 32 61 22 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 65 69 63 6f 6e Data Ascii: ont-family:inherit;font-size:inherit;font-style:inherit;font-weight:inherit;letter-spacing:inherit;line-height:inherit;padding-inline-end:20px;text-transform:inherit}.elementor-field-group .elementor-select-wrapper:before{content:"\e92a";font-family:eicon
2025-01-13 05:20:23 UTC	5326	IN	Data Raw: 6e 74 6f 72 2d 73 69 7a 65 2d 73 6d 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 30 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 6f 72 6d 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 69 7a 65 2d 6d 64 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 34 37 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 6f 72 6d 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 69 7a 65 2d 6c 67 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 35 39 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 66 6f 72 6d 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 62 75 74 74 6f 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 73 69 7a 65 2d 78 6c 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 37 32 70 78 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 65 6c 65 6d 65 6e 74 20 2e 65 6c Data Ascii: ntor-size-sm{min-height:40px}.elementor-form .elementor-button.elementor-size-md{min-height:47px}.elementor-form .elementor-button.elementor-size-lg{min-height:59px}.elementor-form .elementor-button.elementor-size-xl{min-height:72px}.elementor-element .el

Timestamp	Bytes transferred	Direction	Data
2025-01-13 05:20:24 UTC	703	OUT	GET /wp-content/plugins/Elementor%20Pro%20v3.26.2%20-%20The%20Most%20Advanced%20Website%20Builder%20Plugin/assets/css/widget-nav-menu.min.css?ver=3.26.2 HTTP/1.1 Host: mrohailkhan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mrohailkhan.com/energyaustralia/auth/auhs1/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 05:20:24 UTC	296	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 05:20:49 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 30 Dec 2024 04:19:31 GMT ETag: "68eb-62a751e783ac0" Accept-Ranges: bytes Content-Length: 26859 Vary: Accept-Encoding,User-Agent Content-Type: text/css
2025-01-13 05:20:24 UTC	7896	IN	Data Raw: 2f 2a 21 20 65 6c 65 6d 65 6e 74 6f 72 2d 70 72 6f 20 2d 20 76 33 2e 32 36 2e 30 20 2d 20 32 32 2d 31 32 2d 32 30 32 34 20 2a 2f 0a 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 73 69 74 65 2d 6d 61 69 6e 20 2e 6d 65 6e 75 2d 6e 61 76 69 67 61 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 3a 61 66 74 65 72 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 3a 62 65 66 6f 72 65 7b 64 69 73 70 6c 61 79 3a 62 6c 6f 63 6b 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 33 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 35 38 2c 2e 33 2c Data Ascii: /! elementor-pro - v3.26.0 - 22-12-2024 /@charset "UTF-8";.site-main .menu-navigation-container{overflow:visible}.elementor-item:after,.elementor-item:before{display:block;position:absolute;transition:.3s;transition-timing-function:cubic-bezier(.58,.3,
2025-01-13 05:20:24 UTC	8000	IN	Data Raw: 65 66 6f 72 65 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 66 72 61 6d 65 64 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 72 61 77 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 3a 68 6f 76 65 72 3a 62 65 66 6f 72 65 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 30 32 73 2c 68 65 69 67 68 74 20 2e 31 73 2c 77 69 64 74 68 20 2e 31 73 20 2e 31 73 7d 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 66 72 61 6d 65 64 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 72 61 77 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 2d 61 63 74 69 76 65 3a 61 66 74 65 72 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 66 72 61 6d 65 64 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 72 61 77 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 69 74 65 6d 2e 68 69 67 68 6c 69 67 68 74 65 64 3a 61 66 74 Data Ascii: efore,.e--pointer-framed.e--animation-draw .elementor-item:hover:before{transition:opacity .02s,height .1s,width .1s .1s}.e--pointer-framed.e--animation-draw .elementor-item-active:after,.e--pointer-framed.e--animation-draw .elementor-item.highlighted:aft
2025-01-13 05:20:24 UTC	8000	IN	Data Raw: 74 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 6f 6e 65 3a 61 66 74 65 72 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 74 65 78 74 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 6f 6e 65 3a 62 65 66 6f 72 65 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 74 65 78 74 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 6f 6e 65 3a 66 6f 63 75 73 2c 2e 65 2d 2d 70 6f 69 6e 74 65 72 2d 74 65 78 74 2e 65 2d 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 6f 6e 65 3a 68 6f 76 65 72 7b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 2d 2d 6d 61 69 6e 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 20 61 7b 74 72 61 6e 73 69 74 69 6f 6e 3a 2e 34 73 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 Data Ascii: t.e--animation-none:after,.e--pointer-text.e--animation-none:before,.e--pointer-text.e--animation-none:focus,.e--pointer-text.e--animation-none:hover{transition-duration:0s}.elementor-nav-menu--main .elementor-nav-menu a{transition:.4s}.elementor-nav-menu
2025-01-13 05:20:24 UTC	2963	IN	Data Raw: 65 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6d 65 6e 75 2d 74 6f 67 67 6c 65 2c 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 2d 2d 64 72 6f 70 64 6f 77 6e 2d 6e 6f 6e 65 20 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 2d 2d 64 72 6f 70 64 6f 77 6e 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 2d 2d 64 72 6f 70 64 6f 77 6e 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6e 61 76 2d 6d 65 6e 75 5f 5f 63 6f 6e 74 61 69 6e 65 72 7b 6d 61 72 67 69 6e 2d 74 6f 70 3a 31 30 70 78 3b 6f 76 65 72 66 6c 6f 77 2d 78 3a 68 69 64 64 65 6e 3b 6f 76 65 72 66 6c 6f 77 2d 79 3a 61 75 74 6f 3b 74 72 61 6e 73 66 6f 72 6d 2d 6f 72 69 67 69 6e 3a 74 6f 70 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6d 61 78 2d 68 65 69 67 68 74 Data Ascii: e .elementor-menu-toggle,.elementor-nav-menu--dropdown-none .elementor-nav-menu--dropdown{display:none}.elementor-nav-menu--dropdown.elementor-nav-menu__container{margin-top:10px;overflow-x:hidden;overflow-y:auto;transform-origin:top;transition:max-height

Timestamp	Bytes transferred	Direction	Data
2025-01-13 05:20:25 UTC	614	OUT	GET /wp-content/uploads/elementor/css/post-6.css?ver=1736349654 HTTP/1.1 Host: mrohailkhan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://mrohailkhan.com/energyaustralia/auth/auhs1/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 05:20:25 UTC	294	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 05:20:50 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Jan 2025 15:20:54 GMT ETag: "4c9-62b3368552180" Accept-Ranges: bytes Content-Length: 1225 Vary: Accept-Encoding,User-Agent Content-Type: text/css
