Edit tour

Windows Analysis Report
https://kjhgt55555555555.blogspot.com/

Overview

General Information

Sample URL:	https://kjhgt55555555555.blogspot.com/
Analysis ID:	1638396
Infos:

Detection

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Creates files inside the system directory

Deletes files inside the Windows folder

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 5180 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 2756 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2028,i,10434602534001142915,6824334478596106474,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2056 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6372 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://kjhgt55555555555.blogspot.com/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: https://kjhgt55555555555.blogspot.com/

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: https://kjhgt55555555555.blogspot.com	Avira URL Cloud: Label: phishing
Source: https://kjhgt55555555555.blogspot.com/feeds/posts/default?alt=rss	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/logo.png?2	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/fav_logo.ico?5	Avira URL Cloud: Label: phishing
Source: https://kjhgt55555555555.blogspot.com/favicon.ico	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/counter	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/p	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/code.js?1	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/hit	Avira URL Cloud: Label: phishing
Source: http://kjhgt55555555555.blogspot.com/	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/s_cfmxw.css	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/s_yzgt.css	Avira URL Cloud: Label: phishing
Source: https://kjhgt55555555555.blogspot.com/feeds/posts/default	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: http://u967289v.beget.tech/

Joe Sandbox AI: Score: 9 Reasons: The brand 'Vkontakte' is well-known and commonly associated with the domain 'vk.com'., The URL 'u967289v.beget.tech' does not match the legitimate domain 'vk.com'., The domain 'beget.tech' is a generic hosting provider, which is often used for phishing attempts., The presence of input fields for ' email:' and ':' suggests an attempt to capture sensitive information., The URL contains a subdomain 'u967289v', which is not associated with the legitimate Vkontakte service. DOM: 1.0.pages.csv

Source: http://u967289v.beget.tech/

HTTP Parser: Number of links: 1

Source: http://u967289v.beget.tech/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: http://u967289v.beget.tech/

HTTP Parser: Title: does not match URL

Source: http://u967289v.beget.tech/

HTTP Parser: Has password / email / username input fields

Source: http://u967289v.beget.tech/

HTTP Parser: <input type="password" .../> found

Source: http://u967289v.beget.tech/

HTTP Parser: No <meta name="author".. found

Source: http://u967289v.beget.tech/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.186.132:443 -> 192.168.2.10:49688 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.97:443 -> 192.168.2.10:49690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.97:443 -> 192.168.2.10:49689 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.73:443 -> 192.168.2.10:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.10:49692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.73:443 -> 192.168.2.10:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.149.117:443 -> 192.168.2.10:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.163:443 -> 192.168.2.10:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.163:443 -> 192.168.2.10:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.240.132.72:443 -> 192.168.2.10:49717 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.26
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: kjhgt55555555555.blogspot.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/v1/widgets/3566091532-css_bundle_v2.css HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://kjhgt55555555555.blogspot.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/platform.js HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIk6HLAQiKo8sBCIWgzQEI5ePOAQiF5c4BSec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://kjhgt55555555555.blogspot.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/v1/widgets/3789536756-widgets.js HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://kjhgt55555555555.blogspot.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIk6HLAQiKo8sBCIWgzQEI/aXOAQiA1s4BCMnczgEI4ODOAQjl484BCK/kzgEIyOTOAQjf5M4BCIXlzgEIi+XOAQiO5c4BSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1Host: img3.proshkolu.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1Host: data3.proshkolu.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1Host: data3.proshkolu.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/mobile/faviconnew.ico?5 HTTP/1.1Host: m.vk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /code.js?1 HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/s_cfmxw.css HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/s_yzgt.css HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/hit HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/p HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/counter HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1Host: img3.proshkolu.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/logo.png?2 HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/index_files/s_yzgt.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/p HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/hit HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/logo.png?2 HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/counter HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1Host: data3.proshkolu.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/fav_logo.ico?5 HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/fav_logo.ico?5 HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: chromecache_69.1.dr

String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: kjhgt55555555555.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: www.blogger.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: u967289v.beget.tech
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: img3.proshkolu.ru
Source: global traffic	DNS traffic detected: DNS query: data3.proshkolu.ru
Source: global traffic	DNS traffic detected: DNS query: m.vk.com

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: kittenxDate: Fri, 14 Mar 2025 10:18:27 GMTContent-Type: text/htmlContent-Length: 550Connection: closeX-Frontend: front656902Access-Control-Expose-Headers: X-FrontendX-Trace-Id: 3l2uNw2Lu5beOWZ9YpJJkRQoMNfVFQServer-Timing: tid;desc="3l2uNw2Lu5beOWZ9YpJJkRQoMNfVFQ",front;dur=0.149

Source: chromecache_77.1.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_66.1.dr	String found in binary or memory: http://kjhgt55555555555.blogspot.com/
Source: chromecache_66.1.dr	String found in binary or memory: http://schema.org/Blog
Source: chromecache_66.1.dr	String found in binary or memory: http://u967289v.beget.tech
Source: chromecache_69.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_69.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_69.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_69.1.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_69.1.dr, chromecache_66.1.dr	String found in binary or memory: https://apis.google.com/js/platform.js
Source: chromecache_69.1.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_69.1.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_69.1.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_69.1.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_77.1.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_69.1.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_69.1.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_69.1.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_69.1.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_66.1.dr	String found in binary or memory: https://kjhgt55555555555.blogspot.com
Source: chromecache_66.1.dr	String found in binary or memory: https://kjhgt55555555555.blogspot.com/
Source: chromecache_66.1.dr	String found in binary or memory: https://kjhgt55555555555.blogspot.com/favicon.ico
Source: chromecache_66.1.dr	String found in binary or memory: https://kjhgt55555555555.blogspot.com/feeds/posts/default
Source: chromecache_66.1.dr	String found in binary or memory: https://kjhgt55555555555.blogspot.com/feeds/posts/default?alt=rss
Source: chromecache_69.1.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_69.1.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_69.1.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_69.1.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_66.1.dr	String found in binary or memory: https://resources.blogblog.com/blogblog/data/1kt/simple/body_gradient_tile_light.png)
Source: chromecache_66.1.dr	String found in binary or memory: https://resources.blogblog.com/blogblog/data/1kt/simple/gradients_light.png)
Source: chromecache_77.1.dr	String found in binary or memory: https://resources.blogblog.com/img/widgets/icon_contactform_cross.gif
Source: chromecache_69.1.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_69.1.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_77.1.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=
Source: chromecache_69.1.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_66.1.dr	String found in binary or memory: https://www.blogger.com
Source: chromecache_66.1.dr	String found in binary or memory: https://www.blogger.com/dyn-css/authorization.css?targetBlogID=7528910324557432955&zx=83f11ee6-7
Source: chromecache_66.1.dr	String found in binary or memory: https://www.blogger.com/feeds/7528910324557432955/posts/default
Source: chromecache_66.1.dr	String found in binary or memory: https://www.blogger.com/navbar/7528910324557432955?origin
Source: chromecache_66.1.dr	String found in binary or memory: https://www.blogger.com/profile/17053535176928240034
Source: chromecache_66.1.dr	String found in binary or memory: https://www.blogger.com/static/v1/jsbin/3559622654-lbx__ru.js
Source: chromecache_66.1.dr	String found in binary or memory: https://www.blogger.com/static/v1/v-css/1964470060-lightbox_bundle.css
Source: chromecache_66.1.dr	String found in binary or memory: https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
Source: chromecache_66.1.dr	String found in binary or memory: https://www.blogger.com/static/v1/widgets/3789536756-widgets.js
Source: chromecache_69.1.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_69.1.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_69.1.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_69.1.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49689
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49688
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49676 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49689 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443

Source: unknown	HTTPS traffic detected: 142.250.186.132:443 -> 192.168.2.10:49688 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.97:443 -> 192.168.2.10:49690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.97:443 -> 192.168.2.10:49689 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.73:443 -> 192.168.2.10:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.206:443 -> 192.168.2.10:49692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.73:443 -> 192.168.2.10:49694 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.149.117:443 -> 192.168.2.10:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.163:443 -> 192.168.2.10:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.163:443 -> 192.168.2.10:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.240.132.72:443 -> 192.168.2.10:49717 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5180_250297545

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5180_250297545

Jump to behavior

Source: classification engine

Classification label: mal64.phis.win@22/40@28/13

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2028,i,10434602534001142915,6824334478596106474,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2056 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://kjhgt55555555555.blogspot.com/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2028,i,10434602534001142915,6824334478596106474,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2056 /prefetch:3			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
https://kjhgt55555555555.blogspot.com/	100%	Avira URL Cloud	phishing

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://img3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif	0%	Avira URL Cloud	safe
https://kjhgt55555555555.blogspot.com	100%	Avira URL Cloud	phishing
http://data3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif	0%	Avira URL Cloud	safe
https://kjhgt55555555555.blogspot.com/feeds/posts/default?alt=rss	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/logo.png?2	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/fav_logo.ico?5	100%	Avira URL Cloud	phishing
https://kjhgt55555555555.blogspot.com/favicon.ico	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/counter	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/p	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/code.js?1	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/hit	100%	Avira URL Cloud	phishing
https://data3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif	0%	Avira URL Cloud	safe
https://img3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif	0%	Avira URL Cloud	safe
http://kjhgt55555555555.blogspot.com/	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/s_cfmxw.css	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/s_yzgt.css	100%	Avira URL Cloud	phishing
https://kjhgt55555555555.blogspot.com/feeds/posts/default	100%	Avira URL Cloud	phishing

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
u967289v.beget.tech	185.50.25.7	true	false		high
plus.l.google.com	142.250.74.206	true	false		high
code.jquery.com	151.101.194.137	true	false		high
blogspot.l.googleusercontent.com	142.250.186.97	true	false		high
img3.proshkolu.ru	104.21.29.163	true	false		high
www.google.com	142.250.186.132	true	false		high
data3.proshkolu.ru	172.67.149.117	true	false		high
blogger.l.google.com	216.58.206.73	true	false		high
m.vk.com	87.240.132.72	true	false		high
kjhgt55555555555.blogspot.com	unknown	unknown	false		unknown
apis.google.com	unknown	unknown	false		high
www.blogger.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://u967289v.beget.tech/index_files/p	true	Avira URL Cloud: phishing	unknown
http://data3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif	false	Avira URL Cloud: safe	unknown
http://u967289v.beget.tech/code.js?1	true	Avira URL Cloud: phishing	unknown
http://u967289v.beget.tech/index_files/counter	true	Avira URL Cloud: phishing	unknown
http://u967289v.beget.tech/index_files/fav_logo.ico?5	true	Avira URL Cloud: phishing	unknown
http://code.jquery.com/jquery.min.js	false		high
http://u967289v.beget.tech/index_files/logo.png?2	true	Avira URL Cloud: phishing	unknown
http://img3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif	false	Avira URL Cloud: safe	unknown
https://img3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif	false	Avira URL Cloud: safe	unknown
http://u967289v.beget.tech/	true		unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css	false		high
http://u967289v.beget.tech/index_files/s_yzgt.css	true	Avira URL Cloud: phishing	unknown
https://kjhgt55555555555.blogspot.com/	false		unknown
https://apis.google.com/js/platform.js	false		high
http://u967289v.beget.tech/index_files/hit	true	Avira URL Cloud: phishing	unknown
http://u967289v.beget.tech/index_files/s_cfmxw.css	true	Avira URL Cloud: phishing	unknown
https://data3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif	false	Avira URL Cloud: safe	unknown
https://www.blogger.com/static/v1/widgets/3789536756-widgets.js	false		high
https://m.vk.com/images/mobile/faviconnew.ico?5	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://kjhgt55555555555.blogspot.com/favicon.ico	chromecache_66.1.dr	true	Avira URL Cloud: phishing	unknown
https://www.blogger.com	chromecache_66.1.dr	false		high
https://twitter.com/intent/tweet?text=	chromecache_77.1.dr	false		high
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_69.1.dr	false		high
https://github.com/google/safevalues/issues	chromecache_69.1.dr	false		high
https://resources.blogblog.com/blogblog/data/1kt/simple/body_gradient_tile_light.png)	chromecache_66.1.dr	false		high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_69.1.dr	false		high
https://www.blogger.com/feeds/7528910324557432955/posts/default	chromecache_66.1.dr	false		high
https://www.blogger.com/dyn-css/authorization.css?targetBlogID=7528910324557432955&zx=83f11ee6-7	chromecache_66.1.dr	false		high
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_69.1.dr	false		high
https://kjhgt55555555555.blogspot.com/feeds/posts/default?alt=rss	chromecache_66.1.dr	true	Avira URL Cloud: phishing	unknown
https://pay.google.com/gp/v/widget/save	chromecache_69.1.dr	false		high
https://drive.google.com/savetodrivebutton?usegapi=1	chromecache_69.1.dr	false		high
https://kjhgt55555555555.blogspot.com	chromecache_66.1.dr	false	Avira URL Cloud: phishing	unknown
https://www.blogger.com/static/v1/v-css/1964470060-lightbox_bundle.css	chromecache_66.1.dr	false		high
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_69.1.dr	false		high
https://apis.google.com	chromecache_69.1.dr	false		high
https://resources.blogblog.com/img/widgets/icon_contactform_cross.gif	chromecache_77.1.dr	false		high
http://kjhgt55555555555.blogspot.com/	chromecache_66.1.dr	false	Avira URL Cloud: phishing	unknown
http://schema.org/Blog	chromecache_66.1.dr	false		high
https://classroom.google.com/sharewidget?usegapi=1	chromecache_69.1.dr	false		high
https://resources.blogblog.com/blogblog/data/1kt/simple/gradients_light.png)	chromecache_66.1.dr	false		high
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_69.1.dr	false		high
https://www.blogger.com/navbar/7528910324557432955?origin	chromecache_66.1.dr	false		high
https://www.blogger.com/static/v1/jsbin/3559622654-lbx__ru.js	chromecache_66.1.dr	false		high
https://plus.google.com	chromecache_69.1.dr	false		high
https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1	chromecache_69.1.dr	false		high
https://kjhgt55555555555.blogspot.com/feeds/posts/default	chromecache_66.1.dr	true	Avira URL Cloud: phishing	unknown
https://www.blogger.com/profile/17053535176928240034	chromecache_66.1.dr	false		high
https://talkgadget.google.com/:session_prefix:talkgadget/_/widget	chromecache_69.1.dr	false		high
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_69.1.dr	false		high
http://u967289v.beget.tech	chromecache_66.1.dr	false	Avira URL Cloud: phishing	unknown
https://families.google.com/webcreation?usegapi=1&usegapi=1	chromecache_69.1.dr	false		high
https://clients6.google.com	chromecache_69.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
216.58.206.73	blogger.l.google.com	United States		15169	GOOGLEUS	false
142.250.74.206	plus.l.google.com	United States		15169	GOOGLEUS	false
172.67.149.117	data3.proshkolu.ru	United States		13335	CLOUDFLARENETUS	false
87.240.132.72	m.vk.com	Russian Federation		47541	VKONTAKTE-SPB-AShttpvkcomRU	false
185.50.25.7	u967289v.beget.tech	Russian Federation		198610	BEGET-ASRU	false
104.21.29.163	img3.proshkolu.ru	United States		13335	CLOUDFLARENETUS	false
142.250.186.132	www.google.com	United States		15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States		54113	FASTLYUS	false
142.250.186.97	blogspot.l.googleusercontent.com	United States		15169	GOOGLEUS	false

Private

IP
192.168.2.16
192.168.2.7
192.168.2.5
192.168.2.10

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638396
Start date and time:	2025-03-14 11:17:11 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 21s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://kjhgt55555555555.blogspot.com/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	16
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@22/40@28/13
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, sppsvc.exe, SIHClient.exe, Sgrmuserer.exe, conhost.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.186.131, 142.250.186.142, 142.250.184.238, 64.233.184.84, 142.250.185.206, 142.250.185.110, 142.250.186.110, 216.58.206.74, 142.250.185.106, 172.217.16.138, 142.250.186.138, 142.250.186.170, 172.217.18.10, 142.250.185.138, 142.250.184.234, 142.250.186.42, 142.250.185.202, 142.250.185.74, 172.217.23.106, 142.250.186.74, 142.250.184.202, 142.250.186.106, 172.217.18.106, 199.232.210.172, 142.250.186.78, 216.58.206.78, 216.58.206.67, 172.217.18.14, 142.250.184.206, 142.250.186.67, 23.199.214.10, 20.12.23.50
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://kjhgt55555555555.blogspot.com/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 58

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUfExltxlHh/:Wb/
MD5:	9BB191C6827273AA978CAB39A3587950
SHA1:	25D8043336EB799E52B1A0E15FF6B95E09C24E35
SHA-256:	24E480E4659FBAE818853A38F8A3036F529F539024DC3E772C0B594CE02EA9DB
SHA-512:	C3970B9A8DC9B424528274E8D22D21E9990CE956AEDE61CBA13DE8D7832A8C896EAF1032662A78E95980EA013090CD4406F32604DA3C6F557AA136842D04324D
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/p
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 59

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.378783493486175
Encrypted:	false
SSDEEP:	3:bPuw:juw
MD5:	D6B47B530BA6F7AD9769DC4D76BB0225
SHA1:	86530627C71F6D2129D7D12010E98356E2591FED
SHA-256:	EF044782EEEFF4B6FC082B1B82D2385FE9F3CAA0E2746ECCD1B8598CCEE9B816
SHA-512:	F7D89E6B66399E79065223F998F0DC5DBA20F18CFB2F8986BCDCC9BDFC2769B96EF992BF5D0CB31F325598359593A5C1351A0A78B8FD0076C9B44774A60B9F3F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIgCd2S_IE0VJcFEgUNKEstiRIFDc5BTHoh9o38D13h7bA=?alt=proto
Preview:	ChIKBw0oSy2JGgAKBw3OQUx6GgA=

Chrome Cache Entry: 60

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 152054
Category:	downloaded
Size (bytes):	32330
Entropy (8bit):	7.992596581845741
Encrypted:	true
SSDEEP:	768:mEJ7COWYS5FIDcxcS2+rkaewfxDAM9jvZfE:bCOWvFIcx11kaeYFAMxa
MD5:	89E4A1416DCE48395219884399088611
SHA1:	B45EBD5A50DBB075901EEEE59B467F5B62277CDF
SHA-256:	AA01DB4991B977DC968A718576DA79749184A2EBD7C55D68B954A61164795FB1
SHA-512:	AA6CAA41B5DE83ABA266441A2FC815FDCF57A24461E66350FC3940D867EA3B5348F2A8658D338406CE0AF3B3C5DEA38C39A78F8365D756906E8BAB6E6643CE32
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/s_cfmxw.css
Preview:	...........is..(.}".?`..8W. .h.d.....E......4.6........S{efeu..g..Mvee.YY.....~.n..U.\N._...c.Xo..f./....?.].=.6..."[...?.f.<k..e.y..#..u..=........7.<y..E.@./g.KY\|.OW..8..Z.~.....9.7...y.n...n....yX>...M.>M..\|^.oN....j..P.....$...6/nn...'...4....6.....EO.......V..$..s(u....\|zW.#..W;.......b3;.'.z...r5....t...;4L7..l./.\|9'S..3..be`..>n..e...F..d...)...N..l.y8]o.yd.<.G;C.v.gb..rU..M.b.T.n.8....f..~.._...D...f...15...+..vS....5....Fv...H........+.....0..$[.4..k..n..L..}.{V}}j.fb..B.y9..v........F....../...vS..{..,...L.\,.....y...4.5......D..O..0.....#=Eg.b"O.v..t*N......t#.hu....-...W.B..1...3.W?.?n.......X=.'AKW.qo\|q.fc./....n.L...=..o.. .MQ_&....'.t&...V.^C...O..^.A...F...e..%.....(.....t.....A".So@..@Sjg.su1..1,.i.\|...........;Y..U<...e..F...s&.b...A.6j...Gu..N@..}0'.1.ctO.......z.`.v..z..C.r.......j..........rA..gh[.....Za...K[./....H....q..Yk.z....7.._....4d...d.y..&I.X..%C....L...:Cg.z.Z..1.bm1.....}6Y=.u...liVp%..2....v..gk

Chrome Cache Entry: 61

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUfExltxlHh/:Wb/
MD5:	9BB191C6827273AA978CAB39A3587950
SHA1:	25D8043336EB799E52B1A0E15FF6B95E09C24E35
SHA-256:	24E480E4659FBAE818853A38F8A3036F529F539024DC3E772C0B594CE02EA9DB
SHA-512:	C3970B9A8DC9B424528274E8D22D21E9990CE956AEDE61CBA13DE8D7832A8C896EAF1032662A78E95980EA013090CD4406F32604DA3C6F557AA136842D04324D
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 62

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUfExltxlHh/:Wb/
MD5:	9BB191C6827273AA978CAB39A3587950
SHA1:	25D8043336EB799E52B1A0E15FF6B95E09C24E35
SHA-256:	24E480E4659FBAE818853A38F8A3036F529F539024DC3E772C0B594CE02EA9DB
SHA-512:	C3970B9A8DC9B424528274E8D22D21E9990CE956AEDE61CBA13DE8D7832A8C896EAF1032662A78E95980EA013090CD4406F32604DA3C6F557AA136842D04324D
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 63

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUfExltxlHh/:Wb/
MD5:	9BB191C6827273AA978CAB39A3587950
SHA1:	25D8043336EB799E52B1A0E15FF6B95E09C24E35
SHA-256:	24E480E4659FBAE818853A38F8A3036F529F539024DC3E772C0B594CE02EA9DB
SHA-512:	C3970B9A8DC9B424528274E8D22D21E9990CE956AEDE61CBA13DE8D7832A8C896EAF1032662A78E95980EA013090CD4406F32604DA3C6F557AA136842D04324D
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/counter
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 64

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 394 x 118
Category:	dropped
Size (bytes):	18837
Entropy (8bit):	7.706509774277951
Encrypted:	false
SSDEEP:	384:wtN3QHbqbFgfSizi6GCpj1c5HRlGivmUjYfoY62D5v:wtN3QebSfSizi0KXlGAm0Kob2Dp
MD5:	56A07DDE31C73F8FBE5299DF53ABC050
SHA1:	CB9068B30661755E7B9306B5282F7424BFA97EEE
SHA-256:	0C16CEAD2A8188E08C385478868A5D7A3720ABD7B7226273BA1AECECCC4D6E6A
SHA-512:	3342CD715E3F77F14882ED5AC9BA613FC28E840D28A4DFA73B801AB96793E9B7FC231B62460E0EC74D1881D595E71798E90729CA1200E026E6464FD881FE1DC7
Malicious:	false
Reputation:	low
Preview:	GIF89a..v........\s.o.....w.H.I.Q.6..................Gz.]...k..3...ee.......}..X._.C...........o..N..k........}...t.1.......U.K...tSb.Y..=.q.V...i.N.&a.9y..mN.......z..Z....c........X..C...y....s..g..7m.i...}...}.C.....X........f)....Xa.x.%x^]'..'...Y../0,...iq...0v%.Qf.?.;..J.....p.....W..k.d.E....;...x........d..C..j.l.E..Tv-Y..^.\...........~...v.\.o....f1}x.Q....f...m.y.rK.}._..Ii.s..'h....k.......l...p.L....v..?i.v..{.P.......8..J.......S..x...EA....S.W..A.l..9Vb.0B~.Q...v.............`..W..G..}...kx..y.........D.x.x7.,..,.....\|.e<:...........M!\.c....e.D../z.Hy..w.\.X.(.%4..G.........?-..p...[...V@..s`./k..@......G.~..T.N.7A......,r.Z. ..$..B.z.Ny.q.d.l.Is.Z..a.....a.....y.........<f. ..1o.......!..NETSCAPE2.0.....!.......,......v........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.....

Chrome Cache Entry: 65

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1618
Category:	downloaded
Size (bytes):	712
Entropy (8bit):	7.713630834387732
Encrypted:	false
SSDEEP:	12:X/FvbFHx9QJNrq39jT8QPSmxdMyETnWUaG/kt7slNdNTHNYV0zsehMJym:X/FvbFHMNAjwhsNsnBBQ7slNdPYeztrm
MD5:	BB4E14E98CC46C6EF40CC29DB50DB947
SHA1:	051D0A15007762043DF6CE8F461A5D43D1579303
SHA-256:	5CCB889E562C36CD9CEE2ECA1C55910430428BC26E47339C0FC82EEB47FB6ACC
SHA-512:	30EED420A1584FD6178A7D8A26AE55CF2E6663971D59887E6F3108858C8792372BA2695D499B080D59DE1CCE8F10F321BAD76CA965F51A1B1974BA1FB100B95B
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/code.js?1
Preview:	...........T.j.@.....7r!6Qe....c..f.....Y.[.F.HNB0$....J.,.....$%iI..3..;z.\'.#..=w..s....v.=$.:p....5.&....<....Mqu.....`...VK...1..z.U..-..(s..\|.....v.=.....gH..D..9K.....:..c..=c!.....j....+..F>..b$.YP.D..1/.t...JUM.,.....n...-..FHyT......5...~..#=u.Loz.....37...>..cE..5..1.aFh1Nv.}.RJS...)F..^D.#.t@..l.....~.Kq!..D\..#..N~.g..f.....8.;.....k(`M..X... .#..B.U..8$...spU..B...;.\|....%.....o...C..'..[qQ.Z.._IA6.,...'.....A.6...}.....?......+.z.L.L ..c..P"8..z>q..j..\|.i......OmK..p..cLT..._..J...u:..xt..,{8`4....r.j./....hA._......8.Q\mk....f........aK9T.].m.&.u.w..<..Mq..y?.F.V\c...v..M.'~ ....b.5.M.T......Yy"...h.....+KT.<W].h./...O.=$.f.#s..D..$i../\|s._...o..R.AER...

