Edit tour

Windows Analysis Report
http://kjhgt55555555555.blogspot.cz/

Overview

General Information

Sample URL:	http://kjhgt55555555555.blogspot.cz/
Analysis ID:	1638322
Infos:

Detection

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 5964 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2028 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1840,i,3765420331263254797,3778231933835489660,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1984 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7120 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://kjhgt55555555555.blogspot.cz/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://kjhgt55555555555.blogspot.cz/

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://kjhgt55555555555.blogspot.cz/	Avira URL Cloud: Label: phishing
Source: https://kjhgt55555555555.blogspot.com/favicon.ico	Avira URL Cloud: Label: phishing
Source: https://kjhgt55555555555.blogspot.com	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/p	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/fav_logo.ico?5	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/logo.png?2	Avira URL Cloud: Label: phishing
Source: https://kjhgt55555555555.blogspot.com/feeds/posts/default?alt=rss	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/code.js?1	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/counter	Avira URL Cloud: Label: phishing
Source: https://kjhgt55555555555.blogspot.com/	Avira URL Cloud: Label: phishing
Source: http://kjhgt55555555555.blogspot.com/	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/s_yzgt.css	Avira URL Cloud: Label: phishing
Source: https://kjhgt55555555555.blogspot.com/feeds/posts/default	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/hit	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/s_cfmxw.css	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: http://u967289v.beget.tech/

Joe Sandbox AI: Score: 9 Reasons: The brand 'Vkontakte' is well-known and is commonly associated with the domain 'vk.com'., The URL 'u967289v.beget.tech' does not match the legitimate domain 'vk.com'., The domain 'beget.tech' is a generic hosting provider, which is often used for phishing attempts., The presence of input fields for ' email:' and ':' suggests an attempt to capture sensitive information., The URL contains a subdomain 'u967289v', which is not associated with the legitimate Vkontakte domain. DOM: 1.0.pages.csv

Source: http://u967289v.beget.tech/

HTTP Parser: Number of links: 1

Source: http://u967289v.beget.tech/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: http://u967289v.beget.tech/

HTTP Parser: Title: does not match URL

Source: http://u967289v.beget.tech/

HTTP Parser: Has password / email / username input fields

Source: http://u967289v.beget.tech/

HTTP Parser: <input type="password" .../> found

Source: http://u967289v.beget.tech/

HTTP Parser: No <meta name="author".. found

Source: http://u967289v.beget.tech/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.186.132:443 -> 192.168.2.4:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.1:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.1:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.137:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.206:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.137:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.132:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.163:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.149.117:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.149.117:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.240.137.164:443 -> 192.168.2.4:49758 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:49755 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.186.67
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: kjhgt55555555555.blogspot.czConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: kjhgt55555555555.blogspot.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/v1/widgets/3566091532-css_bundle_v2.css HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://kjhgt55555555555.blogspot.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/platform.js HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJShywEInP7MAQiFoM0BCMjhzgE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://kjhgt55555555555.blogspot.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/v1/widgets/3789536756-widgets.js HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://kjhgt55555555555.blogspot.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJShywEInP7MAQiFoM0BCMjRzgEIvtXOAQiA1s4BCMjczgEIiuDOAQjI4c4BCK7kzgEIi+XOAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1Host: img3.proshkolu.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1Host: data3.proshkolu.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1Host: data3.proshkolu.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/mobile/faviconnew.ico?5 HTTP/1.1Host: m.vk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /code.js?1 HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/s_cfmxw.css HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/s_yzgt.css HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/hit HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/p HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/counter HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/logo.png?2 HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/index_files/s_yzgt.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/p HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/hit HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/logo.png?2 HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/counter HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/fav_logo.ico?5 HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/fav_logo.ico?5 HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_75.3.dr

String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: kjhgt55555555555.blogspot.cz
Source: global traffic	DNS traffic detected: DNS query: kjhgt55555555555.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: www.blogger.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: u967289v.beget.tech
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: img3.proshkolu.ru
Source: global traffic	DNS traffic detected: DNS query: data3.proshkolu.ru
Source: global traffic	DNS traffic detected: DNS query: m.vk.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: kittenxDate: Fri, 14 Mar 2025 09:43:11 GMTContent-Type: text/htmlContent-Length: 550Connection: closeX-Frontend: front656302Access-Control-Expose-Headers: X-FrontendX-Trace-Id: mQgwsLX3y0mM3q5654n-sdm5uFpycAServer-Timing: tid;desc="mQgwsLX3y0mM3q5654n-sdm5uFpycA"

Source: chromecache_83.3.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_72.3.dr	String found in binary or memory: http://kjhgt55555555555.blogspot.com/
Source: chromecache_72.3.dr	String found in binary or memory: http://schema.org/Blog
Source: chromecache_72.3.dr	String found in binary or memory: http://u967289v.beget.tech
Source: chromecache_75.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_75.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_75.3.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_75.3.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_75.3.dr	String found in binary or memory: https://apis.google.com/js/platform.js
Source: chromecache_75.3.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_75.3.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_75.3.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_75.3.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_83.3.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_75.3.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_75.3.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_75.3.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_75.3.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_72.3.dr	String found in binary or memory: https://kjhgt55555555555.blogspot.com
Source: chromecache_72.3.dr	String found in binary or memory: https://kjhgt55555555555.blogspot.com/
Source: chromecache_72.3.dr	String found in binary or memory: https://kjhgt55555555555.blogspot.com/favicon.ico
Source: chromecache_72.3.dr	String found in binary or memory: https://kjhgt55555555555.blogspot.com/feeds/posts/default
Source: chromecache_72.3.dr	String found in binary or memory: https://kjhgt55555555555.blogspot.com/feeds/posts/default?alt=rss
Source: chromecache_75.3.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_75.3.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_75.3.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_75.3.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_72.3.dr	String found in binary or memory: https://resources.blogblog.com/blogblog/data/1kt/simple/body_gradient_tile_light.png)
Source: chromecache_72.3.dr	String found in binary or memory: https://resources.blogblog.com/blogblog/data/1kt/simple/gradients_light.png)
Source: chromecache_83.3.dr	String found in binary or memory: https://resources.blogblog.com/img/widgets/icon_contactform_cross.gif
Source: chromecache_75.3.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_75.3.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_83.3.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=
Source: chromecache_75.3.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_72.3.dr	String found in binary or memory: https://www.blogger.com
Source: chromecache_72.3.dr	String found in binary or memory: https://www.blogger.com/dyn-css/authorization.css?targetBlogID=7528910324557432955&zx=83f11ee6-7
Source: chromecache_72.3.dr	String found in binary or memory: https://www.blogger.com/feeds/7528910324557432955/posts/default
Source: chromecache_72.3.dr	String found in binary or memory: https://www.blogger.com/navbar/7528910324557432955?origin
Source: chromecache_72.3.dr	String found in binary or memory: https://www.blogger.com/profile/17053535176928240034
Source: chromecache_72.3.dr	String found in binary or memory: https://www.blogger.com/static/v1/jsbin/3559622654-lbx__ru.js
Source: chromecache_72.3.dr	String found in binary or memory: https://www.blogger.com/static/v1/v-css/1964470060-lightbox_bundle.css
Source: chromecache_72.3.dr	String found in binary or memory: https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
Source: chromecache_72.3.dr	String found in binary or memory: https://www.blogger.com/static/v1/widgets/3789536756-widgets.js
Source: chromecache_75.3.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_75.3.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_75.3.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_75.3.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1

Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 142.250.186.132:443 -> 192.168.2.4:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.1:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.1:443 -> 192.168.2.4:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.137:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.206:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.137:443 -> 192.168.2.4:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.132:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.163:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.149.117:443 -> 192.168.2.4:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.149.117:443 -> 192.168.2.4:49759 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.240.137.164:443 -> 192.168.2.4:49758 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5964_798458140

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5964_798458140

Jump to behavior

Source: classification engine

Classification label: mal64.phis.win@23/40@32/12

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1840,i,3765420331263254797,3778231933835489660,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1984 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://kjhgt55555555555.blogspot.cz/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1840,i,3765420331263254797,3778231933835489660,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1984 /prefetch:3			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://kjhgt55555555555.blogspot.cz/	100%	Avira URL Cloud	phishing

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
https://img3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif	0%	Avira URL Cloud	safe
https://kjhgt55555555555.blogspot.cz/	100%	Avira URL Cloud	phishing
https://kjhgt55555555555.blogspot.com/favicon.ico	100%	Avira URL Cloud	phishing
https://kjhgt55555555555.blogspot.com	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/p	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/fav_logo.ico?5	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/logo.png?2	100%	Avira URL Cloud	phishing
https://kjhgt55555555555.blogspot.com/feeds/posts/default?alt=rss	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/code.js?1	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/counter	100%	Avira URL Cloud	phishing
https://kjhgt55555555555.blogspot.com/	100%	Avira URL Cloud	phishing
http://kjhgt55555555555.blogspot.com/	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/s_yzgt.css	100%	Avira URL Cloud	phishing
https://kjhgt55555555555.blogspot.com/feeds/posts/default	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/hit	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech	100%	Avira URL Cloud	phishing
https://data3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif	0%	Avira URL Cloud	safe
http://u967289v.beget.tech/index_files/s_cfmxw.css	100%	Avira URL Cloud	phishing

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
u967289v.beget.tech	185.50.25.7	true	true		unknown
plus.l.google.com	142.250.184.206	true	false		high
code.jquery.com	151.101.194.137	true	false		high
blogspot.l.googleusercontent.com	216.58.206.65	true	false		high
img3.proshkolu.ru	104.21.29.163	true	false		unknown
www.google.com	142.250.186.132	true	false		high
data3.proshkolu.ru	172.67.149.117	true	false		unknown
blogger.l.google.com	142.250.185.137	true	false		high
m.vk.com	87.240.137.164	true	false		high
kjhgt55555555555.blogspot.cz	unknown	unknown	false		unknown
kjhgt55555555555.blogspot.com	unknown	unknown	false		unknown
apis.google.com	unknown	unknown	false		high
www.blogger.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://u967289v.beget.tech/index_files/p	true	Avira URL Cloud: phishing	unknown
http://u967289v.beget.tech/code.js?1	true	Avira URL Cloud: phishing	unknown
http://u967289v.beget.tech/index_files/counter	true	Avira URL Cloud: phishing	unknown
https://kjhgt55555555555.blogspot.cz/	false	Avira URL Cloud: phishing	unknown
http://u967289v.beget.tech/index_files/fav_logo.ico?5	true	Avira URL Cloud: phishing	unknown
http://code.jquery.com/jquery.min.js	false		high
http://u967289v.beget.tech/index_files/logo.png?2	true	Avira URL Cloud: phishing	unknown
https://img3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif	false	Avira URL Cloud: safe	unknown
http://u967289v.beget.tech/	true		unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css	false		high
http://u967289v.beget.tech/index_files/s_yzgt.css	true	Avira URL Cloud: phishing	unknown
https://kjhgt55555555555.blogspot.com/	false	Avira URL Cloud: phishing	unknown
https://apis.google.com/js/platform.js	false		high
http://u967289v.beget.tech/index_files/hit	true	Avira URL Cloud: phishing	unknown
http://u967289v.beget.tech/index_files/s_cfmxw.css	true	Avira URL Cloud: phishing	unknown
https://data3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif	false	Avira URL Cloud: safe	unknown
https://www.blogger.com/static/v1/widgets/3789536756-widgets.js	false		high
https://m.vk.com/images/mobile/faviconnew.ico?5	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://kjhgt55555555555.blogspot.com/favicon.ico	chromecache_72.3.dr	false	Avira URL Cloud: phishing	unknown
https://www.blogger.com	chromecache_72.3.dr	false		high
https://twitter.com/intent/tweet?text=	chromecache_83.3.dr	false		high
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_75.3.dr	false		high
https://github.com/google/safevalues/issues	chromecache_75.3.dr	false		high
https://resources.blogblog.com/blogblog/data/1kt/simple/body_gradient_tile_light.png)	chromecache_72.3.dr	false		high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_75.3.dr	false		high
https://www.blogger.com/feeds/7528910324557432955/posts/default	chromecache_72.3.dr	false		high
https://www.blogger.com/dyn-css/authorization.css?targetBlogID=7528910324557432955&zx=83f11ee6-7	chromecache_72.3.dr	false		high
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_75.3.dr	false		high
https://kjhgt55555555555.blogspot.com/feeds/posts/default?alt=rss	chromecache_72.3.dr	false	Avira URL Cloud: phishing	unknown
https://pay.google.com/gp/v/widget/save	chromecache_75.3.dr	false		high
https://drive.google.com/savetodrivebutton?usegapi=1	chromecache_75.3.dr	false		high
https://kjhgt55555555555.blogspot.com	chromecache_72.3.dr	false	Avira URL Cloud: phishing	unknown
https://www.blogger.com/static/v1/v-css/1964470060-lightbox_bundle.css	chromecache_72.3.dr	false		high
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_75.3.dr	false		high
https://apis.google.com	chromecache_75.3.dr	false		high
https://resources.blogblog.com/img/widgets/icon_contactform_cross.gif	chromecache_83.3.dr	false		high
http://kjhgt55555555555.blogspot.com/	chromecache_72.3.dr	false	Avira URL Cloud: phishing	unknown
http://schema.org/Blog	chromecache_72.3.dr	false		high
https://classroom.google.com/sharewidget?usegapi=1	chromecache_75.3.dr	false		high
https://resources.blogblog.com/blogblog/data/1kt/simple/gradients_light.png)	chromecache_72.3.dr	false		high
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_75.3.dr	false		high
https://www.blogger.com/navbar/7528910324557432955?origin	chromecache_72.3.dr	false		high
https://www.blogger.com/static/v1/jsbin/3559622654-lbx__ru.js	chromecache_72.3.dr	false		high
https://plus.google.com	chromecache_75.3.dr	false		high
https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1	chromecache_75.3.dr	false		high
https://kjhgt55555555555.blogspot.com/feeds/posts/default	chromecache_72.3.dr	false	Avira URL Cloud: phishing	unknown
https://www.blogger.com/profile/17053535176928240034	chromecache_72.3.dr	false		high
https://talkgadget.google.com/:session_prefix:talkgadget/_/widget	chromecache_75.3.dr	false		high
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_75.3.dr	false		high
http://u967289v.beget.tech	chromecache_72.3.dr	false	Avira URL Cloud: phishing	unknown
https://families.google.com/webcreation?usegapi=1&usegapi=1	chromecache_75.3.dr	false		high
https://clients6.google.com	chromecache_75.3.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
172.67.149.117	data3.proshkolu.ru	United States		13335	CLOUDFLARENETUS	false
216.58.206.65	blogspot.l.googleusercontent.com	United States		15169	GOOGLEUS	false
87.240.137.164	m.vk.com	Russian Federation		47541	VKONTAKTE-SPB-AShttpvkcomRU	false
172.217.18.1	unknown	United States		15169	GOOGLEUS	false
142.250.185.137	blogger.l.google.com	United States		15169	GOOGLEUS	false
185.50.25.7	u967289v.beget.tech	Russian Federation		198610	BEGET-ASRU	true
104.21.29.163	img3.proshkolu.ru	United States		13335	CLOUDFLARENETUS	false
142.250.186.132	www.google.com	United States		15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States		54113	FASTLYUS	false
142.250.184.206	plus.l.google.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.7
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638322
Start date and time:	2025-03-14 10:41:46 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 35s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://kjhgt55555555555.blogspot.cz/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	20
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@23/40@32/12
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.74.206, 142.250.184.227, 142.251.5.84, 216.58.206.46, 172.217.18.110, 142.250.186.110, 216.58.206.78, 142.250.181.238, 199.232.214.172, 172.217.16.202, 216.58.206.74, 142.250.184.202, 172.217.18.10, 172.217.16.138, 142.250.186.138, 142.250.186.42, 142.250.186.170, 142.250.184.234, 216.58.212.170, 142.250.186.74, 142.250.186.106, 142.250.185.138, 142.250.185.74, 142.250.185.106, 142.250.185.202, 172.217.16.142, 142.250.186.78, 142.250.185.206, 142.250.185.131, 142.250.185.142, 142.250.186.163, 142.250.186.174, 142.250.186.142, 172.217.18.14, 23.199.214.10, 20.109.210.53
Excluded domains from analysis (whitelisted): clients1.google.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://kjhgt55555555555.blogspot.cz/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 64

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUfExltxlHh/:Wb/
MD5:	9BB191C6827273AA978CAB39A3587950
SHA1:	25D8043336EB799E52B1A0E15FF6B95E09C24E35
SHA-256:	24E480E4659FBAE818853A38F8A3036F529F539024DC3E772C0B594CE02EA9DB
SHA-512:	C3970B9A8DC9B424528274E8D22D21E9990CE956AEDE61CBA13DE8D7832A8C896EAF1032662A78E95980EA013090CD4406F32604DA3C6F557AA136842D04324D
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/p
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 65

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.378783493486175
Encrypted:	false
SSDEEP:	3:bPuw:juw
MD5:	D6B47B530BA6F7AD9769DC4D76BB0225
SHA1:	86530627C71F6D2129D7D12010E98356E2591FED
SHA-256:	EF044782EEEFF4B6FC082B1B82D2385FE9F3CAA0E2746ECCD1B8598CCEE9B816
SHA-512:	F7D89E6B66399E79065223F998F0DC5DBA20F18CFB2F8986BCDCC9BDFC2769B96EF992BF5D0CB31F325598359593A5C1351A0A78B8FD0076C9B44774A60B9F3F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIgCd2S_IE0VJcFEgUNKEstiRIFDc5BTHoh9o38D13h7bA=?alt=proto
Preview:	ChIKBw0oSy2JGgAKBw3OQUx6GgA=

Chrome Cache Entry: 66

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 152054
Category:	downloaded
Size (bytes):	32330
Entropy (8bit):	7.992596581845741
Encrypted:	true
SSDEEP:	768:mEJ7COWYS5FIDcxcS2+rkaewfxDAM9jvZfE:bCOWvFIcx11kaeYFAMxa
MD5:	89E4A1416DCE48395219884399088611
SHA1:	B45EBD5A50DBB075901EEEE59B467F5B62277CDF
SHA-256:	AA01DB4991B977DC968A718576DA79749184A2EBD7C55D68B954A61164795FB1
SHA-512:	AA6CAA41B5DE83ABA266441A2FC815FDCF57A24461E66350FC3940D867EA3B5348F2A8658D338406CE0AF3B3C5DEA38C39A78F8365D756906E8BAB6E6643CE32
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/s_cfmxw.css
Preview:	...........is..(.}".?`..8W. .h.d.....E......4.6........S{efeu..g..Mvee.YY.....~.n..U.\N._...c.Xo..f./....?.].=.6..."[...?.f.<k..e.y..#..u..=........7.<y..E.@./g.KY\|.OW..8..Z.~.....9.7...y.n...n....yX>...M.>M..\|^.oN....j..P.....$...6/nn...'...4....6.....EO.......V..$..s(u....\|zW.#..W;.......b3;.'.z...r5....t...;4L7..l./.\|9'S..3..be`..>n..e...F..d...)...N..l.y8]o.yd.<.G;C.v.gb..rU..M.b.T.n.8....f..~.._...D...f...15...+..vS....5....Fv...H........+.....0..$[.4..k..n..L..}.{V}}j.fb..B.y9..v........F....../...vS..{..,...L.\,.....y...4.5......D..O..0.....#=Eg.b"O.v..t*N......t#.hu....-...W.B..1...3.W?.?n.......X=.'AKW.qo\|q.fc./....n.L...=..o.. .MQ_&....'.t&...V.^C...O..^.A...F...e..%.....(.....t.....A".So@..@Sjg.su1..1,.i.\|...........;Y..U<...e..F...s&.b...A.6j...Gu..N@..}0'.1.ctO.......z.`.v..z..C.r.......j..........rA..gh[.....Za...K[./....H....q..Yk.z....7.._....4d...d.y..&I.X..%C....L...:Cg.z.Z..1.bm1.....}6Y=.u...liVp%..2....v..gk

Chrome Cache Entry: 67

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUfExltxlHh/:Wb/
MD5:	9BB191C6827273AA978CAB39A3587950
SHA1:	25D8043336EB799E52B1A0E15FF6B95E09C24E35
SHA-256:	24E480E4659FBAE818853A38F8A3036F529F539024DC3E772C0B594CE02EA9DB
SHA-512:	C3970B9A8DC9B424528274E8D22D21E9990CE956AEDE61CBA13DE8D7832A8C896EAF1032662A78E95980EA013090CD4406F32604DA3C6F557AA136842D04324D
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 68

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUfExltxlHh/:Wb/
MD5:	9BB191C6827273AA978CAB39A3587950
SHA1:	25D8043336EB799E52B1A0E15FF6B95E09C24E35
SHA-256:	24E480E4659FBAE818853A38F8A3036F529F539024DC3E772C0B594CE02EA9DB
SHA-512:	C3970B9A8DC9B424528274E8D22D21E9990CE956AEDE61CBA13DE8D7832A8C896EAF1032662A78E95980EA013090CD4406F32604DA3C6F557AA136842D04324D
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 69

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUfExltxlHh/:Wb/
MD5:	9BB191C6827273AA978CAB39A3587950
SHA1:	25D8043336EB799E52B1A0E15FF6B95E09C24E35
SHA-256:	24E480E4659FBAE818853A38F8A3036F529F539024DC3E772C0B594CE02EA9DB
SHA-512:	C3970B9A8DC9B424528274E8D22D21E9990CE956AEDE61CBA13DE8D7832A8C896EAF1032662A78E95980EA013090CD4406F32604DA3C6F557AA136842D04324D
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/counter
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 70

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 394 x 118
Category:	dropped
Size (bytes):	18837
Entropy (8bit):	7.706509774277951
Encrypted:	false
SSDEEP:	384:wtN3QHbqbFgfSizi6GCpj1c5HRlGivmUjYfoY62D5v:wtN3QebSfSizi0KXlGAm0Kob2Dp
MD5:	56A07DDE31C73F8FBE5299DF53ABC050
SHA1:	CB9068B30661755E7B9306B5282F7424BFA97EEE
SHA-256:	0C16CEAD2A8188E08C385478868A5D7A3720ABD7B7226273BA1AECECCC4D6E6A
SHA-512:	3342CD715E3F77F14882ED5AC9BA613FC28E840D28A4DFA73B801AB96793E9B7FC231B62460E0EC74D1881D595E71798E90729CA1200E026E6464FD881FE1DC7
Malicious:	false
Reputation:	low
Preview:	GIF89a..v........\s.o.....w.H.I.Q.6..................Gz.]...k..3...ee.......}..X._.C...........o..N..k........}...t.1.......U.K...tSb.Y..=.q.V...i.N.&a.9y..mN.......z..Z....c........X..C...y....s..g..7m.i...}...}.C.....X........f)....Xa.x.%x^]'..'...Y../0,...iq...0v%.Qf.?.;..J.....p.....W..k.d.E....;...x........d..C..j.l.E..Tv-Y..^.\...........~...v.\.o....f1}x.Q....f...m.y.rK.}._..Ii.s..'h....k.......l...p.L....v..?i.v..{.P.......8..J.......S..x...EA....S.W..A.l..9Vb.0B~.Q...v.............`..W..G..}...kx..y.........D.x.x7.,..,.....\|.e<:...........M!\.c....e.D../z.Hy..w.\.X.(.%4..G.........?-..p...[...V@..s`./k..@......G.~..T.N.7A......,r.Z. ..$..B.z.Ny.q.d.l.Is.Z..a.....a.....y.........<f. ..1o.......!..NETSCAPE2.0.....!.......,......v........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.....

Chrome Cache Entry: 71

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1618
Category:	downloaded
Size (bytes):	712
Entropy (8bit):	7.713630834387732
Encrypted:	false
SSDEEP:	12:X/FvbFHx9QJNrq39jT8QPSmxdMyETnWUaG/kt7slNdNTHNYV0zsehMJym:X/FvbFHMNAjwhsNsnBBQ7slNdPYeztrm
MD5:	BB4E14E98CC46C6EF40CC29DB50DB947
SHA1:	051D0A15007762043DF6CE8F461A5D43D1579303
SHA-256:	5CCB889E562C36CD9CEE2ECA1C55910430428BC26E47339C0FC82EEB47FB6ACC
SHA-512:	30EED420A1584FD6178A7D8A26AE55CF2E6663971D59887E6F3108858C8792372BA2695D499B080D59DE1CCE8F10F321BAD76CA965F51A1B1974BA1FB100B95B
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/code.js?1
Preview:	...........T.j.@.....7r!6Qe....c..f.....Y.[.F.HNB0$....J.,.....$%iI..3..;z.\'.#..=w..s....v.=$.:p....5.&....<....Mqu.....`...VK...1..z.U..-..(s..\|.....v.=.....gH..D..9K.....:..c..=c!.....j....+..F>..b$.YP.D..1/.t...JUM.,.....n...-..FHyT......5...~..#=u.Loz.....37...>..cE..5..1.aFh1Nv.}.RJS...)F..^D.#.t@..l.....~.Kq!..D\..#..N~.g..f.....8.;.....k(`M..X... .#..B.U..8$...spU..B...;.\|....%.....o...C..'..[qQ.Z.._IA6.,...'.....A.6...}.....?......+.z.L.L ..c..P"8..z>q..j..\|.i......OmK..p..cLT..._..J...u:..xt..,{8`4....r.j./....hA._......8.Q\mk....f........aK9T.].m.&.u.w..<..Mq..y?.F.V\c...v..M.'~ ....b.5.M.T......Yy"...h.....+KT.<W].h./...O.=$.f.#s..D..$i../\|s._...o..R.AER...