2025-01-13 05:20:25 UTC	1225	IN	Data Raw: 2e 65 6c 65 6d 65 6e 74 6f 72 2d 6b 69 74 2d 36 7b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 70 72 69 6d 61 72 79 3a 23 36 45 43 31 45 34 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 73 65 63 6f 6e 64 61 72 79 3a 23 35 34 35 39 35 46 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 74 65 78 74 3a 23 37 41 37 41 37 41 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 63 6f 6c 6f 72 2d 61 63 63 65 6e 74 3a 23 36 31 43 45 37 30 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 52 6f 62 6f 74 6f 22 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d 74 79 70 6f 67 72 61 70 68 79 2d 70 72 69 6d 61 72 79 2d 66 6f 6e 74 2d 77 65 69 67 68 74 3a 36 30 30 3b 2d 2d 65 2d 67 6c 6f 62 61 6c 2d Data Ascii: .elementor-kit-6{--e-global-color-primary:#6EC1E4;--e-global-color-secondary:#54595F;--e-global-color-text:#7A7A7A;--e-global-color-accent:#61CE70;--e-global-typography-primary-font-family:"Roboto";--e-global-typography-primary-font-weight:600;--e-global-

Timestamp	Bytes transferred	Direction	Data
2025-01-13 05:20:26 UTC	587	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.7.1 HTTP/1.1 Host: mrohailkhan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mrohailkhan.com/energyaustralia/auth/auhs1/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 05:20:26 UTC	311	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 05:20:51 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 28 Aug 2023 17:44:24 GMT ETag: "15601-603ff3eb72e00" Accept-Ranges: bytes Content-Length: 87553 Vary: Accept-Encoding,User-Agent Content-Type: application/javascript
2025-01-13 05:20:26 UTC	7881	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-01-13 05:20:26 UTC	8000	IN	Data Raw: 6f 64 65 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 66 65 28 65 2c 22 69 6e 70 75 74 22 29 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 7a 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 Data Ascii: ode&&t.parentNode.removeChild(t),t=null}}function B(t){return function(e){return fe(e,"input")&&e.type===t}}function _(t){return function(e){return(fe(e,"input")\|\|fe(e,"button"))&&e.type===t}}function z(t){return function(e){return"form"in e?e.parentNode&
2025-01-13 05:20:26 UTC	8000	IN	Data Raw: 6f 64 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 21 30 3d 3d 3d 65 2e 73 65 6c 65 63 74 65 64 7d 2c 65 6d 70 74 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 62 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e Data Ascii: ode&&e.parentNode.selectedIndex,!0===e.selected},empty:function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!b.pseudos.empty(e)},header:function(e){return q.test(e.nodeName)},input:function(e){return
2025-01-13 05:20:26 UTC	8000	IN	Data Raw: 6e 75 6c 6c 3d 3d 65 3f 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 3a 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 2e 66 69 6c 74 65 72 28 65 29 29 7d 7d 29 2c 63 65 2e 65 61 63 68 28 7b 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 74 26 26 31 31 21 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 3f 74 3a 6e 75 6c 6c 7d 2c 70 61 72 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 70 61 72 65 6e 74 4e 6f 64 65 22 29 7d 2c 70 61 72 65 6e 74 73 55 6e 74 69 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 70 61 72 65 6e 74 4e 6f 64 65 22 2c 6e 29 7d 2c 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b Data Ascii: null==e?this.prevObject:this.prevObject.filter(e))}}),ce.each({parent:function(e){var t=e.parentNode;return t&&11!==t.nodeType?t:null},parents:function(e){return d(e,"parentNode")},parentsUntil:function(e,t,n){return d(e,"parentNode",n)},next:function(e){
2025-01-13 05:20:26 UTC	8000	IN	Data Raw: 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 2e 73 65 74 28 74 68 69 73 2c 6e 2c 65 29 7d 29 7d 2c 6e 75 6c 6c 2c 65 2c 31 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6e 75 6c 6c 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 7a 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 65 29 7d 29 7d 7d 29 2c 63 65 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 65 29 72 65 74 75 72 6e 20 74 3d 28 74 7c 7c 22 66 78 22 29 2b 22 71 75 65 75 65 22 2c 72 3d 5f 2e 67 65 74 28 65 2c 74 29 2c 6e 26 26 28 21 72 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 72 3d 5f 2e 61 Data Ascii: h(function(){z.set(this,n,e)})},null,e,1<arguments.length,null,!0)},removeData:function(e){return this.each(function(){z.remove(this,e)})}}),ce.extend({queue:function(e,t,n){var r;if(e)return t=(t\|\|"fx")+"queue",r=_.get(e,t),n&&(!r\|\|Array.isArray(n)?r=_.a
2025-01-13 05:20:26 UTC	8000	IN	Data Raw: 74 54 61 72 67 65 74 3d 69 2e 65 6c 65 6d 2c 6e 3d 30 3b 77 68 69 6c 65 28 28 6f 3d 69 2e 68 61 6e 64 6c 65 72 73 5b 6e 2b 2b 5d 29 26 26 21 75 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 29 75 2e 72 6e 61 6d 65 73 70 61 63 65 26 26 21 31 21 3d 3d 6f 2e 6e 61 6d 65 73 70 61 63 65 26 26 21 75 2e 72 6e 61 6d 65 73 70 61 63 65 2e 74 65 73 74 28 6f 2e 6e 61 6d 65 73 70 61 63 65 29 7c 7c 28 75 2e 68 61 6e 64 6c 65 4f 62 6a 3d 6f 2c 75 2e 64 61 74 61 3d 6f 2e 64 61 74 61 2c 76 6f 69 64 20 30 21 3d 3d 28 72 3d 28 28 63 65 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 5b 6f 2e 6f 72 69 67 54 79 70 65 5d 7c 7c 7b 7d 29 2e 68 61 6e 64 6c 65 7c 7c 6f 2e 68 61 6e 64 6c 65 72 29 2e 61 70 70 6c 79 28 69 2e 65 6c 65 6d 2c Data Ascii: tTarget=i.elem,n=0;while((o=i.handlers[n++])&&!u.isImmediatePropagationStopped())u.rnamespace&&!1!==o.namespace&&!u.rnamespace.test(o.namespace)\|\|(u.handleObj=o,u.data=o.data,void 0!==(r=((ce.event.special[o.origType]\|\|{}).handle\|\|o.handler).apply(i.elem,
2025-01-13 05:20:26 UTC	8000	IN	Data Raw: 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 74 3d 52 65 28 74 68 69 73 2c 65 29 3b 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 7d 29 7d 2c 62 65 66 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 68 69 73 29 7d 29 7d 2c 61 66 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b Data Ascii: ,function(e){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var t=Re(this,e);t.insertBefore(e,t.firstChild)}})},before:function(){return $e(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this)})},after:function(){