Chrome Cache Entry: 66

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5187)
Category:	downloaded
Size (bytes):	26910
Entropy (8bit):	5.526478879142366
Encrypted:	false
SSDEEP:	384:wFE/uo35xCHMsV1oHHXfPWdoy5zo8FaHrkRl3kLqljfEDlUXdll+kxDBewpd:w8V3eyHHvPWdomzhFaH4/0OtbX
MD5:	389B5A4BDD3DB64F4E75AA8310C0C7EC
SHA1:	FD0D8FD454F5017EC9B6A402BEE6CB5E80EE169E
SHA-256:	7CCBA9D95113E3AB2EE67B85266E41D99EA7D49D00113569763FD5A994B3014E
SHA-512:	62E74E0E7CB34667DB59852DE05C2DD23B259A9D2B46D46AE6E2FD7ABE0831D4F42AB3824568875E91F7369AE8B5EF4F7B798AB4FC29A859EC4733E614E49298
Malicious:	false
Reputation:	low
URL:	https://kjhgt55555555555.blogspot.com/
Preview:	<!DOCTYPE html>.<html class='v2' dir='ltr' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>.<link href='https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css' rel='stylesheet' type='text/css'/>.<script>.window.location="http://u967289v.beget.tech";.</script>.<meta content='width=1100' name='viewport'/>.<meta content='text/html; charset=UTF-8' http-equiv='Content-Type'/>.<meta content='blogger' name='generator'/>.<link href='https://kjhgt55555555555.blogspot.com/favicon.ico' rel='icon' type='image/x-icon'/>.<link href='http://kjhgt55555555555.blogspot.com/' rel='canonical'/>.<link rel="alternate" type="application/atom+xml" title="1 - Atom" href="https://kjhgt55555555555.blogspot.com/feeds/posts/default" />.<link rel="alternate" type="application/rss+xml" title="1 - RSS" href="https://kjhgt55555555555.blogspot.com/feeds/posts/default?a

Chrome Cache Entry: 67

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 124 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1334
Entropy (8bit):	7.8121398461902585
Encrypted:	false
SSDEEP:	24:K6GtVv3VH3LnOjEF3nZ4o6S/3W4HgkE2k862rY26W2wPUzRL7:KxVv3Zjf16I3Lgd864YS2hzRX
MD5:	0A40A67A4CE053228E7B9DC45DD1B4C8
SHA1:	0BFD8946A30317EA70FF83194BAE589B0534E794
SHA-256:	F64EBEDAF9A92741DDB0878A8303D3E3E6B819876353F2779B5FCCEBCEA06374
SHA-512:	59EAE9A83644E5B05F9BF31EC29F6B44C438ABB7601A7BEF92EDA8DF8364594A29D86A9749AD02830765B97EB810F3EDC4DBF93790B54FC9B8EE62D7105000FB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\|..........'JW....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..m..U..G....t.j..D"+.^L%.......J.Yi..le`%Y.....J.BZ.V..c..+...mh...j.f.........x..gf..u.9.c..o...{..V,..\...O.K...X...MP..o...-.T.1..`.?..`[>......l.A..\|..i..Rr.;@.\|..7..V..0gGBL........9`l...7....\|.`.K...../.......Q...9...?....#r.....)Aw.!F.............A.....{`..;'.~/..b8..F.6......T.=..?.....RW...e.............fE...(..Z.s.....U.....k..{.u`.O.q..\..K.N..\|tb...........'.........H/t3.h91uF.p)<..@c....&.....\|+.PP..^....1..E%r....m.a.O..g..h...^...J.3......iO..c..mA\......\>..X.o..d7....o.=.e\|.&.K..w..F./$..'.t;...Y.M]s.....G(.J...........z....V..............I...q..A%/U:.z..iQV.ZoP.%\...P..7e?1..p..7%../.3...oAA..jz.....9F...'.t....<..CAb;%./`.\|k..8...s...Wv..;=..4E\..W..q.9.D.n.....b..d......1....-./3H...LI..^7..f..0....@......2.>...5..d"..(/...}..../v.O...05.........Z..2'.NZ..>nqO..S....R.4A.G...-e..\|..._..0.Fo..k...Q.+._....b....g.;.0.].<.#.+/(7......Od...

Chrome Cache Entry: 68

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/hit
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 69

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1863)
Category:	downloaded
Size (bytes):	64240
Entropy (8bit):	5.539523365461212
Encrypted:	false
SSDEEP:	1536:wPJHqONt8T7jWR06+4DJBq94Qywsg61okJ:mNtCWjJBxg611
MD5:	D8C47D8B6624A18AFBE726A594F43FDF
SHA1:	F1569EC98C61B1AEA8DC47BDCDD32F4A194A6170
SHA-256:	CFD0FB59B89D351661AE4BE9D07A33C4F43B7DAF927E50D797272AF92F4A28A5
SHA-512:	C794A07E8D5BC3DC76F3A44D30A9A6E2FFA45CC9654CB6EC5ACC8200C891278B936503208229E44A6E2C4C5A140F85BFFEB5ADB4891D682720F0DE38B123B716
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/platform.js
Preview:	(function(){var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},r=ca(this),u=function(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.u("Symbol",function(a){if(a)return a;var b=function(f,g){this.xa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.xa};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f

Chrome Cache Entry: 70

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 71

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57209
Category:	downloaded
Size (bytes):	8686
Entropy (8bit):	7.97595062286775
Encrypted:	false
SSDEEP:	192:iaN3/K64DhaV+nq1d5Ld6ZLBKHCOX5B4opmU/33nE55JHt1uXYYg:iQ/ChaIn4dOZEBB4opmU/nEzVt1uX8
MD5:	4E3FB595AEF47DC5101E5820FDC4B88A
SHA1:	016056CF16884F2FD489DA0CB0177BA541EB31CF
SHA-256:	0691CDBC6E6D9801B94395B08734DF0FD71D7551D37E184BEDCC2950C819DBEC
SHA-512:	36658B2A2E292742B521F8892B8F9800A99BEB323C83E61629A526B1D39AA36A9788D23AEFA7C2B4989D0F19AB6D586C2EBBE4CDAB9DCE6E9853FA50786EC464
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/s_yzgt.css
Preview:	...........]..8..?......t.l..Kr...vw.%..C..L!e.m.U..w..gP.]YGo'j...$..`0......5....8..../.......wI..>.z.o...._N.n.......I..>..uu^o..U._...m...e.g.......y..G...z......N......>.T...sw9.f........_....C.i...~.v...t.....-..xE.G..........u.....{........K.&.&.".....WB;./..>,C.B...+.."....!$....%%&..>......'.4..Ak.e-..^.....0..1.3....T..iB\|...H....)..vGEP.us.........''.k...yz.8..P......Q.lF...Xo.9f6.....P./f...x.....nl.....{^....m..h.......Vh.?...nwj.......Y%.h...}s..&.....{:..:...$.VJ.S.7C...}b.d..0...?..;..qx....-7...x.1...y.k....j......{n.d.b..V..n.\!A..yCH.+.Y>...7^4.YQ..E!.Y\&V.$.v.T..v.c.....".-/c.D.B.S..;......,.H1.w)...q?.1..X?4....K.fv.....\=W_..M.dz..>......5<..-..9fd....-.WV%......c..\|8.....y....u........c3...\|W?5.zvj>...\...%..V.'.....D.&....h.___.....n)j..\|1.b.1.A......j..tsF.Cn...S..../..-U..d.)--.t.4..q.tJK.)Mm-M......t.%-..%.uH..y.G....I~.?.....V].:\.\|..\....\|.7:....\|..S......r;KjT.a.......g....^,...~..7p?...t>.>.`.t.6N...].

Chrome Cache Entry: 72

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 124 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1334
Entropy (8bit):	7.8121398461902585
Encrypted:	false
SSDEEP:	24:K6GtVv3VH3LnOjEF3nZ4o6S/3W4HgkE2k862rY26W2wPUzRL7:KxVv3Zjf16I3Lgd864YS2hzRX
MD5:	0A40A67A4CE053228E7B9DC45DD1B4C8
SHA1:	0BFD8946A30317EA70FF83194BAE589B0534E794
SHA-256:	F64EBEDAF9A92741DDB0878A8303D3E3E6B819876353F2779B5FCCEBCEA06374
SHA-512:	59EAE9A83644E5B05F9BF31EC29F6B44C438ABB7601A7BEF92EDA8DF8364594A29D86A9749AD02830765B97EB810F3EDC4DBF93790B54FC9B8EE62D7105000FB
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/logo.png?2
Preview:	.PNG........IHDR...\|..........'JW....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..m..U..G....t.j..D"+.^L%.......J.Yi..le`%Y.....J.BZ.V..c..+...mh...j.f.........x..gf..u.9.c..o...{..V,..\...O.K...X...MP..o...-.T.1..`.?..`[>......l.A..\|..i..Rr.;@.\|..7..V..0gGBL........9`l...7....\|.`.K...../.......Q...9...?....#r.....)Aw.!F.............A.....{`..;'.~/..b8..F.6......T.=..?.....RW...e.............fE...(..Z.s.....U.....k..{.u`.O.q..\..K.N..\|tb...........'.........H/t3.h91uF.p)<..@c....&.....\|+.PP..^....1..E%r....m.a.O..g..h...^...J.3......iO..c..mA\......\>..X.o..d7....o.=.e\|.&.K..w..F./$..'.t;...Y.M]s.....G(.J...........z....V..............I...q..A%/U:.z..iQV.ZoP.%\...P..7e?1..p..7%../.3...oAA..jz.....9F...'.t....<..CAb;%./`.\|k..8...s...Wv..;=..4E\..W..q.9.D.n.....b..d......1....-./3H...LI..^7..f..0....@......2.>...5..d"..(/...}..../v.O...05.........Z..2'.NZ..>nqO..S....R.4A.G...-e..\|..._..0.Fo..k...Q.+._....b....g.;.0.].<.#.+/(7......Od...

Chrome Cache Entry: 73

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 95821
Category:	downloaded
Size (bytes):	33226
Entropy (8bit):	7.992371217611524
Encrypted:	true
SSDEEP:	768:EUK4XbDcMV+IBEVjFurBuUhzWaOtq48v6DrAMl/:EiPcMnBSjFulThSa8qer7V
MD5:	68D22C6E84FD56067014862758C25A09
SHA1:	05EA34ED72069D47AD8893E6E9B5502211B42ABE
SHA-256:	DDE61F0B9CEF03920BE91A889D9405B08F3E8A36102DC638F22087B10A647BDD
SHA-512:	099A7FA1A1299225AE3B808922C95318BA00645BF4C00B25FEA56D586273D660DF5B9A41795350C4618D13035F7F65BD3A378836E3E34E19B732AEACA0773FC2
Malicious:	false
Reputation:	low
URL:	http://code.jquery.com/jquery.min.js
Preview:	...........y{.F./...."....E:.=...'..I&.I2....IH.DR.....o...4..s..............Z..v..v.o.....C.....O..g.....?2._..VY./.+q...S..[......H...?{z.....E>?.I...<.{R..6.zz.\gw...=....n..........e..G.....a.P.XL.N.%.....U~...v......6..+...,>./V../.sz3%.`...w......C..{4.\|Z..........b'.#..o.R9..L...fH....Wi..Sz....bF.TG.......(._..o..L\..<.}...a.......A....yb)....c...tE..{N9....u\|....../..z..`.;..\..../w..b#/...U...>..f..mo,........w...GhY....z...G.-.B.....t..K...9?z.X..~...~..v.?.+l...i.X..n..,.W....n...8.\..r...~...I..M.jeX.W.8..T.ULh$.\|;.9k.........n..{.k... .>..^.H."..y.:..>.%.Vm.o.F.U.N...x.W.0.......'T.P...-s\.8....A.h;.}.C..b... ....g..3.....-S.He/..X.$.....3...n7.L.1/p:....._e'Gi..ph.-.H.E8.;BC!md....O....-..=.#y..g.M.....>......9.L....s9..o?.._..p4..K..E..J.9.v.k9.T6..z.h`....../L.f...........7S.;??.F..\|..............Y..r6.&.R9~f.)St....Z.a..+5.t.P..U.7:}...O..4\.q.[&.A.c%C...Si.h^.u.i.........7.........?.A..*..Q...E..x?.o.y..A..o.q...W/.Kz

Chrome Cache Entry: 74

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35959)
Category:	downloaded
Size (bytes):	35960
Entropy (8bit):	5.154449164812877
Encrypted:	false
SSDEEP:	384:YN90OhFvg3A2VysImDyPWquJMpx/SCYW0h8+Rl9yaZwuJ86YKSQCNL/J69nKg93P:YN90Oh+JnIm6IvW0trVJw1gngRLFr2
MD5:	1E32420A7B6DDBDCB7DEF8B3141C4D1E
SHA1:	A1BE54D42FF1F95244C9653539F90318F5BC0580
SHA-256:	A9CA837900B6AE007386D400F659C233120B8AF7D93407FD6475C9180D9E83D2
SHA-512:	1357D702A78FFA97F5ABA313BCD1F94D7D80FB6DD15D293FF36ACC4FB063FFDAD6D9F7E8D911B1BBE696C7AD1CDE4C3D52FB2DB2A0FCF6FF8EF154824E013C6D
Malicious:	false
Reputation:	low
URL:	https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
Preview:	html{height:100%}body{min-height:100%;_height:100%;position:relative}.content{position:relative;word-wrap:break-word}.content-outer,.region-inner{min-height:0;margin:0 auto}.columns{zoom:1}.loading .columns{overflow:hidden}.columns-inner{_height:1%;min-height:0}.column-center-outer,.column-left-outer,.column-right-outer{position:relative;float:left;_display:inline;_overflow:hidden}.column-center-outer{width:100%}.column-left-outer{margin-left:-100%}.fauxcolumns{position:relative;_height:1%}.fauxcolumn-outer{position:absolute;top:0;bottom:0;height:expression(this.parentNode.offsetHeight + 'px');overflow:hidden}.fauxcolumn-outer .fauxborder-left,.fauxcolumn-outer .fauxborder-right,.fauxcolumn-inner{height:100%}.fauxcolumn-left-outer{left:0}.fauxcolumn-right-outer{right:0}.cap-top,.cap-bottom{position:relative;height:0;background-repeat:repeat-x}.cap-top .cap-left,.cap-top .cap-right,.cap-bottom .cap-left,.cap-bottom .cap-right{height:100%;background-repeat:no-repeat}.cap-top,.cap-top .ca

Chrome Cache Entry: 75

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 394 x 118
Category:	downloaded
Size (bytes):	18837
Entropy (8bit):	7.706509774277951
Encrypted:	false
SSDEEP:	384:wtN3QHbqbFgfSizi6GCpj1c5HRlGivmUjYfoY62D5v:wtN3QebSfSizi0KXlGAm0Kob2Dp
MD5:	56A07DDE31C73F8FBE5299DF53ABC050
SHA1:	CB9068B30661755E7B9306B5282F7424BFA97EEE
SHA-256:	0C16CEAD2A8188E08C385478868A5D7A3720ABD7B7226273BA1AECECCC4D6E6A
SHA-512:	3342CD715E3F77F14882ED5AC9BA613FC28E840D28A4DFA73B801AB96793E9B7FC231B62460E0EC74D1881D595E71798E90729CA1200E026E6464FD881FE1DC7
Malicious:	false
Reputation:	low
URL:	https://data3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif
Preview:	GIF89a..v........\s.o.....w.H.I.Q.6..................Gz.]...k..3...ee.......}..X._.C...........o..N..k........}...t.1.......U.K...tSb.Y..=.q.V...i.N.&a.9y..mN.......z..Z....c........X..C...y....s..g..7m.i...}...}.C.....X........f)....Xa.x.%x^]'..'...Y../0,...iq...0v%.Qf.?.;..J.....p.....W..k.d.E....;...x........d..C..j.l.E..Tv-Y..^.\...........~...v.\.o....f1}x.Q....f...m.y.rK.}._..Ii.s..'h....k.......l...p.L....v..?i.v..{.P.......8..J.......S..x...EA....S.W..A.l..9Vb.0B~.Q...v.............`..W..G..}...kx..y.........D.x.x7.,..,.....\|.e<:...........M!\.c....e.D../z.Hy..w.\.X.(.%4..G.........?-..p...[...V@..s`./k..@......G.~..T.N.7A......,r.Z. ..$..B.z.Ny.q.d.l.Is.Z..a.....a.....y.........<f. ..1o.......!..NETSCAPE2.0.....!.......,......v........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.....

Chrome Cache Entry: 76

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	401
Entropy (8bit):	7.100774013005412
Encrypted:	false
SSDEEP:	6:6v/lhPUq25KiaovtCpxGCGSH0i1H5m72cxbvFRT4j2jSRU50/KH/R0/Z6p:6v/78qz0CpMC/UitRcjRTxSp/KHoZQ
MD5:	F56CB5B3818580563CD40DD2E91537AF
SHA1:	B714764B9316832F05CB764E22FF166412C9DCA1
SHA-256:	763D5CF5ABDD250387794A5BA1FF4F68ED237071449821341B9EC7F510A43512
SHA-512:	CCD8820AD1AF5BC6655C3C6956988FAB97D5AFA7E0EE760EA74BB88A9E8EBA77487693D9E05E32E2796EC56B18F1EFAC10354A560DD73D6DD0FF325C110FD698
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....gAMA......a....HIDAT8.c.jX..........0......001.3...d..B..L...H.^&d.r..5`Zi0..0.nN6.E)!.eM1`>.e.<..s...&...8.....>g..`cp4Va........X.!J"]..8.Y.........5.c..f....+dbbb.7Tb.3Tf......p....G...o0.p.3.%.2011.]..h......`...g@..Hj...7.6I...UN]s........j....pq...?..1./........>...p..}...........f....d.`..]..(..q4....PE...\.0.$.H/.(K.c.,;....o3........IEND.B`.

Chrome Cache Entry: 77

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4033)
Category:	downloaded
Size (bytes):	145204
Entropy (8bit):	5.540697873372811
Encrypted:	false
SSDEEP:	1536:xxgaBcL3Hu5cQAn5MlT9V1m7EescHi+dkkPfNAxGsdjmqLKxd7ZW0EZx3jo3tOR0:s3HJWV1jeNCevfNYdvRn3FkM3gl
MD5:	87333E835F5E578883D5C199A0A629F9
SHA1:	C99ADDAEF69A7048279E435CC045A5ECA82DF119
SHA-256:	6AA7215A36E5FC34D68C5ACC24B2D98BF3FD76405594ADF7B8B23C6C96D88740
SHA-512:	0239C944EC0CD757B1F5BC35EFC6F350B8F2905161EF781C89FFA212DA51B7539BA0E27848E6FF11EC3C361EB8C70ADFF5F5367F85384D646943F0E208C382C4
Malicious:	false
Reputation:	low
URL:	https://www.blogger.com/static/v1/widgets/3789536756-widgets.js
Preview:	(function(){/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="&action=",ba=".wikipedia.org",ca="SCRIPT",da="SPAN",ea="SW_READER_LIST_",fa="SW_READER_LIST_CLOSED_",ha="Share this post",ia="Symbol.dispose",ja="Symbol.iterator",ka="about:invalid#zClosurez",la="about:invalid#zSoyz",ma="bigint",na="block",oa="boolean",pa="click",qa="collapsed",ra="collapsible",sa="comment-editor",ta="commentId",ua="complete",va="contact-form-email",wa="contact-form-email-message",xa="contact-form-error-message",ya="contact-form-error-message-with-border",za="contact-form-name",.Aa="contact-form-submit",Ba="contact-form-success-message",Ca="contact-form-success-message-with-border",Da="data-height",Ea="displayModeFull",Fa="displayModeLayout",Ga="displayModeNone",m="div",Ha="dropdown-toggle",Ia="error",Ja="expanded",n="function",Ka="hidden",La="https:",Ma="layout-widget-description",Na="layout-widget-ti

Chrome Cache Entry: 78

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1112)
Category:	downloaded
Size (bytes):	1117
Entropy (8bit):	5.559431317572678
Encrypted:	false
SSDEEP:	24:To0ntQKovtTXYBHslgT1d1uawRo84kDPU3DX3ATGuoBN2t2t2t2t2t2t2toHfffY:dOKCdIKlgJXwRobuUbAiuSNYYYYYYYoA
MD5:	ADA02D28017FAB0274ACD7451D700CBA
SHA1:	48AE2D8548FCECA06D12FAD6556EA9714E6510D2
SHA-256:	F77ACC428919B111C4E954E1888D50425FD15A46634F67A337F877D96B579816
SHA-512:	03F58F6FB4D364B4A21F86BD143F5D52180237FC44DCD89EC17387FF7BF764B8FFB4A2EEBC6C177EDD18D1CE507425AB1239291FA4CC1DC526FC5D856EC53578
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["selena gomez benny blanco sunset blvd","nfl free agents signings","layoffs edward jones","nintendo switch games","chicago river dyeing 2025","crossfit open 25.3 workouts","steam spring sale 2025 games","lip bu tan intel ceo"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"google:entityinfo":"Cg0vZy8xMXgxOHFmdDhyEgtTdW5zZXQgQmx2ZDolc2VsZW5hIGdvbWV6IGJlbm55IGJsYW5jbyBzdW5zZXQgYmx2ZFJaZ3Nfc3NwPWVKemo0dFZQMXpjMHJEQzBLRXdyc1NneVlQUlNMVTdOU2MxTFZFalB6MDJ0VWtoS3pjdXJWRWpLU2N4THpsY29MczByVGkwQjhzcFNBT1ZfRXNRcAI\u003d","zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002},{"zl":10002}],"google:suggesteventid":"-870878511222808992","google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,14

Chrome Cache Entry: 79

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 12108
Category:	downloaded
Size (bytes):	3174
Entropy (8bit):	7.935895301507106
Encrypted:	false
SSDEEP:	96:BWTrZp0LJ2wF+nCp9DeN8U9iVOek+zOS7R:UTrXy2wHDe3SOr+zJ
MD5:	E25500DF45BBAFC269424291E4F85EC4
SHA1:	939DC297FC33DD8D2FEAE1B5DB6E2C20770B7A72
SHA-256:	237FE6EC376985088ADCDED04778B320315B30EC4D9E930FDFEB2BEC0737DDED
SHA-512:	D41CC6ED2672AC57149C661E7FFA4ECDA94C807C043D55E27BB0A4615D965F6075CF0463F0F26A071C66313D9D5DEAACBE14594C8E6C5960AE15EF5B28A23E3A
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/
Preview:	...........Z.o.G..^...R. .... ..Z..-..jO...c......E.....6wR.^.U..v:).........?....c....I&....{.y.....Y8r....?..Qs..j._{...^4...\|..+W..k.../h.....e.]Y....).....R..a...R..u..^I..d1.....Ky.d+[........~T.`?I..g...f.,......#...pfW.<....E.I,Z......Uqq9......K.@.y.rX.qU...v..........#Ce.J...kN...].6_2. xd.Y.teC....)]3.....+zK.v......VN..-a.".......-F.sy.4X.<..bo..-.W.....jP.K}..P..T..[J..rpy.H..-......,..^.......n7.po..\....-n...g...a..p.~;......b...J(.W...a..<..K.%[..Z...tnw.$.XXO...g...V...;.F......@iQh.,.6/..$..r...}..K7...g.;e...I.Z..WfUV....e...s.5...7....R....G.-XE..........o5. .x.F.D....j.R......P.s..y;..AH....`..p..h.O.\.C.).%.C....,Hg.e.S`M.KY...KH2....&.eM..=.`:..C.t.b..Z.iFJXM.F.#\|..Q...D......eg..i.K.E.~.#.g..[..U.S`...I.[....X..l..P.h....Y.S3.!..}...\|.z.E.\|.....!.4....}...G.ak..H3-..h@rw..^...1.l..]c....+..}hH....(G..F.."k...7..>JR$...N.T.F..]J_j.(7.*...Y.KZ.5S.A.q1..G.R..>.....5....O..PFNS.q).....d.@XF.l.<E...r..:;3;Udv}.v..

Chrome Cache Entry: 80

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	401
Entropy (8bit):	7.100774013005412
Encrypted:	false
SSDEEP:	6:6v/lhPUq25KiaovtCpxGCGSH0i1H5m72cxbvFRT4j2jSRU50/KH/R0/Z6p:6v/78qz0CpMC/UitRcjRTxSp/KHoZQ
MD5:	F56CB5B3818580563CD40DD2E91537AF
SHA1:	B714764B9316832F05CB764E22FF166412C9DCA1
SHA-256:	763D5CF5ABDD250387794A5BA1FF4F68ED237071449821341B9EC7F510A43512
SHA-512:	CCD8820AD1AF5BC6655C3C6956988FAB97D5AFA7E0EE760EA74BB88A9E8EBA77487693D9E05E32E2796EC56B18F1EFAC10354A560DD73D6DD0FF325C110FD698
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/fav_logo.ico?5
Preview:	.PNG........IHDR................a....gAMA......a....HIDAT8.c.jX..........0......001.3...d..B..L...H.^&d.r..5`Zi0..0.nN6.E)!.eM1`>.e.<..s...&...8.....>g..`cp4Va........X.!J"]..8.Y.........5.c..f....+dbbb.7Tb.3Tf......p....G...o0.p.3.%.2011.]..h......`...g@..Hj...7.6I...UN]s........j....pq...?..1./........>...p..}...........f....d.`..]..(..q4....PE...\.0.$.H/.(K.c.,;....o3........IEND.B`.