Chrome Cache Entry: 72

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5187)
Category:	downloaded
Size (bytes):	26910
Entropy (8bit):	5.526478879142366
Encrypted:	false
SSDEEP:	384:wFE/uo35xCHMsV1oHHXfPWdoy5zo8FaHrkRl3kLqljfEDlUXdll+kxDBewpd:w8V3eyHHvPWdomzhFaH4/0OtbX
MD5:	389B5A4BDD3DB64F4E75AA8310C0C7EC
SHA1:	FD0D8FD454F5017EC9B6A402BEE6CB5E80EE169E
SHA-256:	7CCBA9D95113E3AB2EE67B85266E41D99EA7D49D00113569763FD5A994B3014E
SHA-512:	62E74E0E7CB34667DB59852DE05C2DD23B259A9D2B46D46AE6E2FD7ABE0831D4F42AB3824568875E91F7369AE8B5EF4F7B798AB4FC29A859EC4733E614E49298
Malicious:	false
Reputation:	low
URL:	https://kjhgt55555555555.blogspot.com/
Preview:	<!DOCTYPE html>.<html class='v2' dir='ltr' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>.<link href='https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css' rel='stylesheet' type='text/css'/>.<script>.window.location="http://u967289v.beget.tech";.</script>.<meta content='width=1100' name='viewport'/>.<meta content='text/html; charset=UTF-8' http-equiv='Content-Type'/>.<meta content='blogger' name='generator'/>.<link href='https://kjhgt55555555555.blogspot.com/favicon.ico' rel='icon' type='image/x-icon'/>.<link href='http://kjhgt55555555555.blogspot.com/' rel='canonical'/>.<link rel="alternate" type="application/atom+xml" title="1 - Atom" href="https://kjhgt55555555555.blogspot.com/feeds/posts/default" />.<link rel="alternate" type="application/rss+xml" title="1 - RSS" href="https://kjhgt55555555555.blogspot.com/feeds/posts/default?a

Chrome Cache Entry: 73

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 124 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1334
Entropy (8bit):	7.8121398461902585
Encrypted:	false
SSDEEP:	24:K6GtVv3VH3LnOjEF3nZ4o6S/3W4HgkE2k862rY26W2wPUzRL7:KxVv3Zjf16I3Lgd864YS2hzRX
MD5:	0A40A67A4CE053228E7B9DC45DD1B4C8
SHA1:	0BFD8946A30317EA70FF83194BAE589B0534E794
SHA-256:	F64EBEDAF9A92741DDB0878A8303D3E3E6B819876353F2779B5FCCEBCEA06374
SHA-512:	59EAE9A83644E5B05F9BF31EC29F6B44C438ABB7601A7BEF92EDA8DF8364594A29D86A9749AD02830765B97EB810F3EDC4DBF93790B54FC9B8EE62D7105000FB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\|..........'JW....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..m..U..G....t.j..D"+.^L%.......J.Yi..le`%Y.....J.BZ.V..c..+...mh...j.f.........x..gf..u.9.c..o...{..V,..\...O.K...X...MP..o...-.T.1..`.?..`[>......l.A..\|..i..Rr.;@.\|..7..V..0gGBL........9`l...7....\|.`.K...../.......Q...9...?....#r.....)Aw.!F.............A.....{`..;'.~/..b8..F.6......T.=..?.....RW...e.............fE...(..Z.s.....U.....k..{.u`.O.q..\..K.N..\|tb...........'.........H/t3.h91uF.p)<..@c....&.....\|+.PP..^....1..E%r....m.a.O..g..h...^...J.3......iO..c..mA\......\>..X.o..d7....o.=.e\|.&.K..w..F./$..'.t;...Y.M]s.....G(.J...........z....V..............I...q..A%/U:.z..iQV.ZoP.%\...P..7e?1..p..7%../.3...oAA..jz.....9F...'.t....<..CAb;%./`.\|k..8...s...Wv..;=..4E\..W..q.9.D.n.....b..d......1....-./3H...LI..^7..f..0....@......2.>...5..d"..(/...}..../v.O...05.........Z..2'.NZ..>nqO..S....R.4A.G...-e..\|..._..0.Fo..k...Q.+._....b....g.;.0.].<.#.+/(7......Od...

Chrome Cache Entry: 74

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/hit
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 75

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1863)
Category:	downloaded
Size (bytes):	64281
Entropy (8bit):	5.539546941053244
Encrypted:	false
SSDEEP:	1536:wPJHqONt8T7jWR06+4DJBq94Qywsg61okuL:mNtCWjJBxg61+
MD5:	FA838B290DECF8784B62F55197684D83
SHA1:	0C231D0EFA8BFDCF17D2E4CB958E738A3F242B09
SHA-256:	0A871F520FAC7B34502B55A6917DB54D77C17E1CD929B19F7F308A93E7470ADA
SHA-512:	ADF97B5F02409B150AD092E9BFC4497FFA9F49CC5CF079474E374318449EEF4BB41AF34C5F101301455AEBDCC08256263A334A25E8BDB55A3BA5C4DCF5E089B0
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/platform.js
Preview:	(function(){var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},r=ca(this),u=function(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.u("Symbol",function(a){if(a)return a;var b=function(f,g){this.xa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.xa};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f

Chrome Cache Entry: 76

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 77

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57209
Category:	downloaded
Size (bytes):	8686
Entropy (8bit):	7.97595062286775
Encrypted:	false
SSDEEP:	192:iaN3/K64DhaV+nq1d5Ld6ZLBKHCOX5B4opmU/33nE55JHt1uXYYg:iQ/ChaIn4dOZEBB4opmU/nEzVt1uX8
MD5:	4E3FB595AEF47DC5101E5820FDC4B88A
SHA1:	016056CF16884F2FD489DA0CB0177BA541EB31CF
SHA-256:	0691CDBC6E6D9801B94395B08734DF0FD71D7551D37E184BEDCC2950C819DBEC
SHA-512:	36658B2A2E292742B521F8892B8F9800A99BEB323C83E61629A526B1D39AA36A9788D23AEFA7C2B4989D0F19AB6D586C2EBBE4CDAB9DCE6E9853FA50786EC464
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/s_yzgt.css
Preview:	...........]..8..?......t.l..Kr...vw.%..C..L!e.m.U..w..gP.]YGo'j...$..`0......5....8..../.......wI..>.z.o...._N.n.......I..>..uu^o..U._...m...e.g.......y..G...z......N......>.T...sw9.f........_....C.i...~.v...t.....-..xE.G..........u.....{........K.&.&.".....WB;./..>,C.B...+.."....!$....%%&..>......'.4..Ak.e-..^.....0..1.3....T..iB\|...H....)..vGEP.us.........''.k...yz.8..P......Q.lF...Xo.9f6.....P./f...x.....nl.....{^....m..h.......Vh.?...nwj.......Y%.h...}s..&.....{:..:...$.VJ.S.7C...}b.d..0...?..;..qx....-7...x.1...y.k....j......{n.d.b..V..n.\!A..yCH.+.Y>...7^4.YQ..E!.Y\&V.$.v.T..v.c.....".-/c.D.B.S..;......,.H1.w)...q?.1..X?4....K.fv.....\=W_..M.dz..>......5<..-..9fd....-.WV%......c..\|8.....y....u........c3...\|W?5.zvj>...\...%..V.'.....D.&....h.___.....n)j..\|1.b.1.A......j..tsF.Cn...S..../..-U..d.)--.t.4..q.tJK.)Mm-M......t.%-..%.uH..y.G....I~.?.....V].:\.\|..\....\|.7:....\|..S......r;KjT.a.......g....^,...~..7p?...t>.>.`.t.6N...].

Chrome Cache Entry: 78

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 124 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1334
Entropy (8bit):	7.8121398461902585
Encrypted:	false
SSDEEP:	24:K6GtVv3VH3LnOjEF3nZ4o6S/3W4HgkE2k862rY26W2wPUzRL7:KxVv3Zjf16I3Lgd864YS2hzRX
MD5:	0A40A67A4CE053228E7B9DC45DD1B4C8
SHA1:	0BFD8946A30317EA70FF83194BAE589B0534E794
SHA-256:	F64EBEDAF9A92741DDB0878A8303D3E3E6B819876353F2779B5FCCEBCEA06374
SHA-512:	59EAE9A83644E5B05F9BF31EC29F6B44C438ABB7601A7BEF92EDA8DF8364594A29D86A9749AD02830765B97EB810F3EDC4DBF93790B54FC9B8EE62D7105000FB
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/logo.png?2
Preview:	.PNG........IHDR...\|..........'JW....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..m..U..G....t.j..D"+.^L%.......J.Yi..le`%Y.....J.BZ.V..c..+...mh...j.f.........x..gf..u.9.c..o...{..V,..\...O.K...X...MP..o...-.T.1..`.?..`[>......l.A..\|..i..Rr.;@.\|..7..V..0gGBL........9`l...7....\|.`.K...../.......Q...9...?....#r.....)Aw.!F.............A.....{`..;'.~/..b8..F.6......T.=..?.....RW...e.............fE...(..Z.s.....U.....k..{.u`.O.q..\..K.N..\|tb...........'.........H/t3.h91uF.p)<..@c....&.....\|+.PP..^....1..E%r....m.a.O..g..h...^...J.3......iO..c..mA\......\>..X.o..d7....o.=.e\|.&.K..w..F./$..'.t;...Y.M]s.....G(.J...........z....V..............I...q..A%/U:.z..iQV.ZoP.%\...P..7e?1..p..7%../.3...oAA..jz.....9F...'.t....<..CAb;%./`.\|k..8...s...Wv..;=..4E\..W..q.9.D.n.....b..d......1....-./3H...LI..^7..f..0....@......2.>...5..d"..(/...}..../v.O...05.........Z..2'.NZ..>nqO..S....R.4A.G...-e..\|..._..0.Fo..k...Q.+._....b....g.;.0.].<.#.+/(7......Od...

Chrome Cache Entry: 79

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 95821
Category:	downloaded
Size (bytes):	33226
Entropy (8bit):	7.992371217611524
Encrypted:	true
SSDEEP:	768:EUK4XbDcMV+IBEVjFurBuUhzWaOtq48v6DrAMl/:EiPcMnBSjFulThSa8qer7V
MD5:	68D22C6E84FD56067014862758C25A09
SHA1:	05EA34ED72069D47AD8893E6E9B5502211B42ABE
SHA-256:	DDE61F0B9CEF03920BE91A889D9405B08F3E8A36102DC638F22087B10A647BDD
SHA-512:	099A7FA1A1299225AE3B808922C95318BA00645BF4C00B25FEA56D586273D660DF5B9A41795350C4618D13035F7F65BD3A378836E3E34E19B732AEACA0773FC2
Malicious:	false
Reputation:	low
URL:	http://code.jquery.com/jquery.min.js
Preview:	...........y{.F./...."....E:.=...'..I&.I2....IH.DR.....o...4..s..............Z..v..v.o.....C.....O..g.....?2._..VY./.+q...S..[......H...?{z.....E>?.I...<.{R..6.zz.\gw...=....n..........e..G.....a.P.XL.N.%.....U~...v......6..+...,>./V../.sz3%.`...w......C..{4.\|Z..........b'.#..o.R9..L...fH....Wi..Sz....bF.TG.......(._..o..L\..<.}...a.......A....yb)....c...tE..{N9....u\|....../..z..`.;..\..../w..b#/...U...>..f..mo,........w...GhY....z...G.-.B.....t..K...9?z.X..~...~..v.?.+l...i.X..n..,.W....n...8.\..r...~...I..M.jeX.W.8..T.ULh$.\|;.9k.........n..{.k... .>..^.H."..y.:..>.%.Vm.o.F.U.N...x.W.0.......'T.P...-s\.8....A.h;.}.C..b... ....g..3.....-S.He/..X.$.....3...n7.L.1/p:....._e'Gi..ph.-.H.E8.;BC!md....O....-..=.#y..g.M.....>......9.L....s9..o?.._..p4..K..E..J.9.v.k9.T6..z.h`....../L.f...........7S.;??.F..\|..............Y..r6.&.R9~f.)St....Z.a..+5.t.P..U.7:}...O..4\.q.[&.A.c%C...Si.h^.u.i.........7.........?.A..*..Q...E..x?.o.y..A..o.q...W/.Kz

Chrome Cache Entry: 80

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35959)
Category:	downloaded
Size (bytes):	35960
Entropy (8bit):	5.154449164812877
Encrypted:	false
SSDEEP:	384:YN90OhFvg3A2VysImDyPWquJMpx/SCYW0h8+Rl9yaZwuJ86YKSQCNL/J69nKg93P:YN90Oh+JnIm6IvW0trVJw1gngRLFr2
MD5:	1E32420A7B6DDBDCB7DEF8B3141C4D1E
SHA1:	A1BE54D42FF1F95244C9653539F90318F5BC0580
SHA-256:	A9CA837900B6AE007386D400F659C233120B8AF7D93407FD6475C9180D9E83D2
SHA-512:	1357D702A78FFA97F5ABA313BCD1F94D7D80FB6DD15D293FF36ACC4FB063FFDAD6D9F7E8D911B1BBE696C7AD1CDE4C3D52FB2DB2A0FCF6FF8EF154824E013C6D
Malicious:	false
Reputation:	low
URL:	https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
Preview:	html{height:100%}body{min-height:100%;_height:100%;position:relative}.content{position:relative;word-wrap:break-word}.content-outer,.region-inner{min-height:0;margin:0 auto}.columns{zoom:1}.loading .columns{overflow:hidden}.columns-inner{_height:1%;min-height:0}.column-center-outer,.column-left-outer,.column-right-outer{position:relative;float:left;_display:inline;_overflow:hidden}.column-center-outer{width:100%}.column-left-outer{margin-left:-100%}.fauxcolumns{position:relative;_height:1%}.fauxcolumn-outer{position:absolute;top:0;bottom:0;height:expression(this.parentNode.offsetHeight + 'px');overflow:hidden}.fauxcolumn-outer .fauxborder-left,.fauxcolumn-outer .fauxborder-right,.fauxcolumn-inner{height:100%}.fauxcolumn-left-outer{left:0}.fauxcolumn-right-outer{right:0}.cap-top,.cap-bottom{position:relative;height:0;background-repeat:repeat-x}.cap-top .cap-left,.cap-top .cap-right,.cap-bottom .cap-left,.cap-bottom .cap-right{height:100%;background-repeat:no-repeat}.cap-top,.cap-top .ca

Chrome Cache Entry: 81

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 394 x 118
Category:	downloaded
Size (bytes):	18837
Entropy (8bit):	7.706509774277951
Encrypted:	false
SSDEEP:	384:wtN3QHbqbFgfSizi6GCpj1c5HRlGivmUjYfoY62D5v:wtN3QebSfSizi0KXlGAm0Kob2Dp
MD5:	56A07DDE31C73F8FBE5299DF53ABC050
SHA1:	CB9068B30661755E7B9306B5282F7424BFA97EEE
SHA-256:	0C16CEAD2A8188E08C385478868A5D7A3720ABD7B7226273BA1AECECCC4D6E6A
SHA-512:	3342CD715E3F77F14882ED5AC9BA613FC28E840D28A4DFA73B801AB96793E9B7FC231B62460E0EC74D1881D595E71798E90729CA1200E026E6464FD881FE1DC7
Malicious:	false
Reputation:	low
URL:	https://data3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif
Preview:	GIF89a..v........\s.o.....w.H.I.Q.6..................Gz.]...k..3...ee.......}..X._.C...........o..N..k........}...t.1.......U.K...tSb.Y..=.q.V...i.N.&a.9y..mN.......z..Z....c........X..C...y....s..g..7m.i...}...}.C.....X........f)....Xa.x.%x^]'..'...Y../0,...iq...0v%.Qf.?.;..J.....p.....W..k.d.E....;...x........d..C..j.l.E..Tv-Y..^.\...........~...v.\.o....f1}x.Q....f...m.y.rK.}._..Ii.s..'h....k.......l...p.L....v..?i.v..{.P.......8..J.......S..x...EA....S.W..A.l..9Vb.0B~.Q...v.............`..W..G..}...kx..y.........D.x.x7.,..,.....\|.e<:...........M!\.c....e.D../z.Hy..w.\.X.(.%4..G.........?-..p...[...V@..s`./k..@......G.~..T.N.7A......,r.Z. ..$..B.z.Ny.q.d.l.Is.Z..a.....a.....y.........<f. ..1o.......!..NETSCAPE2.0.....!.......,......v........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.....

Chrome Cache Entry: 82

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	401
Entropy (8bit):	7.100774013005412
Encrypted:	false
SSDEEP:	6:6v/lhPUq25KiaovtCpxGCGSH0i1H5m72cxbvFRT4j2jSRU50/KH/R0/Z6p:6v/78qz0CpMC/UitRcjRTxSp/KHoZQ
MD5:	F56CB5B3818580563CD40DD2E91537AF
SHA1:	B714764B9316832F05CB764E22FF166412C9DCA1
SHA-256:	763D5CF5ABDD250387794A5BA1FF4F68ED237071449821341B9EC7F510A43512
SHA-512:	CCD8820AD1AF5BC6655C3C6956988FAB97D5AFA7E0EE760EA74BB88A9E8EBA77487693D9E05E32E2796EC56B18F1EFAC10354A560DD73D6DD0FF325C110FD698
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....gAMA......a....HIDAT8.c.jX..........0......001.3...d..B..L...H.^&d.r..5`Zi0..0.nN6.E)!.eM1`>.e.<..s...&...8.....>g..`cp4Va........X.!J"]..8.Y.........5.c..f....+dbbb.7Tb.3Tf......p....G...o0.p.3.%.2011.]..h......`...g@..Hj...7.6I...UN]s........j....pq...?..1./........>...p..}...........f....d.`..]..(..q4....PE...\.0.$.H/.(K.c.,;....o3........IEND.B`.

Chrome Cache Entry: 83

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4033)
Category:	downloaded
Size (bytes):	145204
Entropy (8bit):	5.540697873372811
Encrypted:	false
SSDEEP:	1536:xxgaBcL3Hu5cQAn5MlT9V1m7EescHi+dkkPfNAxGsdjmqLKxd7ZW0EZx3jo3tOR0:s3HJWV1jeNCevfNYdvRn3FkM3gl
MD5:	87333E835F5E578883D5C199A0A629F9
SHA1:	C99ADDAEF69A7048279E435CC045A5ECA82DF119
SHA-256:	6AA7215A36E5FC34D68C5ACC24B2D98BF3FD76405594ADF7B8B23C6C96D88740
SHA-512:	0239C944EC0CD757B1F5BC35EFC6F350B8F2905161EF781C89FFA212DA51B7539BA0E27848E6FF11EC3C361EB8C70ADFF5F5367F85384D646943F0E208C382C4
Malicious:	false
Reputation:	low
URL:	https://www.blogger.com/static/v1/widgets/3789536756-widgets.js
Preview:	(function(){/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="&action=",ba=".wikipedia.org",ca="SCRIPT",da="SPAN",ea="SW_READER_LIST_",fa="SW_READER_LIST_CLOSED_",ha="Share this post",ia="Symbol.dispose",ja="Symbol.iterator",ka="about:invalid#zClosurez",la="about:invalid#zSoyz",ma="bigint",na="block",oa="boolean",pa="click",qa="collapsed",ra="collapsible",sa="comment-editor",ta="commentId",ua="complete",va="contact-form-email",wa="contact-form-email-message",xa="contact-form-error-message",ya="contact-form-error-message-with-border",za="contact-form-name",.Aa="contact-form-submit",Ba="contact-form-success-message",Ca="contact-form-success-message-with-border",Da="data-height",Ea="displayModeFull",Fa="displayModeLayout",Ga="displayModeNone",m="div",Ha="dropdown-toggle",Ia="error",Ja="expanded",n="function",Ka="hidden",La="https:",Ma="layout-widget-description",Na="layout-widget-ti

Chrome Cache Entry: 84

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1124)
Category:	downloaded
Size (bytes):	1129
Entropy (8bit):	5.550260442439634
Encrypted:	false
SSDEEP:	24:mf3tQ7poOCpTmBHslgT1d1uawdo84kDPU3DXjATEuoBN2t2t2t2t2t2t2tomfff3:YebCxmKlgJXwdobuUXAouSNYYYYYYYoA
MD5:	89315124F71608A3D0EFBBF19AF48007
SHA1:	08D5705B8693AF4740D3A4AE27DEF29975C1DC2A
SHA-256:	55A02C377C6E31C1E972108731029C3E0567E9916C96C092F6F4E20BCE16C457
SHA-512:	522DB09A13106CE22F56C961E68388DDE0B6A20F13F627808DE41208F60F7FF93115746BF9666DBDA196545747FAB43F80E362AEB9589D7202E58BFD3D8D5131
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["td bank closing branches","nyt connections hints march 13","nfl free agents signings","nintendo switch games","selena gomez benny blanco sunset blvd","layoffs edward user","xbox game pass mlb the show 25","steam spring sale 2025 games"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"Cg0vZy8xMXgxOHFmdDhyEgtTdW5zZXQgQmx2ZDolc2VsZW5hIGdvbWV6IGJlbm55IGJsYW5jbyBzdW5zZXQgYmx2ZFJaZ3Nfc3NwPWVKemo0dFZQMXpjMHJEQzBLRXdyc1NneVlQUlNMVTdOU2MxTFZFalB6MDJ0VWtoS3pjdXJWRWpLU2N4THpsY29MczByVGkwQjhzcFNBT1ZfRXNRcAI\u003d","zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":"5127370464511918118","google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,36

Chrome Cache Entry: 85

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 12108
Category:	downloaded
Size (bytes):	3174
Entropy (8bit):	7.935895301507106
Encrypted:	false
SSDEEP:	96:BWTrZp0LJ2wF+nCp9DeN8U9iVOek+zOS7R:UTrXy2wHDe3SOr+zJ
MD5:	E25500DF45BBAFC269424291E4F85EC4
SHA1:	939DC297FC33DD8D2FEAE1B5DB6E2C20770B7A72
SHA-256:	237FE6EC376985088ADCDED04778B320315B30EC4D9E930FDFEB2BEC0737DDED
SHA-512:	D41CC6ED2672AC57149C661E7FFA4ECDA94C807C043D55E27BB0A4615D965F6075CF0463F0F26A071C66313D9D5DEAACBE14594C8E6C5960AE15EF5B28A23E3A
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/
Preview:	...........Z.o.G..^...R. .... ..Z..-..jO...c......E.....6wR.^.U..v:).........?....c....I&....{.y.....Y8r....?..Qs..j._{...^4...\|..+W..k.../h.....e.]Y....).....R..a...R..u..^I..d1.....Ky.d+[........~T.`?I..g...f.,......#...pfW.<....E.I,Z......Uqq9......K.@.y.rX.qU...v..........#Ce.J...kN...].6_2. xd.Y.teC....)]3.....+zK.v......VN..-a.".......-F.sy.4X.<..bo..-.W.....jP.K}..P..T..[J..rpy.H..-......,..^.......n7.po..\....-n...g...a..p.~;......b...J(.W...a..<..K.%[..Z...tnw.$.XXO...g...V...;.F......@iQh.,.6/..$..r...}..K7...g.;e...I.Z..WfUV....e...s.5...7....R....G.-XE..........o5. .x.F.D....j.R......P.s..y;..AH....`..p..h.O.\.C.).%.C....,Hg.e.S`M.KY...KH2....&.eM..=.`:..C.t.b..Z.iFJXM.F.#\|..Q...D......eg..i.K.E.~.#.g..[..U.S`...I.[....X..l..P.h....Y.S3.!..}...\|.z.E.\|.....!.4....}...G.ak..H3-..h@rw..^...1.l..]c....+..}hH....(G..F.."k...7..>JR$...N.T.F..]J_j.(7.*...Y.KZ.5S.A.q1..G.R..>.....5....O..PFNS.q).....d.@XF.l.<E...r..:;3;Udv}.v..

Chrome Cache Entry: 86

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	401
Entropy (8bit):	7.100774013005412
Encrypted:	false
SSDEEP:	6:6v/lhPUq25KiaovtCpxGCGSH0i1H5m72cxbvFRT4j2jSRU50/KH/R0/Z6p:6v/78qz0CpMC/UitRcjRTxSp/KHoZQ
MD5:	F56CB5B3818580563CD40DD2E91537AF
SHA1:	B714764B9316832F05CB764E22FF166412C9DCA1
SHA-256:	763D5CF5ABDD250387794A5BA1FF4F68ED237071449821341B9EC7F510A43512
SHA-512:	CCD8820AD1AF5BC6655C3C6956988FAB97D5AFA7E0EE760EA74BB88A9E8EBA77487693D9E05E32E2796EC56B18F1EFAC10354A560DD73D6DD0FF325C110FD698
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/fav_logo.ico?5
Preview:	.PNG........IHDR................a....gAMA......a....HIDAT8.c.jX..........0......001.3...d..B..L...H.^&d.r..5`Zi0..0.nN6.E)!.eM1`>.e.<..s...&...8.....>g..`cp4Va........X.!J"]..8.Y.........5.c..f....+dbbb.7Tb.3Tf......p....G...o0.p.3.%.2011.]..h......`...g@..Hj...7.6I...UN]s........j....pq...?..1./........>...p..}...........f....d.`..]..(..q4....PE...\.0.$.H/.(K.c.,;....o3........IEND.B`.

Static File Info

⊘No static file info

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 393
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 10:42:44.138808966 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:42:44.451001883 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:42:45.060359955 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:42:46.263482094 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:42:48.669773102 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:42:50.716636896 CET	49680	443	192.168.2.4	204.79.197.222
Mar 14, 2025 10:42:53.638509989 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:42:53.976475000 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:42:54.357224941 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:42:55.048281908 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:42:56.117439985 CET	49717	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:42:56.117491961 CET	443	49717	142.250.186.132	192.168.2.4
Mar 14, 2025 10:42:56.117579937 CET	49717	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:42:56.117934942 CET	49717	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:42:56.117948055 CET	443	49717	142.250.186.132	192.168.2.4
Mar 14, 2025 10:42:56.356707096 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:42:56.381158113 CET	49717	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:42:56.424335957 CET	443	49717	142.250.186.132	192.168.2.4
Mar 14, 2025 10:42:56.751072884 CET	443	49717	142.250.186.132	192.168.2.4
Mar 14, 2025 10:42:56.751194954 CET	49717	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:42:56.751228094 CET	49717	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:42:58.763851881 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:43:01.019824982 CET	49727	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:01.019871950 CET	443	49727	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:01.020042896 CET	49727	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:01.020981073 CET	49728	80	192.168.2.4	216.58.206.65
Mar 14, 2025 10:43:01.021172047 CET	49729	80	192.168.2.4	216.58.206.65
Mar 14, 2025 10:43:01.021368027 CET	49727	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:01.021384954 CET	443	49727	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:01.025598049 CET	80	49728	216.58.206.65	192.168.2.4
Mar 14, 2025 10:43:01.025681973 CET	49728	80	192.168.2.4	216.58.206.65
Mar 14, 2025 10:43:01.025865078 CET	80	49729	216.58.206.65	192.168.2.4
Mar 14, 2025 10:43:01.025952101 CET	49729	80	192.168.2.4	216.58.206.65
Mar 14, 2025 10:43:01.663450956 CET	443	49727	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:01.663686037 CET	49727	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:01.664247990 CET	443	49727	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:01.664330006 CET	49727	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:01.681684971 CET	49727	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:01.681704998 CET	443	49727	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:01.682111979 CET	443	49727	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:01.682816982 CET	49727	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:01.728327990 CET	443	49727	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:02.035636902 CET	443	49727	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:02.036575079 CET	443	49727	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:02.036860943 CET	49727	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:02.060272932 CET	49727	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:02.060317039 CET	443	49727	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:02.087291956 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:02.087323904 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:02.087423086 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:02.087747097 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:02.087763071 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:02.715939999 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:02.716017008 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:02.716716051 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:02.716779947 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:02.718822002 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:02.718832970 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:02.719091892 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:02.719367027 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:02.760319948 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.126672983 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.126724005 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.126764059 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.126791954 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.126823902 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.126832962 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:03.126852036 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.126882076 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:03.126905918 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:03.126910925 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.132512093 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.132591963 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:03.132606983 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.139107943 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.139187098 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:03.139199972 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.148479939 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.148508072 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.148560047 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:03.148574114 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.148612022 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:03.213114023 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.213638067 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:03.213685989 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:03.213824034 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:03.214035034 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:03.214051008 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:03.215770960 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.215806007 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.215853930 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:03.215867043 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.215945005 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:03.221986055 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.238028049 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:03.238061905 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:03.238312006 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:03.238528013 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:03.238540888 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:03.238647938 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.238704920 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:03.238715887 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.239247084 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.239263058 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:03.239278078 CET	443	49731	172.217.18.1	192.168.2.4
Mar 14, 2025 10:43:03.239299059 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:03.239326000 CET	49731	443	192.168.2.4	172.217.18.1
Mar 14, 2025 10:43:03.243546009 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:03.243560076 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:03.243658066 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:03.243832111 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:03.243841887 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:03.247437000 CET	49671	443	192.168.2.4	204.79.197.203
Mar 14, 2025 10:43:03.575278044 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:43:03.847644091 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:03.847745895 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:03.849200010 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:03.849212885 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:03.849461079 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:03.849802017 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:03.875946045 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:03.876015902 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:03.877543926 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:03.877554893 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:03.877799988 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:03.878098011 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:03.885482073 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:03.885544062 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:03.886065006 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:03.886073112 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:03.886296988 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:03.886527061 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:03.892329931 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:03.924333096 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:03.932327986 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.111692905 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.111753941 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.111785889 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.111812115 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.111820936 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.111840963 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.111886978 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.117654085 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.117710114 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.117712021 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.117724895 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.117770910 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.117778063 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.124062061 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.124433994 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.124455929 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.152441025 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.152519941 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.152548075 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.152581930 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.152616978 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.152623892 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.152642012 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.152676105 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.152693987 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.158549070 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.158955097 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.159014940 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.159044981 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.159061909 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.159075975 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.159115076 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.159142971 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.159149885 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.159262896 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.161565065 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.161591053 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.161655903 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.161669970 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.161844015 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.165117025 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.165210009 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.165260077 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.165271044 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.167860985 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.170322895 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.170345068 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.171376944 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.171437979 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.171454906 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.198276997 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.198317051 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.198348045 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.198369980 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.198421001 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.201024055 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.207299948 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.207328081 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.207355022 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.207385063 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.207433939 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.213742971 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.219562054 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.219582081 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.219640970 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.219650030 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.220045090 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.220084906 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.220103979 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.220132113 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.220170975 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.239262104 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.239316940 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.239346027 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.239372015 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.239399910 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.239423990 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.239434958 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.239499092 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.239542961 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.239598036 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.239614964 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.239723921 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.239928961 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.240001917 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.240086079 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.240098953 CET	443	49732	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.240109921 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.240144968 CET	49732	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.241552114 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.248056889 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.248083115 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.248147011 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.248164892 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.248255968 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.249551058 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.249583006 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.249614954 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.249633074 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.249643087 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.249665022 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.249670982 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.249803066 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.254343033 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.254551888 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.260426044 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.260502100 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.260518074 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.260740042 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.260847092 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.260857105 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.266777039 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.266851902 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.266866922 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.267199039 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.267220974 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.267291069 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.267302990 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.267354012 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.273029089 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.273097992 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.273125887 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.273323059 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.279198885 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.279402018 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.279424906 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.279521942 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.279599905 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.279609919 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.285311937 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.285375118 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.285387993 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.285423040 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.285468102 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.285522938 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.285531998 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.285612106 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.291336060 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.292022943 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.292104959 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.292123079 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.297822952 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.297919035 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.297938108 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.298249006 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.298281908 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.298403978 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.298420906 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.298502922 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.309987068 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.326375961 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.326410055 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.326468945 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.326487064 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.326514006 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.326543093 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.326679945 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.326787949 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.326821089 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.326833010 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.326904058 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.328236103 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.334177017 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.334209919 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.334295034 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.334311962 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.334572077 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.340219021 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.340249062 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.340285063 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.340313911 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.340317965 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.340329885 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.340353966 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.340367079 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.340368986 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.340373993 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.340415955 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.340503931 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.340784073 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.340842009 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.340890884 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.340939045 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.340954065 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.341169119 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.341470003 CET	49737	443	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:04.341510057 CET	443	49737	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:04.341731071 CET	49737	443	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:04.341947079 CET	49737	443	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:04.341958046 CET	443	49737	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:04.345942974 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.346451044 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.346591949 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.346637964 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.346719027 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.350733042 CET	49734	443	192.168.2.4	142.250.184.206
Mar 14, 2025 10:43:04.350755930 CET	443	49734	142.250.184.206	192.168.2.4
Mar 14, 2025 10:43:04.351813078 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.351836920 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.351876974 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.351886034 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.351907969 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.352005959 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.357619047 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.357728004 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.357750893 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.363559008 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.363694906 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.363707066 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.368916035 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.369019032 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.369034052 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.374089956 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.374142885 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.374155998 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.379419088 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.379508018 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.379520893 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.384812117 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.384874105 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.384887934 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.389638901 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.389687061 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.389700890 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.394323111 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.394413948 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.394433022 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.398561001 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.398725986 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.398751020 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.402689934 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.402771950 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.402785063 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.406898022 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.407006025 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.407022953 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.410970926 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.411052942 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.411073923 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.414874077 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.415085077 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.415103912 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.418607950 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.418685913 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.418704987 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.422502995 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.422580004 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.422595978 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.426379919 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.426448107 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.426466942 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.430808067 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.430862904 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.430874109 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.431046963 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.431130886 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.431142092 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.433439016 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.433496952 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.433507919 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.436101913 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.436161995 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.436171055 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.438005924 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.438061953 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.438071012 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.440279961 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.440356970 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.440363884 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.442617893 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.442660093 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.442667961 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.444998026 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.445025921 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.445080042 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.445091009 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.445171118 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.447216034 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.449526072 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.449593067 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.449668884 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.449686050 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.449773073 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.451878071 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.454277039 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.454308987 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.454356909 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.454369068 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.454691887 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.456597090 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.456732035 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.456820965 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.457107067 CET	49733	443	192.168.2.4	142.250.185.137
Mar 14, 2025 10:43:04.457124949 CET	443	49733	142.250.185.137	192.168.2.4
Mar 14, 2025 10:43:04.478245974 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:04.478425026 CET	49739	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:04.482976913 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:04.483078957 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:04.483102083 CET	80	49739	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:04.483170033 CET	49739	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:04.665307045 CET	49740	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:43:04.665415049 CET	443	49740	142.250.186.132	192.168.2.4
Mar 14, 2025 10:43:04.665545940 CET	49740	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:43:04.665976048 CET	49740	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:43:04.666023016 CET	443	49740	142.250.186.132	192.168.2.4
Mar 14, 2025 10:43:05.303389072 CET	443	49740	142.250.186.132	192.168.2.4
Mar 14, 2025 10:43:05.303479910 CET	49740	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:43:05.304713964 CET	49740	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:43:05.304730892 CET	443	49740	142.250.186.132	192.168.2.4
Mar 14, 2025 10:43:05.304982901 CET	443	49740	142.250.186.132	192.168.2.4
Mar 14, 2025 10:43:05.305284977 CET	49740	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:43:05.352327108 CET	443	49740	142.250.186.132	192.168.2.4
Mar 14, 2025 10:43:05.599668980 CET	443	49740	142.250.186.132	192.168.2.4
Mar 14, 2025 10:43:05.599725008 CET	443	49740	142.250.186.132	192.168.2.4
Mar 14, 2025 10:43:05.599781990 CET	49740	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:43:05.599800110 CET	443	49740	142.250.186.132	192.168.2.4
Mar 14, 2025 10:43:05.602520943 CET	443	49740	142.250.186.132	192.168.2.4
Mar 14, 2025 10:43:05.602581024 CET	49740	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:43:05.602710962 CET	49740	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:43:05.602721930 CET	443	49740	142.250.186.132	192.168.2.4
Mar 14, 2025 10:43:05.897279024 CET	49742	80	192.168.2.4	142.250.186.67
Mar 14, 2025 10:43:05.902019978 CET	80	49742	142.250.186.67	192.168.2.4
Mar 14, 2025 10:43:05.902107954 CET	49742	80	192.168.2.4	142.250.186.67
Mar 14, 2025 10:43:05.902205944 CET	49742	80	192.168.2.4	142.250.186.67
Mar 14, 2025 10:43:05.906836987 CET	80	49742	142.250.186.67	192.168.2.4
Mar 14, 2025 10:43:06.524833918 CET	80	49742	142.250.186.67	192.168.2.4
Mar 14, 2025 10:43:06.533720016 CET	49742	80	192.168.2.4	142.250.186.67
Mar 14, 2025 10:43:06.538458109 CET	80	49742	142.250.186.67	192.168.2.4
Mar 14, 2025 10:43:06.725778103 CET	80	49742	142.250.186.67	192.168.2.4
Mar 14, 2025 10:43:06.768260002 CET	49742	80	192.168.2.4	142.250.186.67
Mar 14, 2025 10:43:07.274882078 CET	49739	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.279659033 CET	80	49739	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.597714901 CET	80	49739	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.597824097 CET	80	49739	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.597835064 CET	80	49739	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.597847939 CET	80	49739	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.598058939 CET	49739	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.649563074 CET	49739	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.650259018 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.650270939 CET	49746	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.654225111 CET	80	49739	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.654984951 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.655015945 CET	80	49746	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.655124903 CET	49746	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.655817986 CET	49746	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.658667088 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:07.660479069 CET	80	49746	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.663332939 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:07.663496971 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:07.664828062 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:07.669524908 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:07.876040936 CET	80	49739	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.888540983 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.888567924 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.888580084 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.888617992 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.888664007 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.888679028 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.888705015 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.888762951 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.888775110 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.888788939 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.888798952 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.888801098 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.888808012 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.888825893 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.888848066 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.893409014 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.893450975 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.893465042 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.893520117 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.893517971 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.893580914 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.922010899 CET	49739	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.930340052 CET	443	49737	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.930404902 CET	49737	443	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.930546045 CET	49737	443	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.930563927 CET	443	49737	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.930941105 CET	49748	443	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.930984974 CET	443	49748	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:07.931067944 CET	49748	443	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.931266069 CET	49748	443	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:07.931279898 CET	443	49748	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.023159027 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.023176908 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.023233891 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.023328066 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.023376942 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.023386955 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.023412943 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.023468971 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.023483038 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.023509979 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.023665905 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.023704052 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.023735046 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.023786068 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.023797989 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.023828030 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.023895979 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.024004936 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.024374008 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.024398088 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.024426937 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.024446011 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.024684906 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.024724960 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.024749994 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.024763107 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.024806023 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.105803013 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.105874062 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.105896950 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.105922937 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:08.105983019 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.105997086 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.106031895 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:08.106113911 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.106127024 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.106137991 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.106156111 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:08.106183052 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:08.106199026 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.106213093 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.106266022 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:08.110635996 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.110661030 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.110672951 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.110743999 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:08.110770941 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.110822916 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:08.111541033 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.153232098 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.154342890 CET	49749	443	192.168.2.4	104.21.29.163
Mar 14, 2025 10:43:08.154386044 CET	443	49749	104.21.29.163	192.168.2.4
Mar 14, 2025 10:43:08.154450893 CET	49749	443	192.168.2.4	104.21.29.163
Mar 14, 2025 10:43:08.154835939 CET	49749	443	192.168.2.4	104.21.29.163
Mar 14, 2025 10:43:08.154848099 CET	443	49749	104.21.29.163	192.168.2.4
Mar 14, 2025 10:43:08.192749977 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.192780018 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.192790985 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.192822933 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:08.192861080 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.192873001 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.192894936 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:08.193007946 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.193022013 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.193053007 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:08.193128109 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.193181038 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:08.193547964 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.193572044 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.193614006 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.193624020 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:08.193959951 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.193972111 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.193983078 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.194029093 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:08.194071054 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:08.194111109 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.194123983 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.194134951 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.194163084 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:08.194695950 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:08.194735050 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:08.253737926 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.258240938 CET	49739	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.258511066 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.258910894 CET	49750	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.262888908 CET	80	49739	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.263653994 CET	80	49750	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.263715982 CET	49750	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.264014006 CET	49750	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.268644094 CET	80	49750	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.368792057 CET	80	49746	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.368809938 CET	80	49746	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.368822098 CET	80	49746	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.368866920 CET	49746	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.368905067 CET	80	49746	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.368916988 CET	80	49746	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.368927956 CET	80	49746	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.368940115 CET	80	49746	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.368947029 CET	49746	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.368964911 CET	49746	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.369044065 CET	80	49746	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.369087934 CET	49746	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.402565002 CET	49746	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.407584906 CET	80	49746	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.548634052 CET	80	49739	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.550652027 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.591720104 CET	49739	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.591725111 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.629553080 CET	80	49746	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.629569054 CET	80	49746	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.629626036 CET	49746	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.635274887 CET	443	49749	104.21.29.163	192.168.2.4
Mar 14, 2025 10:43:08.635354996 CET	49749	443	192.168.2.4	104.21.29.163
Mar 14, 2025 10:43:08.636861086 CET	49749	443	192.168.2.4	104.21.29.163
Mar 14, 2025 10:43:08.636883020 CET	443	49749	104.21.29.163	192.168.2.4
Mar 14, 2025 10:43:08.637152910 CET	443	49749	104.21.29.163	192.168.2.4
Mar 14, 2025 10:43:08.637386084 CET	49749	443	192.168.2.4	104.21.29.163
Mar 14, 2025 10:43:08.684328079 CET	443	49749	104.21.29.163	192.168.2.4
Mar 14, 2025 10:43:08.776664972 CET	443	49749	104.21.29.163	192.168.2.4
Mar 14, 2025 10:43:08.776758909 CET	443	49749	104.21.29.163	192.168.2.4
Mar 14, 2025 10:43:08.776808977 CET	49749	443	192.168.2.4	104.21.29.163
Mar 14, 2025 10:43:08.777393103 CET	49749	443	192.168.2.4	104.21.29.163
Mar 14, 2025 10:43:08.777415991 CET	443	49749	104.21.29.163	192.168.2.4
Mar 14, 2025 10:43:08.784251928 CET	49752	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.784439087 CET	49753	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.784565926 CET	49754	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.788988113 CET	80	49752	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.789071083 CET	80	49753	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.789104939 CET	49752	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.789129019 CET	49753	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.789246082 CET	80	49754	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.789366961 CET	49754	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.789822102 CET	49752	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.789879084 CET	49753	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.789946079 CET	49754	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:08.794548988 CET	80	49752	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.794562101 CET	80	49753	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.794634104 CET	80	49754	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:08.802100897 CET	49755	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:08.806871891 CET	53	49755	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:08.807029009 CET	49755	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:08.807029009 CET	49755	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:08.807310104 CET	49755	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:08.811757088 CET	53	49755	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:08.812191963 CET	53	49755	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:09.038650990 CET	80	49750	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:09.043494940 CET	49756	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:09.052028894 CET	80	49756	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:09.054126024 CET	49756	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:09.054852009 CET	49756	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:09.059485912 CET	80	49756	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:09.088676929 CET	49750	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:09.502335072 CET	80	49754	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:09.502357006 CET	80	49754	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:09.502437115 CET	49754	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:09.515798092 CET	53	49755	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:09.516354084 CET	49757	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:09.516402006 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:09.516411066 CET	49755	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:09.516464949 CET	49757	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:09.516678095 CET	49757	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:09.516711950 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:09.521326065 CET	53	49755	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:09.521378994 CET	49755	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:09.561167955 CET	80	49753	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:09.562798023 CET	80	49752	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:09.606899977 CET	49753	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:09.606914043 CET	49752	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:09.836386919 CET	80	49756	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:09.886626005 CET	49756	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:09.972033978 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:09.976330042 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:09.982883930 CET	49757	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:10.201967955 CET	49757	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:10.202023983 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.202390909 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.203686953 CET	49757	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:10.248334885 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.307145119 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.307209015 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.307241917 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.307280064 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.307320118 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.307351112 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.307395935 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.310703039 CET	49757	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:10.310741901 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.312139988 CET	49757	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:10.312156916 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.364386082 CET	49757	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:10.393707037 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.393784046 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.393824100 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.393906116 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.394289017 CET	49757	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:10.394841909 CET	49757	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:10.394860029 CET	443	49757	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.463915110 CET	49758	443	192.168.2.4	87.240.137.164
Mar 14, 2025 10:43:10.463962078 CET	443	49758	87.240.137.164	192.168.2.4
Mar 14, 2025 10:43:10.467840910 CET	49758	443	192.168.2.4	87.240.137.164
Mar 14, 2025 10:43:10.469430923 CET	49758	443	192.168.2.4	87.240.137.164
Mar 14, 2025 10:43:10.469445944 CET	443	49758	87.240.137.164	192.168.2.4
Mar 14, 2025 10:43:10.540350914 CET	49759	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:10.540400028 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:10.540769100 CET	49759	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:10.540988922 CET	49759	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:10.541001081 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.018279076 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.024337053 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.029391050 CET	49759	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:11.031012058 CET	49759	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:11.031038046 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.031621933 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.033701897 CET	49759	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:11.076348066 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.157099962 CET	443	49758	87.240.137.164	192.168.2.4
Mar 14, 2025 10:43:11.157331944 CET	49758	443	192.168.2.4	87.240.137.164
Mar 14, 2025 10:43:11.158466101 CET	49758	443	192.168.2.4	87.240.137.164
Mar 14, 2025 10:43:11.158487082 CET	443	49758	87.240.137.164	192.168.2.4
Mar 14, 2025 10:43:11.158782005 CET	443	49758	87.240.137.164	192.168.2.4
Mar 14, 2025 10:43:11.159207106 CET	49758	443	192.168.2.4	87.240.137.164
Mar 14, 2025 10:43:11.164594889 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.164644003 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.164693117 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.164714098 CET	49759	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:11.164726019 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.164736986 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.164762974 CET	49759	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:11.164813042 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.164846897 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.164881945 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.164921045 CET	49759	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:11.164936066 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.165189028 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.165221930 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.165410042 CET	49759	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:11.165421009 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.165680885 CET	49759	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:11.204338074 CET	443	49758	87.240.137.164	192.168.2.4
Mar 14, 2025 10:43:11.251239061 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.251308918 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.251344919 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.251425028 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.251597881 CET	49759	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:11.251833916 CET	49759	443	192.168.2.4	172.67.149.117
Mar 14, 2025 10:43:11.251852989 CET	443	49759	172.67.149.117	192.168.2.4
Mar 14, 2025 10:43:11.476263046 CET	443	49758	87.240.137.164	192.168.2.4
Mar 14, 2025 10:43:11.476355076 CET	443	49758	87.240.137.164	192.168.2.4
Mar 14, 2025 10:43:11.477219105 CET	49758	443	192.168.2.4	87.240.137.164
Mar 14, 2025 10:43:11.478507996 CET	49758	443	192.168.2.4	87.240.137.164
Mar 14, 2025 10:43:11.478532076 CET	443	49758	87.240.137.164	192.168.2.4
Mar 14, 2025 10:43:11.480211020 CET	49750	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:11.484989882 CET	80	49750	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:11.512409925 CET	443	49748	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:11.512556076 CET	49748	443	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:11.512784004 CET	49748	443	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:11.512806892 CET	443	49748	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:11.708520889 CET	80	49750	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:11.719808102 CET	49756	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:11.724647045 CET	80	49756	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:11.751374006 CET	49750	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:11.950493097 CET	80	49756	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:11.990881920 CET	49756	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:13.177179098 CET	49678	443	192.168.2.4	20.189.173.27
Mar 14, 2025 10:43:46.031586885 CET	49728	80	192.168.2.4	216.58.206.65
Mar 14, 2025 10:43:46.031805992 CET	49729	80	192.168.2.4	216.58.206.65
Mar 14, 2025 10:43:46.036662102 CET	80	49728	216.58.206.65	192.168.2.4
Mar 14, 2025 10:43:46.036679029 CET	80	49729	216.58.206.65	192.168.2.4
Mar 14, 2025 10:43:53.199054003 CET	49747	80	192.168.2.4	151.101.194.137
Mar 14, 2025 10:43:53.204909086 CET	80	49747	151.101.194.137	192.168.2.4
Mar 14, 2025 10:43:53.550267935 CET	49739	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:53.555159092 CET	80	49739	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:53.562252998 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:53.566988945 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:53.638820887 CET	49746	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:53.643572092 CET	80	49746	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:54.513425112 CET	49754	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:54.518193960 CET	80	49754	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:54.575717926 CET	49753	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:54.576095104 CET	49752	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:54.581123114 CET	80	49753	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:54.581435919 CET	80	49752	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:56.170239925 CET	49765	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:43:56.170279026 CET	443	49765	142.250.186.132	192.168.2.4
Mar 14, 2025 10:43:56.170373917 CET	49765	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:43:56.171535969 CET	49765	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:43:56.171546936 CET	443	49765	142.250.186.132	192.168.2.4
Mar 14, 2025 10:43:56.716661930 CET	49750	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:56.721376896 CET	80	49750	185.50.25.7	192.168.2.4
Mar 14, 2025 10:43:56.801682949 CET	443	49765	142.250.186.132	192.168.2.4
Mar 14, 2025 10:43:56.802119017 CET	49765	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:43:56.802134991 CET	443	49765	142.250.186.132	192.168.2.4
Mar 14, 2025 10:43:56.952172041 CET	49756	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:43:56.957328081 CET	80	49756	185.50.25.7	192.168.2.4
Mar 14, 2025 10:44:02.968405008 CET	49728	80	192.168.2.4	216.58.206.65
Mar 14, 2025 10:44:02.968449116 CET	49729	80	192.168.2.4	216.58.206.65
Mar 14, 2025 10:44:02.973335028 CET	80	49728	216.58.206.65	192.168.2.4
Mar 14, 2025 10:44:02.973450899 CET	49728	80	192.168.2.4	216.58.206.65
Mar 14, 2025 10:44:02.973781109 CET	80	49729	216.58.206.65	192.168.2.4
Mar 14, 2025 10:44:02.973849058 CET	49729	80	192.168.2.4	216.58.206.65
Mar 14, 2025 10:44:06.725370884 CET	443	49765	142.250.186.132	192.168.2.4
Mar 14, 2025 10:44:06.725438118 CET	443	49765	142.250.186.132	192.168.2.4
Mar 14, 2025 10:44:06.725496054 CET	49765	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:44:06.968751907 CET	49765	443	192.168.2.4	142.250.186.132
Mar 14, 2025 10:44:06.968765974 CET	443	49765	142.250.186.132	192.168.2.4
Mar 14, 2025 10:44:07.815548897 CET	49742	80	192.168.2.4	142.250.186.67
Mar 14, 2025 10:44:07.820502996 CET	80	49742	142.250.186.67	192.168.2.4
Mar 14, 2025 10:44:07.820583105 CET	49742	80	192.168.2.4	142.250.186.67
Mar 14, 2025 10:44:23.622237921 CET	80	49739	185.50.25.7	192.168.2.4
Mar 14, 2025 10:44:23.622431993 CET	49739	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:44:23.624303102 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:44:23.624422073 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:44:23.698437929 CET	80	49746	185.50.25.7	192.168.2.4
Mar 14, 2025 10:44:23.698643923 CET	49746	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:44:24.574959993 CET	80	49754	185.50.25.7	192.168.2.4
Mar 14, 2025 10:44:24.575100899 CET	49754	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:44:24.597845078 CET	80	49753	185.50.25.7	192.168.2.4
Mar 14, 2025 10:44:24.597970009 CET	49753	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:44:24.624010086 CET	80	49752	185.50.25.7	192.168.2.4
Mar 14, 2025 10:44:24.624102116 CET	49752	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:44:24.967133045 CET	49754	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:44:24.967186928 CET	49753	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:44:24.967223883 CET	49752	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:44:24.967262030 CET	49739	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:44:24.967343092 CET	49738	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:44:24.967392921 CET	49746	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:44:24.973901033 CET	80	49754	185.50.25.7	192.168.2.4
Mar 14, 2025 10:44:24.973917007 CET	80	49753	185.50.25.7	192.168.2.4
Mar 14, 2025 10:44:24.973927975 CET	80	49752	185.50.25.7	192.168.2.4
Mar 14, 2025 10:44:24.974036932 CET	80	49739	185.50.25.7	192.168.2.4
Mar 14, 2025 10:44:24.974356890 CET	80	49738	185.50.25.7	192.168.2.4
Mar 14, 2025 10:44:24.974368095 CET	80	49746	185.50.25.7	192.168.2.4
Mar 14, 2025 10:44:26.750732899 CET	80	49750	185.50.25.7	192.168.2.4
Mar 14, 2025 10:44:26.750871897 CET	49750	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:44:26.968023062 CET	49750	80	192.168.2.4	185.50.25.7
Mar 14, 2025 10:44:26.972742081 CET	80	49750	185.50.25.7	192.168.2.4
Mar 14, 2025 10:44:27.002263069 CET	80	49756	185.50.25.7	192.168.2.4
Mar 14, 2025 10:44:27.002392054 CET	49756	80	192.168.2.4	185.50.25.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 10:42:55.726211071 CET	53	63003	1.1.1.1	192.168.2.4
Mar 14, 2025 10:42:55.726944923 CET	53	65021	1.1.1.1	192.168.2.4
Mar 14, 2025 10:42:56.108783007 CET	49164	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:42:56.108967066 CET	51165	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:42:56.115911007 CET	53	49164	1.1.1.1	192.168.2.4
Mar 14, 2025 10:42:56.116149902 CET	53	51165	1.1.1.1	192.168.2.4
Mar 14, 2025 10:42:57.372183084 CET	53	63073	1.1.1.1	192.168.2.4
Mar 14, 2025 10:42:57.476417065 CET	53	60049	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:00.982568979 CET	59491	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:00.982923031 CET	57575	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:01.006774902 CET	59649	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:01.006999016 CET	59052	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:01.008501053 CET	53	59491	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:01.016379118 CET	53	57575	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:01.018138885 CET	53	59052	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:01.018584013 CET	53	59649	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:02.067631960 CET	63533	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:02.068042994 CET	56611	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:02.078754902 CET	53	63533	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:02.086539984 CET	53	56611	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:03.189135075 CET	53906	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:03.189332962 CET	51945	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:03.197056055 CET	53	53906	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:03.236043930 CET	58490	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:03.236208916 CET	56283	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:03.238605976 CET	53	51945	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:03.242991924 CET	53	56283	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:03.243005037 CET	53	58490	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:04.254405022 CET	51049	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:04.254901886 CET	61050	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:04.278649092 CET	57823	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:04.278717995 CET	64770	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:04.315807104 CET	53	61050	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:04.338598013 CET	53	57823	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:04.340445042 CET	53	64770	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:04.477305889 CET	53	51049	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:07.649004936 CET	57691	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:07.649004936 CET	50033	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:07.655777931 CET	53	50033	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:07.655981064 CET	53	57691	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:08.114960909 CET	51729	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:08.115148067 CET	58559	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:08.125920057 CET	53	58559	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:08.128262043 CET	50937	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:08.128262043 CET	55582	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:08.141834974 CET	53	50937	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:08.178343058 CET	53	55582	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:08.265841961 CET	53	51729	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:08.549087048 CET	53	60574	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:08.559357882 CET	55884	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:08.559628010 CET	59967	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:08.619486094 CET	53	59967	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:08.779759884 CET	58935	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:08.779937029 CET	58822	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:08.783746958 CET	53	55884	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:08.789233923 CET	53	58822	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:08.791362047 CET	56983	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:08.791502953 CET	51278	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:08.795670033 CET	53	58935	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:08.798646927 CET	53	56983	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:08.841675043 CET	53	51278	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:10.446830988 CET	65112	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:10.446999073 CET	65286	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:10.447344065 CET	56862	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:10.447484016 CET	61373	53	192.168.2.4	1.1.1.1
Mar 14, 2025 10:43:10.453579903 CET	53	65112	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:10.454641104 CET	53	65286	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:10.460768938 CET	53	61373	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:10.538837910 CET	53	56862	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:14.643721104 CET	53	58105	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:33.454459906 CET	53	53865	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:54.185962915 CET	53	56716	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:54.270246029 CET	138	138	192.168.2.4	192.168.2.255
Mar 14, 2025 10:43:56.376507044 CET	53	60604	1.1.1.1	192.168.2.4
Mar 14, 2025 10:43:56.849550962 CET	53	58192	1.1.1.1	192.168.2.4
Mar 14, 2025 10:44:26.067784071 CET	53	58650	1.1.1.1	192.168.2.4