2025-01-13 05:20:26 UTC	8000	IN	Data Raw: 73 4e 75 6d 62 65 72 5b 6e 5d 3f 22 22 3a 22 70 78 22 29 7d 2c 63 75 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 67 65 74 3f 65 2e 67 65 74 28 74 68 69 73 29 3a 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 2e 5f 64 65 66 61 75 6c 74 2e 67 65 74 28 74 68 69 73 29 7d 2c 72 75 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 61 74 2e 70 72 6f 70 48 6f 6f 6b 73 5b 74 68 69 73 2e 70 72 6f 70 5d 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 72 61 74 69 6f 6e 3f 74 68 69 73 2e 70 6f 73 3d 74 3d 63 65 2e 65 61 73 69 6e 67 5b 74 68 69 73 2e 65 61 73 69 6e 67 5d 28 65 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 64 75 Data Ascii: sNumber[n]?"":"px")},cur:function(){var e=at.propHooks[this.prop];return e&&e.get?e.get(this):at.propHooks._default.get(this)},run:function(e){var t,n=at.propHooks[this.prop];return this.options.duration?this.pos=t=ce.easing[this.easing](e,this.options.du
2025-01-13 05:20:26 UTC	8000	IN	Data Raw: 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 63 65 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 63 65 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 63 65 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 6d 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 63 65 2e 72 65 6d 6f 76 65 41 74 74 72 28 65 2c 74 29 3a 69 26 26 22 73 65 74 22 69 6e 20 69 26 26 76 6f 69 64 20 30 21 3d 3d 28 72 3d 69 2e 73 65 74 28 65 2c 6e 2c 74 29 29 3f 72 3a 28 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 74 2c 6e 2b 22 22 29 2c 6e 29 3a 69 26 26 22 67 65 74 22 69 6e 20 69 26 26 6e 75 6c 6c 21 3d 3d 28 72 3d 69 2e 67 65 74 28 65 2c 74 29 29 3f 72 3a 6e 75 Data Ascii: ,n):(1===o&&ce.isXMLDoc(e)\|\|(i=ce.attrHooks[t.toLowerCase()]\|\|(ce.expr.match.bool.test(t)?mt:void 0)),void 0!==n?null===n?void ce.removeAttr(e,t):i&&"set"in i&&void 0!==(r=i.set(e,n,t))?r:(e.setAttribute(t,n+""),n):i&&"get"in i&&null!==(r=i.get(e,t))?r:nu
2025-01-13 05:20:26 UTC	8000	IN	Data Raw: 65 64 7c 7c 21 77 65 2e 74 65 73 74 28 65 29 29 7d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 63 65 28 74 68 69 73 29 2e 76 61 6c 28 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 6e 3f 6e 75 6c 6c 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 63 65 2e 6d 61 70 28 6e 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 7b 6e 61 6d 65 3a 74 2e 6e 61 6d 65 2c 76 61 6c 75 65 3a 65 2e 72 65 70 6c 61 63 65 28 4c 74 2c 22 5c 72 5c 6e 22 29 7d 7d 29 3a 7b 6e 61 6d 65 3a 74 2e 6e 61 6d 65 2c 76 61 6c 75 65 3a 6e 2e 72 65 70 6c 61 63 65 28 4c 74 2c 22 5c 72 5c 6e 22 29 7d 7d 29 2e 67 65 74 28 29 7d 7d 29 3b 76 61 72 20 4d 74 3d 2f 25 32 30 2f 67 2c 52 74 3d 2f 23 2e 2a 24 2f 2c 49 74 3d 2f 28 5b 3f 26 5d 29 5f 3d 5b 5e Data Ascii: ed\|\|!we.test(e))}).map(function(e,t){var n=ce(this).val();return null==n?null:Array.isArray(n)?ce.map(n,function(e){return{name:t.name,value:e.replace(Lt,"\r\n")}}):{name:t.name,value:n.replace(Lt,"\r\n")}}).get()}});var Mt=/%20/g,Rt=/#.*$/,It=/([?&])_=[^

Timestamp	Bytes transferred	Direction	Data
2025-01-13 05:20:26 UTC	595	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.4.1 HTTP/1.1 Host: mrohailkhan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mrohailkhan.com/energyaustralia/auth/auhs1/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 05:20:26 UTC	310	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 05:20:51 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Fri, 09 Jun 2023 06:19:24 GMT ETag: "3509-5fdac59a8f300" Accept-Ranges: bytes Content-Length: 13577 Vary: Accept-Encoding,User-Agent Content-Type: application/javascript
2025-01-13 05:20:26 UTC	7882	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.4.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r
2025-01-13 05:20:26 UTC	5695	IN	Data Raw: 72 65 63 61 74 65 64 20 66 6f 72 20 6a 51 75 65 72 79 2e 66 6e 2e 63 73 73 28 20 22 27 2b 65 2b 27 22 2c 20 76 61 6c 75 65 20 29 27 29 29 2c 51 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 22 63 73 73 2d 6e 75 6d 62 65 72 22 29 3b 76 61 72 20 53 2c 50 2c 6b 2c 48 2c 45 3d 73 2e 64 61 74 61 3b 69 28 73 2c 22 64 61 74 61 22 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 76 61 72 20 6e 2c 6f 2c 61 3b 69 66 28 74 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 26 26 32 3d 3d 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7b 66 6f 72 28 61 20 69 6e 20 6e 3d 73 2e 68 61 73 44 61 74 61 28 65 29 26 26 45 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 2c 6f 3d 7b 7d 2c 74 29 61 21 3d 3d 78 28 61 29 3f 28 75 28 22 64 61 Data Ascii: recated for jQuery.fn.css( "'+e+'", value )')),Q.apply(this,arguments))},"css-number");var S,P,k,H,E=s.data;i(s,"data",function(e,t,r){var n,o,a;if(t&&"object"==typeof t&&2===arguments.length){for(a in n=s.hasData(e)&&E.call(this,e),o={},t)a!==x(a)?(u("da

Timestamp	Bytes transferred	Direction	Data
2025-01-13 05:20:26 UTC	660	OUT	GET /wp-content/uploads/2024/12/cropped-Untitled-design-1-1.png HTTP/1.1 Host: mrohailkhan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://mrohailkhan.com/energyaustralia/auth/auhs1/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 05:20:26 UTC	263	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 05:20:52 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Wed, 08 Jan 2025 15:21:33 GMT ETag: "608a-62b336aa83940" Accept-Ranges: bytes Content-Length: 24714 Content-Type: image/png
2025-01-13 05:20:26 UTC	7929	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 ff 00 00 00 92 08 06 00 00 00 4b ec c3 8e 00 00 60 51 49 44 41 54 78 da ed 9d 75 98 55 55 db c6 d7 3e e7 4c 32 74 77 a7 08 76 8b 89 8a dd a0 20 65 bc 2a 62 61 77 60 81 12 2a 06 65 63 8b 82 80 94 18 88 20 d2 21 39 34 93 a7 77 d7 ef fb 63 8f a3 7c 82 8a d4 9c 99 7d 5f df 73 7d ef fb 72 e6 ec b3 d7 da 7b dd 6b 3d 71 3f 92 10 02 e1 c3 87 0f 1f 3e 7c f8 a8 30 08 f8 43 e0 c3 87 0f 1f 3e 7c f8 e4 ef c3 87 0f 1f 3e 7c f8 f0 c9 df 87 0f 1f 3e 7c f8 f0 e1 93 bf 0f 1f 3e 7c f8 f0 e1 c3 27 7f 1f 3e 7c f8 f0 e1 c3 87 4f fe 3e 7c f8 f0 e1 c3 87 0f 9f fc 7d f8 f0 e1 c3 87 0f 1f 3e f9 fb f0 e1 c3 87 0f 1f 3e 7c f2 f7 e1 c3 87 0f 1f 3e 7c f8 e4 ef c3 87 0f 1f 3e 7c f8 f0 c9 df 87 0f 1f 3e 7c f8 f0 e1 93 bf 0f 1f 3e Data Ascii: PNGIHDRK`QIDATxuUU>L2twv ebaw`ec !94wc\|}_s}r{k=q?>\|0C>\|>\|>\|>\|'>\|O>\|}>>\|>\|>\|>\|>
2025-01-13 05:20:26 UTC	8000	IN	Data Raw: 0f dd 6f 44 58 56 ed aa ab 7b e0 d8 9e 6e 8a 66 d9 f4 ed 77 fd 3e 93 b2 14 08 70 de 05 17 b0 69 f3 56 74 c3 42 37 1c 8a 8b 23 dc 7c db c0 92 ce aa 52 b9 af 7a f1 c9 ff 5f d8 a9 a7 9f e1 b5 6a d5 54 b6 ed d8 4e f3 14 94 e8 dd 5b 1b 3d 76 0c 86 e9 62 9a 9e 0b ec ef dd 5f de c2 b4 ff 34 c2 25 06 de 79 37 aa 66 78 fd 10 4c 9b 45 8b 96 94 88 25 1d ba 9d f8 69 67 9c 81 e9 82 ac 79 ed 8d 27 4e fe 3a 25 33 c5 9b 36 6d 8a a6 9b 28 86 17 ff ee de e3 da f2 e7 b9 4a 4b e3 ed 77 de 45 56 b4 d2 8e 94 83 9f 1b 42 20 e5 e2 e1 12 52 20 40 30 14 e4 cb c9 53 d1 2c 1b 55 33 b0 1d b8 ef fe 07 cb fd c9 34 10 08 b0 76 dd 06 4c 0b 74 db 61 cb 8e 9d 64 ed 63 7e 55 f5 1a 35 99 34 79 92 97 eb 62 e8 98 96 c3 a8 51 af 51 bd 7a 0d ef 7d 96 4a d6 33 c9 8f f3 57 60 f2 97 38 e5 94 2e 14 Data Ascii: oDXV{nfw>piVtB7#\|Rz_jTN[=vb_4%y7fxLE%igy'N:%36m(JKwEVB R @0S,U34vLtadc~U54ybQQz}J3W`8.
2025-01-13 05:20:26 UTC	8000	IN	Data Raw: e1 48 02 59 31 88 c5 93 dc 36 70 20 c1 50 f0 8f 4d 8a 14 40 0a 04 ff f6 f4 de a5 cb 69 c4 93 09 92 b2 ca 23 8f 3e 4e 30 18 e2 a2 4b 2e 61 c9 f2 65 14 14 15 a2 a8 3a 2e 60 d9 2e f9 f9 85 a4 a7 67 f8 04 ee 93 ff de 59 d7 73 ba 52 54 1c 41 d7 41 36 bc 58 9b ac 1b a8 a6 c9 2d b7 fd bb 98 d4 23 8f 3e 81 a1 83 6c 38 e8 0e a5 4d 7d 4c 0b 7e 59 b8 b8 44 be 35 35 c6 e3 e1 47 1f 29 5d 90 e2 8a 4e d3 14 69 e8 71 ce d9 5d f9 f4 8b 49 ac df b4 b5 b4 35 b2 e9 52 22 a1 ec 95 6e 6a 36 28 96 c5 b0 97 47 d2 f5 dc 73 08 85 d2 77 cd 9a 0e 04 0f d9 29 ff ff 5b ef 3e bd 71 5c 17 dd b0 58 bf 69 2b 87 1d 7e c4 5f 3e d3 bd c7 35 25 79 19 36 43 86 0e e7 c2 0b 2e 45 37 2c 92 9a ea 11 8a 09 eb 73 b7 d1 7c 37 73 38 e3 db ef 50 0c 1b 59 d1 a8 b5 07 b5 c1 e1 23 86 11 89 45 51 4d 87 a5 Data Ascii: HY16p PM@i#>N0K.ae:.`.gYsRTAA6X-#>l8M}L~YD55G)]Niq]I5R"nj6(Gsw)[>q\Xi+~_>5%y6C.E7,s\|7s8PY#EQM
2025-01-13 05:20:26 UTC	785	IN	Data Raw: 0d 1a 51 18 89 a2 1a 2e 8a ee 30 6b ce 77 04 43 be 0e be 6f e5 64 ed f5 f7 3e 3e 0e 25 6c c7 15 cf 3e f3 a4 68 d9 b2 b5 18 35 ea 75 7f 40 7c 1c 34 b4 3f ec 30 91 53 ad aa 90 84 2b d2 24 21 a6 4e fa 4a 08 81 70 1c 57 20 10 a3 5e 7f 5d 54 ca ae 26 5c 4c 11 08 ba e2 b6 5b 6f 16 8e ed fa 03 e7 c3 3f f9 fb e6 db fe 31 c9 8f f3 fb 76 d0 ed e9 67 9f 41 b5 5c a2 49 99 fc 82 22 82 25 dd ed 02 81 00 57 5f dd 83 a4 66 62 3a a0 18 26 4f 0c 7e 62 b7 a2 3f be f9 96 c2 e6 0f 82 6f be f9 56 b1 4c 92 24 16 2e 5e 44 42 33 31 5d 98 3a 6d 7a 29 f1 57 a9 52 95 8d b9 9b b1 00 59 b7 58 97 bb 89 f4 cc 0c 7f dc 7c f3 13 fe 7c f8 f0 e1 23 95 51 a3 46 2d 51 a7 5e 7d 11 90 24 e1 ba ae 98 34 69 92 c8 cc cc 14 80 18 3e 62 84 68 dc b8 b1 50 55 43 08 e1 8a 81 b7 dd 26 4c dd 57 9b f4 51 Data Ascii: Q.0kwCod>>%l>h5u@\|4?0S+$!NJpW ^]T&\L[o?1vgA\I"%W_fb:&O~b?oVL$.^DB31]:mz)WRYX\|\|#QF-Q^}$4i>bhPUC&LWQ

Timestamp	Bytes transferred	Direction	Data
2025-01-13 05:20:27 UTC	706	OUT	GET /wp-content/plugins/elementor/assets/lib/font-awesome/webfonts/fa-brands-400.woff2 HTTP/1.1 Host: mrohailkhan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://mrohailkhan.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://mrohailkhan.com/wp-content/plugins/elementor/assets/lib/font-awesome/css/brands.min.css?ver=5.15.3 Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 05:20:27 UTC	273	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 05:20:52 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 30 Dec 2024 04:18:12 GMT ETag: "13ecc-62a7519c2c900" Accept-Ranges: bytes Content-Length: 81612 Vary: Accept-Encoding,User-Agent
2025-01-13 05:20:27 UTC	7919	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 01 3e cc 00 0b 00 00 00 02 4f 48 00 01 3e 78 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 60 00 be 50 0a 88 8b 14 86 96 19 0b 8e 3c 00 01 36 02 24 03 8e 38 04 20 05 88 53 07 ab 2f 5b d0 cc 91 44 cf 9f ec de 1f 5b 90 84 b2 9b 54 d5 16 60 8f a3 5e 77 c2 8d 4d 76 3b 50 48 b3 fe 65 05 dc 18 ae 3d 0e 44 90 2f 98 fd ff ff ff ff bf 23 41 c8 88 6d 1b 70 1b c0 ff bf aa 6a 6a 7d 66 55 b9 41 40 23 ee 96 07 0e a0 5c 47 55 4d 22 4b 1f e2 86 bb 09 52 65 9a 46 55 2e 41 60 cf 32 16 45 d2 9a 82 85 60 21 58 48 dd 8d fd 74 98 ca 39 66 1a 95 9a 72 52 8b 9c 55 b3 2e 49 61 a0 30 50 18 48 5f 91 4a a4 5c 13 de 6e fb 7e d1 ad bc 9b 39 df c7 18 63 55 ad bc 6e 7a c9 bd 27 7a 91 f4 9e 25 0a 7b 78 82 17 34 e7 a9 91 c7 b3 Data Ascii: wOF2>OH>xT`P<6$8 S/[D[T`^wMv;PHe=D/#Ampjj}fUA@#\GUM"KReFU.A`2E`!XHt9frRU.Ia0PH_J\n~9cUnz'z%{x4
2025-01-13 05:20:27 UTC	8000	IN	Data Raw: 94 e2 1a 5d dc 2b 0b a6 a9 88 a3 8f 25 fa f2 de c6 bf c2 66 40 d8 ba b7 90 97 d8 4c 5f f4 01 b9 c8 cc 9b f1 5a cc 0b 06 ba da 4f 74 4b 79 64 fa 3b e0 53 1b 5c 37 59 e0 3e e7 d6 fa 54 67 b6 e9 0c 11 5c 34 4e 78 4b 66 28 4b 50 8a c9 b1 20 18 18 eb 1f 05 91 56 63 cf ba 33 3e 91 15 f9 7d e8 2c 81 39 76 c6 30 8f e0 87 71 99 a5 17 70 c2 55 9a 8d 09 8e f0 42 84 14 f4 99 4b 99 e8 0b 9a 45 5b a9 e0 ae 1f 75 c8 65 9a 0d 99 14 70 82 92 c7 8a e3 22 22 ca 75 41 5e ab 27 35 5c 43 e5 32 61 bc 61 1f 2f a7 a2 35 b2 0c 09 29 18 e6 31 fd 0c ad f2 d4 12 5c 74 fa e2 27 1e 66 66 74 ab 61 73 25 47 1d 99 84 65 44 97 d3 51 9f 4d 84 10 a9 0c 0b 6a 9f ce 88 ba 3e 5e dd 1d 97 6e 93 49 b1 2c 0f 87 a3 5e 7e 66 b7 e7 0a db 19 59 9d d3 bf db 5c 9a e2 2e 22 ff 83 51 3d 48 6c 7d f6 30 b7 Data Ascii: ]+%f@L_ZOtKyd;S\7Y>Tg\4NxKf(KP Vc3>},9v0qpUBKE[uep""uA^'5\C2aa/5)1\t'fftas%GeDQMj>^nI,^~fY\."Q=Hl}0
2025-01-13 05:20:27 UTC	8000	IN	Data Raw: 3d 9d 2b f6 c2 5c ec 13 85 bd 68 f1 e9 30 30 c7 0b 5e be 4c 6d 62 45 b5 e6 fc f1 a6 98 0b 17 17 d6 32 cf 9c d9 26 91 58 74 d4 4d 6c e6 19 21 c5 7e a7 d0 32 24 4a ee 75 f8 cb c1 8b 3c fc 25 74 e0 d6 b0 2b 0b 5d 5e 05 2f 20 06 b6 3a 89 01 6b b9 70 65 a8 71 a4 77 86 2f 56 4e b0 97 ce 57 49 cd ac 36 34 cf 6a 95 eb 96 2b b6 74 c3 fa 96 7a 7a 71 a0 cc b5 37 28 4b d1 40 24 75 68 9d 17 be 76 34 7d 46 c8 a8 54 bb bf 82 be fa 8c 0a 52 34 cb fa 1d 7b 56 66 01 15 6b 6b 82 0a 88 2b 2a e6 ef 02 cd 22 ed 33 f8 e9 f1 35 b0 6e 21 f1 14 76 00 34 ab 27 39 e1 04 65 08 90 c0 21 f4 78 ee 51 f7 f2 57 49 93 0b c4 55 a1 71 0d d9 ff 19 6c a5 23 3b 90 64 e7 f3 20 75 71 e5 5a 65 44 ff 7c f6 fc f7 4d c3 44 61 5b 79 1b 5d dc cc 9d 46 cf de de 0f c8 e9 72 62 47 c6 43 73 67 e4 7c ef 3f Data Ascii: =+\h00^LmbE2&XtMl!~2$Ju<%t+]^/ :kpeqw/VNWI64j+tzzq7(K@$uhv4}FTR4{Vfkk+*"35n!v4'9e!xQWIUql#;d uqZeD\|MDa[y]FrbGCsg\|?
2025-01-13 05:20:27 UTC	8000	IN	Data Raw: 3f 26 0d d1 6b fb 4a 98 c0 0d cb 0e af d9 b5 7f 99 ba 84 d4 fd 47 44 64 40 c5 a3 27 01 d8 d8 ce dc 4e ce 82 ff f0 70 dd 29 18 f7 f3 1e 25 92 50 5a f8 8d 47 75 d3 39 35 89 74 f1 01 ae 26 9c 8e cf b8 86 e7 db 80 55 be f2 82 b1 91 ee b3 35 d6 6d 45 8b a3 e6 a9 4d 07 a7 55 a6 00 7d df 2e 47 71 8c 99 a0 dc 5f 0e 2e a8 c9 be b1 a0 0d 9d 67 1a 2c d5 ca 16 de 7e a1 57 7a 69 5b 55 59 99 0c 7f cd 12 be e2 05 2d 28 7a f7 55 08 55 4c e8 c8 a2 e5 e3 db 67 d8 30 6a f8 d1 0f 5d 70 ad d0 00 37 48 01 18 a5 20 5b 6d 3f 6c 9c 02 b9 6a 65 6c e3 47 52 80 3b 54 f1 3f e5 65 bc 02 62 35 37 e7 90 5e a9 ec 2b 89 69 ae f5 4d 73 5e ba fb 6d 04 e1 43 da ec 02 fb 3e 50 45 97 38 a0 ee 14 8a df fe b3 80 23 1c 88 4b 02 f7 c2 6b 37 c2 8b 0a d3 53 02 4b 5c 20 41 ea e4 43 1b 9b 0a 58 fe 1f Data Ascii: ?&kJGDd@'Np)%PZGu95t&U5mEMU}.Gq_.g,~Wzi[UY-(zUULg0j]p7H [m?ljelGR;T?eb57^+iMs^mC>PE8#Kk7SK\ ACX
2025-01-13 05:20:27 UTC	8000	IN	Data Raw: 00 85 dc a2 63 b5 7e c1 89 6f 1e a3 08 8f 68 20 b1 bb a1 97 b8 86 fa a2 b2 7a 34 b5 26 a7 4b 8f 8e b1 73 22 f6 d8 8b 58 ff 69 95 fd dc c3 05 19 9b d8 9c 41 2b 50 d0 e1 7d 6c 60 17 d2 6e 9a e5 81 e2 b8 74 39 57 74 7b 23 b2 ef 9f 0c 65 e0 db 23 b0 ad e5 2c d0 e0 4e f1 a1 0a da 72 c5 9b 01 9a 2c 1b 1d 92 89 ea 19 9a 0a 6e 8a 37 4c 25 66 99 e1 d6 ef ee ff e8 47 36 27 af df a5 0d 0c 6c 34 5b 20 96 06 b8 67 7b 3b 82 15 a9 34 87 80 3c f0 55 7c 4c 6e c6 08 cf ba 4a 42 e1 83 ab ad 1b 87 90 4b 2e ab d4 3f 0f 0d 20 16 50 10 44 21 bf b1 6b c8 96 5a 83 9d a3 88 28 4d 82 e3 12 19 c3 53 5c 8a 66 38 5d ff e6 74 2d 56 45 23 02 62 4d 49 a1 a3 1d 7a 60 d9 5e c4 78 7b d8 4d a6 5e 8f 1f b3 7a 45 7d b8 88 f6 33 11 be 0b e0 79 e7 29 61 ab 99 35 b7 f4 37 77 02 b6 c9 37 ed a9 d9 Data Ascii: c~oh z4&Ks"XiA+P}l`nt9Wt{#e#,Nr,n7L%fG6'l4[ g{;4<U\|LnJBK.? PD!kZ(MS\f8]t-VE#bMIz`^x{M^zE}3y)a57w7
2025-01-13 05:20:27 UTC	8000	IN	Data Raw: d2 38 11 00 f3 c9 f5 de ce 82 31 07 9a de 3d 33 dd 67 ff 8c b5 0b 2f ad d9 58 5b 94 44 cc 4c 28 49 3e b6 63 4e b4 2f 1f 5b b4 bb 76 71 f5 91 5d fb eb 8a 93 fe a2 72 1c b7 7e 3e fa 65 f5 ba ce b3 dd 53 26 84 9e 6b 3b ba 55 0b d3 28 29 e3 4f 9c d0 a0 ca bf 7c 52 20 10 76 7d a2 d1 7b b2 bc 1e fe 98 7a c8 5e ef 7f e3 f9 e7 98 69 3f 87 2a 06 7e 4c 8b 29 58 e5 b1 6a 66 6d 30 8c e3 7b b2 bd 2f fe d8 de 20 f4 f0 4f d1 1c 9a fa e3 61 96 57 0f 9d 0a 4b b9 e5 af 97 fe 6e d8 fe e3 41 96 77 ce d1 9e 78 de 5b 8f 49 b5 24 04 85 77 d8 02 4b 4a 02 9b 03 68 a4 19 4b 8a e1 2c 96 5b e0 93 a5 30 ab 74 dd 7a 82 e3 a4 60 e7 6c 95 2b 71 86 ad ff c5 99 e3 fc 75 19 2c 54 17 bf 9b bb 4f 70 0c e4 4a 58 62 82 0b a4 04 f2 c7 fb 19 e8 a8 e8 fe 60 d8 89 a2 08 8c d5 35 92 0e 1e 14 ae dd Data Ascii: 81=3g/X[DL(I>cN/[vq]r~>eS&k;U()O\|R v}{z^i?*~L)Xjfm0{/ OaWKnAwx[I$wKJhK,[0tz`l+qu,TOpJXb`5
2025-01-13 05:20:27 UTC	8000	IN	Data Raw: 13 c1 27 0c 37 ac b2 de b3 2e 61 ce f3 ca f0 74 bc 9e 35 8a ad 0f ba d4 70 f6 be ef c9 29 2d 60 83 f9 dc e0 82 f4 02 97 fe dc 3b ca 83 c9 3b 3d 08 7c 78 78 59 ba 31 bd 24 c9 1a 84 fe 00 9c b8 0f b1 0a 5c 64 18 63 75 8c 17 19 c6 e9 41 04 0d 31 60 18 4d 40 cf 1c 99 61 5a f9 ae 07 c8 6a 67 fa e1 fa cf 9d 94 b6 0e 0c bc 3c 9b cd 18 6a a0 58 8b 86 5e 62 20 05 91 e0 ea 64 c2 fd 06 56 64 3d 2f 75 94 26 b5 ce 1c e3 d0 57 8c 30 d7 2f 28 be 9f 55 97 ba d7 d5 84 4a f5 3f 08 2d 15 65 f9 67 6f c1 96 bf 33 a5 75 ea 58 56 d1 38 66 d6 d0 43 89 d7 89 eb 97 f6 f8 f9 a5 5e 16 8f 8d 80 f2 69 13 44 fc e7 a4 6b 11 d1 98 90 7a 55 26 8f c2 7d 7e 49 75 0b 06 b7 67 59 07 48 2a 5d ed 56 55 29 03 73 8c 5e 17 37 a5 a9 f3 d3 d4 c3 87 bd dd bd f4 bc 81 0a fb ae 42 7c 53 3c 6a 4c a6 2e Data Ascii: '7.at5p)-`;;=\|xxY1$\dcuA1`M@aZjg<jX^b dVd=/u&W0/(UJ?-ego3uXV8fC^iDkzU&}~IugYH*]VU)s^7B\|S<jL.
2025-01-13 05:20:27 UTC	8000	IN	Data Raw: b0 c0 8a 49 bf 63 15 84 63 ae 08 ac 56 cd cc cb ac 3a 2a fe e9 ea b0 d5 1f 25 5c 8a 0a cc 07 f3 85 3b 94 a8 74 cb d2 5d 57 56 81 2c 84 d1 cf 08 91 27 b2 9c 7c c3 67 89 0a f9 b3 48 b3 66 f3 37 de 53 ef 38 02 7a 23 83 e3 6a 9e cf 5b fa 5b a3 b9 16 36 31 b5 f2 09 43 fb ae 3e 75 f3 e4 ae 08 27 ab 54 24 9b 24 e7 4b cb a4 22 ad 15 2d fc 1c 8e 04 4b 01 58 e4 92 c2 05 00 52 e8 d1 a5 84 1c 11 1f 5b aa 16 13 11 80 f0 ab 97 d6 62 10 fa ec 62 44 30 24 13 9e ad 71 5d 04 4c 07 b4 97 92 91 89 02 c0 60 ec a2 fa 3c 31 ae 31 6e d1 6e d3 e8 7f 9d 83 bf be 96 9e a6 83 02 17 09 e0 9d d7 74 af 7d 88 56 c7 60 b4 eb b6 7c b4 b9 64 5b 5e fa b6 7b 69 77 68 69 7f 2b 6d 02 bb 96 48 d2 e2 05 a7 35 d6 80 fc 7d 30 1c 11 c0 10 13 82 22 0c a4 83 b2 0e 94 d1 fc e5 14 12 24 67 e6 d3 61 66 Data Ascii: IccV:*%\;t]WV,'\|gHf7S8z#j[[61C>u'T$$K"-KXR[bbD0$q]L`<11nnt}V`\|d[^{iwhi+mH5}0"$gaf
2025-01-13 05:20:27 UTC	8000	IN	Data Raw: d0 b8 21 06 f1 1f 45 7e 62 fb c1 98 b6 c9 fe 55 d5 46 72 5b 41 eb 58 5b 56 25 d8 b8 0a 7b 09 bb 90 cf 39 d7 71 ca e1 d4 69 87 7a 87 ba 28 65 bd b2 2e 9a 69 e0 c0 d7 4c bd dc 29 c4 93 9b 39 6c 3a 1e a7 92 a5 76 67 b0 13 f1 66 6c fb 47 c6 4e e0 6c 64 00 e8 c0 38 5d 08 e3 e3 f6 b1 8f 08 74 09 93 9a 4f 28 12 84 2c 45 a9 a9 e0 3f f1 59 38 3c f8 15 c2 ce 27 0b 0e 6a 67 c2 11 35 b1 8e 98 43 26 bf 6b 4f 59 dd d6 c0 40 f4 23 f0 ed 92 a3 80 91 d0 dc 59 5c d9 b7 a6 4a 73 e0 e8 cc 35 55 b0 53 6c 7e f0 33 8a 04 66 06 eb ef 50 85 19 cc d4 b6 a0 df 7d 4b c0 24 99 a0 0f 06 87 41 1c cb d1 7c bc b2 63 06 26 67 dd ac 1f 45 f6 76 63 7e 47 ed ec c5 ad 29 09 99 7d 6c f4 fe 3c 1c 4c 1f e6 69 75 33 cc 89 86 1f 04 90 c2 65 03 e3 93 e2 83 99 26 46 8c 35 8a 41 e1 73 cb eb b0 16 47 Data Ascii: !E~bUFr[AX[V%{9qiz(e.iL)9l:vgflGNld8]tO(,E?Y8<'jg5C&kOY@#Y\Js5USl~3fP}K$A\|c&gEvc~G)}l<Liu3e&F5AsG
2025-01-13 05:20:27 UTC	8000	IN	Data Raw: 55 33 9c c0 8f 32 c2 ed 52 4a fa d0 75 de c2 3d f3 fc df 63 6b 30 4c 95 b2 c2 a3 f8 31 ef 4a 09 0c 31 42 73 7a ee 6e 68 a8 6b 6c c4 f8 de bd da 8a d6 f5 a3 27 3f 71 30 e2 8a df 80 09 06 80 61 9b 5d f0 73 83 19 66 9b 6c 60 c8 a6 e9 33 52 56 a9 b6 df ef f5 99 fe 61 d7 fc 36 bc df d4 8b d8 65 e2 a9 4f 7d d3 02 18 1c a8 ba b6 a8 9d a1 65 39 4b 0b c9 34 1b 6a d9 b3 99 1c f5 e0 2c 7f 03 e1 3f 75 80 07 1a 82 85 3b 6b f7 3a a5 49 a6 77 dd 0a d9 3f 65 6e 5f ed e3 c9 7c 74 ae a8 4b 28 66 33 20 7c 19 fe 63 55 46 35 aa cf b8 27 fb a3 eb e6 e4 90 6e 3f f4 22 b6 b9 0b fb f3 7f 2d b9 3b 96 44 29 be 17 2f 28 6f 9d c8 cc 28 a3 27 ab fc 6e bb 2c 7f 5a bf cf 5c 5e fc ec 94 aa 8a 78 dc 46 7e 7f d2 af a7 f9 2d a3 26 e7 4d cb 88 e7 30 7f b9 b5 d0 0a fa f5 60 4a 05 af 0d bb 27 Data Ascii: U32RJu=ck0L1J1Bsznhkl'?q0a]sfl`3RVa6eO}e9K4j,?u;k:Iw?en_\|tK(f3 \|cUF5'n?"-;D)/(o('n,Z\^xF~-&M0`J'

Timestamp	Bytes transferred	Direction	Data
2025-01-13 05:20:27 UTC	700	OUT	GET /wp-content/plugins/Elementor%20Pro%20v3.26.2%20-%20The%20Most%20Advanced%20Website%20Builder%20Plugin/assets/lib/smartmenus/jquery.smartmenus.min.js?ver=1.2.1 HTTP/1.1 Host: mrohailkhan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mrohailkhan.com/energyaustralia/auth/auhs1/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 05:20:28 UTC	310	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 05:20:53 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 30 Dec 2024 04:19:31 GMT ETag: "5e2d-62a751e783ac0" Accept-Ranges: bytes Content-Length: 24109 Vary: Accept-Encoding,User-Agent Content-Type: application/javascript
2025-01-13 05:20:28 UTC	7882	IN	Data Raw: 2f 2a 21 20 53 6d 61 72 74 4d 65 6e 75 73 20 6a 51 75 65 72 79 20 50 6c 75 67 69 6e 20 2d 20 76 31 2e 32 2e 31 20 2d 20 4e 6f 76 65 6d 62 65 72 20 33 2c 20 32 30 32 32 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 77 77 2e 73 6d 61 72 74 6d 65 6e 75 73 2e 6f 72 67 2f 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 56 61 73 69 6c 20 44 69 6e 6b 6f 76 2c 20 56 61 64 69 6b 6f 6d 20 57 65 62 20 4c 74 64 2e 20 68 74 74 70 3a 2f 2f 76 61 64 69 6b 6f 6d 2e 63 6f 6d 3b 20 4c 69 63 65 6e 73 65 64 20 4d 49 54 20 2a 2f 21 66 75 6e 63 74 69 6f 6e 28 61 29 7b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 61 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 Data Ascii: /! SmartMenus jQuery Plugin - v1.2.1 - November 3, 2022 http://www.smartmenus.org/ * Copyright Vasil Dinkov, Vadikom Web Ltd. http://vadikom.com; Licensed MIT */!function(a){"function"==typeof define&&define.amd?define(["jquery"],a):"object"==typeof
2025-01-13 05:20:28 UTC	8000	IN	Data Raw: 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 67 65 74 4f 66 66 73 65 74 28 61 29 7d 2c 68 61 6e 64 6c 65 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 21 74 68 69 73 2e 64 69 73 61 62 6c 65 64 26 26 74 68 69 73 2e 69 73 43 53 53 4f 6e 28 29 7d 2c 68 61 6e 64 6c 65 49 74 65 6d 45 76 65 6e 74 73 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 68 61 6e 64 6c 65 45 76 65 6e 74 73 28 29 26 26 21 74 68 69 73 2e 69 73 4c 69 6e 6b 49 6e 4d 65 67 61 4d 65 6e 75 28 61 29 7d 2c 69 73 43 6f 6c 6c 61 70 73 69 62 6c 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 73 74 61 74 69 63 22 3d 3d 74 68 69 73 2e 24 66 69 72 73 74 53 75 62 2e 63 73 73 28 22 70 6f 73 69 74 69 6f 6e 22 29 7d 2c 69 73 43 Data Ascii: ion(a){return this.getOffset(a)},handleEvents:function(){return!this.disabled&&this.isCSSOn()},handleItemEvents:function(a){return this.handleEvents()&&!this.isLinkInMegaMenu(a)},isCollapsible:function(){return"static"==this.$firstSub.css("position")},isC
2025-01-13 05:20:28 UTC	8000	IN	Data Raw: 3a 22 61 75 74 6f 22 2c 6c 65 66 74 3a 22 30 22 2c 6d 61 72 67 69 6e 4c 65 66 74 3a 63 2c 6d 61 72 67 69 6e 54 6f 70 3a 65 2d 71 7d 29 7d 2c 6d 65 6e 75 53 63 72 6f 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 61 2e 64 61 74 61 53 4d 28 22 73 63 72 6f 6c 6c 22 29 2c 67 3d 61 2e 64 61 74 61 53 4d 28 22 73 63 72 6f 6c 6c 2d 61 72 72 6f 77 73 22 29 2c 68 3d 65 2e 75 70 3f 65 2e 75 70 45 6e 64 3a 65 2e 64 6f 77 6e 45 6e 64 3b 69 66 28 21 62 26 26 65 2e 6d 6f 6d 65 6e 74 75 6d 29 7b 69 66 28 65 2e 6d 6f 6d 65 6e 74 75 6d 2a 3d 2e 39 32 2c 64 3d 65 2e 6d 6f 6d 65 6e 74 75 6d 2c 64 3c 2e 35 29 72 65 74 75 72 6e 20 76 6f 69 64 20 74 68 69 73 2e 6d 65 6e 75 53 63 72 6f 6c 6c 53 74 6f 70 28 61 29 7d 65 6c 73 65 20 64 3d 63 7c 7c Data Ascii: :"auto",left:"0",marginLeft:c,marginTop:e-q})},menuScroll:function(a,b,c){var d,e=a.dataSM("scroll"),g=a.dataSM("scroll-arrows"),h=e.up?e.upEnd:e.downEnd;if(!b&&e.momentum){if(e.momentum*=.92,d=e.momentum,d<.5)return void this.menuScrollStop(a)}else d=c\|\|
2025-01-13 05:20:28 UTC	227	IN	Data Raw: 6e 28 61 2c 62 29 7b 61 2e 73 6c 69 64 65 55 70 28 32 30 30 2c 62 29 7d 2c 73 68 6f 77 4f 6e 43 6c 69 63 6b 3a 21 31 2c 68 69 64 65 4f 6e 43 6c 69 63 6b 3a 21 30 2c 6e 6f 4d 6f 75 73 65 4f 76 65 72 3a 21 31 2c 6b 65 65 70 49 6e 56 69 65 77 70 6f 72 74 3a 21 30 2c 6b 65 65 70 48 69 67 68 6c 69 67 68 74 65 64 3a 21 30 2c 6d 61 72 6b 43 75 72 72 65 6e 74 49 74 65 6d 3a 21 31 2c 6d 61 72 6b 43 75 72 72 65 6e 74 54 72 65 65 3a 21 30 2c 72 69 67 68 74 54 6f 4c 65 66 74 53 75 62 4d 65 6e 75 73 3a 21 31 2c 62 6f 74 74 6f 6d 54 6f 54 6f 70 53 75 62 4d 65 6e 75 73 3a 21 31 2c 63 6f 6c 6c 61 70 73 69 62 6c 65 42 65 68 61 76 69 6f 72 3a 22 64 65 66 61 75 6c 74 22 7d 2c 61 7d 29 3b 0a Data Ascii: n(a,b){a.slideUp(200,b)},showOnClick:!1,hideOnClick:!0,noMouseOver:!1,keepInViewport:!0,keepHighlighted:!0,markCurrentItem:!1,markCurrentTree:!0,rightToLeftSubMenus:!1,bottomToTopSubMenus:!1,collapsibleBehavior:"default"},a});

Timestamp	Bytes transferred	Direction	Data
2025-01-13 05:20:28 UTC	599	OUT	GET /wp-includes/js/dist/hooks.min.js?ver=4d63a3d491d11ffd8ac6 HTTP/1.1 Host: mrohailkhan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mrohailkhan.com/energyaustralia/auth/auhs1/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 05:20:28 UTC	309	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 05:20:54 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 30 Sep 2024 05:41:32 GMT ETag: "12a8-6234fa8399b00" Accept-Ranges: bytes Content-Length: 4776 Vary: Accept-Encoding,User-Agent Content-Type: application/javascript
2025-01-13 05:20:28 UTC	4776	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 74 3d 7b 64 3a 28 65 2c 6e 29 3d 3e 7b 66 6f 72 28 76 61 72 20 72 20 69 6e 20 6e 29 74 2e 6f 28 6e 2c 72 29 26 26 21 74 2e 6f 28 65 2c 72 29 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 72 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 65 74 3a 6e 5b 72 5d 7d 29 7d 2c 6f 3a 28 74 2c 65 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 74 2c 65 29 2c 72 3a 74 3d 3e 7b 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 74 6f 53 Data Ascii: /! This file is auto-generated /(()=>{"use strict";var t={d:(e,n)=>{for(var r in n)t.o(n,r)&&!t.o(e,r)&&Object.defineProperty(e,r,{enumerable:!0,get:n[r]})},o:(t,e)=>Object.prototype.hasOwnProperty.call(t,e),r:t=>{"undefined"!=typeof Symbol&&Symbol.toS

Timestamp	Bytes transferred	Direction	Data
2025-01-13 05:20:28 UTC	598	OUT	GET /wp-includes/js/dist/i18n.min.js?ver=5e580eb46a90c2b997e6 HTTP/1.1 Host: mrohailkhan.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://mrohailkhan.com/energyaustralia/auth/auhs1/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-13 05:20:28 UTC	309	IN	HTTP/1.1 200 OK Date: Mon, 13 Jan 2025 05:20:54 GMT Server: Apache/2 Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 15 Feb 2024 17:23:16 GMT ETag: "23b5-6116ee2002900" Accept-Ranges: bytes Content-Length: 9141 Vary: Accept-Encoding,User-Agent Content-Type: application/javascript
2025-01-13 05:20:28 UTC	7883	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 28 28 29 3d 3e 7b 76 61 72 20 74 3d 7b 32 30 35 38 3a 28 74 2c 65 2c 72 29 3d 3e 7b 76 61 72 20 6e 3b 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 69 3d 7b 6e 6f 74 5f 73 74 72 69 6e 67 3a 2f 5b 5e 73 5d 2f 2c 6e 6f 74 5f 62 6f 6f 6c 3a 2f 5b 5e 74 5d 2f 2c 6e 6f 74 5f 74 79 70 65 3a 2f 5b 5e 54 5d 2f 2c 6e 6f 74 5f 70 72 69 6d 69 74 69 76 65 3a 2f 5b 5e 76 5d 2f 2c 6e 75 6d 62 65 72 3a 2f 5b 64 69 65 66 67 5d 2f 2c 6e 75 6d 65 72 69 63 5f 61 72 67 3a 2f 5b 62 63 64 69 65 66 67 75 78 58 5d 2f 2c 6a 73 6f 6e 3a 2f 5b 6a 5d 2f 2c 6e 6f 74 5f 6a 73 6f 6e 3a 2f 5b 5e 6a 5d 2f 2c 74 65 78 74 3a 2f 5e 5b 5e 5c 78 32 Data Ascii: /! This file is auto-generated /(()=>{var t={2058:(t,e,r)=>{var n;!function(){"use strict";var i={not_string:/[^s]/,not_bool:/[^t]/,not_type:/[^T]/,not_primitive:/[^v]/,number:/[diefg]/,numeric_arg:/[bcdiefguxX]/,json:/[j]/,not_json:/[^j]/,text:/^[^\x2
2025-01-13 05:20:28 UTC	1258	IN	Data Raw: 5b 74 5d 2c 73 65 74 4c 6f 63 61 6c 65 44 61 74 61 3a 73 2c 61 64 64 4c 6f 63 61 6c 65 44 61 74 61 3a 28 74 2c 65 3d 22 64 65 66 61 75 6c 74 22 29 3d 3e 7b 6e 2e 64 61 74 61 5b 65 5d 3d 7b 2e 2e 2e 6e 2e 64 61 74 61 5b 65 5d 2c 2e 2e 2e 74 2c 22 22 3a 7b 2e 2e 2e 68 2c 2e 2e 2e 6e 2e 64 61 74 61 5b 65 5d 3f 2e 5b 22 22 5d 2c 2e 2e 2e 74 3f 2e 5b 22 22 5d 7d 7d 2c 64 65 6c 65 74 65 20 6e 2e 70 6c 75 72 61 6c 46 6f 72 6d 73 5b 65 5d 2c 61 28 29 7d 2c 72 65 73 65 74 4c 6f 63 61 6c 65 44 61 74 61 3a 28 74 2c 65 29 3d 3e 7b 6e 2e 64 61 74 61 3d 7b 7d 2c 6e 2e 70 6c 75 72 61 6c 46 6f 72 6d 73 3d 7b 7d 2c 73 28 74 2c 65 29 7d 2c 73 75 62 73 63 72 69 62 65 3a 74 3d 3e 28 69 2e 61 64 64 28 74 29 2c 28 29 3d 3e 69 2e 64 65 6c 65 74 65 28 74 29 29 2c 5f 5f 3a 28 74 Data Ascii: [t],setLocaleData:s,addLocaleData:(t,e="default")=>{n.data[e]={...n.data[e],...t,"":{...h,...n.data[e]?.[""],...t?.[""]}},delete n.pluralForms[e],a()},resetLocaleData:(t,e)=>{n.data={},n.pluralForms={},s(t,e)},subscribe:t=>(i.add(t),()=>i.delete(t)),__:(t