Static File Info

⊘No static file info

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 365
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 11:18:07.342396021 CET	49677	443	192.168.2.10	2.23.227.208
Mar 14, 2025 11:18:07.342400074 CET	49675	443	192.168.2.10	2.23.227.208
Mar 14, 2025 11:18:07.342401028 CET	49676	443	192.168.2.10	2.23.227.208
Mar 14, 2025 11:18:16.426347971 CET	49688	443	192.168.2.10	142.250.186.132
Mar 14, 2025 11:18:16.426398039 CET	443	49688	142.250.186.132	192.168.2.10
Mar 14, 2025 11:18:16.426575899 CET	49688	443	192.168.2.10	142.250.186.132
Mar 14, 2025 11:18:16.426755905 CET	49688	443	192.168.2.10	142.250.186.132
Mar 14, 2025 11:18:16.426769018 CET	443	49688	142.250.186.132	192.168.2.10
Mar 14, 2025 11:18:16.942801952 CET	49677	443	192.168.2.10	2.23.227.208
Mar 14, 2025 11:18:16.948358059 CET	49675	443	192.168.2.10	2.23.227.208
Mar 14, 2025 11:18:16.948402882 CET	49676	443	192.168.2.10	2.23.227.208
Mar 14, 2025 11:18:17.080899954 CET	443	49688	142.250.186.132	192.168.2.10
Mar 14, 2025 11:18:17.080976963 CET	49688	443	192.168.2.10	142.250.186.132
Mar 14, 2025 11:18:17.082417965 CET	49688	443	192.168.2.10	142.250.186.132
Mar 14, 2025 11:18:17.082438946 CET	443	49688	142.250.186.132	192.168.2.10
Mar 14, 2025 11:18:17.082688093 CET	443	49688	142.250.186.132	192.168.2.10
Mar 14, 2025 11:18:17.135876894 CET	49688	443	192.168.2.10	142.250.186.132
Mar 14, 2025 11:18:17.681504011 CET	49689	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:17.681550026 CET	443	49689	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:17.681674004 CET	49689	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:17.681726933 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:17.681770086 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:17.681828976 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:17.681957006 CET	49689	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:17.681977987 CET	443	49689	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:17.682090998 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:17.682106972 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.318746090 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.318815947 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.319597006 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.319722891 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.320936918 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.320945024 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.321208000 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.321523905 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.328963041 CET	443	49689	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.329061031 CET	49689	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.329746962 CET	443	49689	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.329801083 CET	49689	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.330257893 CET	49689	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.330270052 CET	443	49689	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.330663919 CET	443	49689	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.368323088 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.373409986 CET	49689	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.729368925 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.729429007 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.729509115 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.729526997 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.729722977 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.729753017 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.729782104 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.729792118 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.729974985 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.729980946 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.735460043 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.735795021 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.735801935 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.739996910 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.740057945 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.740067005 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.749049902 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.749085903 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.749116898 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.749125957 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.749177933 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.777462006 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:18.777506113 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:18.777615070 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:18.777964115 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:18.777980089 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:18.790360928 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:18.790402889 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:18.790494919 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:18.790750027 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:18.790767908 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:18.814110994 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.816725969 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.816762924 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.816778898 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.816796064 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.816858053 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.818438053 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:18.818480968 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:18.818758965 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:18.818912029 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:18.818927050 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:18.823008060 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.829997063 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.830051899 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.830059052 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.830173969 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:18.830276966 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.830404997 CET	49690	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:18:18.830420017 CET	443	49690	142.250.186.97	192.168.2.10
Mar 14, 2025 11:18:19.415394068 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.415478945 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.416707993 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.416729927 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.417463064 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.417743921 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.424949884 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.425014019 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.426162004 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.426173925 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.426417112 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.426708937 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.427509069 CET	49672	443	192.168.2.10	204.79.197.203
Mar 14, 2025 11:18:19.456243992 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.456319094 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.457623005 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.457634926 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.457928896 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.458224058 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.460334063 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.468333960 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.500327110 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.684740067 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.684789896 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.684822083 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.684849977 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.684854031 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.684870005 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.684892893 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.684964895 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.685009003 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.685019016 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.690398932 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.690479040 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.690490961 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.698193073 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.698407888 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.698426008 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.699289083 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.699315071 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.699347973 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.699372053 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.699379921 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.699392080 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.699449062 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.705210924 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.705336094 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.705359936 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.705399990 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.705399990 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.705420971 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.711743116 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.712021112 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.712033987 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.728701115 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.728744984 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.728794098 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.728818893 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.728842020 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.728853941 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.728876114 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.728893995 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.729008913 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.729015112 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.731508017 CET	49672	443	192.168.2.10	204.79.197.203
Mar 14, 2025 11:18:19.734693050 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.734813929 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.734827042 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.740999937 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.741079092 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.741094112 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.747495890 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.747518063 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.760413885 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.760431051 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.771002054 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.771037102 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.771064997 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.771086931 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.771131039 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.774091005 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.785624027 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.785656929 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.785687923 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.785706043 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.785885096 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.793715000 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.793740034 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.795980930 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.796020031 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.796125889 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.796138048 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.798181057 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.798461914 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.800630093 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.802489042 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.802512884 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.802560091 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.802576065 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.802582979 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.802611113 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.802624941 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.802659988 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.802683115 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.802793026 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.803412914 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.803476095 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.805857897 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.805886030 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.805944920 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.805969954 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.806013107 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.808630943 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.808667898 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.808738947 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.808758020 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.812232018 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.812506914 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.812649965 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.813083887 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.813937902 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.816957951 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.816999912 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.817017078 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.817032099 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.817333937 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.817883968 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.819982052 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.820025921 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.820058107 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.820071936 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.820450068 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.824337006 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.824371099 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.824536085 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.824548960 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.826276064 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.826329947 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.830813885 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.831861019 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.831906080 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.831937075 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.831965923 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.832196951 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.837444067 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.837492943 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.837559938 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.837626934 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.837658882 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.839999914 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.843381882 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.847457886 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.848035097 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.848273993 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.848304033 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.848510981 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.849783897 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.849822998 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.849916935 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.849930048 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.852472067 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.856080055 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.863517046 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.863563061 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.863687992 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.863703966 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.864496946 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.869431019 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.878475904 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.878581047 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.878591061 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.878612041 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.878699064 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.883722067 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.883790970 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.883825064 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.883882999 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.883903027 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.884118080 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.884126902 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.884268999 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.884345055 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.884352922 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.888684988 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.888739109 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.888751030 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.890980005 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.891027927 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.891041994 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.896369934 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.896464109 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.896487951 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.905488014 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.905555010 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.905625105 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:19.905651093 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.905678988 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:19.905698061 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.905757904 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.905766010 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.905890942 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.905927896 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.905947924 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.905956030 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.906444073 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.906522989 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.906532049 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.907979965 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.908931017 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.912889004 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.912918091 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.912952900 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.912967920 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.913144112 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.917236090 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.917289972 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.919595957 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.919612885 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.921607018 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.923609018 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.923618078 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.925981998 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.928522110 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.928544998 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.930955887 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.931027889 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.931036949 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.935300112 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.936489105 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.936511993 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.939171076 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.939261913 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.939275980 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.943814039 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.944463015 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.944470882 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.948241949 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.948332071 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.948339939 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.952786922 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.956466913 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.956475973 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.956763983 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.956839085 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.956845999 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.961167097 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.964493036 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.964509010 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.965691090 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.965765953 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.965775967 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.971936941 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.972496986 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.972507000 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.974183083 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.974263906 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.974272013 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.978583097 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.978651047 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.978663921 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.982027054 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.984540939 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.984556913 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.986608028 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.986721992 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.986737967 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.994193077 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.994230032 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.994266987 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.994292021 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.994303942 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.994339943 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.996103048 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.996167898 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:19.996176004 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:19.998485088 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.000521898 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:20.000530958 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.001189947 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.001305103 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:20.001312971 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.003523111 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.004456997 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:20.004467010 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.005755901 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.005814075 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:20.005822897 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.007556915 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.007591009 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.007652044 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:20.007659912 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.008450985 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:20.011351109 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.012590885 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.012625933 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.012746096 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:20.012761116 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.014592886 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.014707088 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:20.014714956 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.016510963 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:20.017379999 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.019188881 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.019298077 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:20.019309044 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.019735098 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.019860983 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:20.086464882 CET	49691	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:20.086498022 CET	443	49691	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.087717056 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:20.131257057 CET	49692	443	192.168.2.10	142.250.74.206
Mar 14, 2025 11:18:20.131280899 CET	443	49692	142.250.74.206	192.168.2.10
Mar 14, 2025 11:18:20.133835077 CET	49688	443	192.168.2.10	142.250.186.132
Mar 14, 2025 11:18:20.144988060 CET	49694	443	192.168.2.10	216.58.206.73
Mar 14, 2025 11:18:20.145015955 CET	443	49694	216.58.206.73	192.168.2.10
Mar 14, 2025 11:18:20.176336050 CET	443	49688	142.250.186.132	192.168.2.10
Mar 14, 2025 11:18:20.208199024 CET	49695	443	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:20.208245039 CET	443	49695	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:20.208435059 CET	49695	443	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:20.208889008 CET	49695	443	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:20.208901882 CET	443	49695	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:20.229129076 CET	49696	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:20.229311943 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:20.235445023 CET	80	49696	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:20.235564947 CET	49696	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:20.236109018 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:20.236160040 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:20.341469049 CET	49672	443	192.168.2.10	204.79.197.203
Mar 14, 2025 11:18:20.375072002 CET	443	49688	142.250.186.132	192.168.2.10
Mar 14, 2025 11:18:20.375137091 CET	443	49688	142.250.186.132	192.168.2.10
Mar 14, 2025 11:18:20.375196934 CET	49688	443	192.168.2.10	142.250.186.132
Mar 14, 2025 11:18:20.375226974 CET	443	49688	142.250.186.132	192.168.2.10
Mar 14, 2025 11:18:20.375281096 CET	443	49688	142.250.186.132	192.168.2.10
Mar 14, 2025 11:18:20.375333071 CET	49688	443	192.168.2.10	142.250.186.132
Mar 14, 2025 11:18:20.376861095 CET	49688	443	192.168.2.10	142.250.186.132
Mar 14, 2025 11:18:20.376876116 CET	443	49688	142.250.186.132	192.168.2.10
Mar 14, 2025 11:18:21.545962095 CET	49672	443	192.168.2.10	204.79.197.203
Mar 14, 2025 11:18:23.127968073 CET	49696	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.135035038 CET	80	49696	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.459454060 CET	80	49696	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.459470987 CET	80	49696	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.459482908 CET	80	49696	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.459496021 CET	80	49696	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.459520102 CET	49696	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.459549904 CET	49696	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.513755083 CET	49700	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.513892889 CET	49696	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.513979912 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.518488884 CET	80	49700	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.518517017 CET	80	49696	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.518593073 CET	49700	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.518615007 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.520144939 CET	49700	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.520622015 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:23.524833918 CET	80	49700	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.525461912 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:23.525540113 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:23.525681019 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:23.530327082 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:23.742619038 CET	80	49696	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.753175974 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.753200054 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.753217936 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.753230095 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.753246069 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.753264904 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.753273964 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.753277063 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.753290892 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.753303051 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.753307104 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.753321886 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.753329039 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.753370047 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.757953882 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.757973909 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.758012056 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.783148050 CET	443	49695	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.783221006 CET	49695	443	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.783428907 CET	49695	443	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.783452988 CET	443	49695	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.783864975 CET	49703	443	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.783900976 CET	443	49703	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.783986092 CET	49703	443	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.784214020 CET	49703	443	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.784229040 CET	443	49703	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:23.794740915 CET	49696	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:23.951102018 CET	49672	443	192.168.2.10	204.79.197.203
Mar 14, 2025 11:18:24.043003082 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043268919 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043311119 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043323040 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043334007 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043335915 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.043345928 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043359995 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043371916 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043376923 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.043382883 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043395996 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043410063 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043421984 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043431997 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043432951 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.043443918 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043454885 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043467045 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043467999 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.043505907 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.043526888 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043565035 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.043709993 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.043788910 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.043885946 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.043895960 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.043921947 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.043932915 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.043935061 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:24.043943882 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.043956041 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.043968916 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.043977976 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:24.043977976 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:24.043979883 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.043989897 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.044001102 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.044017076 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:24.044071913 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:24.048660994 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.048682928 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.048693895 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.048741102 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:24.048741102 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:24.055058956 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.055071115 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.055082083 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.055160046 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:24.055241108 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.055299997 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.055310965 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.055320978 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:24.055322886 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.055356979 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:24.055927992 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.055969000 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.055980921 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.055984974 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:24.055991888 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.056001902 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.056031942 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:24.056042910 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:24.056699991 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.056720018 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.056730986 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.056741953 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.056754112 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:18:24.056786060 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:24.089881897 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.091150999 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.091782093 CET	49696	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.092344046 CET	49704	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.095977068 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.096427917 CET	80	49696	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.097054958 CET	80	49704	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.097203970 CET	49704	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.097412109 CET	49704	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.102111101 CET	80	49704	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.105051041 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:18:24.121315002 CET	49705	80	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:24.126055002 CET	80	49705	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:24.126220942 CET	49705	80	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:24.126302004 CET	49705	80	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:24.130929947 CET	80	49705	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:24.227250099 CET	80	49700	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.227263927 CET	80	49700	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.227274895 CET	80	49700	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.227281094 CET	80	49700	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.227293015 CET	80	49700	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.227303982 CET	80	49700	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.227313995 CET	80	49700	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.227324963 CET	80	49700	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.227394104 CET	49700	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.227488995 CET	49700	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.313344955 CET	80	49700	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.321341991 CET	49700	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.326214075 CET	80	49700	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.387774944 CET	80	49696	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.391599894 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.436760902 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.436763048 CET	49696	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.463458061 CET	49706	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.463587999 CET	49707	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.468184948 CET	80	49706	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.468291998 CET	80	49707	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.468316078 CET	49706	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.468364954 CET	49707	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.468592882 CET	49706	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.468713045 CET	49707	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.473228931 CET	80	49706	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.473351955 CET	80	49707	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.547420979 CET	80	49700	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.547435999 CET	80	49700	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.547566891 CET	49700	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.551942110 CET	49708	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.556696892 CET	80	49708	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.556804895 CET	49708	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.557019949 CET	49708	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.562292099 CET	80	49708	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.602391958 CET	80	49705	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:24.654030085 CET	49705	80	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:24.657840014 CET	49710	443	192.168.2.10	172.67.149.117
Mar 14, 2025 11:18:24.657885075 CET	443	49710	172.67.149.117	192.168.2.10
Mar 14, 2025 11:18:24.657948971 CET	49710	443	192.168.2.10	172.67.149.117
Mar 14, 2025 11:18:24.658138990 CET	49710	443	192.168.2.10	172.67.149.117
Mar 14, 2025 11:18:24.658153057 CET	443	49710	172.67.149.117	192.168.2.10
Mar 14, 2025 11:18:24.863902092 CET	80	49704	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.876465082 CET	49711	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.881158113 CET	80	49711	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.881280899 CET	49711	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.881505013 CET	49711	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:24.886169910 CET	80	49711	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:24.903794050 CET	49704	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:25.125515938 CET	443	49710	172.67.149.117	192.168.2.10
Mar 14, 2025 11:18:25.125679970 CET	49710	443	192.168.2.10	172.67.149.117
Mar 14, 2025 11:18:25.140167952 CET	49710	443	192.168.2.10	172.67.149.117
Mar 14, 2025 11:18:25.140194893 CET	443	49710	172.67.149.117	192.168.2.10
Mar 14, 2025 11:18:25.140541077 CET	443	49710	172.67.149.117	192.168.2.10
Mar 14, 2025 11:18:25.141031027 CET	49710	443	192.168.2.10	172.67.149.117
Mar 14, 2025 11:18:25.184336901 CET	443	49710	172.67.149.117	192.168.2.10
Mar 14, 2025 11:18:25.262283087 CET	80	49707	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:25.262423992 CET	80	49706	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:25.275214911 CET	80	49708	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:25.275232077 CET	80	49708	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:25.275345087 CET	49708	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:25.302222013 CET	49706	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:25.303350925 CET	49707	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:25.370295048 CET	443	49710	172.67.149.117	192.168.2.10
Mar 14, 2025 11:18:25.370393991 CET	443	49710	172.67.149.117	192.168.2.10
Mar 14, 2025 11:18:25.370445967 CET	49710	443	192.168.2.10	172.67.149.117
Mar 14, 2025 11:18:25.372194052 CET	49710	443	192.168.2.10	172.67.149.117
Mar 14, 2025 11:18:25.372220993 CET	443	49710	172.67.149.117	192.168.2.10
Mar 14, 2025 11:18:25.404948950 CET	49713	80	192.168.2.10	172.67.149.117
Mar 14, 2025 11:18:25.409622908 CET	80	49713	172.67.149.117	192.168.2.10
Mar 14, 2025 11:18:25.409722090 CET	49713	80	192.168.2.10	172.67.149.117
Mar 14, 2025 11:18:25.409980059 CET	49713	80	192.168.2.10	172.67.149.117
Mar 14, 2025 11:18:25.414690018 CET	80	49713	172.67.149.117	192.168.2.10
Mar 14, 2025 11:18:25.642657042 CET	80	49711	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:25.695357084 CET	49711	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:25.866081953 CET	80	49713	172.67.149.117	192.168.2.10
Mar 14, 2025 11:18:25.891246080 CET	49714	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:25.891282082 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:25.891352892 CET	49714	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:25.891509056 CET	49714	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:25.891521931 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:25.918281078 CET	49713	80	192.168.2.10	172.67.149.117
Mar 14, 2025 11:18:26.355000973 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.355072975 CET	49714	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:26.356266022 CET	49714	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:26.356273890 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.356523991 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.356879950 CET	49714	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:26.404321909 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.499851942 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.499906063 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.499948025 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.499974012 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.500000000 CET	49714	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:26.500006914 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.500020027 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.500055075 CET	49714	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:26.500083923 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.500094891 CET	49714	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:26.500104904 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.500153065 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.500159025 CET	49714	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:26.500166893 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.500214100 CET	49714	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:26.500646114 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.548434973 CET	49714	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:26.548449039 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.585938931 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.585990906 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.586030960 CET	49714	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:26.586033106 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.586047888 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.586077929 CET	49714	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:26.586127996 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.586199999 CET	49714	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:26.586643934 CET	49714	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:26.586664915 CET	443	49714	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.604398012 CET	49717	443	192.168.2.10	87.240.132.72
Mar 14, 2025 11:18:26.604460955 CET	443	49717	87.240.132.72	192.168.2.10
Mar 14, 2025 11:18:26.604531050 CET	49717	443	192.168.2.10	87.240.132.72
Mar 14, 2025 11:18:26.604711056 CET	49717	443	192.168.2.10	87.240.132.72
Mar 14, 2025 11:18:26.604727983 CET	443	49717	87.240.132.72	192.168.2.10
Mar 14, 2025 11:18:26.697189093 CET	49718	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:26.697237968 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:26.697305918 CET	49718	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:26.697524071 CET	49718	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:26.697544098 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.157958984 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.158097029 CET	49718	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:27.158828974 CET	49718	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:27.158839941 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.159094095 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.159569025 CET	49718	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:27.204324961 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.282644033 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.282708883 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.282747984 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.282787085 CET	49718	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:27.282797098 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.282816887 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.282864094 CET	49718	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:27.282875061 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.282932043 CET	49718	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:27.283991098 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.284514904 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.284553051 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.284604073 CET	49718	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:27.284616947 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.284732103 CET	49718	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:27.290611029 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.310020924 CET	443	49717	87.240.132.72	192.168.2.10
Mar 14, 2025 11:18:27.310148954 CET	49717	443	192.168.2.10	87.240.132.72
Mar 14, 2025 11:18:27.315855980 CET	49717	443	192.168.2.10	87.240.132.72
Mar 14, 2025 11:18:27.315876007 CET	443	49717	87.240.132.72	192.168.2.10
Mar 14, 2025 11:18:27.316118002 CET	443	49717	87.240.132.72	192.168.2.10
Mar 14, 2025 11:18:27.316698074 CET	49717	443	192.168.2.10	87.240.132.72
Mar 14, 2025 11:18:27.339253902 CET	49718	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:27.339268923 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.352366924 CET	443	49703	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:27.352479935 CET	49703	443	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:27.352839947 CET	49703	443	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:27.352859974 CET	443	49703	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:27.360332012 CET	443	49717	87.240.132.72	192.168.2.10
Mar 14, 2025 11:18:27.369256973 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.369302988 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.369347095 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.369399071 CET	49718	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:27.369399071 CET	49718	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:27.369424105 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.369440079 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.369570971 CET	49718	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:27.369800091 CET	49718	443	192.168.2.10	104.21.29.163
Mar 14, 2025 11:18:27.369817019 CET	443	49718	104.21.29.163	192.168.2.10
Mar 14, 2025 11:18:27.637476921 CET	443	49717	87.240.132.72	192.168.2.10
Mar 14, 2025 11:18:27.637550116 CET	443	49717	87.240.132.72	192.168.2.10
Mar 14, 2025 11:18:27.637689114 CET	49717	443	192.168.2.10	87.240.132.72
Mar 14, 2025 11:18:27.655704021 CET	49717	443	192.168.2.10	87.240.132.72
Mar 14, 2025 11:18:27.655728102 CET	443	49717	87.240.132.72	192.168.2.10
Mar 14, 2025 11:18:27.659014940 CET	49704	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:27.663750887 CET	80	49704	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:28.009850025 CET	49678	443	192.168.2.10	20.189.173.26
Mar 14, 2025 11:18:28.035162926 CET	80	49704	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:28.078433037 CET	49711	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:28.083267927 CET	80	49711	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:28.090396881 CET	49704	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:28.305164099 CET	80	49711	185.50.25.7	192.168.2.10
Mar 14, 2025 11:18:28.323350906 CET	49678	443	192.168.2.10	20.189.173.26
Mar 14, 2025 11:18:28.357650042 CET	49711	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:18:28.761045933 CET	49672	443	192.168.2.10	204.79.197.203
Mar 14, 2025 11:18:28.932204008 CET	49678	443	192.168.2.10	20.189.173.26
Mar 14, 2025 11:18:30.137840033 CET	49678	443	192.168.2.10	20.189.173.26
Mar 14, 2025 11:18:32.543246984 CET	49678	443	192.168.2.10	20.189.173.26
Mar 14, 2025 11:18:37.354357004 CET	49678	443	192.168.2.10	20.189.173.26
Mar 14, 2025 11:18:38.372529030 CET	49672	443	192.168.2.10	204.79.197.203
Mar 14, 2025 11:18:46.964440107 CET	49678	443	192.168.2.10	20.189.173.26
Mar 14, 2025 11:19:03.332746983 CET	49689	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:19:03.332777977 CET	443	49689	142.250.186.97	192.168.2.10
Mar 14, 2025 11:19:09.058594942 CET	49701	80	192.168.2.10	151.101.194.137
Mar 14, 2025 11:19:09.063303947 CET	80	49701	151.101.194.137	192.168.2.10
Mar 14, 2025 11:19:09.401993036 CET	49696	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:19:09.401994944 CET	49697	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:19:09.407658100 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:19:09.407675982 CET	80	49696	185.50.25.7	192.168.2.10
Mar 14, 2025 11:19:09.557657957 CET	49700	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:19:09.562437057 CET	80	49700	185.50.25.7	192.168.2.10
Mar 14, 2025 11:19:09.605561972 CET	49705	80	192.168.2.10	104.21.29.163
Mar 14, 2025 11:19:09.610210896 CET	80	49705	104.21.29.163	192.168.2.10
Mar 14, 2025 11:19:10.261969090 CET	49706	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:19:10.266697884 CET	80	49706	185.50.25.7	192.168.2.10
Mar 14, 2025 11:19:10.277582884 CET	49707	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:19:10.277689934 CET	49708	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:19:10.282412052 CET	80	49707	185.50.25.7	192.168.2.10
Mar 14, 2025 11:19:10.282428026 CET	80	49708	185.50.25.7	192.168.2.10
Mar 14, 2025 11:19:10.870980978 CET	49713	80	192.168.2.10	172.67.149.117
Mar 14, 2025 11:19:10.876888037 CET	80	49713	172.67.149.117	192.168.2.10
Mar 14, 2025 11:19:13.043963909 CET	49704	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:19:13.048806906 CET	80	49704	185.50.25.7	192.168.2.10
Mar 14, 2025 11:19:13.308773041 CET	49711	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:19:13.313553095 CET	80	49711	185.50.25.7	192.168.2.10
Mar 14, 2025 11:19:16.482407093 CET	49728	443	192.168.2.10	142.250.186.132
Mar 14, 2025 11:19:16.482448101 CET	443	49728	142.250.186.132	192.168.2.10
Mar 14, 2025 11:19:16.482539892 CET	49728	443	192.168.2.10	142.250.186.132
Mar 14, 2025 11:19:16.482918978 CET	49728	443	192.168.2.10	142.250.186.132
Mar 14, 2025 11:19:16.482938051 CET	443	49728	142.250.186.132	192.168.2.10
Mar 14, 2025 11:19:17.112207890 CET	443	49728	142.250.186.132	192.168.2.10
Mar 14, 2025 11:19:17.112546921 CET	49728	443	192.168.2.10	142.250.186.132
Mar 14, 2025 11:19:17.112561941 CET	443	49728	142.250.186.132	192.168.2.10
Mar 14, 2025 11:19:20.281974077 CET	49689	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:19:20.282088995 CET	443	49689	142.250.186.97	192.168.2.10
Mar 14, 2025 11:19:20.282157898 CET	49689	443	192.168.2.10	142.250.186.97
Mar 14, 2025 11:19:27.021537066 CET	443	49728	142.250.186.132	192.168.2.10
Mar 14, 2025 11:19:27.021605015 CET	443	49728	142.250.186.132	192.168.2.10
Mar 14, 2025 11:19:27.021693945 CET	49728	443	192.168.2.10	142.250.186.132
Mar 14, 2025 11:19:28.278439045 CET	49728	443	192.168.2.10	142.250.186.132
Mar 14, 2025 11:19:28.278465033 CET	443	49728	142.250.186.132	192.168.2.10
Mar 14, 2025 11:19:39.404711962 CET	80	49696	185.50.25.7	192.168.2.10
Mar 14, 2025 11:19:39.404812098 CET	49696	80	192.168.2.10	185.50.25.7
Mar 14, 2025 11:19:39.426485062 CET	80	49697	185.50.25.7	192.168.2.10
Mar 14, 2025 11:19:39.426570892 CET	49697	80	192.168.2.10	185.50.25.7

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 11:18:11.874499083 CET	53	64657	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:11.966981888 CET	53	56626	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:13.095062971 CET	53	53275	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:16.418382883 CET	63835	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:16.418555975 CET	60426	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:16.425137043 CET	53	60426	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:16.425152063 CET	53	63835	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:17.659324884 CET	55120	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:17.659548044 CET	62333	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:17.671873093 CET	53	62333	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:17.679672956 CET	53	55120	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:18.764942884 CET	49170	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:18.765235901 CET	64735	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:18.771898985 CET	53	49170	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:18.774791956 CET	53	64735	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:18.779963017 CET	56001	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:18.780263901 CET	58680	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:18.788724899 CET	53	56001	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:18.789747953 CET	53	58680	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:20.116810083 CET	53759	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:20.117371082 CET	60354	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:20.142642021 CET	61701	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:20.143152952 CET	65254	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:20.177129984 CET	53	60354	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:20.204611063 CET	53	65254	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:20.207007885 CET	53	61701	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:20.227648020 CET	53	53759	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:23.512947083 CET	58376	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:23.513087988 CET	50074	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:23.519546032 CET	53	58376	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:23.520159960 CET	53	50074	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:24.048346043 CET	50533	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:24.048516989 CET	61634	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:24.102780104 CET	53	50533	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:24.146511078 CET	53	61634	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:24.400542974 CET	59827	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:24.405296087 CET	63842	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:24.459794044 CET	53	59827	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:24.462892056 CET	53	63842	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:24.585927010 CET	53	50139	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:24.604595900 CET	63967	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:24.604742050 CET	64798	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:24.612358093 CET	53	64798	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:24.657107115 CET	53	63967	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:25.375145912 CET	50281	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:25.375394106 CET	53852	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:25.389646053 CET	53	50281	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:25.460475922 CET	53	53852	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:25.872734070 CET	53741	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:25.872912884 CET	59645	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:25.883943081 CET	53	53741	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:25.960819006 CET	53	59645	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:26.595801115 CET	55113	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:26.596324921 CET	52718	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:26.598402977 CET	56749	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:26.598860025 CET	57667	53	192.168.2.10	1.1.1.1
Mar 14, 2025 11:18:26.603396893 CET	53	55113	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:26.603993893 CET	53	52718	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:26.692465067 CET	53	57667	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:26.696439981 CET	53	56749	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:30.083888054 CET	53	51478	1.1.1.1	192.168.2.10
Mar 14, 2025 11:18:49.130424023 CET	53	53072	1.1.1.1	192.168.2.10
Mar 14, 2025 11:19:11.628321886 CET	53	61848	1.1.1.1	192.168.2.10
Mar 14, 2025 11:19:12.114384890 CET	53	50565	1.1.1.1	192.168.2.10
Mar 14, 2025 11:19:15.238236904 CET	53	49223	1.1.1.1	192.168.2.10
Mar 14, 2025 11:19:26.687545061 CET	138	138	192.168.2.10	192.168.2.255