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 14, 2025 10:43:03.238740921 CET	192.168.2.4	1.1.1.1	c236	(Port unreachable)	Destination Unreachable
Mar 14, 2025 10:43:08.178410053 CET	192.168.2.4	1.1.1.1	c230	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 14, 2025 10:42:56.108783007 CET	192.168.2.4	1.1.1.1	0xdc22	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:56.108967066 CET	192.168.2.4	1.1.1.1	0x6988	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 14, 2025 10:43:00.982568979 CET	192.168.2.4	1.1.1.1	0xcc74	Standard query (0)	kjhgt55555555555.blogspot.cz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:00.982923031 CET	192.168.2.4	1.1.1.1	0x9633	Standard query (0)	kjhgt55555555555.blogspot.cz	65	IN (0x0001)	false
Mar 14, 2025 10:43:01.006774902 CET	192.168.2.4	1.1.1.1	0x1933	Standard query (0)	kjhgt55555555555.blogspot.cz	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:01.006999016 CET	192.168.2.4	1.1.1.1	0x58d5	Standard query (0)	kjhgt55555555555.blogspot.cz	65	IN (0x0001)	false
Mar 14, 2025 10:43:02.067631960 CET	192.168.2.4	1.1.1.1	0x9cef	Standard query (0)	kjhgt55555555555.blogspot.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:02.068042994 CET	192.168.2.4	1.1.1.1	0xe864	Standard query (0)	kjhgt55555555555.blogspot.com	65	IN (0x0001)	false
Mar 14, 2025 10:43:03.189135075 CET	192.168.2.4	1.1.1.1	0xdd5d	Standard query (0)	www.blogger.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:03.189332962 CET	192.168.2.4	1.1.1.1	0xc672	Standard query (0)	www.blogger.com	65	IN (0x0001)	false
Mar 14, 2025 10:43:03.236043930 CET	192.168.2.4	1.1.1.1	0x59f6	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:03.236208916 CET	192.168.2.4	1.1.1.1	0x14af	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Mar 14, 2025 10:43:04.254405022 CET	192.168.2.4	1.1.1.1	0x8590	Standard query (0)	u967289v.beget.tech	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:04.254901886 CET	192.168.2.4	1.1.1.1	0x99f	Standard query (0)	u967289v.beget.tech	65	IN (0x0001)	false
Mar 14, 2025 10:43:04.278649092 CET	192.168.2.4	1.1.1.1	0x6c4d	Standard query (0)	u967289v.beget.tech	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:04.278717995 CET	192.168.2.4	1.1.1.1	0xc7ee	Standard query (0)	u967289v.beget.tech	65	IN (0x0001)	false
Mar 14, 2025 10:43:07.649004936 CET	192.168.2.4	1.1.1.1	0xc991	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 14, 2025 10:43:07.649004936 CET	192.168.2.4	1.1.1.1	0xad9b	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:08.114960909 CET	192.168.2.4	1.1.1.1	0x5b89	Standard query (0)	img3.proshkolu.ru	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:08.115148067 CET	192.168.2.4	1.1.1.1	0xac92	Standard query (0)	img3.proshkolu.ru	65	IN (0x0001)	false
Mar 14, 2025 10:43:08.128262043 CET	192.168.2.4	1.1.1.1	0xe441	Standard query (0)	img3.proshkolu.ru	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:08.128262043 CET	192.168.2.4	1.1.1.1	0x9bce	Standard query (0)	img3.proshkolu.ru	65	IN (0x0001)	false
Mar 14, 2025 10:43:08.559357882 CET	192.168.2.4	1.1.1.1	0xc8dc	Standard query (0)	u967289v.beget.tech	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:08.559628010 CET	192.168.2.4	1.1.1.1	0x342a	Standard query (0)	u967289v.beget.tech	65	IN (0x0001)	false
Mar 14, 2025 10:43:08.779759884 CET	192.168.2.4	1.1.1.1	0x690a	Standard query (0)	data3.proshkolu.ru	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:08.779937029 CET	192.168.2.4	1.1.1.1	0x5ba6	Standard query (0)	data3.proshkolu.ru	65	IN (0x0001)	false
Mar 14, 2025 10:43:08.791362047 CET	192.168.2.4	1.1.1.1	0x8216	Standard query (0)	data3.proshkolu.ru	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:08.791502953 CET	192.168.2.4	1.1.1.1	0xd2ac	Standard query (0)	data3.proshkolu.ru	65	IN (0x0001)	false
Mar 14, 2025 10:43:10.446830988 CET	192.168.2.4	1.1.1.1	0xc9c5	Standard query (0)	m.vk.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:10.446999073 CET	192.168.2.4	1.1.1.1	0x56f9	Standard query (0)	m.vk.com	65	IN (0x0001)	false
Mar 14, 2025 10:43:10.447344065 CET	192.168.2.4	1.1.1.1	0x636a	Standard query (0)	data3.proshkolu.ru	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:10.447484016 CET	192.168.2.4	1.1.1.1	0x61aa	Standard query (0)	data3.proshkolu.ru	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 14, 2025 10:42:56.115911007 CET	1.1.1.1	192.168.2.4	0xdc22	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:42:56.116149902 CET	1.1.1.1	192.168.2.4	0x6988	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 14, 2025 10:43:01.008501053 CET	1.1.1.1	192.168.2.4	0xcc74	No error (0)	kjhgt55555555555.blogspot.cz	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:43:01.008501053 CET	1.1.1.1	192.168.2.4	0xcc74	No error (0)	blogspot.l.googleusercontent.com		216.58.206.65	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:01.016379118 CET	1.1.1.1	192.168.2.4	0x9633	No error (0)	kjhgt55555555555.blogspot.cz	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:43:01.018138885 CET	1.1.1.1	192.168.2.4	0x58d5	No error (0)	kjhgt55555555555.blogspot.cz	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:43:01.018584013 CET	1.1.1.1	192.168.2.4	0x1933	No error (0)	kjhgt55555555555.blogspot.cz	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:43:01.018584013 CET	1.1.1.1	192.168.2.4	0x1933	No error (0)	blogspot.l.googleusercontent.com		172.217.18.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:02.078754902 CET	1.1.1.1	192.168.2.4	0x9cef	No error (0)	kjhgt55555555555.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:43:02.078754902 CET	1.1.1.1	192.168.2.4	0x9cef	No error (0)	blogspot.l.googleusercontent.com		172.217.18.1	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:02.086539984 CET	1.1.1.1	192.168.2.4	0xe864	No error (0)	kjhgt55555555555.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:43:03.197056055 CET	1.1.1.1	192.168.2.4	0xdd5d	No error (0)	www.blogger.com	blogger.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:43:03.197056055 CET	1.1.1.1	192.168.2.4	0xdd5d	No error (0)	blogger.l.google.com		142.250.185.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:03.238605976 CET	1.1.1.1	192.168.2.4	0xc672	No error (0)	www.blogger.com	blogger.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:43:03.242991924 CET	1.1.1.1	192.168.2.4	0x14af	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:43:03.243005037 CET	1.1.1.1	192.168.2.4	0x59f6	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 10:43:03.243005037 CET	1.1.1.1	192.168.2.4	0x59f6	No error (0)	plus.l.google.com		142.250.184.206	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:04.338598013 CET	1.1.1.1	192.168.2.4	0x6c4d	No error (0)	u967289v.beget.tech		185.50.25.7	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:04.477305889 CET	1.1.1.1	192.168.2.4	0x8590	No error (0)	u967289v.beget.tech		185.50.25.7	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:07.655777931 CET	1.1.1.1	192.168.2.4	0xad9b	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:07.655777931 CET	1.1.1.1	192.168.2.4	0xad9b	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:07.655777931 CET	1.1.1.1	192.168.2.4	0xad9b	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:07.655777931 CET	1.1.1.1	192.168.2.4	0xad9b	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:08.125920057 CET	1.1.1.1	192.168.2.4	0xac92	No error (0)	img3.proshkolu.ru			65	IN (0x0001)	false
Mar 14, 2025 10:43:08.141834974 CET	1.1.1.1	192.168.2.4	0xe441	No error (0)	img3.proshkolu.ru		104.21.29.163	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:08.141834974 CET	1.1.1.1	192.168.2.4	0xe441	No error (0)	img3.proshkolu.ru		172.67.149.117	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:08.178343058 CET	1.1.1.1	192.168.2.4	0x9bce	No error (0)	img3.proshkolu.ru			65	IN (0x0001)	false
Mar 14, 2025 10:43:08.265841961 CET	1.1.1.1	192.168.2.4	0x5b89	No error (0)	img3.proshkolu.ru		104.21.29.163	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:08.265841961 CET	1.1.1.1	192.168.2.4	0x5b89	No error (0)	img3.proshkolu.ru		172.67.149.117	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:08.783746958 CET	1.1.1.1	192.168.2.4	0xc8dc	No error (0)	u967289v.beget.tech		185.50.25.7	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:08.789233923 CET	1.1.1.1	192.168.2.4	0x5ba6	No error (0)	data3.proshkolu.ru			65	IN (0x0001)	false
Mar 14, 2025 10:43:08.795670033 CET	1.1.1.1	192.168.2.4	0x690a	No error (0)	data3.proshkolu.ru		172.67.149.117	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:08.795670033 CET	1.1.1.1	192.168.2.4	0x690a	No error (0)	data3.proshkolu.ru		104.21.29.163	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:08.841675043 CET	1.1.1.1	192.168.2.4	0xd2ac	No error (0)	data3.proshkolu.ru			65	IN (0x0001)	false
Mar 14, 2025 10:43:09.515798092 CET	1.1.1.1	192.168.2.4	0x4b72	No error (0)	data3.proshkolu.ru		172.67.149.117	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:09.515798092 CET	1.1.1.1	192.168.2.4	0x4b72	No error (0)	data3.proshkolu.ru		104.21.29.163	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:10.453579903 CET	1.1.1.1	192.168.2.4	0xc9c5	No error (0)	m.vk.com		87.240.137.164	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:10.453579903 CET	1.1.1.1	192.168.2.4	0xc9c5	No error (0)	m.vk.com		87.240.132.67	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:10.453579903 CET	1.1.1.1	192.168.2.4	0xc9c5	No error (0)	m.vk.com		87.240.132.78	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:10.453579903 CET	1.1.1.1	192.168.2.4	0xc9c5	No error (0)	m.vk.com		87.240.132.72	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:10.453579903 CET	1.1.1.1	192.168.2.4	0xc9c5	No error (0)	m.vk.com		87.240.129.133	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:10.453579903 CET	1.1.1.1	192.168.2.4	0xc9c5	No error (0)	m.vk.com		93.186.225.194	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:10.460768938 CET	1.1.1.1	192.168.2.4	0x61aa	No error (0)	data3.proshkolu.ru			65	IN (0x0001)	false
Mar 14, 2025 10:43:10.538837910 CET	1.1.1.1	192.168.2.4	0x636a	No error (0)	data3.proshkolu.ru		172.67.149.117	A (IP address)	IN (0x0001)	false
Mar 14, 2025 10:43:10.538837910 CET	1.1.1.1	192.168.2.4	0x636a	No error (0)	data3.proshkolu.ru		104.21.29.163	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

kjhgt55555555555.blogspot.cz

kjhgt55555555555.blogspot.com

www.blogger.com

apis.google.com

www.google.com

u967289v.beget.tech

img3.proshkolu.ru

data3.proshkolu.ru

m.vk.com

code.jquery.com

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port
0	192.168.2.4	49742	142.250.186.67	80

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:43:05.902205944 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 14, 2025 10:43:06.524833918 CET	223	IN	HTTP/1.1 304 Not Modified Date: Fri, 14 Mar 2025 09:03:33 GMT Expires: Fri, 14 Mar 2025 09:53:33 GMT Age: 2373 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 14, 2025 10:43:06.533720016 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 14, 2025 10:43:06.725778103 CET	223	IN	HTTP/1.1 304 Not Modified Date: Fri, 14 Mar 2025 09:03:52 GMT Expires: Fri, 14 Mar 2025 09:53:52 GMT Age: 2354 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49739	185.50.25.7	80	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:43:07.274882078 CET	434	OUT	GET / HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:43:07.597714901 CET	1236	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 09:43:07 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=30 Vary: Accept-Encoding X-Powered-By: PHP/5.6.40 Content-Encoding: gzip Data Raw: 63 36 36 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 5a e1 6f 13 47 16 ff 5e a9 ff c3 b2 52 11 20 db 1b 87 10 20 89 8d 5a a0 2a 12 2d 15 0d 6a 4f 14 ad c6 bb 63 ef e0 dd 9d ed ee ac 9d 10 45 02 d2 f6 ae 2a 85 36 77 52 aa 5e af 55 af f9 76 3a 29 a4 cd 11 a0 04 a9 7f c1 fa 3f ba f7 de ae ed b5 63 d3 04 ee cb 49 26 f2 ee ce cc 7b bf 79 f3 e6 cd 9b f7 86 59 38 72 e1 ca f9 c5 3f bd 7f 51 73 94 e7 6a ef 5f 7b eb f2 a5 f3 9a 5e 34 8c 0f df 7c ff ed 2b 57 af bd 6b 18 17 16 2f 68 1f bd b3 f8 ee 65 ed 5d 59 13 2e d7 ca a5 29 c3 b8 f8 9e ae e9 8e 52 c1 9c 61 b4 db ed 52 9b 05 75 19 c6 5e 49 86 0d 64 31 96 10 b1 e8 11 4b 79 aa 64 2b 5b af be fe da 02 f5 b3 e4 b9 7e 54 19 60 3f 49 8c e5 b3 67 cf a6 9c ba 66 b9 2c 02 a2 9b 91 b9 cc 23 bd ba e0 70 66 57 17 3c ae 98 86 8c 45 fe 49 2c 5a 15 fd bc f4 15 f7 55 71 71 39 e0 c0 94 96 2a ba e2 4b ca 40 a0 79 cd 72 58 18 71 55 b9 b6 f8 76 f1 0c 09 e1 0a bf a9 85 dc ad e8 91 23 43 65 c5 4a 13 c0 a9 6b 4e c8 eb 15 5d f8 36 5f 32 eb 20 78 64 d4 59 cb 74 65 43 96 80 e0 dc 29 5d 33 [TRUNCATED] Data Ascii: c66ZoG^R Z-jOcE6wR^Uv:)?cI&{yY8r?Qsj_{^4\|+Wk/he]Y.)RaRu^Id1Kyd+[~T`?Igf,#pfW<EI,ZUqq9K@yrXqUv#CeJkN]6_2 xdYteC)]3+zKvVN-a"-Fsy4X<bo-WjPK}PT[JrpyH-,^n7po\-ngap~;bJ(Wa<K%[Ztnw$XXOgV;F@iQh,6/$r}K7g;eIZWfUVes57RG-XEo5 xFDjRPsy;AH`phO\C)%C,HgeS`MKYKH2&eM=`:CtbZiFJXMF#\|QDegiKE~#g[US`I[XlPhYS3!}\|zE\|!4}GakH3-h@rw^1l]c+}hH(GF"k7>JR$NTF]J_j(7*.YKZ5SAq1GR>5OPFNSq)
Mar 14, 2025 10:43:07.597824097 CET	224	IN	Data Raw: a1 19 b4 64 8d 40 58 46 a4 6c a3 3c 45 ff 8c 99 72 fa 9a 3a 3b 33 3b 55 64 76 7d b6 76 f2 f4 99 33 d6 34 e3 e5 b3 b5 52 43 d4 41 a7 2e b8 43 f0 6a e0 f9 d0 af 75 6e 93 ff bb 0b be 70 1b fc dd 97 c9 63 0d ab c1 e9 dd e9 dc c5 e9 32 32 e1 fa 62 26 Data Ascii: d@XFl<Er:;3;Udv}v34RCA.Cjunpc22b&Zgg?O=p{t+Tisy/ynT&s_;)zd1g+S5WP91")C0W~=`aU
Mar 14, 2025 10:43:07.597835064 CET	1236	IN	Data Raw: 46 fd 14 c4 fe 14 e5 d5 70 af 01 f9 b9 c7 84 3b 07 78 e4 e8 6d 7b 48 58 91 2d 56 e1 07 e0 4d fb 8e 5b cf 1b 4e 5d c0 1e a7 a7 8b 4c 36 84 af e7 17 af 9d be dc ea a1 64 fd 11 74 8e d3 01 46 71 38 e1 02 68 69 cb d0 1e 27 60 af 7d 8c 8c 5a 6f 22 46 Data Ascii: Fp;xm{HX-VM[N]L6dtFq8hi'`}Zo"FH:PnC-VJq7otnKy8skrFJ:h54Ug)6 =!"CXohq^KsCTtCi}+*lxa \4~Jac%F
Mar 14, 2025 10:43:07.597847939 CET	752	IN	Data Raw: b9 34 2f 04 9c af c9 d0 1f a2 af 1c cb 11 2b 47 86 7d 96 1f a0 ab e7 fd 9d 03 a7 01 b2 ca 17 0c bb af b0 11 43 1f cd 87 87 e0 7d 95 8d d5 0e 06 e3 66 e0 b2 65 08 cc 87 a6 06 e6 fb 11 64 5f 4f f2 73 c8 62 5b c8 2e bd 2f 55 f7 30 0f 19 7e c6 83 8e Data Ascii: 4/+G}C}fed_Osb[./U0~<q.W1V`'!9k%m1@2<$+rMBffOSoH!N4Pv3@5O3 l&+gd!Xx[o/I
Mar 14, 2025 10:43:07.649563074 CET	319	OUT	GET /code.js?1 HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:43:07.876040936 CET	1116	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 09:43:07 GMT Content-Type: application/x-javascript Last-Modified: Sun, 27 Nov 2016 21:38:04 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=30 Vary: Accept-Encoding ETag: W/"583b523c-652" Expires: Fri, 21 Mar 2025 09:43:07 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 32 63 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 85 54 cb 6a db 40 14 dd 17 fa 0f 37 72 21 36 51 65 0a a1 a1 f2 63 d1 a4 81 66 d1 2e ba 0d 04 59 1a 5b c2 8a 46 cc 48 4e 42 30 24 0e a5 85 06 4a bb 2c 94 2e fa 03 a6 24 25 69 49 f2 0b 33 7f d4 3b 7a d8 92 5c 27 02 23 cd f1 3d 77 e6 dc 73 a4 91 c5 c0 76 89 3d 24 0c 3a 70 fc f8 11 e0 35 a0 26 f4 e3 c0 8e 3c 1a d4 1b 0a 4d 71 75 8d 90 e0 d3 81 17 60 f9 93 ba 56 4b 9e b5 86 31 b2 fc 7a a3 55 ae 0b 2d ce 0f 28 73 b2 d2 7c b9 a4 da b6 c2 c8 76 ad 3d ee e5 84 02 f2 00 67 48 8e 2a 1c 44 0a 9c 39 4b d5 f0 d8 b6 09 e7 3a d4 08 63 94 e1 3d 63 21 c3 8d f6 fd fa ea 6a 99 e4 f5 eb 2b 89 d0 46 3e a2 fc 62 24 8a 59 50 9a 44 9f da 31 2f 9d 74 0c c4 e7 a4 4a 55 4d f3 91 2c f4 ad f4 2e 8c 6e b1 fd f2 2d 12 c1 46 48 79 54 d7 12 97 8d d0 0d 35 1d 8e f3 7e e6 cc 23 3d 75 d5 4c 6f 7a d1 0d b3 b8 d0 8b 33 37 8b 8b b1 3e 0f 8d 63 45 d6 7f 35 e5 c6 31 c2 95 61 46 68 31 4e 76 de bd 7d 93 52 4a 53 af 0c 0b 29 46 e2 d7 5e 44 0e 23 e8 74 40 9b d9 b6 6c ab dc f1 8a bf 9a f8 2a 7e 89 4b [TRUNCATED] Data Ascii: 2c8Tj@7r!6Qecf.Y[FHNB0$J,.$%iI3;z\'#=wsv=$:p5&<Mqu`VK1zU-(s\|v=gHD9K:c=c!j+F>b$YPD1/tJUM,.n-FHyT5~#=uLoz37>cE51aFh1Nv}RJS)F^D#t@l~Kq!D\#N~gf8;k(`MX #BU8$spUB;\|%oC'[qQZ_IA6,'A6}?+zLL cP"8z>qj\|iOmKpcLT_Ju:xt,{8`4rj/hA_8Q\mkfaK9T]m&uw<Mqy?FV\cvM'~ b5MTYy"h+KT<W]h/O=$f#sD$i/\|s_oRAER0
Mar 14, 2025 10:43:08.258240938 CET	384	OUT	GET /index_files/p HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:43:08.548634052 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 09:43:08 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT ETag: "2b-5424f2bd85240" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Mar 14, 2025 10:43:53.550267935 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49738	185.50.25.7	80	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:43:07.650259018 CET	348	OUT	GET /index_files/s_cfmxw.css HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:43:07.888540983 CET	1236	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 09:43:07 GMT Content-Type: text/css Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=30 Vary: Accept-Encoding ETag: W/"583b5241-251f6" Expires: Fri, 21 Mar 2025 09:43:07 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 37 65 34 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c4 bd 69 73 1b c7 b2 28 f8 7d 22 e6 3f 60 c2 e1 38 57 cf 20 d4 68 ec 64 dc 99 cb 05 94 f7 45 b2 bc e8 0b a2 01 34 c8 36 b1 09 0d 90 92 18 fc ef 53 7b 65 66 65 75 83 92 67 de a1 8f 4d 76 65 65 ed 59 59 b9 b6 a6 87 fd 7e b3 6e b6 ca 55 b6 5c 4e cc 5f d3 cd fc 63 b3 58 6f 0f fb 66 99 2f f3 d9 be b9 cf 3f ec b3 5d 9e 3d 2e 36 eb fd c9 22 5b 15 cb 8f a7 3f 1e 66 c5 3c 6b bc da 65 eb 79 de fc 23 df cd b3 75 d6 fc 3d bb dd ac b2 e6 f9 ae c8 96 cd 37 d9 ba 3c 79 93 ef 8a 45 d3 40 cb 2f 67 0a 4b 59 7c ca 4f 57 f9 bc 38 ac 9e 5a f1 7e cc e7 cd f9 b2 39 df 37 17 9b dd aa 79 db 6e de a6 cd db 6e f3 b6 c7 f7 b0 79 58 3e ae b2 dd 4d b1 3e 4d ce b6 d9 7c 5e ac 6f 4e 93 a7 db fd 6a f9 f8 50 cc f7 b7 a7 ed 24 f9 fa ec 36 2f 6e 6e f7 ea f7 27 d9 cc e3 34 9b dd dd ec 36 87 f5 fc f4 ab 45 4f fe 9c 9d ac ca 13 89 56 f5 f4 24 9b ff 73 28 75 8d b3 93 87 7c 7a 57 ec 23 a5 ec 57 3b c4 d3 d3 93 d5 e6 d3 c9 62 33 3b 94 27 c5 7a 9d ef f0 a0 99 72 35 ce f0 fb e3 74 b3 9b e7 3b 34 [TRUNCATED] Data Ascii: 7e4ais(}"?`8W hdE46S{efeugMveeYY~nU\N_cXof/?]=.6"[?f<key#u=7<yE@/gKY\|OW8Z~97ynnyX>M>M\|^oNjP$6/nn'46EOV$s(u\|zW#W;b3;'zr5t;4L7l/\|9'S3be`>neFd)Nly8]oyd<G;CvgbrUMbTn8f~_Df15+vS5FvH+0$[4knL}{V}}jfbBy9vF/vS{,L\,y45DO0#=Egb"Ovt*N.t#hu-WB13W??nX='AKWqo\|qfc/nL=o MQ_&'t&V^CO^AFe%(tA"So@@Sjgsu11,i\|;YU<eFs&bA6jGuN@}0'1ctOz`vz
Mar 14, 2025 10:43:07.888567924 CET	1236	IN	Data Raw: a9 08 43 f9 72 b5 99 16 cb fc a5 81 6a dd 14 8b ff a7 fd a2 b1 de 9c ec 72 41 f0 f6 67 68 5b 9c 99 8b a7 87 5a 61 b6 bd ec 4b 5b b6 2f 09 95 98 1b 48 b0 ca f7 07 71 bf e1 59 6b b7 7a f9 ca 2e e5 a0 37 1c 9f 5f 9e d9 cb af 91 34 64 83 0e d7 64 b7 Data Ascii: CrjrAgh[ZaK[/HqYkz.7_4ddy&IX%CL:CgzZ1bm1}6Y=uliVp%2vgkj2\|A4?/y2mH&}Z5kn8r,*n=n+At>\|5zW-q
Mar 14, 2025 10:43:07.888580084 CET	1236	IN	Data Raw: a4 46 bc e1 24 90 01 7f da 48 fa 2b 1f e8 d9 6e 32 dd af 1b dc c0 13 c0 32 e1 69 3d 81 43 d9 17 5b 7f 77 19 5a 6d 49 82 a0 07 5f cd 04 5c 39 d9 e7 82 4f d6 7d 73 74 57 20 81 a5 6a c8 a7 6a 46 f2 f9 37 b1 7a 4a f2 34 51 85 a8 d7 01 43 49 60 ee b3 Data Ascii: F$H+n22i=C[wZmI_\9O}stW jjF7zJ4QCI`!T2R ":%ZlN`]%yT9.f`koEw\|zvOP,5N?!%419p[N19P[GnZPibme#'ep
Mar 14, 2025 10:43:07.888664007 CET	672	IN	Data Raw: da ec 65 b6 83 95 84 8e 07 76 62 01 f7 bd 95 cd e4 8c 30 05 1a bb 57 c6 ce 16 7d c4 8b 77 e7 83 b6 94 98 09 78 f8 e4 1d 6a aa bc ba 9d ac 37 53 47 dc f5 56 d0 5d d3 45 8e 91 56 27 d5 96 4c 45 bf 57 79 50 64 76 58 47 3e 7d bc c2 4b 56 28 4c 85 9a Data Ascii: evb0W}wxj7SGV]EV'LEWyPdvXG>}KV(L}Xi9sQ8"h#R}y`~0}[ i]]oIlC,XE{Q%&31{eM=X.+lYi[?ZK_}td2D
Mar 14, 2025 10:43:07.888679028 CET	1236	IN	Data Raw: 99 6f 4b cb 9f 01 5c f4 5d 84 ca 62 3a 84 bc 2f 5e 49 ed b8 f0 68 be c8 3b f9 10 f5 59 4a 33 27 9b 87 35 90 3a f7 e5 8f 00 da aa 4b db a8 35 a2 b6 46 3b af 29 8a 31 3c 10 93 3c 74 d9 ae d6 b5 d4 08 61 04 e4 e6 81 bd 40 98 03 67 9f fb 76 e1 f0 c1 Data Ascii: oK\]b:/^Ih;YJ3'5:K5F;)1<<ta@gvFtsM#gUf=iAl+YgDp^lMOr^s?8VR'b"\XhVZ2)5zr$"pb~X>q
Mar 14, 2025 10:43:07.888762951 CET	1236	IN	Data Raw: 6f dd 44 7b bd eb 6d a2 06 64 9c 4b 62 fb e6 68 6a 25 7b b8 5e 6c 9c 9d e8 48 fe e8 b6 e0 77 65 8a ab 60 75 ac a4 52 5e a6 ae 95 26 57 24 87 49 c4 1f bc 55 9b 0f 1a 44 9b d0 af a8 2f d7 29 04 3a 8d a7 d6 2c db ee 67 b7 99 76 92 70 eb 9a 1d f6 1b Data Ascii: oD{mdKbhj%{^lHwe`uR^&W$IUD/):,gvpK]%IdJiTkg`Vc>ot!$r.QC~V?jJf=!8$)&^n@a5FsWO9%Qa5%}'FR0
Mar 14, 2025 10:43:07.888775110 CET	448	IN	Data Raw: 3a 4c 03 ce 13 4a 99 05 7c 49 8d cd eb 63 ea 94 34 7a 50 97 07 2a f7 d9 fe 10 c4 dc 01 01 c8 99 6b 23 3e b0 dd 66 e9 d3 27 84 dd 0a df d4 65 61 82 fe d0 b1 05 d6 3a 54 44 4e ad da 0c 26 36 b0 b9 29 53 91 ac 20 99 28 51 28 27 c5 d9 74 d1 fd 61 41 Data Ascii: :LJ\|Ic4zPk#>f'ea:TDN&6)S (Q('taAm7{T{`dI5UbiOfb\4m0q[nluftO4VB+PbBCkTEFUMY~0gB9R3zvr1_F
Mar 14, 2025 10:43:07.888788939 CET	1236	IN	Data Raw: 26 d2 68 c3 1d 0b 2e 3f 09 01 8e 86 a5 34 d6 51 91 20 3f 86 6d 27 c8 02 ad 03 2d 8f fa af 5a 1a ca 8c c4 12 c6 b0 00 39 0d 1a fd 66 00 17 10 f5 0e f3 d2 8d 55 2e 8c 7d 10 57 a2 88 1e a2 8d 0c 06 69 52 93 95 9a b1 6d b4 e6 9b 99 fe 95 c1 88 21 4d Data Ascii: &h.?4Q ?m'-Z9fU.}WiRm!M`-n^\|?#%L$d&RxuQ/f!xn(f%SR<aZ+K}dqX.O"i\vB)FoterS2P!E_zW' P]
Mar 14, 2025 10:43:07.888798952 CET	224	IN	Data Raw: b4 37 01 da 37 75 48 83 5d 64 aa 18 56 bd 36 15 55 4c 5b ab 26 61 b5 87 01 c4 16 d9 aa 58 7e 3c fd f1 30 2b e6 59 e3 95 78 83 cc f3 e6 3e bb dd ac b2 a6 98 ee 79 b6 ce 42 74 c1 85 05 c2 ab 23 51 39 f2 51 06 39 49 e9 8d ef 4b 20 3f 22 c8 32 27 3f Data Ascii: 77uH]dV6UL[&aX~<0+Yx>yBt#Q9Q9IK ?"2'?wq@*54?`~vX]jN@>]"pH=k c2q3e aao`p.7JRkiliqhV.hL5@A+AbQlI
Mar 14, 2025 10:43:07.888808012 CET	1236	IN	Data Raw: 0d a8 2c 3c 11 5c 3e b3 a3 30 9f d1 9b 1f 60 32 49 6d 83 ac 52 8e 92 37 40 23 c0 b9 09 65 8d 86 55 49 81 d3 0c e3 67 bb e7 19 42 09 b0 29 d3 ca 2e 56 59 e9 8e ab 87 3c 26 93 42 08 8f 3e e9 45 17 a3 a4 48 c4 fe ca 77 da 78 01 82 2b 21 06 f3 e6 0e Data Ascii: ,<\>0`2ImR7@#eUIgB).VY<&B>EHwx+!P9L>KQ'1JuD+V(C@.^.7:xPpVzMR FTDt!eWDDR>QsnX\EEwYP/u,]$[NGwCil =
Mar 14, 2025 10:43:07.893409014 CET	1236	IN	Data Raw: 6f 4b 98 21 4f 27 31 41 b7 fa 23 26 7c 03 08 8f 9e 5b 76 2c c7 f9 31 69 04 46 4e c2 f2 db fc 8c 19 da 80 d3 02 fb 4b 46 bf 28 1a 89 be 5f a2 e9 85 d4 64 02 25 6e 86 5d 23 dc d5 ec cc 03 fd 41 af 77 aa 7b 28 3e 7b 91 1f 4c 3f a2 61 73 14 88 a2 80 Data Ascii: oK!O'1A#&\|[v,1iFNKF(_d%n]#Aw{(>{L?asmx{p{<`-6%},4P<@-:]PPLIHM(C:7NOeM,+%D\|&s+'r`tJ&>Gh8
Mar 14, 2025 10:43:08.253737926 CET	386	OUT	GET /index_files/hit HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:43:08.550652027 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 09:43:08 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT ETag: "2b-5424f2bd85240" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49746	185.50.25.7	80	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:43:07.655817986 CET	347	OUT	GET /index_files/s_yzgt.css HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:43:08.368792057 CET	1236	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 09:43:08 GMT Content-Type: text/css Last-Modified: Sun, 27 Nov 2016 21:38:08 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=30 Vary: Accept-Encoding ETag: W/"583b5240-df79" Expires: Fri, 21 Mar 2025 09:43:08 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 32 31 65 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 5d e9 8e e3 38 92 fe 3f c0 bc 83 17 85 c2 74 0d 6c b7 2e 4b 72 fa c7 0e 76 77 e6 25 16 0b 43 b6 e5 4c 21 65 cb 6d c9 99 55 9d c8 77 1f de 67 50 a4 5d 59 47 6f 27 6a 0e a7 14 24 83 c1 60 30 18 fc 18 fa c7 a1 de 35 d5 a4 df 9e eb fa 38 a9 8e bb c9 2f 87 ea f3 ec b9 d9 0d 0f 77 49 16 9d 3e 7f 7a 99 6f 2e c3 d0 1d 5f 4e d5 6e d7 1c ef ef f2 d3 e7 49 9c 9c 3e bf ce 8f 75 75 5e 6f 06 e3 55 84 5f f5 87 aa 6d d7 b4 e4 94 fd 65 91 67 88 bc c0 d4 0f 1b ed 79 89 9e 47 af f3 03 7a fc d0 1d ea 17 ca 4e ba c0 a4 87 87 86 3e dc 54 db c7 fb 73 77 39 ee 66 cd a1 ba af ef 2e e7 f6 97 5f c9 cf fe d7 43 b7 69 da fa d7 7e dd 76 f7 dd fc 74 bc ff cf f8 13 2d fb f4 78 45 e9 a7 47 b3 82 cd fa d8 0d cd fe 0b e7 75 d6 d6 fb 01 f7 7b c5 1f 9c 9b fb 07 fa 04 4b f2 a1 26 7f 26 f3 22 8a eb 03 af 81 57 42 3b 16 2f 94 e2 a4 3e 2c 43 a3 42 2a d6 c3 03 2b ba de 22 de 87 fa ac f3 21 24 c4 ea 0f eb 25 25 26 9d cc 3e 19 8c b0 1a 15 a6 27 b7 34 a0 b7 41 6b c4 65 2d f6 8d 5e 8b 0e 11 e2 [TRUNCATED] Data Ascii: 21ee]8?tl.Krvw%CL!emUwgP]YGo'j$`058/wI>zo._NnI>uu^oU_megyGzN>Tsw9f._Ci~vt-xEGu{K&&"WB;/>,CB+"!$%%&>'4Ake-^013TiB\|H)vGEPus''kyz8PQlFXo9f6P/fxnl{^mhVh?nwjY%h}s&{::$VJS7C}bd0?;qx-7x1ykj{ndbVn\!AyCH+Y>7^4.YQE!Y\&V$vTvc"-/cDBS;,H1w)q?1X?4Kfv\=W_Mdz>5<-9fd-WV%c\|8yuc3\|W?5zvj>\%V'D&h___n)j\|1b1AjtsFCnS/
Mar 14, 2025 10:43:08.368809938 CET	1236	IN	Data Raw: 2d 55 9d d2 64 c4 29 2d 2d a5 2a 74 a7 34 9d a7 71 e9 74 4a 4b cb 29 4d 6d 2d 4d 02 9c d2 fc 06 a7 74 cc 25 2d be de 25 0d 75 48 81 89 79 bd 47 2a fc d1 d4 ec 49 7e 8d 3f ba f4 fb a3 96 56 5d e3 3a 5c e3 7c a6 89 5c 1a d3 c4 e7 7c e6 37 3a 9f df Data Ascii: -Ud)--t4qtJK)Mm-Mt%-%uHyGI~?V]:\\|\\|7:\|Sr;KjTag^,~.7p?t>>`t6N];Ts@Yj$Bx3EAL-9Oog&YW9g9,K4y3W3O\
Mar 14, 2025 10:43:08.368822098 CET	1236	IN	Data Raw: 5a 2f 57 0c 4b b6 2c 0a e0 6a d2 71 02 c8 b5 84 c6 1c 7a cd 87 48 f5 77 5a ac c3 7a 8c c4 7c d6 9e af eb cf ec 15 16 de 1e b9 93 03 b1 a8 ab 91 cd 5d ae b7 28 ab 20 9a 6b e9 8b 4a 66 0e 96 ba 58 3f eb db 2a ee 20 b1 c7 f8 ff 8f dd 1a ef 94 ec 08 Data Ascii: Z/WK,jqzHwZz\|]( kJfX?* inJaX2F;SFJYcj^:dp.\#_ImYU\|U>!]oC37)iTlmk;s5}Mx}t?dWQ1;srw9(&:""
Mar 14, 2025 10:43:08.368905067 CET	1236	IN	Data Raw: bd 2e 58 4d 21 5f 8e 94 d7 3b 5c fa 60 35 26 60 06 c0 d5 d0 91 83 c0 2d fa e0 fa 90 35 8b db 91 35 0b a0 f1 2b 90 35 e6 89 35 84 ac 29 43 90 35 36 bc 68 04 5a e3 bc b2 73 23 b8 c6 2c 6c a3 6b f8 02 6a c2 a0 82 a1 36 e4 0a 8c 59 fa 4a d0 0d 2d ed Data Ascii: .XM!_;\`5&`-55+55)C56hZs#,lkj6YJ-BpwSq%3W?EQ~BNFcn<#&YNT=jug@C,eoaF,80'5bWnNd"p?pypq88w;a
Mar 14, 2025 10:43:08.368916988 CET	1236	IN	Data Raw: 5d 29 90 a2 f9 32 09 03 15 d1 19 7a 25 c2 c7 23 39 bb b1 20 78 11 1d b3 b7 03 0b 31 74 8e 0f 27 14 ad 5c cb 37 84 12 92 6f 40 57 03 42 09 31 a1 42 30 a1 65 c4 60 3d 10 52 08 60 28 d8 7b fe 7a a4 90 9d 12 01 42 0a 59 29 11 78 7a 1f 18 29 c4 42 95 Data Ascii: ])2z%#9 x1t'\7o@WB1B0e`=R`({zBY)xz)B~PjNUi'%Nny('/$C!$6^B"azP:!qb;_"b!!{/8FFI`!?`
Mar 14, 2025 10:43:08.368927956 CET	1236	IN	Data Raw: 82 de 83 d5 df f2 e0 0d 4f a3 9e 6b 2b 0d 07 83 e9 85 e6 bf f5 56 ed 2c a5 a1 34 2b ea 35 30 17 2a 48 a4 10 54 d2 fe 3a e0 82 7c d1 a8 1a ed d4 42 d6 10 54 74 7b 39 e3 fc 7a 56 35 da 31 0a 00 2b 94 9d a1 a8 c2 d1 ec 7d ba 18 58 43 3a 6a cc 44 5c Data Ascii: Ok+V,4+50HT:\|BTt{9zV51+}XC:jD\"wf(h)CCY3A{#+obEO]O]lVh/"i633M#Tk%52*\;C6l]j@Ss1Q&f8#q:PhLl@ftb4a<!iCA7re
Mar 14, 2025 10:43:08.368940115 CET	1236	IN	Data Raw: 56 5d b8 59 f6 b7 9d 38 8e 68 5e d3 36 c3 17 a1 84 4a 51 92 22 d2 36 46 2a a3 32 95 a4 42 87 47 c8 ac 87 f3 7a b7 6f ce fd 30 db 3e 34 ed ce c2 a4 29 65 48 9e 4d 67 26 4e b7 ac 2c 1f 54 d2 aa b9 ed b8 a4 8c dd 20 19 10 9c 5f 74 8a 7f 9d f4 81 62 Data Ascii: V]Y8h^6JQ"6F2BGzo0>4)eHMg&N,T _tb#.ISvsi}USI6\|3>Nc\o[inXDTJT27aEE^XFkGt9r`$(:/-)6bYg%{ZL} 9Z]Ky
Mar 14, 2025 10:43:08.369044065 CET	424	IN	Data Raw: 92 61 e1 e9 18 01 39 6a f5 f1 ee a8 cb 4d 7a e3 98 b1 dd 65 99 81 7b b1 af 64 5f 19 c8 b4 8c cd 81 f4 47 d7 a7 57 d0 ab 4a 93 6a 6d 69 fb 2a de c7 f1 fd 91 e3 a4 2d 58 aa 67 e9 0c 2b 81 d8 4c a6 fb 63 a7 f8 38 6f c6 4a df 70 05 26 90 22 02 19 4f Data Ascii: a9jMze{d_GWJjmi*-Xg+Lc8oJp&"OK$GHFB2&4a,("/ZY~RsrM'I^='^='I^=sw$D:8g'ky\5Da>
Mar 14, 2025 10:43:08.402565002 CET	415	OUT	GET /index_files/logo.png?2 HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/index_files/s_yzgt.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:43:08.629553080 CET	1236	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 09:43:08 GMT Content-Type: image/png Content-Length: 1334 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT Connection: keep-alive Keep-Alive: timeout=30 ETag: "583b5241-536" Expires: Sun, 13 Apr 2025 09:43:08 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 7c 00 00 00 19 08 06 00 00 00 f3 27 4a 57 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 04 d8 49 44 41 54 78 da ec 9a 6d 88 16 55 14 c7 47 dd d5 ca cd 74 cb 6a d3 b4 a8 44 22 2b 93 5e 4c 25 0a 94 b2 0f 95 94 84 4a 04 59 69 96 1a 6c 65 60 25 59 f6 a2 bd ae 95 4a e5 42 5a 1f 56 fc e2 63 18 19 2b c8 12 85 6d 68 af c4 f6 6a d9 66 ba ea 96 a5 e6 ee d3 ff e4 7f e4 78 9a 99 67 66 9e 99 75 c0 39 f0 63 e7 ce b9 6f cf bd f7 9c 7b ee 9d ed 56 2c 16 9d 5c 8e 1d e9 ae 9e 4f 03 4b c0 af a0 58 06 ad e0 4d 50 93 0f 6f f6 a4 1b 2d fc 54 f0 31 18 9c 60 dd 3f 81 91 60 5b 3e cc d9 b3 f0 c7 13 9e 6c 91 41 e0 89 7c 88 b3 69 e1 db 52 72 c1 3b 40 ff 7c 98 b3 37 e1 9d f2 9c 56 1b f9 30 67 47 2a 42 4c 8a 97 ae 17 a8 02 17 81 39 60 6c 17 f7 bb 37 18 c1 d8 a3 1d 7c c6 60 b3 4b 8d 05 9c c5 ad b0 2f f8 93 01 eb d7 e0 e0 51 9a cf 13 39 2e a7 80 3f c0 e7 e0 97 23 72 88 85 17 83 c5 29 41 77 b0 21 46 f9 e9 [TRUNCATED] Data Ascii: PNGIHDR\|'JWtEXtSoftwareAdobe ImageReadyqe<IDATxmUGtjD"+^L%JYile`%YJBZVc+mhjfxgfu9co{V,\OKXMPo-T1`?`[>lA\|iRr;@\|7V0gGBL9`l7\|`K/Q9.?#r)Aw!FA{`;'~/b8F6.T=?RWefE(ZsUk{u`Oq\KN\|tb'H/t3h91uFp)<@c&\|+PP^1E%rmaOgh^J3iOcmA\\>Xod7o=e\|&KwF/$'t;YM]sG(JzVIqA%/U:ziQVZoP%\P7e?1p7%/3oAAjz9F.'t<CAb;%/`\|k8s..Wv;=4E\Wq9Dnbd1-/3HLI^7f0@2>5d"(/*}/vO0
Mar 14, 2025 10:43:08.629569054 CET	443	IN	Data Raw: 35 ce 84 cb ca bc 0b dc 07 d6 f2 bc e7 5a fa da 32 27 fc 4e 5a 8d de 3e 6e 71 4f 8f e0 53 a5 bb da 94 bd 52 9f 34 41 b3 47 fd eb 15 2d 65 f4 f3 7c e3 2a 9f 05 5f b0 dd 30 d2 46 6f a6 c7 6b 06 cf cf 51 e5 2b b0 5f a5 c7 f0 84 62 f9 1b 9c 17 67 c2 Data Ascii: 5Z2'NZ>nqOSR4AG-e\|*_0FokQ+_bg;0]<#+/(7OdMKxlE2IwpZf-'Xb0>_"_,K`}+@cy6J>o?+b.CdK3+k<?2)y)
Mar 14, 2025 10:43:53.638820887 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49747	151.101.194.137	80	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:43:07.664828062 CET	319	OUT	GET /jquery.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:43:08.105803013 CET	646	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 33226 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: W/"28feccc0-1764d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 14 Mar 2025 09:43:08 GMT Age: 3262664 X-Served-By: cache-lga21987-LGA, cache-ewr-kewr1740069-EWR X-Cache: HIT, HIT X-Cache-Hits: 123, 4417 X-Timer: S1741945388.063646,VS0,VE0 Vary: Accept-Encoding
Mar 14, 2025 10:43:08.105874062 CET	1236	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 dc bd 79 7b db 46 b2 2f fc ff f9 14 22 c6 87 01 cc 16 45 3a cb 3d 03 ba 85 27 b1 93 49 26 eb 8c 9d 49 32 14 93 07 1b 49 48 dc 44 52 96 15 91 f3 d9 6f fd aa 17 34 16 da 99 73 ee fb bc f7 b9 99 b1 08 a0 f7 ee ea ea aa Data Ascii: y{F/"E:='I&I2IHDRo4sZ.vvoCOg?2_VY/+qS[H.?{zE>?I<{R6zz\gw=n.eGaPXLN%U~v6+
Mar 14, 2025 10:43:08.105896950 CET	1236	IN	Data Raw: d7 28 ee 79 5e d8 c0 0f 98 44 07 e0 cc d7 68 3e 2e 74 e5 c1 a4 9c e7 d0 a4 d3 de 5b ac 93 78 f1 f9 9b 78 51 36 4a 27 5a 82 dd 4a 74 cc 92 5e 68 fb c5 b4 d7 f2 f4 55 ba 2d 36 7b 07 56 29 23 a5 50 59 67 00 81 8f 51 a4 f1 32 5f 80 a2 68 1b 4a 6c b7 Data Ascii: (y^Dh>.t[xxQ6J'ZJt^hU-6{V)#PYgQ2_hJlZxDx[jY~*@:}&2!c0/-7X!!v92{&)K8^\Wk<yD+JAc er`.{w)XwA+Wj,&Q\|M="
Mar 14, 2025 10:43:08.105983019 CET	1236	IN	Data Raw: 50 ff 55 e6 4f 5f bf fe 7b 58 eb c5 0f 04 4d af 3e ff f1 e5 f7 f5 04 ea f2 8b 2f bf fa a6 d6 b5 d0 67 20 67 89 ce 01 32 9b c3 6a 3f c7 bf 73 bc 04 e7 7e 4a 04 44 76 58 4f cf 81 e0 34 90 e8 d9 ca df d0 3e 59 67 19 ad de b8 47 d0 1e f8 57 57 d9 d3 Data Ascii: PUO_{XM>/g g2j?s~JDvXO4>YgGWW`u(T'wJedqq>YVy^(IZjWaFcR#XtWE^Wjs~^O.O7r_'*oO%D
Mar 14, 2025 10:43:08.105997086 CET	1236	IN	Data Raw: de 8b dd cf df 7e d3 64 c6 59 ac 18 d7 cf e2 38 b0 7c b6 6e c5 5e f8 46 de 97 af bf fd a6 8a 76 c3 0e 44 78 dc 6a be 37 b5 b4 30 fe 39 c4 f0 8d b6 c2 37 34 4f 79 9f 98 d4 98 d8 d0 7f 14 f9 bd 95 3f 29 7a 00 a8 3f 77 20 3e af 77 2e f2 57 32 17 6b Data Ascii: ~dY8\|n^FvDxj70974Oy?)z?w >w.W2kH9-DAb8>'jyM*uL-!pLxPW'Bh1N,(p~jM&\|dtL\#Bt,DGV..?E%tzVh_{N)?
Mar 14, 2025 10:43:08.106113911 CET	624	IN	Data Raw: 7c cf bc 18 bd 77 aa 06 6c 66 ad 8a 77 17 66 b0 a7 03 d9 95 53 d5 34 0e a0 fb 42 94 e0 e7 6a 96 dc 9c a2 96 33 88 72 be 0b e8 6c 0c 81 57 55 e1 a3 66 a7 d1 34 74 b9 61 ac 53 54 63 27 68 4f 40 71 a4 49 ce 27 38 1b a7 fd dd 26 4f 8b 69 91 67 d1 54 Data Ascii: \|wlfwfS4Bj3rlWUf4taSTc'hO@qI'8&OigT!K0~VORO^=L=nlUgg6zb5wHW4p?=*8@ ,CO4sc<KG4buY$K6L~~b<3
Mar 14, 2025 10:43:08.106127024 CET	1236	IN	Data Raw: e7 8b bb 5a 1f 12 05 0b 80 56 20 04 35 8c f7 0b 66 da 45 fa 4a 16 11 35 34 e8 3a 15 21 c7 bf ad 90 4c bd 53 ca 23 cd 7e 3d 8c 63 be 49 b2 f2 69 b6 b2 70 95 04 fc 5f ad 02 0c 65 55 9a 01 50 6d c0 a4 e2 32 bc a5 5f fa ba ae 05 ad a5 a5 30 c4 79 39 Data Ascii: ZV 5fEJ54:!LS#~=cIip_eUPm2_0y9ZQm(-bG'-+\&\2H}ct+L"?{C!W=_+AE n%7MAQ,PlGSUos/V7E+v/`iOl
Mar 14, 2025 10:43:08.106137991 CET	224	IN	Data Raw: e2 fd 7a 9b e1 b9 58 c6 33 7c 3c 06 25 f5 95 4c e4 22 f1 1d fb e8 c7 dd 5d b2 2c 20 2a 12 db 9c 28 a5 66 fe a5 ca 6f f4 ca 36 50 eb 3c 6e 12 c7 5b 89 51 cc d8 95 3d ae 90 5d cc 54 6f 12 50 4f 00 b7 9b 1c 62 52 79 c2 0c b0 b4 ed 92 bf 1b 0e 1d 76 Data Ascii: zX3\|<%L"], *(fo6P<n[Q=]ToPObRyv)7V9"VeR,Ymz!<06gRwjT1U9U\CzzZ`f&2Ps?h[<0;%}A$q
Mar 14, 2025 10:43:08.106199026 CET	1236	IN	Data Raw: 6a 9b 66 3b c7 73 9d 1e ce a3 52 96 15 84 bf d3 62 15 81 9d fd 63 09 16 b7 49 d3 50 cd 31 06 f0 3c 6b aa 96 f5 d8 98 53 89 dc 4b 95 92 d2 1a 31 a9 9a 59 24 74 7c 6e e1 0c 88 30 9d 23 fe 04 1f 42 84 f9 db f2 f6 29 51 27 4f 54 e1 aa a7 a5 34 9c cd Data Ascii: jf;sRbcIP1<kSK1Y$t\|n0#B)Q'OT4x58W%%jLrf:Su*j>)p1m:rmrq"r-[/0ZS%e,1':cBXOZ0%(#Q{Lq^SER-'a
Mar 14, 2025 10:43:08.106213093 CET	1236	IN	Data Raw: 4c 14 d9 37 cb f2 9d 63 32 26 8c d7 e6 4c 6b 37 65 d4 86 9b d7 e6 94 2d c4 10 83 9c 96 fa bd 09 1b d0 c6 75 53 51 40 8b c8 cd 9d 8b 86 2f 7f 45 8c 1c 01 d3 3a 20 fa 8e 55 89 e0 8e e9 dd c6 94 54 cb 51 b8 0a 36 84 be b4 61 9e 17 18 f5 1a ad bc ca Data Ascii: L7c2&Lk7e-uSQ@/E: UTQ6avw#;WZ+'BPm7PlQn Z'?)cR!?xTb5%):Ttp_d'N\7R:XUIR{X$vQ7NqvqDr"r.eZ8R
Mar 14, 2025 10:43:08.110635996 CET	1236	IN	Data Raw: 29 ad 17 ad 48 5a b7 74 3e 41 8b b0 0f 5c 1a 96 bd 40 ae 5c 96 d5 4e b6 69 79 73 62 cf 61 48 67 58 f9 80 9a 6e d5 c2 88 5a fc f0 96 d4 98 c6 09 02 a7 1c e3 00 43 a5 19 3c 0f 71 71 a8 57 3c d4 b9 e9 78 54 0f ae 09 bf 5e 7b e2 84 fc 80 dd f9 c3 80 Data Ascii: )HZt>A\@\NiysbaHgXnZC<qqW<xT^{",kwV@hX_^RuDRobwK_nfkO+]_}l41MDk-lIlTB]Pa0uEb]7;hm'

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49750	185.50.25.7	80	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:43:08.264014006 CET	390	OUT	GET /index_files/counter HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:43:09.038650990 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 09:43:08 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:10 GMT ETag: "2b-5424f2be79480" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Mar 14, 2025 10:43:11.480211020 CET	397	OUT	GET /index_files/fav_logo.ico?5 HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:43:11.708520889 CET	748	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 09:43:11 GMT Content-Type: image/x-icon Content-Length: 401 Last-Modified: Sun, 27 Nov 2016 21:38:10 GMT Connection: keep-alive Keep-Alive: timeout=30 ETag: "583b5242-191" Expires: Sun, 13 Apr 2025 09:43:11 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 48 49 44 41 54 38 11 63 8c 6a 58 ea c5 f0 ef ff cc ff ff ff cb 30 90 00 18 19 19 9f 30 30 31 a6 33 91 a3 19 64 0f d8 42 a0 c5 4c a4 da 8c ec 48 90 5e 26 64 01 72 d8 d4 35 60 5a 69 30 c3 9c aa 30 06 6e 4e 36 06 45 29 21 86 65 4d 31 60 3e c8 65 fc 3c 1c 0c 73 ab c3 19 26 14 06 a0 38 14 c5 05 97 ee 3e 67 e0 e2 60 63 70 34 56 61 b8 ff ec 1d c3 bf 7f ff 19 58 98 21 4a 22 5d 0d 19 38 d9 59 19 b6 1e bd 86 db 80 cd 87 af 02 35 fd 63 f0 b3 d1 66 e0 e3 e6 00 2b 64 62 62 62 b0 37 54 62 b0 33 54 66 b8 f9 f0 15 c3 9e d3 b7 70 1b f0 f4 f5 47 86 ed c7 6f 30 f0 70 b1 33 d4 25 bb 32 30 31 31 82 5d 90 1e 68 05 d6 f4 f8 d5 07 60 f4 a1 e8 67 40 f1 02 48 6a e5 9e 0b 0c 37 80 36 49 89 f0 c3 55 4e 5d 73 94 e1 d3 d7 1f 0c 2e a6 6a 0c 9e 96 1a 70 71 10 03 c3 80 3f 7f ff 31 b4 2f dc cb 00 f2 ce 87 cf df 19 3e 7f fb c9 70 f4 d2 7d 86 96 f9 bb 19 de 7f fe c6 10 e5 66 c4 c0 [TRUNCATED] Data Ascii: PNGIHDRagAMAaHIDAT8cjX00013dBLH^&dr5`Zi00nN6E)!eM1`>e<s&8>g`cp4VaX!J"]8Y5cf+dbbb7Tb3TfpGo0p3%2011]h`g@Hj76IUN]s.jpq?1/>p}fd`](q4PE\0$H/(Kc,;o3IENDB`
Mar 14, 2025 10:43:56.716661930 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49752	185.50.25.7	80	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:43:08.789822102 CET	285	OUT	GET /index_files/p HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:43:09.562798023 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 09:43:09 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT ETag: "2b-5424f2bd85240" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Mar 14, 2025 10:43:54.576095104 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49753	185.50.25.7	80	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:43:08.789879084 CET	287	OUT	GET /index_files/hit HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:43:09.561167955 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 09:43:09 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT ETag: "2b-5424f2bd85240" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Mar 14, 2025 10:43:54.575717926 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49754	185.50.25.7	80	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:43:08.789946079 CET	294	OUT	GET /index_files/logo.png?2 HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:43:09.502335072 CET	1236	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 09:43:09 GMT Content-Type: image/png Content-Length: 1334 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT Connection: keep-alive Keep-Alive: timeout=30 ETag: "583b5241-536" Expires: Sun, 13 Apr 2025 09:43:09 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 7c 00 00 00 19 08 06 00 00 00 f3 27 4a 57 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 04 d8 49 44 41 54 78 da ec 9a 6d 88 16 55 14 c7 47 dd d5 ca cd 74 cb 6a d3 b4 a8 44 22 2b 93 5e 4c 25 0a 94 b2 0f 95 94 84 4a 04 59 69 96 1a 6c 65 60 25 59 f6 a2 bd ae 95 4a e5 42 5a 1f 56 fc e2 63 18 19 2b c8 12 85 6d 68 af c4 f6 6a d9 66 ba ea 96 a5 e6 ee d3 ff e4 7f e4 78 9a 99 67 66 9e 99 75 c0 39 f0 63 e7 ce b9 6f cf bd f7 9c 7b ee 9d ed 56 2c 16 9d 5c 8e 1d e9 ae 9e 4f 03 4b c0 af a0 58 06 ad e0 4d 50 93 0f 6f f6 a4 1b 2d fc 54 f0 31 18 9c 60 dd 3f 81 91 60 5b 3e cc d9 b3 f0 c7 13 9e 6c 91 41 e0 89 7c 88 b3 69 e1 db 52 72 c1 3b 40 ff 7c 98 b3 37 e1 9d f2 9c 56 1b f9 30 67 47 2a 42 4c 8a 97 ae 17 a8 02 17 81 39 60 6c 17 f7 bb 37 18 c1 d8 a3 1d 7c c6 60 b3 4b 8d 05 9c c5 ad b0 2f f8 93 01 eb d7 e0 e0 51 9a cf 13 39 2e a7 80 3f c0 e7 e0 97 23 72 88 85 17 83 c5 29 41 77 b0 21 46 f9 e9 [TRUNCATED] Data Ascii: PNGIHDR\|'JWtEXtSoftwareAdobe ImageReadyqe<IDATxmUGtjD"+^L%JYile`%YJBZVc+mhjfxgfu9co{V,\OKXMPo-T1`?`[>lA\|iRr;@\|7V0gGBL9`l7\|`K/Q9.?#r)Aw!FA{`;'~/b8F6.T=?RWefE(ZsUk{u`Oq\KN\|tb'H/t3h91uFp)<@c&\|+PP^1E%rmaOgh^J3iOcmA\\>Xod7o=e\|&KwF/$'t;YM]sG(JzVIqA%/U:ziQVZoP%\P7e?1p7%/3oAAjz9F.'t<CAb;%/`\|k8s..Wv;=4E\Wq9Dnbd1-/3HLI^7f0@2>5d"(/*}/vO0
Mar 14, 2025 10:43:09.502357006 CET	443	IN	Data Raw: 35 ce 84 cb ca bc 0b dc 07 d6 f2 bc e7 5a fa da 32 27 fc 4e 5a 8d de 3e 6e 71 4f 8f e0 53 a5 bb da 94 bd 52 9f 34 41 b3 47 fd eb 15 2d 65 f4 f3 7c e3 2a 9f 05 5f b0 dd 30 d2 46 6f a6 c7 6b 06 cf cf 51 e5 2b b0 5f a5 c7 f0 84 62 f9 1b 9c 17 67 c2 Data Ascii: 5Z2'NZ>nqOSR4AG-e\|*_0FokQ+_bg;0]<#+/(7OdMKxlE2IwpZf-'Xb0>_"_,K`}+@cy6J>o?+b.CdK3+k<?2)y)
Mar 14, 2025 10:43:54.513425112 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49756	185.50.25.7	80	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:43:09.054852009 CET	291	OUT	GET /index_files/counter HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:43:09.836386919 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 09:43:09 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:10 GMT ETag: "2b-5424f2be79480" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Mar 14, 2025 10:43:11.719808102 CET	298	OUT	GET /index_files/fav_logo.ico?5 HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 10:43:11.950493097 CET	748	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 09:43:11 GMT Content-Type: image/x-icon Content-Length: 401 Last-Modified: Sun, 27 Nov 2016 21:38:10 GMT Connection: keep-alive Keep-Alive: timeout=30 ETag: "583b5242-191" Expires: Sun, 13 Apr 2025 09:43:11 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 48 49 44 41 54 38 11 63 8c 6a 58 ea c5 f0 ef ff cc ff ff ff cb 30 90 00 18 19 19 9f 30 30 31 a6 33 91 a3 19 64 0f d8 42 a0 c5 4c a4 da 8c ec 48 90 5e 26 64 01 72 d8 d4 35 60 5a 69 30 c3 9c aa 30 06 6e 4e 36 06 45 29 21 86 65 4d 31 60 3e c8 65 fc 3c 1c 0c 73 ab c3 19 26 14 06 a0 38 14 c5 05 97 ee 3e 67 e0 e2 60 63 70 34 56 61 b8 ff ec 1d c3 bf 7f ff 19 58 98 21 4a 22 5d 0d 19 38 d9 59 19 b6 1e bd 86 db 80 cd 87 af 02 35 fd 63 f0 b3 d1 66 e0 e3 e6 00 2b 64 62 62 62 b0 37 54 62 b0 33 54 66 b8 f9 f0 15 c3 9e d3 b7 70 1b f0 f4 f5 47 86 ed c7 6f 30 f0 70 b1 33 d4 25 bb 32 30 31 31 82 5d 90 1e 68 05 d6 f4 f8 d5 07 60 f4 a1 e8 67 40 f1 02 48 6a e5 9e 0b 0c 37 80 36 49 89 f0 c3 55 4e 5d 73 94 e1 d3 d7 1f 0c 2e a6 6a 0c 9e 96 1a 70 71 10 03 c3 80 3f 7f ff 31 b4 2f dc cb 00 f2 ce 87 cf df 19 3e 7f fb c9 70 f4 d2 7d 86 96 f9 bb 19 de 7f fe c6 10 e5 66 c4 c0 [TRUNCATED] Data Ascii: PNGIHDRagAMAaHIDAT8cjX00013dBLH^&dr5`Zi00nN6E)!eM1`>e<s&8>g`cp4VaX!J"]8Y5cf+dbbb7Tb3TfpGo0p3%2011]h`g@Hj76IUN]s.jpq?1/>p}fd`](q4PE\0$H/(Kc,;o3IENDB`
Mar 14, 2025 10:43:56.952172041 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49728	216.58.206.65	80	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:43:46.031586885 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49729	216.58.206.65	80	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 10:43:46.031805992 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49727	172.217.18.1	443	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:01 UTC	678	OUT	GET / HTTP/1.1 Host: kjhgt55555555555.blogspot.cz Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:02 UTC	541	IN	HTTP/1.1 302 Moved Temporarily Location: https://kjhgt55555555555.blogspot.com/ Content-Type: text/html; charset=UTF-8 Date: Fri, 14 Mar 2025 09:43:01 GMT Expires: Fri, 14 Mar 2025 09:43:01 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-14 09:43:02 UTC	253	IN	Data Raw: 66 37 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 6b 6a 68 67 74 35 35 35 35 35 35 35 35 35 35 35 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: f7<HTML><HEAD><TITLE>Moved Temporarily</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>Moved Temporarily</H1>The document has moved <A HREF="https://kjhgt55555555555.blogspot.com/">here</A>.</BODY></HTML>
2025-03-14 09:43:02 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49731	172.217.18.1	443	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:02 UTC	679	OUT	GET / HTTP/1.1 Host: kjhgt55555555555.blogspot.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:03 UTC	444	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Expires: Fri, 14 Mar 2025 09:43:02 GMT Date: Fri, 14 Mar 2025 09:43:02 GMT Cache-Control: private, max-age=0 Last-Modified: Sat, 07 Sep 2024 02:28:11 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-14 09:43:03 UTC	946	IN	Data Raw: 33 33 63 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 27 76 32 27 20 64 69 72 3d 27 6c 74 72 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 20 78 6d 6c 6e 73 3a 62 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 62 27 20 78 6d 6c 6e 73 3a 64 61 74 61 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 64 61 74 61 27 20 78 6d 6c 6e 73 3a 65 78 70 72 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 65 78 70 72 27 3e 0a 3c 68 65 61 64 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f Data Ascii: 33ce<!DOCTYPE html><html class='v2' dir='ltr' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'><head><link href='https://
2025-03-14 09:43:03 UTC	1390	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 6b 6a 68 67 74 35 35 35 35 35 35 35 35 35 35 35 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 2f 66 65 65 64 73 2f 70 6f 73 74 73 2f 64 65 66 61 75 6c 74 3f 61 6c 74 3d 72 73 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 65 72 76 69 63 65 2e 70 6f 73 74 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 31 20 2d 20 41 74 6f 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 66 65 65 64 73 2f 37 35 32 38 39 31 30 33 32 34 35 35 37 34 33 32 39 35 35 2f 70 6f 73 74 73 2f 64 65 66 61 75 6c 74 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 Data Ascii: "https://kjhgt55555555555.blogspot.com/feeds/posts/default?alt=rss" /><link rel="service.post" type="application/atom+xml" title="1 - Atom" href="https://www.blogger.com/feeds/7528910324557432955/posts/default" /><link rel="me" href="https://www.blogger
2025-03-14 09:43:03 UTC	1390	IN	Data Raw: 65 6e 74 5f 74 69 6c 65 5f 6c 69 67 68 74 2e 70 6e 67 29 20 72 65 70 65 61 74 20 73 63 72 6f 6c 6c 20 74 6f 70 20 6c 65 66 74 3b 0a 5f 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 62 6f 64 79 2d 66 61 75 78 63 6f 6c 75 6d 6e 2d 6f 75 74 65 72 20 2e 63 61 70 2d 74 6f 70 20 7b 0a 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 68 65 69 67 68 74 3a 20 34 30 30 70 78 3b 0a 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 2e 62 6f 64 79 2d 66 61 75 78 63 6f 6c 75 6d 6e 2d 6f 75 74 65 72 20 2e 63 61 70 2d 74 6f 70 20 2e 63 61 70 2d 6c 65 66 74 20 7b 0a 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 68 74 74 Data Ascii: ent_tile_light.png) repeat scroll top left;_background-image: none;}.body-fauxcolumn-outer .cap-top {position: absolute;z-index: 1;height: 400px;width: 100%;}.body-fauxcolumn-outer .cap-top .cap-left {width: 100%;background: transparent url(htt
2025-03-14 09:43:03 UTC	1390	IN	Data Raw: 65 65 65 65 3b 0a 7d 0a 2e 74 61 62 73 2d 69 6e 6e 65 72 20 2e 73 65 63 74 69 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 75 6c 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 30 3b 0a 62 6f 72 64 65 72 2d 74 6f 70 3a 20 30 20 73 6f 6c 69 64 20 23 65 65 65 65 65 65 3b 0a 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 30 20 73 6f 6c 69 64 20 23 65 65 65 65 65 65 3b 0a 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 30 20 73 6f 6c 69 64 20 23 65 65 65 65 65 65 3b 0a 7d 0a 2e 74 61 62 73 2d 69 6e 6e 65 72 20 2e 77 69 64 67 65 74 20 75 6c 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 35 66 35 66 35 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 72 65 73 6f 75 72 63 65 73 2e 62 6c 6f 67 62 6c 6f 67 2e 63 6f 6d 2f 62 6c 6f 67 62 6c 6f 67 2f 64 61 74 61 2f 31 6b 74 2f 73 69 6d Data Ascii: eeee;}.tabs-inner .section:first-child ul {margin-top: -0;border-top: 0 solid #eeeeee;border-left: 0 solid #eeeeee;border-right: 0 solid #eeeeee;}.tabs-inner .widget ul {background: #f5f5f5 url(https://resources.blogblog.com/blogblog/data/1kt/sim
2025-03-14 09:43:03 UTC	1390	IN	Data Raw: 70 70 79 20 7b 0a 63 6f 6c 6f 72 3a 20 23 39 39 39 39 39 39 3b 0a 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 32 70 78 20 32 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 29 3b 0a 7d 0a 2e 77 69 64 67 65 74 20 2e 70 6f 70 75 6c 61 72 2d 70 6f 73 74 73 20 75 6c 20 7b 0a 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2f 2a 20 50 6f 73 74 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 68 32 2e 64 61 74 65 2d 68 65 61 64 65 72 20 7b 0a 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 62 6f 6c 64 20 31 31 70 78 20 41 72 69 61 6c 2c 20 54 61 68 6f 6d 61 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 46 72 65 65 53 61 6e 73 2c 20 73 61 6e Data Ascii: ppy {color: #999999;text-shadow: 2px 2px 1px rgba(0, 0, 0, .1);}.widget .popular-posts ul {list-style: none;}/* Posts----------------------------------------------- */h2.date-header {font: normal bold 11px Arial, Tahoma, Helvetica, FreeSans, san
2025-03-14 09:43:03 UTC	1390	IN	Data Raw: 2c 20 30 2c 20 30 2c 20 2e 31 29 3b 0a 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 29 3b 0a 7d 0a 2e 70 6f 73 74 2d 68 65 61 64 65 72 20 7b 0a 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 2e 35 65 6d 3b 0a 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 3b 0a 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 30 25 3b 0a 7d 0a 2e 70 6f 73 74 2d 66 6f 6f 74 65 72 20 7b 0a 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 2d 32 70 78 20 30 3b 0a 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 30 70 78 3b 0a 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 39 66 39 66 39 3b 0a 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 65 65 65 3b 0a 6c Data Ascii: , 0, 0, .1);box-shadow: 0 0 0 rgba(0, 0, 0, .1);}.post-header {margin: 0 0 1.5em;line-height: 1.6;font-size: 90%;}.post-footer {margin: 20px -2px 0;padding: 5px 10px;color: #666666;background-color: #f9f9f9;border-bottom: 1px solid #eeeeee;l
2025-03-14 09:43:03 UTC	1390	IN	Data Raw: 64 20 23 39 39 39 39 39 39 3b 0a 7d 0a 2e 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 74 68 72 65 61 64 2e 69 6e 6c 69 6e 65 2d 74 68 72 65 61 64 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 39 66 39 66 39 3b 0a 7d 0a 2e 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6e 74 69 6e 75 65 20 7b 0a 62 6f 72 64 65 72 2d 74 6f 70 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 39 39 39 39 39 39 3b 0a 7d 0a 2f 2a 20 41 63 63 65 6e 74 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2e 73 65 63 74 69 6f 6e 2d 63 6f 6c 75 6d 6e 73 20 74 64 2e 63 6f 6c 75 6d 6e 73 2d 63 65 6c 6c 20 7b 0a 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c Data Ascii: d #999999;}.comments .comment-thread.inline-thread {background-color: #f9f9f9;}.comments .continue {border-top: 2px solid #999999;}/* Accents---------------------------------------------- */.section-columns td.columns-cell {border-left: 1px sol
2025-03-14 09:43:03 UTC	1390	IN	Data Raw: 69 6e 6b 2d 62 75 74 74 6f 6e 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 63 63 36 36 31 31 3b 0a 7d 0a 2e 6d 6f 62 69 6c 65 2d 6c 69 6e 6b 2d 62 75 74 74 6f 6e 20 61 3a 6c 69 6e 6b 2c 20 2e 6d 6f 62 69 6c 65 2d 6c 69 6e 6b 2d 62 75 74 74 6f 6e 20 61 3a 76 69 73 69 74 65 64 20 7b 0a 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 2e 6d 6f 62 69 6c 65 20 2e 74 61 62 73 2d 69 6e 6e 65 72 20 2e 73 65 63 74 69 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 62 6f 72 64 65 72 2d 74 6f 70 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 6d 6f 62 69 6c 65 20 2e 74 61 62 73 2d 69 6e 6e 65 72 20 2e 50 61 67 65 4c 69 73 74 20 2e 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 65 65 Data Ascii: ink-button {background-color: #cc6611;}.mobile-link-button a:link, .mobile-link-button a:visited {color: #ffffff;}.mobile .tabs-inner .section:first-child {border-top: none;}.mobile .tabs-inner .PageList .widget-content {background-color: #eeeee
2025-03-14 09:43:03 UTC	1390	IN	Data Raw: 6c 65 66 74 3a 20 33 32 70 78 3b 0a 7d 0a 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 64 79 6e 2d 63 73 73 2f 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 2e 63 73 73 3f 74 61 72 67 65 74 42 6c 6f 67 49 44 3d 37 35 32 38 39 31 30 33 32 34 35 35 37 34 33 32 39 35 35 26 61 6d 70 3b 7a 78 3d 38 33 66 31 31 65 65 36 2d 37 31 37 63 2d 34 31 30 66 2d 39 37 33 35 2d 64 30 32 66 31 62 31 32 65 30 62 35 27 20 6d 65 64 69 61 3d 27 6e 6f 6e 65 27 20 6f 6e 6c 6f 61 64 3d 27 69 66 28 6d 65 64 69 61 21 3d 26 23 33 39 3b 61 6c 6c 26 23 33 39 3b 29 6d 65 64 69 61 3d 26 23 33 39 3b 61 6c 6c 26 23 33 39 3b 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 2f 3e 3c 6e 6f 73 63 Data Ascii: left: 32px;}--></style><link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=7528910324557432955&zx=83f11ee6-717c-410f-9735-d02f1b12e0b5' media='none' onload='if(media!='all')media='all'' rel='stylesheet'/><nosc
2025-03-14 09:43:03 UTC	1204	IN	Data Raw: 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 67 61 70 69 2e 69 66 72 61 6d 65 73 2e 67 65 74 43 6f 6e 74 65 78 74 28 29 2e 6f 70 65 6e 43 68 69 6c 64 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 3a 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 6e 61 76 62 61 72 2f 37 35 32 38 39 31 30 33 32 34 35 35 37 34 33 32 39 35 35 3f 6f 72 69 67 69 6e 5c 78 33 64 68 74 74 70 73 3a 2f 2f 6b 6a 68 67 74 35 35 35 35 35 35 35 35 35 35 35 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 68 65 72 65 3a 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6e 61 76 62 61 72 2d 69 66 72 61 6d 65 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2c 0a 20 20 20 20 20 20 20 20 20 Data Ascii: ) { gapi.iframes.getContext().openChild({ url: 'https://www.blogger.com/navbar/7528910324557432955?origin\x3dhttps://kjhgt55555555555.blogspot.com', where: document.getElementById("navbar-iframe-container"),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49732	142.250.185.137	443	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:03 UTC	629	OUT	GET /static/v1/widgets/3566091532-css_bundle_v2.css HTTP/1.1 Host: www.blogger.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://kjhgt55555555555.blogspot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:04 UTC	686	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech" Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} Content-Length: 35960 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Fri, 14 Mar 2025 08:06:04 GMT Expires: Sat, 14 Mar 2026 08:06:04 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 13 Mar 2025 20:50:32 GMT Content-Type: text/css Vary: Accept-Encoding Age: 5820 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 09:43:04 UTC	704	IN	Data Raw: 68 74 6d 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 5f 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 63 6f 6e 74 65 6e 74 2d 6f 75 74 65 72 2c 2e 72 65 67 69 6f 6e 2d 69 6e 6e 65 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 63 6f 6c 75 6d 6e 73 7b 7a 6f 6f 6d 3a 31 7d 2e 6c 6f 61 64 69 6e 67 20 2e 63 6f 6c 75 6d 6e 73 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 63 6f 6c 75 6d 6e 73 2d 69 6e 6e 65 72 7b 5f 68 65 69 67 68 74 3a 31 25 3b 6d 69 6e 2d 68 65 Data Ascii: html{height:100%}body{min-height:100%;_height:100%;position:relative}.content{position:relative;word-wrap:break-word}.content-outer,.region-inner{min-height:0;margin:0 auto}.columns{zoom:1}.loading .columns{overflow:hidden}.columns-inner{_height:1%;min-he
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 72 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 66 61 75 78 63 6f 6c 75 6d 6e 2d 6c 65 66 74 2d 6f 75 74 65 72 7b 6c 65 66 74 3a 30 7d 2e 66 61 75 78 63 6f 6c 75 6d 6e 2d 72 69 67 68 74 2d 6f 75 74 65 72 7b 72 69 67 68 74 3a 30 7d 2e 63 61 70 2d 74 6f 70 2c 2e 63 61 70 2d 62 6f 74 74 6f 6d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 7d 2e 63 61 70 2d 74 6f 70 20 2e 63 61 70 2d 6c 65 66 74 2c 2e 63 61 70 2d 74 6f 70 20 2e 63 61 70 2d 72 69 67 68 74 2c 2e 63 61 70 2d 62 6f 74 74 6f 6d 20 2e 63 61 70 2d 6c 65 66 74 2c 2e 63 61 70 2d 62 6f 74 74 6f 6d 20 2e 63 61 70 2d 72 69 67 68 74 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 6f 75 Data Ascii: r{height:100%}.fauxcolumn-left-outer{left:0}.fauxcolumn-right-outer{right:0}.cap-top,.cap-bottom{position:relative;height:0;background-repeat:repeat-x}.cap-top .cap-left,.cap-top .cap-right,.cap-bottom .cap-left,.cap-bottom .cap-right{height:100%;backgrou
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 63 6f 6e 74 65 6e 74 2d 66 61 75 78 63 6f 6c 75 6d 6e 73 20 2e 66 61 75 78 63 6f 6c 75 6d 6e 2d 6c 65 66 74 7b 77 69 64 74 68 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 31 70 78 7d 2e 63 6f 6e 74 65 6e 74 2d 6f 75 74 65 72 2c 2e 68 65 61 64 65 72 2d 6f 75 74 65 72 2c 2e 74 61 62 73 2d 6f 75 74 65 72 2c 2e 6d 61 69 6e 2d 6f 75 74 65 72 2c 2e 6d 61 69 6e 2d 69 6e 6e 65 72 2c 2e 66 6f 6f 74 65 72 2d 6f 75 74 65 72 2c 2e 70 6f 73 74 2c 2e 63 6f 6d 6d 65 6e 74 73 2c 2e 77 69 64 67 65 74 2c 2e 64 61 74 65 2d 68 65 61 64 65 72 2c 2e 69 6e 6c 69 6e 65 2d Data Ascii: relative;overflow:visible;height:100%;margin:0 auto}.content-fauxcolumns .fauxcolumn-left{width:100%}body{margin:0;padding:0 0 1px}.content-outer,.header-outer,.tabs-outer,.main-outer,.main-inner,.footer-outer,.post,.comments,.widget,.date-header,.inline-
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 30 20 32 70 78 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 68 31 2c 68 32 2c 68 33 2c 68 34 7b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 68 31 20 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 68 33 20 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 74 61 62 73 20 2e 77 69 64 67 65 74 20 68 32 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 74 61 62 73 20 2e 77 69 64 67 65 74 20 75 6c 2c 2e 74 61 62 73 20 2e 77 69 64 67 65 74 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6c 69 73 74 2d 73 74 79 6c 65 3a Data Ascii: 0 2px}a img{border:none;position:relative}h1,h2,h3,h4{margin:0;position:relative}h1 a:hover{text-decoration:none}h3 a:hover{text-decoration:none}.tabs .widget h2{display:none}.tabs .widget ul,.tabs .widget ul{margin:0;padding:0;overflow:hidden;list-style:
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 70 6f 73 74 20 2e 74 72 2d 63 61 70 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 69 6e 6c 69 6e 65 2d 61 64 7b 6d 61 72 67 69 6e 3a 32 65 6d 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 23 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 61 75 74 68 6f 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 35 70 78 7d 2e 63 6f 6d 6d 65 6e 74 2d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 2e 35 65 6d 20 32 35 70 78 7d 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 6f 74 65 72 7b 6d 61 72 67 69 6e 3a 2e 35 65 6d 20 32 35 70 78 20 31 2e 35 65 6d 7d 2e 63 6f 6d 6d 65 6e 74 2d 62 6f 64 79 20 70 7b 6d 61 72 67 69 6e 3a 30 7d 23 63 6f Data Ascii: gin-left:0}.post .tr-caption-container{position:relative}.inline-ad{margin:2em 0;text-align:center;line-height:0}#comments .comment-author{padding-left:25px}.comment-body{margin:.5em 25px}.comment-footer{margin:.5em 25px 1.5em}.comment-body p{margin:0}#co
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 6c 6f 67 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 6c 6f 67 2d 69 63 6f 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 30 3b 77 69 64 74 68 3a 31 36 70 78 7d 2e 62 6c 6f 67 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 65 6d 7d 2e 62 6c 6f 67 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 69 74 65 6d 2d 74 68 75 6d 62 6e 61 69 6c 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 32 70 78 20 35 70 78 20 35 70 78 20 30 7d 2e 62 6c 6f 67 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 Data Ascii: log-list-container .blog-icon{float:left;margin-top:2px;vertical-align:top;text-indent:0;width:16px}.blog-list-container .item-content{font-size:95%;line-height:1.3em}.blog-list-container .item-thumbnail{float:left;margin:2px 5px 5px 0}.blog-list-containe
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 3a 30 3b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 63 72 6f 73 73 7b 68 65 69 67 68 74 3a 31 31 70 78 3b 6d 61 72 67 69 6e 3a 30 20 35 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 38 2e 35 25 3b 77 69 64 74 68 3a 31 31 70 78 7d 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 65 6d 61 69 6c 2c 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 6e 61 6d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 30 63 30 63 30 3b Data Ascii: :0;opacity:1;position:static;text-align:center}.contact-form-cross{height:11px;margin:0 5px;vertical-align:-8.5%;width:11px}.contact-form-email,.contact-form-name{background:#fff;background-color:#fff;border:1px solid #d9d9d9;border-top:1px solid #c0c0c0;
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 2c 6c 65 66 74 20 74 6f 70 2c 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 66 72 6f 6d 28 23 66 35 66 35 66 35 29 2c 74 6f 28 23 66 31 66 31 66 31 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 35 66 35 66 35 2c 23 66 31 66 31 66 31 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 35 66 35 66 35 2c 23 66 31 66 31 66 31 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 35 66 35 66 35 2c 23 66 31 66 31 66 31 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 72 2d Data Ascii: ,left top,left bottom,from(#f5f5f5),to(#f1f1f1));background-image:-webkit-linear-gradient(top,#f5f5f5,#f1f1f1);background-image:-moz-linear-gradient(top,#f5f5f5,#f1f1f1);background-image:-ms-linear-gradient(top,#f5f5f5,#f1f1f1);background-image:-o-linear-
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 63 36 63 36 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 53 74 72 3d 27 23 66 38 66 38 66 38 27 2c 45 6e 64 43 6f 6c 6f 72 53 74 72 3d 27 23 66 31 66 31 66 31 27 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 7d 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2e 66 6f 63 75 73 2c 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2e 72 69 67 68 74 2e 66 6f 63 75 73 2c 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2e 6d 69 64 2e 66 6f 63 75 Data Ascii: c6c6;box-shadow:0 1px 1px rgba(0,0,0,.1);color:#222;filter:progid:DXImageTransform.Microsoft.gradient(startColorStr='#f8f8f8',EndColorStr='#f1f1f1');transition:all 0}.contact-form-button.focus,.contact-form-button.right.focus,.contact-form-button.mid.focu
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 53 74 72 3d 27 23 37 37 37 37 37 37 27 2c 45 6e 64 43 6f 6c 6f 72 53 74 72 3d 27 23 35 35 35 35 35 35 27 29 7d 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2d 73 75 62 6d 69 74 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 6c 65 66 74 20 74 6f 70 2c 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 66 72 6f 6d 28 23 36 36 36 29 2c 74 6f 28 23 34 34 34 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 36 36 36 2c 23 34 34 34 Data Ascii: osoft.gradient(startColorStr='#777777',EndColorStr='#555555')}.contact-form-button-submit:hover{background-color:#555;background-image:-webkit-gradient(linear,left top,left bottom,from(#666),to(#444));background-image:-webkit-linear-gradient(top,#666,#444

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49734	142.250.184.206	443	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:03 UTC	668	OUT	GET /js/platform.js HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJShywEInP7MAQiFoM0BCMjhzgE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://kjhgt55555555555.blogspot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:04 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 64281 Date: Fri, 14 Mar 2025 09:43:04 GMT Expires: Fri, 14 Mar 2025 09:43:04 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "8ea42e1a4e303c70" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 09:43:04 UTC	553	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 70 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e Data Ascii: (function(){var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 72 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ion(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};u("Symbol",function(a){if(a)return a;var b=function(
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 62 61 6c 54 68 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 72 7d 29 3b 0a 75 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 41 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 67 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 28 67 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 61 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 74 68 69 73 2e 41 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 41 3d 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 65 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 43 61 28 29 7d 29 7d Data Ascii: balThis",function(a){return a\|\|r});u("Promise",function(a){function b(){this.A=null}function c(g){return g instanceof e?g:new e(function(k){k(g)})}if(a)return a;b.prototype.da=function(g){if(this.A==null){this.A=[];var k=this;this.ea(function(){k.Ca()})}
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 73 65 74 74 6c 65 64 20 69 6e 20 73 74 61 74 65 22 2b 74 68 69 73 2e 46 29 3b 74 68 69 73 2e 46 3d 67 3b 74 68 69 73 2e 4b 3d 6b 3b 74 68 69 73 2e 46 3d 3d 3d 32 26 26 74 68 69 73 2e 49 61 28 29 3b 74 68 69 73 2e 44 61 28 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 49 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 46 61 28 29 29 7b 76 61 72 20 6b 3d 72 2e 63 6f 6e 73 6f 6c 65 3b 74 79 70 65 6f 66 20 6b 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 0a 6b 2e 65 72 72 6f 72 28 67 2e 4b 29 7d 7d 2c 31 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 46 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6b 61 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 67 3d 72 2e 43 75 73 Data Ascii: settled in state"+this.F);this.F=g;this.K=k;this.F===2&&this.Ia();this.Da()};e.prototype.Ia=function(){var g=this;d(function(){if(g.Fa()){var k=r.console;typeof k!=="undefined"&&k.error(g.K)}},1)};e.prototype.Fa=function(){if(this.ka)return!1;var g=r.Cus
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 68 28 67 29 7d 29 7d 3b 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 68 29 7b 66 6f 72 28 76 61 72 20 6c 3d 78 28 67 29 2c 6d 3d 6c 2e 6e 65 78 74 28 29 3b 21 6d 2e 64 6f 6e 65 3b 6d 3d 6c 2e 6e 65 78 74 28 29 29 63 28 6d 2e 76 61 6c 75 65 29 2e 4c 28 6b 2c 68 29 7d 29 7d 3b 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 6b 3d 78 28 67 29 2c 68 3d 6b 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 68 2e 64 6f 6e 65 3f 63 28 5b 5d 29 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 77 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 71 5b 77 5d 3d 74 3b 76 2d 2d 3b 76 3d 3d 30 26 26 6c 28 71 29 7d Data Ascii: h(g)})};e.race=function(g){return new e(function(k,h){for(var l=x(g),m=l.next();!m.done;m=l.next())c(m.value).L(k,h)})};e.all=function(g){var k=x(g),h=k.next();return h.done?c([]):new e(function(l,m){function n(w){return function(t){q[w]=t;v--;v==0&&l(q)}
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 2e 4a 5d 3a 76 6f 69 64 20 30 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 63 28 68 29 26 26 7a 28 68 2c 66 29 26 26 7a 28 68 5b 66 5d 2c 74 68 69 73 2e 4a 29 7d 3b 0a 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 63 28 68 29 26 26 7a 28 68 2c 66 29 26 26 7a 28 68 5b 66 5d 2c 74 68 69 73 2e 4a 29 3f 64 65 6c 65 74 65 20 68 5b 66 5d 5b 74 68 69 73 2e 4a 5d 3a 21 31 7d 3b 72 65 74 75 72 6e 20 6b 7d 29 3b 0a 75 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 Data Ascii: .J]:void 0};k.prototype.has=function(h){return c(h)&&z(h,f)&&z(h[f],this.J)};k.prototype.delete=function(h){return c(h)&&z(h,f)&&z(h[f],this.J)?delete h[f][this.J]:!1};return k});u("Map",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototyp
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 5b 6b 2e 6b 65 79 2c 6b 2e 76 61 6c 75 65 5d 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 6b 65 79 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 Data Ascii: .value};c.prototype.entries=function(){return e(this,function(k){return[k.key,k.value]})};c.prototype.keys=function(){return e(this,function(k){return k.key})};c.prototype.values=function(){return e(this,function(k){return k.value})};c.prototype.forEach=f
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 75 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 68 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 3b 62 2b 3d 22 22 3b 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c Data Ascii: );if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};u("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=ha(this,b,"startsWith");b+="";var e=d.length,
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 41 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 62 3d 62 21 3d 22 6f 62 6a 65 63 74 22 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 3b 72 65 74 75 72 6e 20 62 3d 3d 22 61 72 72 61 79 22 7c 7c 62 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 7d 2c 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 20 62 3d 3d 22 6f 62 6a 65 63 74 22 26 26 61 21 3d 6e 75 6c 6c 7c 7c 62 3d 3d 22 66 75 6e 63 74 Data Ascii: se-Identifier: Apache-2.0*/var A=this\|\|self,ia=function(a){var b=typeof a;b=b!="object"?b:a?Array.isArray(a)?"array":b:"null";return b=="array"\|\|b=="object"&&typeof a.length=="number"},ja=function(a){var b=typeof a;return b=="object"&&a!=null\|\|b=="funct
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 5d 3a 22 25 73 22 29 3b 74 61 2e 63 61 6c 6c 28 74 68 69 73 2c 63 2b 61 5b 64 5d 29 7d 72 61 28 76 61 2c 74 61 29 3b 76 61 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 41 73 73 65 72 74 69 6f 6e 45 72 72 6f 72 22 3b 76 61 72 20 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 61 29 7b 76 61 72 20 64 3d 22 41 73 73 65 72 74 69 6f 6e 20 66 61 69 6c 65 64 22 3b 69 66 28 62 29 7b 64 2b 3d 22 3a 20 22 2b 62 3b 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 7d 74 68 72 6f 77 20 6e 65 77 20 76 61 28 22 22 2b 64 2c 65 7c 7c 5b 5d 29 3b 7d 7d 3b 76 61 72 20 78 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3f 66 75 6e 63 74 Data Ascii: ]:"%s");ta.call(this,c+a[d])}ra(va,ta);va.prototype.name="AssertionError";var wa=function(a,b,c){if(!a){var d="Assertion failed";if(b){d+=": "+b;var e=Array.prototype.slice.call(arguments,2)}throw new va(""+d,e\|\|[]);}};var xa=Array.prototype.forEach?funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49733	142.250.185.137	443	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:03 UTC	608	OUT	GET /static/v1/widgets/3789536756-widgets.js HTTP/1.1 Host: www.blogger.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://kjhgt55555555555.blogspot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:04 UTC	696	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech" Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} Content-Length: 145204 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 12 Mar 2025 02:11:38 GMT Expires: Thu, 12 Mar 2026 02:11:38 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 11 Mar 2025 09:53:45 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 199886 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 09:43:04 UTC	694	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 61 61 3d 22 26 61 63 74 69 6f 6e 3d 22 2c 62 61 3d 22 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 22 2c 63 61 3d 22 53 43 52 49 50 54 22 2c 64 61 3d 22 53 50 41 4e 22 2c 65 61 3d 22 53 57 5f 52 45 41 44 45 52 5f 4c 49 53 54 5f 22 2c 66 61 3d 22 53 57 5f 52 45 41 44 45 Data Ascii: (function(){/* Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var aa="&action=",ba=".wikipedia.org",ca="SCRIPT",da="SPAN",ea="SW_READER_LIST_",fa="SW_READE
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 22 2c 42 61 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 22 2c 43 61 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 2d 77 69 74 68 2d 62 6f 72 64 65 72 22 2c 44 61 3d 22 64 61 74 61 2d 68 65 69 67 68 74 22 2c 45 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 46 75 6c 6c 22 2c 46 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 4c 61 79 6f 75 74 22 2c 47 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 4e 6f 6e 65 22 2c 6d 3d 22 64 69 76 22 2c 48 61 3d 22 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 22 2c 49 61 3d 22 65 72 72 6f 72 22 2c 4a 61 3d 22 65 78 70 61 6e 64 65 64 22 2c 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 4b 61 3d 22 68 69 64 64 65 6e 22 2c 4c 61 3d 22 68 74 74 70 73 3a 22 2c Data Ascii: ",Ba="contact-form-success-message",Ca="contact-form-success-message-with-border",Da="data-height",Ea="displayModeFull",Fa="displayModeLayout",Ga="displayModeNone",m="div",Ha="dropdown-toggle",Ia="error",Ja="expanded",n="function",Ka="hidden",La="https:",
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 76 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 41 3d 66 3b 67 62 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a Data Ascii: onfigurable:!0,writable:!0,value:b})}}v("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.A=f;gb(this,"description",{configurable:!0,writable:
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 4c 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 71 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 66 62 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 Data Ascii: (b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.L=b.prototype}function x(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length==q)return{next:fb(a)};throw Error(String(a)+" is not an itera
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 68 69 73 2e 54 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 47 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 54 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 47 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 61 61 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 50 61 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 6e 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 4e 28 67 Data Ascii: his.T),reject:g(this.G)}};b.prototype.T=function(g){if(g===this)this.G(new TypeError("A Promise cannot resolve to itself"));else if(g instanceof b)this.aa(g);else{a:switch(typeof g){case Pa:var h=g!=null;break a;case n:h=!0;break a;default:h=!1}h?this.N(g
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 44 2c 43 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 44 3d 3d 6e 3f 66 75 6e 63 74 69 6f 6e 28 52 29 7b 74 72 79 7b 6c 28 44 28 52 29 29 7d 63 61 74 63 68 28 4e 64 29 7b 72 28 4e 64 29 7d 7d 3a 43 7d 76 61 72 20 6c 2c 72 2c 41 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 44 2c 43 29 7b 6c 3d 44 3b 72 3d 43 7d 29 3b 74 68 69 73 2e 4e 61 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 72 29 29 3b 72 65 74 75 72 6e 20 41 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 Data Ascii: tion(g,h){function k(D,C){return typeof D==n?function(R){try{l(D(R))}catch(Nd){r(Nd)}}:C}var l,r,A=new b(function(D,C){l=D;r=C});this.Na(k(g,l),k(h,r));return A};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.Na=function(g,h){functi
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 75 62 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 67 62 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 72 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 72 29 26 26 65 28 72 29 3b 72 65 74 75 72 6e 20 6c 28 72 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f Data Ascii: unction e(k){if(!ub(k,g)){var l=new c;gb(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(r){if(r instanceof c)return r;Object.isExtensible(r)&&e(r);return l(r)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=O
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 6c 2c 6c 69 73 74 3a 72 2c 69 6e 64 65 78 3a 2d 31 2c 0a 55 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 78 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 6e 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 6e 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 Data Ascii: l,list:r,index:-1,U:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=x(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!=n\|\|!a.prototype.entries\|\|typeof Object.seal!=n)return!1;try{var h=Object
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 72 3b 21 28 72 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 72 3d 72 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 72 5b 31 5d 2c 72 5b 30 5d 2c 0a 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 67 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 76 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: tion(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),r;!(r=l.next()).done;)r=r.value,h.call(k,r[1],r[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var g=0;return e});v("Set",function(
2025-03-14 09:43:04 UTC	1390	IN	Data Raw: 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 63 2b 2b 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 66 2c 61 5b 66 5d 29 2c 64 6f 6e 65 3a 21 31 7d 7d 64 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 65 7d 76 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 Data Ascii: (a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a[f]),done:!1}}d=!0;return{done:!0,value:void 0}}};e[Symbol.iterator]=function(){return e};return e}v("Array.prototype.entries",function(a){re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49740	142.250.186.132	443	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:05 UTC	595	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CKq1yQEIi7bJAQiktskBCKmdygEI0qDKAQig4coBCJShywEInP7MAQiFoM0BCMjRzgEIvtXOAQiA1s4BCMjczgEIiuDOAQjI4c4BCK7kzgEIi+XOAQ== Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:05 UTC	1303	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:43:05 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-b77dcSTDO5jt8cxpAjo40g' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-14 09:43:05 UTC	87	IN	Data Raw: 34 36 39 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 74 64 20 62 61 6e 6b 20 63 6c 6f 73 69 6e 67 20 62 72 61 6e 63 68 65 73 22 2c 22 6e 79 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 68 69 6e 74 73 20 6d 61 72 63 68 20 31 33 22 2c 22 6e 66 6c 20 66 72 65 65 20 61 67 Data Ascii: 469)]}'["",["td bank closing branches","nyt connections hints march 13","nfl free ag
2025-03-14 09:43:05 UTC	1049	IN	Data Raw: 65 6e 74 73 20 73 69 67 6e 69 6e 67 73 22 2c 22 6e 69 6e 74 65 6e 64 6f 20 73 77 69 74 63 68 20 67 61 6d 65 73 22 2c 22 73 65 6c 65 6e 61 20 67 6f 6d 65 7a 20 62 65 6e 6e 79 20 62 6c 61 6e 63 6f 20 73 75 6e 73 65 74 20 62 6c 76 64 22 2c 22 6c 61 79 6f 66 66 73 20 65 64 77 61 72 64 20 6a 6f 6e 65 73 22 2c 22 78 62 6f 78 20 67 61 6d 65 20 70 61 73 73 20 6d 6c 62 20 74 68 65 20 73 68 6f 77 20 32 35 22 2c 22 73 74 65 61 6d 20 73 70 72 69 6e 67 20 73 61 6c 65 20 32 30 32 35 20 67 61 6d 65 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 Data Ascii: ents signings","nintendo switch games","selena gomez benny blanco sunset blvd","layoffs edward user","xbox game pass mlb the show 25","steam spring sale 2025 games"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:grou
2025-03-14 09:43:05 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49749	104.21.29.163	443	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:08 UTC	553	OUT	GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1 Host: img3.proshkolu.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:08 UTC	1031	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 14 Mar 2025 09:43:08 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close location: http://data3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Cache-Control: max-age=14400 CF-Cache-Status: HIT Age: 988 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pwvs9YBcIRU08%2FiasZvFI9dC%2FDjXRtBYcraHNl6TjGlKIgH6d31HpgGEQV99ejgfGW76UoDhVO%2FBuDkf6jAbyh67SrtJKr8EUATrwx8pzUS6gd9DBO8AZWJz9GjMQ9%2BUj1%2FaZQ%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d3378c085e7a-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1559&min_rtt=1553&rtt_var=594&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1125&delivery_rate=1822721&cwnd=235&unsent_bytes=0&cid=42ef4faac4f17a11&ts=152&x=0"
2025-03-14 09:43:08 UTC	175	IN	Data Raw: 61 39 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 35 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a9<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.25.5</center></body></html>
2025-03-14 09:43:08 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49757	172.67.149.117	443	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:10 UTC	554	OUT	GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1 Host: data3.proshkolu.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:10 UTC	1047	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:43:10 GMT Content-Type: image/gif Content-Length: 18837 Connection: close Cache-Control: max-age=2592000 etag: "5db4b9f0-4995" expires: Fri, 11 Apr 2025 02:51:05 GMT last-modified: Sat, 26 Oct 2019 21:26:08 GMT x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 193289 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BYgMtImeL1VrGwAtkkSO8Ix52LkqwAUpexoOPJpq2DV0zUp7IG8wkc5mPC%2BLd%2BtA1TYZU%2B55KKkIReF0nWSKhjps2JI%2FdaSoPBp%2BhoI7hkcsuzBVCniMA7Elfk%2Bd2hK7Hw1DDME%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d3411e6543a9-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1593&min_rtt=1593&rtt_var=598&sent=5&recv=7&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1126&delivery_rate=1828428&cwnd=208&unsent_bytes=0&cid=aa07c49b21108a29&ts=340&x=0"
2025-03-14 09:43:10 UTC	322	IN	Data Raw: 47 49 46 38 39 61 8a 01 76 00 f7 ff 00 e4 ce db a5 98 5c 73 00 6f c2 1c bb c9 9c b7 77 05 48 c7 49 c7 51 00 36 94 00 90 f6 ee f3 f8 f1 f5 b8 0f b3 d6 96 c7 c0 8b aa 9b 47 7a 9e 5d e4 e4 b8 da ae 6b 92 c2 33 bf 86 00 65 65 03 94 c9 85 b6 f6 8a eb b8 7d a1 a4 58 85 5f 00 43 ee e5 a2 e3 ad d8 ae 8b d7 d8 8c c7 a6 03 11 a0 6f 9c bd 4e a3 c9 6b b4 e3 9c df e9 bc e2 dc be cf c5 7d b1 98 04 74 bf 31 a3 d8 b5 cd ed de e7 80 16 55 a5 4b 87 e5 a6 e3 74 53 62 8f 59 84 a2 3d 83 71 00 56 af 8e a9 69 00 4e 89 26 61 9b 39 79 d2 ad c2 6d 4e 96 cf af f4 f8 d7 f7 b6 7a 9d b8 5a 9f de 91 d8 c5 63 ae fd f9 cb c1 b0 b0 c2 58 a9 ba 43 9f e6 15 79 a8 00 87 c1 73 ab be 67 a7 92 37 6d b6 69 9e a0 02 7d e0 a5 d4 d6 7d c4 43 94 93 d4 94 f3 82 02 58 db 85 da a2 93 8d a5 2e 86 8e 66 Data Ascii: GIF89av\sowHIQ6Gz]k3ee}X_CoNk}t1UKtSbY=qViN&a9ymNzZcXCysg7mi}}CX.f
2025-03-14 09:43:10 UTC	1369	IN	Data Raw: 64 00 45 a8 15 87 8a 3b 8a 9d 17 78 f7 ca f7 f5 ad b5 8b 14 64 dc 9c cf ae 43 93 cd 6a e7 6c 02 45 7f 11 54 76 2d 59 86 1e 5e ce 5c cd a8 d9 eb b6 1b 9a d3 84 c2 ea c7 e2 82 00 7e ee e1 e9 76 01 5c cf 6f bb f8 87 b0 66 31 7d 78 03 51 cd bf f2 ec af e7 87 66 a7 8f 00 6d f3 79 a7 72 4b dd 7d 00 5f d2 9e c3 b4 49 69 95 73 83 91 27 68 e0 b9 f9 92 1e 6b dd b1 d1 f2 9e 8e e3 c9 fa d4 6c d1 f2 2a dc 70 02 4c f5 b6 ee ce 76 ba 85 3f 69 e8 76 81 c9 7b 8f 50 0b c7 ed bf ea cd 96 bc aa 38 8d d0 4a 8e f8 ab f3 fe fe f3 8c 53 a8 cc 8f 78 cd a6 bd 93 45 41 f8 c0 f6 f4 53 dc 57 0c 18 41 02 6c e3 a2 f1 39 56 62 b4 30 42 7e 0b 51 d5 a9 7f a2 76 b2 e2 d6 fc a8 00 a3 9c 10 8c f0 d3 eb 9c 60 90 f7 57 ae d8 47 b8 a0 7d 8c be b0 6b 78 a3 7f 79 02 10 a5 c8 a3 f9 e4 f9 ca 03 44 Data Ascii: dE;xdCjlETv-Y^\~v\of1}xQfmyrK}_Iis'hkl*pLv?iv{P8JSxEASWAl9Vb0B~Qv`WG}kxyD
2025-03-14 09:43:10 UTC	1369	IN	Data Raw: 0d 63 94 02 1d 82 68 42 ca 08 22 44 22 c1 2b 08 4c 20 f0 41 a9 0d 0f 01 04 1b 18 43 06 22 1d 54 50 42 1f 43 e8 d0 45 17 2a 44 df 50 0d 0e ac 6c 8c f1 67 c7 02 4e 12 95 50 43 0e 27 2f 78 02 18 8e 50 b9 e0 ed 6c 04 10 d0 05 0b d0 a6 b6 1e 54 22 04 3c 78 5f fc 40 67 90 88 61 01 03 18 c8 41 3f e4 c1 c1 58 24 af 04 46 c0 c2 0a de c0 89 46 b0 a3 3f 0e 49 80 1c 44 a0 09 4d 8c 40 10 2c 38 5c 89 ac 21 02 26 50 30 21 0d 58 81 23 f0 a0 86 43 14 60 6a 04 51 81 31 ff 62 81 8d 36 14 60 4b ff c0 00 36 2a a0 06 40 d0 2e 21 d3 13 41 1d 5e c1 31 83 a4 0c 0b c6 c1 46 eb 08 b4 81 4f a0 2d 6b 78 08 46 25 78 70 0b 2a 6c 48 25 39 e0 c4 14 b5 00 83 ef 65 84 04 56 2b cf f8 8c 07 00 44 c0 ac 04 39 c0 46 04 8c c0 0a 7a 90 a3 0b ab 88 c0 b9 26 42 80 17 88 40 10 0a 10 c4 27 0c c0 3d Data Ascii: chB"D"+L AC"TPBCEDPlgNPC'/xPlT"<x_@gaA?X$FF?IDM@,8\!&P0!X#C`jQ1b6`K6@.!A^1FO-kxF%xp*lH%9eV+D9Fz&B@'=
2025-03-14 09:43:10 UTC	1369	IN	Data Raw: 5c 81 44 00 c1 bc 38 04 a4 18 92 00 40 1c 49 0f 87 00 d5 0c 36 b1 87 42 36 2a cc 0d 69 40 17 de 70 88 0c f4 bb 20 01 c2 42 3c 0e f0 85 93 a9 c0 1d d6 88 bd 40 13 52 84 30 e4 ee b7 08 c9 81 ff 11 14 a0 08 74 58 2b 64 73 98 c4 cf d7 bf d8 0c b4 9f e4 27 69 c0 13 f0 2c 80 78 c0 9c 22 17 78 41 35 42 60 02 3e ec 4a 64 32 00 0b 46 e6 02 ee 47 70 07 d0 06 07 d0 02 67 30 09 a1 a6 7e 69 16 11 11 00 04 70 60 00 6d 60 0d 92 c0 3d 62 e7 2f b0 f6 0f f9 d7 01 3c 60 0e 13 10 2a 80 e0 7f 45 e7 7e 26 e8 7e 02 78 06 d8 30 4f 5f e0 7e 0f 88 50 0e 50 01 e4 30 01 19 90 06 8b d5 6d a1 62 0a 84 02 79 68 c2 04 c0 95 7f 4d 90 0c d6 80 09 87 56 0b 21 e8 73 eb 97 84 32 70 06 88 c6 6d 2f 28 10 a6 35 4f 04 17 07 ab 30 31 a4 25 6b 3f 00 82 30 f0 84 0a 11 1e ab c7 28 74 00 08 84 20 0f Data Ascii: \D8@I6B6i@p B<@R0tX+ds'i,x"xA5B`>Jd2FGpg0~ip`m`=b/<`E~&~x0O_~PP0mbyhMV!s2pm/(5O01%k?0(t
2025-03-14 09:43:10 UTC	1369	IN	Data Raw: 0d 05 70 43 16 0a 49 71 70 08 a4 f8 48 0b 11 01 e4 b0 06 6e d0 06 3a b2 27 66 e0 0e 65 20 04 d5 28 89 29 c0 0e e1 e0 48 4a fb 10 24 60 9e 09 f8 43 24 a0 02 3d 14 07 7e 43 11 29 d0 06 b4 60 5d 63 eb 10 24 00 08 2d 69 02 50 3b 10 35 30 03 21 d4 05 f7 d0 08 6f 40 04 15 50 01 78 a0 08 63 d4 03 9f 35 01 80 20 b1 d4 b2 0a 4d 70 02 3e 04 2b 04 d0 06 36 06 06 e6 00 08 d2 00 0d 20 8b 32 5f 23 0a 94 a0 03 46 f3 97 0e 40 0f 1c 74 3f 24 90 02 c6 40 04 8a 9b b4 02 51 04 c7 c0 8e 65 c9 7d 48 e0 09 6a 90 a3 7c b6 02 98 d4 05 05 40 05 5d e0 02 6e 40 5c 48 60 47 25 a0 03 da 26 aa 2a 01 00 6d 70 9b dd 85 11 ca c7 09 31 60 bc 13 a1 02 c7 06 0b 92 e8 4e 2f 30 45 92 b7 57 4f 60 08 c9 e0 65 30 80 ac 4f ff a8 7c 60 20 b3 17 a1 02 e5 60 64 01 95 03 8d 40 08 cd 70 90 12 d1 00 bd Data Ascii: pCIqpHn:'fe ()HJ$`C$=~C)`]c$-iP;50!o@Pxc5 Mp>+6 2_#F@t?$@Qe}Hj\|@]n@\H`G%&*mp1`N/0EWO`e0O\|` `d@p
2025-03-14 09:43:10 UTC	1369	IN	Data Raw: d3 01 9d 6e 06 3c 10 0c 0c e0 09 1b 90 07 10 e0 06 16 00 02 e7 e0 b4 f2 59 ad 35 40 07 9c 30 09 5a 69 2c 9a f2 05 ea 1e a2 7f 8c 41 9e fa 0a d4 cb e7 03 41 79 c9 40 08 77 1d 20 56 b0 08 71 e0 dd 33 a1 c5 18 90 96 dd 9c 11 05 00 07 46 00 00 58 c0 4d ed b2 10 c7 32 03 0e 90 36 e6 60 28 47 2e b5 85 90 d3 05 30 b0 ab 90 0c 3c 40 0a 40 30 01 3f c7 85 05 f0 04 3c 50 01 2d 20 02 ab d0 f0 0a f1 f0 0e 80 08 37 70 bf 4b fe 0f 0d ff 99 0c ee 40 d9 fd ba 10 e1 e1 00 3b b0 b5 ff a8 7a 9e c0 03 78 00 02 fb 90 a4 d5 6a 73 11 e3 00 00 50 01 84 70 70 23 ee 00 d8 f0 f2 71 40 c4 7d 39 03 77 a0 31 11 89 01 11 c0 02 e3 b3 01 3b 90 04 65 00 04 94 00 02 d9 de 01 bf 4b 60 3c 60 05 d1 b6 84 07 c0 9c 56 f3 02 6e 66 d9 f1 1a 07 b5 90 01 c8 50 04 12 f3 1b 45 70 02 c2 b2 bc 96 2e 07 Data Ascii: n<Y5@0Zi,AAy@w Vq3FXM26`(G.0<@@0?<P- 7pK@;zxjsPpp#q@}9w1;eK`<`VnfPEp.
2025-03-14 09:43:10 UTC	1369	IN	Data Raw: ba 39 c2 1a 01 fe 10 a0 08 a5 a9 2b 02 3a f8 c8 92 04 54 27 39 6c 80 2d 20 f8 89 0c 60 01 08 12 8c a4 06 05 70 cf 21 26 60 82 17 e8 c0 08 3c ab 40 35 3c d8 ff 80 12 3c a0 1b bb 60 0c de 6a 02 00 76 20 00 01 33 78 05 29 a8 56 b5 ab 89 80 05 1b 60 01 38 42 20 04 3e b8 67 12 d4 aa 01 20 0e 71 88 01 bc c2 04 40 d0 41 08 34 80 87 0e 7a b0 1a c1 20 c2 13 00 21 83 12 4e 6b 24 92 33 c2 05 1a 80 88 3c 44 20 02 d8 c0 03 38 44 10 08 11 e8 02 1c 4d 88 84 11 5e 31 8c ae 3c 2e 65 23 b9 40 23 84 00 83 f6 4d 22 0e cd a8 4d 6d 26 31 01 5b 1c 81 10 4f cc c0 19 4c 54 a7 85 c4 23 03 5f 40 5f 44 22 e0 00 6c 1c 2b 1e ff 72 00 10 aa d1 84 35 20 00 03 0d 70 0e 16 36 20 bc 11 50 02 09 78 00 c3 11 0e 21 9e 02 1c f0 20 18 28 43 13 10 81 84 0a f4 41 03 c1 b0 5e 2b 2b 30 a6 21 0c c1 Data Ascii: 9+:T'9l- `p!&`<@5<<`jv 3x)V`8B >g q@A4z !Nk$3<D 8DM^1<.e#@#M"Mm&1[OLT#_@_D"l+r5 p6 Px! (CA^++0!
2025-03-14 09:43:10 UTC	1369	IN	Data Raw: 64 00 9d 08 1b 4a f2 d9 11 18 e7 e3 32 05 0d 80 4a 6d 34 c3 cd 9c 24 7f 12 51 61 df 24 45 d1 a1 22 f8 c0 05 6d 68 ed 15 84 71 80 49 20 1e de c0 d7 89 03 d2 83 f8 53 e1 10 15 80 81 68 b1 b9 03 78 87 74 29 02 8c 03 8e e0 1b a5 a3 13 06 cd 1b 09 c8 d0 02 3d e8 86 ae 00 19 0a 70 0f 58 80 85 e5 62 87 e2 5a ae 9d c3 00 26 18 1d 52 e9 23 17 90 96 2f 98 16 c5 13 3e 80 21 80 27 ea a5 06 64 c1 80 69 80 36 f8 9f e7 ab 89 14 50 11 ce 39 85 33 d8 a1 6b 93 41 20 94 c1 06 98 83 a6 fb 3e 15 b0 a2 89 cb 89 06 a0 80 43 b0 35 77 e3 32 2f c0 b2 d2 c1 b7 83 20 80 c9 7b 2d cb 9a a7 d6 fa ac 91 b0 93 ae 68 07 21 11 00 59 80 01 ba 02 04 9d 9b 81 5a 4b c2 83 20 81 02 90 96 ff 02 b8 28 68 28 80 23 54 c3 20 44 b6 19 c8 8c 3a c4 25 05 20 3f ba c3 89 14 48 15 a9 28 82 06 88 b4 3c 2c Data Ascii: dJ2Jm4$Qa$E"mhqI Shxt)=pXbZ&R#/>!'di6P93kA >C5w2/ {-h!YZK (h(#T D:% ?H(<,
2025-03-14 09:43:10 UTC	1369	IN	Data Raw: a4 09 04 7a fe 03 49 18 09 19 a0 e8 3f fb 98 a0 af 45 8a 34 62 cd 17 02 cd 5a f6 3f 67 f4 22 50 d8 02 e5 9e 51 63 02 bd 62 8e 39 02 1d 32 48 a7 19 19 be 51 23 06 17 54 4b 47 88 51 f4 44 1f 7d 72 df 4a 75 11 46 47 81 da 47 10 42 08 13 30 58 bf 15 ec 3f 24 d9 7d 1c c3 f9 c2 17 b0 71 88 4b b4 c1 10 5e 9b c4 d2 4a b2 0e 6e fc 23 40 18 49 81 44 fe f1 04 34 10 e2 1f 80 70 c1 70 60 10 ba 7f 74 41 0d 9a fb 87 1c 26 32 42 6a 3c e2 1f fa 98 c0 34 bc 75 9a 0e 5e e4 18 ff 40 c2 0e 92 50 b9 13 14 43 08 84 e8 c9 21 f8 70 08 27 5c f0 1f 9c 00 83 1a ff 20 64 9a 89 74 81 13 02 99 84 0b 32 30 8a 03 68 61 20 71 b0 5b 49 3a 11 8a 7f 1c c2 7e 93 99 00 37 60 30 09 8e 90 63 02 e5 ab 88 03 10 98 90 17 e8 e3 1f cc f0 49 1b 86 34 09 4b fc 63 42 04 d9 82 78 32 20 03 83 b5 40 20 e0 Data Ascii: zI?E4bZ?g"PQcb92HQ#TKGQD}rJuFGGB0X?$}qK^Jn#@ID4pp`tA&2Bj<4u^@PC!p'\ dt20ha q[I:~7`0cI4KcBx2 @
2025-03-14 09:43:10 UTC	1369	IN	Data Raw: 80 c0 ee 44 28 d6 3c 7c aa 54 96 b0 d0 b3 46 5a 02 06 8a 9c 65 63 62 d0 ee 44 74 30 04 a5 60 81 05 f1 88 5c 20 a8 f1 8f 3c 10 84 08 17 b4 2d cd 2d 02 f9 89 ec 0d 81 1c 8c 41 71 74 98 c3 1d c2 d7 e9 5d d9 44 2c 64 4c 92 00 17 7d 20 4b 1a be 55 c6 40 08 db fe a3 02 3f f0 7c ff 48 22 37 90 4e 28 b4 24 9d 1b a2 49 ce 30 0a 8b 6a a1 7c 05 fe 0f 7f 64 19 78 8b 98 92 22 63 10 08 0d 46 4e 11 07 64 8a 0a c5 40 1f 67 e0 42 e5 f0 04 49 62 02 87 80 06 ca 44 10 65 80 54 3e 71 04 93 a0 06 f4 d1 0d c8 91 01 5e d0 05 2e 90 51 73 d0 02 de 86 11 8f 84 4e 3e e1 3a 28 e2 13 0a 87 7d d5 33 11 ae 63 05 7d 36 11 e2 f7 11 74 90 05 e0 25 07 3c 00 6b 25 c1 0e ba f2 13 32 b0 59 23 51 7f 16 b1 09 82 50 09 c3 83 6b 05 a3 11 80 60 36 61 75 1d e0 e5 01 66 03 08 26 30 21 2c 04 06 08 c0 Data Ascii: D(<\|TFZecbDt0`\ <--Aqt]D,dL} KU@?\|H"7N($I0j\|dx"cFNd@gBIbDeT>q^.QsN>:(}3c}6t%<k%2Y#QPk`6auf&0!,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49759	172.67.149.117	443	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:11 UTC	446	OUT	GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1 Host: data3.proshkolu.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:11 UTC	1043	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 09:43:11 GMT Content-Type: image/gif Content-Length: 18837 Connection: close Cache-Control: max-age=2592000 etag: "5db4b9f0-4995" expires: Fri, 11 Apr 2025 02:51:05 GMT last-modified: Sat, 26 Oct 2019 21:26:08 GMT x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 193290 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=ZG1qOL%2BvuFrbJOYW8kTFo8TQ9icv20J%2FqX%2FizuHWHSJrGGxaEiLj8AldPxOuE%2FOtJVgN3Rue0Z0g14spYbTsuNhQVgKnwRs2IKaZXvWx2MnF3rW1Btkz5gWmYRM7B5uGw8ErriM%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9202d3467c1b422d-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=14722&min_rtt=1935&rtt_var=8472&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1018&delivery_rate=1509043&cwnd=214&unsent_bytes=0&cid=82195123fb0495ad&ts=152&x=0"
2025-03-14 09:43:11 UTC	326	IN	Data Raw: 47 49 46 38 39 61 8a 01 76 00 f7 ff 00 e4 ce db a5 98 5c 73 00 6f c2 1c bb c9 9c b7 77 05 48 c7 49 c7 51 00 36 94 00 90 f6 ee f3 f8 f1 f5 b8 0f b3 d6 96 c7 c0 8b aa 9b 47 7a 9e 5d e4 e4 b8 da ae 6b 92 c2 33 bf 86 00 65 65 03 94 c9 85 b6 f6 8a eb b8 7d a1 a4 58 85 5f 00 43 ee e5 a2 e3 ad d8 ae 8b d7 d8 8c c7 a6 03 11 a0 6f 9c bd 4e a3 c9 6b b4 e3 9c df e9 bc e2 dc be cf c5 7d b1 98 04 74 bf 31 a3 d8 b5 cd ed de e7 80 16 55 a5 4b 87 e5 a6 e3 74 53 62 8f 59 84 a2 3d 83 71 00 56 af 8e a9 69 00 4e 89 26 61 9b 39 79 d2 ad c2 6d 4e 96 cf af f4 f8 d7 f7 b6 7a 9d b8 5a 9f de 91 d8 c5 63 ae fd f9 cb c1 b0 b0 c2 58 a9 ba 43 9f e6 15 79 a8 00 87 c1 73 ab be 67 a7 92 37 6d b6 69 9e a0 02 7d e0 a5 d4 d6 7d c4 43 94 93 d4 94 f3 82 02 58 db 85 da a2 93 8d a5 2e 86 8e 66 Data Ascii: GIF89av\sowHIQ6Gz]k3ee}X_CoNk}t1UKtSbY=qViN&a9ymNzZcXCysg7mi}}CX.f
2025-03-14 09:43:11 UTC	1369	IN	Data Raw: 15 87 8a 3b 8a 9d 17 78 f7 ca f7 f5 ad b5 8b 14 64 dc 9c cf ae 43 93 cd 6a e7 6c 02 45 7f 11 54 76 2d 59 86 1e 5e ce 5c cd a8 d9 eb b6 1b 9a d3 84 c2 ea c7 e2 82 00 7e ee e1 e9 76 01 5c cf 6f bb f8 87 b0 66 31 7d 78 03 51 cd bf f2 ec af e7 87 66 a7 8f 00 6d f3 79 a7 72 4b dd 7d 00 5f d2 9e c3 b4 49 69 95 73 83 91 27 68 e0 b9 f9 92 1e 6b dd b1 d1 f2 9e 8e e3 c9 fa d4 6c d1 f2 2a dc 70 02 4c f5 b6 ee ce 76 ba 85 3f 69 e8 76 81 c9 7b 8f 50 0b c7 ed bf ea cd 96 bc aa 38 8d d0 4a 8e f8 ab f3 fe fe f3 8c 53 a8 cc 8f 78 cd a6 bd 93 45 41 f8 c0 f6 f4 53 dc 57 0c 18 41 02 6c e3 a2 f1 39 56 62 b4 30 42 7e 0b 51 d5 a9 7f a2 76 b2 e2 d6 fc a8 00 a3 9c 10 8c f0 d3 eb 9c 60 90 f7 57 ae d8 47 b8 a0 7d 8c be b0 6b 78 a3 7f 79 02 10 a5 c8 a3 f9 e4 f9 ca 03 44 a1 78 cf 78 Data Ascii: ;xdCjlETv-Y^\~v\of1}xQfmyrK}_Iis'hkl*pLv?iv{P8JSxEASWAl9Vb0B~Qv`WG}kxyDxx
2025-03-14 09:43:11 UTC	1369	IN	Data Raw: 1d 82 68 42 ca 08 22 44 22 c1 2b 08 4c 20 f0 41 a9 0d 0f 01 04 1b 18 43 06 22 1d 54 50 42 1f 43 e8 d0 45 17 2a 44 df 50 0d 0e ac 6c 8c f1 67 c7 02 4e 12 95 50 43 0e 27 2f 78 02 18 8e 50 b9 e0 ed 6c 04 10 d0 05 0b d0 a6 b6 1e 54 22 04 3c 78 5f fc 40 67 90 88 61 01 03 18 c8 41 3f e4 c1 c1 58 24 af 04 46 c0 c2 0a de c0 89 46 b0 a3 3f 0e 49 80 1c 44 a0 09 4d 8c 40 10 2c 38 5c 89 ac 21 02 26 50 30 21 0d 58 81 23 f0 a0 86 43 14 60 6a 04 51 81 31 ff 62 81 8d 36 14 60 4b ff c0 00 36 2a a0 06 40 d0 2e 21 d3 13 41 1d 5e c1 31 83 a4 0c 0b c6 c1 46 eb 08 b4 81 4f a0 2d 6b 78 08 46 25 78 70 0b 2a 6c 48 25 39 e0 c4 14 b5 00 83 ef 65 84 04 56 2b cf f8 8c 07 00 44 c0 ac 04 39 c0 46 04 8c c0 0a 7a 90 a3 0b ab 88 c0 b9 26 42 80 17 88 40 10 0a 10 c4 27 0c c0 3d 3d fc 10 21 Data Ascii: hB"D"+L AC"TPBCEDPlgNPC'/xPlT"<x_@gaA?X$FF?IDM@,8\!&P0!X#C`jQ1b6`K6@.!A^1FO-kxF%xp*lH%9eV+D9Fz&B@'==!
2025-03-14 09:43:11 UTC	1369	IN	Data Raw: c1 bc 38 04 a4 18 92 00 40 1c 49 0f 87 00 d5 0c 36 b1 87 42 36 2a cc 0d 69 40 17 de 70 88 0c f4 bb 20 01 c2 42 3c 0e f0 85 93 a9 c0 1d d6 88 bd 40 13 52 84 30 e4 ee b7 08 c9 81 ff 11 14 a0 08 74 58 2b 64 73 98 c4 cf d7 bf d8 0c b4 9f e4 27 69 c0 13 f0 2c 80 78 c0 9c 22 17 78 41 35 42 60 02 3e ec 4a 64 32 00 0b 46 e6 02 ee 47 70 07 d0 06 07 d0 02 67 30 09 a1 a6 7e 69 16 11 11 00 04 70 60 00 6d 60 0d 92 c0 3d 62 e7 2f b0 f6 0f f9 d7 01 3c 60 0e 13 10 2a 80 e0 7f 45 e7 7e 26 e8 7e 02 78 06 d8 30 4f 5f e0 7e 0f 88 50 0e 50 01 e4 30 01 19 90 06 8b d5 6d a1 62 0a 84 02 79 68 c2 04 c0 95 7f 4d 90 0c d6 80 09 87 56 0b 21 e8 73 eb 97 84 32 70 06 88 c6 6d 2f 28 10 a6 35 4f 04 17 07 ab 30 31 a4 25 6b 3f 00 82 30 f0 84 0a 11 1e ab c7 28 74 00 08 84 20 0f 8b e6 73 c8 Data Ascii: 8@I6B6i@p B<@R0tX+ds'i,x"xA5B`>Jd2FGpg0~ip`m`=b/<`E~&~x0O_~PP0mbyhMV!s2pm/(5O01%k?0(t s
2025-03-14 09:43:11 UTC	1369	IN	Data Raw: 16 0a 49 71 70 08 a4 f8 48 0b 11 01 e4 b0 06 6e d0 06 3a b2 27 66 e0 0e 65 20 04 d5 28 89 29 c0 0e e1 e0 48 4a fb 10 24 60 9e 09 f8 43 24 a0 02 3d 14 07 7e 43 11 29 d0 06 b4 60 5d 63 eb 10 24 00 08 2d 69 02 50 3b 10 35 30 03 21 d4 05 f7 d0 08 6f 40 04 15 50 01 78 a0 08 63 d4 03 9f 35 01 80 20 b1 d4 b2 0a 4d 70 02 3e 04 2b 04 d0 06 36 06 06 e6 00 08 d2 00 0d 20 8b 32 5f 23 0a 94 a0 03 46 f3 97 0e 40 0f 1c 74 3f 24 90 02 c6 40 04 8a 9b b4 02 51 04 c7 c0 8e 65 c9 7d 48 e0 09 6a 90 a3 7c b6 02 98 d4 05 05 40 05 5d e0 02 6e 40 5c 48 60 47 25 a0 03 da 26 aa 2a 01 00 6d 70 9b dd 85 11 ca c7 09 31 60 bc 13 a1 02 c7 06 0b 92 e8 4e 2f 30 45 92 b7 57 4f 60 08 c9 e0 65 30 80 ac 4f ff a8 7c 60 20 b3 17 a1 02 e5 60 64 01 95 03 8d 40 08 cd 70 90 12 d1 00 bd 00 06 13 00 Data Ascii: IqpHn:'fe ()HJ$`C$=~C)`]c$-iP;50!o@Pxc5 Mp>+6 2_#F@t?$@Qe}Hj\|@]n@\H`G%&*mp1`N/0EWO`e0O\|` `d@p
2025-03-14 09:43:11 UTC	1369	IN	Data Raw: 06 3c 10 0c 0c e0 09 1b 90 07 10 e0 06 16 00 02 e7 e0 b4 f2 59 ad 35 40 07 9c 30 09 5a 69 2c 9a f2 05 ea 1e a2 7f 8c 41 9e fa 0a d4 cb e7 03 41 79 c9 40 08 77 1d 20 56 b0 08 71 e0 dd 33 a1 c5 18 90 96 dd 9c 11 05 00 07 46 00 00 58 c0 4d ed b2 10 c7 32 03 0e 90 36 e6 60 28 47 2e b5 85 90 d3 05 30 b0 ab 90 0c 3c 40 0a 40 30 01 3f c7 85 05 f0 04 3c 50 01 2d 20 02 ab d0 f0 0a f1 f0 0e 80 08 37 70 bf 4b fe 0f 0d ff 99 0c ee 40 d9 fd ba 10 e1 e1 00 3b b0 b5 ff a8 7a 9e c0 03 78 00 02 fb 90 a4 d5 6a 73 11 e3 00 00 50 01 84 70 70 23 ee 00 d8 f0 f2 71 40 c4 7d 39 03 77 a0 31 11 89 01 11 c0 02 e3 b3 01 3b 90 04 65 00 04 94 00 02 d9 de 01 bf 4b 60 3c 60 05 d1 b6 84 07 c0 9c 56 f3 02 6e 66 d9 f1 1a 07 b5 90 01 c8 50 04 12 f3 1b 45 70 02 c2 b2 bc 96 2e 07 a2 60 00 55 Data Ascii: <Y5@0Zi,AAy@w Vq3FXM26`(G.0<@@0?<P- 7pK@;zxjsPpp#q@}9w1;eK`<`VnfPEp.`U
2025-03-14 09:43:11 UTC	1369	IN	Data Raw: 01 fe 10 a0 08 a5 a9 2b 02 3a f8 c8 92 04 54 27 39 6c 80 2d 20 f8 89 0c 60 01 08 12 8c a4 06 05 70 cf 21 26 60 82 17 e8 c0 08 3c ab 40 35 3c d8 ff 80 12 3c a0 1b bb 60 0c de 6a 02 00 76 20 00 01 33 78 05 29 a8 56 b5 ab 89 80 05 1b 60 01 38 42 20 04 3e b8 67 12 d4 aa 01 20 0e 71 88 01 bc c2 04 40 d0 41 08 34 80 87 0e 7a b0 1a c1 20 c2 13 00 21 83 12 4e 6b 24 92 33 c2 05 1a 80 88 3c 44 20 02 d8 c0 03 38 44 10 08 11 e8 02 1c 4d 88 84 11 5e 31 8c ae 3c 2e 65 23 b9 40 23 84 00 83 f6 4d 22 0e cd a8 4d 6d 26 31 01 5b 1c 81 10 4f cc c0 19 4c 54 a7 85 c4 23 03 5f 40 5f 44 22 e0 00 6c 1c 2b 1e ff 72 00 10 aa d1 84 35 20 00 03 0d 70 0e 16 36 20 bc 11 50 02 09 78 00 c3 11 0e 21 9e 02 1c f0 20 18 28 43 13 10 81 84 0a f4 41 03 c1 b0 5e 2b 2b 30 a6 21 0c c1 01 8d 50 c1 Data Ascii: +:T'9l- `p!&`<@5<<`jv 3x)V`8B >g q@A4z !Nk$3<D 8DM^1<.e#@#M"Mm&1[OLT#_@_D"l+r5 p6 Px! (CA^++0!P
2025-03-14 09:43:11 UTC	1369	IN	Data Raw: 1b 4a f2 d9 11 18 e7 e3 32 05 0d 80 4a 6d 34 c3 cd 9c 24 7f 12 51 61 df 24 45 d1 a1 22 f8 c0 05 6d 68 ed 15 84 71 80 49 20 1e de c0 d7 89 03 d2 83 f8 53 e1 10 15 80 81 68 b1 b9 03 78 87 74 29 02 8c 03 8e e0 1b a5 a3 13 06 cd 1b 09 c8 d0 02 3d e8 86 ae 00 19 0a 70 0f 58 80 85 e5 62 87 e2 5a ae 9d c3 00 26 18 1d 52 e9 23 17 90 96 2f 98 16 c5 13 3e 80 21 80 27 ea a5 06 64 c1 80 69 80 36 f8 9f e7 ab 89 14 50 11 ce 39 85 33 d8 a1 6b 93 41 20 94 c1 06 98 83 a6 fb 3e 15 b0 a2 89 cb 89 06 a0 80 43 b0 35 77 e3 32 2f c0 b2 d2 c1 b7 83 20 80 c9 7b 2d cb 9a a7 d6 fa ac 91 b0 93 ae 68 07 21 11 00 59 80 01 ba 02 04 9d 9b 81 5a 4b c2 83 20 81 02 90 96 ff 02 b8 28 68 28 80 23 54 c3 20 44 b6 19 c8 8c 3a c4 25 05 20 3f ba c3 89 14 48 15 a9 28 82 06 88 b4 3c 2c c4 5f 5a 97 Data Ascii: J2Jm4$Qa$E"mhqI Shxt)=pXbZ&R#/>!'di6P93kA >C5w2/ {-h!YZK (h(#T D:% ?H(<,_Z
2025-03-14 09:43:11 UTC	1369	IN	Data Raw: fe 03 49 18 09 19 a0 e8 3f fb 98 a0 af 45 8a 34 62 cd 17 02 cd 5a f6 3f 67 f4 22 50 d8 02 e5 9e 51 63 02 bd 62 8e 39 02 1d 32 48 a7 19 19 be 51 23 06 17 54 4b 47 88 51 f4 44 1f 7d 72 df 4a 75 11 46 47 81 da 47 10 42 08 13 30 58 bf 15 ec 3f 24 d9 7d 1c c3 f9 c2 17 b0 71 88 4b b4 c1 10 5e 9b c4 d2 4a b2 0e 6e fc 23 40 18 49 81 44 fe f1 04 34 10 e2 1f 80 70 c1 70 60 10 ba 7f 74 41 0d 9a fb 87 1c 26 32 42 6a 3c e2 1f fa 98 c0 34 bc 75 9a 0e 5e e4 18 ff 40 c2 0e 92 50 b9 13 14 43 08 84 e8 c9 21 f8 70 08 27 5c f0 1f 9c 00 83 1a ff 20 64 9a 89 74 81 13 02 99 84 0b 32 30 8a 03 68 61 20 71 b0 5b 49 3a 11 8a 7f 1c c2 7e 93 99 00 37 60 30 09 8e 90 63 02 e5 ab 88 03 10 98 90 17 e8 e3 1f cc f0 49 1b 86 34 09 4b fc 63 42 04 d9 82 78 32 20 03 83 b5 40 20 e0 fb 07 15 22 Data Ascii: I?E4bZ?g"PQcb92HQ#TKGQD}rJuFGGB0X?$}qK^Jn#@ID4pp`tA&2Bj<4u^@PC!p'\ dt20ha q[I:~7`0cI4KcBx2 @ "
2025-03-14 09:43:11 UTC	1369	IN	Data Raw: 28 d6 3c 7c aa 54 96 b0 d0 b3 46 5a 02 06 8a 9c 65 63 62 d0 ee 44 74 30 04 a5 60 81 05 f1 88 5c 20 a8 f1 8f 3c 10 84 08 17 b4 2d cd 2d 02 f9 89 ec 0d 81 1c 8c 41 71 74 98 c3 1d c2 d7 e9 5d d9 44 2c 64 4c 92 00 17 7d 20 4b 1a be 55 c6 40 08 db fe a3 02 3f f0 7c ff 48 22 37 90 4e 28 b4 24 9d 1b a2 49 ce 30 0a 8b 6a a1 7c 05 fe 0f 7f 64 19 78 8b 98 92 22 63 10 08 0d 46 4e 11 07 64 8a 0a c5 40 1f 67 e0 42 e5 f0 04 49 62 02 87 80 06 ca 44 10 65 80 54 3e 71 04 93 a0 06 f4 d1 0d c8 91 01 5e d0 05 2e 90 51 73 d0 02 de 86 11 8f 84 4e 3e e1 3a 28 e2 13 0a 87 7d d5 33 11 ae 63 05 7d 36 11 e2 f7 11 74 90 05 e0 25 07 3c 00 6b 25 c1 0e ba f2 13 32 b0 59 23 51 7f 16 b1 09 82 50 09 c3 83 6b 05 a3 11 80 60 36 61 75 1d e0 e5 01 66 03 08 26 30 21 2c 04 06 08 c0 83 05 f1 60 Data Ascii: (<\|TFZecbDt0`\ <--Aqt]D,dL} KU@?\|H"7N($I0j\|dx"cFNd@gBIbDeT>q^.QsN>:(}3c}6t%<k%2Y#QPk`6auf&0!,`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49758	87.240.137.164	443	2028	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 09:43:11 UTC	641	OUT	GET /images/mobile/faviconnew.ico?5 HTTP/1.1 Host: m.vk.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 09:43:11 UTC	315	IN	HTTP/1.1 404 Not Found Server: kittenx Date: Fri, 14 Mar 2025 09:43:11 GMT Content-Type: text/html Content-Length: 550 Connection: close X-Frontend: front656302 Access-Control-Expose-Headers: X-Frontend X-Trace-Id: mQgwsLX3y0mM3q5654n-sdm5uFpycA Server-Timing: tid;desc="mQgwsLX3y0mM3q5654n-sdm5uFpycA"
2025-03-14 09:43:11 UTC	550	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6b 69 74 74 65 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>kittenx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrom

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Behavior

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5964, Parent PID: 3520

General

Target ID:	2
Start time:	05:42:46
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Registry Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

COM Activities

WMI Operations

Show Windows behavior

Process Activities

Process Created

Process Terminated

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Windows UI Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Token Activities

Token Adjusted

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2028, Parent PID: 5964

General

Target ID:	3
Start time:	05:42:52
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1840,i,3765420331263254797,3778231933835489660,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=1984 /prefetch:3
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 7120, Parent PID: 3520

General

Target ID:	8
Start time:	05:42:59
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://kjhgt55555555555.blogspot.cz/"
Imagebase:	0x7ff786830000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

File Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly