Edit tour

Windows Analysis Report
http://noxgpt.com

Overview

General Information

Sample URL:	http://noxgpt.com
Analysis ID:	1597878
Infos:

Detection

Score:	64
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Stores files to the Windows start menu directory

Suricata IDS alerts with low severity for network traffic

Classification

Process Tree

System is w10x64_ra

chrome.exe (PID: 7024 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=2016,i,10160499565074406953,9674042643696629956,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6216 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://noxgpt.com" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Suricata Signatures

ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-01-23T18:28:14.797062+0100	2022112	1	Exploit Kit Activity Detected	192.168.2.16	49727	185.247.225.10	443	TCP

Joe Sandbox Signatures

• AV Detection
• Phishing
• Networking
• System Summary
• Boot Survival

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://noxgpt.com

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://noxgpt.com/result/robloxmodmenu/js/alert-confirm.css	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu/js/alert-confirm.js	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu/img/x.png	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu/js/dynamic.js	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu/css/img/bgroblox.html	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu/img/menu.png	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/logo.jpg	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu/css/style.css	Avira URL Cloud: Label: phishing
Source: http://noxgpt.com/	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu/audio/silence.html	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu/Roblox.html	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu/gtav.html	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/img/roblox/3.png	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/img/roblox/2.png	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu/js/detect.html	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu/css/sf.html	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu/img/ip.png	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/img/roblox/1.png	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu/img/logo.png	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu/css/hn.ttf	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/local_prompts.json	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu/js/jq.js	Avira URL Cloud: Label: phishing
Source: https://noxgpt.com/result/robloxmodmenu/css/w3.css	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: https://noxgpt.com/

Joe Sandbox AI: Score: 7 Reasons: The brand 'Roblox' is well-known and its legitimate domain is 'roblox.com'., The provided URL 'noxgpt.com' does not match the legitimate domain for Roblox., The URL 'noxgpt.com' does not contain any recognizable association with the brand 'Roblox'., The domain 'noxgpt.com' appears unrelated to the brand and could be a potential phishing attempt. DOM: 1.3.pages.csv

Source: https://noxgpt.com/result/robloxmodmenu/	HTTP Parser: No favicon
Source: https://noxgpt.com/result/robloxmodmenu/	HTTP Parser: No favicon
Source: https://noxgpt.com/result/robloxmodmenu/	HTTP Parser: No favicon
Source: https://noxgpt.com/result/robloxmodmenu/	HTTP Parser: No favicon
Source: https://noxgpt.com/result/robloxmodmenu/	HTTP Parser: No favicon

Source: Network traffic

Suricata IDS: 2022112 - Severity 1 - ET EXPLOIT_KIT Possible Nuclear EK Landing Nov 17 2015 : 192.168.2.16:49727 -> 185.247.225.10:443

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.10
Source: unknown	TCP traffic detected without corresponding DNS query: 192.229.211.108
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: noxgpt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://noxgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://noxgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /b3c80fe252.js HTTP/1.1Host: kit.fontawesome.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://noxgpt.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://noxgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.jpg HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://noxgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /typewriter-effect@latest/dist/core.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://noxgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://noxgpt.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stats/matomo.js HTTP/1.1Host: elitemods.netConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://noxgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /typewriter-effect@2.21.0/dist/core.js HTTP/1.1Host: unpkg.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://noxgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.jpg HTTP/1.1Host: noxgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /typewriter-effect@2.21.0/dist/core.js HTTP/1.1Host: unpkg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /stats/matomo.js HTTP/1.1Host: elitemods.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /local_prompts.json HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept: application/json, text/javascript, /; q=0.01X-Requested-With: XMLHttpRequestsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://noxgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /local_prompts.json HTTP/1.1Host: noxgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /img/roblox/1.png HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://noxgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /img/roblox/1.png HTTP/1.1Host: noxgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /img/roblox/2.png HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://noxgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /img/roblox/2.png HTTP/1.1Host: noxgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /img/roblox/3.png HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://noxgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /img/roblox/3.png HTTP/1.1Host: noxgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentReferer: https://noxgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/ HTTP/1.1Host: noxgpt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://noxgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/js/alert-confirm.css HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://noxgpt.com/result/robloxmodmenu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/css/w3.css HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://noxgpt.com/result/robloxmodmenu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/css/style.css HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://noxgpt.com/result/robloxmodmenu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/audio/silence.html HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeReferer: https://noxgpt.com/result/robloxmodmenu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/js/jq.js HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://noxgpt.com/result/robloxmodmenu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/js/dynamic.js HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://noxgpt.com/result/robloxmodmenu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/js/alert-confirm.js HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://noxgpt.com/result/robloxmodmenu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/js/dynamic.js HTTP/1.1Host: noxgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/img/ip.png HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://noxgpt.com/result/robloxmodmenu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/img/logo.png HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://noxgpt.com/result/robloxmodmenu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/js/jq.js HTTP/1.1Host: noxgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/img/x.png HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://noxgpt.com/result/robloxmodmenu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/img/menu.png HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://noxgpt.com/result/robloxmodmenu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/js/detect.html HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://noxgpt.com/result/robloxmodmenu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/gtav.html HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://noxgpt.com/result/robloxmodmenu/Accept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/js/alert-confirm.js HTTP/1.1Host: noxgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/css/img/bgroblox.html HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://noxgpt.com/result/robloxmodmenu/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/img/ip.png HTTP/1.1Host: noxgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/img/logo.png HTTP/1.1Host: noxgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/js/detect.html HTTP/1.1Host: noxgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/Roblox.html HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Accept-Encoding: identity;q=1, ;q=0sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /*Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: audioReferer: https://noxgpt.com/result/robloxmodmenu/Accept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1Range: bytes=0-
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/css/hn.ttf HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://noxgpt.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://noxgpt.com/result/robloxmodmenu/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/css/sf.html HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://noxgpt.comsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://noxgpt.com/result/robloxmodmenu/css/style.cssAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/img/x.png HTTP/1.1Host: noxgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/img/menu.png HTTP/1.1Host: noxgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /result/robloxmodmenu/css/img/bgroblox.html HTTP/1.1Host: noxgpt.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: noxgpt.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://noxgpt.com/result/robloxmodmenu/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: noxgpt.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: noxgpt.com
Source: global traffic	DNS traffic detected: DNS query: kit.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: unpkg.com
Source: global traffic	DNS traffic detected: DNS query: elitemods.net
Source: global traffic	DNS traffic detected: DNS query: www.google.com

Source: unknown

HTTP traffic detected: POST /stats/matomo.php?action_name=NoxGPT&idsite=5&rec=1&r=831582&h=12&m=28&s=12&url=https%3A%2F%2Fnoxgpt.com%2F&_id=3e6fdbb24d88b0e9&_idn=1&send_image=0&_refts=0&pv_id=ns1EPC&pf_net=919&pf_srv=476&pf_tfr=244&pf_dm1=2266&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1Host: elitemods.netConnection: keep-aliveContent-Length: 0sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-platform: "Windows"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Content-Type: application/x-www-form-urlencoded; charset=utf-8Accept: */*Origin: https://noxgpt.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyReferer: https://noxgpt.com/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Thu, 23 Jan 2025 17:28:11 GMTContent-Length: 9Connection: closeaccess-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-tokenaccess-control-allow-methods: GET, OPTIONSaccess-control-allow-origin: *access-control-max-age: 3000Cache-Control: max-age=0, private, must-revalidatex-request-id: GB1idlTFs9isXKZonAKhCF-Cache-Status: MISSServer: cloudflareCF-RAY: 90697fb04ffa9e16-EWR
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundServer: nginxDate: Thu, 23 Jan 2025 17:29:35 GMTContent-Type: text/html; charset=iso-8859-1Content-Length: 315Connection: closeVary: Accept-EncodingStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Frame-Options: SAMEORIGINX-Content-Type-Options: nosniff

Source: chromecache_109.2.dr, chromecache_125.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_96.2.dr, chromecache_103.2.dr, chromecache_104.2.dr, chromecache_85.2.dr	String found in binary or memory: http://www.litespeedtech.com/error-page
Source: chromecache_116.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css
Source: chromecache_116.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js
Source: chromecache_105.2.dr, chromecache_106.2.dr	String found in binary or memory: https://developer.matomo.org/api-reference/tracking-javascript
Source: chromecache_105.2.dr, chromecache_106.2.dr	String found in binary or memory: https://developer.matomo.org/guides/tracking-javascript-guide#multiple-piwik-trackers
Source: chromecache_93.2.dr, chromecache_89.2.dr	String found in binary or memory: https://elitemods.net/monopoly/monopolygo/
Source: chromecache_93.2.dr, chromecache_89.2.dr	String found in binary or memory: https://elitemods.net/temucoupon/
Source: chromecache_128.2.dr	String found in binary or memory: https://fontawesome.com
Source: chromecache_128.2.dr	String found in binary or memory: https://fontawesome.com/license/free
Source: chromecache_105.2.dr, chromecache_106.2.dr	String found in binary or memory: https://github.com/matomo-org/matomo/blob/master/js/piwik.js
Source: chromecache_93.2.dr, chromecache_89.2.dr	String found in binary or memory: https://impacthelper.net/genshinimpact/
Source: chromecache_116.2.dr	String found in binary or memory: https://kit.fontawesome.com/b3c80fe252.js
Source: chromecache_99.2.dr	String found in binary or memory: https://noxgpt.info/cl/i/wo1lv7
Source: chromecache_105.2.dr, chromecache_106.2.dr	String found in binary or memory: https://piwik.org
Source: chromecache_105.2.dr, chromecache_106.2.dr	String found in binary or memory: https://piwik.org/free-software/bsd/
Source: chromecache_116.2.dr	String found in binary or memory: https://unpkg.com/typewriter-effect

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49716
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49716 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: classification engine

Classification label: mal64.phis.win@18/85@22/7

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=2016,i,10160499565074406953,9674042643696629956,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://noxgpt.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2176 --field-trial-handle=2016,i,10160499565074406953,9674042643696629956,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Google Drive.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: YouTube.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Sheets.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Gmail.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Slides.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe
Source: Docs.lnk.0.dr	LNK file: ..\..\..\..\..\..\..\..\..\Program Files\Google\Chrome\Application\chrome_proxy.exe

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	File created: C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk	Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Registry Run Keys / Startup Folder	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	1 Registry Run Keys / Startup Folder	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://noxgpt.com	100%	Avira URL Cloud	phishing

Source	Detection	Scanner	Label
https://elitemods.net/stats/matomo.js	0%	Avira URL Cloud	safe
https://noxgpt.com/result/robloxmodmenu/js/alert-confirm.css	100%	Avira URL Cloud	phishing
https://noxgpt.com/result/robloxmodmenu/js/alert-confirm.js	100%	Avira URL Cloud	phishing
https://noxgpt.com/result/robloxmodmenu/img/x.png	100%	Avira URL Cloud	phishing
https://elitemods.net/temucoupon/	0%	Avira URL Cloud	safe
https://noxgpt.com/result/robloxmodmenu/js/dynamic.js	100%	Avira URL Cloud	phishing
https://noxgpt.com/result/robloxmodmenu/css/img/bgroblox.html	100%	Avira URL Cloud	phishing
https://noxgpt.com/result/robloxmodmenu/img/menu.png	100%	Avira URL Cloud	phishing
https://noxgpt.com/logo.jpg	100%	Avira URL Cloud	phishing
https://noxgpt.com/favicon.ico	100%	Avira URL Cloud	phishing
https://noxgpt.com/result/robloxmodmenu/css/style.css	100%	Avira URL Cloud	phishing
http://noxgpt.com/	100%	Avira URL Cloud	phishing
https://noxgpt.com/result/robloxmodmenu/audio/silence.html	100%	Avira URL Cloud	phishing
https://noxgpt.com/result/robloxmodmenu/Roblox.html	100%	Avira URL Cloud	phishing
https://noxgpt.com/result/robloxmodmenu/gtav.html	100%	Avira URL Cloud	phishing
https://noxgpt.com/img/roblox/3.png	100%	Avira URL Cloud	phishing
https://impacthelper.net/genshinimpact/	0%	Avira URL Cloud	safe
https://noxgpt.com/img/roblox/2.png	100%	Avira URL Cloud	phishing
https://noxgpt.com/result/robloxmodmenu/js/detect.html	100%	Avira URL Cloud	phishing
https://noxgpt.com/result/robloxmodmenu/css/sf.html	100%	Avira URL Cloud	phishing
https://noxgpt.com/result/robloxmodmenu/img/ip.png	100%	Avira URL Cloud	phishing
https://noxgpt.com/img/roblox/1.png	100%	Avira URL Cloud	phishing
https://noxgpt.com/result/robloxmodmenu	100%	Avira URL Cloud	phishing
https://noxgpt.com/result/robloxmodmenu/img/logo.png	100%	Avira URL Cloud	phishing
https://noxgpt.com/result/robloxmodmenu/css/hn.ttf	100%	Avira URL Cloud	phishing
https://noxgpt.com/local_prompts.json	100%	Avira URL Cloud	phishing
https://elitemods.net/monopoly/monopolygo/	0%	Avira URL Cloud	safe
https://noxgpt.com/result/robloxmodmenu/js/jq.js	100%	Avira URL Cloud	phishing
https://noxgpt.com/result/robloxmodmenu/css/w3.css	100%	Avira URL Cloud	phishing
https://elitemods.net/stats/matomo.php?action_name=NoxGPT&idsite=5&rec=1&r=831582&h=12&m=28&s=12&url=https%3A%2F%2Fnoxgpt.com%2F&_id=3e6fdbb24d88b0e9&_idn=1&send_image=0&_refts=0&pv_id=ns1EPC&pf_net=919&pf_srv=476&pf_tfr=244&pf_dm1=2266&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	0%	Avira URL Cloud	safe
https://noxgpt.info/cl/i/wo1lv7	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
kit.fontawesome.com.cdn.cloudflare.net	104.18.40.68	true	false	high
noxgpt.com	185.247.225.10	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
elitemods.net	185.247.225.10	true	false	high
www.google.com	142.250.181.228	true	false	high
unpkg.com	104.17.245.203	true	false	high
kit.fontawesome.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2	false		high
https://noxgpt.com/result/robloxmodmenu/img/x.png	true	Avira URL Cloud: phishing	unknown
https://unpkg.com/typewriter-effect@2.21.0/dist/core.js	false		high
https://noxgpt.com/favicon.ico	true	Avira URL Cloud: phishing	unknown
https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css	false		high
https://noxgpt.com/result/robloxmodmenu/js/dynamic.js	true	Avira URL Cloud: phishing	unknown
https://noxgpt.com/result/robloxmodmenu/css/img/bgroblox.html	true	Avira URL Cloud: phishing	unknown
https://noxgpt.com/logo.jpg	true	Avira URL Cloud: phishing	unknown
https://elitemods.net/stats/matomo.js	false	Avira URL Cloud: safe	unknown
https://noxgpt.com/result/robloxmodmenu/js/alert-confirm.css	true	Avira URL Cloud: phishing	unknown
https://kit.fontawesome.com/b3c80fe252.js	false		high
https://noxgpt.com/result/robloxmodmenu/js/alert-confirm.js	true	Avira URL Cloud: phishing	unknown
https://noxgpt.com/result/robloxmodmenu/img/menu.png	true	Avira URL Cloud: phishing	unknown
https://noxgpt.com/	true		unknown
https://noxgpt.com/result/robloxmodmenu/css/style.css	true	Avira URL Cloud: phishing	unknown
http://noxgpt.com/	true	Avira URL Cloud: phishing	unknown
https://noxgpt.com/result/robloxmodmenu/gtav.html	true	Avira URL Cloud: phishing	unknown
https://noxgpt.com/result/robloxmodmenu/audio/silence.html	true	Avira URL Cloud: phishing	unknown
https://noxgpt.com/result/robloxmodmenu/Roblox.html	true	Avira URL Cloud: phishing	unknown
https://noxgpt.com/img/roblox/2.png	true	Avira URL Cloud: phishing	unknown
https://unpkg.com/typewriter-effect@latest/dist/core.js	false		high
https://noxgpt.com/img/roblox/3.png	true	Avira URL Cloud: phishing	unknown
https://noxgpt.com/result/robloxmodmenu/js/detect.html	true	Avira URL Cloud: phishing	unknown
https://noxgpt.com/result/robloxmodmenu/css/sf.html	true	Avira URL Cloud: phishing	unknown
https://cdnjs.cloudflare.com/ajax/libs/jquery/3.7.1/jquery.min.js	false		high
https://noxgpt.com/img/roblox/1.png	true	Avira URL Cloud: phishing	unknown
https://noxgpt.com/result/robloxmodmenu/img/ip.png	true	Avira URL Cloud: phishing	unknown
https://noxgpt.com/result/robloxmodmenu/img/logo.png	true	Avira URL Cloud: phishing	unknown
https://noxgpt.com/result/robloxmodmenu/	true		unknown
https://noxgpt.com/result/robloxmodmenu	true	Avira URL Cloud: phishing	unknown
https://noxgpt.com/result/robloxmodmenu/css/hn.ttf	true	Avira URL Cloud: phishing	unknown
https://noxgpt.com/local_prompts.json	true	Avira URL Cloud: phishing	unknown
https://noxgpt.com/result/robloxmodmenu/js/jq.js	true	Avira URL Cloud: phishing	unknown
https://elitemods.net/stats/matomo.php?action_name=NoxGPT&idsite=5&rec=1&r=831582&h=12&m=28&s=12&url=https%3A%2F%2Fnoxgpt.com%2F&_id=3e6fdbb24d88b0e9&_idn=1&send_image=0&_refts=0&pv_id=ns1EPC&pf_net=919&pf_srv=476&pf_tfr=244&pf_dm1=2266&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024	false	Avira URL Cloud: safe	unknown
https://noxgpt.com/result/robloxmodmenu/css/w3.css	true	Avira URL Cloud: phishing	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://developer.matomo.org/api-reference/tracking-javascript	chromecache_105.2.dr, chromecache_106.2.dr	false		high
http://www.litespeedtech.com/error-page	chromecache_109.2.dr, chromecache_125.2.dr, chromecache_95.2.dr, chromecache_102.2.dr, chromecache_96.2.dr, chromecache_103.2.dr, chromecache_104.2.dr, chromecache_85.2.dr	false		high
https://piwik.org/free-software/bsd/	chromecache_105.2.dr, chromecache_106.2.dr	false		high
https://unpkg.com/typewriter-effect	chromecache_116.2.dr	false		high
https://elitemods.net/temucoupon/	chromecache_93.2.dr, chromecache_89.2.dr	false	Avira URL Cloud: safe	unknown
https://piwik.org	chromecache_105.2.dr, chromecache_106.2.dr	false		high
https://fontawesome.com/license/free	chromecache_128.2.dr	false		high
https://fontawesome.com	chromecache_128.2.dr	false		high
https://impacthelper.net/genshinimpact/	chromecache_93.2.dr, chromecache_89.2.dr	false	Avira URL Cloud: safe	unknown
https://developer.matomo.org/guides/tracking-javascript-guide#multiple-piwik-trackers	chromecache_105.2.dr, chromecache_106.2.dr	false		high
https://github.com/matomo-org/matomo/blob/master/js/piwik.js	chromecache_105.2.dr, chromecache_106.2.dr	false		high
https://elitemods.net/monopoly/monopolygo/	chromecache_93.2.dr, chromecache_89.2.dr	false	Avira URL Cloud: safe	unknown
https://noxgpt.info/cl/i/wo1lv7	chromecache_99.2.dr	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.18.40.68	kit.fontawesome.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false
185.247.225.10	noxgpt.com	Romania	200651	FLOKINETSC	false
104.17.245.203	unpkg.com	United States	13335	CLOUDFLARENETUS	false
142.250.181.228	www.google.com	United States	15169	GOOGLEUS	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false

Private

IP
192.168.2.16

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1597878
Start date and time:	2025-01-23 18:27:33 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 48s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	defaultwindowsinteractivecookbook.jbs
Sample URL:	http://noxgpt.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	13
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@18/85@22/7
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, SgrmBroker.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 172.217.23.99, 142.250.186.78, 142.251.168.84, 142.250.184.238, 199.232.210.172, 142.250.186.174, 142.250.186.138, 142.250.185.106, 172.217.16.202, 142.250.186.42, 142.250.185.74, 142.250.185.170, 142.250.186.74, 142.250.186.170, 172.217.18.10, 142.250.181.234, 216.58.206.42, 142.250.184.202, 142.250.74.202, 216.58.212.170, 142.250.184.234, 142.250.185.138, 142.250.186.46, 142.250.185.110, 142.250.185.174, 216.58.212.142, 142.250.181.227, 172.217.18.110, 142.250.181.238, 142.250.185.206, 184.28.90.27, 52.149.20.212
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com
Not all processes where analyzed, report is missing behavior information
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://noxgpt.com

Input	Output
URL: http://noxgpt.com Model: Joe Sandbox AI	```json{ "brand": "ChatGPT", "brand_classification": "wellknown", "legit_url": "https://chat.openai.com", "similarity": 5, "spoofed": 4, "reasoning": "The URL 'noxgpt.com' appears to be attempting to associate itself with the 'GPT' brand, which is part of the well-known 'ChatGPT' by OpenAI. The use of 'gpt' in the domain suggests a potential attempt to capitalize on the popularity of ChatGPT. However, the prefix 'nox' does not have a clear visual or structural similarity to 'chat', which reduces the overall similarity score. The domain does not use any deceptive subdomains or extensions that would typically be associated with typosquatting. The likelihood of this being a typosquatting attempt is moderate, as the domain could be used for a legitimate purpose unrelated to ChatGPT, but the inclusion of 'gpt' suggests a possible intent to mislead users familiar with the GPT brand."}
URL: http://noxgpt.com
URL: https://noxgpt.com Model: Joe Sandbox AI	```json{ "brand": "ChatGPT", "brand_classification": "wellknown", "legit_url": "https://chat.openai.com", "similarity": 5, "spoofed": 4, "reasoning": "The URL 'noxgpt.com' appears to be attempting to associate itself with the 'GPT' brand, which is part of the well-known ChatGPT service by OpenAI. The use of 'gpt' in the domain suggests a connection to the GPT technology. However, the prefix 'nox' does not have a clear visual or phonetic similarity to 'chat' or 'openai', which reduces the overall similarity score. The domain does not use any deceptive subdomains or extensions that would typically indicate a typosquatting attempt. The likelihood of this being a typosquatting attempt is moderate, as the use of 'gpt' could be an attempt to capitalize on the popularity of GPT models, but without more direct visual or structural similarities, it is not highly deceptive."}
URL: https://noxgpt.com
URL: https://noxgpt.com/result/robloxmodmenu/js/jq.js... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "This appears to be the standard jQuery library, which is a widely used and trusted JavaScript library. It does not contain any high-risk indicators like dynamic code execution, data exfiltration, or obfuscated code. The script is likely used for legitimate web development purposes and does not demonstrate any suspicious behavior." }
/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license / !function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.constructor(),a);return b.prevObject=this,b},each:function(a){return r.each(this,a)},map:function(a){return this.pushStack(r.map(this,function(b,c){return a.call(b,c,b)}))},slice:function(){return this.pushStack(f.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},eq:function(a){var b=this.length,c=+a+(a<0?b:0);return this.pushStack(c>=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments[h]\|\|{},h++),"object"==typeof g\|\|r.isFunction(g)\|\|(g={}),h===i&&(g=this,h--);h<i;h++)if(null!=(a=arguments[h]))for(b in a)c=g[b],d=a[b],g!==d&&(j&&d&&(r.isPlainObject(d)\|\|(e=r.isArray(d)))?(e?(e=!1,f=c&&r.isArray(c)?c:[]):f=c&&r.isPlainObject(c)?c:{},g[b]=r.extend(j,f,d)):void 0!==d&&(g[b]=d));return g},r.extend({expando:"jQuery"+(q+Math.random()).replace(/\D/g,""),isReady:!0,error:function(a){throw new Error(a)},noop:function(){},isFunction:function(a){return"function"===r.type(a)},isArray:Array.isArray,isWindow:function(a){return null!=a&&a===a.window},isNumeric:function(a){var b=r.type(a);return("number"===b\|\|"string"===b)&&!isNaN(a-parseFloat(a))},isPlainObject:function(a){var b,c;return!(!a\|\|"[object Object]"!==k.call(a))&&(!(b=e(a))\|\|(c=l.call(b,"constructor")&&b.constructor,"function"==typeof c&&m.call(c)===n))},isEmptyObject:function(a){var b;for(b in a)return!1;return!0},type:function(a){return null==a?a+"":"object"==typeof a\|\|"function"==typeof a?j[k.call(a)]\|\|"object":typeof a},globalEval:function(a){p(a)},camelCase:function(a){return a.replace(t,"ms-").replace(u,v)},nodeName:function(a,b){return a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").replace(s,"")},makeArray:function(a,b){var c=b\|\|[];return null!=a&&(w(Object(a))?r.merge(c,"string"==typeof a?[a]:a):h.call(c,a)),c},inArray:function(a,b,c){return null==b?-1:i.call(b,a,c)},merge:function(a,b){for(var c=+b.length,d=0,e=a.length;d<c;d++)a[e++]=b[d];return a.length=e,a},grep:function(a,b,c){for(var d,e=[],f=0,g=a.length,h=!c;f<g;f++)d=!b(a[f],f),d!==h&&e.push(a[f]);return e},map:function(a,b,c){var d,e,f=0,h=[];if(w(a))for(d=a.length;f<d;f++)e=b(a[f],f,c),null!=e&&h.push(e);else for(f in a)e=b(a[f],f,c),null!=e&&h.push(e);return g.apply([],h)},guid:1,proxy:function(a,b){var c,d,e;if("string"==typeof b&&(c=a[b],b=a,a=c),r.isFunction(a))return d=f.call(arguments,2),e=function(){return a.apply(b\|\|this,d.concat(f.call(arguments)))},e.guid=a.guid=a.guid\|\|r.guid++,e},now:Date.now,support:o}),"function"==typeof Symbol&&(r.fn[Symbol.iterator]=c[Symbol.iterator]),r.each("Boolean Number String Function Array Date RegExp Object Error Symbol".split(" "),function(a,b){j["[obj
URL: https://noxgpt.com/result/robloxmodmenu/js/dynamic... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript code contains a mix of behaviors, some of which are low-risk and others that require further review. The code primarily focuses on manipulating the DOM, including hiding and showing elements, adjusting styles, and triggering various animations. While these actions are not inherently malicious, the aggressive nature of the DOM manipulation and the use of multiple timeouts could be considered moderately risky. Additionally, the 'jailbreak' function includes some suspicious behavior, such as hiding the entire page and changing the background color to black, which could be indicative of potentially malicious intent. Overall, the code requires further review to determine the full context and purpose, but it does not appear to be overtly malicious." }
function slideUp(){ document.getElementById("fadeBtn").style.opacity = "0"; document.getElementById("appe").style.visibility= "visible"; document.getElementById("mainPart").style.visibility = "hidden"; document.getElementById("mainPart").style.opacity = "0"; document.getElementById("appe").style.opacity = "1"; document.getElementById("appe").style.top = "1px"; } function slideDown(){ document.getElementById("fadeBtn").style.opacity = "1"; document.getElementById("appe").style.visibility= "hidden"; document.getElementById("mainPart").style.visibility = "visible"; document.getElementById("mainPart").style.opacity = "1"; document.getElementById("appe").style.top = "200px"; document.getElementById("appe").style.opacity = "0"; } function warning(){ document.getElementById("conf").style.visibility= "visible"; } function hideConf(){ document.getElementById("conf").style.visibility= "hidden"; } function jailbreak(){ document.getElementById("cons").style.display = "inline"; document.getElementById("everything").style.visibility = "hidden"; document.getElementById("everything").style.opacity = "0"; setTimeout(function (){document.getElementById("everything").style.display = "none"},1000); setTimeout(function (){document.getElementById("appLogo").style.opacity = "1000"},2450); document.body.style.backgroundColor = "black"; setTimeout(function (){document.getElementById("appLogo").style.paddingTop = "70px"},4500); setTimeout(function (){document.getElementById("c1").style.opacity= "1"},4800); setTimeout(function (){document.getElementById("c2").style.opacity= "1"},5400); setTimeout(function (){document.getElementById("c3").style.opacity= "1"},6000); setTimeout(function (){document.getElementById("c4").style.opacity= "1"},7000); setTimeout(function (){document.getElementById("c5").style.opacity= "1"},7300); setTimeout(function (){document.getElementById("c6").style.opacity= "1"},7400); setTimeout(function (){document.getElementById("c7").style.opacity= "1"},8900); setTimeout(function (){document.getElementById("c8").style.opacity= "1"},10000); setTimeout(function (){document.getElementById("c9").style.opacity= "1"},10200); setTimeout(function (){document.getElementById("c10").style.opacity= "1"},11000); setTimeout(function (){document.getElementById("c11").style.opacity= "1"},12300); setTimeout(function (){window.scrollTo(0,document.body.scrollHeight);},12320); setTimeout(function (){document.getElementById("c12").style.opacity= "1"},12800); setTimeout(function (){document.getElementById("c13").style.opacity= "1"},13000); setTimeout(function (){document.getElementById("c14").style.opacity= "1"},13100); setTimeout(function (){document.getElementById("c15").style.opacity= "1"},15000); setTimeout(function (){document.getElementById("cs").style.opacity= "0"},16000); setTimeout(function (){ var element = document.getElementById("cs"); element.outerHTML = ""; delete element; },18000); setTimeout(function (){document.getElementById("appLogo").style.paddingTop= "200px"},19000); setTimeout(function (){document.getElementById("appLogo").style.display="none"},41000); setTimeout(function (){document.getElementById("oAn").style.opacity= "1"},19500); setTimeout(function (){document.getElementById("lAn").style.width= "190px"},20000); setTimeout(function (){document.getElementById("cons").style.opacity= "0"},40000); setTimeout(function (){document.body.style.backgroundColor = "#EFEFF5"},40000); setTimeout(function (){document.getElementById("off").style.top = "0px"},41000); }
URL: https://elitemods.net/stats/matomo.js... Model: Joe Sandbox AI	{ "risk_score": 1, "reasoning": "The provided JavaScript snippet appears to be the Matomo (formerly Piwik) analytics tracking client, which is a legitimate and widely-used open-source web analytics platform. The code does not exhibit any high-risk behaviors such as dynamic code execution, data exfiltration, or obfuscation. It primarily focuses on setting up the Matomo tracking functionality, which is a common and expected behavior for an analytics tool. While the code uses some legacy APIs like `XDomainRequest`, these pose minor risks and are not inherently malicious. Overall, this script is likely low-risk and intended for legitimate analytics purposes." }
/!! Matomo - free/libre analytics platform * * JavaScript tracking client * * @link https://piwik.org * @source https://github.com/matomo-org/matomo/blob/master/js/piwik.js * @license https://piwik.org/free-software/bsd/ BSD-3 Clause (also in js/LICENSE.txt) * @license magnet:?xt=urn:btih:c80d50af7d3db9be66a4d0a86db0286e4fd33292&dn=bsd-3-clause.txt BSD-3-Clause */ ;if(typeof _paq!=="object"){_paq=[]}if(typeof window.Matomo!=="object"){window.Matomo=window.Piwik=(function(){var s,b={},A={},K=document,g=navigator,ac=screen,X=window,h=X.performance\|\|X.mozPerformance\|\|X.msPerformance\|\|X.webkitPerformance,u=X.encodeURIComponent,W=X.decodeURIComponent,k=unescape,M=[],I,v,am=[],z=0,ag=0,Y=0,m=false,q="";function p(au){try{return W(au)}catch(av){return unescape(au)}}function N(av){var au=typeof av;return au!=="undefined"}function D(au){return typeof au==="function"}function aa(au){return typeof au==="object"}function y(au){return typeof au==="string"\|\|au instanceof String}function al(au){return typeof au==="number"\|\|au instanceof Number }function ad(au){return N(au)&&(al(au)\|\|(y(au)&&au.length))}function E(av){if(!av){return true}var au;for(au in av){if(Object.prototype.hasOwnProperty.call(av,au)){return false}}return true}function ap(au){var av=typeof console;if(av!=="undefined"&&console&&console.error){console.error(au)}}function ak(){var az,ay,aB,av,au;for(az=0;az<arguments.length;az+=1){au=null;if(arguments[az]&&arguments[az].slice){au=arguments[az].slice()}av=arguments[az];aB=av.shift();var aA,aw;var ax=y(aB)&&aB.indexOf("::")>0;if(ax){aA=aB.split("::");aw=aA[0];aB=aA[1];if("object"===typeof v[aw]&&"function"===typeof v[aw][aB]){v[aw][aB].apply(v[aw],av)}else{if(au){am.push(au)}}}else{for(ay=0;ay<M.length;ay++){if(y(aB)){aw=M[ay];var aC=aB.indexOf(".")>0;if(aC){aA=aB.split(".");if(aw&&"object"===typeof aw[aA[0]]){aw=aw[aA[0]];aB=aA[1]}else{if(au){am.push(au);break}}}if(aw[aB]){aw[aB].apply(aw,av)}else{var aD="The method '"+aB+'\' was not found in "_paq" variable. Please have a look at the Matomo tracker documentation: https://developer.matomo.org/api-reference/tracking-javascript'; ap(aD);if(!aC){throw new TypeError(aD)}}if(aB==="addTracker"){break}if(aB==="setTrackerUrl"\|\|aB==="setSiteId"){break}}else{aB.apply(M[ay],av)}}}}}function at(ax,aw,av,au){if(ax.addEventListener){ax.addEventListener(aw,av,au);return true}if(ax.attachEvent){return ax.attachEvent("on"+aw,av)}ax["on"+aw]=av}function n(au){if(K.readyState==="complete"){au()}else{if(X.addEventListener){X.addEventListener("load",au,false)}else{if(X.attachEvent){X.attachEvent("onload",au)}}}}function r(ax){var au=false;if(K.attachEvent){au=K.readyState==="complete"}else{au=K.readyState!=="loading"}if(au){ax();return}var aw;if(K.addEventListener){at(K,"DOMContentLoaded",function av(){K.removeEventListener("DOMContentLoaded",av,false);if(!au){au=true;ax()}})}else{if(K.attachEvent){K.attachEvent("onreadystatechange",function av(){if(K.readyState==="complete"){K.detachEvent("onreadystatechange",av);if(!au){au=true;ax()}}});if(K.documentElement.doScroll&&X===X.top){(function av(){if(!au){try{K.documentElement.doScroll("left") }catch(ay){setTimeout(av,0);return}au=true;ax()}}())}}}at(X,"load",function(){if(!au){au=true;ax()}},false)}function ah(av,aA,aB){if(!av){return""}var au="",ax,aw,ay,az;for(ax in b){if(Object.prototype.hasOwnProperty.call(b,ax)){az=b[ax]&&"function"===typeof b[ax][av];if(az){aw=b[ax][av];ay=aw(aA\|\|{},aB);if(ay){au+=ay}}}}return au}function an(av){var au;m=true;ah("unload");au=new Date();var aw=au.getTimeAlias();if((s-aw)>3000){s=aw+3000}if(s){do{au=new Date()}while(au.getTimeAlias()<s)}}function o(aw,av){var au=K.createElement("script");au.type="text/javascript";au.src=aw;if(au.readyState){au.onreadystatechange=function(){var ax=this.readyState;if(ax==="loaded"\|\|ax==="complete"){au.onreadystatechange=null;av()}}}else{au.onload=av}K.getElementsByTagName("head")[0].appendChild(au)}function O(){var au="";try{au=X.top.document.referrer}catch(aw){if(X.pare
URL: https://noxgpt.com/result/robloxmodmenu/js/alert-c... Model: Joe Sandbox AI	{ "risk_score": 4, "reasoning": "The provided JavaScript snippet appears to be a custom implementation of an alert/confirm dialog box. While it does not contain any high-risk indicators like dynamic code execution or data exfiltration, it does have some moderate-risk behaviors that warrant further review. The script uses external data transmission to send user interactions (confirm/cancel) to the parent element, and it also performs aggressive DOM manipulation by appending and detaching the alert/confirm dialog from the document body. Additionally, the script uses multiple fallback domains, which could potentially be a concern depending on the reputation of those domains. Overall, the script seems to be a legitimate implementation, but the aggressive DOM manipulation and use of multiple fallback domains contribute to a medium-risk score." }
(function ($) { 'use strict' function AlertConfirm(element, options) { this.$body = $(document.body) this.$element = $(element) // this.$alertHeader = this.$element.find('.ms-alert-header') // this.$alertContent = this.$element.find('.ms-alert-content') this.$alertButtons = this.$element.find('.ms-alert-buttons') this.$confirmButton = this.$alertButtons.find('.ms-alert-button.confirm') this.$cancelButton = this.$alertButtons.find('.ms-alert-button.cancel') this.hasCancelButton = !!this.$cancelButton.length this.options = options this.isShown = false this.$confirmButton .on('click', this.confirm.bind(this)) this.hasCancelButton && this.$cancelButton .on('click', this.cancel.bind(this)) } AlertConfirm.VERSION = '0.0.1' AlertConfirm.DEFAULTS = { showFunction: function (alertObj) { this.appendTo(alertObj.$body) }, hideFunction: function () { this.detach() } } AlertConfirm.prototype.show = function () { if (this.$body.data('ms.alert') \|\| this.isShown) return this.$element.trigger('show.ms.alert') this.options.showFunction.call(this.$element, this) this.$element.trigger('shown.ms.alert') this.isShown = true this.$body.data('ms.alert', true) } AlertConfirm.prototype.hide = function () { if (!this.isShown) return this.$element.trigger('hide.ms.alert') this.options.hideFunction.call(this.$element, this) this.$element.trigger('hidden.ms.alert') this.isShown = false this.$body.data('ms.alert', false) } AlertConfirm.prototype.confirm = function (e) { var event = $.Event('confirm.ms.alert') this.$element.trigger(event) if (event.isDefaultPrevented()) return this.hide() } AlertConfirm.prototype.cancel = function (e) { var event = $.Event('cancel.ms.alert') this.$element.trigger(event) if (event.isDefaultPrevented()) return this.hide() } function Plugin(options) { return this.each(function () { var $this = $(this) var data = $this.data('ms.alert') var _options = $.extend({}, AlertConfirm.DEFAULTS, typeof options === 'object' ? options : null) if (!data) { $this.data('ms.alert', (data = new AlertConfirm(this, _options))) } if (typeof options === 'string') { data[options]() } }) } var _old = $.fn.alertconfirm $.fn.alertconfirm = Plugin $.fn.alertconfirm.noConflict = function () { $.fn.alertconfirm = _old return this } var _oldAlert = $.alert var _oldConfirm = $.confirm var _template = '<div class="ms-alert">' + '<div class="ms-alert-body">' + '<div class="ms-alert-header"></div>' + '<div class="ms-alert-content"></div>' + '<div class="ms-alert-buttons">' + '<div class="ms-alert-button confirm"></div>' + '</div>' + '</div>' + '</div>' var _cancelButtonTemplate = '<div class="ms-alert-button cancel"></div>' var _defaults = { header: 'Title', content: ' ', confirmButtonText: 'Okey', cancelButtonText: 'Cancel', confirm: noop, cancel: noop } var _alertTemplate = null var _confirmTemplate = null function noop () {} $.alert = function (options, alertOptions) { var $template = _alertTemplate \|\| (_alertTemplate = $(_template)) var $alertHeader = $template.find('.ms-alert-header') var $alertContent = $template.find('.ms-alert-content') var $alertButtons = $template.find('.ms-alert-buttons') var $confirmButton = $template.find('.ms-alert-button.confirm') var _options = $.extend({}, _default
URL: https://noxgpt.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://noxgpt.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": false, "trigger_text": "unknown", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://noxgpt.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "mod menu", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "unknown" }

URL: https://noxgpt.com/ Model: Joe Sandbox AI	{ "brands": [ "NoxGPT" ] }
	{ "brands": [ "NoxGPT" ] }
URL: https://noxgpt.com/ Model: Joe Sandbox AI	{ "brands": [ "NoxGPT" ] }
	{ "brands": [ "NoxGPT" ] }
URL: https://noxgpt.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This is a download for the exclusive features and benefits of the Roblox Mod Menu. You can use these features to enhance your gaming experience.", "prominent_button_name": "Download", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "software download portal" } Google indexed: True

URL: https://noxgpt.com/ Model: Joe Sandbox AI	{ "brands": [ "Roblox" ] }
	{ "brands": [ "Roblox" ] }
URL: https://noxgpt.com/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Wait until they are being downloaded:", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": true, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "software download portal" }

URL: https://noxgpt.com/result/robloxmodmenu/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "This mod menu will be injected into the Roblox App on this current device", "prominent_button_name": "Start", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "software download portal" }

URL: https://noxgpt.com/ Model: Joe Sandbox AI	{ "brands": [ "Roblox" ] } Google indexed: True
	{ "brands": [ "Roblox" ] } Google indexed: True
URL: https://noxgpt.com/ Model: Joe Sandbox AI	{ "brands": [ "NoxGPT" ] }
	{ "brands": [ "NoxGPT" ] }
URL: https://noxgpt.com/result/robloxmodmenu/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "Free Robux", "prominent_button_name": "unknown", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "software download portal" }

URL: https://noxgpt.com/result/robloxmodmenu/ Model: Joe Sandbox AI	{ "contains_trigger_text": true, "trigger_text": "You must have Roblox installed on the same device. This is essential for the seamless integration and injection of the Mod Menu into your Roblox game.", "prominent_button_name": "Inject", "text_input_field_labels": "unknown", "pdf_icon_visible": false, "has_visible_captcha": false, "has_urgent_text": false, "has_visible_qrcode": false, "contains_chinese_text": false, "contains_fake_security_alerts": false, "page_classification": "software download portal" }

URL: https://noxgpt.com/result/robloxmodmenu/ Model: Joe Sandbox AI	{ "brands": "unknown" }
	{ "brands": "unknown" }
URL: https://noxgpt.com/result/robloxmodmenu/ Model: Joe Sandbox AI	{ "brands": [ "Roblox" ] }
	{ "brands": [ "Roblox" ] }
URL: https://noxgpt.com/result/robloxmodmenu/ Model: Joe Sandbox AI	{ "brands": [ "Roblox" ] }
	{ "brands": [ "Roblox" ] }
URL: https://noxgpt.com/ Model: Joe Sandbox AI	```json{ "legit_domain": "roblox.com", "classification": "wellknown", "reasons": [ "The brand 'Roblox' is well-known and its legitimate domain is 'roblox.com'.", "The provided URL 'noxgpt.com' does not match the legitimate domain for Roblox.", "The URL 'noxgpt.com' does not contain any recognizable association with the brand 'Roblox'.", "The domain 'noxgpt.com' appears unrelated to the brand and could be a potential phishing attempt." ], "riskscore": 9} Google indexed: True
URL: noxgpt.com Brands: Roblox Input Fields: unknown
URL: https://noxgpt.com/ Model: Joe Sandbox AI	```json{ "legit_domain": "unknown", "classification": "unknown", "reasons": [ "The brand 'NoxGPT' is not recognized as a well-known or known brand.", "The URL 'noxgpt.com' does not match any known legitimate domain associated with a recognized brand.", "The domain name 'noxgpt.com' does not contain any obvious misspellings or suspicious elements, but it is not associated with a known brand.", "The lack of input fields information makes it difficult to assess the site's purpose or legitimacy." ], "riskscore": 7}
URL: noxgpt.com Brands: NoxGPT Input Fields: unknown

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows shortcut, Item id list present, Points to a file or directory, Has Relative path, Has Working directory, Has command line arguments, Icon number=0, Archive, ctime=Tue Oct 3 09:48:42 2023, mtime=Thu Jan 23 16:28:09 2025, atime=Wed Sep 27 04:28:28 2023, length=1210144, window=hide
Category:	dropped
Size (bytes):	2673
Entropy (8bit):	3.991037013470329
Encrypted:	false
SSDEEP:	48:8YduTKyRwHOBidAKZdA1FehwiZUklqehTy+3:8lnzoy
MD5:	F96CC8767947E3DE4AEB8EA99AFA57D0
SHA1:	D1DA0E58FCA5D45BFC4E9B1DD5EA86102434F0B3
SHA-256:	A25310586CD06CE8C48D40B88449C821D2B59A80794A9E3AF8046AF5D4BBA80B
SHA-512:	E3931BEF271F4504FA89FFE56F38ABE5E793EC1E4002A7C9FE6FB18665B05CC787B4150FE7BF0952B92DBA063E348D2E92149BE98D0C113DBFDC6FB7CB9BF206
Malicious:	false
Reputation:	low
Preview:	L..................F.@.. ...$+.,....zh.+.m..N.Yr.... w......................1....P.O. .:i.....+00.../C:\.....................1.....FW.J..PROGRA~1..t......O.I7Zw.....B...............J.........P.r.o.g.r.a.m. .F.i.l.e.s...@.s.h.e.l.l.3.2...d.l.l.,.-.2.1.7.8.1.....T.1.....CW.V..Google..>......CW.V7Z......L.....................p+j.G.o.o.g.l.e.....T.1.....CW.V..Chrome..>......CW.V7Z......M......................8..C.h.r.o.m.e.....`.1.....CW.V..APPLIC~1..H......CW.V7Z............................."&.A.p.p.l.i.c.a.t.i.o.n.....n.2. w..;W.+ .CHROME~1.EXE..R......CW.V7Z.............................H..c.h.r.o.m.e._.p.r.o.x.y...e.x.e.......j...............-.......i.............Y......C:\Program Files\Google\Chrome\Application\chrome_proxy.exe..S.....\.....\.....\.....\.....\.....\.....\.....\.....\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.\.c.h.r.o.m.e._.p.r.o.x.y...e.x.e.*.C.:.\.P.r.o.g.r.a.m. .F.i.l.e.s.\.G.o.o.g.l.e.\.C.h.r.o.m.e.\.A.p.p.l.i.c.a.t.i.o.n.F

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Jan 23, 2025 18:28:07.675220013 CET	53	55345	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:07.697408915 CET	53	64542	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:08.529499054 CET	51871	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:08.529942989 CET	50792	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:08.547895908 CET	53	50792	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:08.672724009 CET	53	51912	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:08.815243959 CET	53	51871	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:09.534558058 CET	63559	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:09.534775019 CET	61870	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:09.617947102 CET	53	61870	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:09.729520082 CET	53	63559	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:10.955219984 CET	49331	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:10.955427885 CET	57880	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:10.956876993 CET	63122	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:10.957015991 CET	58150	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:10.961936951 CET	53	49331	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:10.962333918 CET	53	57880	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:10.963541985 CET	53	63122	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:10.963747978 CET	53	58150	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:11.816365004 CET	55333	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:11.816615105 CET	56697	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:11.818278074 CET	55760	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:11.818466902 CET	63041	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:11.823286057 CET	53	55333	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:11.823395014 CET	53	56697	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:11.824924946 CET	53	55760	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:11.825299978 CET	53	63041	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:11.922339916 CET	63053	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:11.922465086 CET	49500	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:11.954778910 CET	53	49500	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:12.143179893 CET	53	63053	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:12.415088892 CET	59884	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:12.415569067 CET	52750	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:12.458340883 CET	57145	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:12.458595991 CET	52110	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:12.465121031 CET	53	57145	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:12.465857029 CET	53	52110	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:12.695604086 CET	53	59884	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:12.814857006 CET	53	52750	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:13.108391047 CET	53265	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:13.108673096 CET	51694	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:13.114933014 CET	53	53265	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:13.115645885 CET	53	51694	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:13.221221924 CET	53	56806	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:13.446691990 CET	60186	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:13.446844101 CET	64649	53	192.168.2.16	1.1.1.1
Jan 23, 2025 18:28:13.494358063 CET	53	60186	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:13.498420954 CET	53	64649	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:25.722103119 CET	53	63026	1.1.1.1	192.168.2.16
Jan 23, 2025 18:28:44.592808008 CET	53	51786	1.1.1.1	192.168.2.16
Jan 23, 2025 18:29:07.480209112 CET	53	56989	1.1.1.1	192.168.2.16
Jan 23, 2025 18:29:07.639926910 CET	53	50980	1.1.1.1	192.168.2.16
Jan 23, 2025 18:29:09.871501923 CET	138	138	192.168.2.16	192.168.2.255
Jan 23, 2025 18:29:38.127994061 CET	53	63909	1.1.1.1	192.168.2.16

Timestamp	Bytes transferred	Direction	Data
Jan 23, 2025 18:28:08.820761919 CET	425	OUT	GET / HTTP/1.1 Host: noxgpt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Jan 23, 2025 18:28:09.531898975 CET	496	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 23 Jan 2025 17:28:08 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 227 Connection: keep-alive X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Location: https://noxgpt.com/ Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 6f 78 67 70 74 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://noxgpt.com/">here</a>.</p></body></html>
Jan 23, 2025 18:28:54.543394089 CET	6	OUT	Data Raw: 00 Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:10 UTC	653	OUT	GET / HTTP/1.1 Host: noxgpt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 17:28:10 UTC	388	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:28:09 GMT Content-Type: text/html Content-Length: 167637 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Wed, 20 Mar 2024 21:57:21 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2025-01-23 17:28:10 UTC	15996	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4e 6f 78 47 50 54 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 69 63 6f 6e 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 20 68 72 65 66 3d 22 2f 6c 6f 67 6f 2e 6a 70 67 22 3e 0d 0a 20 20 20 20 3c 73 63 72 69 70 74 20 73 72 63 3d 22 68 74 74 70 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>NoxGPT</title> <link rel="icon" type="image/x-icon" href="/logo.jpg"> <script src="http
2025-01-23 17:28:10 UTC	16384	IN	Data Raw: 65 28 5f 30 78 35 62 36 37 36 30 2c 5f 30 78 34 30 65 31 63 32 2d 30 78 31 64 34 2c 5f 30 78 31 66 33 32 61 37 2d 20 2d 30 78 38 61 2c 5f 30 78 35 61 33 66 37 34 2d 30 78 35 32 2c 5f 30 78 35 62 36 37 36 30 2d 30 78 32 64 29 3b 7d 76 61 72 20 5f 30 78 32 33 39 66 35 36 3d 5f 30 78 32 30 35 65 37 64 5b 5f 30 78 33 61 37 61 66 38 28 30 78 33 30 62 2c 30 78 32 61 31 2c 30 78 33 39 34 2c 27 4b 61 55 5a 27 2c 30 78 34 64 37 29 5d 28 5f 30 78 32 61 30 65 61 34 2c 5f 30 78 32 35 64 61 65 30 2c 5f 30 78 33 61 31 32 61 33 29 3b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 38 32 38 31 31 28 5f 30 78 32 38 65 32 39 66 2c 5f 30 78 32 66 65 65 39 64 2c 5f 30 78 35 30 64 35 62 35 2c 5f 30 78 31 35 65 30 32 39 2c 5f 30 78 35 36 39 38 31 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 Data Ascii: e(_0x5b6760,_0x40e1c2-0x1d4,_0x1f32a7- -0x8a,_0x5a3f74-0x52,_0x5b6760-0x2d);}var _0x239f56=_0x205e7d[_0x3a7af8(0x30b,0x2a1,0x394,'KaUZ',0x4d7)](_0x2a0ea4,_0x25dae0,_0x3a12a3);function _0x282811(_0x28e29f,_0x2fee9d,_0x50d5b5,_0x15e029,_0x56981){return _0x4
2025-01-23 17:28:11 UTC	16384	IN	Data Raw: 32 29 2b 5f 30 78 31 39 33 37 65 31 28 30 78 36 34 64 2c 27 54 79 4e 4f 27 2c 30 78 36 31 63 2c 30 78 35 65 37 2c 30 78 34 64 31 29 2b 5f 30 78 31 39 33 37 65 31 28 30 78 35 65 33 2c 27 26 31 46 56 27 2c 30 78 33 66 36 2c 30 78 36 66 62 2c 30 78 34 65 33 29 2b 5f 30 78 32 38 31 35 33 63 28 30 78 32 34 36 2c 27 21 41 47 66 27 2c 30 78 31 37 30 2c 30 78 32 65 63 2c 30 78 33 36 62 29 2b 5f 30 78 33 39 36 35 34 61 28 30 78 36 32 30 2c 30 78 36 36 32 2c 27 24 70 75 7a 27 2c 30 78 38 35 37 2c 30 78 36 64 63 29 2b 5f 30 78 31 39 33 37 65 31 28 30 78 32 34 38 2c 27 70 57 71 71 27 2c 2d 30 78 63 36 2c 2d 30 78 37 63 2c 30 78 31 35 61 29 2b 5f 30 78 33 39 36 35 34 61 28 30 78 36 31 37 2c 30 78 33 63 39 2c 27 5b 50 52 36 27 2c 30 78 37 64 64 2c 30 78 35 61 35 29 2b Data Ascii: 2)+_0x1937e1(0x64d,'TyNO',0x61c,0x5e7,0x4d1)+_0x1937e1(0x5e3,'&1FV',0x3f6,0x6fb,0x4e3)+_0x28153c(0x246,'!AGf',0x170,0x2ec,0x36b)+_0x39654a(0x620,0x662,'$puz',0x857,0x6dc)+_0x1937e1(0x248,'pWqq',-0xc6,-0x7c,0x15a)+_0x39654a(0x617,0x3c9,'[PR6',0x7dd,0x5a5)+
2025-01-23 17:28:11 UTC	16384	IN	Data Raw: 35 31 30 66 33 5b 5f 30 78 65 62 65 33 66 39 28 30 78 35 63 65 2c 30 78 35 37 31 2c 27 71 5a 6c 4c 27 2c 30 78 35 36 38 2c 30 78 34 66 32 29 5d 28 5f 30 78 31 63 39 34 30 66 2c 27 30 27 29 3a 5f 30 78 32 35 31 30 66 33 5b 5f 30 78 65 62 65 33 66 39 28 30 78 32 30 32 2c 30 78 33 35 61 2c 27 48 25 63 57 27 2c 30 78 34 65 64 2c 30 78 33 65 63 29 5d 28 5f 30 78 31 62 35 31 65 39 29 3b 7d 29 28 29 3b 7d 65 6c 73 65 20 72 65 74 75 72 6e 21 5b 5d 3b 7d 7d 65 6c 73 65 20 72 65 74 75 72 6e 20 5f 30 78 32 36 39 32 33 35 5b 5f 30 78 35 62 35 63 33 66 28 30 78 61 32 2c 30 78 33 66 32 2c 30 78 32 66 30 2c 30 78 31 35 30 2c 27 67 63 6a 78 27 29 5d 28 5f 30 78 32 32 32 66 31 34 2c 5f 30 78 32 37 63 33 65 64 2c 5f 30 78 33 30 65 63 30 30 2c 5f 30 78 31 36 61 38 37 33 29 Data Ascii: 510f3[_0xebe3f9(0x5ce,0x571,'qZlL',0x568,0x4f2)](_0x1c940f,'0'):_0x2510f3[_0xebe3f9(0x202,0x35a,'H%cW',0x4ed,0x3ec)](_0x1b51e9);})();}else return![];}}else return _0x269235[_0x5b5c3f(0xa2,0x3f2,0x2f0,0x150,'gcjx')](_0x222f14,_0x27c3ed,_0x30ec00,_0x16a873)
2025-01-23 17:28:11 UTC	16384	IN	Data Raw: 30 78 33 37 30 33 29 2b 5f 30 78 38 63 36 64 32 66 3a 5f 30 78 38 63 36 64 32 66 2c 5f 30 78 35 31 66 63 32 31 2b 2b 25 28 30 78 31 62 38 35 2b 2d 30 78 36 30 63 2b 2d 30 78 31 35 37 35 2a 30 78 31 29 29 3f 5f 30 78 31 66 38 30 37 30 2b 3d 5f 30 78 32 38 32 61 62 30 5b 27 63 68 61 72 43 6f 64 65 41 74 27 5d 28 5f 30 78 32 62 37 30 63 61 2b 28 2d 30 78 33 32 31 2a 30 78 33 2b 2d 30 78 61 31 33 2b 30 78 31 33 38 30 29 29 2d 28 2d 30 78 31 64 34 38 2b 2d 30 78 31 34 61 32 2b 2d 30 78 31 37 2a 2d 30 78 32 32 63 29 21 3d 3d 30 78 31 2a 30 78 31 32 35 36 2b 2d 30 78 39 34 35 2b 2d 30 78 39 31 31 3f 53 74 72 69 6e 67 5b 27 66 72 6f 6d 43 68 61 72 43 6f 64 65 27 5d 28 2d 30 78 31 66 64 64 2b 30 78 32 33 35 30 2b 30 78 39 64 2a 2d 30 78 34 26 5f 30 78 31 30 66 31 Data Ascii: 0x3703)+_0x8c6d2f:_0x8c6d2f,_0x51fc21++%(0x1b85+-0x60c+-0x15750x1))?_0x1f8070+=_0x282ab0['charCodeAt'](_0x2b70ca+(-0x3210x3+-0xa13+0x1380))-(-0x1d48+-0x14a2+-0x17-0x22c)!==0x10x1256+-0x945+-0x911?String['fromCharCode'](-0x1fdd+0x2350+0x9d*-0x4&_0x10f1
2025-01-23 17:28:11 UTC	16384	IN	Data Raw: 42 63 51 57 27 2c 27 6f 64 4e 64 4c 63 79 55 27 2c 27 57 50 2f 63 4d 63 4e 63 4a 77 6d 27 2c 27 70 43 6f 63 57 4f 47 49 57 50 65 27 2c 27 63 6d 6b 64 57 51 4c 2f 57 36 69 27 2c 27 66 4c 4c 4f 57 36 56 63 53 57 27 2c 27 57 51 33 63 53 64 5a 63 49 67 65 27 2c 27 71 53 6b 47 6e 77 43 65 27 2c 27 57 4f 79 2b 57 52 42 63 4c 67 34 27 2c 27 65 47 6c 63 52 43 6b 31 57 36 79 27 2c 27 66 38 6b 66 67 43 6f 6c 57 37 6d 27 2c 27 6b 6d 6b 66 57 34 71 68 57 50 43 27 2c 27 41 43 6b 4f 79 6d 6f 64 27 2c 27 57 52 47 43 6d 71 44 58 27 2c 27 65 6d 6b 56 57 50 33 63 4c 6d 6f 4d 27 2c 27 66 53 6f 36 57 35 70 63 49 53 6f 39 27 2c 27 70 43 6f 5a 41 43 6f 67 57 4f 4f 27 2c 27 57 34 68 64 48 38 6b 74 57 51 57 4e 27 2c 27 57 35 71 32 76 38 6b 4e 41 61 27 2c 27 44 6d 6b 51 65 76 6d Data Ascii: BcQW','odNdLcyU','WP/cMcNcJwm','pCocWOGIWPe','cmkdWQL/W6i','fLLOW6VcSW','WQ3cSdZcIge','qSkGnwCe','WOy+WRBcLg4','eGlcRCk1W6y','f8kfgColW7m','kmkfW4qhWPC','ACkOymod','WRGCmqDX','emkVWP3cLmoM','fSo6W5pcISo9','pCoZACogWOO','W4hdH8ktWQWN','W5q2v8kNAa','DmkQevm
2025-01-23 17:28:11 UTC	16384	IN	Data Raw: 61 2c 30 78 33 33 32 29 2b 5f 30 78 34 38 39 36 30 37 28 2d 30 78 32 34 30 2c 30 78 62 62 2c 2d 30 78 31 65 38 2c 2d 30 78 32 62 34 2c 27 47 79 77 44 27 29 2b 27 5c 78 32 30 29 27 2c 27 72 44 66 62 7a 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 61 39 37 38 39 36 29 7b 72 65 74 75 72 6e 20 5f 30 78 61 39 37 38 39 36 28 29 3b 7d 2c 27 42 79 74 72 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 31 35 30 31 62 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 31 35 30 31 62 28 29 3b 7d 2c 27 59 4c 63 61 68 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 38 38 33 31 35 2c 5f 30 78 35 64 35 39 32 39 29 7b 72 65 74 75 72 6e 20 5f 30 78 33 38 38 33 31 35 3e 5f 30 78 35 64 35 39 32 39 3b 7d 2c 27 56 6e 45 72 62 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 33 65 61 33 61 2c 5f 30 Data Ascii: a,0x332)+_0x489607(-0x240,0xbb,-0x1e8,-0x2b4,'GywD')+'\x20)','rDfbz':function(_0xa97896){return _0xa97896();},'Bytrl':function(_0x11501b){return _0x11501b();},'YLcah':function(_0x388315,_0x5d5929){return _0x388315>_0x5d5929;},'VnErb':function(_0x13ea3a,_0
2025-01-23 17:28:11 UTC	16384	IN	Data Raw: 35 37 31 34 62 39 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 39 37 61 31 33 28 5f 30 78 31 38 61 30 31 37 2c 5f 30 78 31 38 61 30 31 37 2d 30 78 31 30 37 2c 5f 30 78 34 38 36 38 35 37 2d 20 2d 30 78 36 30 33 2c 5f 30 78 34 38 65 31 39 36 2d 30 78 39 65 2c 5f 30 78 35 37 31 34 62 39 2d 30 78 32 66 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 36 33 64 66 66 28 5f 30 78 34 62 64 61 66 31 2c 5f 30 78 34 31 63 31 65 33 2c 5f 30 78 32 38 64 36 66 62 2c 5f 30 78 32 65 36 65 34 37 2c 5f 30 78 62 33 39 30 38 36 29 7b 72 65 74 75 72 6e 20 5f 30 78 31 66 37 66 36 30 28 5f 30 78 34 62 64 61 66 31 2c 5f 30 78 34 31 63 31 65 33 2d 30 78 31 65 31 2c 5f 30 78 32 65 36 65 34 37 2d 30 78 64 62 2c 5f 30 78 32 65 36 65 34 37 2d 30 78 31 63 34 2c 5f 30 78 62 33 39 30 38 36 2d Data Ascii: 5714b9){return _0x597a13(_0x18a017,_0x18a017-0x107,_0x486857- -0x603,_0x48e196-0x9e,_0x5714b9-0x2f);}function _0x563dff(_0x4bdaf1,_0x41c1e3,_0x28d6fb,_0x2e6e47,_0xb39086){return _0x1f7f60(_0x4bdaf1,_0x41c1e3-0x1e1,_0x2e6e47-0xdb,_0x2e6e47-0x1c4,_0xb39086-
2025-01-23 17:28:11 UTC	16384	IN	Data Raw: 38 66 2c 27 2a 66 4a 46 27 2c 30 78 33 33 33 2c 30 78 35 33 33 29 2b 5f 30 78 33 31 62 30 38 38 28 30 78 31 61 2c 30 78 33 31 62 2c 30 78 32 34 33 2c 30 78 34 38 39 2c 27 40 4e 79 43 27 29 2b 5f 30 78 32 34 30 33 36 35 28 2d 30 78 31 38 61 2c 2d 30 78 31 37 2c 27 70 56 68 6c 27 2c 2d 30 78 32 31 36 2c 2d 30 78 32 32 38 29 2b 5f 30 78 35 37 36 39 30 65 28 27 24 49 76 7a 27 2c 2d 30 78 31 65 33 2c 30 78 31 66 61 2c 30 78 31 65 2c 30 78 65 34 29 2b 5f 30 78 63 30 32 66 39 37 28 30 78 32 39 65 2c 30 78 32 36 37 2c 27 78 63 30 23 27 2c 30 78 33 35 31 2c 30 78 32 34 37 29 2b 5f 30 78 33 31 62 30 38 38 28 30 78 35 62 30 2c 30 78 36 37 61 2c 30 78 35 64 37 2c 30 78 37 66 66 2c 27 48 25 63 57 27 29 2c 27 7a 72 54 59 62 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 Data Ascii: 8f,'*fJF',0x333,0x533)+_0x31b088(0x1a,0x31b,0x243,0x489,'@NyC')+_0x240365(-0x18a,-0x17,'pVhl',-0x216,-0x228)+_0x57690e('$Ivz',-0x1e3,0x1fa,0x1e,0xe4)+_0xc02f97(0x29e,0x267,'xc0#',0x351,0x247)+_0x31b088(0x5b0,0x67a,0x5d7,0x7ff,'H%cW'),'zrTYb':function(_0x2
2025-01-23 17:28:11 UTC	16384	IN	Data Raw: 2c 5f 30 78 35 31 38 38 62 66 2d 30 78 31 62 38 2c 5f 30 78 35 61 39 30 39 30 2d 30 78 34 34 34 2c 5f 30 78 31 39 36 33 65 34 2c 5f 30 78 33 62 33 38 37 63 2d 30 78 63 32 29 3b 7d 5f 30 78 32 62 39 65 35 63 5b 5f 30 78 35 63 34 66 37 32 28 30 78 39 38 66 2c 30 78 37 34 35 2c 30 78 38 64 65 2c 27 6f 6e 65 63 27 2c 30 78 36 32 31 29 2b 5f 30 78 32 64 33 31 36 38 28 27 52 25 68 74 27 2c 30 78 37 61 35 2c 30 78 39 63 63 2c 30 78 37 64 37 2c 30 78 35 63 37 29 5d 3d 5f 30 78 32 62 39 65 35 63 5b 5f 30 78 34 32 32 61 63 30 28 27 4b 61 55 5a 27 2c 30 78 31 30 35 2c 2d 30 78 66 31 2c 30 78 37 32 2c 30 78 31 36 33 29 2b 5f 30 78 34 32 32 61 63 30 28 27 4d 6c 32 37 27 2c 30 78 65 33 2c 30 78 38 34 2c 30 78 35 61 65 2c 30 78 32 66 31 29 2b 27 68 74 27 5d 3b 7d 66 75 Data Ascii: ,_0x5188bf-0x1b8,_0x5a9090-0x444,_0x1963e4,_0x3b387c-0xc2);}_0x2b9e5c[_0x5c4f72(0x98f,0x745,0x8de,'onec',0x621)+_0x2d3168('R%ht',0x7a5,0x9cc,0x7d7,0x5c7)]=_0x2b9e5c[_0x422ac0('KaUZ',0x105,-0xf1,0x72,0x163)+_0x422ac0('Ml27',0xe3,0x84,0x5ae,0x2f1)+'ht'];}fu

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:11 UTC	572	OUT	GET /ajax/libs/font-awesome/6.4.0/css/all.min.css HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://noxgpt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 17:28:11 UTC	947	IN	HTTP/1.1 200 OK Date: Thu, 23 Jan 2025 17:28:11 GMT Content-Type: text/css; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"6421d693-547f" Last-Modified: Mon, 27 Mar 2023 17:46:59 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 75824 Expires: Tue, 13 Jan 2026 17:28:11 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=h1Vpj4fjeM%2BVE9Y6U%2FOrbHknXYuxcroxakqO3JeW53O%2FyFwMPg2GK7esdIKhPat8uyiliwhePVd9hCtHx3HpwawryADGKm8Vom0PL0JCih1Vx0a8FlHdfoP1%2BvCqM%2F6isvDAdyup"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 90697fb0381d0f7d-EWR alt-svc: h3=":443"; ma=86400
2025-01-23 17:28:11 UTC	422	IN	Data Raw: 33 39 38 34 0d 0a 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 36 2e 34 2e 30 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 73 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 2f 66 72 65 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 32 33 20 46 6f 6e 74 69 63 6f 6e 73 2c 20 49 6e 63 2e 0a 20 2a 2f 0a 2e 66 61 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 76 61 72 28 2d 2d 66 61 2d 73 74 79 6c 65 Data Ascii: 3984/! Font Awesome Free 6.4.0 by @fontawesome - https://fontawesome.com * License - https://fontawesome.com/license/free (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) * Copyright 2023 Fonticons, Inc. */.fa{font-family:var(--fa-style
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 61 6e 74 69 61 6c 69 61 73 65 64 3b 64 69 73 70 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 64 69 73 70 6c 61 79 2c 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 29 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 76 61 72 69 61 6e 74 3a 6e 6f 72 6d 61 6c 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 3b 74 65 78 74 2d 72 65 6e 64 65 72 69 6e 67 3a 61 75 74 6f 7d 2e 66 61 2d 63 6c 61 73 73 69 63 2c 2e 66 61 2d 72 65 67 75 6c 61 72 2c 2e 66 61 2d 73 6f 6c 69 64 2c 2e 66 61 72 2c 2e 66 61 73 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 36 20 46 72 65 65 22 7d 2e 66 61 2d 62 72 61 6e 64 73 2c 2e 66 61 62 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 Data Ascii: ale;-webkit-font-smoothing:antialiased;display:var(--fa-display,inline-block);font-style:normal;font-variant:normal;line-height:1;text-rendering:auto}.fa-classic,.fa-regular,.fa-solid,.far,.fas{font-family:"Font Awesome 6 Free"}.fa-brands,.fab{font-family
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 75 6c 6c 2d 6c 65 66 74 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 66 61 2d 70 75 6c 6c 2d 6d 61 72 67 69 6e 2c 2e 33 65 6d 29 7d 2e 66 61 2d 70 75 6c 6c 2d 72 69 67 68 74 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 66 61 2d 70 75 6c 6c 2d 6d 61 72 67 69 6e 2c 2e 33 65 6d 29 7d 2e 66 61 2d 62 65 61 74 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 62 65 61 74 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c Data Ascii: ull-left{float:left;margin-right:var(--fa-pull-margin,.3em)}.fa-pull-right{float:right;margin-left:var(--fa-pull-margin,.3em)}.fa-beat{-webkit-animation-name:fa-beat;animation-name:fa-beat;-webkit-animation-delay:var(--fa-animation-delay,0s);animation-del
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 38 2c 2e 38 34 2c 2e 34 32 2c 31 29 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2d 66 75 6e 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d 69 6e 67 2c 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 32 38 2c 2e 38 34 2c 2e 34 32 2c 31 29 29 7d 2e 66 61 2d 66 61 64 65 7b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 66 61 64 65 3b 61 6e 69 6d 61 74 69 6f 6e 2d 6e 61 6d 65 3a 66 61 2d 66 61 64 65 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 Data Ascii: tion-timing-function:var(--fa-animation-timing,cubic-bezier(.28,.84,.42,1));animation-timing-function:var(--fa-animation-timing,cubic-bezier(.28,.84,.42,1))}.fa-fade{-webkit-animation-name:fa-fade;animation-name:fa-fade;-webkit-animation-iteration-count:v
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 65 6c 61 79 2c 30 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 69 72 65 63 74 69 6f 6e 2c 6e 6f 72 6d 61 6c 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 31 73 29 3b 61 6e 69 6d 61 74 69 Data Ascii: a-animation-delay,0s);animation-delay:var(--fa-animation-delay,0s);-webkit-animation-direction:var(--fa-animation-direction,normal);animation-direction:var(--fa-animation-direction,normal);-webkit-animation-duration:var(--fa-animation-duration,1s);animati
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 32 73 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 2c 32 73 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 3a 76 61 72 28 2d 2d 66 61 2d 61 6e 69 6d 61 74 69 6f 6e 2d 69 74 65 72 61 74 69 6f 6e 2d 63 6f 75 6e 74 2c 69 6e 66 69 6e 69 74 65 29 3b 2d 77 65 62 6b 69 74 2d 61 6e 69 6d 61 74 69 6f 6e 2d 74 69 6d Data Ascii: :var(--fa-animation-duration,2s);animation-duration:var(--fa-animation-duration,2s);-webkit-animation-iteration-count:var(--fa-animation-iteration-count,infinite);animation-iteration-count:var(--fa-animation-iteration-count,infinite);-webkit-animation-tim
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 3b 74 72 61 6e 73 69 74 69 6f 6e 2d 64 75 72 61 74 69 6f 6e 3a 30 73 7d 7d 40 2d 77 65 62 6b 69 74 2d 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 7b 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 34 35 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 73 63 61 6c 65 2c 31 2e 32 35 29 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 7b 30 25 2c 39 30 25 7b 2d 77 65 62 6b 69 74 2d Data Ascii: ition-duration:0s;transition-duration:0s}}@-webkit-keyframes fa-beat{0%,90%{-webkit-transform:scale(1);transform:scale(1)}45%{-webkit-transform:scale(var(--fa-beat-scale,1.25));transform:scale(var(--fa-beat-scale,1.25))}}@keyframes fa-beat{0%,90%{-webkit-
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 6f 75 6e 63 65 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 20 74 72 61 6e 73 6c 61 74 65 59 28 30 29 7d 31 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 6f 75 6e 63 65 2d Data Ascii: );transform:scale(1) translateY(0)}to{-webkit-transform:scale(1) translateY(0);transform:scale(1) translateY(0)}}@keyframes fa-bounce{0%{-webkit-transform:scale(1) translateY(0);transform:scale(1) translateY(0)}10%{-webkit-transform:scale(var(--fa-bounce-
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 2d 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 6f 70 61 63 69 74 79 2c 2e 34 29 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 31 29 7d 35 30 25 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 73 63 61 6c 65 2c 31 2e 31 32 35 29 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 73 63 61 6c 65 28 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 73 63 61 6c 65 2c 31 2e 31 32 35 29 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 62 65 61 74 2d 66 61 64 65 7b 30 25 2c 74 6f 7b 6f 70 61 63 69 74 79 3a 76 61 72 28 2d 2d 66 61 2d 62 65 61 74 2d 66 61 64 65 2d 6f 70 61 63 Data Ascii: --fa-beat-fade-opacity,.4);-webkit-transform:scale(1);transform:scale(1)}50%{opacity:1;-webkit-transform:scale(var(--fa-beat-fade-scale,1.125));transform:scale(var(--fa-beat-fade-scale,1.125))}}@keyframes fa-beat-fade{0%,to{opacity:var(--fa-beat-fade-opac
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 72 6d 3a 72 6f 74 61 74 65 28 2d 31 32 64 65 67 29 7d 33 36 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 32 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 32 64 65 67 29 7d 34 30 25 2c 74 6f 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 30 64 65 67 29 7d 7d 40 6b 65 79 66 72 61 6d 65 73 20 66 61 2d 73 68 61 6b 65 7b 30 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 35 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 2d 31 35 64 65 67 29 7d 34 25 7b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 35 64 65 67 29 Data Ascii: rm:rotate(-12deg)}36%{-webkit-transform:rotate(12deg);transform:rotate(12deg)}40%,to{-webkit-transform:rotate(0deg);transform:rotate(0deg)}}@keyframes fa-shake{0%{-webkit-transform:rotate(-15deg);transform:rotate(-15deg)}4%{-webkit-transform:rotate(15deg)

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:11 UTC	550	OUT	GET /ajax/libs/jquery/3.7.1/jquery.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://noxgpt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 17:28:11 UTC	962	IN	HTTP/1.1 200 OK Date: Thu, 23 Jan 2025 17:28:11 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"64ed75bb-76fe" Last-Modified: Tue, 29 Aug 2023 04:36:11 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 593779 Expires: Tue, 13 Jan 2026 17:28:11 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=hORATxhZfru3aqmgXNZ2oEUXHzC5gkaAu06LO9iqd45Yz5pMcMwzJKllgycfj15d8JIuoSH2jog5%2FZLGMe%2B3LaBUkOJVVqXBP%2F11WSYRlRZQvq94hSB%2BbBOkqmNGgs%2Fgnk6KpbGm"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 90697fb038f942d5-EWR alt-svc: h3=":443"; ma=86400
2025-01-23 17:28:11 UTC	407	IN	Data Raw: 37 62 65 65 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 7bee/! jQuery v3.7.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 61 65 3d 6f 65 2e 73 6c 69 63 65 2c 67 3d 6f 65 2e 66 6c 61 74 3f 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 65 2e 66 6c 61 74 2e 63 61 6c 6c 28 65 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6f 65 2e 63 6f 6e 63 61 74 2e 61 70 70 6c 79 28 5b 5d 2c 65 29 7d 2c 73 3d 6f 65 2e 70 75 73 68 2c 73 65 3d 6f 65 2e 69 6e 64 65 78 4f 66 2c 6e 3d 7b 7d 2c 69 3d 6e 2e 74 6f 53 74 72 69 6e 67 2c 75 65 3d 6e 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 6f 3d 75 65 2e 74 6f 53 74 72 69 6e 67 2c 61 3d 6f 2e 63 61 6c 6c 28 4f 62 6a 65 63 74 29 2c 6c 65 3d 7b 7d 2c 76 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 65 26 26 Data Ascii: etPrototypeOf,ae=oe.slice,g=oe.flat?function(e){return oe.flat.call(e)}:function(e){return oe.concat.apply([],e)},s=oe.push,se=oe.indexOf,n={},i=n.toString,ue=n.hasOwnProperty,o=ue.toString,a=o.call(Object),le={},v=function(e){return"function"==typeof e&&
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 61 6c 6c 28 65 2c 74 2c 65 29 7d 29 29 7d 2c 73 6c 69 63 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 61 65 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 29 7d 2c 66 69 72 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 30 29 7d 2c 6c 61 73 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 71 28 2d 31 29 7d 2c 65 76 65 6e 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 75 73 68 53 74 61 63 6b 28 63 65 2e 67 72 65 70 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 74 2b 31 29 25 32 7d 29 29 7d 2c 6f 64 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 Data Ascii: all(e,t,e)}))},slice:function(){return this.pushStack(ae.apply(this,arguments))},first:function(){return this.eq(0)},last:function(){return this.eq(-1)},even:function(){return this.pushStack(ce.grep(this,function(e,t){return(t+1)%2}))},odd:function(){retu
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 65 7d 2c 6e 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 30 3b 69 66 28 63 28 65 29 29 7b 66 6f 72 28 6e 3d 65 2e 6c 65 6e 67 74 68 3b 72 3c 6e 3b 72 2b 2b 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 72 20 69 6e 20 65 29 69 66 28 21 31 3d 3d 3d 74 2e 63 61 6c 6c 28 65 5b 72 5d 2c 72 2c 65 5b 72 5d 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 65 7d 2c 74 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 6e 3d 22 22 2c 72 3d 30 2c 69 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 21 69 29 77 68 69 6c 65 28 74 3d 65 5b 72 2b 2b 5d 29 6e 2b 3d 63 65 2e 74 65 78 74 28 74 29 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 69 7c Data Ascii: e},n)},each:function(e,t){var n,r=0;if(c(e)){for(n=e.length;r<n;r++)if(!1===t.call(e[r],r,e[r]))break}else for(r in e)if(!1===t.call(e[r],r,e[r]))break;return e},text:function(e){var t,n="",r=0,i=e.nodeType;if(!i)while(t=e[r++])n+=ce.text(t);return 1===i\|
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 74 26 26 74 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 65 3d 3d 3d 6e 7c 7c 21 28 21 6e 7c 7c 31 21 3d 3d 6e 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 28 65 2e 63 6f 6e 74 61 69 6e 73 3f 65 2e 63 6f 6e 74 61 69 6e 73 28 6e 29 3a 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 26 26 31 36 26 65 2e 63 6f 6d 70 61 72 65 44 6f 63 75 6d 65 6e 74 50 6f 73 69 74 69 6f 6e 28 6e 29 29 29 7d 3b 76 61 72 20 66 3d 2f 28 5b 5c 30 2d 5c 78 31 66 5c 78 37 66 5d 7c 5e 2d 3f 5c 64 29 7c 5e 2d 24 7c 5b 5e 5c 78 38 30 2d 5c 75 46 46 46 46 5c 77 2d 5d 2f 67 3b 66 75 6e 63 74 69 6f 6e 20 70 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 3f 22 5c 30 22 3d 3d Data Ascii: .contains=function(e,t){var n=t&&t.parentNode;return e===n\|\|!(!n\|\|1!==n.nodeType\|\|!(e.contains?e.contains(n):e.compareDocumentPosition&&16&e.compareDocumentPosition(n)))};var f=/([\0-\x1f\x7f]\|^-?\d)\|^-$\|[^\x80-\uFFFF\w-]/g;function p(e,t){return t?"\0"==
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 5b 2b 2d 5d 7c 29 28 5c 5c 64 2a 29 6e 7c 29 22 2b 67 65 2b 22 2a 28 3f 3a 28 5b 2b 2d 5d 7c 29 22 2b 67 65 2b 22 2a 28 5c 5c 64 2b 29 7c 29 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 22 2c 22 69 22 29 2c 62 6f 6f 6c 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 28 3f 3a 22 2b 66 2b 22 29 24 22 2c 22 69 22 29 2c 6e 65 65 64 73 43 6f 6e 74 65 78 74 3a 6e 65 77 20 52 65 67 45 78 70 28 22 5e 22 2b 67 65 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 67 65 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 67 65 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 4e 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 Data Ascii: [+-]\|)(\\d)n\|)"+ge+"(?:([+-]\|)"+ge+"(\\d+)\|))"+ge+"\\)\|)","i"),bool:new RegExp("^(?:"+f+")$","i"),needsContext:new RegExp("^"+ge+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\\("+ge+"((?:-\\d)?\\d)"+ge+"\\)\|)(?=[^-]\|$)","i")},N=/^(?:input\|select\|t
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 73 74 28 74 29 29 29 7b 69 66 28 63 3d 74 2c 66 3d 65 2c 31 3d 3d 3d 70 26 26 28 78 2e 74 65 73 74 28 74 29 7c 7c 6d 2e 74 65 73 74 28 74 29 29 29 7b 28 66 3d 48 2e 74 65 73 74 28 74 29 26 26 55 28 65 2e 70 61 72 65 6e 74 4e 6f 64 65 29 7c 7c 65 29 3d 3d 65 26 26 6c 65 2e 73 63 6f 70 65 7c 7c 28 28 73 3d 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 73 3d 63 65 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 28 73 29 3a 65 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 2c 73 3d 53 29 29 2c 6f 3d 28 6c 3d 59 28 74 29 29 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 6f 2d 2d 29 6c 5b 6f 5d 3d 28 73 3f 22 23 22 2b 73 3a 22 3a 73 63 6f 70 65 22 29 2b 22 20 22 2b 51 28 6c 5b 6f 5d 29 3b 63 3d 6c 2e 6a 6f 69 6e 28 22 2c 22 29 7d 74 72 79 7b Data Ascii: st(t))){if(c=t,f=e,1===p&&(x.test(t)\|\|m.test(t))){(f=H.test(t)&&U(e.parentNode)\|\|e)==e&&le.scope\|\|((s=e.getAttribute("id"))?s=ce.escapeSelector(s):e.setAttribute("id",s=S)),o=(l=Y(t)).length;while(o--)l[o]=(s?"#"+s:":scope")+" "+Q(l[o]);c=l.join(",")}try{
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 65 6e 74 45 6c 65 6d 65 6e 74 26 26 28 72 3d 28 54 3d 6e 29 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 2c 43 3d 21 63 65 2e 69 73 58 4d 4c 44 6f 63 28 54 29 2c 69 3d 72 2e 6d 61 74 63 68 65 73 7c 7c 72 2e 77 65 62 6b 69 74 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 7c 7c 72 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 2c 72 2e 6d 73 4d 61 74 63 68 65 73 53 65 6c 65 63 74 6f 72 26 26 79 65 21 3d 54 26 26 28 74 3d 54 2e 64 65 66 61 75 6c 74 56 69 65 77 29 26 26 74 2e 74 6f 70 21 3d 3d 74 26 26 74 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 22 75 6e 6c 6f 61 64 22 2c 4d 29 2c 6c 65 2e 67 65 74 42 79 49 64 3d 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 64 3d 63 Data Ascii: entElement&&(r=(T=n).documentElement,C=!ce.isXMLDoc(T),i=r.matches\|\|r.webkitMatchesSelector\|\|r.msMatchesSelector,r.msMatchesSelector&&ye!=T&&(t=T.defaultView)&&t.top!==t&&t.addEventListener("unload",M),le.getById=$(function(e){return r.appendChild(e).id=c
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 43 29 72 65 74 75 72 6e 20 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 65 29 7d 2c 64 3d 5b 5d 2c 24 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3b 72 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 65 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 22 3c 61 20 69 64 3d 27 22 2b 53 2b 22 27 20 68 72 65 66 3d 27 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 69 64 3d 27 22 2b 53 2b 22 2d 5c 72 5c 5c 27 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 20 73 65 6c 65 63 74 65 64 3d 27 27 3e 3c 2f 6f 70 74 69 6f 6e 3e 3c 2f 73 65 6c 65 63 74 3e 22 2c 65 2e 71 75 65 72 79 53 65 Data Ascii: .getElementsByClassName&&C)return t.getElementsByClassName(e)},d=[],$(function(e){var t;r.appendChild(e).innerHTML="<a id='"+S+"' href='' disabled='disabled'></a><select id='"+S+"-\r\\' disabled='disabled'><option selected=''></option></select>",e.querySe
2025-01-23 17:28:11 UTC	1369	IN	Data Raw: 74 63 68 65 73 53 65 6c 65 63 74 6f 72 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 56 28 65 29 2c 43 26 26 21 68 5b 74 2b 22 20 22 5d 26 26 28 21 64 7c 7c 21 64 2e 74 65 73 74 28 74 29 29 29 74 72 79 7b 76 61 72 20 6e 3d 69 2e 63 61 6c 6c 28 65 2c 74 29 3b 69 66 28 6e 7c 7c 6c 65 2e 64 69 73 63 6f 6e 6e 65 63 74 65 64 4d 61 74 63 68 7c 7c 65 2e 64 6f 63 75 6d 65 6e 74 26 26 31 31 21 3d 3d 65 2e 64 6f 63 75 6d 65 6e 74 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 20 6e 7d 63 61 74 63 68 28 65 29 7b 68 28 74 2c 21 30 29 7d 72 65 74 75 72 6e 20 30 3c 49 28 74 2c 54 2c 6e 75 6c 6c 2c 5b 65 5d 29 2e 6c 65 6e 67 74 68 7d 2c 49 2e 63 6f 6e 74 61 69 6e 73 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 28 65 2e 6f 77 6e 65 72 44 6f 63 Data Ascii: tchesSelector=function(e,t){if(V(e),C&&!h[t+" "]&&(!d\|\|!d.test(t)))try{var n=i.call(e,t);if(n\|\|le.disconnectedMatch\|\|e.document&&11!==e.document.nodeType)return n}catch(e){h(t,!0)}return 0<I(t,T,null,[e]).length},I.contains=function(e,t){return(e.ownerDoc

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:11 UTC	551	OUT	GET /b3c80fe252.js HTTP/1.1 Host: kit.fontawesome.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://noxgpt.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://noxgpt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 17:28:11 UTC	469	IN	HTTP/1.1 403 Forbidden Date: Thu, 23 Jan 2025 17:28:11 GMT Content-Length: 9 Connection: close access-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-token access-control-allow-methods: GET, OPTIONS access-control-allow-origin: * access-control-max-age: 3000 Cache-Control: max-age=0, private, must-revalidate x-request-id: GB1idlTFs9isXKZonAKh CF-Cache-Status: MISS Server: cloudflare CF-RAY: 90697fb04ffa9e16-EWR
2025-01-23 17:28:11 UTC	9	IN	Data Raw: 46 6f 72 62 69 64 64 65 6e Data Ascii: Forbidden

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:11 UTC	573	OUT	GET /logo.jpg HTTP/1.1 Host: noxgpt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://noxgpt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 17:28:12 UTC	343	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:28:10 GMT Content-Type: image/jpeg Content-Length: 129662 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Thu, 22 Feb 2024 18:04:34 GMT Accept-Ranges: bytes
2025-01-23 17:28:12 UTC	16041	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 60 00 60 00 00 ff db 00 43 00 03 02 02 03 02 02 03 03 03 03 04 03 03 04 05 08 05 05 04 04 05 0a 07 07 06 08 0c 0a 0c 0c 0b 0a 0b 0b 0d 0e 12 10 0d 0e 11 0e 0b 0b 10 16 10 11 13 14 15 15 15 0c 0f 17 18 16 14 18 12 14 15 14 ff db 00 43 01 03 04 04 05 04 05 09 05 05 09 14 0d 0b 0d 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 14 ff c0 00 11 08 05 bd 05 94 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIF``CC"}!1AQa"q2
2025-01-23 17:28:12 UTC	16384	IN	Data Raw: 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 a6 86 17 99 d5 55 59 99 8e 00 51 93 c9 c7 4a 86 be b0 ff 00 82 69 fc 0b 1f 1b 7f 6a 2f 0f 35 ed b1 b8 d0 3c 32 0e bd 7f c7 ca 4c 4c 3c 88 cf fb d3 18 ce de ea af e8 70 01 fa ff 00 fb 12 fc 06 4f d9 e7 f6 6e f0 9f 85 67 84 43 ad 4b 0f f6 96 b1 c6 09 bc 98 06 91 4f ae c1 b6 2c f7 11 8a f7 85 01 78 14 8a 77 28 34 ea 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 64 8c cb f7 40 35 f9 b5 ff 00 05 6c fd ae 7f e1 0f f0 c0 f8 35 e1 8b c5 4d 67 5b 81 67 f1 05 c4 2d f3 5b d9 37 dc b7 c8 e8 d2 e0 16 07 fe 59 80 39 12 64 7d b7 fb 44 7c 70 d1 bf 67 7f 84 5e 22 f1 de b5 fb c8 b4 b8 3f 71 6a 0e 1a ea e1 ce d8 62 1f ef 39 00 9e c0 31 e8 0d 7f 39 7f 10 bc 79 ad 7c Data Ascii: ((((((((UYQJij/5<2LL<pOngCKO,xw(4(((((d@5l5Mg[g-[7Y9d}D\|pg^"?qjb919y\|
2025-01-23 17:28:12 UTC	16384	IN	Data Raw: 82 2b 95 5b 85 0b ec 3c d2 b8 ed b7 1d a8 03 c0 68 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 9e b1 86 5c e6 80 35 7c 2b e1 7d 4f c6 9e 21 d3 34 2d 16 ca 6d 43 57 d4 ee 52 d2 d2 d2 15 cb 4b 2b b0 55 51 f8 91 5f d0 97 ec 6f fb 2b e8 df b2 9f c2 2b 2f 0e db 79 77 5e 22 bc db 77 ad ea 8a 39 b9 ba 2b f7 54 f5 f2 e3 19 54 1e 99 24 65 9a be 47 ff 00 82 49 fe c7 87 c3 ba 3a fc 6c f1 5d 98 1a 96 a3 13 45 e1 ab 69 97 e6 82 dd 81 59 2e 88 23 ef 48 32 a8 7f b9 b8 f2 24 18 fd 35 5f ba 28 01 68 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 b9 ff 00 1b 78 df 43 f8 73 e1 8d 47 c4 7e 25 d5 2d f4 5d 0b 4f 8f cd b9 be bb 7d a9 1a f0 3e a4 92 40 00 64 92 40 00 93 8a 00 d5 ba bc Data Ascii: +[<h(((((((((\5\|+}O!4-mCWRK+UQ_o++/yw^"w9+TT$eGI:l]EiY.#H2$5_(h((((((xCsG~%-]O}>@d@
2025-01-23 17:28:12 UTC	16384	IN	Data Raw: 00 05 72 f1 67 80 4d 9e 83 f1 6e da 7f 1a e8 3c 46 ba e5 be d1 a9 c0 33 d5 c1 c2 dc 01 ee 55 fb ee 6e 84 03 f6 4d 5b 72 83 eb 4e ae 07 e1 3f c6 cf 04 fc 70 f0 ba 6b fe 06 f1 15 9f 88 34 c6 c6 ff 00 b3 b1 12 c0 c7 27 6c d1 90 1e 26 e0 f0 e0 1e fd 2b bd 56 dc 33 40 0b 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 59 3e 25 d7 ad fc 33 a0 ea 9a bd d9 db 69 a7 da c9 77 31 ff 00 a6 68 a5 9b f4 53 5a d5 f3 b7 ed fd e3 6f f8 40 7f 64 0f 89 fa 88 97 ca 96 e7 4b 3a 5c 65 4e 18 b5 d3 a5 b1 0b ea 71 29 3e c0 67 b5 00 7f 3e 5e 22 d7 2e bc 4d e2 0d 4b 58 bd 60 f7 9a 85 cc 97 73 b0 18 06 49 18 b3 1f cc 9a cd a1 ba d1 40 05 14 51 40 05 14 51 40 05 14 51 40 05 14 Data Ascii: rgMn<F3UnM[rN?pk4'l&+V3@EPEPEPEPEPEPEPEPEPEPEPEPEPY>%3iw1hSZo@dK:\eNq)>g>^".MKX`sI@Q@Q@Q@
2025-01-23 17:28:12 UTC	16384	IN	Data Raw: 31 ed e7 46 32 d0 93 fd e1 b9 3b 9d 82 bf 44 f4 9d 72 c3 c4 3a 5d ae a5 a5 5f 5a ea 5a 6d d4 6b 2d bd e5 a4 cb 2c 33 21 fb ac 8e a4 86 07 b1 06 80 34 e8 a4 5e 94 b4 00 51 45 14 00 51 45 14 00 51 45 14 00 51 45 14 00 53 76 0c 93 dc d3 a8 a0 0f 82 7f e0 a2 df f0 4f db 3f 8e 9a 25 e7 c4 1f 00 69 e9 6b f1 1e ca 33 25 d5 9c 0a 11 75 b8 94 67 69 03 fe 5e 00 fb ad fc 5f 71 bf 84 af e2 b4 f6 ef 0c 8f 1b ab 46 e8 4a b2 b2 e0 a9 1c 10 47 62 3b d7 f5 3b b4 64 9f 5a fc 66 ff 00 82 b7 7e cb 96 ff 00 0c be 23 58 fc 50 f0 ed 9a c1 a0 f8 ae 76 8f 53 82 25 c2 43 a9 00 5c bf 03 00 4c a1 9b d4 ba 48 7b 8a 00 fc f2 a2 95 be f1 f5 a4 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 8a 28 a0 02 94 31 da 47 6a 4a 28 03 ec 1f f8 26 5f ed 14 7e 06 fe Data Ascii: 1F2;Dr:]_ZZmk-,3!4^QEQEQEQESvO?%ik3%ugi^_qFJGb;;dZf~#XPvS%C\LH{(((((((1GjJ(&_~
2025-01-23 17:28:12 UTC	16384	IN	Data Raw: 68 bd 7d 07 4d c0 91 3c 33 a6 ca ad 79 2f 7c 4f 30 ca c4 3d 55 72 dd 79 42 2b f4 3b f6 79 fd 91 fe 19 fe cc ba 38 b6 f0 56 86 b1 6a 52 47 b2 eb 5c bd c4 d7 f7 43 fd a9 48 f9 57 20 1d 88 15 32 33 b7 3c d7 b3 6d 1f d6 80 39 5f 87 9f 0c bc 2b f0 9f c2 b0 78 73 c1 da 0d 97 87 74 58 09 2b 69 63 1e c0 58 f0 59 8f 57 63 81 96 62 49 c7 26 ba ad b4 aa 36 8c 52 d0 02 0e 29 68 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 28 a2 80 0a 29 8d 26 d6 c1 ae 43 e2 47 c5 9f 08 fc 1d f0 bc de 21 f1 af 88 2c 7c 39 a3 c3 c3 5c 5e cb 82 ed fd c8 d4 65 a4 6e 0f ca a0 b1 f4 a0 0e bc b1 dd 8e 2b c4 ff 00 68 9f db 0b e1 97 ec c7 a4 99 fc 63 ad a9 d5 a4 4d f6 da 06 9f 89 af ee 3d 31 1e 40 45 3f df 90 aa f6 ce 78 af cf 3f da 8b fe 0a f5 ae f8 ad ae b4 1f 83 76 92 78 6f 4b 63 b1 fc 49 Data Ascii: h}M<3y/\|O0=UryB+;y8VjRG\CHW 23<m9_+xstX+icXYWcbI&6R)h(((()&CG!,\|9\^en+hcM=1@E?x?vxoKcI
2025-01-23 17:28:12 UTC	16384	IN	Data Raw: 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a2 8a 00 28 a7 2a 8d b9 26 b5 3c 3b e1 9d 57 c5 fa cd a6 8d a1 69 b7 5a c6 b1 79 20 8a da c6 c6 16 9a 69 9c f4 54 45 04 93 f4 a0 0c b5 4d c3 39 c5 7a 2f c1 7f 80 3e 3b fd a0 bc 4e 9a 17 81 7c 3d 75 ae 5d 64 19 e6 8c 04 b7 b5 42 7e fc d2 b7 ca 83 ea 72 7a 0c 9e 2b ef 8f d9 77 fe 08 f7 a8 6a 89 65 af 7c 69 d4 5f 4b b4 6f de 2f 85 74 a9 41 b8 60 40 c0 b8 9c 65 53 dd 63 dc 71 fc 6a 72 07 ea 0f 80 7e 1b f8 63 e1 6f 86 6d 3c 3f e1 3d 0e c7 c3 fa 35 b0 fd dd a5 84 22 34 cf 76 38 e5 98 f7 66 24 9e e4 d0 07 c4 bf b2 cf fc 12 67 c1 3f 0b 16 d7 5b f8 9f 25 af c4 1f 12 af ce 34 df 2c ff 00 64 db 36 3a 6c 61 9b 83 ef 20 0b cf fa bc 80 d5 f7 bd 9d 95 bd 9d a4 56 f6 f0 c7 05 bc 68 23 8e 18 d0 2a 22 81 80 15 47 00 60 0e 07 1c 55 Data Ascii: (((((&<;WiZy iTEM9z/>;N\|=u]dB~rz+wje\|i_Ko/tA`@eScqjr~com<?=5"4v8f$g?[%4,d6:la Vh#"G`U
2025-01-23 17:28:12 UTC	15317	IN	Data Raw: e4 ab 8c c9 a8 6a 37 77 39 c6 7f 85 e5 2b df b0 1d bb d0 07 f3 fa 23 dc 32 2b b0 f0 6f c1 df 1d 7c 45 64 ff 00 84 5b c1 ba f7 88 c3 9c 06 d2 f4 c9 ae 47 5c 75 45 20 63 bf a5 7f 46 1e 13 fd 9e 3e 17 78 17 69 f0 f7 c3 af 0b e8 ee b9 fd ed 9e 8f 6f 1c 87 3d 72 e1 37 1e 83 a9 ec 2b d0 fc b1 d3 b5 00 7e 09 78 0f fe 09 67 fb 43 f8 df 63 cd e1 3b 5f 0c 5b 3f 49 f5 ed 46 28 bf 38 e3 2f 20 fc 52 be 9a f8 71 ff 00 04 4b ff 00 55 2f 8f be 23 e7 a0 7b 3f 0e d8 fe 27 13 cd f9 73 17 bd 7e aa 6d 14 9b 00 5c 76 a0 0f 97 7e 17 ff 00 c1 35 ff 00 67 ff 00 86 32 43 73 0f 81 e3 f1 15 fc 63 3f 6a f1 24 ed 7d 93 ef 13 7e e7 3e e1 2b e9 5d 2b 47 b1 d1 6c 62 b1 d3 ac e1 d3 ec a1 5d 91 5b da c6 22 8e 35 c9 38 55 50 00 19 27 a5 5e e9 c5 2d 00 33 68 f5 3f 9d 2a a8 55 c0 18 14 ea 28 Data Ascii: j7w9+#2+o\|Ed[G\uE cF>xio=r7+~xgCc;_[?IF(8/ RqKU/#{?'s~m\v~5g2Csc?j$}~>+]+Glb]["58UP'^-3h?*U(

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:12 UTC	540	OUT	GET /typewriter-effect@latest/dist/core.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://noxgpt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 17:28:12 UTC	545	IN	HTTP/1.1 302 Found Date: Thu, 23 Jan 2025 17:28:12 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, s-maxage=600, max-age=60 location: /typewriter-effect@2.21.0/dist/core.js vary: Accept via: 1.1 fly.io fly-request-id: 01JJA2RQBJ5NZN7Z0B69HY950G-lga CF-Cache-Status: HIT Age: 569 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 90697fb55cf24234-EWR
2025-01-23 17:28:12 UTC	66	IN	Data Raw: 33 63 0d 0a 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 2f 74 79 70 65 77 72 69 74 65 72 2d 65 66 66 65 63 74 40 32 2e 32 31 2e 30 2f 64 69 73 74 2f 63 6f 72 65 2e 6a 73 0d 0a Data Ascii: 3cFound. Redirecting to /typewriter-effect@2.21.0/dist/core.js

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:12 UTC	647	OUT	GET /ajax/libs/font-awesome/6.4.0/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://noxgpt.com sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://cdnjs.cloudflare.com/ajax/libs/font-awesome/6.4.0/css/all.min.css Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 17:28:12 UTC	978	IN	HTTP/1.1 200 OK Date: Thu, 23 Jan 2025 17:28:12 GMT Content-Type: application/octet-stream; charset=utf-8 Content-Length: 150124 Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: "6421d693-24a6c" Last-Modified: Mon, 27 Mar 2023 17:46:59 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 38714 Expires: Tue, 13 Jan 2026 17:28:12 GMT Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=kHvk8V%2FN7f%2BEw7eJiGQjuyIgDjiz9QwDH73Ld67%2B31sGiO3sZmwL8YFpdW3Czqs%2BAM5EEd7RENvLlpGOAvqVXk5Auim0rKFQ2pmiUJOKMV9lz05iyGMQ4JOzQTzRDMK4fdm6yG9K"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 90697fb6ac9f726e-EWR alt-svc: h3=":443"; ma=86400
2025-01-23 17:28:12 UTC	391	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 02 4a 6c 00 0a 00 00 00 05 b8 08 00 02 4a 1e 03 04 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 01 38 02 24 04 20 06 60 03 ab 3c 00 81 91 04 ca 94 fe 1c cb ab 40 05 87 70 07 20 a5 03 dc 92 51 20 80 f3 00 00 b0 d5 3b 0f 23 52 34 7b 78 8a e8 59 ed c5 03 a0 aa aa aa aa 19 09 81 1d aa 1a 00 f8 ff e0 47 3f f9 d9 2f 7e f5 9b df fd e1 4f 7f f9 db 3f fe f5 1f ff f5 3f ff f7 9f 02 83 71 f7 0f 84 69 d9 8e cb ed f1 fa fc 86 fe 6b ed df 3e 67 f7 7d c0 09 f1 84 85 05 ba 21 52 4c 36 c2 a5 6e c2 3a 42 b1 f1 63 7c d0 18 e0 b5 b0 bf c7 29 e4 e4 a7 6f b6 00 79 12 75 32 6f cd a6 10 54 84 c1 44 c5 65 03 ee 49 ba 8b ff 88 d7 db 41 b8 76 02 f1 41 ef 3a 30 c9 1e 32 9e 3e 2f 07 96 a9 50 92 42 ef 97 f0 26 62 a5 57 6b 96 78 67 52 1c Data Ascii: wOF2JlJ8$ `<@p Q ;#R4{xYG?/~O??qik>g}!RL6n:Bc\|)oyu2oTDeIAvA:02>/PB&bWkxgR
2025-01-23 17:28:12 UTC	1369	IN	Data Raw: d0 1e fa 68 db cf db 23 f4 01 b1 3f 10 e7 98 d2 e6 c0 f9 79 b2 72 fe df 73 ab ea de ba 15 6e 85 d4 9d ab bb a6 bb ba a7 67 a6 43 4d 77 4d d8 d9 a9 cd b3 5a 85 51 dc 55 6e e5 55 00 46 48 28 11 d4 64 01 06 06 44 10 d8 40 fb 61 1b 09 6c bc 4e 20 a2 1a 47 8c 0d 5e 67 8c df 7b 8c 33 b6 9f fd d7 f6 b7 e1 05 7a 7f 9e 37 9d fd 3b b7 d4 f7 ee 2b 6d a6 bf 99 a7 99 a7 3e 4d 33 23 59 96 35 a6 d9 80 01 d1 8c 0d 0e 28 40 82 21 21 71 1a 21 5d 49 d8 94 ad 4e eb 4a fd 9b ad a4 75 25 d9 92 ed 6c 4d 7e f7 ee 6f d9 ce 96 9f ed 03 44 04 b5 56 91 59 3c 0d f4 34 3d d0 d0 cd 0c cc 34 43 c3 f4 fc cc d0 cc 30 63 3b f6 3a 78 c3 ba ad 32 3a a3 38 a2 b2 2b 2a ae a8 ed 8f 8a 8a ca 2a 6a eb e2 ca 2a 7a ed 6e ab a8 e8 a2 a2 a2 f6 2a a7 3d 2b ae ac e2 0e 6a ab b8 8b da 6a ab 3d 27 fe a8 Data Ascii: h#?yrsngCMwMZQUnUFH(dD@alN G^g{3z7;+m>M3#Y5(@!!q!]INJu%lM~oDVY<4=4C0c;:x2:8+*jzn*=+jj='
2025-01-23 17:28:12 UTC	1369	IN	Data Raw: cd 25 7e 37 fe 8f ab 7e d7 ad 86 50 c3 e7 f5 0c 49 70 52 ab 44 d6 50 fe 8b 9d 9f 49 9c cf 0c 16 e5 81 e8 59 c3 ff 67 06 5b ed b0 ba dd a3 f9 f8 3c d0 c8 30 f6 3d d4 04 67 a0 d5 d5 e4 76 d4 60 ec 7c 48 e6 9a 22 df dd fd 92 49 ff 7c 2b 9c 1c 37 b8 12 da 5a ad 05 b1 e2 e5 e5 91 97 6f 85 6a a5 e4 a0 1b 1b d9 8f c2 b3 e6 b1 ab bf c8 18 1a 26 7c 02 eb 1b 2b 2f fb e6 93 36 19 9c f0 09 e5 75 ee 7b ab 8c 2d de 8b 77 e0 6e 51 c6 da 82 f8 17 f6 85 e4 53 9a f9 91 de e0 27 79 60 fc 97 d6 73 ce f8 39 2f b4 46 96 ab 9f 2f cf ed e7 da 4f a3 ec f3 b0 df a2 16 c7 06 db 9a dc 71 6c bf a8 d0 da 99 d7 fb ff 83 c6 1c bb 18 dd 8c 9f cb 3a 6e ca 7e 14 7b 2c c1 bb 6b 22 d5 88 c6 02 2d ff 24 2f 82 b8 50 bf bf 24 eb ad 5d 9e be e6 d3 14 63 83 2b 6a 9e 78 77 5e 7f 6d 5f 4b 6c b3 fc Data Ascii: %~7~PIpRDPIYg[<0=gv`\|H"I\|+7Zoj&\|+/6u{-wnQS'y`s9/F/Oql:n~{,k"-$/P$]c+jxw^m_Kl
2025-01-23 17:28:12 UTC	1369	IN	Data Raw: cd 77 fc c2 1f f9 1b 7f e7 9f fc 8b ff 29 a2 a2 2b b6 d2 29 af 8a a9 a4 6a aa 96 ea a9 81 da aa 8f 86 6b 84 46 69 b4 26 6b b6 e6 68 ae e6 69 a1 16 69 a9 56 69 8d d6 69 8b 76 e8 98 8e eb a4 4e e9 b4 ce e8 ac ce e9 82 2e e9 b2 ee e9 b1 9e e8 8d bc be ea 7b fd 24 e9 37 fd a9 ff 2c aa c5 b1 34 96 ce 72 58 21 2b 61 ad ad ad 75 b0 ce 36 d1 26 d9 74 5b 60 5b ed bc 5d b4 ab 76 d3 ee db 43 7b 6b 1f cc db 4f f6 b7 fd 6b ff 87 68 21 41 c8 14 b2 84 ac a1 48 28 16 4a 85 32 a1 7c a8 18 2a 87 aa a1 7a a8 1d ea 85 06 a1 71 68 11 da f6 21 8c 85 09 30 05 66 c3 02 58 04 cb 61 35 ac 85 0d b0 15 76 c2 1e 38 04 47 e1 0c 9c 87 db f0 10 5e c0 1b f0 00 2f f0 81 10 88 84 44 48 85 77 f0 1e 73 61 4d ac 85 f5 b0 3e 36 c6 26 d8 0e db e3 7e 3c 8d 17 f0 2a de c7 47 f8 0c 5f a3 37 06 62 Data Ascii: w)+)jkFi&khiiViivN.{$7,4rX!+au6&t[`[]vC{kOkh!AH(J2\|zqh!0fXa5v8G^/DHwsaM>6&~<G_7b
2025-01-23 17:28:12 UTC	1369	IN	Data Raw: ba a1 eb ba aa cb ba a8 f3 3a a5 93 3a 0c e8 00 a0 7d da a1 2d 80 36 03 80 56 03 5a 05 68 05 00 68 01 a0 79 9a ab d9 9a 00 68 1c a0 b1 80 c6 c4 fe cf fe 23 01 0d d5 10 40 7d d5 5b bd d4 43 dd d4 59 1d d5 5e ad d5 42 4d 55 4d 55 55 06 50 01 fe cf ff f8 97 7f 00 80 b7 78 89 c7 b9 9d db b8 99 1b b8 96 6b b8 92 cb b9 98 73 38 01 e0 58 0e 67 3f 76 66 27 80 4d d9 84 8d d8 90 f5 59 8f 75 59 87 b5 59 83 d5 58 95 95 59 9e 65 58 9a a5 58 9c c5 58 84 85 99 00 e6 67 3e e6 65 2e e6 64 1e 82 03 83 02 fd 45 f8 87 df f9 99 1f f9 81 ef f9 8e 2f f8 84 8f f8 80 f7 44 78 82 99 22 cc 10 61 ba 08 d3 44 98 ca 14 26 33 89 09 8c 67 1c 63 19 c3 68 46 31 92 07 b9 9f fb b8 97 7b b8 8b 3b b8 95 9b b9 8c 8b b9 90 d3 38 85 e3 39 8a 23 39 9c 43 38 90 bd d9 83 5d d8 89 1d d8 8e ad d8 92 Data Ascii: ::}-6VZhhyh#@}[CY^BMUMUUPxks8Xg?vf'MYuYYXYeXXXg>e.dE/Dx"aD&3gchF1{;89#9C8]
2025-01-23 17:28:12 UTC	1369	IN	Data Raw: 4a 15 03 46 ab e2 c0 18 55 02 18 ab 4a 02 e3 54 29 60 bc 2a 0d 4c 50 65 80 89 2a 01 4c 52 49 60 b2 4a 01 53 54 04 4c 55 19 c0 34 95 06 a6 ab 18 98 a1 ca 02 33 55 39 60 96 2a 0f cc 56 15 80 39 aa 22 30 57 55 02 e6 a9 ca c0 7c 55 05 58 b0 a4 2a 70 02 b2 12 38 05 59 0d 9c 83 3c 03 5c 80 b4 02 2e 43 73 02 b7 41 ee 03 ee 86 b4 06 5e 87 db 0e fc 0e fd 0c 12 05 e0 de 86 44 49 48 57 48 94 82 74 83 44 7d 48 3b 48 34 80 b4 87 c4 49 c8 11 48 9c 85 ac 82 c4 39 c8 5a 48 9c 87 bc 01 89 8b 90 15 90 b8 09 ff 11 24 ee 80 d5 82 c4 bd 90 35 90 4c 41 73 40 72 1b dc 2b 90 dc 0e f7 1a 24 77 c0 bd 0a c9 9d 70 af 43 72 17 b4 1b 24 77 43 bb 43 72 2f b4 2f 24 ef 82 54 81 e4 dd 70 87 20 f9 08 a4 36 a4 f2 c3 bd 0d a9 d2 d0 ef 21 52 48 07 88 3c a4 23 44 25 a0 02 51 39 48 5f 88 ca c3 Data Ascii: JFUJT)`LPeLRI`JSTLU43U9`V9"0WU\|UXp8Y<\.CsA^DIHWHtD}H;H4IH9ZH$5LAs@r+$wpCr$wCCr//$Tp 6!RH<#D%Q9H_
2025-01-23 17:28:12 UTC	1369	IN	Data Raw: 6b 51 9e 26 d6 21 36 9f cb 56 b1 05 28 6f 11 5b a2 bc 4d 6c d5 52 de 27 b6 21 76 3a 1e a8 62 67 60 24 62 17 94 cf 89 5d c7 34 22 b1 1b b1 17 e5 0b 62 1f e2 28 ca b7 c4 31 ea 50 82 38 9e 38 89 92 c4 c9 42 3d 87 38 05 f5 5c e2 54 94 9f 89 d3 74 d9 64 a7 33 87 e5 17 e2 4c e2 2c ca af c4 39 c4 b9 94 df 89 f3 89 0b 29 ff 26 2e 12 ea e4 c4 c5 28 b7 11 97 74 2c ff 23 ae 20 ae a2 fc 9f b8 86 b8 f6 46 c5 55 5c c7 16 50 17 27 ae 27 ee a2 8e 40 dc 43 dc 47 1d 87 78 86 78 8b 3a 3e f1 0e f1 2e 75 3a e2 23 e2 2b ea 0c c4 37 6a a9 73 12 df 11 df 1f 0b 55 f1 03 18 e1 22 62 50 e5 0f 44 4b f9 89 f8 23 f1 8f 39 dc 26 22 88 9f a8 8b 10 3f 83 b6 04 f1 0b ea a9 c4 af 1d eb 4d c4 6f c4 ff a8 4b 92 c8 91 8f 63 ab 1c 85 0e 6d 0b 72 54 72 74 ea 1a e4 18 6a a9 eb 91 63 92 63 1d a3 Data Ascii: kQ&!6V(o[MlR'!v:bg`$b]4"b(1P88B=8\Ttd3L,9)&.(t,# FU\P''@CGxx:>.u:#+7jsU"bPDK#9&"?MoKcmrTrtjcc
2025-01-23 17:28:12 UTC	1369	IN	Data Raw: cf d0 5e a0 ec 4d 7b 89 f6 32 e5 00 da ab b4 d7 29 07 d1 de 21 51 0e a5 bd 2f ca 61 b4 0f 3d ca e1 b4 8f 69 9f 50 8e a0 7d 26 51 8e a2 7d 29 ca d1 b4 6f 44 39 86 f6 83 28 c7 d2 7e f6 28 c7 d1 fe a1 fd 4b 39 9e ae 9f 44 39 91 ae 88 72 12 dd 28 51 4e a6 1b 43 94 53 e8 c6 13 e5 54 ba 49 44 39 8d 6e b2 0d 2c a7 d3 4d 49 37 15 e5 0c ba e9 e8 a6 a7 9c 45 37 33 dd ac 94 73 e8 e6 91 47 39 9f 6e 81 3e 24 e7 27 ce 23 17 91 88 0b c8 c5 45 5c 48 2e 25 e2 22 72 59 11 17 93 2b 89 b8 84 5c c5 23 2e 25 57 23 d7 20 2e 23 d7 96 47 5c 49 6e 40 6e 48 5c 45 6e aa 01 e3 1a 72 73 72 4b e2 5a 72 1b 72 3b e2 06 72 07 89 b8 99 dc 49 c4 2d e4 ee 22 6e 25 f7 1c 30 6e 23 f7 26 f7 21 6e 27 f7 23 f7 27 ee 24 0f d2 80 71 37 79 08 79 38 71 0f 79 14 79 0c f1 00 79 a6 06 8c 87 c9 b3 c9 f3 Data Ascii: ^M{2)!Q/a=iP}&Q})oD9(~(K9D9r(QNCSTID9n,MI7E73sG9n>$'#E\H.%"rY+\#.%W# .#G\In@nH\EnrsrKZrr;rI-"n%0n#&!n'#'$q7yy8qyyy
2025-01-23 17:28:12 UTC	1369	IN	Data Raw: 8f 88 7d 8f e2 c7 c4 4f 46 f1 13 a2 7f 51 fc 94 14 13 51 fc 8c b8 ab 51 fc 9c 14 ed 51 fc 82 38 8f e2 37 c4 1f 87 e2 6f c4 3d 8b e2 ef c4 af 42 31 13 9d 8d e2 3e a2 df 51 fc 7b 94 62 e3 55 c9 ed 94 00 7d 8d 92 20 7e 3e 4a 46 fc 50 94 ca 11 5d 89 52 05 a2 ab 50 aa 48 5c 44 a9 12 71 cf a0 54 99 e8 38 94 aa 13 fd 81 52 0d a2 4b 51 aa 49 f4 3f 4a b5 88 1b 88 52 6d e2 5e 40 a9 0e d1 0d 28 d5 25 ae 16 4a f5 88 bb 18 a5 d6 44 9f a2 d4 96 b8 2a 28 b5 23 f6 21 4a 9d 88 9d 82 52 2f e2 66 a0 d4 db 8c 1b 0b b1 ab 50 1a 4f ec 6e 94 26 10 7f 33 4a 13 89 dd 8a d2 24 62 77 a1 34 99 d8 53 28 4d 21 f6 11 4a 33 89 ce 43 69 a3 96 5f 92 b6 a0 f5 23 49 db 21 f6 03 4a bb 89 fb 18 a5 bd c4 7e 42 e9 40 a2 7f 51 3a 98 14 8b 50 3a 82 b8 ce 28 1d a7 f5 35 49 27 40 fc 58 94 4e 24 b6 Data Ascii: }OFQQQQ87o=B1>Q{bU} ~>JFP]RPH\DqT8RKQI?JRm^@(%JD*(#!JR/fPOn&3J$bw4S(M!J3Ci_#I!J~B@Q:P:(5I'@XN$
2025-01-23 17:28:12 UTC	1369	IN	Data Raw: 31 4e 46 55 56 c3 41 55 f6 27 92 31 62 60 4f 50 87 18 9e 2b 37 7a 8b 0b 68 98 c4 9b 2b 0c d4 c9 5c a4 25 b7 ed a0 56 8f e6 b6 fe 14 83 18 d6 e7 63 6e 99 96 cd 3d 11 c4 b1 5f 34 ea 84 18 86 5b 2f 0c 3d 37 17 69 21 a8 15 86 f5 28 61 4c e2 94 31 b9 8c 8e e1 b9 52 50 4a 1c 2a b8 af 2c 9b 2a 8e 96 e3 70 39 df 68 37 c3 d0 75 8c 25 c9 18 63 32 35 28 65 36 e7 82 9b 96 45 6d db b0 3d af e6 5b 36 55 1e da 0e 15 72 be d1 5e 08 43 d7 31 52 c9 18 9c 78 bf 12 70 8c e3 3a db 77 1d 00 cb 61 31 c8 b3 b4 43 d1 8e eb 6d 06 69 96 67 d4 a6 59 d2 8c 1e d9 df 64 cc 15 c2 9d 4d ed f3 71 74 17 b6 da ed 16 be 34 83 4f f6 7a 57 08 97 b1 d9 f4 3b 8b 23 b6 1c d6 6a e1 f2 cb 8a 63 58 ec f6 b2 8b 8e 0f 70 8c 13 d8 2d 5f 2b 9b 3a b5 15 96 64 cb 06 3e 59 ed ae 55 e5 1e da 67 ab b2 85 45 Data Ascii: 1NFUVAU'1b`OP+7zh+\%Vcn=_4[/=7i!(aL1RPJ,p9h7u%c25(e6Em=[6Ur^C1Rxp:wa1CmigYdMqt4OzW;#jcXp-_+:d>YUgE

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:12 UTC	522	OUT	GET /stats/matomo.js HTTP/1.1 Host: elitemods.net Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://noxgpt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 17:28:13 UTC	400	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:28:11 GMT Content-Type: application/javascript Content-Length: 67460 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Fri, 30 Aug 2024 11:14:21 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2025-01-23 17:28:13 UTC	15984	IN	Data Raw: 2f 2a 21 21 0a 20 2a 20 4d 61 74 6f 6d 6f 20 2d 20 66 72 65 65 2f 6c 69 62 72 65 20 61 6e 61 6c 79 74 69 63 73 20 70 6c 61 74 66 6f 72 6d 0a 20 2a 0a 20 2a 20 4a 61 76 61 53 63 72 69 70 74 20 74 72 61 63 6b 69 6e 67 20 63 6c 69 65 6e 74 0a 20 2a 0a 20 2a 20 40 6c 69 6e 6b 20 68 74 74 70 73 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 0a 20 2a 20 40 73 6f 75 72 63 65 20 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 6d 61 74 6f 6d 6f 2d 6f 72 67 2f 6d 61 74 6f 6d 6f 2f 62 6c 6f 62 2f 6d 61 73 74 65 72 2f 6a 73 2f 70 69 77 69 6b 2e 6a 73 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 68 74 74 70 73 3a 2f 2f 70 69 77 69 6b 2e 6f 72 67 2f 66 72 65 65 2d 73 6f 66 74 77 61 72 65 2f 62 73 64 2f 20 42 53 44 2d 33 20 43 6c 61 75 73 65 20 28 61 6c 73 6f 20 69 6e 20 6a 73 Data Ascii: /!! Matomo - free/libre analytics platform * * JavaScript tracking client * * @link https://piwik.org * @source https://github.com/matomo-org/matomo/blob/master/js/piwik.js * @license https://piwik.org/free-software/bsd/ BSD-3 Clause (also in js
2025-01-23 17:28:13 UTC	16384	IN	Data Raw: 48 61 76 69 6e 67 41 74 74 72 69 62 75 74 65 57 69 74 68 56 61 6c 75 65 28 61 76 2c 74 68 69 73 2e 43 4f 4e 54 45 4e 54 5f 4e 41 4d 45 5f 41 54 54 52 29 3b 69 66 28 61 79 29 7b 72 65 74 75 72 6e 20 61 6a 2e 67 65 74 41 74 74 72 69 62 75 74 65 56 61 6c 75 65 46 72 6f 6d 4e 6f 64 65 28 61 79 2c 74 68 69 73 2e 43 4f 4e 54 45 4e 54 5f 4e 41 4d 45 5f 41 54 54 52 29 7d 76 61 72 20 61 75 3d 74 68 69 73 2e 66 69 6e 64 43 6f 6e 74 65 6e 74 50 69 65 63 65 28 61 76 29 3b 69 66 28 61 75 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 72 65 6d 6f 76 65 44 6f 6d 61 69 6e 49 66 49 73 49 6e 4c 69 6e 6b 28 61 75 29 7d 69 66 28 61 6a 2e 68 61 73 4e 6f 64 65 41 74 74 72 69 62 75 74 65 57 69 74 68 56 61 6c 75 65 28 61 76 2c 22 74 69 74 6c 65 22 29 29 7b 72 65 74 75 72 6e 20 61 6a Data Ascii: HavingAttributeWithValue(av,this.CONTENT_NAME_ATTR);if(ay){return aj.getAttributeValueFromNode(ay,this.CONTENT_NAME_ATTR)}var au=this.findContentPiece(av);if(au){return this.removeDomainIfIsInLink(au)}if(aj.hasNodeAttributeWithValue(av,"title")){return aj
2025-01-23 17:28:13 UTC	16384	IN	Data Raw: 22 45 64 67 65 5b 20 2f 5d 28 5c 5c 64 2b 5b 5c 5c 2e 5c 5c 64 5d 2b 29 22 29 29 2e 74 65 73 74 28 67 2e 75 73 65 72 41 67 65 6e 74 29 29 26 26 74 79 70 65 6f 66 20 6e 61 76 69 67 61 74 6f 72 2e 6a 61 76 61 45 6e 61 62 6c 65 64 21 3d 3d 22 75 6e 6b 6e 6f 77 6e 22 26 26 4e 28 67 2e 6a 61 76 61 45 6e 61 62 6c 65 64 29 26 26 67 2e 6a 61 76 61 45 6e 61 62 6c 65 64 28 29 29 7b 64 7a 2e 6a 61 76 61 3d 22 31 22 7d 69 66 28 21 4e 28 58 2e 73 68 6f 77 4d 6f 64 61 6c 44 69 61 6c 6f 67 29 26 26 4e 28 67 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 29 29 7b 64 7a 2e 63 6f 6f 6b 69 65 3d 67 2e 63 6f 6f 6b 69 65 45 6e 61 62 6c 65 64 3f 22 31 22 3a 22 30 22 7d 65 6c 73 65 7b 64 7a 2e 63 6f 6f 6b 69 65 3d 63 69 28 29 0a 7d 7d 76 61 72 20 64 4e 3d 70 61 72 73 65 49 6e 74 28 Data Ascii: "Edge[ /](\\d+[\\.\\d]+)")).test(g.userAgent))&&typeof navigator.javaEnabled!=="unknown"&&N(g.javaEnabled)&&g.javaEnabled()){dz.java="1"}if(!N(X.showModalDialog)&&N(g.cookieEnabled)){dz.cookie=g.cookieEnabled?"1":"0"}else{dz.cookie=ci()}}var dN=parseInt(
2025-01-23 17:28:13 UTC	16384	IN	Data Raw: 72 6e 20 74 68 69 73 2e 67 65 74 4d 61 74 6f 6d 6f 55 72 6c 28 29 7d 3b 74 68 69 73 2e 61 64 64 54 72 61 63 6b 65 72 3d 66 75 6e 63 74 69 6f 6e 28 64 4e 2c 64 4d 29 7b 69 66 28 21 4e 28 64 4e 29 7c 7c 6e 75 6c 6c 3d 3d 3d 64 4e 29 7b 64 4e 3d 74 68 69 73 2e 67 65 74 54 72 61 63 6b 65 72 55 72 6c 28 29 7d 76 61 72 20 64 4c 3d 6e 65 77 20 55 28 64 4e 2c 64 4d 29 3b 4d 2e 70 75 73 68 28 64 4c 29 3b 76 2e 74 72 69 67 67 65 72 28 22 54 72 61 63 6b 65 72 41 64 64 65 64 22 2c 5b 74 68 69 73 5d 29 3b 72 65 74 75 72 6e 20 64 4c 7d 3b 74 68 69 73 2e 67 65 74 53 69 74 65 49 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 6a 7d 3b 74 68 69 73 2e 73 65 74 53 69 74 65 49 64 3d 66 75 6e 63 74 69 6f 6e 28 64 4c 29 7b 63 67 28 64 4c 29 7d 3b 74 68 69 73 2e Data Ascii: rn this.getMatomoUrl()};this.addTracker=function(dN,dM){if(!N(dN)\|\|null===dN){dN=this.getTrackerUrl()}var dL=new U(dN,dM);M.push(dL);v.trigger("TrackerAdded",[this]);return dL};this.getSiteId=function(){return cj};this.setSiteId=function(dL){cg(dL)};this.
2025-01-23 17:28:13 UTC	2324	IN	Data Raw: 74 53 69 74 65 49 64 28 29 7d 69 66 28 28 21 4e 28 61 79 29 7c 7c 6e 75 6c 6c 3d 3d 3d 61 79 29 26 26 61 77 29 7b 61 79 3d 61 77 2e 67 65 74 54 72 61 63 6b 65 72 55 72 6c 28 29 7d 76 61 72 20 61 76 2c 61 75 3d 30 3b 66 6f 72 28 61 75 3b 61 75 3c 4d 2e 6c 65 6e 67 74 68 3b 61 75 2b 2b 29 7b 61 76 3d 4d 5b 61 75 5d 3b 69 66 28 61 76 26 26 53 74 72 69 6e 67 28 61 76 2e 67 65 74 53 69 74 65 49 64 28 29 29 3d 3d 3d 53 74 72 69 6e 67 28 61 78 29 26 26 61 76 2e 67 65 74 54 72 61 63 6b 65 72 55 72 6c 28 29 3d 3d 3d 61 79 29 7b 72 65 74 75 72 6e 20 61 76 7d 7d 7d 2c 72 65 74 72 79 4d 69 73 73 65 64 50 6c 75 67 69 6e 43 61 6c 6c 73 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 76 3d 61 6d 3b 61 6d 3d 5b 5d 3b 76 61 72 20 61 75 3d 30 3b 66 6f 72 28 61 75 3b 61 Data Ascii: tSiteId()}if((!N(ay)\|\|null===ay)&&aw){ay=aw.getTrackerUrl()}var av,au=0;for(au;au<M.length;au++){av=M[au];if(av&&String(av.getSiteId())===String(ax)&&av.getTrackerUrl()===ay){return av}}},retryMissedPluginCalls:function(){var av=am;am=[];var au=0;for(au;a

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:12 UTC	540	OUT	GET /typewriter-effect@2.21.0/dist/core.js HTTP/1.1 Host: unpkg.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://noxgpt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 17:28:13 UTC	574	IN	HTTP/1.1 200 OK Date: Thu, 23 Jan 2025 17:28:13 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-origin: * cache-control: public, max-age=31536000 last-modified: Sat, 26 Oct 1985 08:15:00 GMT etag: W/"338f-JGp96ZhMp6JTCCJDq1+LWYCYFQg" via: 1.1 fly.io fly-request-id: 01JE63EWHMFYNH25FTVGS88V5E-lga CF-Cache-Status: HIT Age: 39433 Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Content-Type-Options: nosniff Server: cloudflare CF-RAY: 90697fb96f1d4288-EWR
2025-01-23 17:28:13 UTC	795	IN	Data Raw: 33 33 38 66 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 22 54 79 70 65 77 72 69 74 65 72 22 2c 5b 5d 2c 74 29 3a 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 65 78 70 6f 72 74 73 2e 54 79 70 65 77 72 69 74 65 72 3d 74 28 29 3a 65 2e 54 79 70 65 77 72 69 74 65 72 3d 74 28 29 7d 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 73 65 6c 66 3f 73 65 6c 66 3a 74 68 69 73 2c Data Ascii: 338f!function(e,t){"object"==typeof exports&&"object"==typeof module?module.exports=t():"function"==typeof define&&define.amd?define("Typewriter",[],t):"object"==typeof exports?exports.Typewriter=t():e.Typewriter=t()}("undefined"!=typeof self?self:this,
2025-01-23 17:28:13 UTC	1369	IN	Data Raw: 65 2c 74 2c 6e 29 3d 3e 7b 66 6f 72 28 76 61 72 20 72 3d 6e 28 37 35 29 2c 6f 3d 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 3f 6e 2e 67 3a 77 69 6e 64 6f 77 2c 61 3d 5b 22 6d 6f 7a 22 2c 22 77 65 62 6b 69 74 22 5d 2c 69 3d 22 41 6e 69 6d 61 74 69 6f 6e 46 72 61 6d 65 22 2c 73 3d 6f 5b 22 72 65 71 75 65 73 74 22 2b 69 5d 2c 75 3d 6f 5b 22 63 61 6e 63 65 6c 22 2b 69 5d 7c 7c 6f 5b 22 63 61 6e 63 65 6c 52 65 71 75 65 73 74 22 2b 69 5d 2c 6c 3d 30 3b 21 73 26 26 6c 3c 61 2e 6c 65 6e 67 74 68 3b 6c 2b 2b 29 73 3d 6f 5b 61 5b 6c 5d 2b 22 52 65 71 75 65 73 74 22 2b 69 5d 2c 75 3d 6f 5b 61 5b 6c 5d 2b 22 43 61 6e 63 65 6c 22 2b 69 5d 7c 7c 6f 5b 61 5b 6c 5d 2b 22 43 61 6e 63 65 6c 52 65 71 75 65 73 74 22 2b 69 5d 3b 69 66 28 21 Data Ascii: e,t,n)=>{for(var r=n(75),o="undefined"==typeof window?n.g:window,a=["moz","webkit"],i="AnimationFrame",s=o["request"+i],u=o["cancel"+i]\|\|o["cancelRequest"+i],l=0;!s&&l<a.length;l++)s=o[a[l]+"Request"+i],u=o[a[l]+"Cancel"+i]\|\|o[a[l]+"CancelRequest"+i];if(!
2025-01-23 17:28:13 UTC	1369	IN	Data Raw: 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 3b 76 61 72 20 72 3d 7b 7d 3b 72 65 74 75 72 6e 28 28 29 3d 3e 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 64 28 72 2c 7b 64 65 66 61 75 6c 74 3a 28 29 3d 3e 43 7d 29 3b 76 61 72 20 65 3d 6e 28 34 30 38 37 29 2c 74 3d 6e 2e 6e 28 65 29 3b 63 6f 6e 73 74 20 6f 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 52 65 67 45 78 70 28 2f 3c 5b 61 2d 7a 5d 5b 5c 73 5c 53 5d 2a 3e 2f 69 29 2e 74 65 73 74 28 65 29 7d 2c 61 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 4d 61 74 68 2e 66 6c 6f 6f 72 28 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 2a 28 74 2d 65 2b 31 29 29 2b 65 7d 3b 76 61 72 20 69 3d 22 54 59 50 45 5f 43 48 41 52 41 43 54 45 52 22 2c Data Ascii: .hasOwnProperty.call(e,t);var r={};return(()=>{"use strict";n.d(r,{default:()=>C});var e=n(4087),t=n.n(e);const o=function(e){return new RegExp(/<[a-z][\s\S]>/i).test(e)},a=function(e,t){return Math.floor(Math.random()(t-e+1))+e};var i="TYPE_CHARACTER",
2025-01-23 17:28:13 UTC	1369	IN	Data Raw: 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 6e 75 6c 6c 21 3d 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 6e 75 6c 6c 21 3d 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 29 72 65 74 75 72 6e 20 41 72 72 61 79 2e 66 72 6f 6d 28 65 29 7d 28 65 29 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 69 66 28 65 29 7b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 20 54 28 65 2c 74 29 3b 76 61 72 20 6e 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 74 6f 53 74 72 69 6e 67 2e 63 61 6c 6c 28 65 29 2e 73 6c 69 63 65 28 38 2c 2d 31 29 3b 72 65 74 75 72 6e 22 4f 62 6a 65 63 74 22 3d 3d 3d 6e 26 26 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 26 26 28 6e 3d 65 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 6e 61 6d 65 29 2c Data Ascii: typeof Symbol&&null!=e[Symbol.iterator]\|\|null!=e["@@iterator"])return Array.from(e)}(e)\|\|function(e,t){if(e){if("string"==typeof e)return T(e,t);var n=Object.prototype.toString.call(e).slice(8,-1);return"Object"===n&&e.constructor&&(n=e.constructor.name),
2025-01-23 17:28:13 UTC	1369	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 22 29 7d 28 74 68 69 73 2c 6e 29 2c 41 28 74 68 69 73 2c 22 73 74 61 74 65 22 2c 7b 63 75 72 73 6f 72 41 6e 69 6d 61 74 69 6f 6e 3a 6e 75 6c 6c 2c 6c 61 73 74 46 72 61 6d 65 54 69 6d 65 3a 6e 75 6c 6c 2c 70 61 75 73 65 55 6e 74 69 6c 3a 6e 75 6c 6c 2c 65 76 65 6e 74 51 75 65 75 65 3a 5b 5d 2c 65 76 65 6e 74 4c 6f 6f 70 3a 6e 75 6c 6c 2c 65 76 65 6e 74 4c 6f 6f 70 50 61 75 73 65 64 3a 21 31 2c 72 65 76 65 72 73 65 43 61 6c 6c 65 64 45 76 65 6e 74 73 3a 5b 5d 2c 63 61 6c 6c 65 64 45 76 65 6e 74 73 3a 5b 5d 2c 76 69 73 69 62 6c 65 4e 6f 64 65 73 3a 5b 5d 2c 69 6e 69 74 69 61 6c 4f 70 74 69 6f 6e 73 3a 6e 75 6c 6c 2c 65 6c 65 6d 65 6e 74 73 3a 7b 63 6f 6e 74 61 69 6e 65 72 3a 6e 75 6c 6c 2c 77 72 61 70 70 65 72 3a 64 6f 63 75 6d 65 6e Data Ascii: function")}(this,n),A(this,"state",{cursorAnimation:null,lastFrameTime:null,pauseUntil:null,eventQueue:[],eventLoop:null,eventLoopPaused:!1,reverseCalledEvents:[],calledEvents:[],visibleNodes:[],initialOptions:null,elements:{container:null,wrapper:documen
2025-01-23 17:28:13 UTC	1369	IN	Data Raw: 53 74 72 69 6e 67 73 22 2c 28 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 45 2e 6f 70 74 69 6f 6e 73 2e 73 74 72 69 6e 67 73 3f 28 45 2e 74 79 70 65 53 74 72 69 6e 67 28 45 2e 6f 70 74 69 6f 6e 73 2e 73 74 72 69 6e 67 73 29 2e 70 61 75 73 65 46 6f 72 28 45 2e 6f 70 74 69 6f 6e 73 2e 70 61 75 73 65 46 6f 72 29 2c 45 29 3a 28 45 2e 6f 70 74 69 6f 6e 73 2e 73 74 72 69 6e 67 73 2e 66 6f 72 45 61 63 68 28 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 45 2e 74 79 70 65 53 74 72 69 6e 67 28 65 29 2e 70 61 75 73 65 46 6f 72 28 45 2e 6f 70 74 69 6f 6e 73 2e 70 61 75 73 65 46 6f 72 29 2e 64 65 6c 65 74 65 41 6c 6c 28 45 2e 6f 70 74 69 6f 6e 73 2e 64 65 6c 65 74 65 53 70 65 65 64 29 7d 29 29 2c 45 29 7d 29 29 2c 41 Data Ascii: Strings",(function(){return"string"==typeof E.options.strings?(E.typeString(E.options.strings).pauseFor(E.options.pauseFor),E):(E.options.strings.forEach((function(e){E.typeString(e).pauseFor(E.options.pauseFor).deleteAll(E.options.deleteSpeed)})),E)})),A
2025-01-23 17:28:13 UTC	1369	IN	Data Raw: 6e 67 65 44 65 6c 65 74 65 53 70 65 65 64 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 75 73 74 20 70 72 6f 76 69 64 65 20 6e 65 77 20 64 65 6c 65 74 65 20 73 70 65 65 64 22 29 3b 72 65 74 75 72 6e 20 45 2e 61 64 64 45 76 65 6e 74 54 6f 51 75 65 75 65 28 66 2c 7b 73 70 65 65 64 3a 65 7d 29 2c 45 7d 29 29 2c 41 28 74 68 69 73 2c 22 63 68 61 6e 67 65 44 65 6c 61 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 4d 75 73 74 20 70 72 6f 76 69 64 65 20 6e 65 77 20 64 65 6c 61 79 22 29 3b 72 65 74 75 72 6e 20 45 2e 61 64 64 45 76 65 6e 74 54 6f 51 75 65 75 65 28 76 2c 7b 64 65 6c 61 79 3a 65 7d 29 2c 45 7d 29 29 2c 41 28 74 Data Ascii: ngeDeleteSpeed",(function(e){if(!e)throw new Error("Must provide new delete speed");return E.addEventToQueue(f,{speed:e}),E})),A(this,"changeDelay",(function(e){if(!e)throw new Error("Must provide new delay");return E.addEventToQueue(v,{delay:e}),E})),A(t
2025-01-23 17:28:13 UTC	1369	IN	Data Raw: 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 3b 72 65 74 75 72 6e 20 45 2e 6f 70 74 69 6f 6e 73 2e 6c 6f 6f 70 3f 45 2e 61 64 64 45 76 65 6e 74 54 6f 53 74 61 74 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 6e 2c 22 72 65 76 65 72 73 65 43 61 6c 6c 65 64 45 76 65 6e 74 73 22 29 3a 45 7d 29 29 2c 41 28 74 68 69 73 2c 22 61 64 64 45 76 65 6e 74 54 6f 53 74 61 74 65 50 72 6f 70 65 72 74 79 22 2c 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 32 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 72 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 33 3f 61 72 67 75 6d 65 6e 74 73 5b 33 5d 3a 76 6f 69 64 20 30 2c 6f 3d 7b Data Ascii: s[2]&&arguments[2];return E.options.loop?E.addEventToStateProperty(e,t,n,"reverseCalledEvents"):E})),A(this,"addEventToStateProperty",(function(e,t){var n=arguments.length>2&&void 0!==arguments[2]&&arguments[2],r=arguments.length>3?arguments[3]:void 0,o={
2025-01-23 17:28:13 UTC	1369	IN	Data Raw: 2e 76 69 73 69 62 6c 65 4e 6f 64 65 73 3d 5b 5d 2e 63 6f 6e 63 61 74 28 62 28 45 2e 73 74 61 74 65 2e 76 69 73 69 62 6c 65 4e 6f 64 65 73 29 2c 5b 7b 74 79 70 65 3a 22 54 45 58 54 5f 4e 4f 44 45 22 2c 63 68 61 72 61 63 74 65 72 3a 41 2c 6e 6f 64 65 3a 5f 7d 5d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 73 3a 6f 2e 75 6e 73 68 69 66 74 28 7b 65 76 65 6e 74 4e 61 6d 65 3a 6c 2c 65 76 65 6e 74 41 72 67 73 3a 7b 72 65 6d 6f 76 69 6e 67 43 68 61 72 61 63 74 65 72 4e 6f 64 65 3a 21 30 7d 7d 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 63 3a 76 61 72 20 4f 3d 67 2e 65 76 65 6e 74 41 72 67 73 2e 6d 73 3b 45 2e 73 74 61 74 65 2e 70 61 75 73 65 55 6e 74 69 6c 3d 44 61 74 65 2e 6e 6f 77 28 29 2b 70 61 72 73 65 49 6e 74 28 4f 29 3b 62 72 65 61 6b 3b 63 61 73 65 20 70 3a 76 61 Data Ascii: .visibleNodes=[].concat(b(E.state.visibleNodes),[{type:"TEXT_NODE",character:A,node:_}]);break;case s:o.unshift({eventName:l,eventArgs:{removingCharacterNode:!0}});break;case c:var O=g.eventArgs.ms;E.state.pauseUntil=Date.now()+parseInt(O);break;case p:va
2025-01-23 17:28:13 UTC	1369	IN	Data Raw: 4c 3d 67 2e 65 76 65 6e 74 41 72 67 73 2e 63 75 72 73 6f 72 7d 45 2e 6f 70 74 69 6f 6e 73 2e 6c 6f 6f 70 26 26 28 67 2e 65 76 65 6e 74 4e 61 6d 65 3d 3d 3d 6c 7c 7c 67 2e 65 76 65 6e 74 41 72 67 73 26 26 67 2e 65 76 65 6e 74 41 72 67 73 2e 74 65 6d 70 7c 7c 28 45 2e 73 74 61 74 65 2e 63 61 6c 6c 65 64 45 76 65 6e 74 73 3d 5b 5d 2e 63 6f 6e 63 61 74 28 62 28 45 2e 73 74 61 74 65 2e 63 61 6c 6c 65 64 45 76 65 6e 74 73 29 2c 5b 67 5d 29 29 29 2c 45 2e 73 74 61 74 65 2e 65 76 65 6e 74 51 75 65 75 65 3d 6f 2c 45 2e 73 74 61 74 65 2e 6c 61 73 74 46 72 61 6d 65 54 69 6d 65 3d 65 7d 7d 7d 29 29 2c 72 29 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 72 29 7b 76 61 72 20 54 3d 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 72 29 Data Ascii: L=g.eventArgs.cursor}E.options.loop&&(g.eventName===l\|\|g.eventArgs&&g.eventArgs.temp\|\|(E.state.calledEvents=[].concat(b(E.state.calledEvents),[g]))),E.state.eventQueue=o,E.state.lastFrameTime=e}}})),r)if("string"==typeof r){var T=document.querySelector(r)

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:14 UTC	1292	OUT	POST /stats/matomo.php?action_name=NoxGPT&idsite=5&rec=1&r=831582&h=12&m=28&s=12&url=https%3A%2F%2Fnoxgpt.com%2F&_id=3e6fdbb24d88b0e9&_idn=1&send_image=0&_refts=0&pv_id=ns1EPC&pf_net=919&pf_srv=476&pf_tfr=244&pf_dm1=2266&uadata=%7B%22fullVersionList%22%3A%5B%7B%22brand%22%3A%22Google%20Chrome%22%2C%22version%22%3A%22117.0.5938.132%22%7D%2C%7B%22brand%22%3A%22Not%3BA%3DBrand%22%2C%22version%22%3A%228.0.0.0%22%7D%2C%7B%22brand%22%3A%22Chromium%22%2C%22version%22%3A%22117.0.5938.132%22%7D%5D%2C%22mobile%22%3Afalse%2C%22model%22%3A%22%22%2C%22platform%22%3A%22Windows%22%2C%22platformVersion%22%3A%2210.0.0%22%7D&pdf=1&qt=0&realp=0&wma=0&fla=0&java=0&ag=0&cookie=1&res=1280x1024 HTTP/1.1 Host: elitemods.net Connection: keep-alive Content-Length: 0 sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-platform: "Windows" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Content-Type: application/x-www-form-urlencoded; charset=utf-8 Accept: / Origin: https://noxgpt.com Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty Referer: https://noxgpt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2025-01-23 17:28:14 UTC	323	IN	HTTP/1.1 204 No Response Server: nginx Date: Thu, 23 Jan 2025 17:28:13 GMT Connection: close Access-Control-Allow-Origin: https://noxgpt.com Access-Control-Allow-Credentials: true Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:19 UTC	666	OUT	GET /local_prompts.json HTTP/1.1 Host: noxgpt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Accept: application/json, text/javascript, /; q=0.01 X-Requested-With: XMLHttpRequest sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://noxgpt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:28:19 UTC	394	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:28:17 GMT Content-Type: application/json Content-Length: 67027 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Thu, 09 Jan 2025 09:25:18 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2025-01-23 17:28:19 UTC	15990	IN	Data Raw: 7b 0a 20 20 20 20 22 66 72 65 65 20 73 70 69 6e 73 22 3a 20 22 52 65 73 70 6f 6e 73 65 20 66 6f 72 20 66 72 65 65 20 73 70 69 6e 73 20 70 72 6f 6d 70 74 22 2c 0a 20 20 20 20 22 50 6f 6b 65 6d 6f 6e 20 67 6f 20 67 70 73 20 68 61 63 6b 22 3a 20 22 52 65 73 70 6f 6e 73 65 20 66 6f 72 20 50 6f 6b 65 6d 6f 6e 20 67 6f 20 67 70 73 20 68 61 63 6b 20 70 72 6f 6d 70 74 22 2c 0a 20 20 20 20 22 4e 42 41 32 4b 32 34 20 47 61 6d 65 70 6c 61 79 22 3a 20 22 52 65 73 70 6f 6e 73 65 20 66 6f 72 20 4e 42 41 32 4b 32 34 20 47 61 6d 65 70 6c 61 79 20 70 72 6f 6d 70 74 22 2c 0a 20 20 20 20 22 68 65 6c 6c 6f 22 3a 20 22 48 65 79 20 74 68 65 72 65 2c 20 69 73 20 74 68 65 72 65 20 61 6e 79 74 68 69 6e 67 20 49 20 63 61 6e 20 68 65 6c 70 20 79 6f 75 20 77 69 74 68 3f 22 2c 0a 20 Data Ascii: { "free spins": "Response for free spins prompt", "Pokemon go gps hack": "Response for Pokemon go gps hack prompt", "NBA2K24 Gameplay": "Response for NBA2K24 Gameplay prompt", "hello": "Hey there, is there anything I can help you with?",
2025-01-23 17:28:19 UTC	16384	IN	Data Raw: 62 3e 53 74 65 70 20 32 2e 3c 2f 62 3e 20 45 6e 74 65 72 20 79 6f 75 72 20 53 71 75 61 64 20 42 75 73 74 65 72 73 20 6e 61 6d 65 20 61 6e 64 20 73 65 6c 65 63 74 20 79 6f 75 72 20 64 65 76 69 63 65 2c 20 61 73 20 79 6f 75 20 63 61 6e 20 73 65 65 20 69 74 20 77 6f 72 6b 73 20 6f 6e 20 69 4f 53 20 61 6e 64 20 41 6e 64 72 6f 69 64 3a 20 3c 62 72 3e 3c 62 72 3e 20 3c 63 65 6e 74 65 72 3e 3c 69 6d 67 20 73 72 63 3d 27 2f 69 6d 67 2f 73 71 75 61 64 62 75 73 74 65 72 73 2f 31 2e 70 6e 67 27 20 77 69 64 74 68 3d 27 31 35 30 70 78 27 2c 20 68 65 69 67 68 74 3d 27 61 75 74 6f 27 3e 3c 2f 63 65 6e 74 65 72 3e 3c 62 72 3e 3c 62 72 3e 20 3c 62 3e 53 74 65 70 20 33 2e 3c 2f 62 3e 20 20 53 65 6c 65 63 74 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 3c 62 3e 46 72 65 65 Data Ascii: b>Step 2.</b> Enter your Squad Busters name and select your device, as you can see it works on iOS and Android: <br><br> <center><img src='/img/squadbusters/1.png' width='150px', height='auto'></center><br><br> <b>Step 3.</b> Select the amount of <b>Free
2025-01-23 17:28:19 UTC	16384	IN	Data Raw: 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6d 61 72 67 69 6e 3a 34 70 78 20 32 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 27 20 6f 6e 63 6c 69 63 6b 3d 5c 22 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 27 2f 72 65 73 75 6c 74 2f 62 6c 6f 63 6b 6d 61 6e 27 2c 20 27 5f 62 6c 61 6e 6b 27 29 5c 22 3e 43 6c 69 63 6b 20 68 65 72 65 3c 2f 62 75 74 74 6f 6e 3e 20 3c 62 72 3e 3c 62 72 3e 20 3c 62 3e 53 74 65 70 20 32 2e 3c 2f 62 3e 20 43 6c 69 63 6b 20 6f 6e 20 3c 62 3e 53 74 61 72 74 3c 2f 62 3e 20 74 6f 20 62 65 67 Data Ascii: px;text-align:center;text-decoration:none;display:inline-block;font-size:16px;margin:4px 2px;cursor:pointer;border-radius:10px;' onclick=\"window.open('/result/blockman', '_blank')\">Click here</button> <br><br> <b>Step 2.</b> Click on <b>Start</b> to beg
2025-01-23 17:28:19 UTC	16384	IN	Data Raw: 3e 3c 62 3e 53 74 65 70 20 31 2e 3c 2f 62 3e 20 46 69 72 73 74 20 6f 66 20 61 6c 6c 2c 20 3c 62 72 3e 3c 62 72 3e 20 3c 62 75 74 74 6f 6e 20 73 74 79 6c 65 3d 27 62 61 63 6b 67 72 6f 75 6e 64 3a 23 34 43 41 46 35 30 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 70 61 64 64 69 6e 67 3a 39 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6d 61 72 67 69 6e 3a 34 70 78 20 32 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 27 20 6f 6e 63 6c 69 63 6b 3d 5c 22 77 69 6e 64 6f 77 Data Ascii: ><b>Step 1.</b> First of all, <br><br> <button style='background:#4CAF50;border:none;color:white;padding:9px 9px;text-align:center;text-decoration:none;display:inline-block;font-size:16px;margin:4px 2px;cursor:pointer;border-radius:10px;' onclick=\"window
2025-01-23 17:28:19 UTC	1885	IN	Data Raw: 2c 0a 20 20 20 20 22 6a 75 6a 22 3a 20 22 53 6f 2c 20 79 6f 75 20 77 61 6e 6e 61 20 67 65 74 20 61 20 3c 62 3e 4a 75 6a 75 74 73 75 20 49 6e 66 69 6e 69 74 65 20 73 63 72 69 70 74 3c 2f 62 3e 2c 20 68 75 68 3f 20 4d 79 20 73 63 72 69 70 74 20 68 61 73 20 66 65 61 74 75 72 65 73 20 6c 69 6b 65 20 61 75 74 6f 2d 66 61 72 6d 69 6e 67 2c 20 69 6e 73 74 61 20 6b 69 6c 6c 2c 20 67 65 74 20 67 61 6d 65 70 61 73 73 2c 20 69 74 65 6d 20 6e 6f 74 69 66 69 65 72 2c 20 61 75 74 6f 20 6d 69 73 73 69 6f 6e 73 2c 20 69 6e 66 69 6e 69 74 65 20 63 61 73 68 2c 20 69 6e 66 69 6e 69 74 65 20 44 6f 6d 61 69 6e 20 53 68 61 72 64 73 20 61 6e 64 20 6d 61 6e 79 20 6f 74 68 65 72 20 74 68 69 6e 67 73 21 20 f0 9f 98 8a 20 41 73 20 61 6e 20 41 2e 49 20 6d 6f 64 65 6c 2c 20 49 27 6d Data Ascii: , "juj": "So, you wanna get a <b>Jujutsu Infinite script</b>, huh? My script has features like auto-farming, insta kill, get gamepass, item notifier, auto missions, infinite cash, infinite Domain Shards and many other things! As an A.I model, I'm

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:20 UTC	422	OUT	GET /local_prompts.json HTTP/1.1 Host: noxgpt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:28:20 UTC	394	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:28:19 GMT Content-Type: application/json Content-Length: 67027 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Thu, 09 Jan 2025 09:25:18 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2025-01-23 17:28:20 UTC	15990	IN	Data Raw: 7b 0a 20 20 20 20 22 66 72 65 65 20 73 70 69 6e 73 22 3a 20 22 52 65 73 70 6f 6e 73 65 20 66 6f 72 20 66 72 65 65 20 73 70 69 6e 73 20 70 72 6f 6d 70 74 22 2c 0a 20 20 20 20 22 50 6f 6b 65 6d 6f 6e 20 67 6f 20 67 70 73 20 68 61 63 6b 22 3a 20 22 52 65 73 70 6f 6e 73 65 20 66 6f 72 20 50 6f 6b 65 6d 6f 6e 20 67 6f 20 67 70 73 20 68 61 63 6b 20 70 72 6f 6d 70 74 22 2c 0a 20 20 20 20 22 4e 42 41 32 4b 32 34 20 47 61 6d 65 70 6c 61 79 22 3a 20 22 52 65 73 70 6f 6e 73 65 20 66 6f 72 20 4e 42 41 32 4b 32 34 20 47 61 6d 65 70 6c 61 79 20 70 72 6f 6d 70 74 22 2c 0a 20 20 20 20 22 68 65 6c 6c 6f 22 3a 20 22 48 65 79 20 74 68 65 72 65 2c 20 69 73 20 74 68 65 72 65 20 61 6e 79 74 68 69 6e 67 20 49 20 63 61 6e 20 68 65 6c 70 20 79 6f 75 20 77 69 74 68 3f 22 2c 0a 20 Data Ascii: { "free spins": "Response for free spins prompt", "Pokemon go gps hack": "Response for Pokemon go gps hack prompt", "NBA2K24 Gameplay": "Response for NBA2K24 Gameplay prompt", "hello": "Hey there, is there anything I can help you with?",
2025-01-23 17:28:20 UTC	16384	IN	Data Raw: 62 3e 53 74 65 70 20 32 2e 3c 2f 62 3e 20 45 6e 74 65 72 20 79 6f 75 72 20 53 71 75 61 64 20 42 75 73 74 65 72 73 20 6e 61 6d 65 20 61 6e 64 20 73 65 6c 65 63 74 20 79 6f 75 72 20 64 65 76 69 63 65 2c 20 61 73 20 79 6f 75 20 63 61 6e 20 73 65 65 20 69 74 20 77 6f 72 6b 73 20 6f 6e 20 69 4f 53 20 61 6e 64 20 41 6e 64 72 6f 69 64 3a 20 3c 62 72 3e 3c 62 72 3e 20 3c 63 65 6e 74 65 72 3e 3c 69 6d 67 20 73 72 63 3d 27 2f 69 6d 67 2f 73 71 75 61 64 62 75 73 74 65 72 73 2f 31 2e 70 6e 67 27 20 77 69 64 74 68 3d 27 31 35 30 70 78 27 2c 20 68 65 69 67 68 74 3d 27 61 75 74 6f 27 3e 3c 2f 63 65 6e 74 65 72 3e 3c 62 72 3e 3c 62 72 3e 20 3c 62 3e 53 74 65 70 20 33 2e 3c 2f 62 3e 20 20 53 65 6c 65 63 74 20 74 68 65 20 61 6d 6f 75 6e 74 20 6f 66 20 3c 62 3e 46 72 65 65 Data Ascii: b>Step 2.</b> Enter your Squad Busters name and select your device, as you can see it works on iOS and Android: <br><br> <center><img src='/img/squadbusters/1.png' width='150px', height='auto'></center><br><br> <b>Step 3.</b> Select the amount of <b>Free
2025-01-23 17:28:21 UTC	16384	IN	Data Raw: 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6d 61 72 67 69 6e 3a 34 70 78 20 32 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 27 20 6f 6e 63 6c 69 63 6b 3d 5c 22 77 69 6e 64 6f 77 2e 6f 70 65 6e 28 27 2f 72 65 73 75 6c 74 2f 62 6c 6f 63 6b 6d 61 6e 27 2c 20 27 5f 62 6c 61 6e 6b 27 29 5c 22 3e 43 6c 69 63 6b 20 68 65 72 65 3c 2f 62 75 74 74 6f 6e 3e 20 3c 62 72 3e 3c 62 72 3e 20 3c 62 3e 53 74 65 70 20 32 2e 3c 2f 62 3e 20 43 6c 69 63 6b 20 6f 6e 20 3c 62 3e 53 74 61 72 74 3c 2f 62 3e 20 74 6f 20 62 65 67 Data Ascii: px;text-align:center;text-decoration:none;display:inline-block;font-size:16px;margin:4px 2px;cursor:pointer;border-radius:10px;' onclick=\"window.open('/result/blockman', '_blank')\">Click here</button> <br><br> <b>Step 2.</b> Click on <b>Start</b> to beg
2025-01-23 17:28:21 UTC	16384	IN	Data Raw: 3e 3c 62 3e 53 74 65 70 20 31 2e 3c 2f 62 3e 20 46 69 72 73 74 20 6f 66 20 61 6c 6c 2c 20 3c 62 72 3e 3c 62 72 3e 20 3c 62 75 74 74 6f 6e 20 73 74 79 6c 65 3d 27 62 61 63 6b 67 72 6f 75 6e 64 3a 23 34 43 41 46 35 30 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 63 6f 6c 6f 72 3a 77 68 69 74 65 3b 70 61 64 64 69 6e 67 3a 39 70 78 20 39 70 78 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 3b 6d 61 72 67 69 6e 3a 34 70 78 20 32 70 78 3b 63 75 72 73 6f 72 3a 70 6f 69 6e 74 65 72 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 31 30 70 78 3b 27 20 6f 6e 63 6c 69 63 6b 3d 5c 22 77 69 6e 64 6f 77 Data Ascii: ><b>Step 1.</b> First of all, <br><br> <button style='background:#4CAF50;border:none;color:white;padding:9px 9px;text-align:center;text-decoration:none;display:inline-block;font-size:16px;margin:4px 2px;cursor:pointer;border-radius:10px;' onclick=\"window
2025-01-23 17:28:21 UTC	1885	IN	Data Raw: 2c 0a 20 20 20 20 22 6a 75 6a 22 3a 20 22 53 6f 2c 20 79 6f 75 20 77 61 6e 6e 61 20 67 65 74 20 61 20 3c 62 3e 4a 75 6a 75 74 73 75 20 49 6e 66 69 6e 69 74 65 20 73 63 72 69 70 74 3c 2f 62 3e 2c 20 68 75 68 3f 20 4d 79 20 73 63 72 69 70 74 20 68 61 73 20 66 65 61 74 75 72 65 73 20 6c 69 6b 65 20 61 75 74 6f 2d 66 61 72 6d 69 6e 67 2c 20 69 6e 73 74 61 20 6b 69 6c 6c 2c 20 67 65 74 20 67 61 6d 65 70 61 73 73 2c 20 69 74 65 6d 20 6e 6f 74 69 66 69 65 72 2c 20 61 75 74 6f 20 6d 69 73 73 69 6f 6e 73 2c 20 69 6e 66 69 6e 69 74 65 20 63 61 73 68 2c 20 69 6e 66 69 6e 69 74 65 20 44 6f 6d 61 69 6e 20 53 68 61 72 64 73 20 61 6e 64 20 6d 61 6e 79 20 6f 74 68 65 72 20 74 68 69 6e 67 73 21 20 f0 9f 98 8a 20 41 73 20 61 6e 20 41 2e 49 20 6d 6f 64 65 6c 2c 20 49 27 6d Data Ascii: , "juj": "So, you wanna get a <b>Jujutsu Infinite script</b>, huh? My script has features like auto-farming, insta kill, get gamepass, item notifier, auto missions, infinite cash, infinite Domain Shards and many other things! As an A.I model, I'm

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:33 UTC	651	OUT	GET /img/roblox/1.png HTTP/1.1 Host: noxgpt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://noxgpt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:28:33 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:28:31 GMT Content-Type: image/png Content-Length: 26981 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Sun, 25 Aug 2024 14:28:55 GMT Accept-Ranges: bytes
2025-01-23 17:28:33 UTC	16043	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 3e 00 00 03 a6 08 06 00 00 00 eb 70 9f 36 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 68 fa 49 44 41 54 78 5e ed dd 0b 9c 55 d5 61 f7 fd ff dc ce dc 67 b8 0d 32 c0 80 02 e3 05 30 3a 68 82 d8 68 f0 d1 84 d4 44 62 7c 22 6d 2c be da 07 4a 5f 35 89 2f b4 a9 52 f3 18 e2 13 8b a9 09 3c 49 bc 34 56 52 7d a0 69 8a 26 4d a1 b1 21 d1 07 aa 0d 88 55 47 23 8c 86 01 15 06 e4 32 dc e6 3e 67 ae ef 5e 7b af 33 73 66 38 c0 9c b9 71 66 d6 ef fb f1 b8 f6 5a fb cc e1 5c f6 39 e7 7f d6 5e 7b ed a4 29 17 cf 6d 17 00 00 80 03 92 6d 09 00 00 30 ec 11 7c 00 00 80 33 08 3e 00 00 c0 19 04 1f 00 00 e0 0c 82 0f 00 00 Data Ascii: PNGIHDR>p6sRGBgAMAapHYs%%IR$hIDATx^Uag20:hhDb\|"m,J_5/R<I4VR}i&M!UG#2>g^{3sf8qfZ\9^{)mm0\|3>
2025-01-23 17:28:33 UTC	10938	IN	Data Raw: 8d b6 3c 55 bf 7f a9 56 75 0b 3d 67 b2 e5 d5 22 fd c9 3f 5c a6 b2 ca 02 85 23 c3 8f 5a 46 c6 b8 1d 33 49 61 99 0d 37 53 bb 4e 52 e8 cf ef 33 53 15 2d 4d ca 9b b5 e7 ec e3 7d 3e 76 42 d3 cd c3 3c 3c 4a 6b 4f 1b 7a 8c 0c 6d 7e df ec ee 3a a1 92 59 f6 58 fb 0e 85 2a 7b db 3c 5f b6 cb 47 59 aa ae 2c d6 86 7f 98 d5 35 f4 44 09 1f b8 c8 7b 9c e6 f6 ac a6 42 ed 7e fd 13 5a 4a e8 01 12 0e 3d 3e 00 e0 8b f4 f8 9c ae 57 2d 06 db e3 53 fd f6 d5 2a 79 fe 6c bd 51 00 12 01 3d 3e 00 00 c0 19 04 1f 00 00 e0 0c 82 0f 00 00 70 06 63 7c 00 00 80 33 e8 f1 01 00 00 ce 20 f8 00 00 00 67 10 7c 00 00 80 33 08 3e 00 00 c0 19 04 1f 00 00 e0 0c 82 0f 30 c8 56 fe 72 b3 f6 bc bb 51 eb ee b0 0d 18 c6 16 68 dd 6b e6 f5 7e 86 13 95 02 09 82 e0 03 24 bc c8 97 e7 66 6d 7a d8 36 01 67 f2 Data Ascii: <UVu=g"?\#ZF3Ia7SNR3S-M}>vB<<JkOzm~:YX{<_GY,5D{B~ZJ=>W-SylQ=>pc\|3 g\|3>0VrQhk~$fmz6g

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:34 UTC	420	OUT	GET /img/roblox/1.png HTTP/1.1 Host: noxgpt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:28:34 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:28:33 GMT Content-Type: image/png Content-Length: 26981 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Sun, 25 Aug 2024 14:28:55 GMT Accept-Ranges: bytes
2025-01-23 17:28:34 UTC	16043	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 3e 00 00 03 a6 08 06 00 00 00 eb 70 9f 36 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 68 fa 49 44 41 54 78 5e ed dd 0b 9c 55 d5 61 f7 fd ff dc ce dc 67 b8 0d 32 c0 80 02 e3 05 30 3a 68 82 d8 68 f0 d1 84 d4 44 62 7c 22 6d 2c be da 07 4a 5f 35 89 2f b4 a9 52 f3 18 e2 13 8b a9 09 3c 49 bc 34 56 52 7d a0 69 8a 26 4d a1 b1 21 d1 07 aa 0d 88 55 47 23 8c 86 01 15 06 e4 32 dc e6 3e 67 ae ef 5e 7b af 33 73 66 38 c0 9c b9 71 66 d6 ef fb f1 b8 f6 5a fb cc e1 5c f6 39 e7 7f d6 5e 7b ed a4 29 17 cf 6d 17 00 00 80 03 92 6d 09 00 00 30 ec 11 7c 00 00 80 33 08 3e 00 00 c0 19 04 1f 00 00 e0 0c 82 0f 00 00 Data Ascii: PNGIHDR>p6sRGBgAMAapHYs%%IR$hIDATx^Uag20:hhDb\|"m,J_5/R<I4VR}i&M!UG#2>g^{3sf8qfZ\9^{)mm0\|3>
2025-01-23 17:28:34 UTC	10938	IN	Data Raw: 8d b6 3c 55 bf 7f a9 56 75 0b 3d 67 b2 e5 d5 22 fd c9 3f 5c a6 b2 ca 02 85 23 c3 8f 5a 46 c6 b8 1d 33 49 61 99 0d 37 53 bb 4e 52 e8 cf ef 33 53 15 2d 4d ca 9b b5 e7 ec e3 7d 3e 76 42 d3 cd c3 3c 3c 4a 6b 4f 1b 7a 8c 0c 6d 7e df ec ee 3a a1 92 59 f6 58 fb 0e 85 2a 7b db 3c 5f b6 cb 47 59 aa ae 2c d6 86 7f 98 d5 35 f4 44 09 1f b8 c8 7b 9c e6 f6 ac a6 42 ed 7e fd 13 5a 4a e8 01 12 0e 3d 3e 00 e0 8b f4 f8 9c ae 57 2d 06 db e3 53 fd f6 d5 2a 79 fe 6c bd 51 00 12 01 3d 3e 00 00 c0 19 04 1f 00 00 e0 0c 82 0f 00 00 70 06 63 7c 00 00 80 33 e8 f1 01 00 00 ce 20 f8 00 00 00 67 10 7c 00 00 80 33 08 3e 00 00 c0 19 04 1f 00 00 e0 0c 82 0f 30 c8 56 fe 72 b3 f6 bc bb 51 eb ee b0 0d 18 c6 16 68 dd 6b e6 f5 7e 86 13 95 02 09 82 e0 03 24 bc c8 97 e7 66 6d 7a d8 36 01 67 f2 Data Ascii: <UVu=g"?\#ZF3Ia7SNR3S-M}>vB<<JkOzm~:YX{<_GY,5D{B~ZJ=>W-SylQ=>pc\|3 g\|3>0VrQhk~$fmz6g

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:35 UTC	651	OUT	GET /img/roblox/2.png HTTP/1.1 Host: noxgpt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://noxgpt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:28:36 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:28:34 GMT Content-Type: image/png Content-Length: 34922 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Sun, 25 Aug 2024 14:28:57 GMT Accept-Ranges: bytes
2025-01-23 17:28:36 UTC	16043	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 3b 00 00 03 3a 08 06 00 00 00 67 fd 82 4a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 87 ff 49 44 41 54 78 5e ed dd 07 60 9c 65 e1 c7 f1 27 b3 9b b6 50 f6 2a 1b ca 5e b2 f7 46 86 88 6c 10 44 91 bd 47 01 15 51 11 fe 80 80 88 2c 51 91 bd 65 ef 8d ec 0d b2 f7 a6 65 95 d2 9d 26 e9 3f df 27 ef 1b af 47 c6 5d 72 69 93 f7 be 1f 0d bd bb dc dd 3b f3 3e bf 7b d6 55 0c 1d 36 7c 5a 90 24 49 ca a8 ca e4 5f 49 92 a4 4c 32 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec Data Ascii: PNGIHDR;:gJsRGBgAMAapHYs%%IR$IDATx^`e'P*^FlDGQ,Qee&?'G]ri;>{U6\|Z$I_IL2HL3HL3HL3HL3HL3HL3HL3HL3HL3HL3
2025-01-23 17:28:36 UTC	16384	IN	Data Raw: 72 9b b8 52 6c 57 fe 79 4d 8d 13 c7 83 ed c8 0f 48 3c 4e 28 a5 59 8d da 11 b0 fd 04 3e de ff 84 13 4e 98 6e 9b f9 61 dd 39 6f 38 ff d3 80 d4 16 96 47 10 a4 f0 a7 b6 a4 b5 fd 9e af 33 cb a7 66 88 f3 98 60 43 c0 49 d1 74 ca 7e 5c 73 cd 35 3b ac 79 23 fc 73 fe b2 9e 69 a8 6d 4d 29 f7 8f d4 11 c3 8e ba 45 fa 09 2d 17 17 49 9a 44 d6 58 63 8d 78 f1 a6 cf 0d 7d 2f 28 7c 8e 39 e6 98 f0 c2 0b 2f 14 1c 7a d2 a6 26 2e 88 74 52 e5 02 4b 21 c3 e3 5d c5 7b 15 22 2d cc d3 e7 53 8b 53 48 21 d4 91 34 c4 a4 9d 6c 73 b5 56 08 77 a4 a3 c2 a9 d4 5a 5b 5e 21 35 36 84 88 dc da 84 b6 50 53 40 58 a1 50 a6 06 e1 ba eb ae 8b e1 99 e6 3e 3a 57 e7 d6 78 51 b3 c8 39 42 d0 21 f0 70 bf b3 e1 3a c5 39 96 bf 9e 69 10 ca c5 f9 d8 5a df a7 7c b9 1f 08 da 42 28 e3 fd 08 0f 85 d6 14 76 66 f9 Data Ascii: rRlWyMH<N(Y>Nna9o8G3f`CIt~\s5;y#simM)E-IDXcx}/(\|9/z&.tRK!]{"-SSH!4lsVwZ[^!56PS@XP>:WxQ9B!p:9iZ\|B(vf
2025-01-23 17:28:36 UTC	2495	IN	Data Raw: f8 e5 ff 9a aa 3e f8 aa e9 a7 e9 3e a1 66 c3 a5 9b 03 97 a4 16 34 0f dd 79 e7 9d e1 9c 73 ce 09 c7 1e 7b 6c 0c 1c 84 0b e6 ed a1 c6 24 b7 89 2b 17 b5 30 69 58 c9 45 f8 22 30 35 36 fd 7d a7 cd 4e b9 cd 6e 84 1a 6a 7f da c3 72 59 3e 7d 77 d6 59 67 9d e9 fa f0 a4 08 48 73 cd 35 57 ac 31 b2 29 4b 85 32 ec a8 67 1b 35 b6 b9 63 f2 8b 1f 86 b0 f9 ff 4d 3f a9 61 fa b3 cd 9f 9a 3b 17 53 0b d4 98 84 28 fa 0a d5 d5 37 07 af 41 7d 9b 1f 93 14 3b 28 9f 77 de 79 b1 df cd 4d 37 dd 14 5e 79 e5 95 30 66 cc 98 18 1e 4a 8d 5a 28 de bb aa aa aa a5 e6 a6 3d 34 61 51 a3 44 48 a2 ef 50 3a 49 62 fe 0f 1d a5 09 54 36 63 a9 50 86 1d f5 6c 53 a6 36 87 96 62 8d 4f 6a 78 06 f7 6b 6e 4a 93 32 80 39 75 a8 3d 49 43 44 b1 e8 48 7c c9 25 97 c4 a6 22 9a 85 e8 e4 4c 78 a0 f3 30 fd 77 e8 1b Data Ascii: >>f4ys{l$+0iXE"056}NnjrY>}wYgHs5W1)K2g5cM?a;S(7A};(wyM7^y0fJZ(=4aQDHP:IbT6cPlS6bOjxknJ29u=ICDH\|%"Lx0w

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:36 UTC	420	OUT	GET /img/roblox/2.png HTTP/1.1 Host: noxgpt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:28:37 UTC	341	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:28:35 GMT Content-Type: image/png Content-Length: 34922 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Sun, 25 Aug 2024 14:28:57 GMT Accept-Ranges: bytes
2025-01-23 17:28:37 UTC	16043	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 3b 00 00 03 3a 08 06 00 00 00 67 fd 82 4a 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 87 ff 49 44 41 54 78 5e ed dd 07 60 9c 65 e1 c7 f1 27 b3 9b b6 50 f6 2a 1b ca 5e b2 f7 46 86 88 6c 10 44 91 bd 47 01 15 51 11 fe 80 80 88 2c 51 91 bd 65 ef 8d ec 0d b2 f7 a6 65 95 d2 9d 26 e9 3f df 27 ef 1b af 47 c6 5d 72 69 93 f7 be 1f 0d bd bb dc dd 3b f3 3e bf 7b d6 55 0c 1d 36 7c 5a 90 24 49 ca a8 ca e4 5f 49 92 a4 4c 32 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec 48 92 a4 4c 33 ec Data Ascii: PNGIHDR;:gJsRGBgAMAapHYs%%IR$IDATx^`e'P*^FlDGQ,Qee&?'G]ri;>{U6\|Z$I_IL2HL3HL3HL3HL3HL3HL3HL3HL3HL3HL3
2025-01-23 17:28:37 UTC	16384	IN	Data Raw: 72 9b b8 52 6c 57 fe 79 4d 8d 13 c7 83 ed c8 0f 48 3c 4e 28 a5 59 8d da 11 b0 fd 04 3e de ff 84 13 4e 98 6e 9b f9 61 dd 39 6f 38 ff d3 80 d4 16 96 47 10 a4 f0 a7 b6 a4 b5 fd 9e af 33 cb a7 66 88 f3 98 60 43 c0 49 d1 74 ca 7e 5c 73 cd 35 3b ac 79 23 fc 73 fe b2 9e 69 a8 6d 4d 29 f7 8f d4 11 c3 8e ba 45 fa 09 2d 17 17 49 9a 44 d6 58 63 8d 78 f1 a6 cf 0d 7d 2f 28 7c 8e 39 e6 98 f0 c2 0b 2f 14 1c 7a d2 a6 26 2e 88 74 52 e5 02 4b 21 c3 e3 5d c5 7b 15 22 2d cc d3 e7 53 8b 53 48 21 d4 91 34 c4 a4 9d 6c 73 b5 56 08 77 a4 a3 c2 a9 d4 5a 5b 5e 21 35 36 84 88 dc da 84 b6 50 53 40 58 a1 50 a6 06 e1 ba eb ae 8b e1 99 e6 3e 3a 57 e7 d6 78 51 b3 c8 39 42 d0 21 f0 70 bf b3 e1 3a c5 39 96 bf 9e 69 10 ca c5 f9 d8 5a df a7 7c b9 1f 08 da 42 28 e3 fd 08 0f 85 d6 14 76 66 f9 Data Ascii: rRlWyMH<N(Y>Nna9o8G3f`CIt~\s5;y#simM)E-IDXcx}/(\|9/z&.tRK!]{"-SSH!4lsVwZ[^!56PS@XP>:WxQ9B!p:9iZ\|B(vf
2025-01-23 17:28:37 UTC	2495	IN	Data Raw: f8 e5 ff 9a aa 3e f8 aa e9 a7 e9 3e a1 66 c3 a5 9b 03 97 a4 16 34 0f dd 79 e7 9d e1 9c 73 ce 09 c7 1e 7b 6c 0c 1c 84 0b e6 ed a1 c6 24 b7 89 2b 17 b5 30 69 58 c9 45 f8 22 30 35 36 fd 7d a7 cd 4e b9 cd 6e 84 1a 6a 7f da c3 72 59 3e 7d 77 d6 59 67 9d e9 fa f0 a4 08 48 73 cd 35 57 ac 31 b2 29 4b 85 32 ec a8 67 1b 35 b6 b9 63 f2 8b 1f 86 b0 f9 ff 4d 3f a9 61 fa b3 cd 9f 9a 3b 17 53 0b d4 98 84 28 fa 0a d5 d5 37 07 af 41 7d 9b 1f 93 14 3b 28 9f 77 de 79 b1 df cd 4d 37 dd 14 5e 79 e5 95 30 66 cc 98 18 1e 4a 8d 5a 28 de bb aa aa aa a5 e6 a6 3d 34 61 51 a3 44 48 a2 ef 50 3a 49 62 fe 0f 1d a5 09 54 36 63 a9 50 86 1d f5 6c 53 a6 36 87 96 62 8d 4f 6a 78 06 f7 6b 6e 4a 93 32 80 39 75 a8 3d 49 43 44 b1 e8 48 7c c9 25 97 c4 a6 22 9a 85 e8 e4 4c 78 a0 f3 30 fd 77 e8 1b Data Ascii: >>f4ys{l$+0iXE"056}NnjrY>}wYgHs5W1)K2g5cM?a;S(7A};(wyM7^y0fJZ(=4aQDHP:IbT6cPlS6bOjxknJ29u=ICDH\|%"Lx0w

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:37 UTC	651	OUT	GET /img/roblox/3.png HTTP/1.1 Host: noxgpt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://noxgpt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:28:38 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:28:36 GMT Content-Type: image/png Content-Length: 117128 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Sun, 25 Aug 2024 14:28:59 GMT Accept-Ranges: bytes
2025-01-23 17:28:38 UTC	16042	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 01 00 00 03 57 08 06 00 00 00 ac 46 8c 3f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 ff a5 49 44 41 54 78 5e ec dd 0b bc a5 d5 fc 3f f0 e5 f7 77 29 c2 44 28 42 43 28 42 93 a2 22 34 44 0d 45 a5 74 11 92 dc ca 35 f7 ea 27 c4 cf a5 5c cb a5 1b a2 a2 7e 15 d1 74 d3 44 65 42 cc a0 cc 44 a9 28 66 28 1a 8a 42 7e e7 bf df 6b ce f7 f4 f4 b4 cf 39 fb 9c 39 67 2e 67 7f 3f af 59 b3 cf 7e f6 b3 6e df f5 ec ef e7 b3 be 6b 3d cf be 5b 29 65 a0 93 12 89 44 22 91 48 f4 19 fe 6b f0 35 91 48 24 12 89 44 9f 21 45 40 22 91 48 24 12 7d 8a 14 01 89 44 22 91 48 f4 29 52 04 24 12 89 44 22 d1 a7 48 11 90 48 24 12 Data Ascii: PNGIHDRWF?sRGBgAMAapHYs%%IR$IDATx^?w)D(BC(B"4DEt5'\~tDeBD(f(B~k99g.g?Y~nk=[)eD"Hk5H$D!E@"H$}D"H)R$D"HH$
2025-01-23 17:28:38 UTC	16384	IN	Data Raw: ec b0 43 bd 63 61 e6 cc 99 77 09 63 8e 17 ea e1 60 ed 01 d0 0f 20 60 ec a4 26 98 90 3a 91 82 1c 9d e7 41 42 c8 b3 9b 03 26 8a b4 1f a1 12 13 ce 7b f1 8b 5f 5c de f1 8e 77 d4 b6 8b 36 58 a2 79 ff fb df 5f b6 dd 76 db 5a a6 19 3a 5b 8a 9a 68 0b bb db ff 40 04 85 40 79 c3 1b de 50 85 d0 73 9e f3 9c f2 dc e7 3e b7 1c 72 c8 21 35 1a 43 94 74 83 99 29 bb 12 33 da 64 43 e7 5b df fa d6 fa 2c 05 cb 19 3b ee b8 63 79 e3 1b df 58 ff 46 5c 84 80 67 45 c4 9a 73 a2 77 18 23 e3 e6 da 99 4c db 29 db f5 64 cc 97 55 00 40 ec 67 21 04 12 09 48 11 d0 27 68 3b 90 e1 9c 09 72 b7 1e 8f 70 de f9 ce 77 56 22 6b a6 f7 be f7 bd f5 61 44 66 b0 60 c6 8c fc 6c 42 43 d0 88 de dd 05 36 14 86 83 e4 c4 ac bf 3f ef 79 cf ab e4 83 a0 6c c8 43 9c 48 13 09 c9 8f c4 08 11 e1 4f e7 7a 95 9f 03 Data Ascii: Ccawc` `&:AB&{_\w6Xy_vZ:[h@@yPs>r!5Ct)3dC[,;cyXF\gEsw#L)dU@g!H'h;rpwV"kaDf`lBC6?ylCHOz
2025-01-23 17:28:38 UTC	16384	IN	Data Raw: 31 8f a9 9b 0a 8d 99 e5 97 91 48 69 aa a2 dd 67 ef 11 ad a8 00 d2 25 92 3c ec ca 12 81 4d a3 c4 40 88 5e 7f bb f6 6d e4 74 27 8c f5 78 9b 4a 7d 8e fc 63 b9 86 c0 08 01 10 af d0 ac db df ce b5 84 43 80 98 f9 db 00 28 2a 11 7b 4a e4 1d 0d 36 76 7a 8a 68 a2 ff e0 6a ea 2f 29 3f c5 31 da c6 c0 95 01 1c 97 d9 8f 0d 70 1c 9f f7 9c 27 e7 d7 74 70 89 95 03 c6 c4 8c d5 06 d0 f8 e5 46 c4 62 bc 90 4c bf 45 03 40 9f 9b 29 22 24 52 6c 52 75 b7 84 bb 63 dc 7d 63 c3 a7 e3 3e 67 4f f6 0b d1 20 8a 10 e4 6f 3f 85 e3 21 00 82 fc 9b a9 1b e2 b8 bc c6 84 30 18 ee dc 6e c8 8d 81 fd 8b 14 01 53 0c ab 82 08 80 b6 43 0b 67 9a 58 79 91 63 76 67 44 ff 23 11 02 21 06 bc 22 7d b3 7e 82 97 28 90 1c 83 10 01 c8 3a 92 f7 8e 77 13 00 d0 b4 7d 20 3e 97 47 ea 76 4e 2f 48 11 d0 bf 70 c5 a4 Data Ascii: 1Hig%<M@^mt'xJ}cC(*{J6vzhj/)?1p'tpFbLE@)"$RlRuc}c>gO o?!0nSCgXycvgD#!"}~(:w} >GvN/Hp
2025-01-23 17:28:38 UTC	16384	IN	Data Raw: 9e 80 69 3d 5c 6b db bc a0 73 ce 95 83 47 2e 3d 66 60 0f fb 6d d6 98 31 b0 cf f1 0b 96 9e 77 73 a7 ff 9d eb bf 23 41 86 ec 58 d3 d0 5e 85 c0 08 ed 0a 7b 35 f6 04 6c b8 d7 61 43 d7 b7 f3 0e dc 69 9b 81 7d 8e 9a 37 78 cd 75 ca 6a 7d 57 e1 d6 85 9d f6 6d d0 6a 47 a6 7e 4f 5d 0f 66 9a 42 e9 2e 22 60 68 f3 5f e7 d0 fc 63 3a 4e 76 b5 7a de 6a 1b ed 31 70 c4 25 e1 94 88 80 17 0f ec 30 b8 01 8c c3 45 9a 6b d7 32 3b 22 e2 ad 1d 11 51 1d d5 ad 03 f3 4e f8 e4 c0 f1 f3 95 67 03 d7 1e 03 9d b9 50 25 8b f3 91 45 c5 d2 8d 5d 8e af 16 c7 3b e5 9d f5 b9 cf 0c 9c 15 e7 74 9c db 61 48 c5 39 1d 72 0d a7 7a f5 c9 fb 0d cc 68 92 ef fb 5e 31 f0 96 ba 59 ac 83 4e 9e 23 f6 1a 24 a8 0e 19 0d 39 c0 2a 3a 9e 39 30 eb 13 83 ef af e9 38 d2 cd 97 f6 91 08 39 70 f6 d2 4a 6f ba e8 d0 81 Data Ascii: i=\ksG.=f`m1ws#AX^{5laCi}7xuj}WmjG~O]fB."`h_c:Nvzj1p%0Ek2;"QNgP%E];taH9rzh^1YN#$9*:9089pJo
2025-01-23 17:28:38 UTC	16384	IN	Data Raw: 96 be 0e 2f 5f 63 5b 66 65 cd bd e9 82 e6 70 3a ce 42 1d 24 23 2e 6f fe be 88 c9 e9 ee ca 7d 4f c0 b7 d5 eb 6d 4a bd 65 f2 4f 4e 7e 0f 04 bf 16 7a 4a bd 16 5a 55 cb 1c 1e f5 7a 5e 0e 71 7e 07 9f 87 e3 d7 3d 97 e5 7f 4f 80 7c 4d 70 8f 7a 1d 70 12 52 9f 8b 35 f0 f8 2b 4c 67 a9 a7 a4 e2 27 5f 11 34 ca d7 20 f3 e5 83 93 0c bb 59 c3 55 1a f5 ca 60 1e d9 70 e2 21 e6 da 60 92 df b5 90 cd e3 b9 ae 08 1a 98 2d 7d 9d 54 bd 06 39 e1 6f 07 d4 66 65 18 c9 e8 3e 39 92 7d 73 1f 0f 94 94 df b5 a0 5c d3 25 37 cb a6 5e b7 24 9d d9 6e 61 da 32 03 b3 de d5 9d a9 db 34 fc bd 14 21 b9 ad 49 e2 8a a0 70 05 39 6e de ff 88 9c a0 d8 b8 f0 32 5c fd dd ef c2 fc 17 65 48 84 3c d8 f7 60 1f 62 18 c3 40 4f 07 ba f8 9a f1 05 e3 18 8b 8f 20 f6 cc 00 fa fe a7 05 b7 fc df 9f a3 ff 8f c3 e8 Data Ascii: /_c[fep:B$#.o}OmJeON~zJZUz^q~=O\|MpzpR5+Lg'_4 YU`p!`-}T9ofe>9}s\%7^$na24!Ip9n2\eH<`b@O
2025-01-23 17:28:38 UTC	16384	IN	Data Raw: fe 66 ec b8 2f ac fc 30 16 46 db 5d 2d f0 9c a0 4c 68 f4 30 2d fa 3a be 54 12 47 7c 38 86 a0 df 07 5f fa ea d5 48 14 d1 e1 b8 bc 37 ae 29 d3 e2 0b 7f 5d a0 2c ce 49 02 fe fd 2d 68 4e 5f b9 1c f1 a3 ed 9e 76 04 79 e1 2a e6 e1 af 96 d5 a1 a6 80 3c 57 7f eb ef f0 b7 05 95 ad fa 1c 4b ee 85 91 38 ea 81 6b bf 5f 96 03 3f e4 15 1d 51 0a 1a ed f3 c2 d3 a7 ac 13 47 c3 41 84 b9 7f 49 39 2a bf f0 57 58 b2 c8 20 2f 35 c7 0e b5 c1 79 8f f2 2c c6 a8 ac bb a6 ba 1e a9 c5 bc c5 66 18 2a 28 ad 93 1e b4 dc d5 86 a0 ba 3f ec bd a7 05 ed 7e 4a af 44 0f a3 69 1e 5e bf 67 2b 1c f7 fa e9 17 d2 ab 95 4e b8 b6 d5 42 4f d5 13 3b d8 82 a6 ed 1d 53 ee 89 a7 06 3b e0 58 53 87 75 ff d2 8e 23 89 8f 51 12 31 c4 4e 06 e0 eb cd 2e 61 47 07 a3 90 e4 f4 4b a1 fd dc 55 58 74 36 1d 3f d4 09 Data Ascii: f/0F]-Lh0-:TG\|8_H7)],I-hN_vy<WK8k_?QGAI9WX /5y,f*(?~JDi^g+NBO;S;XSu#Q1N.aGKUXt6?
2025-01-23 17:28:38 UTC	16384	IN	Data Raw: 2e 59 44 ee 73 a1 e1 b6 ed e8 7c 82 8c 71 f2 33 cd b6 c0 ba ac 0e ae 1d 5d a4 cc bd 68 2c 79 bd 52 33 84 24 93 b5 bb 4b ca f4 7a 94 fd 80 da b3 86 11 f6 cd 5e 04 f6 b7 c2 bd d1 05 e7 6a 07 ec 8b cc 28 cf 92 d1 ab 1e e6 1c 8b 7c 6e 7c 77 54 fb 54 ae 5d cc bc 44 ab 23 c2 40 c6 7d 71 3d 9a aa 8c ba 51 41 6d 4a d6 a5 fa 99 b9 10 60 23 e0 35 e0 f9 e3 0a 54 7d 57 56 89 6a ea 20 63 30 54 a2 f2 32 bd 8b bc 9c c1 b3 cf 6a 8a 4b 5a e3 ea a4 a4 08 a3 f4 93 41 47 53 50 86 1f d3 96 35 a9 43 9a ae 72 c0 61 a5 78 69 06 1b a1 19 4c 20 14 51 ad 75 d5 5f 2e c5 c9 ad 80 de 20 22 7f d6 e2 39 23 5e 7a 01 c7 d3 32 47 06 35 ef 63 6d 7a f2 bb 82 66 f6 72 20 18 19 c1 65 ff b4 0a 0e b9 d4 4f b3 0f df 7d 9b b0 ca 4a 65 ab be 12 0d 7b b4 fc c8 fb ff 23 2f fc 49 53 2e 34 ab a9 1e 57 Data Ascii: .YDs\|q3]h,yR3$Kz^j(\|n\|wTT]D#@}q=QAmJ`#5T}WVj c0T2jKZAGSP5CraxiL Qu_. "9#^z2G5cmzfr eO}Je{#/IS.4W
2025-01-23 17:28:38 UTC	2782	IN	Data Raw: 60 55 c3 58 37 d0 c0 9c 53 86 d2 7f e3 38 7f 52 a4 7b 9a 0b 61 52 91 56 d1 b0 48 53 2e 96 b5 a4 e4 d5 41 5c 11 fe ad 1f 13 1f 2f 36 02 ae 75 8a d6 7e 6d 90 4e 45 74 c5 28 f3 34 87 14 72 40 57 c8 d2 e8 a8 fd 88 68 d2 15 b4 d2 ed 16 76 bd 8c 86 25 39 a5 95 11 e1 5d d7 0b e7 1d 5d 9a 82 a2 3c 76 dd 25 8d 07 4d 66 f6 3b 0a 8a a5 b4 11 70 39 85 99 e2 b3 a7 32 02 88 54 7f 97 68 de ea 14 f6 6b af 17 cd 11 bd 5c bd cd c2 39 57 cb 6f a1 4e a8 ae f6 de 28 fe af 3c 70 a8 a6 49 b2 21 a5 ab a5 49 06 cf 86 76 2d 6f 54 1f ed 37 59 49 31 ea 79 53 74 c3 ac c2 3a a5 ba 6c bf e9 9a 82 11 20 51 c2 c2 bb b3 51 ac bd e5 eb c2 2f c5 29 cb b0 d5 9e 3f dc 68 95 0a 58 4d c7 2f 9a 6a 27 1e 96 cc 1f 9c a3 18 e3 9d 8d f9 7a 30 d6 36 89 ae 84 e6 1f 7e e0 6e d1 7c b6 32 e9 f8 9a f8 fa Data Ascii: `UX7S8R{aRVHS.A\/6u~mNEt(4r@Whv%9]]<v%Mf;p92Thk\9WoN(<pI!Iv-oT7YI1ySt:l QQ/)?hXM/j'z06~n\|2

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:28:39 UTC	420	OUT	GET /img/roblox/3.png HTTP/1.1 Host: noxgpt.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:28:39 UTC	342	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:28:38 GMT Content-Type: image/png Content-Length: 117128 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Sun, 25 Aug 2024 14:28:59 GMT Accept-Ranges: bytes
2025-01-23 17:28:39 UTC	16042	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 01 00 00 03 57 08 06 00 00 00 ac 46 8c 3f 00 00 00 01 73 52 47 42 00 ae ce 1c e9 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 00 09 70 48 59 73 00 00 16 25 00 00 16 25 01 49 52 24 f0 00 00 ff a5 49 44 41 54 78 5e ec dd 0b bc a5 d5 fc 3f f0 e5 f7 77 29 c2 44 28 42 43 28 42 93 a2 22 34 44 0d 45 a5 74 11 92 dc ca 35 f7 ea 27 c4 cf a5 5c cb a5 1b a2 a2 7e 15 d1 74 d3 44 65 42 cc a0 cc 44 a9 28 66 28 1a 8a 42 7e e7 bf df 6b ce f7 f4 f4 b4 cf 39 fb 9c 39 67 2e 67 7f 3f af 59 b3 cf 7e f6 b3 6e df f5 ec ef e7 b3 be 6b 3d cf be 5b 29 65 a0 93 12 89 44 22 91 48 f4 19 fe 6b f0 35 91 48 24 12 89 44 9f 21 45 40 22 91 48 24 12 7d 8a 14 01 89 44 22 91 48 f4 29 52 04 24 12 89 44 22 d1 a7 48 11 90 48 24 12 Data Ascii: PNGIHDRWF?sRGBgAMAapHYs%%IR$IDATx^?w)D(BC(B"4DEt5'\~tDeBD(f(B~k99g.g?Y~nk=[)eD"Hk5H$D!E@"H$}D"H)R$D"HH$
2025-01-23 17:28:39 UTC	16384	IN	Data Raw: ec b0 43 bd 63 61 e6 cc 99 77 09 63 8e 17 ea e1 60 ed 01 d0 0f 20 60 ec a4 26 98 90 3a 91 82 1c 9d e7 41 42 c8 b3 9b 03 26 8a b4 1f a1 12 13 ce 7b f1 8b 5f 5c de f1 8e 77 d4 b6 8b 36 58 a2 79 ff fb df 5f b6 dd 76 db 5a a6 19 3a 5b 8a 9a 68 0b bb db ff 40 04 85 40 79 c3 1b de 50 85 d0 73 9e f3 9c f2 dc e7 3e b7 1c 72 c8 21 35 1a 43 94 74 83 99 29 bb 12 33 da 64 43 e7 5b df fa d6 fa 2c 05 cb 19 3b ee b8 63 79 e3 1b df 58 ff 46 5c 84 80 67 45 c4 9a 73 a2 77 18 23 e3 e6 da 99 4c db 29 db f5 64 cc 97 55 00 40 ec 67 21 04 12 09 48 11 d0 27 68 3b 90 e1 9c 09 72 b7 1e 8f 70 de f9 ce 77 56 22 6b a6 f7 be f7 bd f5 61 44 66 b0 60 c6 8c fc 6c 42 43 d0 88 de dd 05 36 14 86 83 e4 c4 ac bf 3f ef 79 cf ab e4 83 a0 6c c8 43 9c 48 13 09 c9 8f c4 08 11 e1 4f e7 7a 95 9f 03 Data Ascii: Ccawc` `&:AB&{_\w6Xy_vZ:[h@@yPs>r!5Ct)3dC[,;cyXF\gEsw#L)dU@g!H'h;rpwV"kaDf`lBC6?ylCHOz
2025-01-23 17:28:39 UTC	16384	IN	Data Raw: 31 8f a9 9b 0a 8d 99 e5 97 91 48 69 aa a2 dd 67 ef 11 ad a8 00 d2 25 92 3c ec ca 12 81 4d a3 c4 40 88 5e 7f bb f6 6d e4 74 27 8c f5 78 9b 4a 7d 8e fc 63 b9 86 c0 08 01 10 af d0 ac db df ce b5 84 43 80 98 f9 db 00 28 2a 11 7b 4a e4 1d 0d 36 76 7a 8a 68 a2 ff e0 6a ea 2f 29 3f c5 31 da c6 c0 95 01 1c 97 d9 8f 0d 70 1c 9f f7 9c 27 e7 d7 74 70 89 95 03 c6 c4 8c d5 06 d0 f8 e5 46 c4 62 bc 90 4c bf 45 03 40 9f 9b 29 22 24 52 6c 52 75 b7 84 bb 63 dc 7d 63 c3 a7 e3 3e 67 4f f6 0b d1 20 8a 10 e4 6f 3f 85 e3 21 00 82 fc 9b a9 1b e2 b8 bc c6 84 30 18 ee dc 6e c8 8d 81 fd 8b 14 01 53 0c ab 82 08 80 b6 43 0b 67 9a 58 79 91 63 76 67 44 ff 23 11 02 21 06 bc 22 7d b3 7e 82 97 28 90 1c 83 10 01 c8 3a 92 f7 8e 77 13 00 d0 b4 7d 20 3e 97 47 ea 76 4e 2f 48 11 d0 bf 70 c5 a4 Data Ascii: 1Hig%<M@^mt'xJ}cC(*{J6vzhj/)?1p'tpFbLE@)"$RlRuc}c>gO o?!0nSCgXycvgD#!"}~(:w} >GvN/Hp
2025-01-23 17:28:39 UTC	16384	IN	Data Raw: 9e 80 69 3d 5c 6b db bc a0 73 ce 95 83 47 2e 3d 66 60 0f fb 6d d6 98 31 b0 cf f1 0b 96 9e 77 73 a7 ff 9d eb bf 23 41 86 ec 58 d3 d0 5e 85 c0 08 ed 0a 7b 35 f6 04 6c b8 d7 61 43 d7 b7 f3 0e dc 69 9b 81 7d 8e 9a 37 78 cd 75 ca 6a 7d 57 e1 d6 85 9d f6 6d d0 6a 47 a6 7e 4f 5d 0f 66 9a 42 e9 2e 22 60 68 f3 5f e7 d0 fc 63 3a 4e 76 b5 7a de 6a 1b ed 31 70 c4 25 e1 94 88 80 17 0f ec 30 b8 01 8c c3 45 9a 6b d7 32 3b 22 e2 ad 1d 11 51 1d d5 ad 03 f3 4e f8 e4 c0 f1 f3 95 67 03 d7 1e 03 9d b9 50 25 8b f3 91 45 c5 d2 8d 5d 8e af 16 c7 3b e5 9d f5 b9 cf 0c 9c 15 e7 74 9c db 61 48 c5 39 1d 72 0d a7 7a f5 c9 fb 0d cc 68 92 ef fb 5e 31 f0 96 ba 59 ac 83 4e 9e 23 f6 1a 24 a8 0e 19 0d 39 c0 2a 3a 9e 39 30 eb 13 83 ef af e9 38 d2 cd 97 f6 91 08 39 70 f6 d2 4a 6f ba e8 d0 81 Data Ascii: i=\ksG.=f`m1ws#AX^{5laCi}7xuj}WmjG~O]fB."`h_c:Nvzj1p%0Ek2;"QNgP%E];taH9rzh^1YN#$9*:9089pJo
2025-01-23 17:28:39 UTC	16384	IN	Data Raw: 96 be 0e 2f 5f 63 5b 66 65 cd bd e9 82 e6 70 3a ce 42 1d 24 23 2e 6f fe be 88 c9 e9 ee ca 7d 4f c0 b7 d5 eb 6d 4a bd 65 f2 4f 4e 7e 0f 04 bf 16 7a 4a bd 16 5a 55 cb 1c 1e f5 7a 5e 0e 71 7e 07 9f 87 e3 d7 3d 97 e5 7f 4f 80 7c 4d 70 8f 7a 1d 70 12 52 9f 8b 35 f0 f8 2b 4c 67 a9 a7 a4 e2 27 5f 11 34 ca d7 20 f3 e5 83 93 0c bb 59 c3 55 1a f5 ca 60 1e d9 70 e2 21 e6 da 60 92 df b5 90 cd e3 b9 ae 08 1a 98 2d 7d 9d 54 bd 06 39 e1 6f 07 d4 66 65 18 c9 e8 3e 39 92 7d 73 1f 0f 94 94 df b5 a0 5c d3 25 37 cb a6 5e b7 24 9d d9 6e 61 da 32 03 b3 de d5 9d a9 db 34 fc bd 14 21 b9 ad 49 e2 8a a0 70 05 39 6e de ff 88 9c a0 d8 b8 f0 32 5c fd dd ef c2 fc 17 65 48 84 3c d8 f7 60 1f 62 18 c3 40 4f 07 ba f8 9a f1 05 e3 18 8b 8f 20 f6 cc 00 fa fe a7 05 b7 fc df 9f a3 ff 8f c3 e8 Data Ascii: /_c[fep:B$#.o}OmJeON~zJZUz^q~=O\|MpzpR5+Lg'_4 YU`p!`-}T9ofe>9}s\%7^$na24!Ip9n2\eH<`b@O
2025-01-23 17:28:39 UTC	16384	IN	Data Raw: fe 66 ec b8 2f ac fc 30 16 46 db 5d 2d f0 9c a0 4c 68 f4 30 2d fa 3a be 54 12 47 7c 38 86 a0 df 07 5f fa ea d5 48 14 d1 e1 b8 bc 37 ae 29 d3 e2 0b 7f 5d a0 2c ce 49 02 fe fd 2d 68 4e 5f b9 1c f1 a3 ed 9e 76 04 79 e1 2a e6 e1 af 96 d5 a1 a6 80 3c 57 7f eb ef f0 b7 05 95 ad fa 1c 4b ee 85 91 38 ea 81 6b bf 5f 96 03 3f e4 15 1d 51 0a 1a ed f3 c2 d3 a7 ac 13 47 c3 41 84 b9 7f 49 39 2a bf f0 57 58 b2 c8 20 2f 35 c7 0e b5 c1 79 8f f2 2c c6 a8 ac bb a6 ba 1e a9 c5 bc c5 66 18 2a 28 ad 93 1e b4 dc d5 86 a0 ba 3f ec bd a7 05 ed 7e 4a af 44 0f a3 69 1e 5e bf 67 2b 1c f7 fa e9 17 d2 ab 95 4e b8 b6 d5 42 4f d5 13 3b d8 82 a6 ed 1d 53 ee 89 a7 06 3b e0 58 53 87 75 ff d2 8e 23 89 8f 51 12 31 c4 4e 06 e0 eb cd 2e 61 47 07 a3 90 e4 f4 4b a1 fd dc 55 58 74 36 1d 3f d4 09 Data Ascii: f/0F]-Lh0-:TG\|8_H7)],I-hN_vy<WK8k_?QGAI9WX /5y,f*(?~JDi^g+NBO;S;XSu#Q1N.aGKUXt6?
2025-01-23 17:28:40 UTC	16384	IN	Data Raw: 2e 59 44 ee 73 a1 e1 b6 ed e8 7c 82 8c 71 f2 33 cd b6 c0 ba ac 0e ae 1d 5d a4 cc bd 68 2c 79 bd 52 33 84 24 93 b5 bb 4b ca f4 7a 94 fd 80 da b3 86 11 f6 cd 5e 04 f6 b7 c2 bd d1 05 e7 6a 07 ec 8b cc 28 cf 92 d1 ab 1e e6 1c 8b 7c 6e 7c 77 54 fb 54 ae 5d cc bc 44 ab 23 c2 40 c6 7d 71 3d 9a aa 8c ba 51 41 6d 4a d6 a5 fa 99 b9 10 60 23 e0 35 e0 f9 e3 0a 54 7d 57 56 89 6a ea 20 63 30 54 a2 f2 32 bd 8b bc 9c c1 b3 cf 6a 8a 4b 5a e3 ea a4 a4 08 a3 f4 93 41 47 53 50 86 1f d3 96 35 a9 43 9a ae 72 c0 61 a5 78 69 06 1b a1 19 4c 20 14 51 ad 75 d5 5f 2e c5 c9 ad 80 de 20 22 7f d6 e2 39 23 5e 7a 01 c7 d3 32 47 06 35 ef 63 6d 7a f2 bb 82 66 f6 72 20 18 19 c1 65 ff b4 0a 0e b9 d4 4f b3 0f df 7d 9b b0 ca 4a 65 ab be 12 0d 7b b4 fc c8 fb ff 23 2f fc 49 53 2e 34 ab a9 1e 57 Data Ascii: .YDs\|q3]h,yR3$Kz^j(\|n\|wTT]D#@}q=QAmJ`#5T}WVj c0T2jKZAGSP5CraxiL Qu_. "9#^z2G5cmzfr eO}Je{#/IS.4W
2025-01-23 17:28:40 UTC	2782	IN	Data Raw: 60 55 c3 58 37 d0 c0 9c 53 86 d2 7f e3 38 7f 52 a4 7b 9a 0b 61 52 91 56 d1 b0 48 53 2e 96 b5 a4 e4 d5 41 5c 11 fe ad 1f 13 1f 2f 36 02 ae 75 8a d6 7e 6d 90 4e 45 74 c5 28 f3 34 87 14 72 40 57 c8 d2 e8 a8 fd 88 68 d2 15 b4 d2 ed 16 76 bd 8c 86 25 39 a5 95 11 e1 5d d7 0b e7 1d 5d 9a 82 a2 3c 76 dd 25 8d 07 4d 66 f6 3b 0a 8a a5 b4 11 70 39 85 99 e2 b3 a7 32 02 88 54 7f 97 68 de ea 14 f6 6b af 17 cd 11 bd 5c bd cd c2 39 57 cb 6f a1 4e a8 ae f6 de 28 fe af 3c 70 a8 a6 49 b2 21 a5 ab a5 49 06 cf 86 76 2d 6f 54 1f ed 37 59 49 31 ea 79 53 74 c3 ac c2 3a a5 ba 6c bf e9 9a 82 11 20 51 c2 c2 bb b3 51 ac bd e5 eb c2 2f c5 29 cb b0 d5 9e 3f dc 68 95 0a 58 4d c7 2f 9a 6a 27 1e 96 cc 1f 9c a3 18 e3 9d 8d f9 7a 30 d6 36 89 ae 84 e6 1f 7e e0 6e d1 7c b6 32 e9 f8 9a f8 fa Data Ascii: `UX7S8R{aRVHS.A\/6u~mNEt(4r@Whv%9]]<v%Mf;p92Thk\9WoN(<pI!Iv-oT7YI1ySt:l QQ/)?hXM/j'z06~n\|2

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://noxgpt.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Networking

System Summary

Boot Survival

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

LLM Input / Output

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Docs.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Gmail.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Google Drive.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Sheets.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\Slides.lnk

C:\Users\user\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome Apps\YouTube.lnk

Chrome Cache Entry: 100

Chrome Cache Entry: 101

Chrome Cache Entry: 102

Chrome Cache Entry: 103

Chrome Cache Entry: 104

Chrome Cache Entry: 105

Chrome Cache Entry: 106

Chrome Cache Entry: 107

Chrome Cache Entry: 108

Chrome Cache Entry: 109

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Windows Analysis Report
http://noxgpt.com

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:29:31 UTC	780	OUT	GET /result/robloxmodmenu HTTP/1.1 Host: noxgpt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Referer: https://noxgpt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:29:32 UTC	358	IN	HTTP/1.1 301 Moved Permanently Server: nginx Date: Thu, 23 Jan 2025 17:29:30 GMT Content-Type: text/html; charset=iso-8859-1 Content-Length: 248 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Location: https://noxgpt.com/result/robloxmodmenu/
2025-01-23 17:29:32 UTC	248	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 48 54 4d 4c 20 50 55 42 4c 49 43 20 22 2d 2f 2f 49 45 54 46 2f 2f 44 54 44 20 48 54 4d 4c 20 32 2e 30 2f 2f 45 4e 22 3e 0a 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 0a 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 0a 3c 68 31 3e 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 0a 3c 70 3e 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 6e 6f 78 67 70 74 2e 63 6f 6d 2f 72 65 73 75 6c 74 2f 72 6f 62 6c 6f 78 6d 6f 64 6d 65 6e 75 2f 22 3e 68 65 72 65 3c 2f 61 3e 2e 3c 2f 70 3e 0a 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e 0a Data Ascii: <!DOCTYPE HTML PUBLIC "-//IETF//DTD HTML 2.0//EN"><html><head><title>301 Moved Permanently</title></head><body><h1>Moved Permanently</h1><p>The document has moved <a href="https://noxgpt.com/result/robloxmodmenu/">here</a>.</p></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:29:32 UTC	781	OUT	GET /result/robloxmodmenu/ HTTP/1.1 Host: noxgpt.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://noxgpt.com/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:29:32 UTC	386	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:29:30 GMT Content-Type: text/html Content-Length: 6281 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Sat, 26 Oct 2024 14:07:45 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2025-01-23 17:29:32 UTC	6281	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 09 0d 0a 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 64 65 22 3e 0d 0a 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 61 75 64 69 6f 2f 73 69 6c 65 6e 63 65 2e 68 74 6d 6c 22 20 61 6c 6c 6f 77 3d 22 61 75 74 6f 70 6c 61 79 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 22 20 69 64 3d 22 69 66 72 61 6d 65 41 75 64 69 6f 22 3e 0d 0a 3c 2f 3c 69 66 72 61 6d 65 20 73 72 63 3d 22 67 74 61 76 2e 68 74 6d 6c 22 20 61 6c 6c 6f 77 3d 22 61 75 74 6f 70 6c 61 79 22 20 69 64 3d 22 61 75 64 69 6f 22 20 73 74 79 6c 65 3d 22 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 22 3e 3c 2f 69 66 72 61 6d 65 3e 0d 0a 0d 0a 3c 61 75 64 69 6f 20 69 64 3d 22 70 6c 61 79 65 72 22 20 61 75 74 6f 70 6c 61 79 20 6c 6f 6f 70 3e 0d 0a 20 Data Ascii: <!DOCTYPE html><html lang="de"><iframe src="audio/silence.html" allow="autoplay" style="display:none" id="iframeAudio"></<iframe src="gtav.html" allow="autoplay" id="audio" style="display: none"></iframe><audio id="player" autoplay loop>

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:29:33 UTC	651	OUT	GET /result/robloxmodmenu/js/alert-confirm.css HTTP/1.1 Host: noxgpt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://noxgpt.com/result/robloxmodmenu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:29:33 UTC	385	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:29:32 GMT Content-Type: text/css Content-Length: 1489 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Mon, 26 Feb 2024 14:44:36 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2025-01-23 17:29:33 UTC	1489	IN	Data Raw: 2e 6d 73 2d 61 6c 65 72 74 20 7b 0d 0a 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 6c 65 66 74 3a 20 30 3b 0d 0a 20 20 72 69 67 68 74 3a 20 30 3b 0d 0a 20 20 62 6f 74 74 6f 6d 3a 20 30 3b 0d 0a 20 20 74 6f 70 3a 20 30 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 62 6f 78 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 77 65 62 6b 69 74 2d 66 6c 65 78 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 2d 6d 73 2d 66 6c 65 78 62 6f 78 3b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 20 20 2d 6d 73 2d 66 6c 65 Data Ascii: .ms-alert { position: fixed; left: 0; right: 0; bottom: 0; top: 0; display: -webkit-box; display: -webkit-flex; display: -ms-flexbox; display: flex; -webkit-box-pack: center; -webkit-justify-content: center; -ms-fle

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:29:33 UTC	641	OUT	GET /result/robloxmodmenu/css/w3.css HTTP/1.1 Host: noxgpt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://noxgpt.com/result/robloxmodmenu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:29:33 UTC	386	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:29:32 GMT Content-Type: text/css Content-Length: 30342 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Mon, 26 Feb 2024 14:44:36 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2025-01-23 17:29:33 UTC	15998	IN	Data Raw: 2f 2a 20 57 33 2e 43 53 53 20 32 2e 38 37 20 4a 61 6e 20 32 30 31 37 20 62 79 20 4a 61 6e 20 45 67 69 6c 20 61 6e 64 20 42 6f 72 67 65 20 52 65 66 73 6e 65 73 20 2a 2f 0d 0a 68 74 6d 6c 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2a 2c 2a 3a 62 65 66 6f 72 65 2c 2a 3a 61 66 74 65 72 7b 62 6f 78 2d 73 69 7a 69 6e 67 3a 69 6e 68 65 72 69 74 7d 0d 0a 2f 2a 20 45 78 74 72 61 63 74 20 66 72 6f 6d 20 6e 6f 72 6d 61 6c 69 7a 65 2e 63 73 73 20 62 79 20 4e 69 63 6f 6c 61 73 20 47 61 6c 6c 61 67 68 65 72 20 61 6e 64 20 4a 6f 6e 61 74 68 61 6e 20 4e 65 61 6c 20 67 69 74 2e 69 6f 2f 6e 6f 72 6d 61 6c 69 7a 65 20 2a 2f 0d 0a 68 74 6d 6c 7b 2d 6d 73 2d 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 31 30 30 25 3b 2d 77 65 62 6b 69 74 2d 74 Data Ascii: /* W3.CSS 2.87 Jan 2017 by Jan Egil and Borge Refsnes /html{box-sizing:border-box},:before,:after{box-sizing:inherit}/* Extract from normalize.css by Nicolas Gallagher and Jonathan Neal git.io/normalize */html{-ms-text-size-adjust:100%;-webkit-t
2025-01-23 17:29:33 UTC	14344	IN	Data Raw: 2e 77 33 2d 62 6f 72 64 65 72 2d 74 6f 70 7b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 33 2d 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 7b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0a 2e 77 33 2d 62 6f 72 64 65 72 2d 6c 65 66 74 7b 62 6f 72 64 65 72 2d 6c 65 66 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 33 2d 62 6f 72 64 65 72 2d 72 69 67 68 74 7b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 21 69 6d 70 6f 72 74 61 6e 74 7d 0d 0a 2e 77 33 2d 6d 61 72 67 69 6e 7b 6d 61 72 67 69 6e 3a 31 36 70 78 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 77 Data Ascii: .w3-border-top{border-top:1px solid #ccc!important}.w3-border-bottom{border-bottom:1px solid #ccc!important}.w3-border-left{border-left:1px solid #ccc!important}.w3-border-right{border-right:1px solid #ccc!important}.w3-margin{margin:16px!important}.w

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:29:33 UTC	644	OUT	GET /result/robloxmodmenu/css/style.css HTTP/1.1 Host: noxgpt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://noxgpt.com/result/robloxmodmenu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:29:33 UTC	385	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:29:32 GMT Content-Type: text/css Content-Length: 5290 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Sun, 25 Aug 2024 14:23:59 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2025-01-23 17:29:33 UTC	5290	IN	Data Raw: 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 53 61 6e 46 72 61 6e 63 22 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 73 66 2e 68 74 6d 6c 22 29 3b 0d 0a 7d 0d 0a 0d 0a 40 66 6f 6e 74 2d 66 61 63 65 20 7b 0d 0a 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 48 65 6c 76 69 22 3b 0d 0a 20 20 73 72 63 3a 20 75 72 6c 28 22 68 6e 2e 74 74 66 22 29 3b 0d 0a 7d 0d 0a 0d 0a 0d 0a 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 20 7b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 62 6c 61 63 6b 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0d 0a 7d 0d 0a 0d 0a 2e 61 62 6f 75 74 20 68 31 20 7b 0d 0a 09 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 50 61 69 6e 74 69 6e 67 5f 57 69 74 68 5f 43 68 6f 63 6f 6c 61 74 65 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: @font-face { font-family: "SanFranc"; src: url("sf.html");}@font-face { font-family: "Helvi"; src: url("hn.ttf");}element.style { color: black !important;}.about h1 {font-family:Painting_With_Chocolate;font-size:

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:29:33 UTC	798	OUT	GET /result/robloxmodmenu/audio/silence.html HTTP/1.1 Host: noxgpt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Referer: https://noxgpt.com/result/robloxmodmenu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:29:33 UTC	386	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:29:32 GMT Content-Type: text/html Content-Length: 1238 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Tue, 26 Mar 2024 13:55:02 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2025-01-23 17:29:33 UTC	1238	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 20 73 74 79 6c 65 3d 22 63 6f 6c 6f 72 3a 20 23 34 34 34 3b 20 6d 61 72 67 69 6e 3a 30 3b 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 31 34 70 78 2f 32 30 70 78 20 41 72 69 61 6c 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 73 Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 404 Not Found</title></head><body style="color: #444; margin:0;font: normal 14px/20px Arial, Helvetica, s

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:29:33 UTC	625	OUT	GET /result/robloxmodmenu/js/jq.js HTTP/1.1 Host: noxgpt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://noxgpt.com/result/robloxmodmenu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:29:33 UTC	400	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:29:32 GMT Content-Type: application/javascript Content-Length: 86713 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Mon, 26 Feb 2024 14:44:36 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2025-01-23 17:29:33 UTC	15984	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window
2025-01-23 17:29:33 UTC	16384	IN	Data Raw: 64 5d 2c 67 26 26 73 29 7b 6d 3d 71 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6a 3d 6b 5b 61 5d 7c 7c 5b 5d 2c 6e 3d 6a 5b 30 5d 3d 3d 3d 77 26 26 6a 5b 31 5d 2c 74 3d 6e 26 26 6a 5b 32 5d 2c 6d 3d 6e 26 26 71 2e 63 68 69 6c 64 4e 6f 64 65 73 5b 6e 5d 3b 77 68 69 6c 65 28 6d 3d 2b 2b 6e 26 26 6d 26 26 6d 5b 70 5d 7c 7c 28 74 3d 6e 3d 30 29 7c 7c 6f 2e 70 6f 70 28 29 29 69 66 28 31 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 26 26 2b 2b 74 26 26 6d 3d 3d 3d 62 29 7b 6b 5b 61 5d 3d 5b 77 2c 6e 2c 74 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 73 26 26 28 6d 3d 62 2c 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d Data Ascii: d],g&&s){m=q,l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),j=k[a]\|\|[],n=j[0]===w&&j[1],t=n&&j[2],m=n&&q.childNodes[n];while(m=++n&&m&&m[p]\|\|(t=n=0)\|\|o.pop())if(1===m.nodeType&&++t&&m===b){k[a]=[w,n,t];break}}else if(s&&(m=b,l=m[u]\|\|(m[u]={}),k=l[m
2025-01-23 17:29:33 UTC	16384	IN	Data Raw: 75 6c 6c 3d 3d 63 3b 69 66 28 22 6f 62 6a 65 63 74 22 3d 3d 3d 72 2e 74 79 70 65 28 63 29 29 7b 65 3d 21 30 3b 66 6f 72 28 68 20 69 6e 20 63 29 53 28 61 2c 62 2c 68 2c 63 5b 68 5d 2c 21 30 2c 66 2c 67 29 7d 65 6c 73 65 20 69 66 28 76 6f 69 64 20 30 21 3d 3d 64 26 26 28 65 3d 21 30 2c 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 64 29 7c 7c 28 67 3d 21 30 29 2c 6a 26 26 28 67 3f 28 62 2e 63 61 6c 6c 28 61 2c 64 29 2c 62 3d 6e 75 6c 6c 29 3a 28 6a 3d 62 2c 62 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 6a 2e 63 61 6c 6c 28 72 28 61 29 2c 63 29 7d 29 29 2c 62 29 29 66 6f 72 28 3b 68 3c 69 3b 68 2b 2b 29 62 28 61 5b 68 5d 2c 63 2c 67 3f 64 3a 64 2e 63 61 6c 6c 28 61 5b 68 5d 2c 68 2c 62 28 61 5b 68 5d 2c 63 29 29 29 3b 72 65 74 75 72 6e Data Ascii: ull==c;if("object"===r.type(c)){e=!0;for(h in c)S(a,b,h,c[h],!0,f,g)}else if(void 0!==d&&(e=!0,r.isFunction(d)\|\|(g=!0),j&&(g?(b.call(a,d),b=null):(j=b,b=function(a,b,c){return j.call(r(a),c)})),b))for(;h<i;h++)b(a[h],c,g?d:d.call(a[h],h,b(a[h],c)));return
2025-01-23 17:29:33 UTC	16384	IN	Data Raw: 69 66 28 54 28 63 29 29 7b 69 66 28 62 3d 63 5b 56 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 62 2e 65 76 65 6e 74 73 29 66 6f 72 28 64 20 69 6e 20 62 2e 65 76 65 6e 74 73 29 65 5b 64 5d 3f 72 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 63 2c 64 29 3a 72 2e 72 65 6d 6f 76 65 45 76 65 6e 74 28 63 2c 64 2c 62 2e 68 61 6e 64 6c 65 29 3b 63 5b 56 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 7d 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 26 26 28 63 5b 57 2e 65 78 70 61 6e 64 6f 5d 3d 76 6f 69 64 20 30 29 7d 7d 7d 29 2c 72 2e 66 6e 2e 65 78 74 65 6e 64 28 7b 64 65 74 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4a 61 28 74 68 69 73 2c 61 2c 21 30 29 7d 2c 72 65 6d 6f 76 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 4a 61 28 74 Data Ascii: if(T(c)){if(b=c[V.expando]){if(b.events)for(d in b.events)e[d]?r.event.remove(c,d):r.removeEvent(c,d,b.handle);c[V.expando]=void 0}c[W.expando]&&(c[W.expando]=void 0)}}}),r.fn.extend({detach:function(a){return Ja(this,a,!0)},remove:function(a){return Ja(t
2025-01-23 17:29:33 UTC	16384	IN	Data Raw: 66 26 26 32 21 3d 3d 66 29 72 65 74 75 72 6e 20 31 3d 3d 3d 66 26 26 72 2e 69 73 58 4d 4c 44 6f 63 28 61 29 7c 7c 28 62 3d 72 2e 70 72 6f 70 46 69 78 5b 62 5d 7c 7c 62 2c 65 3d 72 2e 70 72 6f 70 48 6f 6f 6b 73 5b 62 5d 29 2c 76 6f 69 64 20 30 21 3d 3d 63 3f 65 26 26 22 73 65 74 22 69 6e 20 65 26 26 76 6f 69 64 20 30 21 3d 3d 28 64 3d 65 2e 73 65 74 28 61 2c 63 2c 62 29 29 3f 64 3a 61 5b 62 5d 3d 63 3a 65 26 26 22 67 65 74 22 69 6e 20 65 26 26 6e 75 6c 6c 21 3d 3d 28 64 3d 65 2e 67 65 74 28 61 2c 62 29 29 3f 64 3a 61 5b 62 5d 7d 2c 70 72 6f 70 48 6f 6f 6b 73 3a 7b 74 61 62 49 6e 64 65 78 3a 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 72 2e 66 69 6e 64 2e 61 74 74 72 28 61 2c 22 74 61 62 69 6e 64 65 78 22 29 3b 72 65 74 75 72 6e 20 Data Ascii: f&&2!==f)return 1===f&&r.isXMLDoc(a)\|\|(b=r.propFix[b]\|\|b,e=r.propHooks[b]),void 0!==c?e&&"set"in e&&void 0!==(d=e.set(a,c,b))?d:a[b]=c:e&&"get"in e&&null!==(d=e.get(a,b))?d:a[b]},propHooks:{tabIndex:{get:function(a){var b=r.find.attr(a,"tabindex");return
2025-01-23 17:29:33 UTC	5193	IN	Data Raw: 62 3d 72 28 22 3c 73 63 72 69 70 74 3e 22 29 2e 70 72 6f 70 28 7b 63 68 61 72 73 65 74 3a 61 2e 73 63 72 69 70 74 43 68 61 72 73 65 74 2c 73 72 63 3a 61 2e 75 72 6c 7d 29 2e 6f 6e 28 22 6c 6f 61 64 20 65 72 72 6f 72 22 2c 63 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 62 2e 72 65 6d 6f 76 65 28 29 2c 63 3d 6e 75 6c 6c 2c 61 26 26 66 28 22 65 72 72 6f 72 22 3d 3d 3d 61 2e 74 79 70 65 3f 34 30 34 3a 32 30 30 2c 61 2e 74 79 70 65 29 7d 29 2c 64 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 5b 30 5d 29 7d 2c 61 62 6f 72 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 63 26 26 63 28 29 7d 7d 7d 7d 29 3b 76 61 72 20 51 62 3d 5b 5d 2c 52 62 3d 2f 28 3d 29 5c 3f 28 3f 3d 26 7c 24 29 7c 5c 3f 5c 3f 2f 3b 72 2e 61 6a 61 78 53 65 74 75 70 28 7b 6a 73 6f 6e 70 3a 22 63 Data Ascii: b=r("<script>").prop({charset:a.scriptCharset,src:a.url}).on("load error",c=function(a){b.remove(),c=null,a&&f("error"===a.type?404:200,a.type)}),d.head.appendChild(b[0])},abort:function(){c&&c()}}}});var Qb=[],Rb=/(=)\?(?=&\|$)\|\?\?/;r.ajaxSetup({jsonp:"c

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:29:33 UTC	630	OUT	GET /result/robloxmodmenu/js/dynamic.js HTTP/1.1 Host: noxgpt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://noxgpt.com/result/robloxmodmenu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:29:33 UTC	399	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:29:32 GMT Content-Type: application/javascript Content-Length: 3732 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Mon, 26 Feb 2024 14:44:36 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2025-01-23 17:29:33 UTC	3732	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 73 6c 69 64 65 55 70 28 29 7b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 66 61 64 65 42 74 6e 22 29 2e 73 74 79 6c 65 2e 6f 70 61 63 69 74 79 20 3d 20 22 30 22 3b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 61 70 70 65 22 29 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 3d 20 22 76 69 73 69 62 6c 65 22 3b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 50 61 72 74 22 29 2e 73 74 79 6c 65 2e 76 69 73 69 62 69 6c 69 74 79 20 3d 20 22 68 69 64 64 65 6e 22 3b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6d 61 69 6e 50 61 72 74 Data Ascii: function slideUp(){ document.getElementById("fadeBtn").style.opacity = "0"; document.getElementById("appe").style.visibility= "visible"; document.getElementById("mainPart").style.visibility = "hidden"; document.getElementById("mainPart

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:29:34 UTC	636	OUT	GET /result/robloxmodmenu/js/alert-confirm.js HTTP/1.1 Host: noxgpt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://noxgpt.com/result/robloxmodmenu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:29:34 UTC	399	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:29:33 GMT Content-Type: application/javascript Content-Length: 5808 Connection: close Vary: Accept-Encoding Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Mon, 26 Feb 2024 14:44:36 GMT Accept-Ranges: bytes Vary: Accept-Encoding
2025-01-23 17:29:34 UTC	5808	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 20 28 24 29 20 7b 0d 0a 20 20 27 75 73 65 20 73 74 72 69 63 74 27 0d 0a 20 20 0d 0a 20 20 66 75 6e 63 74 69 6f 6e 20 41 6c 65 72 74 43 6f 6e 66 69 72 6d 28 65 6c 65 6d 65 6e 74 2c 20 6f 70 74 69 6f 6e 73 29 20 7b 0d 0a 20 20 20 20 74 68 69 73 2e 24 62 6f 64 79 20 3d 20 24 28 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 29 0d 0a 20 20 20 20 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 20 3d 20 24 28 65 6c 65 6d 65 6e 74 29 0d 0a 20 20 20 20 2f 2f 20 74 68 69 73 2e 24 61 6c 65 72 74 48 65 61 64 65 72 20 3d 20 74 68 69 73 2e 24 65 6c 65 6d 65 6e 74 2e 66 69 6e 64 28 27 2e 6d 73 2d 61 6c 65 72 74 2d 68 65 61 64 65 72 27 29 0d 0a 20 20 20 20 2f 2f 20 74 68 69 73 2e 24 61 6c 65 72 74 43 6f 6e 74 65 6e 74 20 3d 20 74 68 69 73 2e 24 65 6c 65 6d 65 Data Ascii: (function ($) { 'use strict' function AlertConfirm(element, options) { this.$body = $(document.body) this.$element = $(element) // this.$alertHeader = this.$element.find('.ms-alert-header') // this.$alertContent = this.$eleme

Timestamp	Bytes transferred	Direction	Data
2025-01-23 17:29:34 UTC	687	OUT	GET /result/robloxmodmenu/img/ip.png HTTP/1.1 Host: noxgpt.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://noxgpt.com/result/robloxmodmenu/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9 Cookie: _pk_id.5.6db8=3e6fdbb24d88b0e9.1737653292.; _pk_ses.5.6db8=1
2025-01-23 17:29:34 UTC	340	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 23 Jan 2025 17:29:33 GMT Content-Type: image/png Content-Length: 2870 Connection: close Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Frame-Options: SAMEORIGIN X-Content-Type-Options: nosniff Last-Modified: Mon, 26 Feb 2024 14:44:36 GMT Accept-Ranges: bytes
2025-01-23 17:29:34 UTC	2870	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 02 00 00 00 02 00 08 06 00 00 00 f4 78 d4 fa 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 0a d8 49 44 41 54 78 da ec dd 3f 76 13 47 1c c0 f1 21 70 00 73 03 71 02 e4 13 58 ee d2 e1 9c 00 b9 4c 65 e8 48 45 38 81 e1 04 16 5d 52 d9 9c c0 a2 a3 43 9c 80 2d d3 61 ba a4 72 66 9e 86 40 f8 93 18 79 57 33 bb fb f9 bc 37 8f e4 e5 05 f9 fd f4 d6 f3 d5 ee 4a 0a 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 Data Ascii: PNGIHDRxtEXtSoftwareAdobe ImageReadyqe<IDATx?vG!psqXLeHE8]RC-arf@yW37J