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 14, 2025 11:18:24.146631956 CET	192.168.2.10	1.1.1.1	c236	(Port unreachable)	Destination Unreachable
Mar 14, 2025 11:18:25.460635900 CET	192.168.2.10	1.1.1.1	c237	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 14, 2025 11:18:16.418382883 CET	192.168.2.10	1.1.1.1	0x6e91	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:16.418555975 CET	192.168.2.10	1.1.1.1	0xbb4b	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 14, 2025 11:18:17.659324884 CET	192.168.2.10	1.1.1.1	0x218b	Standard query (0)	kjhgt55555555555.blogspot.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:17.659548044 CET	192.168.2.10	1.1.1.1	0xa79c	Standard query (0)	kjhgt55555555555.blogspot.com	65	IN (0x0001)	false
Mar 14, 2025 11:18:18.764942884 CET	192.168.2.10	1.1.1.1	0x6e4	Standard query (0)	www.blogger.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:18.765235901 CET	192.168.2.10	1.1.1.1	0x898d	Standard query (0)	www.blogger.com	65	IN (0x0001)	false
Mar 14, 2025 11:18:18.779963017 CET	192.168.2.10	1.1.1.1	0x635c	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:18.780263901 CET	192.168.2.10	1.1.1.1	0x65e5	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Mar 14, 2025 11:18:20.116810083 CET	192.168.2.10	1.1.1.1	0x86dc	Standard query (0)	u967289v.beget.tech	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:20.117371082 CET	192.168.2.10	1.1.1.1	0x67ba	Standard query (0)	u967289v.beget.tech	65	IN (0x0001)	false
Mar 14, 2025 11:18:20.142642021 CET	192.168.2.10	1.1.1.1	0xa50e	Standard query (0)	u967289v.beget.tech	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:20.143152952 CET	192.168.2.10	1.1.1.1	0x7783	Standard query (0)	u967289v.beget.tech	65	IN (0x0001)	false
Mar 14, 2025 11:18:23.512947083 CET	192.168.2.10	1.1.1.1	0xf09a	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:23.513087988 CET	192.168.2.10	1.1.1.1	0xcdd6	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 14, 2025 11:18:24.048346043 CET	192.168.2.10	1.1.1.1	0x8bf2	Standard query (0)	img3.proshkolu.ru	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:24.048516989 CET	192.168.2.10	1.1.1.1	0x1dea	Standard query (0)	img3.proshkolu.ru	65	IN (0x0001)	false
Mar 14, 2025 11:18:24.400542974 CET	192.168.2.10	1.1.1.1	0x9922	Standard query (0)	u967289v.beget.tech	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:24.405296087 CET	192.168.2.10	1.1.1.1	0xc959	Standard query (0)	u967289v.beget.tech	65	IN (0x0001)	false
Mar 14, 2025 11:18:24.604595900 CET	192.168.2.10	1.1.1.1	0xf99b	Standard query (0)	img3.proshkolu.ru	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:24.604742050 CET	192.168.2.10	1.1.1.1	0xcb12	Standard query (0)	img3.proshkolu.ru	65	IN (0x0001)	false
Mar 14, 2025 11:18:25.375145912 CET	192.168.2.10	1.1.1.1	0x6170	Standard query (0)	data3.proshkolu.ru	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:25.375394106 CET	192.168.2.10	1.1.1.1	0x75c	Standard query (0)	data3.proshkolu.ru	65	IN (0x0001)	false
Mar 14, 2025 11:18:25.872734070 CET	192.168.2.10	1.1.1.1	0x389a	Standard query (0)	data3.proshkolu.ru	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:25.872912884 CET	192.168.2.10	1.1.1.1	0xddb3	Standard query (0)	data3.proshkolu.ru	65	IN (0x0001)	false
Mar 14, 2025 11:18:26.595801115 CET	192.168.2.10	1.1.1.1	0xa2d7	Standard query (0)	m.vk.com	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:26.596324921 CET	192.168.2.10	1.1.1.1	0x470	Standard query (0)	m.vk.com	65	IN (0x0001)	false
Mar 14, 2025 11:18:26.598402977 CET	192.168.2.10	1.1.1.1	0x4dcb	Standard query (0)	data3.proshkolu.ru	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:26.598860025 CET	192.168.2.10	1.1.1.1	0x576b	Standard query (0)	data3.proshkolu.ru	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 14, 2025 11:18:16.425137043 CET	1.1.1.1	192.168.2.10	0xbb4b	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 14, 2025 11:18:16.425152063 CET	1.1.1.1	192.168.2.10	0x6e91	No error (0)	www.google.com		142.250.186.132	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:17.671873093 CET	1.1.1.1	192.168.2.10	0xa79c	No error (0)	kjhgt55555555555.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 11:18:17.679672956 CET	1.1.1.1	192.168.2.10	0x218b	No error (0)	kjhgt55555555555.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 11:18:17.679672956 CET	1.1.1.1	192.168.2.10	0x218b	No error (0)	blogspot.l.googleusercontent.com		142.250.186.97	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:18.771898985 CET	1.1.1.1	192.168.2.10	0x6e4	No error (0)	www.blogger.com	blogger.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 11:18:18.771898985 CET	1.1.1.1	192.168.2.10	0x6e4	No error (0)	blogger.l.google.com		216.58.206.73	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:18.774791956 CET	1.1.1.1	192.168.2.10	0x898d	No error (0)	www.blogger.com	blogger.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 11:18:18.788724899 CET	1.1.1.1	192.168.2.10	0x635c	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 11:18:18.788724899 CET	1.1.1.1	192.168.2.10	0x635c	No error (0)	plus.l.google.com		142.250.74.206	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:18.789747953 CET	1.1.1.1	192.168.2.10	0x65e5	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 14, 2025 11:18:20.207007885 CET	1.1.1.1	192.168.2.10	0xa50e	No error (0)	u967289v.beget.tech		185.50.25.7	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:20.227648020 CET	1.1.1.1	192.168.2.10	0x86dc	No error (0)	u967289v.beget.tech		185.50.25.7	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:23.519546032 CET	1.1.1.1	192.168.2.10	0xf09a	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:23.519546032 CET	1.1.1.1	192.168.2.10	0xf09a	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:23.519546032 CET	1.1.1.1	192.168.2.10	0xf09a	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:23.519546032 CET	1.1.1.1	192.168.2.10	0xf09a	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:24.102780104 CET	1.1.1.1	192.168.2.10	0x8bf2	No error (0)	img3.proshkolu.ru		104.21.29.163	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:24.102780104 CET	1.1.1.1	192.168.2.10	0x8bf2	No error (0)	img3.proshkolu.ru		172.67.149.117	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:24.146511078 CET	1.1.1.1	192.168.2.10	0x1dea	No error (0)	img3.proshkolu.ru			65	IN (0x0001)	false
Mar 14, 2025 11:18:24.459794044 CET	1.1.1.1	192.168.2.10	0x9922	No error (0)	u967289v.beget.tech		185.50.25.7	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:24.612358093 CET	1.1.1.1	192.168.2.10	0xcb12	No error (0)	img3.proshkolu.ru			65	IN (0x0001)	false
Mar 14, 2025 11:18:24.657107115 CET	1.1.1.1	192.168.2.10	0xf99b	No error (0)	img3.proshkolu.ru		172.67.149.117	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:24.657107115 CET	1.1.1.1	192.168.2.10	0xf99b	No error (0)	img3.proshkolu.ru		104.21.29.163	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:25.389646053 CET	1.1.1.1	192.168.2.10	0x6170	No error (0)	data3.proshkolu.ru		172.67.149.117	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:25.389646053 CET	1.1.1.1	192.168.2.10	0x6170	No error (0)	data3.proshkolu.ru		104.21.29.163	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:25.460475922 CET	1.1.1.1	192.168.2.10	0x75c	No error (0)	data3.proshkolu.ru			65	IN (0x0001)	false
Mar 14, 2025 11:18:25.883943081 CET	1.1.1.1	192.168.2.10	0x389a	No error (0)	data3.proshkolu.ru		104.21.29.163	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:25.883943081 CET	1.1.1.1	192.168.2.10	0x389a	No error (0)	data3.proshkolu.ru		172.67.149.117	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:25.960819006 CET	1.1.1.1	192.168.2.10	0xddb3	No error (0)	data3.proshkolu.ru			65	IN (0x0001)	false
Mar 14, 2025 11:18:26.603396893 CET	1.1.1.1	192.168.2.10	0xa2d7	No error (0)	m.vk.com		87.240.132.72	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:26.603396893 CET	1.1.1.1	192.168.2.10	0xa2d7	No error (0)	m.vk.com		87.240.132.78	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:26.603396893 CET	1.1.1.1	192.168.2.10	0xa2d7	No error (0)	m.vk.com		93.186.225.194	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:26.603396893 CET	1.1.1.1	192.168.2.10	0xa2d7	No error (0)	m.vk.com		87.240.132.67	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:26.603396893 CET	1.1.1.1	192.168.2.10	0xa2d7	No error (0)	m.vk.com		87.240.137.164	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:26.603396893 CET	1.1.1.1	192.168.2.10	0xa2d7	No error (0)	m.vk.com		87.240.129.133	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:26.692465067 CET	1.1.1.1	192.168.2.10	0x576b	No error (0)	data3.proshkolu.ru			65	IN (0x0001)	false
Mar 14, 2025 11:18:26.696439981 CET	1.1.1.1	192.168.2.10	0x4dcb	No error (0)	data3.proshkolu.ru		104.21.29.163	A (IP address)	IN (0x0001)	false
Mar 14, 2025 11:18:26.696439981 CET	1.1.1.1	192.168.2.10	0x4dcb	No error (0)	data3.proshkolu.ru		172.67.149.117	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

kjhgt55555555555.blogspot.com

www.blogger.com

apis.google.com

www.google.com

u967289v.beget.tech

img3.proshkolu.ru

data3.proshkolu.ru

m.vk.com

code.jquery.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49696	185.50.25.7	80	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 11:18:23.127968073 CET	434	OUT	GET / HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:23.459454060 CET	1236	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 10:18:23 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=30 Vary: Accept-Encoding X-Powered-By: PHP/5.6.40 Content-Encoding: gzip Data Raw: 63 36 36 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 5a e1 6f 13 47 16 ff 5e a9 ff c3 b2 52 11 20 db 1b 87 10 20 89 8d 5a a0 2a 12 2d 15 0d 6a 4f 14 ad c6 bb 63 ef e0 dd 9d ed ee ac 9d 10 45 02 d2 f6 ae 2a 85 36 77 52 aa 5e af 55 af f9 76 3a 29 a4 cd 11 a0 04 a9 7f c1 fa 3f ba f7 de ae ed b5 63 d3 04 ee cb 49 26 f2 ee ce cc 7b bf 79 f3 e6 cd 9b f7 86 59 38 72 e1 ca f9 c5 3f bd 7f 51 73 94 e7 6a ef 5f 7b eb f2 a5 f3 9a 5e 34 8c 0f df 7c ff ed 2b 57 af bd 6b 18 17 16 2f 68 1f bd b3 f8 ee 65 ed 5d 59 13 2e d7 ca a5 29 c3 b8 f8 9e ae e9 8e 52 c1 9c 61 b4 db ed 52 9b 05 75 19 c6 5e 49 86 0d 64 31 96 10 b1 e8 11 4b 79 aa 64 2b 5b af be fe da 02 f5 b3 e4 b9 7e 54 19 60 3f 49 8c e5 b3 67 cf a6 9c ba 66 b9 2c 02 a2 9b 91 b9 cc 23 bd ba e0 70 66 57 17 3c ae 98 86 8c 45 fe 49 2c 5a 15 fd bc f4 15 f7 55 71 71 39 e0 c0 94 96 2a ba e2 4b ca 40 a0 79 cd 72 58 18 71 55 b9 b6 f8 76 f1 0c 09 e1 0a bf a9 85 dc ad e8 91 23 43 65 c5 4a 13 c0 a9 6b 4e c8 eb 15 5d f8 36 5f 32 eb 20 78 64 d4 59 cb 74 65 43 96 80 e0 dc 29 5d 33 [TRUNCATED] Data Ascii: c66ZoG^R Z-jOcE6wR^Uv:)?cI&{yY8r?Qsj_{^4\|+Wk/he]Y.)RaRu^Id1Kyd+[~T`?Igf,#pfW<EI,ZUqq9K@yrXqUv#CeJkN]6_2 xdYteC)]3+zKvVN-a"-Fsy4X<bo-WjPK}PT[JrpyH-,^n7po\-ngap~;bJ(Wa<K%[Ztnw$XXOgV;F@iQh,6/$r}K7g;eIZWfUVes57RG-XEo5 xFDjRPsy;AH`phO\C)%C,HgeS`MKYKH2&eM=`:CtbZiFJXMF#\|QDegiKE~#g[US`I[XlPhYS3!}\|zE\|!4}GakH3-h@rw^1l]c+}hH(GF"k7>JR$NTF]J_j(7*.YKZ5SAq1GR>5OPFNSq)
Mar 14, 2025 11:18:23.459470987 CET	224	IN	Data Raw: a1 19 b4 64 8d 40 58 46 a4 6c a3 3c 45 ff 8c 99 72 fa 9a 3a 3b 33 3b 55 64 76 7d b6 76 f2 f4 99 33 d6 34 e3 e5 b3 b5 52 43 d4 41 a7 2e b8 43 f0 6a e0 f9 d0 af 75 6e 93 ff bb 0b be 70 1b fc dd 97 c9 63 0d ab c1 e9 dd e9 dc c5 e9 32 32 e1 fa 62 26 Data Ascii: d@XFl<Er:;3;Udv}v34RCA.Cjunpc22b&Zgg?O=p{t+Tisy/ynT&s_;)zd1g+S5WP91")C0W~=`aU
Mar 14, 2025 11:18:23.459482908 CET	1236	IN	Data Raw: 46 fd 14 c4 fe 14 e5 d5 70 af 01 f9 b9 c7 84 3b 07 78 e4 e8 6d 7b 48 58 91 2d 56 e1 07 e0 4d fb 8e 5b cf 1b 4e 5d c0 1e a7 a7 8b 4c 36 84 af e7 17 af 9d be dc ea a1 64 fd 11 74 8e d3 01 46 71 38 e1 02 68 69 cb d0 1e 27 60 af 7d 8c 8c 5a 6f 22 46 Data Ascii: Fp;xm{HX-VM[N]L6dtFq8hi'`}Zo"FH:PnC-VJq7otnKy8skrFJ:h54Ug)6 =!"CXohq^KsCTtCi}+*lxa \4~Jac%F
Mar 14, 2025 11:18:23.459496021 CET	752	IN	Data Raw: b9 34 2f 04 9c af c9 d0 1f a2 af 1c cb 11 2b 47 86 7d 96 1f a0 ab e7 fd 9d 03 a7 01 b2 ca 17 0c bb af b0 11 43 1f cd 87 87 e0 7d 95 8d d5 0e 06 e3 66 e0 b2 65 08 cc 87 a6 06 e6 fb 11 64 5f 4f f2 73 c8 62 5b c8 2e bd 2f 55 f7 30 0f 19 7e c6 83 8e Data Ascii: 4/+G}C}fed_Osb[./U0~<q.W1V`'!9k%m1@2<$+rMBffOSoH!N4Pv3@5O3 l&+gd!Xx[o/I
Mar 14, 2025 11:18:23.513892889 CET	319	OUT	GET /code.js?1 HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:23.742619038 CET	1116	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 10:18:23 GMT Content-Type: application/x-javascript Last-Modified: Sun, 27 Nov 2016 21:38:04 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=30 Vary: Accept-Encoding ETag: W/"583b523c-652" Expires: Fri, 21 Mar 2025 10:18:23 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 32 63 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 85 54 cb 6a db 40 14 dd 17 fa 0f 37 72 21 36 51 65 0a a1 a1 f2 63 d1 a4 81 66 d1 2e ba 0d 04 59 1a 5b c2 8a 46 cc 48 4e 42 30 24 0e a5 85 06 4a bb 2c 94 2e fa 03 a6 24 25 69 49 f2 0b 33 7f d4 3b 7a d8 92 5c 27 02 23 cd f1 3d 77 e6 dc 73 a4 91 c5 c0 76 89 3d 24 0c 3a 70 fc f8 11 e0 35 a0 26 f4 e3 c0 8e 3c 1a d4 1b 0a 4d 71 75 8d 90 e0 d3 81 17 60 f9 93 ba 56 4b 9e b5 86 31 b2 fc 7a a3 55 ae 0b 2d ce 0f 28 73 b2 d2 7c b9 a4 da b6 c2 c8 76 ad 3d ee e5 84 02 f2 00 67 48 8e 2a 1c 44 0a 9c 39 4b d5 f0 d8 b6 09 e7 3a d4 08 63 94 e1 3d 63 21 c3 8d f6 fd fa ea 6a 99 e4 f5 eb 2b 89 d0 46 3e a2 fc 62 24 8a 59 50 9a 44 9f da 31 2f 9d 74 0c c4 e7 a4 4a 55 4d f3 91 2c f4 ad f4 2e 8c 6e b1 fd f2 2d 12 c1 46 48 79 54 d7 12 97 8d d0 0d 35 1d 8e f3 7e e6 cc 23 3d 75 d5 4c 6f 7a d1 0d b3 b8 d0 8b 33 37 8b 8b b1 3e 0f 8d 63 45 d6 7f 35 e5 c6 31 c2 95 61 46 68 31 4e 76 de bd 7d 93 52 4a 53 af 0c 0b 29 46 e2 d7 5e 44 0e 23 e8 74 40 9b d9 b6 6c ab dc f1 8a bf 9a f8 2a 7e 89 4b [TRUNCATED] Data Ascii: 2c8Tj@7r!6Qecf.Y[FHNB0$J,.$%iI3;z\'#=wsv=$:p5&<Mqu`VK1zU-(s\|v=gHD9K:c=c!j+F>b$YPD1/tJUM,.n-FHyT5~#=uLoz37>cE51aFh1Nv}RJS)F^D#t@l~Kq!D\#N~gf8;k(`MX #BU8$spUB;\|%oC'[qQZ_IA6,'A6}?+zLL cP"8z>qj\|iOmKpcLT_Ju:xt,{8`4rj/hA_8Q\mkfaK9T]m&uw<Mqy?FV\cvM'~ b5MTYy"h+KT<W]h/O=$f#sD$i/\|s_oRAER0
Mar 14, 2025 11:18:24.091782093 CET	384	OUT	GET /index_files/p HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:24.387774944 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 10:18:24 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT ETag: "2b-5424f2bd85240" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Mar 14, 2025 11:19:09.401993036 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49697	185.50.25.7	80	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 11:18:23.513979912 CET	348	OUT	GET /index_files/s_cfmxw.css HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:23.753175974 CET	1236	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 10:18:23 GMT Content-Type: text/css Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=30 Vary: Accept-Encoding ETag: W/"583b5241-251f6" Expires: Fri, 21 Mar 2025 10:18:23 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 37 65 34 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c4 bd 69 73 1b c7 b2 28 f8 7d 22 e6 3f 60 c2 e1 38 57 cf 20 d4 68 ec 64 dc 99 cb 05 94 f7 45 b2 bc e8 0b a2 01 34 c8 36 b1 09 0d 90 92 18 fc ef 53 7b 65 66 65 75 83 92 67 de a1 8f 4d 76 65 65 ed 59 59 b9 b6 a6 87 fd 7e b3 6e b6 ca 55 b6 5c 4e cc 5f d3 cd fc 63 b3 58 6f 0f fb 66 99 2f f3 d9 be b9 cf 3f ec b3 5d 9e 3d 2e 36 eb fd c9 22 5b 15 cb 8f a7 3f 1e 66 c5 3c 6b bc da 65 eb 79 de fc 23 df cd b3 75 d6 fc 3d bb dd ac b2 e6 f9 ae c8 96 cd 37 d9 ba 3c 79 93 ef 8a 45 d3 40 cb 2f 67 0a 4b 59 7c ca 4f 57 f9 bc 38 ac 9e 5a f1 7e cc e7 cd f9 b2 39 df 37 17 9b dd aa 79 db 6e de a6 cd db 6e f3 b6 c7 f7 b0 79 58 3e ae b2 dd 4d b1 3e 4d ce b6 d9 7c 5e ac 6f 4e 93 a7 db fd 6a f9 f8 50 cc f7 b7 a7 ed 24 f9 fa ec 36 2f 6e 6e f7 ea f7 27 d9 cc e3 34 9b dd dd ec 36 87 f5 fc f4 ab 45 4f fe 9c 9d ac ca 13 89 56 f5 f4 24 9b ff 73 28 75 8d b3 93 87 7c 7a 57 ec 23 a5 ec 57 3b c4 d3 d3 93 d5 e6 d3 c9 62 33 3b 94 27 c5 7a 9d ef f0 a0 99 72 35 ce f0 fb e3 74 b3 9b e7 3b 34 [TRUNCATED] Data Ascii: 7e4ais(}"?`8W hdE46S{efeugMveeYY~nU\N_cXof/?]=.6"[?f<key#u=7<yE@/gKY\|OW8Z~97ynnyX>M>M\|^oNjP$6/nn'46EOV$s(u\|zW#W;b3;'zr5t;4L7l/\|9'S3be`>neFd)Nly8]oyd<G;CvgbrUMbTn8f~_Df15+vS5FvH+0$[4knL}{V}}jfbBy9vF/vS{,L\,y45DO0#=Egb"Ovt*N.t#hu-WB13W??nX='AKWqo\|qfc/nL=o MQ_&'t&V^CO^AFe%(tA"So@@Sjgsu11,i\|;YU<eFs&bA6jGuN@}0'1ctOz`vz
Mar 14, 2025 11:18:23.753200054 CET	1236	IN	Data Raw: a9 08 43 f9 72 b5 99 16 cb fc a5 81 6a dd 14 8b ff a7 fd a2 b1 de 9c ec 72 41 f0 f6 67 68 5b 9c 99 8b a7 87 5a 61 b6 bd ec 4b 5b b6 2f 09 95 98 1b 48 b0 ca f7 07 71 bf e1 59 6b b7 7a f9 ca 2e e5 a0 37 1c 9f 5f 9e d9 cb af 91 34 64 83 0e d7 64 b7 Data Ascii: CrjrAgh[ZaK[/HqYkz.7_4ddy&IX%CL:CgzZ1bm1}6Y=uliVp%2vgkj2\|A4?/y2mH&}Z5kn8r,*n=n+At>\|5zW-q
Mar 14, 2025 11:18:23.753217936 CET	1236	IN	Data Raw: a4 46 bc e1 24 90 01 7f da 48 fa 2b 1f e8 d9 6e 32 dd af 1b dc c0 13 c0 32 e1 69 3d 81 43 d9 17 5b 7f 77 19 5a 6d 49 82 a0 07 5f cd 04 5c 39 d9 e7 82 4f d6 7d 73 74 57 20 81 a5 6a c8 a7 6a 46 f2 f9 37 b1 7a 4a f2 34 51 85 a8 d7 01 43 49 60 ee b3 Data Ascii: F$H+n22i=C[wZmI_\9O}stW jjF7zJ4QCI`!T2R ":%ZlN`]%yT9.f`koEw\|zvOP,5N?!%419p[N19P[GnZPibme#'ep
Mar 14, 2025 11:18:23.753230095 CET	1236	IN	Data Raw: da ec 65 b6 83 95 84 8e 07 76 62 01 f7 bd 95 cd e4 8c 30 05 1a bb 57 c6 ce 16 7d c4 8b 77 e7 83 b6 94 98 09 78 f8 e4 1d 6a aa bc ba 9d ac 37 53 47 dc f5 56 d0 5d d3 45 8e 91 56 27 d5 96 4c 45 bf 57 79 50 64 76 58 47 3e 7d bc c2 4b 56 28 4c 85 9a Data Ascii: evb0W}wxj7SGV]EV'LEWyPdvXG>}KV(L}Xi9sQ8"h#R}y`~0}[ i]]oIlC,XE{Q%&31{eM=X.+lYi[?ZK_}td2D
Mar 14, 2025 11:18:23.753246069 CET	1236	IN	Data Raw: 52 ad b7 f2 57 59 70 7f b6 a1 b2 a7 0f ef cf 9e b9 3f f1 ed b7 2e b4 27 22 de 91 f8 3c 76 f3 15 9c 21 e7 d2 3c 94 3f 20 00 85 46 55 1d 7a a2 30 12 2f 5e 61 ad 63 3c 29 30 c5 5e 87 9f b7 c5 ac 64 a8 09 e3 23 a8 fd 67 a1 a4 d2 19 c2 60 97 98 0e 96 Data Ascii: RWYp?.'"<v!<? FUz0/^ac<)0^d#g`weWM{Y]Do~1e)-7eHj._PBZ/946&8<nCf}6iYyK';Cq5ok@{Q8Oo
Mar 14, 2025 11:18:23.753264904 CET	1120	IN	Data Raw: e1 82 ac 6b b5 f1 56 77 91 67 dd e9 2c 16 bd 33 6e c0 8e 3b d2 e0 50 5f 5e 5d 8d c6 5d 00 b8 5d 1e d0 bb 55 7a 48 0f f2 39 b7 1e 84 9e 40 7e 3b 90 a4 9e 40 4e a9 95 ca c3 af 76 05 18 42 6b 64 8e b6 ef 48 e0 8a fd cd 7f b8 31 f9 8e e3 c7 bc 3d 66 Data Ascii: kVwg,3n;P_^]]]UzH9@~;@NvBkdH1=fp\Y$Brz8g}?%{eS#y9p\t>'~{S2`r4E}Qg,h{"q=7Yb(%iu{Rw,@dcutMy )eTWO
Mar 14, 2025 11:18:23.753277063 CET	1236	IN	Data Raw: 26 d2 68 c3 1d 0b 2e 3f 09 01 8e 86 a5 34 d6 51 91 20 3f 86 6d 27 c8 02 ad 03 2d 8f fa af 5a 1a ca 8c c4 12 c6 b0 00 39 0d 1a fd 66 00 17 10 f5 0e f3 d2 8d 55 2e 8c 7d 10 57 a2 88 1e a2 8d 0c 06 69 52 93 95 9a b1 6d b4 e6 9b 99 fe 95 c1 88 21 4d Data Ascii: &h.?4Q ?m'-Z9fU.}WiRm!M`-n^\|?#%L$d&RxuQ/f!xn(f%SR<aZ+K}dqX.O"i\vB)FoterS2P!E_zW' P]
Mar 14, 2025 11:18:23.753290892 CET	1236	IN	Data Raw: b4 37 01 da 37 75 48 83 5d 64 aa 18 56 bd 36 15 55 4c 5b ab 26 61 b5 87 01 c4 16 d9 aa 58 7e 3c fd f1 30 2b e6 59 e3 95 78 83 cc f3 e6 3e bb dd ac b2 a6 98 ee 79 b6 ce 42 74 c1 85 05 c2 ab 23 51 39 f2 51 06 39 49 e9 8d ef 4b 20 3f 22 c8 32 27 3f Data Ascii: 77uH]dV6UL[&aX~<0+Yx>yBt#Q9Q9IK ?"2'?wq@*54?`~vX]jN@>]"pH=k c2q3e aao`p.7JRkiliqhV.hL5@A+AbQlI,<\>0`2Im
Mar 14, 2025 11:18:23.753303051 CET	1236	IN	Data Raw: 0e 0b 8b 7b 15 90 11 59 af 5b 8c 21 91 da 0e 0c 01 49 3b 18 a1 7a f2 db 54 40 fc fa 40 90 46 b0 91 fc b6 81 d6 0f b2 78 bd 51 f3 df c0 c6 0d 7a 62 a5 a5 6d 43 8a 6e 78 91 73 f2 75 a3 db 43 4b a4 a3 1c 1d 8b 5d 05 7d ed 71 0a 9d f0 5e 0d 55 3e d6 Data Ascii: {Y[!I;zT@@FxQzbmCnxsuCK]}q^U>z`xxX+3r+r59[H#k&/.ovU-$=}1;H/GnVG=OE\Ll:`cMr0eF/Y_"ymQg:1oK!O'1A#&\|[v
Mar 14, 2025 11:18:23.753321886 CET	672	IN	Data Raw: 1b 51 e2 df 08 29 7a 7f 37 c9 96 93 8f 3a 12 90 52 a3 cb df 4a db 54 65 71 e3 7f 3d 52 47 58 18 ec 82 38 b7 d9 78 b5 c6 84 9b 22 9b 38 7f 07 f1 4d af d7 69 b6 d0 19 16 9c b5 42 f8 5a b7 9b 82 84 4b f1 cc 1e cd d4 1b 18 1b 90 8f 55 d6 09 35 76 04 Data Ascii: Q)z7:RJTeq=RGX8x"8MiBZKU5vRauc\|^#HB?6^mht\zya$pI lY&exr5`+&4XRYLP#6nj kI}dff\8+>)B)
Mar 14, 2025 11:18:23.757953882 CET	1236	IN	Data Raw: 24 d4 8a 19 26 30 21 de 28 29 97 c2 8d 1a c2 a3 b9 f8 b0 8f 44 1c ea 8a 3d 64 84 5e 60 57 45 a9 80 ca 72 47 51 0b 66 69 0d 0d f5 55 b0 47 6a cf 45 aa 01 05 85 74 71 3a 23 4f de 2e 9d fa 46 4b 9c 86 04 65 72 50 9b 1c 68 9f 13 e8 93 da 4d 1c a9 01 Data Ascii: $&0!()D=d^`WErGQfiUGjEtq:#O.FKerPhMDxA'$2E~J1;8Pv)U_\Kjuc@Mdz4-3u$n>7w?BTYxmB_/fE#.fl1RmM;VOZaHI6!E
Mar 14, 2025 11:18:24.091150999 CET	386	OUT	GET /index_files/hit HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:24.391599894 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 10:18:24 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT ETag: "2b-5424f2bd85240" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49700	185.50.25.7	80	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 11:18:23.520144939 CET	347	OUT	GET /index_files/s_yzgt.css HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:24.227250099 CET	1236	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 10:18:24 GMT Content-Type: text/css Last-Modified: Sun, 27 Nov 2016 21:38:08 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=30 Vary: Accept-Encoding ETag: W/"583b5240-df79" Expires: Fri, 21 Mar 2025 10:18:24 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 32 31 65 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 5d e9 8e e3 38 92 fe 3f c0 bc 83 17 85 c2 74 0d 6c b7 2e 4b 72 fa c7 0e 76 77 e6 25 16 0b 43 b6 e5 4c 21 65 cb 6d c9 99 55 9d c8 77 1f de 67 50 a4 5d 59 47 6f 27 6a 0e a7 14 24 83 c1 60 30 18 fc 18 fa c7 a1 de 35 d5 a4 df 9e eb fa 38 a9 8e bb c9 2f 87 ea f3 ec b9 d9 0d 0f 77 49 16 9d 3e 7f 7a 99 6f 2e c3 d0 1d 5f 4e d5 6e d7 1c ef ef f2 d3 e7 49 9c 9c 3e bf ce 8f 75 75 5e 6f 06 e3 55 84 5f f5 87 aa 6d d7 b4 e4 94 fd 65 91 67 88 bc c0 d4 0f 1b ed 79 89 9e 47 af f3 03 7a fc d0 1d ea 17 ca 4e ba c0 a4 87 87 86 3e dc 54 db c7 fb 73 77 39 ee 66 cd a1 ba af ef 2e e7 f6 97 5f c9 cf fe d7 43 b7 69 da fa d7 7e dd 76 f7 dd fc 74 bc ff cf f8 13 2d fb f4 78 45 e9 a7 47 b3 82 cd fa d8 0d cd fe 0b e7 75 d6 d6 fb 01 f7 7b c5 1f 9c 9b fb 07 fa 04 4b f2 a1 26 7f 26 f3 22 8a eb 03 af 81 57 42 3b 16 2f 94 e2 a4 3e 2c 43 a3 42 2a d6 c3 03 2b ba de 22 de 87 fa ac f3 21 24 c4 ea 0f eb 25 25 26 9d cc 3e 19 8c b0 1a 15 a6 27 b7 34 a0 b7 41 6b c4 65 2d f6 8d 5e 8b 0e 11 e2 [TRUNCATED] Data Ascii: 21ee]8?tl.Krvw%CL!emUwgP]YGo'j$`058/wI>zo._NnI>uu^oU_megyGzN>Tsw9f._Ci~vt-xEGu{K&&"WB;/>,CB+"!$%%&>'4Ake-^013TiB\|H)vGEPus''kyz8PQlFXo9f6P/fxnl{^mhVh?nwjY%h}s&{::$VJS7C}bd0?;qx-7x1ykj{ndbVn\!AyCH+Y>7^4.YQE!Y\&V$vTvc"-/cDBS;,H1w)q?1X?4Kfv\=W_Mdz>5<-9fd-WV%c\|8yuc3\|W?5zvj>\%V'D&h___n)j\|1b1AjtsFCnS/
Mar 14, 2025 11:18:24.227263927 CET	1236	IN	Data Raw: 2d 55 9d d2 64 c4 29 2d 2d a5 2a 74 a7 34 9d a7 71 e9 74 4a 4b cb 29 4d 6d 2d 4d 02 9c d2 fc 06 a7 74 cc 25 2d be de 25 0d 75 48 81 89 79 bd 47 2a fc d1 d4 ec 49 7e 8d 3f ba f4 fb a3 96 56 5d e3 3a 5c e3 7c a6 89 5c 1a d3 c4 e7 7c e6 37 3a 9f df Data Ascii: -Ud)--t4qtJK)Mm-Mt%-%uHyGI~?V]:\\|\\|7:\|Sr;KjTag^,~.7p?t>>`t6N];Ts@Yj$Bx3EAL-9Oog&YW9g9,K4y3W3O\
Mar 14, 2025 11:18:24.227274895 CET	448	IN	Data Raw: 5a 2f 57 0c 4b b6 2c 0a e0 6a d2 71 02 c8 b5 84 c6 1c 7a cd 87 48 f5 77 5a ac c3 7a 8c c4 7c d6 9e af eb cf ec 15 16 de 1e b9 93 03 b1 a8 ab 91 cd 5d ae b7 28 ab 20 9a 6b e9 8b 4a 66 0e 96 ba 58 3f eb db 2a ee 20 b1 c7 f8 ff 8f dd 1a ef 94 ec 08 Data Ascii: Z/WK,jqzHwZz\|]( kJfX?* inJaX2F;SFJYcj^:dp.\#_ImYU\|U>!]oC37)iTlmk;s5}Mx}t?dWQ1;srw9(&:""
Mar 14, 2025 11:18:24.227281094 CET	1236	IN	Data Raw: 79 2b 8f 09 68 c0 51 10 6c 18 c1 c6 5c bf c8 49 1e 5b f4 46 c2 2e 55 bb b9 1c 8c 9d 67 a4 3e d6 67 1c 5f 15 18 17 b8 b3 7d d7 36 bb c9 87 7a 8f ff ad b4 a5 95 d6 42 f4 14 f6 04 0d 9e 65 ab 13 b5 ac 55 4c ae 35 d8 0b 5c e1 39 8b 46 e8 f9 ee a1 d9 Data Ascii: y+hQl\I[F.Ug>g_}6zBeUL5\9FK^:\AhM[l@&nb?%~HE#v/l0BsnU!^I%%MZ'ccxIw,uUNf[=Q=DoeKJF;Q@{B'cEMX
Mar 14, 2025 11:18:24.227293015 CET	1236	IN	Data Raw: 04 db 11 4d 5d 03 db e1 48 b3 ff 37 b8 9d 42 19 8f 62 e1 c2 ed 94 86 f0 29 a5 07 b7 13 a7 37 02 77 98 90 df 91 3b ef c8 9d 71 e4 4e 1a ff 14 d0 1d 8b e6 7a e0 8e 75 80 02 18 1c 2f 72 47 c1 4b 7a c1 3b a9 9a a8 6b 0c bf 23 8f be ae 06 f0 00 2b 8a Data Ascii: M]H7Bb)7w;qNzu/rGKz;k#+c%IG< [@xHC1<V<0G"NW~GM<qi!> y 5c@Fz;y<ucvM~$zNO,_KJ8udAy
Mar 14, 2025 11:18:24.227303982 CET	1236	IN	Data Raw: a5 12 05 4d 3e 92 cf b2 f6 f7 62 76 83 35 61 e4 51 3f f8 68 94 ed ff 38 47 cb fc a3 54 91 ec 23 fe 0f 56 03 7a 92 78 aa ee 6b 67 79 a5 0b af af a3 50 ab 30 d9 64 a5 26 9a 42 51 fe f8 e3 f7 14 8c 04 21 7d 9c 24 d7 8a a3 48 bd e2 48 8a 10 71 a4 89 Data Ascii: M>bv5aQ?h8GT#VzxkgyP0d&BQ!}$HHq&\Bm?N(yP(D(I2}?J&TY.*+\|$\7<!4~p"W`N%h3`d!vzfp;'Ox\|e1}KB'
Mar 14, 2025 11:18:24.227313995 CET	1236	IN	Data Raw: 64 b4 74 b2 cc 26 23 d3 57 23 e3 a9 21 25 d4 df 02 3f 6d 4f eb 6a 18 aa ed 43 bd 63 77 df 38 fa 7f 0a df 03 88 5c 65 6c ec 3e bf 8d 45 85 3e 99 d7 9f 91 de 34 47 71 e5 4f 3c b1 20 2c 88 c0 7c 25 b2 30 b3 17 eb 7d f3 59 b9 12 63 dd d0 33 c7 80 b8 Data Ascii: dt&#W#!%?mOjCcw8\el>E>4GqO< ,\|%0}Yc3jF`1\|I{xI}v5qg&LAaxUsylTp@$/tV]Ru(;!pFS6GB>tz=.-4G!W2^[Y9n2vBZb
Mar 14, 2025 11:18:24.227324963 CET	328	IN	Data Raw: 82 3e 88 56 80 99 5e 62 59 f5 7c d1 51 a1 b3 63 d4 3d 75 01 13 ac 89 62 b3 0b d7 f8 a2 cc 1f 8b 53 cd d9 73 f1 9c d2 65 19 b3 80 83 eb 78 46 4f 95 05 9a 1c 5e d1 f5 57 fe 22 16 78 fc 54 84 ad 2d 04 96 6f fb 06 24 66 09 b6 a2 1c 99 4d 99 07 3e 11 Data Ascii: >V^bY\|Qc=ubSsexFO^W"xT-o$fM>s{Ua$AE-8s17-;;$"U^(Q)S=^\TP-gGg/EzV?@N&rr]URUG"{h4GA;=]_E^q}9qe5
Mar 14, 2025 11:18:24.313344955 CET	884	IN	Data Raw: dc 47 d3 e5 04 24 27 cd 38 2f a8 07 2c 34 55 72 42 df e0 2f 27 d3 9b 31 5c 0d 71 e1 ea d8 b0 b0 87 f5 50 08 49 62 2f c4 f1 22 79 84 3f 07 30 99 c7 8b 7e 52 57 7d 3d eb 2e 83 5d 37 3e df 38 0f 60 0b fc 95 68 c7 aa 9c 82 86 d0 c4 aa 7f 99 91 41 9a Data Ascii: G$'8/,4UrB/'1\qPIb/"y?0~RW}=.]7>8`hAFV#TN!JY!/<DzI^SESOG02kU@w!i3vr%B\VkEM5~'i&Z{Qs/&n4h2ihZKAEU}ub@5-MJ
Mar 14, 2025 11:18:24.321341991 CET	415	OUT	GET /index_files/logo.png?2 HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/index_files/s_yzgt.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:24.547420979 CET	1236	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 10:18:24 GMT Content-Type: image/png Content-Length: 1334 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT Connection: keep-alive Keep-Alive: timeout=30 ETag: "583b5241-536" Expires: Sun, 13 Apr 2025 10:18:24 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 7c 00 00 00 19 08 06 00 00 00 f3 27 4a 57 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 04 d8 49 44 41 54 78 da ec 9a 6d 88 16 55 14 c7 47 dd d5 ca cd 74 cb 6a d3 b4 a8 44 22 2b 93 5e 4c 25 0a 94 b2 0f 95 94 84 4a 04 59 69 96 1a 6c 65 60 25 59 f6 a2 bd ae 95 4a e5 42 5a 1f 56 fc e2 63 18 19 2b c8 12 85 6d 68 af c4 f6 6a d9 66 ba ea 96 a5 e6 ee d3 ff e4 7f e4 78 9a 99 67 66 9e 99 75 c0 39 f0 63 e7 ce b9 6f cf bd f7 9c 7b ee 9d ed 56 2c 16 9d 5c 8e 1d e9 ae 9e 4f 03 4b c0 af a0 58 06 ad e0 4d 50 93 0f 6f f6 a4 1b 2d fc 54 f0 31 18 9c 60 dd 3f 81 91 60 5b 3e cc d9 b3 f0 c7 13 9e 6c 91 41 e0 89 7c 88 b3 69 e1 db 52 72 c1 3b 40 ff 7c 98 b3 37 e1 9d f2 9c 56 1b f9 30 67 47 2a 42 4c 8a 97 ae 17 a8 02 17 81 39 60 6c 17 f7 bb 37 18 c1 d8 a3 1d 7c c6 60 b3 4b 8d 05 9c c5 ad b0 2f f8 93 01 eb d7 e0 e0 51 9a cf 13 39 2e a7 80 3f c0 e7 e0 97 23 72 88 85 17 83 c5 29 41 77 b0 21 46 f9 e9 [TRUNCATED] Data Ascii: PNGIHDR\|'JWtEXtSoftwareAdobe ImageReadyqe<IDATxmUGtjD"+^L%JYile`%YJBZVc+mhjfxgfu9co{V,\OKXMPo-T1`?`[>lA\|iRr;@\|7V0gGBL9`l7\|`K/Q9.?#r)Aw!FA{`;'~/b8F6.T=?RWefE(ZsUk{u`Oq\KN\|tb'H/t3h91uFp)<@c&\|+PP^1E%rmaOgh^J3iOcmA\\>Xod7o=e\|&KwF/$'t;YM]sG(JzVIqA%/U:ziQVZoP%\P7e?1p7%/3oAAjz9F.'t<CAb;%/`\|k8s..Wv;=4E\Wq9Dnbd1-/3HLI^7f0@2>5d"(/*}/vO0
Mar 14, 2025 11:18:24.547435999 CET	443	IN	Data Raw: 35 ce 84 cb ca bc 0b dc 07 d6 f2 bc e7 5a fa da 32 27 fc 4e 5a 8d de 3e 6e 71 4f 8f e0 53 a5 bb da 94 bd 52 9f 34 41 b3 47 fd eb 15 2d 65 f4 f3 7c e3 2a 9f 05 5f b0 dd 30 d2 46 6f a6 c7 6b 06 cf cf 51 e5 2b b0 5f a5 c7 f0 84 62 f9 1b 9c 17 67 c2 Data Ascii: 5Z2'NZ>nqOSR4AG-e\|*_0FokQ+_bg;0]<#+/(7OdMKxlE2IwpZf-'Xb0>_"_,K`}+@cy6J>o?+b.CdK3+k<?2)y)
Mar 14, 2025 11:19:09.557657957 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49701	151.101.194.137	80	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 11:18:23.525681019 CET	319	OUT	GET /jquery.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:24.043788910 CET	646	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 33226 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: W/"28feccc0-1764d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 14 Mar 2025 10:18:23 GMT Age: 3264780 X-Served-By: cache-lga21987-LGA, cache-ewr-kewr1740030-EWR X-Cache: HIT, HIT X-Cache-Hits: 123, 3475 X-Timer: S1741947504.925644,VS0,VE0 Vary: Accept-Encoding
Mar 14, 2025 11:18:24.043885946 CET	1236	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 dc bd 79 7b db 46 b2 2f fc ff f9 14 22 c6 87 01 cc 16 45 3a cb 3d 03 ba 85 27 b1 93 49 26 eb 8c 9d 49 32 14 93 07 1b 49 48 dc 44 52 96 15 91 f3 d9 6f fd aa 17 34 16 da 99 73 ee fb bc f7 b9 99 b1 08 a0 f7 ee ea ea aa Data Ascii: y{F/"E:='I&I2IHDRo4sZ.vvoCOg?2_VY/+qS[H.?{zE>?I<{R6zz\gw=n.eGaPXLN%U~v6+
Mar 14, 2025 11:18:24.043895960 CET	224	IN	Data Raw: d7 28 ee 79 5e d8 c0 0f 98 44 07 e0 cc d7 68 3e 2e 74 e5 c1 a4 9c e7 d0 a4 d3 de 5b ac 93 78 f1 f9 9b 78 51 36 4a 27 5a 82 dd 4a 74 cc 92 5e 68 fb c5 b4 d7 f2 f4 55 ba 2d 36 7b 07 56 29 23 a5 50 59 67 00 81 8f 51 a4 f1 32 5f 80 a2 68 1b 4a 6c b7 Data Ascii: (y^Dh>.t[xxQ6J'ZJt^hU-6{V)#PYgQ2_hJlZxDx[jY~*@:}&2!c0/-7X!!v92{&)K8^\Wk<yD+JAc er`.{w)XwA+Wj,&
Mar 14, 2025 11:18:24.043921947 CET	1236	IN	Data Raw: af 51 7c 0e 09 4d c0 3d 9e 8c ea f8 c9 df fa f6 04 08 22 43 a0 a5 c2 db 31 e5 ec c2 2f 68 bd 98 8e 0f 35 92 94 48 b6 40 a4 84 57 56 cd 36 ed 6a 62 dd 12 bd 6e e6 b8 30 14 54 4c b9 78 3b 62 76 2c 89 92 12 bd 99 46 7c 64 2c e3 b7 fe 40 64 bd 34 08 Data Ascii: Q\|M="C1/h5H@WV6jbn0TLx;bv,F\|d,@d4p0.QV!H<I==!F:=\F[X2hzL0T{RUM@<7St4gCxJjy3_-"T`_4m:-9dn
Mar 14, 2025 11:18:24.043932915 CET	1236	IN	Data Raw: 4f fe 18 98 82 a6 c5 bf ba a7 bf 04 0b fa 03 d5 25 e2 44 5e 8c 69 58 17 22 a1 27 da 83 57 17 33 91 26 15 c8 e3 fd 46 db 2d 8b cf a7 93 c7 a1 f8 e4 c8 a3 88 0e 6a 88 b4 f7 78 04 00 e1 2c 91 ad 94 96 f4 06 6f e9 74 3d ff e4 e3 8f 3f fc c4 d0 3d a0 Data Ascii: O%D^iX"'W3&F-jx,ot=?=@H!z"u<z\"[//?'b8xa7;\|4V@TFkh_t}%+_.JfZi!5pFdNT:-2Mxv\|WuMW{D
Mar 14, 2025 11:18:24.043943882 CET	1236	IN	Data Raw: bb a7 7a 56 ac 68 de 01 5f d2 7b 4e 98 fc 8c 87 29 3f 88 3f b8 7c 7e 41 ef 97 95 8f 67 85 f9 ec 89 b8 cf 5c 0e 8f a9 36 77 cf 18 7f 9e 20 43 c0 de d4 46 04 62 eb c4 d4 ad 2b 53 47 9b 84 a8 81 3b d1 a9 0d 14 15 13 2d d3 f2 d5 bf 6b 6b 2c f2 33 ea Data Ascii: zVh_{N)??\|~Ag\6w CFb+SG;-kk,3&<Hj,!Wj8(bo"DCD$ekV8? oGY5d1BU&^Bw)j),P#G')n#ung7=GsO#:HSs
Mar 14, 2025 11:18:24.043956041 CET	400	IN	Data Raw: e5 90 d1 d0 4c be 86 7e 7e 8b 62 86 f4 3c 8b f4 0c 14 33 42 e2 1d 09 96 82 10 dc 9f d5 cf 90 5f 39 a1 a9 7f d6 c7 ed 20 df 58 ae f6 16 1d ba 1f 59 97 2c 96 2e df 3e 8a 47 f8 e0 8a 22 d3 9e 64 f5 5d 73 6d f2 a1 6a fa 23 6e b9 a2 d5 f8 0f 2c bd ca Data Ascii: L~~b<3B_9 XY,.>G"d]smj#n,WUq%'$U7#?Eu8O#gQ:t0w/f3\|.1+W]O@;kI=y)w;=JD<}yxp"_xK`K29~v=_X@
Mar 14, 2025 11:18:24.043968916 CET	1236	IN	Data Raw: e7 8b bb 5a 1f 12 05 0b 80 56 20 04 35 8c f7 0b 66 da 45 fa 4a 16 11 35 34 e8 3a 15 21 c7 bf ad 90 4c bd 53 ca 23 cd 7e 3d 8c 63 be 49 b2 f2 69 b6 b2 70 95 04 fc 5f ad 02 0c 65 55 9a 01 50 6d c0 a4 e2 32 bc a5 5f fa ba ae 05 ad a5 a5 30 c4 79 39 Data Ascii: ZV 5fEJ54:!LS#~=cIip_eUPm2_0y9ZQm(-bG'-+\&\2H}ct+L"?{C!W=_+AE n%7MAQ,PlGSUos/V7E+v/`iOl
Mar 14, 2025 11:18:24.043979883 CET	1236	IN	Data Raw: e2 fd 7a 9b e1 b9 58 c6 33 7c 3c 06 25 f5 95 4c e4 22 f1 1d fb e8 c7 dd 5d b2 2c 20 2a 12 db 9c 28 a5 66 fe a5 ca 6f f4 ca 36 50 eb 3c 6e 12 c7 5b 89 51 cc d8 95 3d ae 90 5d cc 54 6f 12 50 4f 00 b7 9b 1c 62 52 79 c2 0c b0 b4 ed 92 bf 1b 0e 1d 76 Data Ascii: zX3\|<%L"], *(fo6P<n[Q=]ToPObRyv)7V9"VeR,Ymz!<06gRwjT1U9U\CzzZ`f&2Ps?h[<0;%}A$qjf;sRb
Mar 14, 2025 11:18:24.043989897 CET	1236	IN	Data Raw: c9 a7 0e 8d dd a1 01 aa 5b b0 19 5b f5 95 f0 64 14 83 68 c0 53 49 f0 0a 87 2c 04 a7 90 34 5a 7d 82 30 37 4f 23 aa 96 da 7b 8b b3 0d 27 de d4 5e 99 cb d8 51 1d 2e ca cb f4 aa 85 2d 9f a0 e8 aa e3 e2 41 b6 f9 5a 82 a5 d3 5a 62 36 a9 c3 72 65 9b c1 Data Ascii: [[dhSI,4Z}07O#{'^Q.-AZZb6rePa2vriuoQ_o!UW%-;kf4*}Tor}Q":)EtbY>Z%nE.'JqmXERqs6@h@.A.L7c2&Lk7e
Mar 14, 2025 11:18:24.044001102 CET	1236	IN	Data Raw: da 80 9f a9 1d a7 66 7a 77 80 fa 1a bd fe b8 da 17 8b 03 5b 64 5e 88 17 f2 91 b5 b2 28 07 5f 6d 29 7d 8d 1d 9e 71 7b cc 57 5b 54 0c b7 53 a3 d2 0b 35 d4 9a db cf 24 66 70 41 09 19 f9 b4 72 e8 e3 fa 02 f0 ad 3f e0 54 99 7b e5 ae b9 d7 d2 cf 03 9a Data Ascii: fzw[d^(_m)}q{W[TS5$fpAr?T{l=y,og9bSIxOGTtD;9Pv-p8}PzZ)*S--uY_v:I\|31p SjLnAV`,)HZt>A\@

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49704	185.50.25.7	80	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 11:18:24.097412109 CET	390	OUT	GET /index_files/counter HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:24.863902092 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 10:18:24 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:10 GMT ETag: "2b-5424f2be79480" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Mar 14, 2025 11:18:27.659014940 CET	397	OUT	GET /index_files/fav_logo.ico?5 HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:28.035162926 CET	748	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 10:18:27 GMT Content-Type: image/x-icon Content-Length: 401 Last-Modified: Sun, 27 Nov 2016 21:38:10 GMT Connection: keep-alive Keep-Alive: timeout=30 ETag: "583b5242-191" Expires: Sun, 13 Apr 2025 10:18:27 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 48 49 44 41 54 38 11 63 8c 6a 58 ea c5 f0 ef ff cc ff ff ff cb 30 90 00 18 19 19 9f 30 30 31 a6 33 91 a3 19 64 0f d8 42 a0 c5 4c a4 da 8c ec 48 90 5e 26 64 01 72 d8 d4 35 60 5a 69 30 c3 9c aa 30 06 6e 4e 36 06 45 29 21 86 65 4d 31 60 3e c8 65 fc 3c 1c 0c 73 ab c3 19 26 14 06 a0 38 14 c5 05 97 ee 3e 67 e0 e2 60 63 70 34 56 61 b8 ff ec 1d c3 bf 7f ff 19 58 98 21 4a 22 5d 0d 19 38 d9 59 19 b6 1e bd 86 db 80 cd 87 af 02 35 fd 63 f0 b3 d1 66 e0 e3 e6 00 2b 64 62 62 62 b0 37 54 62 b0 33 54 66 b8 f9 f0 15 c3 9e d3 b7 70 1b f0 f4 f5 47 86 ed c7 6f 30 f0 70 b1 33 d4 25 bb 32 30 31 31 82 5d 90 1e 68 05 d6 f4 f8 d5 07 60 f4 a1 e8 67 40 f1 02 48 6a e5 9e 0b 0c 37 80 36 49 89 f0 c3 55 4e 5d 73 94 e1 d3 d7 1f 0c 2e a6 6a 0c 9e 96 1a 70 71 10 03 c3 80 3f 7f ff 31 b4 2f dc cb 00 f2 ce 87 cf df 19 3e 7f fb c9 70 f4 d2 7d 86 96 f9 bb 19 de 7f fe c6 10 e5 66 c4 c0 [TRUNCATED] Data Ascii: PNGIHDRagAMAaHIDAT8cjX00013dBLH^&dr5`Zi00nN6E)!eM1`>e<s&8>g`cp4VaX!J"]8Y5cf+dbbb7Tb3TfpGo0p3%2011]h`g@Hj76IUN]s.jpq?1/>p}fd`](q4PE\0$H/(Kc,;o3IENDB`
Mar 14, 2025 11:19:13.043963909 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49705	104.21.29.163	80	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 11:18:24.126302004 CET	433	OUT	GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1 Host: img3.proshkolu.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:24.602391958 CET	1112	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 14 Mar 2025 10:18:24 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 14 Mar 2025 11:18:24 GMT Location: https://img3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=9l6VjIAWE4R6zpOuwNPeFPOszz4F9N98CdZWDjelNPFE2WwA32ekgb8e4lcOwEnNiv2MpiQVQq4w55wrDmy0ISHiSmWxqNMu3O4o6kN0ixLoJvdRnuACPD6H2Kd%2B6GxhcIEEYg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 920306df6f1c4313-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2462&min_rtt=2462&rtt_var=1231&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=433&delivery_rate=0&cwnd=250&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Mar 14, 2025 11:19:09.605561972 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49706	185.50.25.7	80	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 11:18:24.468592882 CET	285	OUT	GET /index_files/p HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:25.262423992 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 10:18:25 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT ETag: "2b-5424f2bd85240" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Mar 14, 2025 11:19:10.261969090 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.10	49707	185.50.25.7	80	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 11:18:24.468713045 CET	287	OUT	GET /index_files/hit HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:25.262283087 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 10:18:25 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT ETag: "2b-5424f2bd85240" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Mar 14, 2025 11:19:10.277582884 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.10	49708	185.50.25.7	80	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 11:18:24.557019949 CET	294	OUT	GET /index_files/logo.png?2 HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:25.275214911 CET	1236	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 10:18:25 GMT Content-Type: image/png Content-Length: 1334 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT Connection: keep-alive Keep-Alive: timeout=30 ETag: "583b5241-536" Expires: Sun, 13 Apr 2025 10:18:25 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 7c 00 00 00 19 08 06 00 00 00 f3 27 4a 57 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 04 d8 49 44 41 54 78 da ec 9a 6d 88 16 55 14 c7 47 dd d5 ca cd 74 cb 6a d3 b4 a8 44 22 2b 93 5e 4c 25 0a 94 b2 0f 95 94 84 4a 04 59 69 96 1a 6c 65 60 25 59 f6 a2 bd ae 95 4a e5 42 5a 1f 56 fc e2 63 18 19 2b c8 12 85 6d 68 af c4 f6 6a d9 66 ba ea 96 a5 e6 ee d3 ff e4 7f e4 78 9a 99 67 66 9e 99 75 c0 39 f0 63 e7 ce b9 6f cf bd f7 9c 7b ee 9d ed 56 2c 16 9d 5c 8e 1d e9 ae 9e 4f 03 4b c0 af a0 58 06 ad e0 4d 50 93 0f 6f f6 a4 1b 2d fc 54 f0 31 18 9c 60 dd 3f 81 91 60 5b 3e cc d9 b3 f0 c7 13 9e 6c 91 41 e0 89 7c 88 b3 69 e1 db 52 72 c1 3b 40 ff 7c 98 b3 37 e1 9d f2 9c 56 1b f9 30 67 47 2a 42 4c 8a 97 ae 17 a8 02 17 81 39 60 6c 17 f7 bb 37 18 c1 d8 a3 1d 7c c6 60 b3 4b 8d 05 9c c5 ad b0 2f f8 93 01 eb d7 e0 e0 51 9a cf 13 39 2e a7 80 3f c0 e7 e0 97 23 72 88 85 17 83 c5 29 41 77 b0 21 46 f9 e9 [TRUNCATED] Data Ascii: PNGIHDR\|'JWtEXtSoftwareAdobe ImageReadyqe<IDATxmUGtjD"+^L%JYile`%YJBZVc+mhjfxgfu9co{V,\OKXMPo-T1`?`[>lA\|iRr;@\|7V0gGBL9`l7\|`K/Q9.?#r)Aw!FA{`;'~/b8F6.T=?RWefE(ZsUk{u`Oq\KN\|tb'H/t3h91uFp)<@c&\|+PP^1E%rmaOgh^J3iOcmA\\>Xod7o=e\|&KwF/$'t;YM]sG(JzVIqA%/U:ziQVZoP%\P7e?1p7%/3oAAjz9F.'t<CAb;%/`\|k8s..Wv;=4E\Wq9Dnbd1-/3HLI^7f0@2>5d"(/*}/vO0
Mar 14, 2025 11:18:25.275232077 CET	443	IN	Data Raw: 35 ce 84 cb ca bc 0b dc 07 d6 f2 bc e7 5a fa da 32 27 fc 4e 5a 8d de 3e 6e 71 4f 8f e0 53 a5 bb da 94 bd 52 9f 34 41 b3 47 fd eb 15 2d 65 f4 f3 7c e3 2a 9f 05 5f b0 dd 30 d2 46 6f a6 c7 6b 06 cf cf 51 e5 2b b0 5f a5 c7 f0 84 62 f9 1b 9c 17 67 c2 Data Ascii: 5Z2'NZ>nqOSR4AG-e\|*_0FokQ+_bg;0]<#+/(7OdMKxlE2IwpZf-'Xb0>_"_,K`}+@cy6J>o?+b.CdK3+k<?2)y)
Mar 14, 2025 11:19:10.277689934 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.10	49711	185.50.25.7	80	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 11:18:24.881505013 CET	291	OUT	GET /index_files/counter HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:25.642657042 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 10:18:25 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:10 GMT ETag: "2b-5424f2be79480" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Mar 14, 2025 11:18:28.078433037 CET	298	OUT	GET /index_files/fav_logo.ico?5 HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:28.305164099 CET	748	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 10:18:28 GMT Content-Type: image/x-icon Content-Length: 401 Last-Modified: Sun, 27 Nov 2016 21:38:10 GMT Connection: keep-alive Keep-Alive: timeout=30 ETag: "583b5242-191" Expires: Sun, 13 Apr 2025 10:18:28 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 48 49 44 41 54 38 11 63 8c 6a 58 ea c5 f0 ef ff cc ff ff ff cb 30 90 00 18 19 19 9f 30 30 31 a6 33 91 a3 19 64 0f d8 42 a0 c5 4c a4 da 8c ec 48 90 5e 26 64 01 72 d8 d4 35 60 5a 69 30 c3 9c aa 30 06 6e 4e 36 06 45 29 21 86 65 4d 31 60 3e c8 65 fc 3c 1c 0c 73 ab c3 19 26 14 06 a0 38 14 c5 05 97 ee 3e 67 e0 e2 60 63 70 34 56 61 b8 ff ec 1d c3 bf 7f ff 19 58 98 21 4a 22 5d 0d 19 38 d9 59 19 b6 1e bd 86 db 80 cd 87 af 02 35 fd 63 f0 b3 d1 66 e0 e3 e6 00 2b 64 62 62 62 b0 37 54 62 b0 33 54 66 b8 f9 f0 15 c3 9e d3 b7 70 1b f0 f4 f5 47 86 ed c7 6f 30 f0 70 b1 33 d4 25 bb 32 30 31 31 82 5d 90 1e 68 05 d6 f4 f8 d5 07 60 f4 a1 e8 67 40 f1 02 48 6a e5 9e 0b 0c 37 80 36 49 89 f0 c3 55 4e 5d 73 94 e1 d3 d7 1f 0c 2e a6 6a 0c 9e 96 1a 70 71 10 03 c3 80 3f 7f ff 31 b4 2f dc cb 00 f2 ce 87 cf df 19 3e 7f fb c9 70 f4 d2 7d 86 96 f9 bb 19 de 7f fe c6 10 e5 66 c4 c0 [TRUNCATED] Data Ascii: PNGIHDRagAMAaHIDAT8cjX00013dBLH^&dr5`Zi00nN6E)!eM1`>e<s&8>g`cp4VaX!J"]8Y5cf+dbbb7Tb3TfpGo0p3%2011]h`g@Hj76IUN]s.jpq?1/>p}fd`](q4PE\0$H/(Kc,;o3IENDB`
Mar 14, 2025 11:19:13.308773041 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.10	49713	172.67.149.117	80	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 14, 2025 11:18:25.409980059 CET	434	OUT	GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1 Host: data3.proshkolu.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 14, 2025 11:18:25.866081953 CET	1114	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 14 Mar 2025 10:18:25 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Fri, 14 Mar 2025 11:18:25 GMT Location: https://data3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=PiQ1SdMI0zbc1VzPhAQT5cvTHsExKMAnKSEFHxT%2FdDgVW0tx%2FIYlYEWHB7rfGatXn%2F7PHwKwWfxaYEGMOX6v3EvU9uiFtOsxz8WNIZmHNEeJ7bX741mo2QWxb3R56hleqJNrGTE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Vary: Accept-Encoding Server: cloudflare CF-RAY: 920306e75afa1a38-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1930&min_rtt=1930&rtt_var=965&sent=1&recv=3&lost=0&retrans=0&sent_bytes=0&recv_bytes=434&delivery_rate=0&cwnd=205&unsent_bytes=0&cid=0000000000000000&ts=0&x=0" Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Mar 14, 2025 11:19:10.870980978 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.10	49690	142.250.186.97	443	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 10:18:18 UTC	679	OUT	GET / HTTP/1.1 Host: kjhgt55555555555.blogspot.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 10:18:18 UTC	444	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Expires: Fri, 14 Mar 2025 10:18:18 GMT Date: Fri, 14 Mar 2025 10:18:18 GMT Cache-Control: private, max-age=0 Last-Modified: Sat, 07 Sep 2024 02:28:11 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-14 10:18:18 UTC	946	IN	Data Raw: 33 33 63 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 27 76 32 27 20 64 69 72 3d 27 6c 74 72 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 20 78 6d 6c 6e 73 3a 62 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 62 27 20 78 6d 6c 6e 73 3a 64 61 74 61 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 64 61 74 61 27 20 78 6d 6c 6e 73 3a 65 78 70 72 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 65 78 70 72 27 3e 0a 3c 68 65 61 64 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f Data Ascii: 33ce<!DOCTYPE html><html class='v2' dir='ltr' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'><head><link href='https://
2025-03-14 10:18:18 UTC	1390	IN	Data Raw: 22 68 74 74 70 73 3a 2f 2f 6b 6a 68 67 74 35 35 35 35 35 35 35 35 35 35 35 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 2f 66 65 65 64 73 2f 70 6f 73 74 73 2f 64 65 66 61 75 6c 74 3f 61 6c 74 3d 72 73 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 65 72 76 69 63 65 2e 70 6f 73 74 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 31 20 2d 20 41 74 6f 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 66 65 65 64 73 2f 37 35 32 38 39 31 30 33 32 34 35 35 37 34 33 32 39 35 35 2f 70 6f 73 74 73 2f 64 65 66 61 75 6c 74 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 Data Ascii: "https://kjhgt55555555555.blogspot.com/feeds/posts/default?alt=rss" /><link rel="service.post" type="application/atom+xml" title="1 - Atom" href="https://www.blogger.com/feeds/7528910324557432955/posts/default" /><link rel="me" href="https://www.blogger
2025-03-14 10:18:18 UTC	1390	IN	Data Raw: 65 6e 74 5f 74 69 6c 65 5f 6c 69 67 68 74 2e 70 6e 67 29 20 72 65 70 65 61 74 20 73 63 72 6f 6c 6c 20 74 6f 70 20 6c 65 66 74 3b 0a 5f 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 62 6f 64 79 2d 66 61 75 78 63 6f 6c 75 6d 6e 2d 6f 75 74 65 72 20 2e 63 61 70 2d 74 6f 70 20 7b 0a 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 68 65 69 67 68 74 3a 20 34 30 30 70 78 3b 0a 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 2e 62 6f 64 79 2d 66 61 75 78 63 6f 6c 75 6d 6e 2d 6f 75 74 65 72 20 2e 63 61 70 2d 74 6f 70 20 2e 63 61 70 2d 6c 65 66 74 20 7b 0a 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 68 74 74 Data Ascii: ent_tile_light.png) repeat scroll top left;_background-image: none;}.body-fauxcolumn-outer .cap-top {position: absolute;z-index: 1;height: 400px;width: 100%;}.body-fauxcolumn-outer .cap-top .cap-left {width: 100%;background: transparent url(htt
2025-03-14 10:18:18 UTC	1390	IN	Data Raw: 65 65 65 65 3b 0a 7d 0a 2e 74 61 62 73 2d 69 6e 6e 65 72 20 2e 73 65 63 74 69 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 75 6c 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 30 3b 0a 62 6f 72 64 65 72 2d 74 6f 70 3a 20 30 20 73 6f 6c 69 64 20 23 65 65 65 65 65 65 3b 0a 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 30 20 73 6f 6c 69 64 20 23 65 65 65 65 65 65 3b 0a 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 30 20 73 6f 6c 69 64 20 23 65 65 65 65 65 65 3b 0a 7d 0a 2e 74 61 62 73 2d 69 6e 6e 65 72 20 2e 77 69 64 67 65 74 20 75 6c 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 35 66 35 66 35 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 72 65 73 6f 75 72 63 65 73 2e 62 6c 6f 67 62 6c 6f 67 2e 63 6f 6d 2f 62 6c 6f 67 62 6c 6f 67 2f 64 61 74 61 2f 31 6b 74 2f 73 69 6d Data Ascii: eeee;}.tabs-inner .section:first-child ul {margin-top: -0;border-top: 0 solid #eeeeee;border-left: 0 solid #eeeeee;border-right: 0 solid #eeeeee;}.tabs-inner .widget ul {background: #f5f5f5 url(https://resources.blogblog.com/blogblog/data/1kt/sim
2025-03-14 10:18:18 UTC	1390	IN	Data Raw: 70 70 79 20 7b 0a 63 6f 6c 6f 72 3a 20 23 39 39 39 39 39 39 3b 0a 74 65 78 74 2d 73 68 61 64 6f 77 3a 20 32 70 78 20 32 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 29 3b 0a 7d 0a 2e 77 69 64 67 65 74 20 2e 70 6f 70 75 6c 61 72 2d 70 6f 73 74 73 20 75 6c 20 7b 0a 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2f 2a 20 50 6f 73 74 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 68 32 2e 64 61 74 65 2d 68 65 61 64 65 72 20 7b 0a 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 62 6f 6c 64 20 31 31 70 78 20 41 72 69 61 6c 2c 20 54 61 68 6f 6d 61 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 46 72 65 65 53 61 6e 73 2c 20 73 61 6e Data Ascii: ppy {color: #999999;text-shadow: 2px 2px 1px rgba(0, 0, 0, .1);}.widget .popular-posts ul {list-style: none;}/* Posts----------------------------------------------- */h2.date-header {font: normal bold 11px Arial, Tahoma, Helvetica, FreeSans, san
2025-03-14 10:18:18 UTC	1390	IN	Data Raw: 2c 20 30 2c 20 30 2c 20 2e 31 29 3b 0a 62 6f 78 2d 73 68 61 64 6f 77 3a 20 30 20 30 20 30 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 29 3b 0a 7d 0a 2e 70 6f 73 74 2d 68 65 61 64 65 72 20 7b 0a 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 2e 35 65 6d 3b 0a 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 3b 0a 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 30 25 3b 0a 7d 0a 2e 70 6f 73 74 2d 66 6f 6f 74 65 72 20 7b 0a 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 2d 32 70 78 20 30 3b 0a 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 30 70 78 3b 0a 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 39 66 39 66 39 3b 0a 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 65 65 65 3b 0a 6c Data Ascii: , 0, 0, .1);box-shadow: 0 0 0 rgba(0, 0, 0, .1);}.post-header {margin: 0 0 1.5em;line-height: 1.6;font-size: 90%;}.post-footer {margin: 20px -2px 0;padding: 5px 10px;color: #666666;background-color: #f9f9f9;border-bottom: 1px solid #eeeeee;l
2025-03-14 10:18:18 UTC	1390	IN	Data Raw: 64 20 23 39 39 39 39 39 39 3b 0a 7d 0a 2e 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 74 68 72 65 61 64 2e 69 6e 6c 69 6e 65 2d 74 68 72 65 61 64 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 39 66 39 66 39 3b 0a 7d 0a 2e 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6e 74 69 6e 75 65 20 7b 0a 62 6f 72 64 65 72 2d 74 6f 70 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 39 39 39 39 39 39 3b 0a 7d 0a 2f 2a 20 41 63 63 65 6e 74 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2e 73 65 63 74 69 6f 6e 2d 63 6f 6c 75 6d 6e 73 20 74 64 2e 63 6f 6c 75 6d 6e 73 2d 63 65 6c 6c 20 7b 0a 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c Data Ascii: d #999999;}.comments .comment-thread.inline-thread {background-color: #f9f9f9;}.comments .continue {border-top: 2px solid #999999;}/* Accents---------------------------------------------- */.section-columns td.columns-cell {border-left: 1px sol
2025-03-14 10:18:18 UTC	1390	IN	Data Raw: 69 6e 6b 2d 62 75 74 74 6f 6e 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 63 63 36 36 31 31 3b 0a 7d 0a 2e 6d 6f 62 69 6c 65 2d 6c 69 6e 6b 2d 62 75 74 74 6f 6e 20 61 3a 6c 69 6e 6b 2c 20 2e 6d 6f 62 69 6c 65 2d 6c 69 6e 6b 2d 62 75 74 74 6f 6e 20 61 3a 76 69 73 69 74 65 64 20 7b 0a 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 2e 6d 6f 62 69 6c 65 20 2e 74 61 62 73 2d 69 6e 6e 65 72 20 2e 73 65 63 74 69 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 62 6f 72 64 65 72 2d 74 6f 70 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 6d 6f 62 69 6c 65 20 2e 74 61 62 73 2d 69 6e 6e 65 72 20 2e 50 61 67 65 4c 69 73 74 20 2e 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 65 65 Data Ascii: ink-button {background-color: #cc6611;}.mobile-link-button a:link, .mobile-link-button a:visited {color: #ffffff;}.mobile .tabs-inner .section:first-child {border-top: none;}.mobile .tabs-inner .PageList .widget-content {background-color: #eeeee
2025-03-14 10:18:18 UTC	1390	IN	Data Raw: 6c 65 66 74 3a 20 33 32 70 78 3b 0a 7d 0a 2d 2d 3e 3c 2f 73 74 79 6c 65 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 64 79 6e 2d 63 73 73 2f 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 2e 63 73 73 3f 74 61 72 67 65 74 42 6c 6f 67 49 44 3d 37 35 32 38 39 31 30 33 32 34 35 35 37 34 33 32 39 35 35 26 61 6d 70 3b 7a 78 3d 38 33 66 31 31 65 65 36 2d 37 31 37 63 2d 34 31 30 66 2d 39 37 33 35 2d 64 30 32 66 31 62 31 32 65 30 62 35 27 20 6d 65 64 69 61 3d 27 6e 6f 6e 65 27 20 6f 6e 6c 6f 61 64 3d 27 69 66 28 6d 65 64 69 61 21 3d 26 23 33 39 3b 61 6c 6c 26 23 33 39 3b 29 6d 65 64 69 61 3d 26 23 33 39 3b 61 6c 6c 26 23 33 39 3b 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 2f 3e 3c 6e 6f 73 63 Data Ascii: left: 32px;}--></style><link href='https://www.blogger.com/dyn-css/authorization.css?targetBlogID=7528910324557432955&zx=83f11ee6-717c-410f-9735-d02f1b12e0b5' media='none' onload='if(media!='all')media='all'' rel='stylesheet'/><nosc
2025-03-14 10:18:18 UTC	1204	IN	Data Raw: 29 20 7b 0a 20 20 20 20 20 20 20 20 20 20 67 61 70 69 2e 69 66 72 61 6d 65 73 2e 67 65 74 43 6f 6e 74 65 78 74 28 29 2e 6f 70 65 6e 43 68 69 6c 64 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 3a 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 6e 61 76 62 61 72 2f 37 35 32 38 39 31 30 33 32 34 35 35 37 34 33 32 39 35 35 3f 6f 72 69 67 69 6e 5c 78 33 64 68 74 74 70 73 3a 2f 2f 6b 6a 68 67 74 35 35 35 35 35 35 35 35 35 35 35 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 68 65 72 65 3a 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6e 61 76 62 61 72 2d 69 66 72 61 6d 65 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2c 0a 20 20 20 20 20 20 20 20 20 Data Ascii: ) { gapi.iframes.getContext().openChild({ url: 'https://www.blogger.com/navbar/7528910324557432955?origin\x3dhttps://kjhgt55555555555.blogspot.com', where: document.getElementById("navbar-iframe-container"),

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.10	49691	216.58.206.73	443	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 10:18:19 UTC	629	OUT	GET /static/v1/widgets/3566091532-css_bundle_v2.css HTTP/1.1 Host: www.blogger.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://kjhgt55555555555.blogspot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 10:18:19 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech" Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} Content-Length: 35960 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 11 Mar 2025 09:51:33 GMT Expires: Wed, 11 Mar 2026 09:51:33 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 10 Mar 2025 20:55:49 GMT Content-Type: text/css Vary: Accept-Encoding Age: 260806 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 10:18:19 UTC	702	IN	Data Raw: 68 74 6d 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 5f 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 63 6f 6e 74 65 6e 74 2d 6f 75 74 65 72 2c 2e 72 65 67 69 6f 6e 2d 69 6e 6e 65 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 63 6f 6c 75 6d 6e 73 7b 7a 6f 6f 6d 3a 31 7d 2e 6c 6f 61 64 69 6e 67 20 2e 63 6f 6c 75 6d 6e 73 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 63 6f 6c 75 6d 6e 73 2d 69 6e 6e 65 72 7b 5f 68 65 69 67 68 74 3a 31 25 3b 6d 69 6e 2d 68 65 Data Ascii: html{height:100%}body{min-height:100%;_height:100%;position:relative}.content{position:relative;word-wrap:break-word}.content-outer,.region-inner{min-height:0;margin:0 auto}.columns{zoom:1}.loading .columns{overflow:hidden}.columns-inner{_height:1%;min-he
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 6e 65 72 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 66 61 75 78 63 6f 6c 75 6d 6e 2d 6c 65 66 74 2d 6f 75 74 65 72 7b 6c 65 66 74 3a 30 7d 2e 66 61 75 78 63 6f 6c 75 6d 6e 2d 72 69 67 68 74 2d 6f 75 74 65 72 7b 72 69 67 68 74 3a 30 7d 2e 63 61 70 2d 74 6f 70 2c 2e 63 61 70 2d 62 6f 74 74 6f 6d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 7d 2e 63 61 70 2d 74 6f 70 20 2e 63 61 70 2d 6c 65 66 74 2c 2e 63 61 70 2d 74 6f 70 20 2e 63 61 70 2d 72 69 67 68 74 2c 2e 63 61 70 2d 62 6f 74 74 6f 6d 20 2e 63 61 70 2d 6c 65 66 74 2c 2e 63 61 70 2d 62 6f 74 74 6f 6d 20 2e 63 61 70 2d 72 69 67 68 74 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 Data Ascii: ner{height:100%}.fauxcolumn-left-outer{left:0}.fauxcolumn-right-outer{right:0}.cap-top,.cap-bottom{position:relative;height:0;background-repeat:repeat-x}.cap-top .cap-left,.cap-top .cap-right,.cap-bottom .cap-left,.cap-bottom .cap-right{height:100%;backgr
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 63 6f 6e 74 65 6e 74 2d 66 61 75 78 63 6f 6c 75 6d 6e 73 20 2e 66 61 75 78 63 6f 6c 75 6d 6e 2d 6c 65 66 74 7b 77 69 64 74 68 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 31 70 78 7d 2e 63 6f 6e 74 65 6e 74 2d 6f 75 74 65 72 2c 2e 68 65 61 64 65 72 2d 6f 75 74 65 72 2c 2e 74 61 62 73 2d 6f 75 74 65 72 2c 2e 6d 61 69 6e 2d 6f 75 74 65 72 2c 2e 6d 61 69 6e 2d 69 6e 6e 65 72 2c 2e 66 6f 6f 74 65 72 2d 6f 75 74 65 72 2c 2e 70 6f 73 74 2c 2e 63 6f 6d 6d 65 6e 74 73 2c 2e 77 69 64 67 65 74 2c 2e 64 61 74 65 2d 68 65 61 64 65 72 2c 2e 69 6e 6c 69 6e Data Ascii: n:relative;overflow:visible;height:100%;margin:0 auto}.content-fauxcolumns .fauxcolumn-left{width:100%}body{margin:0;padding:0 0 1px}.content-outer,.header-outer,.tabs-outer,.main-outer,.main-inner,.footer-outer,.post,.comments,.widget,.date-header,.inlin
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 67 3a 30 20 32 70 78 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 68 31 2c 68 32 2c 68 33 2c 68 34 7b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 68 31 20 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 68 33 20 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 74 61 62 73 20 2e 77 69 64 67 65 74 20 68 32 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 74 61 62 73 20 2e 77 69 64 67 65 74 20 75 6c 2c 2e 74 61 62 73 20 2e 77 69 64 67 65 74 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6c 69 73 74 2d 73 74 79 6c Data Ascii: g:0 2px}a img{border:none;position:relative}h1,h2,h3,h4{margin:0;position:relative}h1 a:hover{text-decoration:none}h3 a:hover{text-decoration:none}.tabs .widget h2{display:none}.tabs .widget ul,.tabs .widget ul{margin:0;padding:0;overflow:hidden;list-styl
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 70 6f 73 74 20 2e 74 72 2d 63 61 70 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 69 6e 6c 69 6e 65 2d 61 64 7b 6d 61 72 67 69 6e 3a 32 65 6d 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 23 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 61 75 74 68 6f 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 35 70 78 7d 2e 63 6f 6d 6d 65 6e 74 2d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 2e 35 65 6d 20 32 35 70 78 7d 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 6f 74 65 72 7b 6d 61 72 67 69 6e 3a 2e 35 65 6d 20 32 35 70 78 20 31 2e 35 65 6d 7d 2e 63 6f 6d 6d 65 6e 74 2d 62 6f 64 79 20 70 7b 6d 61 72 67 69 6e 3a 30 7d 23 Data Ascii: argin-left:0}.post .tr-caption-container{position:relative}.inline-ad{margin:2em 0;text-align:center;line-height:0}#comments .comment-author{padding-left:25px}.comment-body{margin:.5em 25px}.comment-footer{margin:.5em 25px 1.5em}.comment-body p{margin:0}#
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 2e 62 6c 6f 67 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 6c 6f 67 2d 69 63 6f 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 30 3b 77 69 64 74 68 3a 31 36 70 78 7d 2e 62 6c 6f 67 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 65 6d 7d 2e 62 6c 6f 67 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 69 74 65 6d 2d 74 68 75 6d 62 6e 61 69 6c 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 32 70 78 20 35 70 78 20 35 70 78 20 30 7d 2e 62 6c 6f 67 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 Data Ascii: .blog-list-container .blog-icon{float:left;margin-top:2px;vertical-align:top;text-indent:0;width:16px}.blog-list-container .item-content{font-size:95%;line-height:1.3em}.blog-list-container .item-thumbnail{float:left;margin:2px 5px 5px 0}.blog-list-contai
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 66 74 3a 30 3b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 63 72 6f 73 73 7b 68 65 69 67 68 74 3a 31 31 70 78 3b 6d 61 72 67 69 6e 3a 30 20 35 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 38 2e 35 25 3b 77 69 64 74 68 3a 31 31 70 78 7d 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 65 6d 61 69 6c 2c 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 6e 61 6d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 30 63 30 63 Data Ascii: ft:0;opacity:1;position:static;text-align:center}.contact-form-cross{height:11px;margin:0 5px;vertical-align:-8.5%;width:11px}.contact-form-email,.contact-form-name{background:#fff;background-color:#fff;border:1px solid #d9d9d9;border-top:1px solid #c0c0c
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 61 72 2c 6c 65 66 74 20 74 6f 70 2c 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 66 72 6f 6d 28 23 66 35 66 35 66 35 29 2c 74 6f 28 23 66 31 66 31 66 31 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 35 66 35 66 35 2c 23 66 31 66 31 66 31 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 35 66 35 66 35 2c 23 66 31 66 31 66 31 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 35 66 35 66 35 2c 23 66 31 66 31 66 31 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 Data Ascii: ar,left top,left bottom,from(#f5f5f5),to(#f1f1f1));background-image:-webkit-linear-gradient(top,#f5f5f5,#f1f1f1);background-image:-moz-linear-gradient(top,#f5f5f5,#f1f1f1);background-image:-ms-linear-gradient(top,#f5f5f5,#f1f1f1);background-image:-o-linea
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 63 36 63 36 63 36 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 53 74 72 3d 27 23 66 38 66 38 66 38 27 2c 45 6e 64 43 6f 6c 6f 72 53 74 72 3d 27 23 66 31 66 31 66 31 27 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 7d 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2e 66 6f 63 75 73 2c 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2e 72 69 67 68 74 2e 66 6f 63 75 73 2c 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2e 6d 69 64 2e 66 6f Data Ascii: c6c6c6;box-shadow:0 1px 1px rgba(0,0,0,.1);color:#222;filter:progid:DXImageTransform.Microsoft.gradient(startColorStr='#f8f8f8',EndColorStr='#f1f1f1');transition:all 0}.contact-form-button.focus,.contact-form-button.right.focus,.contact-form-button.mid.fo
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 53 74 72 3d 27 23 37 37 37 37 37 37 27 2c 45 6e 64 43 6f 6c 6f 72 53 74 72 3d 27 23 35 35 35 35 35 35 27 29 7d 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2d 73 75 62 6d 69 74 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 6c 65 66 74 20 74 6f 70 2c 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 66 72 6f 6d 28 23 36 36 36 29 2c 74 6f 28 23 34 34 34 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 36 36 36 2c 23 34 Data Ascii: crosoft.gradient(startColorStr='#777777',EndColorStr='#555555')}.contact-form-button-submit:hover{background-color:#555;background-image:-webkit-gradient(linear,left top,left bottom,from(#666),to(#444));background-image:-webkit-linear-gradient(top,#666,#4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.10	49692	142.250.74.206	443	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 10:18:19 UTC	660	OUT	GET /js/platform.js HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIk6HLAQiKo8sBCIWgzQEI5ePOAQiF5c4B Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://kjhgt55555555555.blogspot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 10:18:19 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 64240 Date: Fri, 14 Mar 2025 10:18:19 GMT Expires: Fri, 14 Mar 2025 10:18:19 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "670afc115c0e5d32" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 10:18:19 UTC	553	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 70 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e Data Ascii: (function(){var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 72 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ion(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};u("Symbol",function(a){if(a)return a;var b=function(
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 62 61 6c 54 68 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 72 7d 29 3b 0a 75 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 41 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 67 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 28 67 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 61 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 74 68 69 73 2e 41 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 41 3d 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 65 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 43 61 28 29 7d 29 7d Data Ascii: balThis",function(a){return a\|\|r});u("Promise",function(a){function b(){this.A=null}function c(g){return g instanceof e?g:new e(function(k){k(g)})}if(a)return a;b.prototype.da=function(g){if(this.A==null){this.A=[];var k=this;this.ea(function(){k.Ca()})}
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 73 65 74 74 6c 65 64 20 69 6e 20 73 74 61 74 65 22 2b 74 68 69 73 2e 46 29 3b 74 68 69 73 2e 46 3d 67 3b 74 68 69 73 2e 4b 3d 6b 3b 74 68 69 73 2e 46 3d 3d 3d 32 26 26 74 68 69 73 2e 49 61 28 29 3b 74 68 69 73 2e 44 61 28 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 49 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 46 61 28 29 29 7b 76 61 72 20 6b 3d 72 2e 63 6f 6e 73 6f 6c 65 3b 74 79 70 65 6f 66 20 6b 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 0a 6b 2e 65 72 72 6f 72 28 67 2e 4b 29 7d 7d 2c 31 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 46 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6b 61 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 67 3d 72 2e 43 75 73 Data Ascii: settled in state"+this.F);this.F=g;this.K=k;this.F===2&&this.Ia();this.Da()};e.prototype.Ia=function(){var g=this;d(function(){if(g.Fa()){var k=r.console;typeof k!=="undefined"&&k.error(g.K)}},1)};e.prototype.Fa=function(){if(this.ka)return!1;var g=r.Cus
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 68 28 67 29 7d 29 7d 3b 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 68 29 7b 66 6f 72 28 76 61 72 20 6c 3d 78 28 67 29 2c 6d 3d 6c 2e 6e 65 78 74 28 29 3b 21 6d 2e 64 6f 6e 65 3b 6d 3d 6c 2e 6e 65 78 74 28 29 29 63 28 6d 2e 76 61 6c 75 65 29 2e 4c 28 6b 2c 68 29 7d 29 7d 3b 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 6b 3d 78 28 67 29 2c 68 3d 6b 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 68 2e 64 6f 6e 65 3f 63 28 5b 5d 29 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 77 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 71 5b 77 5d 3d 74 3b 76 2d 2d 3b 76 3d 3d 30 26 26 6c 28 71 29 7d Data Ascii: h(g)})};e.race=function(g){return new e(function(k,h){for(var l=x(g),m=l.next();!m.done;m=l.next())c(m.value).L(k,h)})};e.all=function(g){var k=x(g),h=k.next();return h.done?c([]):new e(function(l,m){function n(w){return function(t){q[w]=t;v--;v==0&&l(q)}
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 2e 4a 5d 3a 76 6f 69 64 20 30 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 63 28 68 29 26 26 7a 28 68 2c 66 29 26 26 7a 28 68 5b 66 5d 2c 74 68 69 73 2e 4a 29 7d 3b 0a 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 63 28 68 29 26 26 7a 28 68 2c 66 29 26 26 7a 28 68 5b 66 5d 2c 74 68 69 73 2e 4a 29 3f 64 65 6c 65 74 65 20 68 5b 66 5d 5b 74 68 69 73 2e 4a 5d 3a 21 31 7d 3b 72 65 74 75 72 6e 20 6b 7d 29 3b 0a 75 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 Data Ascii: .J]:void 0};k.prototype.has=function(h){return c(h)&&z(h,f)&&z(h[f],this.J)};k.prototype.delete=function(h){return c(h)&&z(h,f)&&z(h[f],this.J)?delete h[f][this.J]:!1};return k});u("Map",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototyp
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 5b 6b 2e 6b 65 79 2c 6b 2e 76 61 6c 75 65 5d 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 6b 65 79 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 Data Ascii: .value};c.prototype.entries=function(){return e(this,function(k){return[k.key,k.value]})};c.prototype.keys=function(){return e(this,function(k){return k.key})};c.prototype.values=function(){return e(this,function(k){return k.value})};c.prototype.forEach=f
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 75 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 68 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 3b 62 2b 3d 22 22 3b 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c Data Ascii: );if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};u("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=ha(this,b,"startsWith");b+="";var e=d.length,
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 41 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 62 3d 62 21 3d 22 6f 62 6a 65 63 74 22 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 3b 72 65 74 75 72 6e 20 62 3d 3d 22 61 72 72 61 79 22 7c 7c 62 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 7d 2c 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 20 62 3d 3d 22 6f 62 6a 65 63 74 22 26 26 61 21 3d 6e 75 6c 6c 7c 7c 62 3d 3d 22 66 75 6e 63 74 Data Ascii: se-Identifier: Apache-2.0*/var A=this\|\|self,ia=function(a){var b=typeof a;b=b!="object"?b:a?Array.isArray(a)?"array":b:"null";return b=="array"\|\|b=="object"&&typeof a.length=="number"},ja=function(a){var b=typeof a;return b=="object"&&a!=null\|\|b=="funct
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 5d 3a 22 25 73 22 29 3b 74 61 2e 63 61 6c 6c 28 74 68 69 73 2c 63 2b 61 5b 64 5d 29 7d 72 61 28 76 61 2c 74 61 29 3b 76 61 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 41 73 73 65 72 74 69 6f 6e 45 72 72 6f 72 22 3b 76 61 72 20 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 61 29 7b 76 61 72 20 64 3d 22 41 73 73 65 72 74 69 6f 6e 20 66 61 69 6c 65 64 22 3b 69 66 28 62 29 7b 64 2b 3d 22 3a 20 22 2b 62 3b 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 7d 74 68 72 6f 77 20 6e 65 77 20 76 61 28 22 22 2b 64 2c 65 7c 7c 5b 5d 29 3b 7d 7d 3b 76 61 72 20 78 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3f 66 75 6e 63 74 Data Ascii: ]:"%s");ta.call(this,c+a[d])}ra(va,ta);va.prototype.name="AssertionError";var wa=function(a,b,c){if(!a){var d="Assertion failed";if(b){d+=": "+b;var e=Array.prototype.slice.call(arguments,2)}throw new va(""+d,e\|\|[]);}};var xa=Array.prototype.forEach?funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.10	49694	216.58.206.73	443	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 10:18:19 UTC	608	OUT	GET /static/v1/widgets/3789536756-widgets.js HTTP/1.1 Host: www.blogger.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://kjhgt55555555555.blogspot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 10:18:19 UTC	696	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech" Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} Content-Length: 145204 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Wed, 12 Mar 2025 21:28:41 GMT Expires: Thu, 12 Mar 2026 21:28:41 GMT Cache-Control: public, max-age=31536000 Last-Modified: Tue, 11 Mar 2025 09:53:45 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 132578 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 10:18:19 UTC	694	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 61 61 3d 22 26 61 63 74 69 6f 6e 3d 22 2c 62 61 3d 22 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 22 2c 63 61 3d 22 53 43 52 49 50 54 22 2c 64 61 3d 22 53 50 41 4e 22 2c 65 61 3d 22 53 57 5f 52 45 41 44 45 52 5f 4c 49 53 54 5f 22 2c 66 61 3d 22 53 57 5f 52 45 41 44 45 Data Ascii: (function(){/* Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var aa="&action=",ba=".wikipedia.org",ca="SCRIPT",da="SPAN",ea="SW_READER_LIST_",fa="SW_READE
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 22 2c 42 61 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 22 2c 43 61 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 2d 77 69 74 68 2d 62 6f 72 64 65 72 22 2c 44 61 3d 22 64 61 74 61 2d 68 65 69 67 68 74 22 2c 45 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 46 75 6c 6c 22 2c 46 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 4c 61 79 6f 75 74 22 2c 47 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 4e 6f 6e 65 22 2c 6d 3d 22 64 69 76 22 2c 48 61 3d 22 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 22 2c 49 61 3d 22 65 72 72 6f 72 22 2c 4a 61 3d 22 65 78 70 61 6e 64 65 64 22 2c 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 4b 61 3d 22 68 69 64 64 65 6e 22 2c 4c 61 3d 22 68 74 74 70 73 3a 22 2c Data Ascii: ",Ba="contact-form-success-message",Ca="contact-form-success-message-with-border",Da="data-height",Ea="displayModeFull",Fa="displayModeLayout",Ga="displayModeNone",m="div",Ha="dropdown-toggle",Ia="error",Ja="expanded",n="function",Ka="hidden",La="https:",
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 76 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 41 3d 66 3b 67 62 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a Data Ascii: onfigurable:!0,writable:!0,value:b})}}v("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.A=f;gb(this,"description",{configurable:!0,writable:
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 28 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 4c 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 71 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 66 62 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 Data Ascii: (b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.L=b.prototype}function x(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length==q)return{next:fb(a)};throw Error(String(a)+" is not an itera
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 68 69 73 2e 54 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 47 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 54 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 47 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 61 61 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 50 61 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 6e 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 4e 28 67 Data Ascii: his.T),reject:g(this.G)}};b.prototype.T=function(g){if(g===this)this.G(new TypeError("A Promise cannot resolve to itself"));else if(g instanceof b)this.aa(g);else{a:switch(typeof g){case Pa:var h=g!=null;break a;case n:h=!0;break a;default:h=!1}h?this.N(g
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 44 2c 43 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 44 3d 3d 6e 3f 66 75 6e 63 74 69 6f 6e 28 52 29 7b 74 72 79 7b 6c 28 44 28 52 29 29 7d 63 61 74 63 68 28 4e 64 29 7b 72 28 4e 64 29 7d 7d 3a 43 7d 76 61 72 20 6c 2c 72 2c 41 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 44 2c 43 29 7b 6c 3d 44 3b 72 3d 43 7d 29 3b 74 68 69 73 2e 4e 61 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 72 29 29 3b 72 65 74 75 72 6e 20 41 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 Data Ascii: tion(g,h){function k(D,C){return typeof D==n?function(R){try{l(D(R))}catch(Nd){r(Nd)}}:C}var l,r,A=new b(function(D,C){l=D;r=C});this.Na(k(g,l),k(h,r));return A};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.Na=function(g,h){functi
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 75 62 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 67 62 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 72 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 72 29 26 26 65 28 72 29 3b 72 65 74 75 72 6e 20 6c 28 72 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f Data Ascii: unction e(k){if(!ub(k,g)){var l=new c;gb(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(r){if(r instanceof c)return r;Object.isExtensible(r)&&e(r);return l(r)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=O
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 6c 2c 6c 69 73 74 3a 72 2c 69 6e 64 65 78 3a 2d 31 2c 0a 55 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 78 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 6e 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 6e 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 Data Ascii: l,list:r,index:-1,U:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=x(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!=n\|\|!a.prototype.entries\|\|typeof Object.seal!=n)return!1;try{var h=Object
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 72 3b 21 28 72 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 72 3d 72 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 72 5b 31 5d 2c 72 5b 30 5d 2c 0a 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 67 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 76 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 Data Ascii: tion(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),r;!(r=l.next()).done;)r=r.value,h.call(k,r[1],r[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var g=0;return e});v("Set",function(
2025-03-14 10:18:19 UTC	1390	IN	Data Raw: 28 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 63 2b 2b 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 66 2c 61 5b 66 5d 29 2c 64 6f 6e 65 3a 21 31 7d 7d 64 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 65 7d 76 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 Data Ascii: (a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a[f]),done:!1}}d=!0;return{done:!0,value:void 0}}};e[Symbol.iterator]=function(){return e};return e}v("Array.prototype.entries",function(a){re

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.10	49688	142.250.186.132	443	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 10:18:20 UTC	599	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CJe2yQEIo7bJAQipncoBCJr0ygEIk6HLAQiKo8sBCIWgzQEI/aXOAQiA1s4BCMnczgEI4ODOAQjl484BCK/kzgEIyOTOAQjf5M4BCIXlzgEIi+XOAQiO5c4B Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 10:18:20 UTC	1303	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 10:18:20 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-_laW_bBlfpGyIIwvMlFFdA' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-14 10:18:20 UTC	87	IN	Data Raw: 34 35 64 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 73 65 6c 65 6e 61 20 67 6f 6d 65 7a 20 62 65 6e 6e 79 20 62 6c 61 6e 63 6f 20 73 75 6e 73 65 74 20 62 6c 76 64 22 2c 22 6e 66 6c 20 66 72 65 65 20 61 67 65 6e 74 73 20 73 69 67 6e 69 6e 67 73 22 2c 22 6c 61 79 6f Data Ascii: 45d)]}'["",["selena gomez benny blanco sunset blvd","nfl free agents signings","layo
2025-03-14 10:18:20 UTC	1037	IN	Data Raw: 66 66 73 20 65 64 77 61 72 64 20 6a 6f 6e 65 73 22 2c 22 6e 69 6e 74 65 6e 64 6f 20 73 77 69 74 63 68 20 67 61 6d 65 73 22 2c 22 63 68 69 63 61 67 6f 20 72 69 76 65 72 20 64 79 65 69 6e 67 20 32 30 32 35 22 2c 22 63 72 6f 73 73 66 69 74 20 6f 70 65 6e 20 32 35 2e 33 20 77 6f 72 6b 6f 75 74 73 22 2c 22 73 74 65 61 6d 20 73 70 72 69 6e 67 20 73 61 6c 65 20 32 30 32 35 20 67 61 6d 65 73 22 2c 22 6c 69 70 20 62 75 20 74 61 6e 20 69 6e 74 65 6c 20 63 65 6f 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 6f Data Ascii: ffs edward jones","nintendo switch games","chicago river dyeing 2025","crossfit open 25.3 workouts","steam spring sale 2025 games","lip bu tan intel ceo"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"Cho
2025-03-14 10:18:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.10	49710	172.67.149.117	443	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 10:18:25 UTC	553	OUT	GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1 Host: img3.proshkolu.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 10:18:25 UTC	1025	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 14 Mar 2025 10:18:25 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close location: http://data3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block Cache-Control: max-age=14400 CF-Cache-Status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=UzLT8Fe7wT4Zac%2FOV2ilrk2aXtT6uwEz6klSgqpydGLtYqsK2M%2FLjk%2BzPPQXQUuBOsS8dju46qgklKv%2FrAdYZiqbLoXZy%2Bf6x1q5eFSMCxuY%2B%2BbuIupEgdEm0Y2TecFPjyqvmg%3D%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 920306e37863d123-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1645&min_rtt=1638&rtt_var=629&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1125&delivery_rate=1719670&cwnd=122&unsent_bytes=0&cid=65726ace54d8d4aa&ts=252&x=0"
2025-03-14 10:18:25 UTC	175	IN	Data Raw: 61 39 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 35 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: a9<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.25.5</center></body></html>
2025-03-14 10:18:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.10	49714	104.21.29.163	443	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 10:18:26 UTC	554	OUT	GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1 Host: data3.proshkolu.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 10:18:26 UTC	1049	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 10:18:26 GMT Content-Type: image/gif Content-Length: 18837 Connection: close Cache-Control: max-age=2592000 etag: "5db4b9f0-4995" expires: Fri, 11 Apr 2025 02:51:05 GMT last-modified: Sat, 26 Oct 2019 21:26:08 GMT x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 195405 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=D9tOYunTmvcDcaWnMq20U%2F%2FMHBHIctfyvLtcbUxTUeylnXdMYky6I08%2F%2FUtHGxIJmX5hNOM%2BD%2B8o3kjSD%2B914bYXHyd0vxDXEGuP0%2B7XLm7Ge7rjrter8O9AjPLXqdKenoT0zXk%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 920306eb4e71430e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1692&min_rtt=1688&rtt_var=641&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2826&recv_bytes=1126&delivery_rate=1696687&cwnd=168&unsent_bytes=0&cid=948798ab2af80e6f&ts=161&x=0"
2025-03-14 10:18:26 UTC	320	IN	Data Raw: 47 49 46 38 39 61 8a 01 76 00 f7 ff 00 e4 ce db a5 98 5c 73 00 6f c2 1c bb c9 9c b7 77 05 48 c7 49 c7 51 00 36 94 00 90 f6 ee f3 f8 f1 f5 b8 0f b3 d6 96 c7 c0 8b aa 9b 47 7a 9e 5d e4 e4 b8 da ae 6b 92 c2 33 bf 86 00 65 65 03 94 c9 85 b6 f6 8a eb b8 7d a1 a4 58 85 5f 00 43 ee e5 a2 e3 ad d8 ae 8b d7 d8 8c c7 a6 03 11 a0 6f 9c bd 4e a3 c9 6b b4 e3 9c df e9 bc e2 dc be cf c5 7d b1 98 04 74 bf 31 a3 d8 b5 cd ed de e7 80 16 55 a5 4b 87 e5 a6 e3 74 53 62 8f 59 84 a2 3d 83 71 00 56 af 8e a9 69 00 4e 89 26 61 9b 39 79 d2 ad c2 6d 4e 96 cf af f4 f8 d7 f7 b6 7a 9d b8 5a 9f de 91 d8 c5 63 ae fd f9 cb c1 b0 b0 c2 58 a9 ba 43 9f e6 15 79 a8 00 87 c1 73 ab be 67 a7 92 37 6d b6 69 9e a0 02 7d e0 a5 d4 d6 7d c4 43 94 93 d4 94 f3 82 02 58 db 85 da a2 93 8d a5 2e 86 8e 66 Data Ascii: GIF89av\sowHIQ6Gz]k3ee}X_CoNk}t1UKtSbY=qViN&a9ymNzZcXCysg7mi}}CX.f
2025-03-14 10:18:26 UTC	1369	IN	Data Raw: 6b eb 64 00 45 a8 15 87 8a 3b 8a 9d 17 78 f7 ca f7 f5 ad b5 8b 14 64 dc 9c cf ae 43 93 cd 6a e7 6c 02 45 7f 11 54 76 2d 59 86 1e 5e ce 5c cd a8 d9 eb b6 1b 9a d3 84 c2 ea c7 e2 82 00 7e ee e1 e9 76 01 5c cf 6f bb f8 87 b0 66 31 7d 78 03 51 cd bf f2 ec af e7 87 66 a7 8f 00 6d f3 79 a7 72 4b dd 7d 00 5f d2 9e c3 b4 49 69 95 73 83 91 27 68 e0 b9 f9 92 1e 6b dd b1 d1 f2 9e 8e e3 c9 fa d4 6c d1 f2 2a dc 70 02 4c f5 b6 ee ce 76 ba 85 3f 69 e8 76 81 c9 7b 8f 50 0b c7 ed bf ea cd 96 bc aa 38 8d d0 4a 8e f8 ab f3 fe fe f3 8c 53 a8 cc 8f 78 cd a6 bd 93 45 41 f8 c0 f6 f4 53 dc 57 0c 18 41 02 6c e3 a2 f1 39 56 62 b4 30 42 7e 0b 51 d5 a9 7f a2 76 b2 e2 d6 fc a8 00 a3 9c 10 8c f0 d3 eb 9c 60 90 f7 57 ae d8 47 b8 a0 7d 8c be b0 6b 78 a3 7f 79 02 10 a5 c8 a3 f9 e4 f9 ca Data Ascii: kdE;xdCjlETv-Y^\~v\of1}xQfmyrK}_Iis'hkl*pLv?iv{P8JSxEASWAl9Vb0B~Qv`WG}kxy
2025-03-14 10:18:26 UTC	1369	IN	Data Raw: c4 22 0d 63 94 02 1d 82 68 42 ca 08 22 44 22 c1 2b 08 4c 20 f0 41 a9 0d 0f 01 04 1b 18 43 06 22 1d 54 50 42 1f 43 e8 d0 45 17 2a 44 df 50 0d 0e ac 6c 8c f1 67 c7 02 4e 12 95 50 43 0e 27 2f 78 02 18 8e 50 b9 e0 ed 6c 04 10 d0 05 0b d0 a6 b6 1e 54 22 04 3c 78 5f fc 40 67 90 88 61 01 03 18 c8 41 3f e4 c1 c1 58 24 af 04 46 c0 c2 0a de c0 89 46 b0 a3 3f 0e 49 80 1c 44 a0 09 4d 8c 40 10 2c 38 5c 89 ac 21 02 26 50 30 21 0d 58 81 23 f0 a0 86 43 14 60 6a 04 51 81 31 ff 62 81 8d 36 14 60 4b ff c0 00 36 2a a0 06 40 d0 2e 21 d3 13 41 1d 5e c1 31 83 a4 0c 0b c6 c1 46 eb 08 b4 81 4f a0 2d 6b 78 08 46 25 78 70 0b 2a 6c 48 25 39 e0 c4 14 b5 00 83 ef 65 84 04 56 2b cf f8 8c 07 00 44 c0 ac 04 39 c0 46 04 8c c0 0a 7a 90 a3 0b ab 88 c0 b9 26 42 80 17 88 40 10 0a 10 c4 27 0c Data Ascii: "chB"D"+L AC"TPBCEDPlgNPC'/xPlT"<x_@gaA?X$FF?IDM@,8\!&P0!X#C`jQ1b6`K6@.!A^1FO-kxF%xp*lH%9eV+D9Fz&B@'
2025-03-14 10:18:26 UTC	1369	IN	Data Raw: 1a 00 5c 81 44 00 c1 bc 38 04 a4 18 92 00 40 1c 49 0f 87 00 d5 0c 36 b1 87 42 36 2a cc 0d 69 40 17 de 70 88 0c f4 bb 20 01 c2 42 3c 0e f0 85 93 a9 c0 1d d6 88 bd 40 13 52 84 30 e4 ee b7 08 c9 81 ff 11 14 a0 08 74 58 2b 64 73 98 c4 cf d7 bf d8 0c b4 9f e4 27 69 c0 13 f0 2c 80 78 c0 9c 22 17 78 41 35 42 60 02 3e ec 4a 64 32 00 0b 46 e6 02 ee 47 70 07 d0 06 07 d0 02 67 30 09 a1 a6 7e 69 16 11 11 00 04 70 60 00 6d 60 0d 92 c0 3d 62 e7 2f b0 f6 0f f9 d7 01 3c 60 0e 13 10 2a 80 e0 7f 45 e7 7e 26 e8 7e 02 78 06 d8 30 4f 5f e0 7e 0f 88 50 0e 50 01 e4 30 01 19 90 06 8b d5 6d a1 62 0a 84 02 79 68 c2 04 c0 95 7f 4d 90 0c d6 80 09 87 56 0b 21 e8 73 eb 97 84 32 70 06 88 c6 6d 2f 28 10 a6 35 4f 04 17 07 ab 30 31 a4 25 6b 3f 00 82 30 f0 84 0a 11 1e ab c7 28 74 00 08 84 Data Ascii: \D8@I6B6i@p B<@R0tX+ds'i,x"xA5B`>Jd2FGpg0~ip`m`=b/<`E~&~x0O_~PP0mbyhMV!s2pm/(5O01%k?0(t
2025-03-14 10:18:26 UTC	1369	IN	Data Raw: 60 80 0d 05 70 43 16 0a 49 71 70 08 a4 f8 48 0b 11 01 e4 b0 06 6e d0 06 3a b2 27 66 e0 0e 65 20 04 d5 28 89 29 c0 0e e1 e0 48 4a fb 10 24 60 9e 09 f8 43 24 a0 02 3d 14 07 7e 43 11 29 d0 06 b4 60 5d 63 eb 10 24 00 08 2d 69 02 50 3b 10 35 30 03 21 d4 05 f7 d0 08 6f 40 04 15 50 01 78 a0 08 63 d4 03 9f 35 01 80 20 b1 d4 b2 0a 4d 70 02 3e 04 2b 04 d0 06 36 06 06 e6 00 08 d2 00 0d 20 8b 32 5f 23 0a 94 a0 03 46 f3 97 0e 40 0f 1c 74 3f 24 90 02 c6 40 04 8a 9b b4 02 51 04 c7 c0 8e 65 c9 7d 48 e0 09 6a 90 a3 7c b6 02 98 d4 05 05 40 05 5d e0 02 6e 40 5c 48 60 47 25 a0 03 da 26 aa 2a 01 00 6d 70 9b dd 85 11 ca c7 09 31 60 bc 13 a1 02 c7 06 0b 92 e8 4e 2f 30 45 92 b7 57 4f 60 08 c9 e0 65 30 80 ac 4f ff a8 7c 60 20 b3 17 a1 02 e5 60 64 01 95 03 8d 40 08 cd 70 90 12 d1 Data Ascii: `pCIqpHn:'fe ()HJ$`C$=~C)`]c$-iP;50!o@Pxc5 Mp>+6 2_#F@t?$@Qe}Hj\|@]n@\H`G%&*mp1`N/0EWO`e0O\|` `d@p
2025-03-14 10:18:26 UTC	1369	IN	Data Raw: 56 e4 d3 01 9d 6e 06 3c 10 0c 0c e0 09 1b 90 07 10 e0 06 16 00 02 e7 e0 b4 f2 59 ad 35 40 07 9c 30 09 5a 69 2c 9a f2 05 ea 1e a2 7f 8c 41 9e fa 0a d4 cb e7 03 41 79 c9 40 08 77 1d 20 56 b0 08 71 e0 dd 33 a1 c5 18 90 96 dd 9c 11 05 00 07 46 00 00 58 c0 4d ed b2 10 c7 32 03 0e 90 36 e6 60 28 47 2e b5 85 90 d3 05 30 b0 ab 90 0c 3c 40 0a 40 30 01 3f c7 85 05 f0 04 3c 50 01 2d 20 02 ab d0 f0 0a f1 f0 0e 80 08 37 70 bf 4b fe 0f 0d ff 99 0c ee 40 d9 fd ba 10 e1 e1 00 3b b0 b5 ff a8 7a 9e c0 03 78 00 02 fb 90 a4 d5 6a 73 11 e3 00 00 50 01 84 70 70 23 ee 00 d8 f0 f2 71 40 c4 7d 39 03 77 a0 31 11 89 01 11 c0 02 e3 b3 01 3b 90 04 65 00 04 94 00 02 d9 de 01 bf 4b 60 3c 60 05 d1 b6 84 07 c0 9c 56 f3 02 6e 66 d9 f1 1a 07 b5 90 01 c8 50 04 12 f3 1b 45 70 02 c2 b2 bc 96 Data Ascii: Vn<Y5@0Zi,AAy@w Vq3FXM26`(G.0<@@0?<P- 7pK@;zxjsPpp#q@}9w1;eK`<`VnfPEp
2025-03-14 10:18:26 UTC	1369	IN	Data Raw: 02 7a ba 39 c2 1a 01 fe 10 a0 08 a5 a9 2b 02 3a f8 c8 92 04 54 27 39 6c 80 2d 20 f8 89 0c 60 01 08 12 8c a4 06 05 70 cf 21 26 60 82 17 e8 c0 08 3c ab 40 35 3c d8 ff 80 12 3c a0 1b bb 60 0c de 6a 02 00 76 20 00 01 33 78 05 29 a8 56 b5 ab 89 80 05 1b 60 01 38 42 20 04 3e b8 67 12 d4 aa 01 20 0e 71 88 01 bc c2 04 40 d0 41 08 34 80 87 0e 7a b0 1a c1 20 c2 13 00 21 83 12 4e 6b 24 92 33 c2 05 1a 80 88 3c 44 20 02 d8 c0 03 38 44 10 08 11 e8 02 1c 4d 88 84 11 5e 31 8c ae 3c 2e 65 23 b9 40 23 84 00 83 f6 4d 22 0e cd a8 4d 6d 26 31 01 5b 1c 81 10 4f cc c0 19 4c 54 a7 85 c4 23 03 5f 40 5f 44 22 e0 00 6c 1c 2b 1e ff 72 00 10 aa d1 84 35 20 00 03 0d 70 0e 16 36 20 bc 11 50 02 09 78 00 c3 11 0e 21 9e 02 1c f0 20 18 28 43 13 10 81 84 0a f4 41 03 c1 b0 5e 2b 2b 30 a6 21 Data Ascii: z9+:T'9l- `p!&`<@5<<`jv 3x)V`8B >g q@A4z !Nk$3<D 8DM^1<.e#@#M"Mm&1[OLT#_@_D"l+r5 p6 Px! (CA^++0!
2025-03-14 10:18:26 UTC	1369	IN	Data Raw: 16 25 64 00 9d 08 1b 4a f2 d9 11 18 e7 e3 32 05 0d 80 4a 6d 34 c3 cd 9c 24 7f 12 51 61 df 24 45 d1 a1 22 f8 c0 05 6d 68 ed 15 84 71 80 49 20 1e de c0 d7 89 03 d2 83 f8 53 e1 10 15 80 81 68 b1 b9 03 78 87 74 29 02 8c 03 8e e0 1b a5 a3 13 06 cd 1b 09 c8 d0 02 3d e8 86 ae 00 19 0a 70 0f 58 80 85 e5 62 87 e2 5a ae 9d c3 00 26 18 1d 52 e9 23 17 90 96 2f 98 16 c5 13 3e 80 21 80 27 ea a5 06 64 c1 80 69 80 36 f8 9f e7 ab 89 14 50 11 ce 39 85 33 d8 a1 6b 93 41 20 94 c1 06 98 83 a6 fb 3e 15 b0 a2 89 cb 89 06 a0 80 43 b0 35 77 e3 32 2f c0 b2 d2 c1 b7 83 20 80 c9 7b 2d cb 9a a7 d6 fa ac 91 b0 93 ae 68 07 21 11 00 59 80 01 ba 02 04 9d 9b 81 5a 4b c2 83 20 81 02 90 96 ff 02 b8 28 68 28 80 23 54 c3 20 44 b6 19 c8 8c 3a c4 25 05 20 3f ba c3 89 14 48 15 a9 28 82 06 88 b4 Data Ascii: %dJ2Jm4$Qa$E"mhqI Shxt)=pXbZ&R#/>!'di6P93kA >C5w2/ {-h!YZK (h(#T D:% ?H(
2025-03-14 10:18:26 UTC	1369	IN	Data Raw: 9b 27 a4 09 04 7a fe 03 49 18 09 19 a0 e8 3f fb 98 a0 af 45 8a 34 62 cd 17 02 cd 5a f6 3f 67 f4 22 50 d8 02 e5 9e 51 63 02 bd 62 8e 39 02 1d 32 48 a7 19 19 be 51 23 06 17 54 4b 47 88 51 f4 44 1f 7d 72 df 4a 75 11 46 47 81 da 47 10 42 08 13 30 58 bf 15 ec 3f 24 d9 7d 1c c3 f9 c2 17 b0 71 88 4b b4 c1 10 5e 9b c4 d2 4a b2 0e 6e fc 23 40 18 49 81 44 fe f1 04 34 10 e2 1f 80 70 c1 70 60 10 ba 7f 74 41 0d 9a fb 87 1c 26 32 42 6a 3c e2 1f fa 98 c0 34 bc 75 9a 0e 5e e4 18 ff 40 c2 0e 92 50 b9 13 14 43 08 84 e8 c9 21 f8 70 08 27 5c f0 1f 9c 00 83 1a ff 20 64 9a 89 74 81 13 02 99 84 0b 32 30 8a 03 68 61 20 71 b0 5b 49 3a 11 8a 7f 1c c2 7e 93 99 00 37 60 30 09 8e 90 63 02 e5 ab 88 03 10 98 90 17 e8 e3 1f cc f0 49 1b 86 34 09 4b fc 63 42 04 d9 82 78 32 20 03 83 b5 40 Data Ascii: 'zI?E4bZ?g"PQcb92HQ#TKGQD}rJuFGGB0X?$}qK^Jn#@ID4pp`tA&2Bj<4u^@PC!p'\ dt20ha q[I:~7`0cI4KcBx2 @
2025-03-14 10:18:26 UTC	1369	IN	Data Raw: f0 35 80 c0 ee 44 28 d6 3c 7c aa 54 96 b0 d0 b3 46 5a 02 06 8a 9c 65 63 62 d0 ee 44 74 30 04 a5 60 81 05 f1 88 5c 20 a8 f1 8f 3c 10 84 08 17 b4 2d cd 2d 02 f9 89 ec 0d 81 1c 8c 41 71 74 98 c3 1d c2 d7 e9 5d d9 44 2c 64 4c 92 00 17 7d 20 4b 1a be 55 c6 40 08 db fe a3 02 3f f0 7c ff 48 22 37 90 4e 28 b4 24 9d 1b a2 49 ce 30 0a 8b 6a a1 7c 05 fe 0f 7f 64 19 78 8b 98 92 22 63 10 08 0d 46 4e 11 07 64 8a 0a c5 40 1f 67 e0 42 e5 f0 04 49 62 02 87 80 06 ca 44 10 65 80 54 3e 71 04 93 a0 06 f4 d1 0d c8 91 01 5e d0 05 2e 90 51 73 d0 02 de 86 11 8f 84 4e 3e e1 3a 28 e2 13 0a 87 7d d5 33 11 ae 63 05 7d 36 11 e2 f7 11 74 90 05 e0 25 07 3c 00 6b 25 c1 0e ba f2 13 32 b0 59 23 51 7f 16 b1 09 82 50 09 c3 83 6b 05 a3 11 80 60 36 61 75 1d e0 e5 01 66 03 08 26 30 21 2c 04 06 Data Ascii: 5D(<\|TFZecbDt0`\ <--Aqt]D,dL} KU@?\|H"7N($I0j\|dx"cFNd@gBIbDeT>q^.QsN>:(}3c}6t%<k%2Y#QPk`6auf&0!,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.10	49718	104.21.29.163	443	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 10:18:27 UTC	446	OUT	GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1 Host: data3.proshkolu.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 10:18:27 UTC	1045	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 10:18:27 GMT Content-Type: image/gif Content-Length: 18837 Connection: close Cache-Control: max-age=2592000 etag: "5db4b9f0-4995" expires: Tue, 08 Apr 2025 12:57:47 GMT last-modified: Sat, 26 Oct 2019 21:26:08 GMT x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 418432 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2BxVmtwC7A5pqZNxKMtKQLxGQP77l6dGPPp%2FbX29TotKshu83KfzFmGtKw%2FWyR%2FC5Y3O6PD1xjYctIwM2f%2FkRSyhDK7d7w10eeV%2FZjK8npk8vfer5gkGsp65KqhUHaIepQLjvnTI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 920306f03eafb2c0-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2111&min_rtt=2104&rtt_var=803&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1018&delivery_rate=1351226&cwnd=220&unsent_bytes=0&cid=f01f94201de0d01d&ts=130&x=0"
2025-03-14 10:18:27 UTC	324	IN	Data Raw: 47 49 46 38 39 61 8a 01 76 00 f7 ff 00 e4 ce db a5 98 5c 73 00 6f c2 1c bb c9 9c b7 77 05 48 c7 49 c7 51 00 36 94 00 90 f6 ee f3 f8 f1 f5 b8 0f b3 d6 96 c7 c0 8b aa 9b 47 7a 9e 5d e4 e4 b8 da ae 6b 92 c2 33 bf 86 00 65 65 03 94 c9 85 b6 f6 8a eb b8 7d a1 a4 58 85 5f 00 43 ee e5 a2 e3 ad d8 ae 8b d7 d8 8c c7 a6 03 11 a0 6f 9c bd 4e a3 c9 6b b4 e3 9c df e9 bc e2 dc be cf c5 7d b1 98 04 74 bf 31 a3 d8 b5 cd ed de e7 80 16 55 a5 4b 87 e5 a6 e3 74 53 62 8f 59 84 a2 3d 83 71 00 56 af 8e a9 69 00 4e 89 26 61 9b 39 79 d2 ad c2 6d 4e 96 cf af f4 f8 d7 f7 b6 7a 9d b8 5a 9f de 91 d8 c5 63 ae fd f9 cb c1 b0 b0 c2 58 a9 ba 43 9f e6 15 79 a8 00 87 c1 73 ab be 67 a7 92 37 6d b6 69 9e a0 02 7d e0 a5 d4 d6 7d c4 43 94 93 d4 94 f3 82 02 58 db 85 da a2 93 8d a5 2e 86 8e 66 Data Ascii: GIF89av\sowHIQ6Gz]k3ee}X_CoNk}t1UKtSbY=qViN&a9ymNzZcXCysg7mi}}CX.f
2025-03-14 10:18:27 UTC	1369	IN	Data Raw: 45 a8 15 87 8a 3b 8a 9d 17 78 f7 ca f7 f5 ad b5 8b 14 64 dc 9c cf ae 43 93 cd 6a e7 6c 02 45 7f 11 54 76 2d 59 86 1e 5e ce 5c cd a8 d9 eb b6 1b 9a d3 84 c2 ea c7 e2 82 00 7e ee e1 e9 76 01 5c cf 6f bb f8 87 b0 66 31 7d 78 03 51 cd bf f2 ec af e7 87 66 a7 8f 00 6d f3 79 a7 72 4b dd 7d 00 5f d2 9e c3 b4 49 69 95 73 83 91 27 68 e0 b9 f9 92 1e 6b dd b1 d1 f2 9e 8e e3 c9 fa d4 6c d1 f2 2a dc 70 02 4c f5 b6 ee ce 76 ba 85 3f 69 e8 76 81 c9 7b 8f 50 0b c7 ed bf ea cd 96 bc aa 38 8d d0 4a 8e f8 ab f3 fe fe f3 8c 53 a8 cc 8f 78 cd a6 bd 93 45 41 f8 c0 f6 f4 53 dc 57 0c 18 41 02 6c e3 a2 f1 39 56 62 b4 30 42 7e 0b 51 d5 a9 7f a2 76 b2 e2 d6 fc a8 00 a3 9c 10 8c f0 d3 eb 9c 60 90 f7 57 ae d8 47 b8 a0 7d 8c be b0 6b 78 a3 7f 79 02 10 a5 c8 a3 f9 e4 f9 ca 03 44 a1 78 Data Ascii: E;xdCjlETv-Y^\~v\of1}xQfmyrK}_Iis'hkl*pLv?iv{P8JSxEASWAl9Vb0B~Qv`WG}kxyDx
2025-03-14 10:18:27 UTC	1369	IN	Data Raw: 94 02 1d 82 68 42 ca 08 22 44 22 c1 2b 08 4c 20 f0 41 a9 0d 0f 01 04 1b 18 43 06 22 1d 54 50 42 1f 43 e8 d0 45 17 2a 44 df 50 0d 0e ac 6c 8c f1 67 c7 02 4e 12 95 50 43 0e 27 2f 78 02 18 8e 50 b9 e0 ed 6c 04 10 d0 05 0b d0 a6 b6 1e 54 22 04 3c 78 5f fc 40 67 90 88 61 01 03 18 c8 41 3f e4 c1 c1 58 24 af 04 46 c0 c2 0a de c0 89 46 b0 a3 3f 0e 49 80 1c 44 a0 09 4d 8c 40 10 2c 38 5c 89 ac 21 02 26 50 30 21 0d 58 81 23 f0 a0 86 43 14 60 6a 04 51 81 31 ff 62 81 8d 36 14 60 4b ff c0 00 36 2a a0 06 40 d0 2e 21 d3 13 41 1d 5e c1 31 83 a4 0c 0b c6 c1 46 eb 08 b4 81 4f a0 2d 6b 78 08 46 25 78 70 0b 2a 6c 48 25 39 e0 c4 14 b5 00 83 ef 65 84 04 56 2b cf f8 8c 07 00 44 c0 ac 04 39 c0 46 04 8c c0 0a 7a 90 a3 0b ab 88 c0 b9 26 42 80 17 88 40 10 0a 10 c4 27 0c c0 3d 3d fc Data Ascii: hB"D"+L AC"TPBCEDPlgNPC'/xPlT"<x_@gaA?X$FF?IDM@,8\!&P0!X#C`jQ1b6`K6@.!A^1FO-kxF%xp*lH%9eV+D9Fz&B@'==
2025-03-14 10:18:27 UTC	1369	IN	Data Raw: 44 00 c1 bc 38 04 a4 18 92 00 40 1c 49 0f 87 00 d5 0c 36 b1 87 42 36 2a cc 0d 69 40 17 de 70 88 0c f4 bb 20 01 c2 42 3c 0e f0 85 93 a9 c0 1d d6 88 bd 40 13 52 84 30 e4 ee b7 08 c9 81 ff 11 14 a0 08 74 58 2b 64 73 98 c4 cf d7 bf d8 0c b4 9f e4 27 69 c0 13 f0 2c 80 78 c0 9c 22 17 78 41 35 42 60 02 3e ec 4a 64 32 00 0b 46 e6 02 ee 47 70 07 d0 06 07 d0 02 67 30 09 a1 a6 7e 69 16 11 11 00 04 70 60 00 6d 60 0d 92 c0 3d 62 e7 2f b0 f6 0f f9 d7 01 3c 60 0e 13 10 2a 80 e0 7f 45 e7 7e 26 e8 7e 02 78 06 d8 30 4f 5f e0 7e 0f 88 50 0e 50 01 e4 30 01 19 90 06 8b d5 6d a1 62 0a 84 02 79 68 c2 04 c0 95 7f 4d 90 0c d6 80 09 87 56 0b 21 e8 73 eb 97 84 32 70 06 88 c6 6d 2f 28 10 a6 35 4f 04 17 07 ab 30 31 a4 25 6b 3f 00 82 30 f0 84 0a 11 1e ab c7 28 74 00 08 84 20 0f 8b e6 Data Ascii: D8@I6B6i@p B<@R0tX+ds'i,x"xA5B`>Jd2FGpg0~ip`m`=b/<`E~&~x0O_~PP0mbyhMV!s2pm/(5O01%k?0(t
2025-03-14 10:18:27 UTC	1369	IN	Data Raw: 70 43 16 0a 49 71 70 08 a4 f8 48 0b 11 01 e4 b0 06 6e d0 06 3a b2 27 66 e0 0e 65 20 04 d5 28 89 29 c0 0e e1 e0 48 4a fb 10 24 60 9e 09 f8 43 24 a0 02 3d 14 07 7e 43 11 29 d0 06 b4 60 5d 63 eb 10 24 00 08 2d 69 02 50 3b 10 35 30 03 21 d4 05 f7 d0 08 6f 40 04 15 50 01 78 a0 08 63 d4 03 9f 35 01 80 20 b1 d4 b2 0a 4d 70 02 3e 04 2b 04 d0 06 36 06 06 e6 00 08 d2 00 0d 20 8b 32 5f 23 0a 94 a0 03 46 f3 97 0e 40 0f 1c 74 3f 24 90 02 c6 40 04 8a 9b b4 02 51 04 c7 c0 8e 65 c9 7d 48 e0 09 6a 90 a3 7c b6 02 98 d4 05 05 40 05 5d e0 02 6e 40 5c 48 60 47 25 a0 03 da 26 aa 2a 01 00 6d 70 9b dd 85 11 ca c7 09 31 60 bc 13 a1 02 c7 06 0b 92 e8 4e 2f 30 45 92 b7 57 4f 60 08 c9 e0 65 30 80 ac 4f ff a8 7c 60 20 b3 17 a1 02 e5 60 64 01 95 03 8d 40 08 cd 70 90 12 d1 00 bd 00 06 Data Ascii: pCIqpHn:'fe ()HJ$`C$=~C)`]c$-iP;50!o@Pxc5 Mp>+6 2_#F@t?$@Qe}Hj\|@]n@\H`G%&*mp1`N/0EWO`e0O\|` `d@p
2025-03-14 10:18:27 UTC	1369	IN	Data Raw: 9d 6e 06 3c 10 0c 0c e0 09 1b 90 07 10 e0 06 16 00 02 e7 e0 b4 f2 59 ad 35 40 07 9c 30 09 5a 69 2c 9a f2 05 ea 1e a2 7f 8c 41 9e fa 0a d4 cb e7 03 41 79 c9 40 08 77 1d 20 56 b0 08 71 e0 dd 33 a1 c5 18 90 96 dd 9c 11 05 00 07 46 00 00 58 c0 4d ed b2 10 c7 32 03 0e 90 36 e6 60 28 47 2e b5 85 90 d3 05 30 b0 ab 90 0c 3c 40 0a 40 30 01 3f c7 85 05 f0 04 3c 50 01 2d 20 02 ab d0 f0 0a f1 f0 0e 80 08 37 70 bf 4b fe 0f 0d ff 99 0c ee 40 d9 fd ba 10 e1 e1 00 3b b0 b5 ff a8 7a 9e c0 03 78 00 02 fb 90 a4 d5 6a 73 11 e3 00 00 50 01 84 70 70 23 ee 00 d8 f0 f2 71 40 c4 7d 39 03 77 a0 31 11 89 01 11 c0 02 e3 b3 01 3b 90 04 65 00 04 94 00 02 d9 de 01 bf 4b 60 3c 60 05 d1 b6 84 07 c0 9c 56 f3 02 6e 66 d9 f1 1a 07 b5 90 01 c8 50 04 12 f3 1b 45 70 02 c2 b2 bc 96 2e 07 a2 60 Data Ascii: n<Y5@0Zi,AAy@w Vq3FXM26`(G.0<@@0?<P- 7pK@;zxjsPpp#q@}9w1;eK`<`VnfPEp.`
2025-03-14 10:18:27 UTC	1369	IN	Data Raw: c2 1a 01 fe 10 a0 08 a5 a9 2b 02 3a f8 c8 92 04 54 27 39 6c 80 2d 20 f8 89 0c 60 01 08 12 8c a4 06 05 70 cf 21 26 60 82 17 e8 c0 08 3c ab 40 35 3c d8 ff 80 12 3c a0 1b bb 60 0c de 6a 02 00 76 20 00 01 33 78 05 29 a8 56 b5 ab 89 80 05 1b 60 01 38 42 20 04 3e b8 67 12 d4 aa 01 20 0e 71 88 01 bc c2 04 40 d0 41 08 34 80 87 0e 7a b0 1a c1 20 c2 13 00 21 83 12 4e 6b 24 92 33 c2 05 1a 80 88 3c 44 20 02 d8 c0 03 38 44 10 08 11 e8 02 1c 4d 88 84 11 5e 31 8c ae 3c 2e 65 23 b9 40 23 84 00 83 f6 4d 22 0e cd a8 4d 6d 26 31 01 5b 1c 81 10 4f cc c0 19 4c 54 a7 85 c4 23 03 5f 40 5f 44 22 e0 00 6c 1c 2b 1e ff 72 00 10 aa d1 84 35 20 00 03 0d 70 0e 16 36 20 bc 11 50 02 09 78 00 c3 11 0e 21 9e 02 1c f0 20 18 28 43 13 10 81 84 0a f4 41 03 c1 b0 5e 2b 2b 30 a6 21 0c c1 01 8d Data Ascii: +:T'9l- `p!&`<@5<<`jv 3x)V`8B >g q@A4z !Nk$3<D 8DM^1<.e#@#M"Mm&1[OLT#_@_D"l+r5 p6 Px! (CA^++0!
2025-03-14 10:18:27 UTC	1369	IN	Data Raw: 9d 08 1b 4a f2 d9 11 18 e7 e3 32 05 0d 80 4a 6d 34 c3 cd 9c 24 7f 12 51 61 df 24 45 d1 a1 22 f8 c0 05 6d 68 ed 15 84 71 80 49 20 1e de c0 d7 89 03 d2 83 f8 53 e1 10 15 80 81 68 b1 b9 03 78 87 74 29 02 8c 03 8e e0 1b a5 a3 13 06 cd 1b 09 c8 d0 02 3d e8 86 ae 00 19 0a 70 0f 58 80 85 e5 62 87 e2 5a ae 9d c3 00 26 18 1d 52 e9 23 17 90 96 2f 98 16 c5 13 3e 80 21 80 27 ea a5 06 64 c1 80 69 80 36 f8 9f e7 ab 89 14 50 11 ce 39 85 33 d8 a1 6b 93 41 20 94 c1 06 98 83 a6 fb 3e 15 b0 a2 89 cb 89 06 a0 80 43 b0 35 77 e3 32 2f c0 b2 d2 c1 b7 83 20 80 c9 7b 2d cb 9a a7 d6 fa ac 91 b0 93 ae 68 07 21 11 00 59 80 01 ba 02 04 9d 9b 81 5a 4b c2 83 20 81 02 90 96 ff 02 b8 28 68 28 80 23 54 c3 20 44 b6 19 c8 8c 3a c4 25 05 20 3f ba c3 89 14 48 15 a9 28 82 06 88 b4 3c 2c c4 5f Data Ascii: J2Jm4$Qa$E"mhqI Shxt)=pXbZ&R#/>!'di6P93kA >C5w2/ {-h!YZK (h(#T D:% ?H(<,_
2025-03-14 10:18:27 UTC	1369	IN	Data Raw: 04 7a fe 03 49 18 09 19 a0 e8 3f fb 98 a0 af 45 8a 34 62 cd 17 02 cd 5a f6 3f 67 f4 22 50 d8 02 e5 9e 51 63 02 bd 62 8e 39 02 1d 32 48 a7 19 19 be 51 23 06 17 54 4b 47 88 51 f4 44 1f 7d 72 df 4a 75 11 46 47 81 da 47 10 42 08 13 30 58 bf 15 ec 3f 24 d9 7d 1c c3 f9 c2 17 b0 71 88 4b b4 c1 10 5e 9b c4 d2 4a b2 0e 6e fc 23 40 18 49 81 44 fe f1 04 34 10 e2 1f 80 70 c1 70 60 10 ba 7f 74 41 0d 9a fb 87 1c 26 32 42 6a 3c e2 1f fa 98 c0 34 bc 75 9a 0e 5e e4 18 ff 40 c2 0e 92 50 b9 13 14 43 08 84 e8 c9 21 f8 70 08 27 5c f0 1f 9c 00 83 1a ff 20 64 9a 89 74 81 13 02 99 84 0b 32 30 8a 03 68 61 20 71 b0 5b 49 3a 11 8a 7f 1c c2 7e 93 99 00 37 60 30 09 8e 90 63 02 e5 ab 88 03 10 98 90 17 e8 e3 1f cc f0 49 1b 86 34 09 4b fc 63 42 04 d9 82 78 32 20 03 83 b5 40 20 e0 fb 07 Data Ascii: zI?E4bZ?g"PQcb92HQ#TKGQD}rJuFGGB0X?$}qK^Jn#@ID4pp`tA&2Bj<4u^@PC!p'\ dt20ha q[I:~7`0cI4KcBx2 @
2025-03-14 10:18:27 UTC	1369	IN	Data Raw: ee 44 28 d6 3c 7c aa 54 96 b0 d0 b3 46 5a 02 06 8a 9c 65 63 62 d0 ee 44 74 30 04 a5 60 81 05 f1 88 5c 20 a8 f1 8f 3c 10 84 08 17 b4 2d cd 2d 02 f9 89 ec 0d 81 1c 8c 41 71 74 98 c3 1d c2 d7 e9 5d d9 44 2c 64 4c 92 00 17 7d 20 4b 1a be 55 c6 40 08 db fe a3 02 3f f0 7c ff 48 22 37 90 4e 28 b4 24 9d 1b a2 49 ce 30 0a 8b 6a a1 7c 05 fe 0f 7f 64 19 78 8b 98 92 22 63 10 08 0d 46 4e 11 07 64 8a 0a c5 40 1f 67 e0 42 e5 f0 04 49 62 02 87 80 06 ca 44 10 65 80 54 3e 71 04 93 a0 06 f4 d1 0d c8 91 01 5e d0 05 2e 90 51 73 d0 02 de 86 11 8f 84 4e 3e e1 3a 28 e2 13 0a 87 7d d5 33 11 ae 63 05 7d 36 11 e2 f7 11 74 90 05 e0 25 07 3c 00 6b 25 c1 0e ba f2 13 32 b0 59 23 51 7f 16 b1 09 82 50 09 c3 83 6b 05 a3 11 80 60 36 61 75 1d e0 e5 01 66 03 08 26 30 21 2c 04 06 08 c0 83 05 Data Ascii: D(<\|TFZecbDt0`\ <--Aqt]D,dL} KU@?\|H"7N($I0j\|dx"cFNd@gBIbDeT>q^.QsN>:(}3c}6t%<k%2Y#QPk`6auf&0!,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.10	49717	87.240.132.72	443	2756	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 10:18:27 UTC	641	OUT	GET /images/mobile/faviconnew.ico?5 HTTP/1.1 Host: m.vk.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 10:18:27 UTC	331	IN	HTTP/1.1 404 Not Found Server: kittenx Date: Fri, 14 Mar 2025 10:18:27 GMT Content-Type: text/html Content-Length: 550 Connection: close X-Frontend: front656902 Access-Control-Expose-Headers: X-Frontend X-Trace-Id: 3l2uNw2Lu5beOWZ9YpJJkRQoMNfVFQ Server-Timing: tid;desc="3l2uNw2Lu5beOWZ9YpJJkRQoMNfVFQ",front;dur=0.149
2025-03-14 10:18:27 UTC	550	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6b 69 74 74 65 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>kittenx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrom

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Behavior

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 5180, Parent PID: 5416

General

Target ID:	0
Start time:	06:18:10
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff7ea9f0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Registry Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

COM Activities

WMI Operations

Show Windows behavior

Process Activities

Process Created

Process Terminated

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Windows UI Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Token Activities

Token Adjusted

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 2756, Parent PID: 5180

General

Target ID:	1
Start time:	06:18:10
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2028,i,10434602534001142915,6824334478596106474,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2056 /prefetch:3
Imagebase:	0x7ff7ea9f0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6372, Parent PID: 5416

General

Target ID:	5
Start time:	06:18:17
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "https://kjhgt55555555555.blogspot.com/"
Imagebase:	0x7ff7ea9f0000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

File Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly