Edit tour

Windows Analysis Report
http://2gewf232.blogspot.com.au/

Overview

General Information

Sample URL:	http://2gewf232.blogspot.com.au/
Analysis ID:	1638950
Infos:

Detection

Score:	64
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus / Scanner detection for submitted sample

Antivirus detection for URL or domain

Creates files inside the system directory

Deletes files inside the Windows folder

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML body contains password input but no form action

HTML title does not match URL

None HTTPS page querying sensitive user data (password, username or email)

Classification

×

Process Tree

System is w10x64

chrome.exe (PID: 3356 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 4584 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1996,i,11612777921652111643,6421684416541279251,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2092 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6432 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://2gewf232.blogspot.com.au/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://2gewf232.blogspot.com.au/

Avira URL Cloud: detection malicious, Label: phishing

Antivirus detection for URL or domain

Source: http://u967289v.beget.tech/index_files/p	Avira URL Cloud: Label: phishing
Source: https://2gewf232.blogspot.com.au/	Avira URL Cloud: Label: phishing
Source: https://2gewf232.blogspot.com/favicon.ico	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/code.js?1	Avira URL Cloud: Label: phishing
Source: https://2gewf232.blogspot.com/	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/fav_logo.ico?5	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/counter	Avira URL Cloud: Label: phishing
Source: https://2gewf232.blogspot.com/feeds/posts/default	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/logo.png?2	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/s_yzgt.css	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/hit	Avira URL Cloud: Label: phishing
Source: https://2gewf232.blogspot.com	Avira URL Cloud: Label: phishing
Source: https://2gewf232.blogspot.com/feeds/posts/default?alt=rss	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech/index_files/s_cfmxw.css	Avira URL Cloud: Label: phishing
Source: http://2gewf232.blogspot.com/	Avira URL Cloud: Label: phishing
Source: http://u967289v.beget.tech	Avira URL Cloud: Label: phishing

Phishing

AI detected phishing page

Source: http://u967289v.beget.tech/

Joe Sandbox AI: Score: 9 Reasons: The brand 'Vkontakte' is well-known and is commonly associated with the domain 'vk.com'., The URL 'u967289v.beget.tech' does not match the legitimate domain 'vk.com'., The domain 'beget.tech' is a generic hosting provider, which is often used for phishing attempts., The presence of input fields for ' email:' and ':' suggests an attempt to capture sensitive information., The URL contains a subdomain 'u967289v', which is not associated with Vkontakte and is suspicious. DOM: 1.0.pages.csv

Source: http://u967289v.beget.tech/

HTTP Parser: Number of links: 1

Source: http://u967289v.beget.tech/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: http://u967289v.beget.tech/

HTTP Parser: Title: does not match URL

Source: http://u967289v.beget.tech/

HTTP Parser: Has password / email / username input fields

Source: http://u967289v.beget.tech/

HTTP Parser: <input type="password" .../> found

Source: http://u967289v.beget.tech/

HTTP Parser: No <meta name="author".. found

Source: http://u967289v.beget.tech/

HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 142.250.185.132:443 -> 192.168.2.7:49686 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.1:443 -> 192.168.2.7:49687 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.193:443 -> 192.168.2.7:49690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.142:443 -> 192.168.2.7:49692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.16.137:443 -> 192.168.2.7:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.16.137:443 -> 192.168.2.7:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.163:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.163:443 -> 192.168.2.7:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.149.117:443 -> 192.168.2.7:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.240.129.133:443 -> 192.168.2.7:49711 version: TLS 1.2

Source: global traffic	TCP traffic: 192.168.2.7:49694 -> 1.1.1.1:53
Source: global traffic	TCP traffic: 192.168.2.7:53223 -> 162.159.36.2:53

Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.215.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.98.62
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.215.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.98.62
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.195
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.195
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 162.159.36.2
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.185.195
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 2gewf232.blogspot.com.auConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: 2gewf232.blogspot.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEI66nOAQj2z84BCIDWzgEIwNjOAQjJ3M4BCITgzgEIouTOAQiv5M4BCOnkzgE=Sec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /js/platform.js HTTP/1.1Host: apis.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQE=Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://2gewf232.blogspot.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/v1/widgets/3566091532-css_bundle_v2.css HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://2gewf232.blogspot.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /static/v1/widgets/1354223504-widgets.js HTTP/1.1Host: www.blogger.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://2gewf232.blogspot.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1Host: img3.proshkolu.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1Host: data3.proshkolu.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1Host: data3.proshkolu.ruConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/mobile/faviconnew.ico?5 HTTP/1.1Host: m.vk.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /code.js?1 HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/s_cfmxw.css HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/s_yzgt.css HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/css,/;q=0.1Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/hit HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/p HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/counter HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/logo.png?2 HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/index_files/s_yzgt.cssAccept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/hit HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/p HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/logo.png?2 HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/counter HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/fav_logo.ico?5 HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Referer: http://u967289v.beget.tech/Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index_files/fav_logo.ico?5 HTTP/1.1Host: u967289v.beget.techConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: chromecache_72.1.dr

String found in binary or memory: inline:{css:1},disableRealtimeCallback:!1,drive_share:{skipInitCommand:!0},csi:{rate:.01},client:{cors:!1},signInDeprecation:{rate:0},include_granted_scopes:!0,llang:"en",iframes:{youtube:{params:{location:["search","hash"]},url:":socialhost:/:session_prefix:_/widget/render/youtube?usegapi=1",methods:["scroll","openwindow"]},ytsubscribe:{url:"https://www.youtube.com/subscribe_embed?usegapi=1"},plus_circle:{params:{url:""},url:":socialhost:/:session_prefix::se:_/widget/plus/circle?usegapi=1"}, equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: 2gewf232.blogspot.com.au
Source: global traffic	DNS traffic detected: DNS query: 2gewf232.blogspot.com
Source: global traffic	DNS traffic detected: DNS query: www.blogger.com
Source: global traffic	DNS traffic detected: DNS query: apis.google.com
Source: global traffic	DNS traffic detected: DNS query: u967289v.beget.tech
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: img3.proshkolu.ru
Source: global traffic	DNS traffic detected: DNS query: data3.proshkolu.ru
Source: global traffic	DNS traffic detected: DNS query: m.vk.com
Source: global traffic	DNS traffic detected: DNS query: 241.42.69.40.in-addr.arpa

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundServer: kittenxDate: Fri, 14 Mar 2025 23:44:34 GMTContent-Type: text/htmlContent-Length: 550Connection: closeX-Frontend: front656800Access-Control-Expose-Headers: X-FrontendX-Trace-Id: tachO_llAX41ObFfoWk9kTslh3NrSwServer-Timing: tid;desc="tachO_llAX41ObFfoWk9kTslh3NrSw"

Source: chromecache_77.1.dr	String found in binary or memory: http://2gewf232.blogspot.com/
Source: chromecache_70.1.dr	String found in binary or memory: http://csi.gstatic.com/csi
Source: chromecache_77.1.dr	String found in binary or memory: http://schema.org/Blog
Source: chromecache_77.1.dr	String found in binary or memory: http://u967289v.beget.tech
Source: chromecache_77.1.dr	String found in binary or memory: https://2gewf232.blogspot.com
Source: chromecache_77.1.dr	String found in binary or memory: https://2gewf232.blogspot.com/
Source: chromecache_77.1.dr	String found in binary or memory: https://2gewf232.blogspot.com/favicon.ico
Source: chromecache_77.1.dr	String found in binary or memory: https://2gewf232.blogspot.com/feeds/posts/default
Source: chromecache_77.1.dr	String found in binary or memory: https://2gewf232.blogspot.com/feeds/posts/default?alt=rss
Source: chromecache_72.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/auth
Source: chromecache_72.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/iframe
Source: chromecache_72.1.dr	String found in binary or memory: https://accounts.google.com/o/oauth2/postmessageRelay
Source: chromecache_72.1.dr	String found in binary or memory: https://apis.google.com
Source: chromecache_72.1.dr, chromecache_77.1.dr	String found in binary or memory: https://apis.google.com/js/platform.js
Source: chromecache_72.1.dr	String found in binary or memory: https://classroom.google.com/sharewidget?usegapi=1
Source: chromecache_72.1.dr	String found in binary or memory: https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1
Source: chromecache_72.1.dr	String found in binary or memory: https://clients6.google.com
Source: chromecache_72.1.dr	String found in binary or memory: https://content.googleapis.com
Source: chromecache_70.1.dr	String found in binary or memory: https://csi.gstatic.com/csi
Source: chromecache_72.1.dr	String found in binary or memory: https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1
Source: chromecache_72.1.dr	String found in binary or memory: https://drive.google.com/savetodrivebutton?usegapi=1
Source: chromecache_72.1.dr	String found in binary or memory: https://families.google.com/webcreation?usegapi=1&usegapi=1
Source: chromecache_72.1.dr	String found in binary or memory: https://github.com/google/safevalues/issues
Source: chromecache_72.1.dr	String found in binary or memory: https://pay.google.com/gp/v/widget/save
Source: chromecache_72.1.dr	String found in binary or memory: https://play.google.com/work/embedded/search?usegapi=1&usegapi=1
Source: chromecache_72.1.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_72.1.dr	String found in binary or memory: https://plus.googleapis.com
Source: chromecache_77.1.dr	String found in binary or memory: https://resources.blogblog.com/blogblog/data/1kt/simple/body_gradient_tile_light.png)
Source: chromecache_77.1.dr	String found in binary or memory: https://resources.blogblog.com/blogblog/data/1kt/simple/gradients_light.png)
Source: chromecache_70.1.dr	String found in binary or memory: https://resources.blogblog.com/img/widgets/icon_contactform_cross.gif
Source: chromecache_72.1.dr	String found in binary or memory: https://ssl.gstatic.com/microscope/embed/
Source: chromecache_72.1.dr	String found in binary or memory: https://talkgadget.google.com/:session_prefix:talkgadget/_/widget
Source: chromecache_70.1.dr	String found in binary or memory: https://twitter.com/intent/tweet?text=
Source: chromecache_72.1.dr	String found in binary or memory: https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1
Source: chromecache_77.1.dr	String found in binary or memory: https://www.blogger.com
Source: chromecache_77.1.dr	String found in binary or memory: https://www.blogger.com/dyn-css/authorization.css?targetBlogID=7043723699107532417&zx=ae11ffa6-9
Source: chromecache_77.1.dr	String found in binary or memory: https://www.blogger.com/feeds/7043723699107532417/posts/default
Source: chromecache_77.1.dr	String found in binary or memory: https://www.blogger.com/navbar/7043723699107532417?origin
Source: chromecache_77.1.dr	String found in binary or memory: https://www.blogger.com/profile/17053535176928240034
Source: chromecache_77.1.dr	String found in binary or memory: https://www.blogger.com/static/v1/jsbin/3503070280-lbx__ru.js
Source: chromecache_77.1.dr	String found in binary or memory: https://www.blogger.com/static/v1/v-css/1964470060-lightbox_bundle.css
Source: chromecache_77.1.dr	String found in binary or memory: https://www.blogger.com/static/v1/widgets/1354223504-widgets.js
Source: chromecache_77.1.dr	String found in binary or memory: https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
Source: chromecache_72.1.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/badge?usegapi=1
Source: chromecache_72.1.dr	String found in binary or memory: https://www.google.com/shopping/customerreviews/optin?usegapi=1
Source: chromecache_72.1.dr	String found in binary or memory: https://www.gstatic.com/partners/badge/templates/badge.html?usegapi=1
Source: chromecache_72.1.dr	String found in binary or memory: https://www.youtube.com/subscribe_embed?usegapi=1

Source: unknown	Network traffic detected: HTTP traffic on port 49674 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49687
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49686
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 53233 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49686 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49690 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49692
Source: unknown	Network traffic detected: HTTP traffic on port 49692 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49690
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 53233
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49687 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702

Source: unknown	HTTPS traffic detected: 142.250.185.132:443 -> 192.168.2.7:49686 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.18.1:443 -> 192.168.2.7:49687 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.74.193:443 -> 192.168.2.7:49690 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.142:443 -> 192.168.2.7:49692 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.16.137:443 -> 192.168.2.7:49693 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.217.16.137:443 -> 192.168.2.7:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.163:443 -> 192.168.2.7:49703 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.29.163:443 -> 192.168.2.7:49709 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.149.117:443 -> 192.168.2.7:49713 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.240.129.133:443 -> 192.168.2.7:49711 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir3356_347116565

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir3356_347116565

Jump to behavior

Source: classification engine

Classification label: mal64.phis.win@23/40@36/14

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1996,i,11612777921652111643,6421684416541279251,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2092 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://2gewf232.blogspot.com.au/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1996,i,11612777921652111643,6421684416541279251,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2092 /prefetch:3			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown			Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://2gewf232.blogspot.com.au/	100%	Avira URL Cloud	phishing

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label	Link
http://u967289v.beget.tech/index_files/p	100%	Avira URL Cloud	phishing
https://2gewf232.blogspot.com.au/	100%	Avira URL Cloud	phishing
https://2gewf232.blogspot.com/favicon.ico	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/code.js?1	100%	Avira URL Cloud	phishing
https://2gewf232.blogspot.com/	100%	Avira URL Cloud	phishing
https://img3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif	0%	Avira URL Cloud	safe
http://u967289v.beget.tech/index_files/fav_logo.ico?5	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/counter	100%	Avira URL Cloud	phishing
https://2gewf232.blogspot.com/feeds/posts/default	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/logo.png?2	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/s_yzgt.css	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech/index_files/hit	100%	Avira URL Cloud	phishing
https://2gewf232.blogspot.com	100%	Avira URL Cloud	phishing
https://2gewf232.blogspot.com/feeds/posts/default?alt=rss	100%	Avira URL Cloud	phishing
https://data3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif	0%	Avira URL Cloud	safe
http://u967289v.beget.tech/index_files/s_cfmxw.css	100%	Avira URL Cloud	phishing
http://2gewf232.blogspot.com/	100%	Avira URL Cloud	phishing
http://u967289v.beget.tech	100%	Avira URL Cloud	phishing

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Antivirus Detection	Reputation
u967289v.beget.tech	185.50.25.7	true	false		high
plus.l.google.com	142.250.185.142	true	false		high
code.jquery.com	151.101.194.137	true	false		high
blogspot.l.googleusercontent.com	172.217.18.1	true	false		high
img3.proshkolu.ru	172.67.149.117	true	false		high
www.google.com	142.250.185.132	true	false		high
data3.proshkolu.ru	172.67.149.117	true	false		high
blogger.l.google.com	172.217.16.137	true	false		high
m.vk.com	87.240.129.133	true	false		high
2gewf232.blogspot.com.au	unknown	unknown	false		unknown
241.42.69.40.in-addr.arpa	unknown	unknown	false		high
2gewf232.blogspot.com	unknown	unknown	false		unknown
apis.google.com	unknown	unknown	false		high
www.blogger.com	unknown	unknown	false		high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
http://u967289v.beget.tech/index_files/p	true	Avira URL Cloud: phishing	unknown
http://u967289v.beget.tech/code.js?1	true	Avira URL Cloud: phishing	unknown
http://u967289v.beget.tech/index_files/counter	true	Avira URL Cloud: phishing	unknown
http://u967289v.beget.tech/index_files/fav_logo.ico?5	true	Avira URL Cloud: phishing	unknown
https://www.blogger.com/static/v1/widgets/1354223504-widgets.js	false		high
https://2gewf232.blogspot.com/	false	Avira URL Cloud: phishing	unknown
http://code.jquery.com/jquery.min.js	false		high
http://u967289v.beget.tech/index_files/logo.png?2	true	Avira URL Cloud: phishing	unknown
https://2gewf232.blogspot.com.au/	false	Avira URL Cloud: phishing	unknown
https://img3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif	false	Avira URL Cloud: safe	unknown
http://u967289v.beget.tech/	true		unknown
https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE	false		high
https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css	false		high
http://u967289v.beget.tech/index_files/s_yzgt.css	true	Avira URL Cloud: phishing	unknown
https://apis.google.com/js/platform.js	false		high
http://u967289v.beget.tech/index_files/hit	true	Avira URL Cloud: phishing	unknown
http://u967289v.beget.tech/index_files/s_cfmxw.css	true	Avira URL Cloud: phishing	unknown
https://data3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif	false	Avira URL Cloud: safe	unknown
https://m.vk.com/images/mobile/faviconnew.ico?5	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://www.blogger.com	chromecache_77.1.dr	false		high
https://twitter.com/intent/tweet?text=	chromecache_70.1.dr	false		high
https://2gewf232.blogspot.com/feeds/posts/default	chromecache_77.1.dr	false	Avira URL Cloud: phishing	unknown
https://dataconnector.corp.google.com/:session_prefix:ui/widgetview?usegapi=1	chromecache_72.1.dr	false		high
https://github.com/google/safevalues/issues	chromecache_72.1.dr	false		high
https://resources.blogblog.com/blogblog/data/1kt/simple/body_gradient_tile_light.png)	chromecache_77.1.dr	false		high
https://workspace.google.com/:session_prefix:marketplace/appfinder?usegapi=1	chromecache_72.1.dr	false		high
https://www.google.com/shopping/customerreviews/badge?usegapi=1	chromecache_72.1.dr	false		high
https://pay.google.com/gp/v/widget/save	chromecache_72.1.dr	false		high
https://2gewf232.blogspot.com/favicon.ico	chromecache_77.1.dr	false	Avira URL Cloud: phishing	unknown
https://drive.google.com/savetodrivebutton?usegapi=1	chromecache_72.1.dr	false		high
https://www.blogger.com/static/v1/v-css/1964470060-lightbox_bundle.css	chromecache_77.1.dr	false		high
https://www.google.com/shopping/customerreviews/optin?usegapi=1	chromecache_72.1.dr	false		high
https://apis.google.com	chromecache_72.1.dr	false		high
https://resources.blogblog.com/img/widgets/icon_contactform_cross.gif	chromecache_70.1.dr	false		high
https://www.blogger.com/navbar/7043723699107532417?origin	chromecache_77.1.dr	false		high
http://schema.org/Blog	chromecache_77.1.dr	false		high
https://classroom.google.com/sharewidget?usegapi=1	chromecache_72.1.dr	false		high
https://2gewf232.blogspot.com/feeds/posts/default?alt=rss	chromecache_77.1.dr	false	Avira URL Cloud: phishing	unknown
https://resources.blogblog.com/blogblog/data/1kt/simple/gradients_light.png)	chromecache_77.1.dr	false		high
https://www.blogger.com/feeds/7043723699107532417/posts/default	chromecache_77.1.dr	false		high
https://www.youtube.com/subscribe_embed?usegapi=1	chromecache_72.1.dr	false		high
https://plus.google.com	chromecache_72.1.dr	false		high
https://clients3.google.com/cast/chromecast/home/widget/backdrop?usegapi=1	chromecache_72.1.dr	false		high
https://www.blogger.com/static/v1/jsbin/3503070280-lbx__ru.js	chromecache_77.1.dr	false		high
https://www.blogger.com/dyn-css/authorization.css?targetBlogID=7043723699107532417&zx=ae11ffa6-9	chromecache_77.1.dr	false		high
http://2gewf232.blogspot.com/	chromecache_77.1.dr	false	Avira URL Cloud: phishing	unknown
https://www.blogger.com/profile/17053535176928240034	chromecache_77.1.dr	false		high
https://talkgadget.google.com/:session_prefix:talkgadget/_/widget	chromecache_72.1.dr	false		high
https://play.google.com/work/embedded/search?usegapi=1&usegapi=1	chromecache_72.1.dr	false		high
https://2gewf232.blogspot.com	chromecache_77.1.dr	false	Avira URL Cloud: phishing	unknown
http://u967289v.beget.tech	chromecache_77.1.dr	false	Avira URL Cloud: phishing	unknown
https://families.google.com/webcreation?usegapi=1&usegapi=1	chromecache_72.1.dr	false		high
https://clients6.google.com	chromecache_72.1.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	Flag	ASN	ASN Name	Malicious
172.217.16.137	blogger.l.google.com	United States		15169	GOOGLEUS	false
172.67.149.117	img3.proshkolu.ru	United States		13335	CLOUDFLARENETUS	false
172.217.18.4	unknown	United States		15169	GOOGLEUS	false
142.250.185.132	www.google.com	United States		15169	GOOGLEUS	false
172.217.18.1	blogspot.l.googleusercontent.com	United States		15169	GOOGLEUS	false
142.250.181.225	unknown	United States		15169	GOOGLEUS	false
142.250.185.142	plus.l.google.com	United States		15169	GOOGLEUS	false
185.50.25.7	u967289v.beget.tech	Russian Federation		198610	BEGET-ASRU	false
104.21.29.163	unknown	United States		13335	CLOUDFLARENETUS	false
142.250.74.193	unknown	United States		15169	GOOGLEUS	false
151.101.194.137	code.jquery.com	United States		54113	FASTLYUS	false
87.240.129.133	m.vk.com	Russian Federation		47541	VKONTAKTE-SPB-AShttpvkcomRU	false

Private

IP
192.168.2.7
192.168.2.6

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1638950
Start date and time:	2025-03-15 00:43:28 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 2m 55s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://2gewf232.blogspot.com.au/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	14
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal64.phis.win@23/40@36/14
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): sppsvc.exe, SIHClient.exe, SgrmBroker.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 142.250.186.174, 216.58.206.78, 142.250.110.84, 172.217.16.142, 172.217.18.14, 142.250.185.174, 142.250.186.106, 142.250.185.170, 142.250.185.74, 142.250.186.138, 142.250.185.106, 142.250.186.42, 142.250.185.138, 172.217.18.106, 142.250.74.202, 216.58.206.74, 142.250.185.202, 142.250.184.202, 142.250.186.170, 172.217.18.10, 142.250.184.234, 142.250.185.234, 199.232.210.172, 142.250.185.238, 142.250.185.110, 142.250.181.238, 142.250.186.163, 142.250.185.163, 172.202.163.200, 40.69.42.241, 2.16.185.191, 23.199.214.10, 20.109.210.53
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, dns.msftncsi.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTP raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://2gewf232.blogspot.com.au/

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 58

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUfExltxlHh/:Wb/
MD5:	9BB191C6827273AA978CAB39A3587950
SHA1:	25D8043336EB799E52B1A0E15FF6B95E09C24E35
SHA-256:	24E480E4659FBAE818853A38F8A3036F529F539024DC3E772C0B594CE02EA9DB
SHA-512:	C3970B9A8DC9B424528274E8D22D21E9990CE956AEDE61CBA13DE8D7832A8C896EAF1032662A78E95980EA013090CD4406F32604DA3C6F557AA136842D04324D
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/p
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 59

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	28
Entropy (8bit):	4.378783493486175
Encrypted:	false
SSDEEP:	3:bPuw:juw
MD5:	D6B47B530BA6F7AD9769DC4D76BB0225
SHA1:	86530627C71F6D2129D7D12010E98356E2591FED
SHA-256:	EF044782EEEFF4B6FC082B1B82D2385FE9F3CAA0E2746ECCD1B8598CCEE9B816
SHA-512:	F7D89E6B66399E79065223F998F0DC5DBA20F18CFB2F8986BCDCC9BDFC2769B96EF992BF5D0CB31F325598359593A5C1351A0A78B8FD0076C9B44774A60B9F3F
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChRDaHJvbWUvMTM0LjAuNjk5OC4zNhIgCd2S_IE0VJcFEgUNKEstiRIFDc5BTHoh9o38D13h7bA=?alt=proto
Preview:	ChIKBw0oSy2JGgAKBw3OQUx6GgA=

Chrome Cache Entry: 60

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 152054
Category:	downloaded
Size (bytes):	32330
Entropy (8bit):	7.992596581845741
Encrypted:	true
SSDEEP:	768:mEJ7COWYS5FIDcxcS2+rkaewfxDAM9jvZfE:bCOWvFIcx11kaeYFAMxa
MD5:	89E4A1416DCE48395219884399088611
SHA1:	B45EBD5A50DBB075901EEEE59B467F5B62277CDF
SHA-256:	AA01DB4991B977DC968A718576DA79749184A2EBD7C55D68B954A61164795FB1
SHA-512:	AA6CAA41B5DE83ABA266441A2FC815FDCF57A24461E66350FC3940D867EA3B5348F2A8658D338406CE0AF3B3C5DEA38C39A78F8365D756906E8BAB6E6643CE32
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/s_cfmxw.css
Preview:	...........is..(.}".?`..8W. .h.d.....E......4.6........S{efeu..g..Mvee.YY.....~.n..U.\N._...c.Xo..f./....?.].=.6..."[...?.f.<k..e.y..#..u..=........7.<y..E.@./g.KY\|.OW..8..Z.~.....9.7...y.n...n....yX>...M.>M..\|^.oN....j..P.....$...6/nn...'...4....6.....EO.......V..$..s(u....\|zW.#..W;.......b3;.'.z...r5....t...;4L7..l./.\|9'S..3..be`..>n..e...F..d...)...N..l.y8]o.yd.<.G;C.v.gb..rU..M.b.T.n.8....f..~.._...D...f...15...+..vS....5....Fv...H........+.....0..$[.4..k..n..L..}.{V}}j.fb..B.y9..v........F....../...vS..{..,...L.\,.....y...4.5......D..O..0.....#=Eg.b"O.v..t*N......t#.hu....-...W.B..1...3.W?.?n.......X=.'AKW.qo\|q.fc./....n.L...=..o.. .MQ_&....'.t&...V.^C...O..^.A...F...e..%.....(.....t.....A".So@..@Sjg.su1..1,.i.\|...........;Y..U<...e..F...s&.b...A.6j...Gu..N@..}0'.1.ctO.......z.`.v..z..C.r.......j..........rA..gh[.....Za...K[./....H....q..Yk.z....7.._....4d...d.y..&I.X..%C....L...:Cg.z.Z..1.bm1.....}6Y=.u...liVp%..2....v..gk

Chrome Cache Entry: 61

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUfExltxlHh/:Wb/
MD5:	9BB191C6827273AA978CAB39A3587950
SHA1:	25D8043336EB799E52B1A0E15FF6B95E09C24E35
SHA-256:	24E480E4659FBAE818853A38F8A3036F529F539024DC3E772C0B594CE02EA9DB
SHA-512:	C3970B9A8DC9B424528274E8D22D21E9990CE956AEDE61CBA13DE8D7832A8C896EAF1032662A78E95980EA013090CD4406F32604DA3C6F557AA136842D04324D
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 62

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUfExltxlHh/:Wb/
MD5:	9BB191C6827273AA978CAB39A3587950
SHA1:	25D8043336EB799E52B1A0E15FF6B95E09C24E35
SHA-256:	24E480E4659FBAE818853A38F8A3036F529F539024DC3E772C0B594CE02EA9DB
SHA-512:	C3970B9A8DC9B424528274E8D22D21E9990CE956AEDE61CBA13DE8D7832A8C896EAF1032662A78E95980EA013090CD4406F32604DA3C6F557AA136842D04324D
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 63

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.0314906788435274
Encrypted:	false
SSDEEP:	3:CUfExltxlHh/:Wb/
MD5:	9BB191C6827273AA978CAB39A3587950
SHA1:	25D8043336EB799E52B1A0E15FF6B95E09C24E35
SHA-256:	24E480E4659FBAE818853A38F8A3036F529F539024DC3E772C0B594CE02EA9DB
SHA-512:	C3970B9A8DC9B424528274E8D22D21E9990CE956AEDE61CBA13DE8D7832A8C896EAF1032662A78E95980EA013090CD4406F32604DA3C6F557AA136842D04324D
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/counter
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 64

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 394 x 118
Category:	dropped
Size (bytes):	18837
Entropy (8bit):	7.706509774277951
Encrypted:	false
SSDEEP:	384:wtN3QHbqbFgfSizi6GCpj1c5HRlGivmUjYfoY62D5v:wtN3QebSfSizi0KXlGAm0Kob2Dp
MD5:	56A07DDE31C73F8FBE5299DF53ABC050
SHA1:	CB9068B30661755E7B9306B5282F7424BFA97EEE
SHA-256:	0C16CEAD2A8188E08C385478868A5D7A3720ABD7B7226273BA1AECECCC4D6E6A
SHA-512:	3342CD715E3F77F14882ED5AC9BA613FC28E840D28A4DFA73B801AB96793E9B7FC231B62460E0EC74D1881D595E71798E90729CA1200E026E6464FD881FE1DC7
Malicious:	false
Reputation:	low
Preview:	GIF89a..v........\s.o.....w.H.I.Q.6..................Gz.]...k..3...ee.......}..X._.C...........o..N..k........}...t.1.......U.K...tSb.Y..=.q.V...i.N.&a.9y..mN.......z..Z....c........X..C...y....s..g..7m.i...}...}.C.....X........f)....Xa.x.%x^]'..'...Y../0,...iq...0v%.Qf.?.;..J.....p.....W..k.d.E....;...x........d..C..j.l.E..Tv-Y..^.\...........~...v.\.o....f1}x.Q....f...m.y.rK.}._..Ii.s..'h....k.......l...p.L....v..?i.v..{.P.......8..J.......S..x...EA....S.W..A.l..9Vb.0B~.Q...v.............`..W..G..}...kx..y.........D.x.x7.,..,.....\|.e<:...........M!\.c....e.D../z.Hy..w.\.X.(.%4..G.........?-..p...[...V@..s`./k..@......G.~..T.N.7A......,r.Z. ..$..B.z.Ny.q.d.l.Is.Z..a.....a.....y.........<f. ..1o.......!..NETSCAPE2.0.....!.......,......v........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.....

Chrome Cache Entry: 65

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 1618
Category:	downloaded
Size (bytes):	712
Entropy (8bit):	7.713630834387732
Encrypted:	false
SSDEEP:	12:X/FvbFHx9QJNrq39jT8QPSmxdMyETnWUaG/kt7slNdNTHNYV0zsehMJym:X/FvbFHMNAjwhsNsnBBQ7slNdPYeztrm
MD5:	BB4E14E98CC46C6EF40CC29DB50DB947
SHA1:	051D0A15007762043DF6CE8F461A5D43D1579303
SHA-256:	5CCB889E562C36CD9CEE2ECA1C55910430428BC26E47339C0FC82EEB47FB6ACC
SHA-512:	30EED420A1584FD6178A7D8A26AE55CF2E6663971D59887E6F3108858C8792372BA2695D499B080D59DE1CCE8F10F321BAD76CA965F51A1B1974BA1FB100B95B
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/code.js?1
Preview:	...........T.j.@.....7r!6Qe....c..f.....Y.[.F.HNB0$....J.,.....$%iI..3..;z.\'.#..=w..s....v.=$.:p....5.&....<....Mqu.....`...VK...1..z.U..-..(s..\|.....v.=.....gH..D..9K.....:..c..=c!.....j....+..F>..b$.YP.D..1/.t...JUM.,.....n...-..FHyT......5...~..#=u.Loz.....37...>..cE..5..1.aFh1Nv.}.RJS...)F..^D.#.t@..l.....~.Kq!..D\..#..N~.g..f.....8.;.....k(`M..X... .#..B.U..8$...spU..B...;.\|....%.....o...C..'..[qQ.Z.._IA6.,...'.....A.6...}.....?......+.z.L.L ..c..P"8..z>q..j..\|.i......OmK..p..cLT..._..J...u:..xt..,{8`4....r.j./....hA._......8.Q\mk....f........aK9T.].m.&.u.w..<..Mq..y?.F.V\c...v..M.'~ ....b.5.M.T......Yy"...h.....+KT.<W].h./...O.=$.f.#s..D..$i../\|s._...o..R.AER...

Chrome Cache Entry: 66

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 124 x 25, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	1334
Entropy (8bit):	7.8121398461902585
Encrypted:	false
SSDEEP:	24:K6GtVv3VH3LnOjEF3nZ4o6S/3W4HgkE2k862rY26W2wPUzRL7:KxVv3Zjf16I3Lgd864YS2hzRX
MD5:	0A40A67A4CE053228E7B9DC45DD1B4C8
SHA1:	0BFD8946A30317EA70FF83194BAE589B0534E794
SHA-256:	F64EBEDAF9A92741DDB0878A8303D3E3E6B819876353F2779B5FCCEBCEA06374
SHA-512:	59EAE9A83644E5B05F9BF31EC29F6B44C438ABB7601A7BEF92EDA8DF8364594A29D86A9749AD02830765B97EB810F3EDC4DBF93790B54FC9B8EE62D7105000FB
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR...\|..........'JW....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..m..U..G....t.j..D"+.^L%.......J.Yi..le`%Y.....J.BZ.V..c..+...mh...j.f.........x..gf..u.9.c..o...{..V,..\...O.K...X...MP..o...-.T.1..`.?..`[>......l.A..\|..i..Rr.;@.\|..7..V..0gGBL........9`l...7....\|.`.K...../.......Q...9...?....#r.....)Aw.!F.............A.....{`..;'.~/..b8..F.6......T.=..?.....RW...e.............fE...(..Z.s.....U.....k..{.u`.O.q..\..K.N..\|tb...........'.........H/t3.h91uF.p)<..@c....&.....\|+.PP..^....1..E%r....m.a.O..g..h...^...J.3......iO..c..mA\......\>..X.o..d7....o.=.e\|.&.K..w..F./$..'.t;...Y.M]s.....G(.J...........z....V..............I...q..A%/U:.z..iQV.ZoP.%\...P..7e?1..p..7%../.3...oAA..jz.....9F...'.t....<..CAb;%./`.\|k..8...s...Wv..;=..4E\..W..q.9.D.n.....b..d......1....-./3H...LI..^7..f..0....@......2.>...5..d"..(/...}..../v.O...05.........Z..2'.NZ..>nqO..S....R.4A.G...-e..\|..._..0.Fo..k...Q.+._....b....g.;.0.].<.#.+/(7......Od...

Chrome Cache Entry: 67

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	downloaded
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/hit
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 68

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 1 x 1
Category:	dropped
Size (bytes):	43
Entropy (8bit):	3.16293190511019
Encrypted:	false
SSDEEP:	3:CUmExltxlHh/:Jb/
MD5:	FC94FB0C3ED8A8F909DBC7630A0987FF
SHA1:	56D45F8A17F5078A20AF9962C992CA4678450765
SHA-256:	2DFE28CBDB83F01C940DE6A88AB86200154FD772D568035AC568664E52068363
SHA-512:	C87BF81FD70CF6434CA3A6C05AD6E9BD3F1D96F77DDDAD8D45EE043B126B2CB07A5CF23B4137B9D8462CD8A9ADF2B463AB6DE2B38C93DB72D2D511CA60E3B57E
Malicious:	false
Reputation:	low
Preview:	GIF89a.............!.......,...........D..;

Chrome Cache Entry: 69

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (35959)
Category:	downloaded
Size (bytes):	35960
Entropy (8bit):	5.154449164812877
Encrypted:	false
SSDEEP:	384:YN90OhFvg3A2VysImDyPWquJMpx/SCYW0h8+Rl9yaZwuJ86YKSQCNL/J69nKg93P:YN90Oh+JnIm6IvW0trVJw1gngRLFr2
MD5:	1E32420A7B6DDBDCB7DEF8B3141C4D1E
SHA1:	A1BE54D42FF1F95244C9653539F90318F5BC0580
SHA-256:	A9CA837900B6AE007386D400F659C233120B8AF7D93407FD6475C9180D9E83D2
SHA-512:	1357D702A78FFA97F5ABA313BCD1F94D7D80FB6DD15D293FF36ACC4FB063FFDAD6D9F7E8D911B1BBE696C7AD1CDE4C3D52FB2DB2A0FCF6FF8EF154824E013C6D
Malicious:	false
Reputation:	low
URL:	https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css
Preview:	html{height:100%}body{min-height:100%;_height:100%;position:relative}.content{position:relative;word-wrap:break-word}.content-outer,.region-inner{min-height:0;margin:0 auto}.columns{zoom:1}.loading .columns{overflow:hidden}.columns-inner{_height:1%;min-height:0}.column-center-outer,.column-left-outer,.column-right-outer{position:relative;float:left;_display:inline;_overflow:hidden}.column-center-outer{width:100%}.column-left-outer{margin-left:-100%}.fauxcolumns{position:relative;_height:1%}.fauxcolumn-outer{position:absolute;top:0;bottom:0;height:expression(this.parentNode.offsetHeight + 'px');overflow:hidden}.fauxcolumn-outer .fauxborder-left,.fauxcolumn-outer .fauxborder-right,.fauxcolumn-inner{height:100%}.fauxcolumn-left-outer{left:0}.fauxcolumn-right-outer{right:0}.cap-top,.cap-bottom{position:relative;height:0;background-repeat:repeat-x}.cap-top .cap-left,.cap-top .cap-right,.cap-bottom .cap-left,.cap-bottom .cap-right{height:100%;background-repeat:no-repeat}.cap-top,.cap-top .ca

Chrome Cache Entry: 70

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (4033)
Category:	downloaded
Size (bytes):	145245
Entropy (8bit):	5.540192597244268
Encrypted:	false
SSDEEP:	1536:xxgaBcL3Hu5cQAn5MlT9V1m7EescHi+dkkPfNAxGsdjmqLKObz8TIZ9x3jo3tbpx:s3HJWV1jeNCevfNYdGpb3FkMugl
MD5:	A5A41E97727FF5000CDC8EFF52B98234
SHA1:	8D48A1216F14018B9108E329CABABA6A8A70CD95
SHA-256:	CD46926505CB95C4D6E678CAC288DCDEB83CE0950FC4EC54990BC6A2E60488E4
SHA-512:	B6CAC6CA8F10C47BD33BD301B8A378B6BB639D9C5B8F7706C23B5460E82C6DD51C5F1DA77D44D9D41511CCD08E0266AF6B14BEFAB5FE09661C62133FE66B520F
Malicious:	false
Reputation:	low
URL:	https://www.blogger.com/static/v1/widgets/1354223504-widgets.js
Preview:	(function(){/.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0./.var aa="&action=",ba=".wikipedia.org",ca="SCRIPT",da="SPAN",ea="SW_READER_LIST_",fa="SW_READER_LIST_CLOSED_",ha="Share this post",ia="Symbol.dispose",ja="Symbol.iterator",ka="about:invalid#zClosurez",la="about:invalid#zSoyz",ma="bigint",na="block",oa="boolean",pa="click",qa="collapsed",ra="collapsible",sa="comment-editor",ta="commentId",ua="complete",va="contact-form-email",wa="contact-form-email-message",xa="contact-form-error-message",ya="contact-form-error-message-with-border",za="contact-form-name",.Aa="contact-form-submit",Ba="contact-form-success-message",Ca="contact-form-success-message-with-border",Da="data-height",Ea="displayModeFull",Fa="displayModeLayout",Ga="displayModeNone",m="div",Ha="dropdown-toggle",Ia="error",Ja="expanded",n="function",Ka="hidden",La="https:",Ma="layout-widget-description",Na="layout-widget-ti

Chrome Cache Entry: 71

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 57209
Category:	downloaded
Size (bytes):	8686
Entropy (8bit):	7.97595062286775
Encrypted:	false
SSDEEP:	192:iaN3/K64DhaV+nq1d5Ld6ZLBKHCOX5B4opmU/33nE55JHt1uXYYg:iQ/ChaIn4dOZEBB4opmU/nEzVt1uX8
MD5:	4E3FB595AEF47DC5101E5820FDC4B88A
SHA1:	016056CF16884F2FD489DA0CB0177BA541EB31CF
SHA-256:	0691CDBC6E6D9801B94395B08734DF0FD71D7551D37E184BEDCC2950C819DBEC
SHA-512:	36658B2A2E292742B521F8892B8F9800A99BEB323C83E61629A526B1D39AA36A9788D23AEFA7C2B4989D0F19AB6D586C2EBBE4CDAB9DCE6E9853FA50786EC464
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/s_yzgt.css
Preview:	...........]..8..?......t.l..Kr...vw.%..C..L!e.m.U..w..gP.]YGo'j...$..`0......5....8..../.......wI..>.z.o...._N.n.......I..>..uu^o..U._...m...e.g.......y..G...z......N......>.T...sw9.f........_....C.i...~.v...t.....-..xE.G..........u.....{........K.&.&.".....WB;./..>,C.B...+.."....!$....%%&..>......'.4..Ak.e-..^.....0..1.3....T..iB\|...H....)..vGEP.us.........''.k...yz.8..P......Q.lF...Xo.9f6.....P./f...x.....nl.....{^....m..h.......Vh.?...nwj.......Y%.h...}s..&.....{:..:...$.VJ.S.7C...}b.d..0...?..;..qx....-7...x.1...y.k....j......{n.d.b..V..n.\!A..yCH.+.Y>...7^4.YQ..E!.Y\&V.$.v.T..v.c.....".-/c.D.B.S..;......,.H1.w)...q?.1..X?4....K.fv.....\=W_..M.dz..>......5<..-..9fd....-.WV%......c..\|8.....y....u........c3...\|W?5.zvj>...\...%..V.'.....D.&....h.___.....n)j..\|1.b.1.A......j..tsF.Cn...S..../..-U..d.)--.t.4..q.tJK.)Mm-M......t.%-..%.uH..y.G....I~.?.....V].:\.\|..\....\|.7:....\|..S......r;KjT.a.......g....^,...~..7p?...t>.>.`.t.6N...].

Chrome Cache Entry: 72

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1863)
Category:	downloaded
Size (bytes):	64240
Entropy (8bit):	5.539523365461212
Encrypted:	false
SSDEEP:	1536:wPJHqONt8T7jWR06+4DJBq94Qywsg61okJ:mNtCWjJBxg611
MD5:	D8C47D8B6624A18AFBE726A594F43FDF
SHA1:	F1569EC98C61B1AEA8DC47BDCDD32F4A194A6170
SHA-256:	CFD0FB59B89D351661AE4BE9D07A33C4F43B7DAF927E50D797272AF92F4A28A5
SHA-512:	C794A07E8D5BC3DC76F3A44D30A9A6E2FFA45CC9654CB6EC5ACC8200C891278B936503208229E44A6E2C4C5A140F85BFFEB5ADB4891D682720F0DE38B123B716
Malicious:	false
Reputation:	low
URL:	https://apis.google.com/js/platform.js
Preview:	(function(){var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.value;return a},ca=function(a){a=["object"==typeof globalThis&&globalThis,a,"object"==typeof window&&window,"object"==typeof self&&self,"object"==typeof global&&global];for(var b=0;b<a.length;++b){var c=a[b];if(c&&c.Math==Math)return c}throw Error("Cannot find global object");.},r=ca(this),u=function(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};.u("Symbol",function(a){if(a)return a;var b=function(f,g){this.xa=f;ba(this,"description",{configurable:!0,writable:!0,value:g})};b.prototype.toString=function(){return this.xa};var c="jscomp_symbol_"+(Math.random()*1E9>>>0)+"_",d=0,e=function(f

Chrome Cache Entry: 73

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 124 x 25, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	1334
Entropy (8bit):	7.8121398461902585
Encrypted:	false
SSDEEP:	24:K6GtVv3VH3LnOjEF3nZ4o6S/3W4HgkE2k862rY26W2wPUzRL7:KxVv3Zjf16I3Lgd864YS2hzRX
MD5:	0A40A67A4CE053228E7B9DC45DD1B4C8
SHA1:	0BFD8946A30317EA70FF83194BAE589B0534E794
SHA-256:	F64EBEDAF9A92741DDB0878A8303D3E3E6B819876353F2779B5FCCEBCEA06374
SHA-512:	59EAE9A83644E5B05F9BF31EC29F6B44C438ABB7601A7BEF92EDA8DF8364594A29D86A9749AD02830765B97EB810F3EDC4DBF93790B54FC9B8EE62D7105000FB
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/logo.png?2
Preview:	.PNG........IHDR...\|..........'JW....tEXtSoftware.Adobe ImageReadyq.e<....IDATx..m..U..G....t.j..D"+.^L%.......J.Yi..le`%Y.....J.BZ.V..c..+...mh...j.f.........x..gf..u.9.c..o...{..V,..\...O.K...X...MP..o...-.T.1..`.?..`[>......l.A..\|..i..Rr.;@.\|..7..V..0gGBL........9`l...7....\|.`.K...../.......Q...9...?....#r.....)Aw.!F.............A.....{`..;'.~/..b8..F.6......T.=..?.....RW...e.............fE...(..Z.s.....U.....k..{.u`.O.q..\..K.N..\|tb...........'.........H/t3.h91uF.p)<..@c....&.....\|+.PP..^....1..E%r....m.a.O..g..h...^...J.3......iO..c..mA\......\>..X.o..d7....o.=.e\|.&.K..w..F./$..'.t;...Y.M]s.....G(.J...........z....V..............I...q..A%/U:.z..iQV.ZoP.%\...P..7e?1..p..7%../.3...oAA..jz.....9F...'.t....<..CAb;%./`.\|k..8...s...Wv..;=..4E\..W..q.9.D.n.....b..d......1....-./3H...LI..^7..f..0....@......2.>...5..d"..(/...}..../v.O...05.........Z..2'.NZ..>nqO..S....R.4A.G...-e..\|..._..0.Fo..k...Q.+._....b....g.;.0.].<.#.+/(7......Od...

Chrome Cache Entry: 74

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, max compression, from Unix, original size modulo 2^32 95821
Category:	downloaded
Size (bytes):	33226
Entropy (8bit):	7.992371217611524
Encrypted:	true
SSDEEP:	768:EUK4XbDcMV+IBEVjFurBuUhzWaOtq48v6DrAMl/:EiPcMnBSjFulThSa8qer7V
MD5:	68D22C6E84FD56067014862758C25A09
SHA1:	05EA34ED72069D47AD8893E6E9B5502211B42ABE
SHA-256:	DDE61F0B9CEF03920BE91A889D9405B08F3E8A36102DC638F22087B10A647BDD
SHA-512:	099A7FA1A1299225AE3B808922C95318BA00645BF4C00B25FEA56D586273D660DF5B9A41795350C4618D13035F7F65BD3A378836E3E34E19B732AEACA0773FC2
Malicious:	false
Reputation:	low
URL:	http://code.jquery.com/jquery.min.js
Preview:	...........y{.F./...."....E:.=...'..I&.I2....IH.DR.....o...4..s..............Z..v..v.o.....C.....O..g.....?2._..VY./.+q...S..[......H...?{z.....E>?.I...<.{R..6.zz.\gw...=....n..........e..G.....a.P.XL.N.%.....U~...v......6..+...,>./V../.sz3%.`...w......C..{4.\|Z..........b'.#..o.R9..L...fH....Wi..Sz....bF.TG.......(._..o..L\..<.}...a.......A....yb)....c...tE..{N9....u\|....../..z..`.;..\..../w..b#/...U...>..f..mo,........w...GhY....z...G.-.B.....t..K...9?z.X..~...~..v.?.+l...i.X..n..,.W....n...8.\..r...~...I..M.jeX.W.8..T.ULh$.\|;.9k.........n..{.k... .>..^.H."..y.:..>.%.Vm.o.F.U.N...x.W.0.......'T.P...-s\.8....A.h;.}.C..b... ....g..3.....-S.He/..X.$.....3...n7.L.1/p:....._e'Gi..ph.-.H.E8.;BC!md....O....-..=.#y..g.M.....>......9.L....s9..o?.._..p4..K..E..J.9.v.k9.T6..z.h`....../L.f...........7S.;??.F..\|..............Y..r6.&.R9~f.)St....Z.a..+5.t.P..U.7:}...O..4\.q.[&.A.c%C...Si.h^.u.i.........7.........?.A..*..Q...E..x?.o.y..A..o.q...W/.Kz

Chrome Cache Entry: 75

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	GIF image data, version 89a, 394 x 118
Category:	downloaded
Size (bytes):	18837
Entropy (8bit):	7.706509774277951
Encrypted:	false
SSDEEP:	384:wtN3QHbqbFgfSizi6GCpj1c5HRlGivmUjYfoY62D5v:wtN3QebSfSizi0KXlGAm0Kob2Dp
MD5:	56A07DDE31C73F8FBE5299DF53ABC050
SHA1:	CB9068B30661755E7B9306B5282F7424BFA97EEE
SHA-256:	0C16CEAD2A8188E08C385478868A5D7A3720ABD7B7226273BA1AECECCC4D6E6A
SHA-512:	3342CD715E3F77F14882ED5AC9BA613FC28E840D28A4DFA73B801AB96793E9B7FC231B62460E0EC74D1881D595E71798E90729CA1200E026E6464FD881FE1DC7
Malicious:	false
Reputation:	low
URL:	https://data3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif
Preview:	GIF89a..v........\s.o.....w.H.I.Q.6..................Gz.]...k..3...ee.......}..X._.C...........o..N..k........}...t.1.......U.K...tSb.Y..=.q.V...i.N.&a.9y..mN.......z..Z....c........X..C...y....s..g..7m.i...}...}.C.....X........f)....Xa.x.%x^]'..'...Y../0,...iq...0v%.Qf.?.;..J.....p.....W..k.d.E....;...x........d..C..j.l.E..Tv-Y..^.\...........~...v.\.o....f1}x.Q....f...m.y.rK.}._..Ii.s..'h....k.......l...p.L....v..?i.v..{.P.......8..J.......S..x...EA....S.W..A.l..9Vb.0B~.Q...v.............`..W..G..}...kx..y.........D.x.x7.,..,.....\|.e<:...........M!\.c....e.D../z.Hy..w.\.X.(.%4..G.........?-..p...[...V@..s`./k..@......G.~..T.N.7A......,r.Z. ..$..B.z.Ny.q.d.l.Is.Z..a.....a.....y.........<f. ..1o.......!..NETSCAPE2.0.....!.......,......v........H......\....#J.H....3j.... C..I...(S.\...0c.I...8s.....@...J...H.]...P.J.J...X.j....`..K...h.]...p..K...x..........L.....+^....#K.L....3k.....

Chrome Cache Entry: 76

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	dropped
Size (bytes):	401
Entropy (8bit):	7.100774013005412
Encrypted:	false
SSDEEP:	6:6v/lhPUq25KiaovtCpxGCGSH0i1H5m72cxbvFRT4j2jSRU50/KH/R0/Z6p:6v/78qz0CpMC/UitRcjRTxSp/KHoZQ
MD5:	F56CB5B3818580563CD40DD2E91537AF
SHA1:	B714764B9316832F05CB764E22FF166412C9DCA1
SHA-256:	763D5CF5ABDD250387794A5BA1FF4F68ED237071449821341B9EC7F510A43512
SHA-512:	CCD8820AD1AF5BC6655C3C6956988FAB97D5AFA7E0EE760EA74BB88A9E8EBA77487693D9E05E32E2796EC56B18F1EFAC10354A560DD73D6DD0FF325C110FD698
Malicious:	false
Reputation:	low
Preview:	.PNG........IHDR................a....gAMA......a....HIDAT8.c.jX..........0......001.3...d..B..L...H.^&d.r..5`Zi0..0.nN6.E)!.eM1`>.e.<..s...&...8.....>g..`cp4Va........X.!J"]..8.Y.........5.c..f....+dbbb.7Tb.3Tf......p....G...o0.p.3.%.2011.]..h......`...g@..Hj...7.6I...UN]s........j....pq...?..1./........>...p..}...........f....d.`..]..(..q4....PE...\.0.$.H/.(K.c.,;....o3........IEND.B`.

Chrome Cache Entry: 77

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (5115)
Category:	downloaded
Size (bytes):	26766
Entropy (8bit):	5.513866061771595
Encrypted:	false
SSDEEP:	384:GOXsuo35xCHMsV1oHHXfPWdom5oovMKv/nR63nLp6jaoDlUXdll+nxDBhwpd:GhV3eyHHvPWdoaouMKvPsXA2Qo
MD5:	6E90F8C7ED45AECD3D509A6E1C7AAC8E
SHA1:	2C3BA3007072EF191FEC56C50002CD41D5A04938
SHA-256:	EBB9565C594FD47AD7B9C93C07134842446ACC75FA262E48BB86F84449E6B0B8
SHA-512:	C9D0E1FE76C75CC953AC2780B331005372462C16703931EC4D2505FB9854C6E8C720C13065769C040992A79D65F7BEFE9E725D267E5567EEEAA089F7081BB22B
Malicious:	false
Reputation:	low
URL:	https://2gewf232.blogspot.com/
Preview:	<!DOCTYPE html>.<html class='v2' dir='ltr' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'>.<head>.<link href='https://www.blogger.com/static/v1/widgets/3566091532-css_bundle_v2.css' rel='stylesheet' type='text/css'/>.<script>.window.location="http://u967289v.beget.tech";.</script>.<meta content='width=1100' name='viewport'/>.<meta content='text/html; charset=UTF-8' http-equiv='Content-Type'/>.<meta content='blogger' name='generator'/>.<link href='https://2gewf232.blogspot.com/favicon.ico' rel='icon' type='image/x-icon'/>.<link href='http://2gewf232.blogspot.com/' rel='canonical'/>.<link rel="alternate" type="application/atom+xml" title="1 - Atom" href="https://2gewf232.blogspot.com/feeds/posts/default" />.<link rel="alternate" type="application/rss+xml" title="1 - RSS" href="https://2gewf232.blogspot.com/feeds/posts/default?alt=rss" />.<link rel="service.po

Chrome Cache Entry: 78

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Unicode text, UTF-8 text, with very long lines (6319)
Category:	downloaded
Size (bytes):	6325
Entropy (8bit):	5.8252243972221045
Encrypted:	false
SSDEEP:	96:g3lZ4ZUEwZEThmmTcJ/WgnfX2g26Lh1v25JAolGPuvimD2D6vjE33alZffQfX:2ZzJCh7m/WW+Y/oEPhk46vjE33aq
MD5:	F8AE9EB4280447BC0E924F7B92AC2477
SHA1:	0EA58F4F8A023A35BA0AF0505897EAF6308C7069
SHA-256:	3419BF4DC6C874B427BFE2F6B15044B69A886AF8B27C43FB3D203173C2E64425
SHA-512:	648F5918EA6AA8D7EEADEAC72EDB64185CE85E71E693406BFD4BF1CD3C7DB5AF5CB3C3A4E7E44A34BA618E040CC1A382B302512C38BCFD800F6C4F8D4DDBE52B
Malicious:	false
Reputation:	low
URL:	https://www.google.com/complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE
Preview:	)]}'.["",["the pitt recap episode 11","coffee creamer recalled","rainbow six siege x closed beta","cincinnati bengals","blood moon total lunar eclipse tonight","severe weather tornadoes","niantic pok.mon go","cleveland cavaliers vs memphis grizzlies"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQoRVHJlbmRpbmcgc2VhcmNoZXMoCg\u003d\u003d","google:suggestdetail":[{"zl":10002},{"zl":10002},{"zl":10002},{"google:entityinfo":"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

Chrome Cache Entry: 79

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	gzip compressed data, from Unix, original size modulo 2^32 12108
Category:	downloaded
Size (bytes):	3174
Entropy (8bit):	7.935895301507106
Encrypted:	false
SSDEEP:	96:BWTrZp0LJ2wF+nCp9DeN8U9iVOek+zOS7R:UTrXy2wHDe3SOr+zJ
MD5:	E25500DF45BBAFC269424291E4F85EC4
SHA1:	939DC297FC33DD8D2FEAE1B5DB6E2C20770B7A72
SHA-256:	237FE6EC376985088ADCDED04778B320315B30EC4D9E930FDFEB2BEC0737DDED
SHA-512:	D41CC6ED2672AC57149C661E7FFA4ECDA94C807C043D55E27BB0A4615D965F6075CF0463F0F26A071C66313D9D5DEAACBE14594C8E6C5960AE15EF5B28A23E3A
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/
Preview:	...........Z.o.G..^...R. .... ..Z..-..jO...c......E.....6wR.^.U..v:).........?....c....I&....{.y.....Y8r....?..Qs..j._{...^4...\|..+W..k.../h.....e.]Y....).....R..a...R..u..^I..d1.....Ky.d+[........~T.`?I..g...f.,......#...pfW.<....E.I,Z......Uqq9......K.@.y.rX.qU...v..........#Ce.J...kN...].6_2. xd.Y.teC....)]3.....+zK.v......VN..-a.".......-F.sy.4X.<..bo..-.W.....jP.K}..P..T..[J..rpy.H..-......,..^.......n7.po..\....-n...g...a..p.~;......b...J(.W...a..<..K.%[..Z...tnw.$.XXO...g...V...;.F......@iQh.,.6/..$..r...}..K7...g.;e...I.Z..WfUV....e...s.5...7....R....G.-XE..........o5. .x.F.D....j.R......P.s..y;..AH....`..p..h.O.\.C.).%.C....,Hg.e.S`M.KY...KH2....&.eM..=.`:..C.t.b..Z.iFJXM.F.#\|..Q...D......eg..i.K.E.~.#.g..[..U.S`...I.[....X..l..P.h....Y.S3.!..}...\|.z.E.\|.....!.4....}...G.ak..H3-..h@rw..^...1.l..]c....+..}hH....(G..F.."k...7..>JR$...N.T.F..]J_j.(7.*...Y.KZ.5S.A.q1..G.R..>.....5....O..PFNS.q).....d.@XF.l.<E...r..:;3;Udv}.v..

Chrome Cache Entry: 80

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	PNG image data, 16 x 16, 8-bit/color RGBA, non-interlaced
Category:	downloaded
Size (bytes):	401
Entropy (8bit):	7.100774013005412
Encrypted:	false
SSDEEP:	6:6v/lhPUq25KiaovtCpxGCGSH0i1H5m72cxbvFRT4j2jSRU50/KH/R0/Z6p:6v/78qz0CpMC/UitRcjRTxSp/KHoZQ
MD5:	F56CB5B3818580563CD40DD2E91537AF
SHA1:	B714764B9316832F05CB764E22FF166412C9DCA1
SHA-256:	763D5CF5ABDD250387794A5BA1FF4F68ED237071449821341B9EC7F510A43512
SHA-512:	CCD8820AD1AF5BC6655C3C6956988FAB97D5AFA7E0EE760EA74BB88A9E8EBA77487693D9E05E32E2796EC56B18F1EFAC10354A560DD73D6DD0FF325C110FD698
Malicious:	false
Reputation:	low
URL:	http://u967289v.beget.tech/index_files/fav_logo.ico?5
Preview:	.PNG........IHDR................a....gAMA......a....HIDAT8.c.jX..........0......001.3...d..B..L...H.^&d.r..5`Zi0..0.nN6.E)!.eM1`>.e.<..s...&...8.....>g..`cp4Va........X.!J"]..8.Y.........5.c..f....+dbbb.7Tb.3Tf......p....G...o0.p.3.%.2011.]..h......`...g@..Hj...7.6I...UN]s........j....pq...?..1./........>...p..}...........f....d.`..]..(..q4....PE...\.0.$.H/.(K.c.,;....o3........IEND.B`.

Static File Info

⊘No static file info

Network Behavior

Download Network PCAP: filtered – full

Network Port Distribution

Total Packets: 399
• 443 (HTTPS)
• 80 (HTTP)
• 53 (DNS)

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 15, 2025 00:44:15.807993889 CET	49676	80	192.168.2.7	23.199.215.203
Mar 15, 2025 00:44:15.808032990 CET	49677	443	192.168.2.7	2.18.98.62
Mar 15, 2025 00:44:16.854830980 CET	49675	443	192.168.2.7	2.23.227.208
Mar 15, 2025 00:44:16.854918003 CET	49673	443	192.168.2.7	2.23.227.208
Mar 15, 2025 00:44:16.854922056 CET	49674	443	192.168.2.7	2.23.227.208
Mar 15, 2025 00:44:22.817353964 CET	49686	443	192.168.2.7	142.250.185.132
Mar 15, 2025 00:44:22.817395926 CET	443	49686	142.250.185.132	192.168.2.7
Mar 15, 2025 00:44:22.817468882 CET	49686	443	192.168.2.7	142.250.185.132
Mar 15, 2025 00:44:22.817660093 CET	49686	443	192.168.2.7	142.250.185.132
Mar 15, 2025 00:44:22.817676067 CET	443	49686	142.250.185.132	192.168.2.7
Mar 15, 2025 00:44:23.473306894 CET	443	49686	142.250.185.132	192.168.2.7
Mar 15, 2025 00:44:23.473422050 CET	49686	443	192.168.2.7	142.250.185.132
Mar 15, 2025 00:44:23.474747896 CET	49686	443	192.168.2.7	142.250.185.132
Mar 15, 2025 00:44:23.474760056 CET	443	49686	142.250.185.132	192.168.2.7
Mar 15, 2025 00:44:23.475023031 CET	443	49686	142.250.185.132	192.168.2.7
Mar 15, 2025 00:44:23.527292967 CET	49686	443	192.168.2.7	142.250.185.132
Mar 15, 2025 00:44:24.197895050 CET	49687	443	192.168.2.7	172.217.18.1
Mar 15, 2025 00:44:24.197941065 CET	443	49687	172.217.18.1	192.168.2.7
Mar 15, 2025 00:44:24.198015928 CET	49687	443	192.168.2.7	172.217.18.1
Mar 15, 2025 00:44:24.198164940 CET	49687	443	192.168.2.7	172.217.18.1
Mar 15, 2025 00:44:24.198179007 CET	443	49687	172.217.18.1	192.168.2.7
Mar 15, 2025 00:44:24.203021049 CET	49688	80	192.168.2.7	142.250.181.225
Mar 15, 2025 00:44:24.203142881 CET	49689	80	192.168.2.7	142.250.181.225
Mar 15, 2025 00:44:24.211262941 CET	80	49688	142.250.181.225	192.168.2.7
Mar 15, 2025 00:44:24.211273909 CET	80	49689	142.250.181.225	192.168.2.7
Mar 15, 2025 00:44:24.211354017 CET	49688	80	192.168.2.7	142.250.181.225
Mar 15, 2025 00:44:24.211488962 CET	49689	80	192.168.2.7	142.250.181.225
Mar 15, 2025 00:44:24.863421917 CET	443	49687	172.217.18.1	192.168.2.7
Mar 15, 2025 00:44:24.863513947 CET	49687	443	192.168.2.7	172.217.18.1
Mar 15, 2025 00:44:24.864204884 CET	443	49687	172.217.18.1	192.168.2.7
Mar 15, 2025 00:44:24.864252090 CET	49687	443	192.168.2.7	172.217.18.1
Mar 15, 2025 00:44:24.865356922 CET	49687	443	192.168.2.7	172.217.18.1
Mar 15, 2025 00:44:24.865375996 CET	443	49687	172.217.18.1	192.168.2.7
Mar 15, 2025 00:44:24.865608931 CET	443	49687	172.217.18.1	192.168.2.7
Mar 15, 2025 00:44:24.865890026 CET	49687	443	192.168.2.7	172.217.18.1
Mar 15, 2025 00:44:24.912328005 CET	443	49687	172.217.18.1	192.168.2.7
Mar 15, 2025 00:44:25.233552933 CET	443	49687	172.217.18.1	192.168.2.7
Mar 15, 2025 00:44:25.233669996 CET	443	49687	172.217.18.1	192.168.2.7
Mar 15, 2025 00:44:25.234009027 CET	49687	443	192.168.2.7	172.217.18.1
Mar 15, 2025 00:44:25.234042883 CET	443	49687	172.217.18.1	192.168.2.7
Mar 15, 2025 00:44:25.234055042 CET	49687	443	192.168.2.7	172.217.18.1
Mar 15, 2025 00:44:25.234112024 CET	49687	443	192.168.2.7	172.217.18.1
Mar 15, 2025 00:44:25.257507086 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:25.257548094 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:25.257622957 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:25.257750034 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:25.257764101 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:25.419471025 CET	49676	80	192.168.2.7	23.199.215.203
Mar 15, 2025 00:44:25.419486046 CET	49677	443	192.168.2.7	2.18.98.62
Mar 15, 2025 00:44:25.913597107 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:25.913662910 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:25.914319038 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:25.914372921 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:25.915374994 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:25.915385008 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:25.915613890 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:25.915859938 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:25.960330009 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.308993101 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.309055090 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.309087992 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.309114933 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:26.309120893 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.309145927 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.309180975 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:26.314842939 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.314877033 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.314901114 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.314903975 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:26.314932108 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.314948082 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:26.321227074 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.321300030 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:26.321347952 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.330221891 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.330252886 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.330305099 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:26.330360889 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.330440044 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:26.371714115 CET	49686	443	192.168.2.7	142.250.185.132
Mar 15, 2025 00:44:26.382451057 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:26.382498980 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:26.382567883 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:26.382710934 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:26.382725954 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:26.391863108 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:26.391896009 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:26.391968966 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:26.392108917 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:26.392122030 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:26.410165071 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.410237074 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.410263062 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.410291910 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:26.410329103 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.410375118 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:26.410644054 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.411184072 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.411225080 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:26.411242962 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.411325932 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.411370039 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:26.411750078 CET	49690	443	192.168.2.7	142.250.74.193
Mar 15, 2025 00:44:26.411765099 CET	443	49690	142.250.74.193	192.168.2.7
Mar 15, 2025 00:44:26.416321039 CET	443	49686	142.250.185.132	192.168.2.7
Mar 15, 2025 00:44:26.418926954 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:26.418962002 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:26.419034004 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:26.419152021 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:26.419166088 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:26.466502905 CET	49675	443	192.168.2.7	2.23.227.208
Mar 15, 2025 00:44:26.466514111 CET	49674	443	192.168.2.7	2.23.227.208
Mar 15, 2025 00:44:26.466662884 CET	49673	443	192.168.2.7	2.23.227.208
Mar 15, 2025 00:44:26.581782103 CET	443	49686	142.250.185.132	192.168.2.7
Mar 15, 2025 00:44:26.581828117 CET	443	49686	142.250.185.132	192.168.2.7
Mar 15, 2025 00:44:26.581847906 CET	443	49686	142.250.185.132	192.168.2.7
Mar 15, 2025 00:44:26.581866980 CET	49686	443	192.168.2.7	142.250.185.132
Mar 15, 2025 00:44:26.581901073 CET	443	49686	142.250.185.132	192.168.2.7
Mar 15, 2025 00:44:26.581934929 CET	443	49686	142.250.185.132	192.168.2.7
Mar 15, 2025 00:44:26.581938982 CET	49686	443	192.168.2.7	142.250.185.132
Mar 15, 2025 00:44:26.581948996 CET	443	49686	142.250.185.132	192.168.2.7
Mar 15, 2025 00:44:26.581985950 CET	49686	443	192.168.2.7	142.250.185.132
Mar 15, 2025 00:44:26.581993103 CET	443	49686	142.250.185.132	192.168.2.7
Mar 15, 2025 00:44:26.585608959 CET	443	49686	142.250.185.132	192.168.2.7
Mar 15, 2025 00:44:26.585760117 CET	49686	443	192.168.2.7	142.250.185.132
Mar 15, 2025 00:44:26.585860014 CET	49686	443	192.168.2.7	142.250.185.132
Mar 15, 2025 00:44:26.585880995 CET	443	49686	142.250.185.132	192.168.2.7
Mar 15, 2025 00:44:27.254091978 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.254204035 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.255280972 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.255289078 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.255299091 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.255357027 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.255517006 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.256277084 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.256288052 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.256484985 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.256541967 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.256710052 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.259727955 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.259797096 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.260585070 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.260596991 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.260827065 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.260989904 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.300329924 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.304327965 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.308331966 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.520495892 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.520548105 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.520586967 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.520601988 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.520628929 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.520690918 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.520735979 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.520744085 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.521114111 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.526745081 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.526797056 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.526863098 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.526885033 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.527364016 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.527401924 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.527426004 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.527448893 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.527452946 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.527462006 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.527487040 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.527493954 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.527532101 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.528357983 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.528405905 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.528542995 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.528558016 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.528856993 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.528898001 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.528906107 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.528914928 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.528948069 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.532725096 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.532773018 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.532779932 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.533416033 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.533906937 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.533961058 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.533972025 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.536906958 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.536957979 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.537009001 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.537018061 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.540410042 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.540453911 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.540460110 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.540901899 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.540952921 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.540958881 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.581449032 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.581458092 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.581466913 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.581471920 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.581480980 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.581485033 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.610424995 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.610465050 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.610480070 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.610488892 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.610515118 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.610558033 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.610565901 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.610610008 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.614068985 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.614105940 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.614145041 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.614151955 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.614185095 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.616415024 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.617033005 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.618803024 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.618837118 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.618850946 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.618860006 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.618886948 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.618910074 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.618921041 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.618961096 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.622374058 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.622402906 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.622438908 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.622451067 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.622587919 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.623210907 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.623255014 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.623256922 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.623265028 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.623302937 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.623919964 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.628410101 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.629520893 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.630152941 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.630178928 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.630191088 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.630198002 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.630230904 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.634685993 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.634712934 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.634731054 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.634737968 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.634978056 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.635900021 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.635932922 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.635977983 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.635984898 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.636038065 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.636199951 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.640959024 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.642111063 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.642587900 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.642611980 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.642659903 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.642669916 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.642797947 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.646811962 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.646836042 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.646872044 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.646878958 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.646914005 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.646991968 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.647054911 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.647104025 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.647191048 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.647203922 CET	443	49693	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.647212029 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.647245884 CET	49693	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.648497105 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.648535013 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.648564100 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.648570061 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.648685932 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.649008036 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.654663086 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.654692888 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.654751062 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.654763937 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.660156012 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.660193920 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.660209894 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.660228014 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.660259008 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.660695076 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.660722971 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.660762072 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.660770893 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.660924911 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.666104078 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.666624069 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.667115927 CET	49694	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:27.671825886 CET	53	49694	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:27.671895981 CET	49694	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:27.672076941 CET	49694	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:27.672087908 CET	49694	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:27.674668074 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.674700975 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.674706936 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.677748919 CET	53	49694	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:27.677762985 CET	53	49694	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:27.678476095 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.678508997 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.678530931 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.678540945 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.678577900 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.700684071 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.700736046 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.700792074 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.700799942 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.700807095 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.700851917 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.701014996 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.701069117 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.701117992 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.701122999 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.703569889 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.703685045 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.703691006 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.709202051 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.709248066 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.709254026 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.709287882 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.709368944 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.709403992 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.709449053 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.709461927 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.709497929 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.709503889 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.709541082 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.709572077 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.709609032 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.709614992 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.709697962 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.710355043 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.714896917 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.714929104 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.714965105 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.714972973 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.715008974 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.715023994 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.715097904 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.715104103 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.720248938 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.720376968 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.720417976 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.720423937 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.721084118 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.721128941 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.721133947 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.721143007 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.721208096 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.721844912 CET	49692	443	192.168.2.7	142.250.185.142
Mar 15, 2025 00:44:27.721858025 CET	443	49692	142.250.185.142	192.168.2.7
Mar 15, 2025 00:44:27.725850105 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.725898027 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.725903988 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.731210947 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.731415987 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.731421947 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.736510038 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.736563921 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.736569881 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.741949081 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.741993904 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.742001057 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.747199059 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.747242928 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.747247934 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.752413034 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.755153894 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.755162954 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.757359982 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.757426977 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.757432938 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.763247967 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.767081022 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.767108917 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.767170906 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.767179966 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.767189980 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.771219015 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.775031090 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.775057077 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.775089025 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.775095940 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.775127888 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.779776096 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.782953978 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.782980919 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.783010006 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.783018112 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.783049107 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.787199020 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.791172028 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.791184902 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.791224003 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.791260958 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.791265011 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.794533968 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.795154095 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.795161963 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.796880007 CET	49695	443	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:27.796910048 CET	443	49695	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:27.797012091 CET	49695	443	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:27.797250032 CET	49695	443	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:27.797260046 CET	443	49695	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:27.800435066 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.801229954 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.801256895 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.801282883 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.801291943 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.801327944 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.803183079 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.804160118 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.804166079 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.805495977 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.805551052 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.805556059 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.807600975 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.811152935 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.811161041 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.811211109 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.811244011 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.811248064 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.812422991 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.812465906 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.812470913 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.814534903 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.814559937 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.814583063 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.814589977 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.815135002 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.817723036 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.819576979 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.819747925 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.819797993 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.819802999 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.819835901 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.821542025 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.824029922 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.824054956 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.824100971 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.824105978 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.824140072 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.826476097 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.826587915 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.826642990 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.829184055 CET	49691	443	192.168.2.7	172.217.16.137
Mar 15, 2025 00:44:27.829201937 CET	443	49691	172.217.16.137	192.168.2.7
Mar 15, 2025 00:44:27.873081923 CET	49694	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:27.874398947 CET	49696	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:27.874538898 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:27.879050016 CET	80	49696	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:27.879125118 CET	49696	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:27.879348040 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:27.879391909 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:27.919809103 CET	53	49694	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:28.027488947 CET	53	49694	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:28.027558088 CET	49694	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:30.672486067 CET	49696	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:30.898046017 CET	80	49696	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.215389967 CET	80	49696	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.215409040 CET	80	49696	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.215420008 CET	80	49696	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.215482950 CET	49696	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.215544939 CET	80	49696	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.215590954 CET	49696	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.254312992 CET	49696	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.254604101 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.254976034 CET	49698	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.259010077 CET	80	49696	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.259274960 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.259603977 CET	80	49698	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.259675980 CET	49698	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.261038065 CET	49698	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.261387110 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.265702009 CET	80	49698	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.266042948 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.266104937 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.268466949 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.273156881 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.351667881 CET	443	49695	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.351754904 CET	49695	443	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.351936102 CET	49695	443	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.351950884 CET	443	49695	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.352240086 CET	49702	443	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.352303028 CET	443	49702	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.352380991 CET	49702	443	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.352566004 CET	49702	443	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.352576971 CET	443	49702	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.364018917 CET	49703	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:31.364052057 CET	443	49703	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:31.364120960 CET	49703	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:31.364250898 CET	49703	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:31.364264011 CET	443	49703	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:31.482415915 CET	80	49696	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.492706060 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.492717981 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.492743015 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.492753029 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.492783070 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.492799997 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.492810965 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.492815971 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.492821932 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.492832899 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.492845058 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.492865086 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.492883921 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.500622988 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.500633955 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.500648022 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.500658989 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.500673056 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.500731945 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.529978991 CET	49696	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.584367990 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.628119946 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.628144026 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.628176928 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.628180981 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.628202915 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.628213882 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.628242016 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.628258944 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.628639936 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.628652096 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.628665924 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.628675938 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.628686905 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.628722906 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.629400969 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.629420996 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.629431963 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.629442930 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.629455090 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.629458904 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.629483938 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.629534960 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.630223989 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.630237103 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.630287886 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.709646940 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.709675074 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.709686995 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.709697008 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.709708929 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.709718943 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.709731102 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.709739923 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.709749937 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.709753990 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.709763050 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.709817886 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.715821981 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.715846062 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.715857029 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.715867043 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.715878963 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.715886116 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.715919018 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.764805079 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.796397924 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.796443939 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.796490908 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.796504974 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.796540022 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.796572924 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.796582937 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.796606064 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.796647072 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.796679974 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.796713114 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.796751976 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.796772003 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.797535896 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.797569990 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.797580957 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.797604084 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.797636986 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.797645092 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.797679901 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.797715902 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.797729969 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.798690081 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.798727036 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:44:31.798757076 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.838670015 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.838788986 CET	49696	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.839282990 CET	49704	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.840446949 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:44:31.844799995 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.845172882 CET	80	49696	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.845768929 CET	80	49704	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.845841885 CET	49704	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.846005917 CET	49704	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.846576929 CET	443	49703	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:31.846625090 CET	49703	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:31.847599983 CET	49703	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:31.847608089 CET	443	49703	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:31.847898960 CET	443	49703	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:31.848134995 CET	49703	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:31.851011038 CET	80	49704	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.892317057 CET	443	49703	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:31.990200043 CET	80	49698	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.990264893 CET	80	49698	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.990294933 CET	80	49698	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.990305901 CET	49698	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.990330935 CET	80	49698	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.990375042 CET	49698	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.990401983 CET	80	49698	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.990436077 CET	80	49698	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.990468979 CET	80	49698	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.990497112 CET	49698	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.990515947 CET	80	49698	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.990549088 CET	80	49698	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.990556955 CET	49698	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:31.990582943 CET	80	49698	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:31.990617990 CET	49698	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.001904011 CET	49698	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.007170916 CET	80	49698	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:32.100076914 CET	443	49703	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.100146055 CET	443	49703	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.100178957 CET	49703	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:32.100528002 CET	49703	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:32.100548029 CET	443	49703	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.139018059 CET	80	49696	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:32.139902115 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:32.183532000 CET	49696	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.183705091 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.236912966 CET	80	49698	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:32.236942053 CET	80	49698	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:32.236975908 CET	49698	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.237508059 CET	49706	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.237660885 CET	49707	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.242275000 CET	80	49706	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:32.242356062 CET	80	49707	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:32.242356062 CET	49706	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.242397070 CET	49707	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.243186951 CET	49708	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.243345022 CET	49707	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.243458986 CET	49706	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.248039007 CET	80	49708	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:32.248049021 CET	80	49707	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:32.248111963 CET	49708	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.248130083 CET	80	49706	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:32.248248100 CET	49708	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.253068924 CET	80	49708	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:32.253535986 CET	49709	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:32.253577948 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.253628969 CET	49709	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:32.253846884 CET	49709	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:32.253854036 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.618936062 CET	80	49704	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:32.629380941 CET	49710	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.634056091 CET	80	49710	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:32.634164095 CET	49710	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.634480000 CET	49710	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.639199972 CET	80	49710	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:32.669047117 CET	49704	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.737468958 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.737534046 CET	49709	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:32.739383936 CET	49709	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:32.739393950 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.739684105 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.740056992 CET	49709	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:32.780355930 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.890814066 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.890849113 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.890877962 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.890901089 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.890928030 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.890959024 CET	49709	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:32.891016960 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.891036034 CET	49709	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:32.891083002 CET	49709	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:32.891386986 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.891434908 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.891511917 CET	49709	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:32.891526937 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.891829014 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.891897917 CET	49709	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:32.891908884 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.937490940 CET	49709	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:32.937505007 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.978533030 CET	80	49708	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:32.978568077 CET	80	49708	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:32.978693962 CET	49708	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:32.982959986 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.983050108 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.983086109 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.983124971 CET	49709	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:32.983165026 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.983176947 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:32.983186960 CET	49709	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:32.983217001 CET	49709	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:33.011912107 CET	80	49706	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:33.030803919 CET	80	49707	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:33.055577993 CET	49706	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:33.068464041 CET	49709	443	192.168.2.7	104.21.29.163
Mar 15, 2025 00:44:33.068512917 CET	443	49709	104.21.29.163	192.168.2.7
Mar 15, 2025 00:44:33.070909023 CET	49707	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:33.117728949 CET	49711	443	192.168.2.7	87.240.129.133
Mar 15, 2025 00:44:33.117759943 CET	443	49711	87.240.129.133	192.168.2.7
Mar 15, 2025 00:44:33.117834091 CET	49711	443	192.168.2.7	87.240.129.133
Mar 15, 2025 00:44:33.118254900 CET	49711	443	192.168.2.7	87.240.129.133
Mar 15, 2025 00:44:33.118271112 CET	443	49711	87.240.129.133	192.168.2.7
Mar 15, 2025 00:44:33.142142057 CET	49713	443	192.168.2.7	172.67.149.117
Mar 15, 2025 00:44:33.142178059 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.142288923 CET	49713	443	192.168.2.7	172.67.149.117
Mar 15, 2025 00:44:33.142363071 CET	49713	443	192.168.2.7	172.67.149.117
Mar 15, 2025 00:44:33.142380953 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.397589922 CET	80	49710	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:33.449107885 CET	49710	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:33.607500076 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.607568026 CET	49713	443	192.168.2.7	172.67.149.117
Mar 15, 2025 00:44:33.608325005 CET	49713	443	192.168.2.7	172.67.149.117
Mar 15, 2025 00:44:33.608335018 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.608634949 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.609494925 CET	49713	443	192.168.2.7	172.67.149.117
Mar 15, 2025 00:44:33.656354904 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.747657061 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.747704983 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.747740984 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.747749090 CET	49713	443	192.168.2.7	172.67.149.117
Mar 15, 2025 00:44:33.747759104 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.747801065 CET	49713	443	192.168.2.7	172.67.149.117
Mar 15, 2025 00:44:33.747807980 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.747850895 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.747884989 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.747916937 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.747925043 CET	49713	443	192.168.2.7	172.67.149.117
Mar 15, 2025 00:44:33.747931957 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.747956991 CET	49713	443	192.168.2.7	172.67.149.117
Mar 15, 2025 00:44:33.747976065 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.748013973 CET	49713	443	192.168.2.7	172.67.149.117
Mar 15, 2025 00:44:33.748019934 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.752252102 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.752299070 CET	49713	443	192.168.2.7	172.67.149.117
Mar 15, 2025 00:44:33.752310038 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.795114994 CET	49713	443	192.168.2.7	172.67.149.117
Mar 15, 2025 00:44:33.834681988 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.834750891 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.834805012 CET	49713	443	192.168.2.7	172.67.149.117
Mar 15, 2025 00:44:33.834819078 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.834835052 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.834877014 CET	49713	443	192.168.2.7	172.67.149.117
Mar 15, 2025 00:44:33.835187912 CET	49713	443	192.168.2.7	172.67.149.117
Mar 15, 2025 00:44:33.835201025 CET	443	49713	172.67.149.117	192.168.2.7
Mar 15, 2025 00:44:33.884363890 CET	443	49711	87.240.129.133	192.168.2.7
Mar 15, 2025 00:44:33.884428978 CET	49711	443	192.168.2.7	87.240.129.133
Mar 15, 2025 00:44:33.885550022 CET	49711	443	192.168.2.7	87.240.129.133
Mar 15, 2025 00:44:33.885561943 CET	443	49711	87.240.129.133	192.168.2.7
Mar 15, 2025 00:44:33.885796070 CET	443	49711	87.240.129.133	192.168.2.7
Mar 15, 2025 00:44:33.886065960 CET	49711	443	192.168.2.7	87.240.129.133
Mar 15, 2025 00:44:33.928319931 CET	443	49711	87.240.129.133	192.168.2.7
Mar 15, 2025 00:44:34.195985079 CET	443	49711	87.240.129.133	192.168.2.7
Mar 15, 2025 00:44:34.196055889 CET	443	49711	87.240.129.133	192.168.2.7
Mar 15, 2025 00:44:34.196110010 CET	49711	443	192.168.2.7	87.240.129.133
Mar 15, 2025 00:44:34.196796894 CET	49711	443	192.168.2.7	87.240.129.133
Mar 15, 2025 00:44:34.196816921 CET	443	49711	87.240.129.133	192.168.2.7
Mar 15, 2025 00:44:34.198153973 CET	49704	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:34.202872038 CET	80	49704	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:34.427366972 CET	80	49704	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:34.431485891 CET	49710	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:34.437268019 CET	80	49710	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:34.481642008 CET	49704	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:34.670764923 CET	80	49710	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:34.715977907 CET	49710	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:34.915970087 CET	443	49702	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:34.916099072 CET	49702	443	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:34.916241884 CET	49702	443	192.168.2.7	185.50.25.7
Mar 15, 2025 00:44:34.916260004 CET	443	49702	185.50.25.7	192.168.2.7
Mar 15, 2025 00:44:37.104197979 CET	49716	80	192.168.2.7	142.250.185.195
Mar 15, 2025 00:44:37.108849049 CET	80	49716	142.250.185.195	192.168.2.7
Mar 15, 2025 00:44:37.108971119 CET	49716	80	192.168.2.7	142.250.185.195
Mar 15, 2025 00:44:37.109060049 CET	49716	80	192.168.2.7	142.250.185.195
Mar 15, 2025 00:44:37.113652945 CET	80	49716	142.250.185.195	192.168.2.7
Mar 15, 2025 00:44:37.727619886 CET	80	49716	142.250.185.195	192.168.2.7
Mar 15, 2025 00:44:37.733302116 CET	49716	80	192.168.2.7	142.250.185.195
Mar 15, 2025 00:44:37.737998009 CET	80	49716	142.250.185.195	192.168.2.7
Mar 15, 2025 00:44:37.738198042 CET	49672	443	192.168.2.7	2.23.227.208
Mar 15, 2025 00:44:37.738241911 CET	443	49672	2.23.227.208	192.168.2.7
Mar 15, 2025 00:44:37.912614107 CET	80	49716	142.250.185.195	192.168.2.7
Mar 15, 2025 00:44:37.964257956 CET	49716	80	192.168.2.7	142.250.185.195
Mar 15, 2025 00:44:52.640626907 CET	49671	443	192.168.2.7	204.79.197.203
Mar 15, 2025 00:44:52.956413031 CET	49671	443	192.168.2.7	204.79.197.203
Mar 15, 2025 00:44:53.563690901 CET	49671	443	192.168.2.7	204.79.197.203
Mar 15, 2025 00:44:54.776961088 CET	49671	443	192.168.2.7	204.79.197.203
Mar 15, 2025 00:44:57.183132887 CET	49671	443	192.168.2.7	204.79.197.203
Mar 15, 2025 00:44:58.210566044 CET	53223	53	192.168.2.7	162.159.36.2
Mar 15, 2025 00:44:58.216116905 CET	53	53223	162.159.36.2	192.168.2.7
Mar 15, 2025 00:44:58.216232061 CET	53223	53	192.168.2.7	162.159.36.2
Mar 15, 2025 00:44:58.221822023 CET	53	53223	162.159.36.2	192.168.2.7
Mar 15, 2025 00:44:58.663208961 CET	53223	53	192.168.2.7	162.159.36.2
Mar 15, 2025 00:44:58.668164015 CET	53	53223	162.159.36.2	192.168.2.7
Mar 15, 2025 00:44:58.670062065 CET	53223	53	192.168.2.7	162.159.36.2
Mar 15, 2025 00:45:01.385497093 CET	49678	443	192.168.2.7	20.189.173.15
Mar 15, 2025 00:45:01.702311039 CET	49678	443	192.168.2.7	20.189.173.15
Mar 15, 2025 00:45:01.990556002 CET	49671	443	192.168.2.7	204.79.197.203
Mar 15, 2025 00:45:02.324743032 CET	49678	443	192.168.2.7	20.189.173.15
Mar 15, 2025 00:45:03.527281046 CET	49678	443	192.168.2.7	20.189.173.15
Mar 15, 2025 00:45:05.933109045 CET	49678	443	192.168.2.7	20.189.173.15
Mar 15, 2025 00:45:09.214813948 CET	49688	80	192.168.2.7	142.250.181.225
Mar 15, 2025 00:45:09.214996099 CET	49689	80	192.168.2.7	142.250.181.225
Mar 15, 2025 00:45:09.220843077 CET	80	49688	142.250.181.225	192.168.2.7
Mar 15, 2025 00:45:09.221702099 CET	80	49689	142.250.181.225	192.168.2.7
Mar 15, 2025 00:45:10.746666908 CET	49678	443	192.168.2.7	20.189.173.15
Mar 15, 2025 00:45:11.605788946 CET	49671	443	192.168.2.7	204.79.197.203
Mar 15, 2025 00:45:16.807271004 CET	49700	80	192.168.2.7	151.101.194.137
Mar 15, 2025 00:45:16.811933041 CET	80	49700	151.101.194.137	192.168.2.7
Mar 15, 2025 00:45:17.151920080 CET	49696	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:45:17.151956081 CET	49697	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:45:17.160703897 CET	80	49696	185.50.25.7	192.168.2.7
Mar 15, 2025 00:45:17.160718918 CET	80	49697	185.50.25.7	192.168.2.7
Mar 15, 2025 00:45:17.245835066 CET	49698	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:45:17.250564098 CET	80	49698	185.50.25.7	192.168.2.7
Mar 15, 2025 00:45:17.994573116 CET	49708	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:45:18.001202106 CET	80	49708	185.50.25.7	192.168.2.7
Mar 15, 2025 00:45:18.027510881 CET	49706	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:45:18.032450914 CET	80	49706	185.50.25.7	192.168.2.7
Mar 15, 2025 00:45:18.043108940 CET	49707	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:45:18.049397945 CET	80	49707	185.50.25.7	192.168.2.7
Mar 15, 2025 00:45:19.433557987 CET	49704	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:45:19.438288927 CET	80	49704	185.50.25.7	192.168.2.7
Mar 15, 2025 00:45:19.683478117 CET	49710	80	192.168.2.7	185.50.25.7
Mar 15, 2025 00:45:19.688323021 CET	80	49710	185.50.25.7	192.168.2.7
Mar 15, 2025 00:45:20.355103016 CET	49678	443	192.168.2.7	20.189.173.15
Mar 15, 2025 00:45:22.880464077 CET	53233	443	192.168.2.7	172.217.18.4
Mar 15, 2025 00:45:22.880511999 CET	443	53233	172.217.18.4	192.168.2.7
Mar 15, 2025 00:45:22.880592108 CET	53233	443	192.168.2.7	172.217.18.4
Mar 15, 2025 00:45:22.880758047 CET	53233	443	192.168.2.7	172.217.18.4
Mar 15, 2025 00:45:22.880769968 CET	443	53233	172.217.18.4	192.168.2.7
Mar 15, 2025 00:45:23.517019987 CET	443	53233	172.217.18.4	192.168.2.7
Mar 15, 2025 00:45:23.517389059 CET	53233	443	192.168.2.7	172.217.18.4
Mar 15, 2025 00:45:23.517421007 CET	443	53233	172.217.18.4	192.168.2.7
Mar 15, 2025 00:45:25.593555927 CET	49688	80	192.168.2.7	142.250.181.225
Mar 15, 2025 00:45:25.593616962 CET	49689	80	192.168.2.7	142.250.181.225
Mar 15, 2025 00:45:25.598541021 CET	80	49688	142.250.181.225	192.168.2.7
Mar 15, 2025 00:45:25.598618984 CET	49688	80	192.168.2.7	142.250.181.225
Mar 15, 2025 00:45:25.598929882 CET	80	49689	142.250.181.225	192.168.2.7
Mar 15, 2025 00:45:25.598979950 CET	49689	80	192.168.2.7	142.250.181.225
Mar 15, 2025 00:45:33.447338104 CET	443	53233	172.217.18.4	192.168.2.7
Mar 15, 2025 00:45:33.447413921 CET	443	53233	172.217.18.4	192.168.2.7
Mar 15, 2025 00:45:33.447470903 CET	53233	443	192.168.2.7	172.217.18.4
Mar 15, 2025 00:45:33.605314970 CET	53233	443	192.168.2.7	172.217.18.4
Mar 15, 2025 00:45:33.605346918 CET	443	53233	172.217.18.4	192.168.2.7
Mar 15, 2025 00:45:38.465627909 CET	49716	80	192.168.2.7	142.250.185.195
Mar 15, 2025 00:45:38.470616102 CET	80	49716	142.250.185.195	192.168.2.7
Mar 15, 2025 00:45:38.470679045 CET	49716	80	192.168.2.7	142.250.185.195

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 15, 2025 00:44:18.268876076 CET	53	53214	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:18.363571882 CET	53	50435	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:19.414397001 CET	53	61271	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:19.478111982 CET	53	56733	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:22.809659004 CET	53039	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:22.809834003 CET	54238	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:22.816282034 CET	53	53039	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:22.816602945 CET	53	54238	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:24.159907103 CET	50502	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:24.160015106 CET	56242	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:24.169455051 CET	65276	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:24.169600010 CET	65371	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:24.180243015 CET	53	65371	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:24.196917057 CET	53	65276	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:24.201600075 CET	53	50502	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:24.202248096 CET	53	56242	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:25.236336946 CET	59889	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:25.236459970 CET	62020	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:25.248315096 CET	53	62020	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:25.257028103 CET	53	59889	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:26.372270107 CET	58479	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:26.372426987 CET	60262	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:26.379594088 CET	53	58479	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:26.380120993 CET	53	60262	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:26.383436918 CET	58863	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:26.383588076 CET	61229	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:26.390141010 CET	53	58863	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:26.391361952 CET	53	61229	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:27.659975052 CET	56310	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:27.660378933 CET	50378	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:27.666805983 CET	53	50378	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:27.677710056 CET	49274	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:27.678071976 CET	59966	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:27.735662937 CET	53	59966	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:27.776527882 CET	53	49274	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:27.827487946 CET	53	56310	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:31.253784895 CET	54802	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:31.253936052 CET	64674	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:31.255326033 CET	55253	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:31.255466938 CET	62212	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:31.260272980 CET	53	64674	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:31.260641098 CET	53	54802	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:31.303394079 CET	53	55253	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:31.304127932 CET	53	62212	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:31.305737019 CET	52194	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:31.305871964 CET	51683	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:31.353339911 CET	53	51683	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:31.363518000 CET	53	52194	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:32.145386934 CET	65441	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:32.145541906 CET	50010	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:32.154608011 CET	53	57608	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:32.156809092 CET	53	65441	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:32.158545971 CET	53	50010	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:32.159718990 CET	64090	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:32.160098076 CET	58988	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:32.162343025 CET	61085	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:32.162503958 CET	59556	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:32.220582008 CET	53	64090	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:32.251198053 CET	53	61085	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:32.253158092 CET	53	59556	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:32.471704960 CET	53	58988	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:33.108088970 CET	51283	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:33.108256102 CET	59648	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:33.116585016 CET	53	59648	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:33.116760015 CET	53	51283	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:33.129100084 CET	57268	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:33.129781008 CET	52354	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:33.139457941 CET	53	57268	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:33.141649961 CET	53	52354	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:36.441957951 CET	53	54446	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:55.575417995 CET	53	50500	1.1.1.1	192.168.2.7
Mar 15, 2025 00:44:58.210051060 CET	53	64389	162.159.36.2	192.168.2.7
Mar 15, 2025 00:44:58.871186972 CET	55143	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:44:58.879213095 CET	53	55143	1.1.1.1	192.168.2.7
Mar 15, 2025 00:45:01.385869026 CET	62422	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:45:01.393486023 CET	53	62422	1.1.1.1	192.168.2.7
Mar 15, 2025 00:45:22.872544050 CET	57247	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:45:22.879395008 CET	53	57247	1.1.1.1	192.168.2.7
Mar 15, 2025 00:45:38.184343100 CET	59831	53	192.168.2.7	1.1.1.1
Mar 15, 2025 00:45:38.192547083 CET	53	59831	1.1.1.1	192.168.2.7

ICMP Packets

Timestamp	Source IP	Dest IP	Checksum	Code	Type
Mar 15, 2025 00:44:32.471801043 CET	192.168.2.7	1.1.1.1	c228	(Port unreachable)	Destination Unreachable

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Mar 15, 2025 00:44:22.809659004 CET	192.168.2.7	1.1.1.1	0x3a4d	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:22.809834003 CET	192.168.2.7	1.1.1.1	0x8491	Standard query (0)	www.google.com	65	IN (0x0001)	false
Mar 15, 2025 00:44:24.159907103 CET	192.168.2.7	1.1.1.1	0xb690	Standard query (0)	2gewf232.blogspot.com.au	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:24.160015106 CET	192.168.2.7	1.1.1.1	0x4741	Standard query (0)	2gewf232.blogspot.com.au	65	IN (0x0001)	false
Mar 15, 2025 00:44:24.169455051 CET	192.168.2.7	1.1.1.1	0xf4ab	Standard query (0)	2gewf232.blogspot.com.au	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:24.169600010 CET	192.168.2.7	1.1.1.1	0x2d5c	Standard query (0)	2gewf232.blogspot.com.au	65	IN (0x0001)	false
Mar 15, 2025 00:44:25.236336946 CET	192.168.2.7	1.1.1.1	0x2be4	Standard query (0)	2gewf232.blogspot.com	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:25.236459970 CET	192.168.2.7	1.1.1.1	0xa255	Standard query (0)	2gewf232.blogspot.com	65	IN (0x0001)	false
Mar 15, 2025 00:44:26.372270107 CET	192.168.2.7	1.1.1.1	0x14cb	Standard query (0)	www.blogger.com	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:26.372426987 CET	192.168.2.7	1.1.1.1	0xf915	Standard query (0)	www.blogger.com	65	IN (0x0001)	false
Mar 15, 2025 00:44:26.383436918 CET	192.168.2.7	1.1.1.1	0x741d	Standard query (0)	apis.google.com	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:26.383588076 CET	192.168.2.7	1.1.1.1	0xa004	Standard query (0)	apis.google.com	65	IN (0x0001)	false
Mar 15, 2025 00:44:27.659975052 CET	192.168.2.7	1.1.1.1	0x4ecb	Standard query (0)	u967289v.beget.tech	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:27.660378933 CET	192.168.2.7	1.1.1.1	0x3d78	Standard query (0)	u967289v.beget.tech	65	IN (0x0001)	false
Mar 15, 2025 00:44:27.677710056 CET	192.168.2.7	1.1.1.1	0xd27d	Standard query (0)	u967289v.beget.tech	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:27.678071976 CET	192.168.2.7	1.1.1.1	0xba8c	Standard query (0)	u967289v.beget.tech	65	IN (0x0001)	false
Mar 15, 2025 00:44:31.253784895 CET	192.168.2.7	1.1.1.1	0x58	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:31.253936052 CET	192.168.2.7	1.1.1.1	0x494a	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Mar 15, 2025 00:44:31.255326033 CET	192.168.2.7	1.1.1.1	0xf883	Standard query (0)	img3.proshkolu.ru	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:31.255466938 CET	192.168.2.7	1.1.1.1	0xe1fa	Standard query (0)	img3.proshkolu.ru	65	IN (0x0001)	false
Mar 15, 2025 00:44:31.305737019 CET	192.168.2.7	1.1.1.1	0xb4d3	Standard query (0)	img3.proshkolu.ru	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:31.305871964 CET	192.168.2.7	1.1.1.1	0x6750	Standard query (0)	img3.proshkolu.ru	65	IN (0x0001)	false
Mar 15, 2025 00:44:32.145386934 CET	192.168.2.7	1.1.1.1	0x1394	Standard query (0)	data3.proshkolu.ru	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:32.145541906 CET	192.168.2.7	1.1.1.1	0xd57d	Standard query (0)	data3.proshkolu.ru	65	IN (0x0001)	false
Mar 15, 2025 00:44:32.159718990 CET	192.168.2.7	1.1.1.1	0xbc61	Standard query (0)	u967289v.beget.tech	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:32.160098076 CET	192.168.2.7	1.1.1.1	0x491a	Standard query (0)	u967289v.beget.tech	65	IN (0x0001)	false
Mar 15, 2025 00:44:32.162343025 CET	192.168.2.7	1.1.1.1	0x83eb	Standard query (0)	data3.proshkolu.ru	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:32.162503958 CET	192.168.2.7	1.1.1.1	0xb374	Standard query (0)	data3.proshkolu.ru	65	IN (0x0001)	false
Mar 15, 2025 00:44:33.108088970 CET	192.168.2.7	1.1.1.1	0x84d6	Standard query (0)	m.vk.com	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:33.108256102 CET	192.168.2.7	1.1.1.1	0xf4f0	Standard query (0)	m.vk.com	65	IN (0x0001)	false
Mar 15, 2025 00:44:33.129100084 CET	192.168.2.7	1.1.1.1	0xde1	Standard query (0)	data3.proshkolu.ru	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:33.129781008 CET	192.168.2.7	1.1.1.1	0x454a	Standard query (0)	data3.proshkolu.ru	65	IN (0x0001)	false
Mar 15, 2025 00:44:58.871186972 CET	192.168.2.7	1.1.1.1	0xc38	Standard query (0)	241.42.69.40.in-addr.arpa	PTR (Pointer record)	IN (0x0001)	false
Mar 15, 2025 00:45:01.385869026 CET	192.168.2.7	1.1.1.1	0xbb71	Standard query (0)	m.vk.com	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:45:22.872544050 CET	192.168.2.7	1.1.1.1	0x5c7e	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:45:38.184343100 CET	192.168.2.7	1.1.1.1	0xfe9c	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Mar 15, 2025 00:44:22.816282034 CET	1.1.1.1	192.168.2.7	0x3a4d	No error (0)	www.google.com		142.250.185.132	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:22.816602945 CET	1.1.1.1	192.168.2.7	0x8491	No error (0)	www.google.com			65	IN (0x0001)	false
Mar 15, 2025 00:44:24.180243015 CET	1.1.1.1	192.168.2.7	0x2d5c	No error (0)	2gewf232.blogspot.com.au	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 00:44:24.196917057 CET	1.1.1.1	192.168.2.7	0xf4ab	No error (0)	2gewf232.blogspot.com.au	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 00:44:24.196917057 CET	1.1.1.1	192.168.2.7	0xf4ab	No error (0)	blogspot.l.googleusercontent.com		172.217.18.1	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:24.201600075 CET	1.1.1.1	192.168.2.7	0xb690	No error (0)	2gewf232.blogspot.com.au	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 00:44:24.201600075 CET	1.1.1.1	192.168.2.7	0xb690	No error (0)	blogspot.l.googleusercontent.com		142.250.181.225	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:24.202248096 CET	1.1.1.1	192.168.2.7	0x4741	No error (0)	2gewf232.blogspot.com.au	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 00:44:25.248315096 CET	1.1.1.1	192.168.2.7	0xa255	No error (0)	2gewf232.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 00:44:25.257028103 CET	1.1.1.1	192.168.2.7	0x2be4	No error (0)	2gewf232.blogspot.com	blogspot.l.googleusercontent.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 00:44:25.257028103 CET	1.1.1.1	192.168.2.7	0x2be4	No error (0)	blogspot.l.googleusercontent.com		142.250.74.193	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:26.379594088 CET	1.1.1.1	192.168.2.7	0x14cb	No error (0)	www.blogger.com	blogger.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 00:44:26.379594088 CET	1.1.1.1	192.168.2.7	0x14cb	No error (0)	blogger.l.google.com		172.217.16.137	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:26.380120993 CET	1.1.1.1	192.168.2.7	0xf915	No error (0)	www.blogger.com	blogger.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 00:44:26.390141010 CET	1.1.1.1	192.168.2.7	0x741d	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 00:44:26.390141010 CET	1.1.1.1	192.168.2.7	0x741d	No error (0)	plus.l.google.com		142.250.185.142	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:26.391361952 CET	1.1.1.1	192.168.2.7	0xa004	No error (0)	apis.google.com	plus.l.google.com		CNAME (Canonical name)	IN (0x0001)	false
Mar 15, 2025 00:44:27.776527882 CET	1.1.1.1	192.168.2.7	0xd27d	No error (0)	u967289v.beget.tech		185.50.25.7	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:27.827487946 CET	1.1.1.1	192.168.2.7	0x4ecb	No error (0)	u967289v.beget.tech		185.50.25.7	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:31.260641098 CET	1.1.1.1	192.168.2.7	0x58	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:31.260641098 CET	1.1.1.1	192.168.2.7	0x58	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:31.260641098 CET	1.1.1.1	192.168.2.7	0x58	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:31.260641098 CET	1.1.1.1	192.168.2.7	0x58	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:31.303394079 CET	1.1.1.1	192.168.2.7	0xf883	No error (0)	img3.proshkolu.ru		172.67.149.117	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:31.303394079 CET	1.1.1.1	192.168.2.7	0xf883	No error (0)	img3.proshkolu.ru		104.21.29.163	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:31.304127932 CET	1.1.1.1	192.168.2.7	0xe1fa	No error (0)	img3.proshkolu.ru			65	IN (0x0001)	false
Mar 15, 2025 00:44:31.353339911 CET	1.1.1.1	192.168.2.7	0x6750	No error (0)	img3.proshkolu.ru			65	IN (0x0001)	false
Mar 15, 2025 00:44:31.363518000 CET	1.1.1.1	192.168.2.7	0xb4d3	No error (0)	img3.proshkolu.ru		104.21.29.163	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:31.363518000 CET	1.1.1.1	192.168.2.7	0xb4d3	No error (0)	img3.proshkolu.ru		172.67.149.117	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:32.156809092 CET	1.1.1.1	192.168.2.7	0x1394	No error (0)	data3.proshkolu.ru		172.67.149.117	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:32.156809092 CET	1.1.1.1	192.168.2.7	0x1394	No error (0)	data3.proshkolu.ru		104.21.29.163	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:32.158545971 CET	1.1.1.1	192.168.2.7	0xd57d	No error (0)	data3.proshkolu.ru			65	IN (0x0001)	false
Mar 15, 2025 00:44:32.220582008 CET	1.1.1.1	192.168.2.7	0xbc61	No error (0)	u967289v.beget.tech		185.50.25.7	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:32.251198053 CET	1.1.1.1	192.168.2.7	0x83eb	No error (0)	data3.proshkolu.ru		104.21.29.163	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:32.251198053 CET	1.1.1.1	192.168.2.7	0x83eb	No error (0)	data3.proshkolu.ru		172.67.149.117	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:32.253158092 CET	1.1.1.1	192.168.2.7	0xb374	No error (0)	data3.proshkolu.ru			65	IN (0x0001)	false
Mar 15, 2025 00:44:33.116760015 CET	1.1.1.1	192.168.2.7	0x84d6	No error (0)	m.vk.com		87.240.129.133	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:33.116760015 CET	1.1.1.1	192.168.2.7	0x84d6	No error (0)	m.vk.com		87.240.132.72	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:33.116760015 CET	1.1.1.1	192.168.2.7	0x84d6	No error (0)	m.vk.com		87.240.132.67	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:33.116760015 CET	1.1.1.1	192.168.2.7	0x84d6	No error (0)	m.vk.com		93.186.225.194	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:33.116760015 CET	1.1.1.1	192.168.2.7	0x84d6	No error (0)	m.vk.com		87.240.137.164	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:33.116760015 CET	1.1.1.1	192.168.2.7	0x84d6	No error (0)	m.vk.com		87.240.132.78	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:33.139457941 CET	1.1.1.1	192.168.2.7	0xde1	No error (0)	data3.proshkolu.ru		172.67.149.117	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:33.139457941 CET	1.1.1.1	192.168.2.7	0xde1	No error (0)	data3.proshkolu.ru		104.21.29.163	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:44:33.141649961 CET	1.1.1.1	192.168.2.7	0x454a	No error (0)	data3.proshkolu.ru			65	IN (0x0001)	false
Mar 15, 2025 00:44:58.879213095 CET	1.1.1.1	192.168.2.7	0xc38	Name error (3)	241.42.69.40.in-addr.arpa	none	none	PTR (Pointer record)	IN (0x0001)	false
Mar 15, 2025 00:45:01.393486023 CET	1.1.1.1	192.168.2.7	0xbb71	No error (0)	m.vk.com		87.240.132.78	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:45:01.393486023 CET	1.1.1.1	192.168.2.7	0xbb71	No error (0)	m.vk.com		93.186.225.194	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:45:01.393486023 CET	1.1.1.1	192.168.2.7	0xbb71	No error (0)	m.vk.com		87.240.137.164	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:45:01.393486023 CET	1.1.1.1	192.168.2.7	0xbb71	No error (0)	m.vk.com		87.240.132.67	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:45:01.393486023 CET	1.1.1.1	192.168.2.7	0xbb71	No error (0)	m.vk.com		87.240.132.72	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:45:01.393486023 CET	1.1.1.1	192.168.2.7	0xbb71	No error (0)	m.vk.com		87.240.129.133	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:45:22.879395008 CET	1.1.1.1	192.168.2.7	0x5c7e	No error (0)	www.google.com		172.217.18.4	A (IP address)	IN (0x0001)	false
Mar 15, 2025 00:45:38.192547083 CET	1.1.1.1	192.168.2.7	0xfe9c	No error (0)	www.google.com		142.250.184.228	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

2gewf232.blogspot.com.au

2gewf232.blogspot.com

apis.google.com

www.blogger.com

www.google.com

u967289v.beget.tech

img3.proshkolu.ru

data3.proshkolu.ru

m.vk.com

code.jquery.com

c.pki.goog

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49696	185.50.25.7	80	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 15, 2025 00:44:30.672486067 CET	434	OUT	GET / HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 15, 2025 00:44:31.215389967 CET	1236	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 23:44:31 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=30 Vary: Accept-Encoding X-Powered-By: PHP/5.6.40 Content-Encoding: gzip Data Raw: 63 36 36 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 5a e1 6f 13 47 16 ff 5e a9 ff c3 b2 52 11 20 db 1b 87 10 20 89 8d 5a a0 2a 12 2d 15 0d 6a 4f 14 ad c6 bb 63 ef e0 dd 9d ed ee ac 9d 10 45 02 d2 f6 ae 2a 85 36 77 52 aa 5e af 55 af f9 76 3a 29 a4 cd 11 a0 04 a9 7f c1 fa 3f ba f7 de ae ed b5 63 d3 04 ee cb 49 26 f2 ee ce cc 7b bf 79 f3 e6 cd 9b f7 86 59 38 72 e1 ca f9 c5 3f bd 7f 51 73 94 e7 6a ef 5f 7b eb f2 a5 f3 9a 5e 34 8c 0f df 7c ff ed 2b 57 af bd 6b 18 17 16 2f 68 1f bd b3 f8 ee 65 ed 5d 59 13 2e d7 ca a5 29 c3 b8 f8 9e ae e9 8e 52 c1 9c 61 b4 db ed 52 9b 05 75 19 c6 5e 49 86 0d 64 31 96 10 b1 e8 11 4b 79 aa 64 2b 5b af be fe da 02 f5 b3 e4 b9 7e 54 19 60 3f 49 8c e5 b3 67 cf a6 9c ba 66 b9 2c 02 a2 9b 91 b9 cc 23 bd ba e0 70 66 57 17 3c ae 98 86 8c 45 fe 49 2c 5a 15 fd bc f4 15 f7 55 71 71 39 e0 c0 94 96 2a ba e2 4b ca 40 a0 79 cd 72 58 18 71 55 b9 b6 f8 76 f1 0c 09 e1 0a bf a9 85 dc ad e8 91 23 43 65 c5 4a 13 c0 a9 6b 4e c8 eb 15 5d f8 36 5f 32 eb 20 78 64 d4 59 cb 74 65 43 96 80 e0 dc 29 5d 33 [TRUNCATED] Data Ascii: c66ZoG^R Z-jOcE6wR^Uv:)?cI&{yY8r?Qsj_{^4\|+Wk/he]Y.)RaRu^Id1Kyd+[~T`?Igf,#pfW<EI,ZUqq9K@yrXqUv#CeJkN]6_2 xdYteC)]3+zKvVN-a"-Fsy4X<bo-WjPK}PT[JrpyH-,^n7po\-ngap~;bJ(Wa<K%[Ztnw$XXOgV;F@iQh,6/$r}K7g;eIZWfUVes57RG-XEo5 xFDjRPsy;AH`phO\C)%C,HgeS`MKYKH2&eM=`:CtbZiFJXMF#\|QDegiKE~#g[US`I[XlPhYS3!}\|zE\|!4}GakH3-h@rw^1l]c+}hH(GF"k7>JR$NTF]J_j(7*.YKZ5SAq1GR>5OPFNSq)
Mar 15, 2025 00:44:31.215409040 CET	224	IN	Data Raw: a1 19 b4 64 8d 40 58 46 a4 6c a3 3c 45 ff 8c 99 72 fa 9a 3a 3b 33 3b 55 64 76 7d b6 76 f2 f4 99 33 d6 34 e3 e5 b3 b5 52 43 d4 41 a7 2e b8 43 f0 6a e0 f9 d0 af 75 6e 93 ff bb 0b be 70 1b fc dd 97 c9 63 0d ab c1 e9 dd e9 dc c5 e9 32 32 e1 fa 62 26 Data Ascii: d@XFl<Er:;3;Udv}v34RCA.Cjunpc22b&Zgg?O=p{t+Tisy/ynT&s_;)zd1g+S5WP91")C0W~=`aU
Mar 15, 2025 00:44:31.215420008 CET	1236	IN	Data Raw: 46 fd 14 c4 fe 14 e5 d5 70 af 01 f9 b9 c7 84 3b 07 78 e4 e8 6d 7b 48 58 91 2d 56 e1 07 e0 4d fb 8e 5b cf 1b 4e 5d c0 1e a7 a7 8b 4c 36 84 af e7 17 af 9d be dc ea a1 64 fd 11 74 8e d3 01 46 71 38 e1 02 68 69 cb d0 1e 27 60 af 7d 8c 8c 5a 6f 22 46 Data Ascii: Fp;xm{HX-VM[N]L6dtFq8hi'`}Zo"FH:PnC-VJq7otnKy8skrFJ:h54Ug)6 =!"CXohq^KsCTtCi}+*lxa \4~Jac%F
Mar 15, 2025 00:44:31.215544939 CET	752	IN	Data Raw: b9 34 2f 04 9c af c9 d0 1f a2 af 1c cb 11 2b 47 86 7d 96 1f a0 ab e7 fd 9d 03 a7 01 b2 ca 17 0c bb af b0 11 43 1f cd 87 87 e0 7d 95 8d d5 0e 06 e3 66 e0 b2 65 08 cc 87 a6 06 e6 fb 11 64 5f 4f f2 73 c8 62 5b c8 2e bd 2f 55 f7 30 0f 19 7e c6 83 8e Data Ascii: 4/+G}C}fed_Osb[./U0~<q.W1V`'!9k%m1@2<$+rMBffOSoH!N4Pv3@5O3 l&+gd!Xx[o/I
Mar 15, 2025 00:44:31.254312992 CET	319	OUT	GET /code.js?1 HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 15, 2025 00:44:31.482415915 CET	1116	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 23:44:31 GMT Content-Type: application/x-javascript Last-Modified: Sun, 27 Nov 2016 21:38:04 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=30 Vary: Accept-Encoding ETag: W/"583b523c-652" Expires: Fri, 21 Mar 2025 23:44:31 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 32 63 38 0d 0a 1f 8b 08 00 00 00 00 00 00 03 85 54 cb 6a db 40 14 dd 17 fa 0f 37 72 21 36 51 65 0a a1 a1 f2 63 d1 a4 81 66 d1 2e ba 0d 04 59 1a 5b c2 8a 46 cc 48 4e 42 30 24 0e a5 85 06 4a bb 2c 94 2e fa 03 a6 24 25 69 49 f2 0b 33 7f d4 3b 7a d8 92 5c 27 02 23 cd f1 3d 77 e6 dc 73 a4 91 c5 c0 76 89 3d 24 0c 3a 70 fc f8 11 e0 35 a0 26 f4 e3 c0 8e 3c 1a d4 1b 0a 4d 71 75 8d 90 e0 d3 81 17 60 f9 93 ba 56 4b 9e b5 86 31 b2 fc 7a a3 55 ae 0b 2d ce 0f 28 73 b2 d2 7c b9 a4 da b6 c2 c8 76 ad 3d ee e5 84 02 f2 00 67 48 8e 2a 1c 44 0a 9c 39 4b d5 f0 d8 b6 09 e7 3a d4 08 63 94 e1 3d 63 21 c3 8d f6 fd fa ea 6a 99 e4 f5 eb 2b 89 d0 46 3e a2 fc 62 24 8a 59 50 9a 44 9f da 31 2f 9d 74 0c c4 e7 a4 4a 55 4d f3 91 2c f4 ad f4 2e 8c 6e b1 fd f2 2d 12 c1 46 48 79 54 d7 12 97 8d d0 0d 35 1d 8e f3 7e e6 cc 23 3d 75 d5 4c 6f 7a d1 0d b3 b8 d0 8b 33 37 8b 8b b1 3e 0f 8d 63 45 d6 7f 35 e5 c6 31 c2 95 61 46 68 31 4e 76 de bd 7d 93 52 4a 53 af 0c 0b 29 46 e2 d7 5e 44 0e 23 e8 74 40 9b d9 b6 6c ab dc f1 8a bf 9a f8 2a 7e 89 4b [TRUNCATED] Data Ascii: 2c8Tj@7r!6Qecf.Y[FHNB0$J,.$%iI3;z\'#=wsv=$:p5&<Mqu`VK1zU-(s\|v=gHD9K:c=c!j+F>b$YPD1/tJUM,.n-FHyT5~#=uLoz37>cE51aFh1Nv}RJS)F^D#t@l~Kq!D\#N~gf8;k(`MX #BU8$spUB;\|%oC'[qQZ_IA6,'A6}?+zLL cP"8z>qj\|iOmKpcLT_Ju:xt,{8`4rj/hA_8Q\mkfaK9T]m&uw<Mqy?FV\cvM'~ b5MTYy"h+KT<W]h/O=$f#sD$i/\|s_oRAER0
Mar 15, 2025 00:44:31.838788986 CET	384	OUT	GET /index_files/p HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 15, 2025 00:44:32.139018059 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 23:44:31 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT ETag: "2b-5424f2bd85240" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Mar 15, 2025 00:45:17.151920080 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49697	185.50.25.7	80	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 15, 2025 00:44:31.254604101 CET	348	OUT	GET /index_files/s_cfmxw.css HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 15, 2025 00:44:31.492706060 CET	1236	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 23:44:31 GMT Content-Type: text/css Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=30 Vary: Accept-Encoding ETag: W/"583b5241-251f6" Expires: Fri, 21 Mar 2025 23:44:31 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 37 65 34 61 0d 0a 1f 8b 08 00 00 00 00 00 00 03 c4 bd 69 73 1b c7 b2 28 f8 7d 22 e6 3f 60 c2 e1 38 57 cf 20 d4 68 ec 64 dc 99 cb 05 94 f7 45 b2 bc e8 0b a2 01 34 c8 36 b1 09 0d 90 92 18 fc ef 53 7b 65 66 65 75 83 92 67 de a1 8f 4d 76 65 65 ed 59 59 b9 b6 a6 87 fd 7e b3 6e b6 ca 55 b6 5c 4e cc 5f d3 cd fc 63 b3 58 6f 0f fb 66 99 2f f3 d9 be b9 cf 3f ec b3 5d 9e 3d 2e 36 eb fd c9 22 5b 15 cb 8f a7 3f 1e 66 c5 3c 6b bc da 65 eb 79 de fc 23 df cd b3 75 d6 fc 3d bb dd ac b2 e6 f9 ae c8 96 cd 37 d9 ba 3c 79 93 ef 8a 45 d3 40 cb 2f 67 0a 4b 59 7c ca 4f 57 f9 bc 38 ac 9e 5a f1 7e cc e7 cd f9 b2 39 df 37 17 9b dd aa 79 db 6e de a6 cd db 6e f3 b6 c7 f7 b0 79 58 3e ae b2 dd 4d b1 3e 4d ce b6 d9 7c 5e ac 6f 4e 93 a7 db fd 6a f9 f8 50 cc f7 b7 a7 ed 24 f9 fa ec 36 2f 6e 6e f7 ea f7 27 d9 cc e3 34 9b dd dd ec 36 87 f5 fc f4 ab 45 4f fe 9c 9d ac ca 13 89 56 f5 f4 24 9b ff 73 28 75 8d b3 93 87 7c 7a 57 ec 23 a5 ec 57 3b c4 d3 d3 93 d5 e6 d3 c9 62 33 3b 94 27 c5 7a 9d ef f0 a0 99 72 35 ce f0 fb e3 74 b3 9b e7 3b 34 [TRUNCATED] Data Ascii: 7e4ais(}"?`8W hdE46S{efeugMveeYY~nU\N_cXof/?]=.6"[?f<key#u=7<yE@/gKY\|OW8Z~97ynnyX>M>M\|^oNjP$6/nn'46EOV$s(u\|zW#W;b3;'zr5t;4L7l/\|9'S3be`>neFd)Nly8]oyd<G;CvgbrUMbTn8f~_Df15+vS5FvH+0$[4knL}{V}}jfbBy9vF/vS{,L\,y45DO0#=Egb"Ovt*N.t#hu-WB13W??nX='AKWqo\|qfc/nL=o MQ_&'t&V^CO^AFe%(tA"So@@Sjgsu11,i\|;YU<eFs&bA6jGuN@}0'1ctOz`vz
Mar 15, 2025 00:44:31.492717981 CET	224	IN	Data Raw: a9 08 43 f9 72 b5 99 16 cb fc a5 81 6a dd 14 8b ff a7 fd a2 b1 de 9c ec 72 41 f0 f6 67 68 5b 9c 99 8b a7 87 5a 61 b6 bd ec 4b 5b b6 2f 09 95 98 1b 48 b0 ca f7 07 71 bf e1 59 6b b7 7a f9 ca 2e e5 a0 37 1c 9f 5f 9e d9 cb af 91 34 64 83 0e d7 64 b7 Data Ascii: CrjrAgh[ZaK[/HqYkz.7_4ddy&IX%CL:CgzZ1bm1}6Y=uliVp%2vgkj2\|A4?/y2mH&}Z5kn8r,*n=n+At>
Mar 15, 2025 00:44:31.492743015 CET	1236	IN	Data Raw: 7f 98 14 fb 7c 35 91 07 16 1f 7a 57 b1 2d fa c3 10 b9 71 77 3c 14 e8 c1 ee 9e e5 72 d3 04 54 26 a0 a2 64 87 fa 33 80 7a 53 49 5f 10 e4 44 52 e4 c7 00 6b 08 43 5a 20 f4 74 27 1a 59 ad f2 f5 bc e4 66 83 b9 4f 32 f9 53 7b 11 85 13 04 27 56 5d 03 70 Data Ascii: \|5zW-qw<rT&d3zSI_DRkCZ t'YfO2S{'V]p=HCTezlVm>uxNMWL6(n77's)V`'U:h\|uV\|m\p}sI}:+k+g32.0,%
Mar 15, 2025 00:44:31.492753029 CET	1236	IN	Data Raw: 13 fa 62 8d ad 0d a9 a4 cf 6d 65 0d 23 b5 09 27 be 65 70 d5 6d 87 5a 04 c7 cd b8 5b d5 13 fe f0 3b ea 73 c4 e9 ab 84 e5 1b ed 21 59 2b 3f e9 75 5d 88 4f 7e 5d cd a3 17 e1 8b 11 7d ee fc f4 87 ec a2 58 3e b2 92 b4 46 a0 1e c1 55 74 2c e6 c8 7a d7 Data Ascii: bme#'epmZ[;s!Y+?u]O~]}X>FUt,zW/3kuz~1#f_N=o!t99OPGlJkaEju>Ke}mC/K3(:jg~Yf2HtcgC,JtGJ53~-*{aK5cDXp6
Mar 15, 2025 00:44:31.492783070 CET	448	IN	Data Raw: 9a f3 74 0c 64 80 32 a2 86 18 99 b9 8d f9 bb 44 a8 9e a2 0b ae 2c 5f 2e 8b 6d 59 94 7a c6 64 43 8f 74 01 c9 be e8 41 f5 15 51 0a cb 3e 2b 1c 75 6b 29 cb 99 73 47 56 b2 6b 57 52 9e af 47 62 f9 82 61 47 6c 3f cd 29 32 6c 81 f4 3e a8 e9 bc 6a e8 0b Data Ascii: td2D,_.mYzdCtAQ>+uk)sGVkWRGbaGl?)2l>jd7mtm%:w?0#O{p`WC\|-<Sr(&w~uGM_X`. lFQ{n7@.l\(\|mF+\|U>D+FGMCv]3xr.
Mar 15, 2025 00:44:31.492799997 CET	1236	IN	Data Raw: 99 6f 4b cb 9f 01 5c f4 5d 84 ca 62 3a 84 bc 2f 5e 49 ed b8 f0 68 be c8 3b f9 10 f5 59 4a 33 27 9b 87 35 90 3a f7 e5 8f 00 da aa 4b db a8 35 a2 b6 46 3b af 29 8a 31 3c 10 93 3c 74 d9 ae d6 b5 d4 08 61 04 e4 e6 81 bd 40 98 03 67 9f fb 76 e1 f0 c1 Data Ascii: oK\]b:/^Ih;YJ3'5:K5F;)1<<ta@gvFtsM#gUf=iAl+YgDp^lMOr^s?8VR'b"\XhVZ2)5zr$"pb~X>q
Mar 15, 2025 00:44:31.492810965 CET	1236	IN	Data Raw: 6f dd 44 7b bd eb 6d a2 06 64 9c 4b 62 fb e6 68 6a 25 7b b8 5e 6c 9c 9d e8 48 fe e8 b6 e0 77 65 8a ab 60 75 ac a4 52 5e a6 ae 95 26 57 24 87 49 c4 1f bc 55 9b 0f 1a 44 9b d0 af a8 2f d7 29 04 3a 8d a7 d6 2c db ee 67 b7 99 76 92 70 eb 9a 1d f6 1b Data Ascii: oD{mdKbhj%{^lHwe`uR^&W$IUD/):,gvpK]%IdJiTkg`Vc>ot!$r.QC~V?jJf=!8$)&^n@a5FsWO9%Qa5%}'FR0
Mar 15, 2025 00:44:31.492821932 CET	448	IN	Data Raw: 3a 4c 03 ce 13 4a 99 05 7c 49 8d cd eb 63 ea 94 34 7a 50 97 07 2a f7 d9 fe 10 c4 dc 01 01 c8 99 6b 23 3e b0 dd 66 e9 d3 27 84 dd 0a df d4 65 61 82 fe d0 b1 05 d6 3a 54 44 4e ad da 0c 26 36 b0 b9 29 53 91 ac 20 99 28 51 28 27 c5 d9 74 d1 fd 61 41 Data Ascii: :LJ\|Ic4zPk#>f'ea:TDN&6)S (Q('taAm7{T{`dI5UbiOfb\4m0q[nluftO4VB+PbBCkTEFUMY~0gB9R3zvr1_F
Mar 15, 2025 00:44:31.492832899 CET	1236	IN	Data Raw: 26 d2 68 c3 1d 0b 2e 3f 09 01 8e 86 a5 34 d6 51 91 20 3f 86 6d 27 c8 02 ad 03 2d 8f fa af 5a 1a ca 8c c4 12 c6 b0 00 39 0d 1a fd 66 00 17 10 f5 0e f3 d2 8d 55 2e 8c 7d 10 57 a2 88 1e a2 8d 0c 06 69 52 93 95 9a b1 6d b4 e6 9b 99 fe 95 c1 88 21 4d Data Ascii: &h.?4Q ?m'-Z9fU.}WiRm!M`-n^\|?#%L$d&RxuQ/f!xn(f%SR<aZ+K}dqX.O"i\vB)FoterS2P!E_zW' P]
Mar 15, 2025 00:44:31.492845058 CET	1236	IN	Data Raw: b4 37 01 da 37 75 48 83 5d 64 aa 18 56 bd 36 15 55 4c 5b ab 26 61 b5 87 01 c4 16 d9 aa 58 7e 3c fd f1 30 2b e6 59 e3 95 78 83 cc f3 e6 3e bb dd ac b2 a6 98 ee 79 b6 ce 42 74 c1 85 05 c2 ab 23 51 39 f2 51 06 39 49 e9 8d ef 4b 20 3f 22 c8 32 27 3f Data Ascii: 77uH]dV6UL[&aX~<0+Yx>yBt#Q9Q9IK ?"2'?wq@*54?`~vX]jN@>]"pH=k c2q3e aao`p.7JRkiliqhV.hL5@A+AbQlI,<\>0`2Im
Mar 15, 2025 00:44:31.500622988 CET	1236	IN	Data Raw: 0e 0b 8b 7b 15 90 11 59 af 5b 8c 21 91 da 0e 0c 01 49 3b 18 a1 7a f2 db 54 40 fc fa 40 90 46 b0 91 fc b6 81 d6 0f b2 78 bd 51 f3 df c0 c6 0d 7a 62 a5 a5 6d 43 8a 6e 78 91 73 f2 75 a3 db 43 4b a4 a3 1c 1d 8b 5d 05 7d ed 71 0a 9d f0 5e 0d 55 3e d6 Data Ascii: {Y[!I;zT@@FxQzbmCnxsuCK]}q^U>z`xxX+3r+r59[H#k&/.ovU-$=}1;H/GnVG=OE\Ll:`cMr0eF/Y_"ymQg:1oK!O'1A#&\|[v
Mar 15, 2025 00:44:31.838670015 CET	386	OUT	GET /index_files/hit HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 15, 2025 00:44:32.139902115 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 23:44:31 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT ETag: "2b-5424f2bd85240" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49698	185.50.25.7	80	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 15, 2025 00:44:31.261038065 CET	347	OUT	GET /index_files/s_yzgt.css HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/css,/;q=0.1 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 15, 2025 00:44:31.990200043 CET	1236	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 23:44:31 GMT Content-Type: text/css Last-Modified: Sun, 27 Nov 2016 21:38:08 GMT Transfer-Encoding: chunked Connection: keep-alive Keep-Alive: timeout=30 Vary: Accept-Encoding ETag: W/"583b5240-df79" Expires: Fri, 21 Mar 2025 23:44:31 GMT Cache-Control: max-age=604800 Content-Encoding: gzip Data Raw: 32 31 65 65 0d 0a 1f 8b 08 00 00 00 00 00 00 03 ed 5d e9 8e e3 38 92 fe 3f c0 bc 83 17 85 c2 74 0d 6c b7 2e 4b 72 fa c7 0e 76 77 e6 25 16 0b 43 b6 e5 4c 21 65 cb 6d c9 99 55 9d c8 77 1f de 67 50 a4 5d 59 47 6f 27 6a 0e a7 14 24 83 c1 60 30 18 fc 18 fa c7 a1 de 35 d5 a4 df 9e eb fa 38 a9 8e bb c9 2f 87 ea f3 ec b9 d9 0d 0f 77 49 16 9d 3e 7f 7a 99 6f 2e c3 d0 1d 5f 4e d5 6e d7 1c ef ef f2 d3 e7 49 9c 9c 3e bf ce 8f 75 75 5e 6f 06 e3 55 84 5f f5 87 aa 6d d7 b4 e4 94 fd 65 91 67 88 bc c0 d4 0f 1b ed 79 89 9e 47 af f3 03 7a fc d0 1d ea 17 ca 4e ba c0 a4 87 87 86 3e dc 54 db c7 fb 73 77 39 ee 66 cd a1 ba af ef 2e e7 f6 97 5f c9 cf fe d7 43 b7 69 da fa d7 7e dd 76 f7 dd fc 74 bc ff cf f8 13 2d fb f4 78 45 e9 a7 47 b3 82 cd fa d8 0d cd fe 0b e7 75 d6 d6 fb 01 f7 7b c5 1f 9c 9b fb 07 fa 04 4b f2 a1 26 7f 26 f3 22 8a eb 03 af 81 57 42 3b 16 2f 94 e2 a4 3e 2c 43 a3 42 2a d6 c3 03 2b ba de 22 de 87 fa ac f3 21 24 c4 ea 0f eb 25 25 26 9d cc 3e 19 8c b0 1a 15 a6 27 b7 34 a0 b7 41 6b c4 65 2d f6 8d 5e 8b 0e 11 e2 [TRUNCATED] Data Ascii: 21ee]8?tl.Krvw%CL!emUwgP]YGo'j$`058/wI>zo._NnI>uu^oU_megyGzN>Tsw9f._Ci~vt-xEGu{K&&"WB;/>,CB+"!$%%&>'4Ake-^013TiB\|H)vGEPus''kyz8PQlFXo9f6P/fxnl{^mhVh?nwjY%h}s&{::$VJS7C}bd0?;qx-7x1ykj{ndbVn\!AyCH+Y>7^4.YQE!Y\&V$vTvc"-/cDBS;,H1w)q?1X?4Kfv\=W_Mdz>5<-9fd-WV%c\|8yuc3\|W?5zvj>\%V'D&h___n)j\|1b1AjtsFCnS/
Mar 15, 2025 00:44:31.990264893 CET	224	IN	Data Raw: 2d 55 9d d2 64 c4 29 2d 2d a5 2a 74 a7 34 9d a7 71 e9 74 4a 4b cb 29 4d 6d 2d 4d 02 9c d2 fc 06 a7 74 cc 25 2d be de 25 0d 75 48 81 89 79 bd 47 2a fc d1 d4 ec 49 7e 8d 3f ba f4 fb a3 96 56 5d e3 3a 5c e3 7c a6 89 5c 1a d3 c4 e7 7c e6 37 3a 9f df Data Ascii: -Ud)--t4qtJK)Mm-Mt%-%uHyGI~?V]:\\|\\|7:\|Sr;KjTag^,~.7p?t>>`t6N];Ts@Yj$Bx3EAL-9Oog&YW9g9,K4y3W
Mar 15, 2025 00:44:31.990294933 CET	1236	IN	Data Raw: ec 16 ff 33 cb c6 fd 4f f2 fe 07 fa 9f 85 c7 ff 5c 8c f8 9f 32 2c 9a 2e 89 ff d9 ac 4f 5d 83 dd 9d e9 9c fd 78 61 93 95 0c fe 09 09 5b 12 1c 2c e2 b5 62 7f 49 e3 33 c2 dd e9 c4 29 27 b2 85 17 3a 4c 4b a3 de 89 c6 03 f4 f8 45 71 34 8e dd e6 fc f2 Data Ascii: 3O\2,.O]xa[,bI3)':LKEq4`m}wHwg(N]pXc}eCdOKqje)zuXrxS<O9'7=U<6i*}Fst+MK<KVP"?w_m2`7yxXmE
Mar 15, 2025 00:44:31.990330935 CET	1236	IN	Data Raw: 02 8d 73 f5 72 77 39 bf 28 03 16 26 3a 22 1a a0 22 bd bb af f3 43 3b 78 c4 88 a7 2e 2f 45 3c 74 67 a3 93 f9 ae 79 6a 76 b5 dd ca fa a1 7b c2 3b 3a b8 89 3b f6 16 12 27 36 01 b3 5d bd ed 48 64 f3 78 87 34 bd 3e 33 d6 29 39 b1 72 c8 57 a5 e1 1c 75 Data Ascii: srw9(&:""C;x./E<tgyjv{;:;'6]Hdx4>3)9rWuqb/DOoo@7x fe86{:%ZC>5m*vN7UCM$(.zt9)Vwhg"&R,idUPM1lp2IxkgO?6"<iLy+hQl\I[
Mar 15, 2025 00:44:31.990401983 CET	1236	IN	Data Raw: 38 9c 77 1c ce 3b 0e e7 1d 87 f3 e7 c0 e1 00 cc 04 83 61 20 34 4e 64 42 71 28 53 0e 28 8e b9 29 84 a1 38 d6 15 0f 0f 14 07 d9 83 58 07 d6 b8 00 39 b1 b6 34 4b a3 fa 27 83 e4 94 63 90 1c 71 51 25 10 98 43 84 01 9d f8 38 11 39 e7 ba 45 f3 e9 49 b7 Data Ascii: 8w;a 4NdBq(S()8X94K'cqQ%C89EIwy>jwe014ag~oyqvf#*Q7//>S[a;f1C`;+ D8lg0LNNN[ l,NnlnNM]H7Bb
Mar 15, 2025 00:44:31.990436077 CET	672	IN	Data Raw: a8 60 e0 90 89 e9 a1 94 c1 c0 21 b4 ab 95 ad 90 3f 60 e8 50 4c 0f b3 65 3b 8c d6 07 1e 2a bf 0b 78 28 9d e7 e1 e0 21 19 06 78 33 f8 50 a6 24 9f 09 45 10 d9 e1 21 37 82 28 03 90 38 d7 81 88 84 f1 97 d7 9c 57 d6 e9 e1 1b 03 88 16 6f 84 1f e2 93 ee Data Ascii: `!?`PLe;*x(!x3P$E!7(8Woy~5("N[n)M/(SH98Gd;^U{pDQ8"~$bt$Q$_<$H"(hNTp"U^D q2':d4X5M>bv5aQ?
Mar 15, 2025 00:44:31.990468979 CET	1236	IN	Data Raw: 62 e1 a8 01 d3 a9 87 61 99 83 47 d2 92 76 1a e6 a2 d4 77 de 19 bf 31 0b 50 52 44 31 ad 19 92 aa f9 11 6e fe df 58 0a d2 d6 6d 61 ae 15 bd 55 32 89 28 4f 0d 73 ae bd 11 bb 82 40 8d 95 69 4b 02 9a a5 b6 4a ad 79 d4 89 22 76 64 dc 87 32 4d 8d 43 36 Data Ascii: baGvw1PRD1nXmaU2(Os@iKJy"vd2MC6CeM*@ym/]1 ]3bxRe$w#8(, =NBk=0sxT6A\6"$@oN$([#qncq@b8{;&<g^_Bm5ha~vRk[YL!p"K
Mar 15, 2025 00:44:31.990515947 CET	224	IN	Data Raw: 76 69 68 69 7e 5d 8e d8 af bd ea 01 dd b5 63 59 12 27 e2 60 16 b8 73 a7 5f f9 c7 b9 0a 9a df 71 59 71 0b 8f fb 47 0b 25 2c 99 2a e7 ae a9 bc 46 a3 5c d9 0b 3e 4b 29 52 e8 2c a5 2c 19 0c 0d 6d 79 38 0e 9b fc de 19 97 a7 3d 68 b6 98 46 62 91 1d dc Data Ascii: vihi~]cY'`s_qYqG%,*F\>K)R,,my8=hFbTgWGmU .?LZJO;_]y%sF\H3n#\+WozH%28#wm21e-}o-fzC
Mar 15, 2025 00:44:31.990549088 CET	1236	IN	Data Raw: 76 16 81 5c a6 0e e0 3b 7f eb c8 4a 49 ec 86 1a 65 23 3b 65 3f b5 48 79 08 8f e6 3d 5a 3b f4 0d e2 11 f4 ef e9 80 a1 78 f5 0a 8d f2 d8 fa 4a 92 15 df d7 8d 76 c4 95 97 e6 c2 24 59 30 8d 5b f5 e2 f5 86 bc c6 bf 78 32 3c 7d b7 80 04 80 46 05 ad 23 Data Ascii: v\;JIe#;e?Hy=Z;xJv$Y0[x2<}F#Gb?>SiW$/V]Y8h^6JQ"6F*2BGzo0>4)eHMg&N,T _tb#.ISvsi}USI6\|3>Nc
Mar 15, 2025 00:44:31.990582943 CET	540	IN	Data Raw: 19 d7 06 b8 1d b2 1c 6d 14 8a 02 af 0c d8 9e b2 14 db 47 ca 63 8b 9d 99 24 fb 3a 0b a7 cf 42 b2 88 1b 7f df 6c 4c dc 76 ef 6b 4d 62 b8 25 0a d1 e7 1f 37 6f d9 04 32 57 7e a6 20 ce 85 52 04 f5 c6 35 cf f0 f8 ca c2 b6 04 9c 44 89 f2 5e df 47 e1 2f Data Ascii: mGc$:BlLvkMb%7o2W~ R5D^G/ug[?vo<\|Ln@6k9a9jMze{d_GWJjmi*-Xg+Lc8oJp&"OK$GHFB2&4a,("/
Mar 15, 2025 00:44:32.001904011 CET	415	OUT	GET /index_files/logo.png?2 HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/index_files/s_yzgt.css Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 15, 2025 00:44:32.236912966 CET	1236	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 23:44:32 GMT Content-Type: image/png Content-Length: 1334 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT Connection: keep-alive Keep-Alive: timeout=30 ETag: "583b5241-536" Expires: Sun, 13 Apr 2025 23:44:32 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 7c 00 00 00 19 08 06 00 00 00 f3 27 4a 57 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 04 d8 49 44 41 54 78 da ec 9a 6d 88 16 55 14 c7 47 dd d5 ca cd 74 cb 6a d3 b4 a8 44 22 2b 93 5e 4c 25 0a 94 b2 0f 95 94 84 4a 04 59 69 96 1a 6c 65 60 25 59 f6 a2 bd ae 95 4a e5 42 5a 1f 56 fc e2 63 18 19 2b c8 12 85 6d 68 af c4 f6 6a d9 66 ba ea 96 a5 e6 ee d3 ff e4 7f e4 78 9a 99 67 66 9e 99 75 c0 39 f0 63 e7 ce b9 6f cf bd f7 9c 7b ee 9d ed 56 2c 16 9d 5c 8e 1d e9 ae 9e 4f 03 4b c0 af a0 58 06 ad e0 4d 50 93 0f 6f f6 a4 1b 2d fc 54 f0 31 18 9c 60 dd 3f 81 91 60 5b 3e cc d9 b3 f0 c7 13 9e 6c 91 41 e0 89 7c 88 b3 69 e1 db 52 72 c1 3b 40 ff 7c 98 b3 37 e1 9d f2 9c 56 1b f9 30 67 47 2a 42 4c 8a 97 ae 17 a8 02 17 81 39 60 6c 17 f7 bb 37 18 c1 d8 a3 1d 7c c6 60 b3 4b 8d 05 9c c5 ad b0 2f f8 93 01 eb d7 e0 e0 51 9a cf 13 39 2e a7 80 3f c0 e7 e0 97 23 72 88 85 17 83 c5 29 41 77 b0 21 46 f9 e9 [TRUNCATED] Data Ascii: PNGIHDR\|'JWtEXtSoftwareAdobe ImageReadyqe<IDATxmUGtjD"+^L%JYile`%YJBZVc+mhjfxgfu9co{V,\OKXMPo-T1`?`[>lA\|iRr;@\|7V0gGBL9`l7\|`K/Q9.?#r)Aw!FA{`;'~/b8F6.T=?RWefE(ZsUk{u`Oq\KN\|tb'H/t3h91uFp)<@c&\|+PP^1E%rmaOgh^J3iOcmA\\>Xod7o=e\|&KwF/$'t;YM]sG(JzVIqA%/U:ziQVZoP%\P7e?1p7%/3oAAjz9F.'t<CAb;%/`\|k8s..Wv;=4E\Wq9Dnbd1-/3HLI^7f0@2>5d"(/*}/vO0
Mar 15, 2025 00:44:32.236942053 CET	443	IN	Data Raw: 35 ce 84 cb ca bc 0b dc 07 d6 f2 bc e7 5a fa da 32 27 fc 4e 5a 8d de 3e 6e 71 4f 8f e0 53 a5 bb da 94 bd 52 9f 34 41 b3 47 fd eb 15 2d 65 f4 f3 7c e3 2a 9f 05 5f b0 dd 30 d2 46 6f a6 c7 6b 06 cf cf 51 e5 2b b0 5f a5 c7 f0 84 62 f9 1b 9c 17 67 c2 Data Ascii: 5Z2'NZ>nqOSR4AG-e\|*_0FokQ+_bg;0]<#+/(7OdMKxlE2IwpZf-'Xb0>_"_,K`}+@cy6J>o?+b.CdK3+k<?2)y)

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49700	151.101.194.137	80	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 15, 2025 00:44:31.268466949 CET	319	OUT	GET /jquery.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 15, 2025 00:44:31.709646940 CET	645	IN	HTTP/1.1 200 OK Connection: keep-alive Content-Length: 33226 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: W/"28feccc0-1764d" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Content-Encoding: gzip Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Fri, 14 Mar 2025 23:44:31 GMT Age: 3313147 X-Served-By: cache-lga21987-LGA, cache-ewr-kewr1740095-EWR X-Cache: HIT, HIT X-Cache-Hits: 123, 641 X-Timer: S1741995872.662140,VS0,VE0 Vary: Accept-Encoding
Mar 15, 2025 00:44:31.709675074 CET	1236	IN	Data Raw: 1f 8b 08 00 00 00 00 00 02 03 dc bd 79 7b db 46 b2 2f fc ff f9 14 22 c6 87 01 cc 16 45 3a cb 3d 03 ba 85 27 b1 93 49 26 eb 8c 9d 49 32 14 93 07 1b 49 48 dc 44 52 96 15 91 f3 d9 6f fd aa 17 34 16 da 99 73 ee fb bc f7 b9 99 b1 08 a0 f7 ee ea ea aa Data Ascii: y{F/"E:='I&I2IHDRo4sZ.vvoCOg?2_VY/+qS[H.?{zE>?I<{R6zz\gw=n.eGaPXLN%U~v6+
Mar 15, 2025 00:44:31.709686995 CET	1236	IN	Data Raw: d7 28 ee 79 5e d8 c0 0f 98 44 07 e0 cc d7 68 3e 2e 74 e5 c1 a4 9c e7 d0 a4 d3 de 5b ac 93 78 f1 f9 9b 78 51 36 4a 27 5a 82 dd 4a 74 cc 92 5e 68 fb c5 b4 d7 f2 f4 55 ba 2d 36 7b 07 56 29 23 a5 50 59 67 00 81 8f 51 a4 f1 32 5f 80 a2 68 1b 4a 6c b7 Data Ascii: (y^Dh>.t[xxQ6J'ZJt^hU-6{V)#PYgQ2_hJlZxDx[jY~*@:}&2!c0/-7X!!v92{&)K8^\Wk<yD+JAc er`.{w)XwA+Wj,&Q\|M="
Mar 15, 2025 00:44:31.709697008 CET	448	IN	Data Raw: 50 ff 55 e6 4f 5f bf fe 7b 58 eb c5 0f 04 4d af 3e ff f1 e5 f7 f5 04 ea f2 8b 2f bf fa a6 d6 b5 d0 67 20 67 89 ce 01 32 9b c3 6a 3f c7 bf 73 bc 04 e7 7e 4a 04 44 76 58 4f cf 81 e0 34 90 e8 d9 ca df d0 3e 59 67 19 ad de b8 47 d0 1e f8 57 57 d9 d3 Data Ascii: PUO_{XM>/g g2j?s~JDvXO4>YgGWW`u(T'wJedqq>YVy^(IZjWaFcR#XtWE^Wjs~^O.O7r_'*oO%D
Mar 15, 2025 00:44:31.709708929 CET	1236	IN	Data Raw: 7c 57 75 4d e9 88 57 07 fc 9a 0f f6 7b f1 16 04 ac 9f 44 09 44 00 f9 f6 a5 3e ce 0f 87 24 7c 13 d0 bc af 88 81 a6 9e 11 95 48 34 c6 8a 7a 90 81 15 12 2c ed d0 44 a5 bd 8f b0 47 24 b3 2e 43 2a ed df 10 89 64 e6 86 18 f0 3f d3 b7 1b 9d 4b d1 ce 9b Data Ascii: \|WuMW{DD>$\|H4z,DG$.C*d?Kn331wf^t<p%JiNDg~8tjuc/,^Zf6z"IR[]X9;gypBm/ 9lN^k9s
Mar 15, 2025 00:44:31.709718943 CET	1236	IN	Data Raw: 73 98 4f f9 8a 23 00 99 90 3a 48 53 73 08 a9 9d 81 cc 90 5e d3 a3 19 3b 4b 68 e4 69 ba ff df 98 00 5b 4a 43 6a 74 92 13 28 e7 41 6c 31 e6 5b fc 51 6c 41 89 49 ea 74 2f 78 21 bf b6 49 ab e8 43 49 29 ce 96 3b a2 f2 d6 f7 e9 a2 d8 c8 0f 08 5f ac 37 Data Ascii: sO#:HSs^;Khi[JCjt(Al1[QlAIt/x!ICI);_7\|)PA}f\|STpbQG{fr"KY%dW,jtp0UR(d@=(B-nL"0MvyVS0sBXlbR{b$e_SG&K*ybvMB#>QS$SRKp
Mar 15, 2025 00:44:31.709731102 CET	176	IN	Data Raw: ab 39 7e 06 18 e4 82 1e 76 06 3d b0 e0 5f 58 40 16 1f d1 6e 51 37 ee ef ec 4b 05 5f 08 6f b5 9f ab 06 28 c9 d4 f4 61 10 e9 de 99 0d 4d af 83 09 3a fe d1 44 f6 7c fc 44 e8 32 1e 3f a1 6c c3 20 7c f6 d4 f7 70 15 ae 2a fb 90 f5 77 b3 cc bc 05 28 fb Data Ascii: 9~v=_X@nQ7K_o(aM:D\|D2?l \|pw(&jdCLc@>A6bSV<LRv_MZ9ygV9$9eR
Mar 15, 2025 00:44:31.709739923 CET	1236	IN	Data Raw: e7 8b bb 5a 1f 12 05 0b 80 56 20 04 35 8c f7 0b 66 da 45 fa 4a 16 11 35 34 e8 3a 15 21 c7 bf ad 90 4c bd 53 ca 23 cd 7e 3d 8c 63 be 49 b2 f2 69 b6 b2 70 95 04 fc 5f ad 02 0c 65 55 9a 01 50 6d c0 a4 e2 32 bc a5 5f fa ba ae 05 ad a5 a5 30 c4 79 39 Data Ascii: ZV 5fEJ54:!LS#~=cIip_eUPm2_0y9ZQm(-bG'-+\&\2H}ct+L"?{C!W=_+AE n%7MAQ,PlGSUos/V7E+v/`iOl
Mar 15, 2025 00:44:31.709749937 CET	224	IN	Data Raw: e2 fd 7a 9b e1 b9 58 c6 33 7c 3c 06 25 f5 95 4c e4 22 f1 1d fb e8 c7 dd 5d b2 2c 20 2a 12 db 9c 28 a5 66 fe a5 ca 6f f4 ca 36 50 eb 3c 6e 12 c7 5b 89 51 cc d8 95 3d ae 90 5d cc 54 6f 12 50 4f 00 b7 9b 1c 62 52 79 c2 0c b0 b4 ed 92 bf 1b 0e 1d 76 Data Ascii: zX3\|<%L"], *(fo6P<n[Q=]ToPObRyv)7V9"VeR,Ymz!<06gRwjT1U9U\CzzZ`f&2Ps?h[<0;%}A$q
Mar 15, 2025 00:44:31.709763050 CET	1236	IN	Data Raw: 6a 9b 66 3b c7 73 9d 1e ce a3 52 96 15 84 bf d3 62 15 81 9d fd 63 09 16 b7 49 d3 50 cd 31 06 f0 3c 6b aa 96 f5 d8 98 53 89 dc 4b 95 92 d2 1a 31 a9 9a 59 24 74 7c 6e e1 0c 88 30 9d 23 fe 04 1f 42 84 f9 db f2 f6 29 51 27 4f 54 e1 aa a7 a5 34 9c cd Data Ascii: jf;sRbcIP1<kSK1Y$t\|n0#B)Q'OT4x58W%%jLrf:Su*j>)p1m:rmrq"r-[/0ZS%e,1':cBXOZ0%(#Q{Lq^SER-'a
Mar 15, 2025 00:44:31.715821981 CET	1236	IN	Data Raw: 4c 14 d9 37 cb f2 9d 63 32 26 8c d7 e6 4c 6b 37 65 d4 86 9b d7 e6 94 2d c4 10 83 9c 96 fa bd 09 1b d0 c6 75 53 51 40 8b c8 cd 9d 8b 86 2f 7f 45 8c 1c 01 d3 3a 20 fa 8e 55 89 e0 8e e9 dd c6 94 54 cb 51 b8 0a 36 84 be b4 61 9e 17 18 f5 1a ad bc ca Data Ascii: L7c2&Lk7e-uSQ@/E: UTQ6avw#;WZ+'BPm7PlQn Z'?)cR!?xTb5%):Ttp_d'N\7R:XUIR{X$vQ7NqvqDr"r.eZ8R

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49704	185.50.25.7	80	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 15, 2025 00:44:31.846005917 CET	390	OUT	GET /index_files/counter HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 15, 2025 00:44:32.618936062 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 23:44:32 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:10 GMT ETag: "2b-5424f2be79480" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Mar 15, 2025 00:44:34.198153973 CET	397	OUT	GET /index_files/fav_logo.ico?5 HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 15, 2025 00:44:34.427366972 CET	748	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 23:44:34 GMT Content-Type: image/x-icon Content-Length: 401 Last-Modified: Sun, 27 Nov 2016 21:38:10 GMT Connection: keep-alive Keep-Alive: timeout=30 ETag: "583b5242-191" Expires: Sun, 13 Apr 2025 23:44:34 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 48 49 44 41 54 38 11 63 8c 6a 58 ea c5 f0 ef ff cc ff ff ff cb 30 90 00 18 19 19 9f 30 30 31 a6 33 91 a3 19 64 0f d8 42 a0 c5 4c a4 da 8c ec 48 90 5e 26 64 01 72 d8 d4 35 60 5a 69 30 c3 9c aa 30 06 6e 4e 36 06 45 29 21 86 65 4d 31 60 3e c8 65 fc 3c 1c 0c 73 ab c3 19 26 14 06 a0 38 14 c5 05 97 ee 3e 67 e0 e2 60 63 70 34 56 61 b8 ff ec 1d c3 bf 7f ff 19 58 98 21 4a 22 5d 0d 19 38 d9 59 19 b6 1e bd 86 db 80 cd 87 af 02 35 fd 63 f0 b3 d1 66 e0 e3 e6 00 2b 64 62 62 62 b0 37 54 62 b0 33 54 66 b8 f9 f0 15 c3 9e d3 b7 70 1b f0 f4 f5 47 86 ed c7 6f 30 f0 70 b1 33 d4 25 bb 32 30 31 31 82 5d 90 1e 68 05 d6 f4 f8 d5 07 60 f4 a1 e8 67 40 f1 02 48 6a e5 9e 0b 0c 37 80 36 49 89 f0 c3 55 4e 5d 73 94 e1 d3 d7 1f 0c 2e a6 6a 0c 9e 96 1a 70 71 10 03 c3 80 3f 7f ff 31 b4 2f dc cb 00 f2 ce 87 cf df 19 3e 7f fb c9 70 f4 d2 7d 86 96 f9 bb 19 de 7f fe c6 10 e5 66 c4 c0 [TRUNCATED] Data Ascii: PNGIHDRagAMAaHIDAT8cjX00013dBLH^&dr5`Zi00nN6E)!eM1`>e<s&8>g`cp4VaX!J"]8Y5cf+dbbb7Tb3TfpGo0p3%2011]h`g@Hj76IUN]s.jpq?1/>p}fd`](q4PE\0$H/(Kc,;o3IENDB`
Mar 15, 2025 00:45:19.433557987 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49707	185.50.25.7	80	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 15, 2025 00:44:32.243345022 CET	287	OUT	GET /index_files/hit HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 15, 2025 00:44:33.030803919 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 23:44:32 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT ETag: "2b-5424f2bd85240" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 ff 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Mar 15, 2025 00:45:18.043108940 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49706	185.50.25.7	80	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 15, 2025 00:44:32.243458986 CET	285	OUT	GET /index_files/p HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 15, 2025 00:44:33.011912107 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 23:44:32 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT ETag: "2b-5424f2bd85240" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Mar 15, 2025 00:45:18.027510881 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49708	185.50.25.7	80	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 15, 2025 00:44:32.248248100 CET	294	OUT	GET /index_files/logo.png?2 HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 15, 2025 00:44:32.978533030 CET	1236	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 23:44:32 GMT Content-Type: image/png Content-Length: 1334 Last-Modified: Sun, 27 Nov 2016 21:38:09 GMT Connection: keep-alive Keep-Alive: timeout=30 ETag: "583b5241-536" Expires: Sun, 13 Apr 2025 23:44:32 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 7c 00 00 00 19 08 06 00 00 00 f3 27 4a 57 00 00 00 19 74 45 58 74 53 6f 66 74 77 61 72 65 00 41 64 6f 62 65 20 49 6d 61 67 65 52 65 61 64 79 71 c9 65 3c 00 00 04 d8 49 44 41 54 78 da ec 9a 6d 88 16 55 14 c7 47 dd d5 ca cd 74 cb 6a d3 b4 a8 44 22 2b 93 5e 4c 25 0a 94 b2 0f 95 94 84 4a 04 59 69 96 1a 6c 65 60 25 59 f6 a2 bd ae 95 4a e5 42 5a 1f 56 fc e2 63 18 19 2b c8 12 85 6d 68 af c4 f6 6a d9 66 ba ea 96 a5 e6 ee d3 ff e4 7f e4 78 9a 99 67 66 9e 99 75 c0 39 f0 63 e7 ce b9 6f cf bd f7 9c 7b ee 9d ed 56 2c 16 9d 5c 8e 1d e9 ae 9e 4f 03 4b c0 af a0 58 06 ad e0 4d 50 93 0f 6f f6 a4 1b 2d fc 54 f0 31 18 9c 60 dd 3f 81 91 60 5b 3e cc d9 b3 f0 c7 13 9e 6c 91 41 e0 89 7c 88 b3 69 e1 db 52 72 c1 3b 40 ff 7c 98 b3 37 e1 9d f2 9c 56 1b f9 30 67 47 2a 42 4c 8a 97 ae 17 a8 02 17 81 39 60 6c 17 f7 bb 37 18 c1 d8 a3 1d 7c c6 60 b3 4b 8d 05 9c c5 ad b0 2f f8 93 01 eb d7 e0 e0 51 9a cf 13 39 2e a7 80 3f c0 e7 e0 97 23 72 88 85 17 83 c5 29 41 77 b0 21 46 f9 e9 [TRUNCATED] Data Ascii: PNGIHDR\|'JWtEXtSoftwareAdobe ImageReadyqe<IDATxmUGtjD"+^L%JYile`%YJBZVc+mhjfxgfu9co{V,\OKXMPo-T1`?`[>lA\|iRr;@\|7V0gGBL9`l7\|`K/Q9.?#r)Aw!FA{`;'~/b8F6.T=?RWefE(ZsUk{u`Oq\KN\|tb'H/t3h91uFp)<@c&\|+PP^1E%rmaOgh^J3iOcmA\\>Xod7o=e\|&KwF/$'t;YM]sG(JzVIqA%/U:ziQVZoP%\P7e?1p7%/3oAAjz9F.'t<CAb;%/`\|k8s..Wv;=4E\Wq9Dnbd1-/3HLI^7f0@2>5d"(/*}/vO0
Mar 15, 2025 00:44:32.978568077 CET	443	IN	Data Raw: 35 ce 84 cb ca bc 0b dc 07 d6 f2 bc e7 5a fa da 32 27 fc 4e 5a 8d de 3e 6e 71 4f 8f e0 53 a5 bb da 94 bd 52 9f 34 41 b3 47 fd eb 15 2d 65 f4 f3 7c e3 2a 9f 05 5f b0 dd 30 d2 46 6f a6 c7 6b 06 cf cf 51 e5 2b b0 5f a5 c7 f0 84 62 f9 1b 9c 17 67 c2 Data Ascii: 5Z2'NZ>nqOSR4AG-e\|*_0FokQ+_bg;0]<#+/(7OdMKxlE2IwpZf-'Xb0>_"_,K`}+@cy6J>o?+b.CdK3+k<?2)y)
Mar 15, 2025 00:45:17.994573116 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49710	185.50.25.7	80	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 15, 2025 00:44:32.634480000 CET	291	OUT	GET /index_files/counter HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 15, 2025 00:44:33.397589922 CET	293	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 23:44:33 GMT Content-Length: 43 Connection: keep-alive Keep-Alive: timeout=30 Last-Modified: Sun, 27 Nov 2016 21:38:10 GMT ETag: "2b-5424f2be79480" Accept-Ranges: bytes Data Raw: 47 49 46 38 39 61 01 00 01 00 80 00 00 c0 c0 c0 00 00 00 21 f9 04 01 00 00 00 00 2c 00 00 00 00 01 00 01 00 00 02 02 44 01 00 3b Data Ascii: GIF89a!,D;
Mar 15, 2025 00:44:34.431485891 CET	298	OUT	GET /index_files/fav_logo.ico?5 HTTP/1.1 Host: u967289v.beget.tech Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Mar 15, 2025 00:44:34.670764923 CET	748	IN	HTTP/1.1 200 OK Server: nginx-reuseport/1.21.1 Date: Fri, 14 Mar 2025 23:44:34 GMT Content-Type: image/x-icon Content-Length: 401 Last-Modified: Sun, 27 Nov 2016 21:38:10 GMT Connection: keep-alive Keep-Alive: timeout=30 ETag: "583b5242-191" Expires: Sun, 13 Apr 2025 23:44:34 GMT Cache-Control: max-age=2592000 Accept-Ranges: bytes Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 10 00 00 00 10 08 06 00 00 00 1f f3 ff 61 00 00 00 04 67 41 4d 41 00 00 b1 8f 0b fc 61 05 00 00 01 48 49 44 41 54 38 11 63 8c 6a 58 ea c5 f0 ef ff cc ff ff ff cb 30 90 00 18 19 19 9f 30 30 31 a6 33 91 a3 19 64 0f d8 42 a0 c5 4c a4 da 8c ec 48 90 5e 26 64 01 72 d8 d4 35 60 5a 69 30 c3 9c aa 30 06 6e 4e 36 06 45 29 21 86 65 4d 31 60 3e c8 65 fc 3c 1c 0c 73 ab c3 19 26 14 06 a0 38 14 c5 05 97 ee 3e 67 e0 e2 60 63 70 34 56 61 b8 ff ec 1d c3 bf 7f ff 19 58 98 21 4a 22 5d 0d 19 38 d9 59 19 b6 1e bd 86 db 80 cd 87 af 02 35 fd 63 f0 b3 d1 66 e0 e3 e6 00 2b 64 62 62 62 b0 37 54 62 b0 33 54 66 b8 f9 f0 15 c3 9e d3 b7 70 1b f0 f4 f5 47 86 ed c7 6f 30 f0 70 b1 33 d4 25 bb 32 30 31 31 82 5d 90 1e 68 05 d6 f4 f8 d5 07 60 f4 a1 e8 67 40 f1 02 48 6a e5 9e 0b 0c 37 80 36 49 89 f0 c3 55 4e 5d 73 94 e1 d3 d7 1f 0c 2e a6 6a 0c 9e 96 1a 70 71 10 03 c3 80 3f 7f ff 31 b4 2f dc cb 00 f2 ce 87 cf df 19 3e 7f fb c9 70 f4 d2 7d 86 96 f9 bb 19 de 7f fe c6 10 e5 66 c4 c0 [TRUNCATED] Data Ascii: PNGIHDRagAMAaHIDAT8cjX00013dBLH^&dr5`Zi00nN6E)!eM1`>e<s&8>g`cp4VaX!J"]8Y5cf+dbbb7Tb3TfpGo0p3%2011]h`g@Hj76IUN]s.jpq?1/>p}fd`](q4PE\0$H/(Kc,;o3IENDB`
Mar 15, 2025 00:45:19.683478117 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port
9	192.168.2.7	49716	142.250.185.195	80

Timestamp	Bytes transferred	Direction	Data
Mar 15, 2025 00:44:37.109060049 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 15, 2025 00:44:37.727619886 CET	223	IN	HTTP/1.1 304 Not Modified Date: Fri, 14 Mar 2025 23:14:19 GMT Expires: Sat, 15 Mar 2025 00:04:19 GMT Age: 1818 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 15, 2025 00:44:37.733302116 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 15, 2025 00:44:37.912614107 CET	222	IN	HTTP/1.1 304 Not Modified Date: Fri, 14 Mar 2025 23:38:11 GMT Expires: Sat, 15 Mar 2025 00:28:11 GMT Age: 386 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.7	49688	142.250.181.225	80	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 15, 2025 00:45:09.214813948 CET	6	OUT	Data Raw: 00 Data Ascii:

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.7	49689	142.250.181.225	80	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Mar 15, 2025 00:45:09.214996099 CET	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.7	49687	172.217.18.1	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 23:44:24 UTC	674	OUT	GET / HTTP/1.1 Host: 2gewf232.blogspot.com.au Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 23:44:25 UTC	533	IN	HTTP/1.1 302 Moved Temporarily Location: https://2gewf232.blogspot.com/ Content-Type: text/html; charset=UTF-8 Date: Fri, 14 Mar 2025 23:44:25 GMT Expires: Fri, 14 Mar 2025 23:44:25 GMT Cache-Control: private, max-age=0 X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN Content-Security-Policy: frame-ancestors 'self' X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-14 23:44:25 UTC	245	IN	Data Raw: 65 66 0d 0a 3c 48 54 4d 4c 3e 0a 3c 48 45 41 44 3e 0a 3c 54 49 54 4c 45 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 54 49 54 4c 45 3e 0a 3c 2f 48 45 41 44 3e 0a 3c 42 4f 44 59 20 42 47 43 4f 4c 4f 52 3d 22 23 46 46 46 46 46 46 22 20 54 45 58 54 3d 22 23 30 30 30 30 30 30 22 3e 0a 3c 21 2d 2d 20 47 53 45 20 44 65 66 61 75 6c 74 20 45 72 72 6f 72 20 2d 2d 3e 0a 3c 48 31 3e 4d 6f 76 65 64 20 54 65 6d 70 6f 72 61 72 69 6c 79 3c 2f 48 31 3e 0a 54 68 65 20 64 6f 63 75 6d 65 6e 74 20 68 61 73 20 6d 6f 76 65 64 20 3c 41 20 48 52 45 46 3d 22 68 74 74 70 73 3a 2f 2f 32 67 65 77 66 32 33 32 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 2f 22 3e 68 65 72 65 3c 2f 41 3e 2e 0a 3c 2f 42 4f 44 59 3e 0a 3c 2f 48 54 4d 4c 3e 0a 0d 0a Data Ascii: ef<HTML><HEAD><TITLE>Moved Temporarily</TITLE></HEAD><BODY BGCOLOR="#FFFFFF" TEXT="#000000">... GSE Default Error --><H1>Moved Temporarily</H1>The document has moved <A HREF="https://2gewf232.blogspot.com/">here</A>.</BODY></HTML>
2025-03-14 23:44:25 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.7	49690	142.250.74.193	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 23:44:25 UTC	671	OUT	GET / HTTP/1.1 Host: 2gewf232.blogspot.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 23:44:26 UTC	444	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=UTF-8 Expires: Fri, 14 Mar 2025 23:44:26 GMT Date: Fri, 14 Mar 2025 23:44:26 GMT Cache-Control: private, max-age=0 Last-Modified: Thu, 05 Sep 2024 14:17:45 GMT X-Content-Type-Options: nosniff X-XSS-Protection: 1; mode=block Server: GSE Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-14 23:44:26 UTC	946	IN	Data Raw: 33 33 39 65 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 27 76 32 27 20 64 69 72 3d 27 6c 74 72 27 20 78 6d 6c 6e 73 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 31 39 39 39 2f 78 68 74 6d 6c 27 20 78 6d 6c 6e 73 3a 62 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 62 27 20 78 6d 6c 6e 73 3a 64 61 74 61 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 64 61 74 61 27 20 78 6d 6c 6e 73 3a 65 78 70 72 3d 27 68 74 74 70 3a 2f 2f 77 77 77 2e 67 6f 6f 67 6c 65 2e 63 6f 6d 2f 32 30 30 35 2f 67 6d 6c 2f 65 78 70 72 27 3e 0a 3c 68 65 61 64 3e 0a 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f Data Ascii: 339e<!DOCTYPE html><html class='v2' dir='ltr' xmlns='http://www.w3.org/1999/xhtml' xmlns:b='http://www.google.com/2005/gml/b' xmlns:data='http://www.google.com/2005/gml/data' xmlns:expr='http://www.google.com/2005/gml/expr'><head><link href='https://
2025-03-14 23:44:26 UTC	1390	IN	Data Raw: 6f 74 2e 63 6f 6d 2f 66 65 65 64 73 2f 70 6f 73 74 73 2f 64 65 66 61 75 6c 74 3f 61 6c 74 3d 72 73 73 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 65 72 76 69 63 65 2e 70 6f 73 74 22 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 61 74 6f 6d 2b 78 6d 6c 22 20 74 69 74 6c 65 3d 22 31 20 2d 20 41 74 6f 6d 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 66 65 65 64 73 2f 37 30 34 33 37 32 33 36 39 39 31 30 37 35 33 32 34 31 37 2f 70 6f 73 74 73 2f 64 65 66 61 75 6c 74 22 20 2f 3e 0a 3c 6c 69 6e 6b 20 72 65 6c 3d 22 6d 65 22 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 70 72 6f 66 69 6c 65 2f 31 37 30 35 33 35 33 35 31 37 36 39 32 38 32 34 30 30 33 Data Ascii: ot.com/feeds/posts/default?alt=rss" /><link rel="service.post" type="application/atom+xml" title="1 - Atom" href="https://www.blogger.com/feeds/7043723699107532417/posts/default" /><link rel="me" href="https://www.blogger.com/profile/1705353517692824003
2025-03-14 23:44:26 UTC	1390	IN	Data Raw: 66 74 3b 0a 5f 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 62 6f 64 79 2d 66 61 75 78 63 6f 6c 75 6d 6e 2d 6f 75 74 65 72 20 2e 63 61 70 2d 74 6f 70 20 7b 0a 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 7a 2d 69 6e 64 65 78 3a 20 31 3b 0a 68 65 69 67 68 74 3a 20 34 30 30 70 78 3b 0a 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 7d 0a 2e 62 6f 64 79 2d 66 61 75 78 63 6f 6c 75 6d 6e 2d 6f 75 74 65 72 20 2e 63 61 70 2d 74 6f 70 20 2e 63 61 70 2d 6c 65 66 74 20 7b 0a 77 69 64 74 68 3a 20 31 30 30 25 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 74 72 61 6e 73 70 61 72 65 6e 74 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 72 65 73 6f 75 72 63 65 73 2e 62 6c 6f 67 62 6c 6f 67 2e 63 6f 6d 2f 62 6c 6f 67 62 6c 6f 67 2f 64 61 74 Data Ascii: ft;_background-image: none;}.body-fauxcolumn-outer .cap-top {position: absolute;z-index: 1;height: 400px;width: 100%;}.body-fauxcolumn-outer .cap-top .cap-left {width: 100%;background: transparent url(https://resources.blogblog.com/blogblog/dat
2025-03-14 23:44:26 UTC	1390	IN	Data Raw: 20 75 6c 20 7b 0a 6d 61 72 67 69 6e 2d 74 6f 70 3a 20 2d 30 3b 0a 62 6f 72 64 65 72 2d 74 6f 70 3a 20 30 20 73 6f 6c 69 64 20 23 65 65 65 65 65 65 3b 0a 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 30 20 73 6f 6c 69 64 20 23 65 65 65 65 65 65 3b 0a 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 20 30 20 73 6f 6c 69 64 20 23 65 65 65 65 65 65 3b 0a 7d 0a 2e 74 61 62 73 2d 69 6e 6e 65 72 20 2e 77 69 64 67 65 74 20 75 6c 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 35 66 35 66 35 20 75 72 6c 28 68 74 74 70 73 3a 2f 2f 72 65 73 6f 75 72 63 65 73 2e 62 6c 6f 67 62 6c 6f 67 2e 63 6f 6d 2f 62 6c 6f 67 62 6c 6f 67 2f 64 61 74 61 2f 31 6b 74 2f 73 69 6d 70 6c 65 2f 67 72 61 64 69 65 6e 74 73 5f 6c 69 67 68 74 2e 70 6e 67 29 20 72 65 70 65 61 74 2d 78 20 73 63 72 6f 6c 6c Data Ascii: ul {margin-top: -0;border-top: 0 solid #eeeeee;border-left: 0 solid #eeeeee;border-right: 0 solid #eeeeee;}.tabs-inner .widget ul {background: #f5f5f5 url(https://resources.blogblog.com/blogblog/data/1kt/simple/gradients_light.png) repeat-x scroll
2025-03-14 23:44:26 UTC	1390	IN	Data Raw: 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 2e 31 29 3b 0a 7d 0a 2e 77 69 64 67 65 74 20 2e 70 6f 70 75 6c 61 72 2d 70 6f 73 74 73 20 75 6c 20 7b 0a 6c 69 73 74 2d 73 74 79 6c 65 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2f 2a 20 50 6f 73 74 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 68 32 2e 64 61 74 65 2d 68 65 61 64 65 72 20 7b 0a 66 6f 6e 74 3a 20 6e 6f 72 6d 61 6c 20 62 6f 6c 64 20 31 31 70 78 20 41 72 69 61 6c 2c 20 54 61 68 6f 6d 61 2c 20 48 65 6c 76 65 74 69 63 61 2c 20 46 72 65 65 53 61 6e 73 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0a 7d 0a 2e 64 61 74 65 2d 68 65 61 64 65 72 20 73 70 61 6e 20 7b 0a 62 61 63 6b 67 72 6f 75 6e Data Ascii: px 1px rgba(0, 0, 0, .1);}.widget .popular-posts ul {list-style: none;}/* Posts----------------------------------------------- */h2.date-header {font: normal bold 11px Arial, Tahoma, Helvetica, FreeSans, sans-serif;}.date-header span {backgroun
2025-03-14 23:44:26 UTC	1390	IN	Data Raw: 2c 20 30 2c 20 2e 31 29 3b 0a 7d 0a 2e 70 6f 73 74 2d 68 65 61 64 65 72 20 7b 0a 6d 61 72 67 69 6e 3a 20 30 20 30 20 31 2e 35 65 6d 3b 0a 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 3b 0a 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 30 25 3b 0a 7d 0a 2e 70 6f 73 74 2d 66 6f 6f 74 65 72 20 7b 0a 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 2d 32 70 78 20 30 3b 0a 70 61 64 64 69 6e 67 3a 20 35 70 78 20 31 30 70 78 3b 0a 63 6f 6c 6f 72 3a 20 23 36 36 36 36 36 36 3b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 39 66 39 66 39 3b 0a 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 65 65 65 3b 0a 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 31 2e 36 3b 0a 66 6f 6e 74 2d 73 69 7a 65 3a 20 39 30 25 3b 0a 7d 0a 23 63 6f 6d 6d Data Ascii: , 0, .1);}.post-header {margin: 0 0 1.5em;line-height: 1.6;font-size: 90%;}.post-footer {margin: 20px -2px 0;padding: 5px 10px;color: #666666;background-color: #f9f9f9;border-bottom: 1px solid #eeeeee;line-height: 1.6;font-size: 90%;}#comm
2025-03-14 23:44:26 UTC	1390	IN	Data Raw: 6e 6c 69 6e 65 2d 74 68 72 65 61 64 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 39 66 39 66 39 3b 0a 7d 0a 2e 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6e 74 69 6e 75 65 20 7b 0a 62 6f 72 64 65 72 2d 74 6f 70 3a 20 32 70 78 20 73 6f 6c 69 64 20 23 39 39 39 39 39 39 3b 0a 7d 0a 2f 2a 20 41 63 63 65 6e 74 73 0a 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 2d 20 2a 2f 0a 2e 73 65 63 74 69 6f 6e 2d 63 6f 6c 75 6d 6e 73 20 74 64 2e 63 6f 6c 75 6d 6e 73 2d 63 65 6c 6c 20 7b 0a 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 65 65 65 65 65 65 3b 0a 7d 0a 2e 62 6c 6f 67 2d 70 61 67 65 72 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 3a 20 Data Ascii: nline-thread {background-color: #f9f9f9;}.comments .continue {border-top: 2px solid #999999;}/* Accents---------------------------------------------- */.section-columns td.columns-cell {border-left: 1px solid #eeeeee;}.blog-pager {background:
2025-03-14 23:44:26 UTC	1390	IN	Data Raw: 7d 0a 2e 6d 6f 62 69 6c 65 2d 6c 69 6e 6b 2d 62 75 74 74 6f 6e 20 61 3a 6c 69 6e 6b 2c 20 2e 6d 6f 62 69 6c 65 2d 6c 69 6e 6b 2d 62 75 74 74 6f 6e 20 61 3a 76 69 73 69 74 65 64 20 7b 0a 63 6f 6c 6f 72 3a 20 23 66 66 66 66 66 66 3b 0a 7d 0a 2e 6d 6f 62 69 6c 65 20 2e 74 61 62 73 2d 69 6e 6e 65 72 20 2e 73 65 63 74 69 6f 6e 3a 66 69 72 73 74 2d 63 68 69 6c 64 20 7b 0a 62 6f 72 64 65 72 2d 74 6f 70 3a 20 6e 6f 6e 65 3b 0a 7d 0a 2e 6d 6f 62 69 6c 65 20 2e 74 61 62 73 2d 69 6e 6e 65 72 20 2e 50 61 67 65 4c 69 73 74 20 2e 77 69 64 67 65 74 2d 63 6f 6e 74 65 6e 74 20 7b 0a 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 65 65 65 65 65 65 3b 0a 63 6f 6c 6f 72 3a 20 23 30 30 30 30 30 30 3b 0a 62 6f 72 64 65 72 2d 74 6f 70 3a 20 31 70 78 20 73 6f 6c 69 64 Data Ascii: }.mobile-link-button a:link, .mobile-link-button a:visited {color: #ffffff;}.mobile .tabs-inner .section:first-child {border-top: none;}.mobile .tabs-inner .PageList .widget-content {background-color: #eeeeee;color: #000000;border-top: 1px solid
2025-03-14 23:44:26 UTC	1390	IN	Data Raw: 74 70 73 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 64 79 6e 2d 63 73 73 2f 61 75 74 68 6f 72 69 7a 61 74 69 6f 6e 2e 63 73 73 3f 74 61 72 67 65 74 42 6c 6f 67 49 44 3d 37 30 34 33 37 32 33 36 39 39 31 30 37 35 33 32 34 31 37 26 61 6d 70 3b 7a 78 3d 61 65 31 31 66 66 61 36 2d 39 39 38 66 2d 34 39 66 64 2d 62 65 65 62 2d 38 62 65 32 61 63 38 34 35 37 64 36 27 20 6d 65 64 69 61 3d 27 6e 6f 6e 65 27 20 6f 6e 6c 6f 61 64 3d 27 69 66 28 6d 65 64 69 61 21 3d 26 23 33 39 3b 61 6c 6c 26 23 33 39 3b 29 6d 65 64 69 61 3d 26 23 33 39 3b 61 6c 6c 26 23 33 39 3b 27 20 72 65 6c 3d 27 73 74 79 6c 65 73 68 65 65 74 27 2f 3e 3c 6e 6f 73 63 72 69 70 74 3e 3c 6c 69 6e 6b 20 68 72 65 66 3d 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d Data Ascii: tps://www.blogger.com/dyn-css/authorization.css?targetBlogID=7043723699107532417&zx=ae11ffa6-998f-49fd-beeb-8be2ac8457d6' media='none' onload='if(media!='all')media='all'' rel='stylesheet'/><noscript><link href='https://www.blogger.com
2025-03-14 23:44:26 UTC	1156	IN	Data Raw: 6f 70 65 6e 43 68 69 6c 64 28 7b 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 75 72 6c 3a 20 27 68 74 74 70 73 3a 2f 2f 77 77 77 2e 62 6c 6f 67 67 65 72 2e 63 6f 6d 2f 6e 61 76 62 61 72 2f 37 30 34 33 37 32 33 36 39 39 31 30 37 35 33 32 34 31 37 3f 6f 72 69 67 69 6e 5c 78 33 64 68 74 74 70 73 3a 2f 2f 32 67 65 77 66 32 33 32 2e 62 6c 6f 67 73 70 6f 74 2e 63 6f 6d 27 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 77 68 65 72 65 3a 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6e 61 76 62 61 72 2d 69 66 72 61 6d 65 2d 63 6f 6e 74 61 69 6e 65 72 22 29 2c 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 64 3a 20 22 6e 61 76 62 61 72 2d 69 66 72 61 6d 65 22 0a 20 20 20 20 20 20 20 20 20 20 7d 29 3b 0a 20 20 20 20 20 20 20 20 7d Data Ascii: openChild({ url: 'https://www.blogger.com/navbar/7043723699107532417?origin\x3dhttps://2gewf232.blogspot.com', where: document.getElementById("navbar-iframe-container"), id: "navbar-iframe" }); }

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.7	49686	142.250.185.132	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 23:44:26 UTC	587	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEI66nOAQj2z84BCIDWzgEIwNjOAQjJ3M4BCITgzgEIouTOAQiv5M4BCOnkzgE= Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 23:44:26 UTC	1348	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 23:44:26 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-DN2OWNVMgHPQ8iP8wrJe9A' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Document-Policy: expect-no-linked-resources Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-14 23:44:26 UTC	42	IN	Data Raw: 64 35 35 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 74 68 65 20 70 69 74 74 20 72 65 63 61 70 20 65 70 69 73 6f 64 65 20 31 31 22 Data Ascii: d55)]}'["",["the pitt recap episode 11"
2025-03-14 23:44:26 UTC	1390	IN	Data Raw: 2c 22 63 6f 66 66 65 65 20 63 72 65 61 6d 65 72 20 72 65 63 61 6c 6c 65 64 22 2c 22 72 61 69 6e 62 6f 77 20 73 69 78 20 73 69 65 67 65 20 78 20 63 6c 6f 73 65 64 20 62 65 74 61 22 2c 22 63 69 6e 63 69 6e 6e 61 74 69 20 62 65 6e 67 61 6c 73 22 2c 22 62 6c 6f 6f 64 20 6d 6f 6f 6e 20 74 6f 74 61 6c 20 6c 75 6e 61 72 20 65 63 6c 69 70 73 65 20 74 6f 6e 69 67 68 74 22 2c 22 73 65 76 65 72 65 20 77 65 61 74 68 65 72 20 74 6f 72 6e 61 64 6f 65 73 22 2c 22 6e 69 61 6e 74 69 63 20 70 6f 6b c3 a9 6d 6f 6e 20 67 6f 22 2c 22 63 6c 65 76 65 6c 61 6e 64 20 63 61 76 61 6c 69 65 72 73 20 76 73 20 6d 65 6d 70 68 69 73 20 67 72 69 7a 7a 6c 69 65 73 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 Data Ascii: ,"coffee creamer recalled","rainbow six siege x closed beta","cincinnati bengals","blood moon total lunar eclipse tonight","severe weather tornadoes","niantic pokmon go","cleveland cavaliers vs memphis grizzlies"],["","","","","","","",""],[],{"google:c
2025-03-14 23:44:26 UTC	1390	IN	Data Raw: 51 32 74 44 55 6e 63 79 56 6b 4e 42 51 31 42 61 59 57 35 57 4d 6e 52 76 62 33 42 69 57 44 59 34 63 33 64 44 61 30 35 76 56 57 74 6c 4d 6c 52 50 61 48 5a 45 5a 6a 4a 55 56 32 45 7a 4d 47 6c 73 54 6c 6c 76 5a 44 5a 74 57 6c 68 4c 63 32 4a 46 5a 6e 42 52 54 57 35 76 53 32 4e 43 64 33 6c 76 51 54 46 55 51 56 42 72 4e 6d 74 55 52 55 35 52 51 56 4a 42 61 58 46 70 4f 48 59 7a 64 33 6c 70 4d 54 64 6d 4f 45 74 46 52 57 74 4e 5a 46 46 53 4f 45 35 4d 53 6a 6c 45 56 30 4a 4e 59 33 4a 43 4e 58 70 31 56 32 68 58 54 45 46 4a 55 6e 70 42 53 6c 55 78 59 54 46 57 64 30 4a 76 54 32 78 72 52 6b 6c 69 4c 32 6f 78 54 57 4d 78 4e 6b 56 69 57 6e 64 70 4e 6d 68 42 5a 56 46 42 54 55 46 74 65 6a 49 35 5a 32 5a 31 54 58 64 43 51 55 70 4f 64 6a 6c 6e 62 6b 31 47 4d 48 64 49 5a 69 74 Data Ascii: Q2tDUncyVkNBQ1BaYW5WMnRvb3BiWDY4c3dDa05vVWtlMlRPaHZEZjJUV2EzMGlsTllvZDZtWlhLc2JFZnBRTW5vS2NCd3lvQTFUQVBrNmtURU5RQVJBaXFpOHYzd3lpMTdmOEtFRWtNZFFSOE5MSjlEV0JNY3JCNXp1V2hXTEFJUnpBSlUxYTFWd0JvT2xrRkliL2oxTWMxNkViWndpNmhBZVFBTUFtejI5Z2Z1TXdCQUpOdjlnbk1GMHdIZit
2025-03-14 23:44:26 UTC	598	IN	Data Raw: 53 32 74 61 4f 54 46 6d 57 54 52 42 52 55 56 68 62 33 46 78 4e 54 64 6e 63 45 31 42 51 55 51 77 51 55 35 59 65 57 70 78 4e 32 31 56 62 54 5a 75 5a 7a 52 50 51 55 46 4c 4d 30 64 48 61 33 46 69 55 7a 46 30 4b 32 4a 7a 4f 56 46 42 56 57 46 42 51 56 6c 4d 54 45 30 79 54 33 42 34 61 47 39 31 62 6d 74 71 62 32 70 69 63 6e 42 4c 5a 55 74 45 63 48 56 52 51 58 70 61 4e 55 59 76 62 33 4d 72 63 58 64 4f 4e 56 52 6f 63 30 59 31 61 6e 4a 42 65 47 49 33 54 58 70 69 4e 6d 31 72 62 54 4a 6f 64 32 31 4e 65 45 68 6e 59 31 46 4c 56 7a 5a 4f 5a 47 56 78 53 79 38 77 54 32 6c 6b 63 6d 4e 6f 56 32 4e 76 61 48 5a 6c 4d 31 56 6a 57 58 41 72 64 57 31 56 63 6b 39 78 61 56 52 5a 63 30 4a 61 61 32 56 49 4d 6c 68 70 4d 44 68 56 55 6c 6c 48 4e 6d 35 36 56 45 31 7a 56 57 46 47 61 57 35 Data Ascii: S2taOTFmWTRBRUVhb3FxNTdncE1BQUQwQU5YeWpxN21VbTZuZzRPQUFLM0dHa3FiUzF0K2JzOVFBVWFBQVlMTE0yT3B4aG91bmtqb2picnBLZUtEcHVRQXpaNUYvb3MrcXdONVRoc0Y1anJBeGI3TXpiNm1rbTJod21NeEhnY1FLVzZOZGVxSy8wT2lkcmNoV2NvaHZlM1VjWXArdW1Vck9xaVRZc0Jaa2VIMlhpMDhVUllHNm56VE1zVWFGaW5
2025-03-14 23:44:26 UTC	88	IN	Data Raw: 35 32 0d 0a 53 6d 56 73 59 54 4d 34 4e 6e 70 5a 63 6a 68 52 56 33 6b 76 57 43 39 33 57 57 4a 4c 65 6e 45 32 4e 79 39 6b 4d 33 68 42 4d 32 4e 51 52 6b 34 76 64 69 39 33 62 6b 6b 35 4f 46 42 4c 57 58 64 4f 64 55 52 56 61 6d 74 42 64 58 64 6a 56 6a 52 69 51 32 0d 0a Data Ascii: 52SmVsYTM4NnpZcjhRV3kvWC93WWJLenE2Ny9kM3hBM2NQRk4vdi93bkk5OFBLWXdOdURVamtBdXdjVjRiQ2
2025-03-14 23:44:26 UTC	1390	IN	Data Raw: 62 30 65 0d 0a 4e 59 4e 6d 39 44 5a 56 70 45 51 58 6f 35 52 6b 67 72 65 57 39 6f 55 6b 67 77 57 47 5a 32 51 54 5a 59 65 56 5a 32 56 6b 73 79 61 57 4a 73 54 54 46 79 56 6b 70 58 61 6e 6c 71 63 58 56 4c 65 55 4e 53 5a 6a 4a 72 59 32 56 55 62 32 6f 34 53 53 39 33 64 6b 39 78 5a 48 52 4b 63 33 52 57 64 54 64 49 5a 6b 6c 58 5a 6d 35 50 52 6e 5a 58 57 54 64 57 51 32 46 30 56 54 64 4b 4f 56 68 47 51 30 35 51 59 55 52 76 63 58 49 78 56 32 70 33 61 45 31 43 65 58 46 35 5a 6d 64 30 62 6b 68 6c 55 32 5a 54 59 6c 70 57 62 33 68 75 52 58 6c 4b 53 47 64 79 5a 32 64 4b 54 44 4a 72 4e 7a 63 35 61 32 6c 50 56 31 4e 45 56 46 70 59 4d 47 6c 33 64 31 52 48 62 30 45 33 51 30 4a 6a 59 6b 52 49 4d 7a 4a 71 63 55 78 70 57 47 4a 59 5a 45 63 7a 55 6b 6c 77 59 6e 41 76 51 6b 4a 48 Data Ascii: b0eNYNm9DZVpEQXo5RkgreW9oUkgwWGZ2QTZYeVZ2VksyaWJsTTFyVkpXanlqcXVLeUNSZjJrY2VUb2o4SS93dk9xZHRKc3RWdTdIZklXZm5PRnZXWTdWQ2F0VTdKOVhGQ05QYURvcXIxV2p3aE1CeXF5Zmd0bkhlU2ZTYlpWb3huRXlKSGdyZ2dKTDJrNzc5a2lPV1NEVFpYMGl3d1RHb0E3Q0JjYkRIMzJqcUxpWGJYZEczUklwYnAvQkJH
2025-03-14 23:44:26 UTC	1390	IN	Data Raw: 33 63 7a 67 31 53 6e 4e 51 64 30 70 74 4f 57 74 4d 61 56 55 33 51 6d 70 74 59 6b 39 75 4d 57 78 46 62 55 70 54 63 56 64 71 57 44 68 75 51 30 52 34 62 46 70 48 57 58 4a 73 63 33 5a 79 4f 56 68 72 56 48 42 74 55 58 52 75 51 6a 4e 4b 56 6b 39 5a 53 6e 49 34 4c 32 34 35 56 6e 46 4c 62 6d 46 53 5a 57 74 68 65 58 51 79 52 44 59 7a 4d 69 39 61 4e 46 42 50 4e 6b 56 32 53 6b 46 77 4e 6d 34 33 54 30 6f 78 65 48 56 30 64 32 4e 6c 62 6a 42 30 4e 54 6c 31 52 32 5a 34 52 6c 52 6a 61 6e 4a 59 55 45 49 79 4b 32 5a 78 57 47 68 70 56 31 5a 32 65 55 39 74 61 47 35 33 4b 7a 46 4b 53 30 68 61 63 30 70 55 4e 6a 56 74 55 48 4e 6a 55 54 4a 30 61 47 56 6e 52 6e 5a 61 61 57 78 4d 59 33 4d 33 4d 6a 4a 75 57 45 78 30 64 55 68 4d 56 46 42 46 63 6b 4e 6c 57 6c 4e 33 64 55 34 79 65 6c Data Ascii: 3czg1SnNQd0ptOWtMaVU3QmptYk9uMWxFbUpTcVdqWDhuQ0R4bFpHWXJsc3ZyOVhrVHBtUXRuQjNKVk9ZSnI4L245VnFLbmFSZWtheXQyRDYzMi9aNFBPNkV2SkFwNm43T0oxeHV0d2NlbjB0NTl1R2Z4RlRjanJYUEIyK2ZxWGhpV1Z2eU9taG53KzFKS0hac0pUNjVtUHNjUTJ0aGVnRnZaaWxMY3M3MjJuWEx0dUhMVFBFckNlWlN3dU4yel
2025-03-14 23:44:26 UTC	57	IN	Data Raw: 59 22 2c 22 51 55 45 52 59 22 2c 22 45 4e 54 49 54 59 22 2c 22 51 55 45 52 59 22 2c 22 51 55 45 52 59 22 2c 22 45 4e 54 49 54 59 22 2c 22 51 55 45 52 59 22 5d 7d 5d 0d 0a Data Ascii: Y","QUERY","ENTITY","QUERY","QUERY","ENTITY","QUERY"]}]
2025-03-14 23:44:26 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.7	49692	142.250.185.142	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 23:44:27 UTC	640	OUT	GET /js/platform.js HTTP/1.1 Host: apis.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQE= Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://2gewf232.blogspot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 23:44:27 UTC	837	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Vary: Accept-Encoding Content-Type: text/javascript Access-Control-Allow-Origin: * Content-Security-Policy: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/gapi-team Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin; report-to="gapi-team" Report-To: {"group":"gapi-team","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gapi-team"}]} Timing-Allow-Origin: * Content-Length: 64240 Date: Fri, 14 Mar 2025 23:44:27 GMT Expires: Fri, 14 Mar 2025 23:44:27 GMT Cache-Control: private, max-age=1800, stale-while-revalidate=1800 ETag: "670afc115c0e5d32" X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 23:44:27 UTC	553	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 70 2c 61 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 2c 62 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 72 65 74 75 72 6e 20 61 3b 61 5b 62 5d 3d 63 2e Data Ascii: (function(){var p,aa=function(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}},ba=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype)return a;a[b]=c.
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 69 6f 6e 28 61 2c 62 29 7b 69 66 28 62 29 61 3a 7b 76 61 72 20 63 3d 72 3b 61 3d 61 2e 73 70 6c 69 74 28 22 2e 22 29 3b 66 6f 72 28 76 61 72 20 64 3d 30 3b 64 3c 61 2e 6c 65 6e 67 74 68 2d 31 3b 64 2b 2b 29 7b 76 61 72 20 65 3d 61 5b 64 5d 3b 69 66 28 21 28 65 20 69 6e 20 63 29 29 62 72 65 61 6b 20 61 3b 63 3d 63 5b 65 5d 7d 61 3d 61 5b 61 2e 6c 65 6e 67 74 68 2d 31 5d 3b 64 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 62 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 3b 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 76 61 72 20 62 3d 66 75 6e 63 74 69 6f 6e 28 Data Ascii: ion(a,b){if(b)a:{var c=r;a=a.split(".");for(var d=0;d<a.length-1;d++){var e=a[d];if(!(e in c))break a;c=c[e]}a=a[a.length-1];d=c[a];b=b(d);b!=d&&b!=null&&ba(c,a,{configurable:!0,writable:!0,value:b})}};u("Symbol",function(a){if(a)return a;var b=function(
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 62 61 6c 54 68 69 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 7c 7c 72 7d 29 3b 0a 75 28 22 50 72 6f 6d 69 73 65 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 29 7b 74 68 69 73 2e 41 3d 6e 75 6c 6c 7d 66 75 6e 63 74 69 6f 6e 20 63 28 67 29 7b 72 65 74 75 72 6e 20 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 65 3f 67 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 6b 28 67 29 7d 29 7d 69 66 28 61 29 72 65 74 75 72 6e 20 61 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 64 61 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 74 68 69 73 2e 41 3d 3d 6e 75 6c 6c 29 7b 74 68 69 73 2e 41 3d 5b 5d 3b 76 61 72 20 6b 3d 74 68 69 73 3b 74 68 69 73 2e 65 61 28 66 75 6e 63 74 69 6f 6e 28 29 7b 6b 2e 43 61 28 29 7d 29 7d Data Ascii: balThis",function(a){return a\|\|r});u("Promise",function(a){function b(){this.A=null}function c(g){return g instanceof e?g:new e(function(k){k(g)})}if(a)return a;b.prototype.da=function(g){if(this.A==null){this.A=[];var k=this;this.ea(function(){k.Ca()})}
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 73 65 74 74 6c 65 64 20 69 6e 20 73 74 61 74 65 22 2b 74 68 69 73 2e 46 29 3b 74 68 69 73 2e 46 3d 67 3b 74 68 69 73 2e 4b 3d 6b 3b 74 68 69 73 2e 46 3d 3d 3d 32 26 26 74 68 69 73 2e 49 61 28 29 3b 74 68 69 73 2e 44 61 28 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 49 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 67 3d 74 68 69 73 3b 64 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 67 2e 46 61 28 29 29 7b 76 61 72 20 6b 3d 72 2e 63 6f 6e 73 6f 6c 65 3b 74 79 70 65 6f 66 20 6b 21 3d 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 0a 6b 2e 65 72 72 6f 72 28 67 2e 4b 29 7d 7d 2c 31 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 46 61 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 6b 61 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 67 3d 72 2e 43 75 73 Data Ascii: settled in state"+this.F);this.F=g;this.K=k;this.F===2&&this.Ia();this.Da()};e.prototype.Ia=function(){var g=this;d(function(){if(g.Fa()){var k=r.console;typeof k!=="undefined"&&k.error(g.K)}},1)};e.prototype.Fa=function(){if(this.ka)return!1;var g=r.Cus
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 68 28 67 29 7d 29 7d 3b 65 2e 72 61 63 65 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6b 2c 68 29 7b 66 6f 72 28 76 61 72 20 6c 3d 78 28 67 29 2c 6d 3d 6c 2e 6e 65 78 74 28 29 3b 21 6d 2e 64 6f 6e 65 3b 6d 3d 6c 2e 6e 65 78 74 28 29 29 63 28 6d 2e 76 61 6c 75 65 29 2e 4c 28 6b 2c 68 29 7d 29 7d 3b 65 2e 61 6c 6c 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 6b 3d 78 28 67 29 2c 68 3d 6b 2e 6e 65 78 74 28 29 3b 72 65 74 75 72 6e 20 68 2e 64 6f 6e 65 3f 63 28 5b 5d 29 3a 6e 65 77 20 65 28 66 75 6e 63 74 69 6f 6e 28 6c 2c 6d 29 7b 66 75 6e 63 74 69 6f 6e 20 6e 28 77 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 74 29 7b 71 5b 77 5d 3d 74 3b 76 2d 2d 3b 76 3d 3d 30 26 26 6c 28 71 29 7d Data Ascii: h(g)})};e.race=function(g){return new e(function(k,h){for(var l=x(g),m=l.next();!m.done;m=l.next())c(m.value).L(k,h)})};e.all=function(g){var k=x(g),h=k.next();return h.done?c([]):new e(function(l,m){function n(w){return function(t){q[w]=t;v--;v==0&&l(q)}
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 2e 4a 5d 3a 76 6f 69 64 20 30 7d 3b 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 63 28 68 29 26 26 7a 28 68 2c 66 29 26 26 7a 28 68 5b 66 5d 2c 74 68 69 73 2e 4a 29 7d 3b 0a 6b 2e 70 72 6f 74 6f 74 79 70 65 2e 64 65 6c 65 74 65 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 63 28 68 29 26 26 7a 28 68 2c 66 29 26 26 7a 28 68 5b 66 5d 2c 74 68 69 73 2e 4a 29 3f 64 65 6c 65 74 65 20 68 5b 66 5d 5b 74 68 69 73 2e 4a 5d 3a 21 31 7d 3b 72 65 74 75 72 6e 20 6b 7d 29 3b 0a 75 28 22 4d 61 70 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 22 66 75 6e 63 74 69 6f 6e 22 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 Data Ascii: .J]:void 0};k.prototype.has=function(h){return c(h)&&z(h,f)&&z(h[f],this.J)};k.prototype.delete=function(h){return c(h)&&z(h,f)&&z(h[f],this.J)?delete h[f][this.J]:!1};return k});u("Map",function(a){if(function(){if(!a\|\|typeof a!="function"\|\|!a.prototyp
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 2e 76 61 6c 75 65 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 5b 6b 2e 6b 65 79 2c 6b 2e 76 61 6c 75 65 5d 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 79 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 6b 65 79 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 76 61 6c 75 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 6b 29 7b 72 65 74 75 72 6e 20 6b 2e 76 61 6c 75 65 7d 29 7d 3b 63 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 Data Ascii: .value};c.prototype.entries=function(){return e(this,function(k){return[k.key,k.value]})};c.prototype.keys=function(){return e(this,function(k){return k.key})};c.prototype.values=function(){return e(this,function(k){return k.value})};c.prototype.forEach=f
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 29 3b 69 66 28 62 20 69 6e 73 74 61 6e 63 65 6f 66 20 52 65 67 45 78 70 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 46 69 72 73 74 20 61 72 67 75 6d 65 6e 74 20 74 6f 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 22 2b 63 2b 22 20 6d 75 73 74 20 6e 6f 74 20 62 65 20 61 20 72 65 67 75 6c 61 72 20 65 78 70 72 65 73 73 69 6f 6e 22 29 3b 72 65 74 75 72 6e 20 61 2b 22 22 7d 3b 75 28 22 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 73 74 61 72 74 73 57 69 74 68 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 61 3f 61 3a 66 75 6e 63 74 69 6f 6e 28 62 2c 63 29 7b 76 61 72 20 64 3d 68 61 28 74 68 69 73 2c 62 2c 22 73 74 61 72 74 73 57 69 74 68 22 29 3b 62 2b 3d 22 22 3b 76 61 72 20 65 3d 64 2e 6c 65 6e 67 74 68 2c Data Ascii: );if(b instanceof RegExp)throw new TypeError("First argument to String.prototype."+c+" must not be a regular expression");return a+""};u("String.prototype.startsWith",function(a){return a?a:function(b,c){var d=ha(this,b,"startsWith");b+="";var e=d.length,
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 41 3d 74 68 69 73 7c 7c 73 65 6c 66 2c 69 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 62 3d 62 21 3d 22 6f 62 6a 65 63 74 22 3f 62 3a 61 3f 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 61 29 3f 22 61 72 72 61 79 22 3a 62 3a 22 6e 75 6c 6c 22 3b 72 65 74 75 72 6e 20 62 3d 3d 22 61 72 72 61 79 22 7c 7c 62 3d 3d 22 6f 62 6a 65 63 74 22 26 26 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 22 6e 75 6d 62 65 72 22 7d 2c 6a 61 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 61 3b 72 65 74 75 72 6e 20 62 3d 3d 22 6f 62 6a 65 63 74 22 26 26 61 21 3d 6e 75 6c 6c 7c 7c 62 3d 3d 22 66 75 6e 63 74 Data Ascii: se-Identifier: Apache-2.0*/var A=this\|\|self,ia=function(a){var b=typeof a;b=b!="object"?b:a?Array.isArray(a)?"array":b:"null";return b=="array"\|\|b=="object"&&typeof a.length=="number"},ja=function(a){var b=typeof a;return b=="object"&&a!=null\|\|b=="funct
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 5d 3a 22 25 73 22 29 3b 74 61 2e 63 61 6c 6c 28 74 68 69 73 2c 63 2b 61 5b 64 5d 29 7d 72 61 28 76 61 2c 74 61 29 3b 76 61 2e 70 72 6f 74 6f 74 79 70 65 2e 6e 61 6d 65 3d 22 41 73 73 65 72 74 69 6f 6e 45 72 72 6f 72 22 3b 76 61 72 20 77 61 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 21 61 29 7b 76 61 72 20 64 3d 22 41 73 73 65 72 74 69 6f 6e 20 66 61 69 6c 65 64 22 3b 69 66 28 62 29 7b 64 2b 3d 22 3a 20 22 2b 62 3b 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 32 29 7d 74 68 72 6f 77 20 6e 65 77 20 76 61 28 22 22 2b 64 2c 65 7c 7c 5b 5d 29 3b 7d 7d 3b 76 61 72 20 78 61 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3f 66 75 6e 63 74 Data Ascii: ]:"%s");ta.call(this,c+a[d])}ra(va,ta);va.prototype.name="AssertionError";var wa=function(a,b,c){if(!a){var d="Assertion failed";if(b){d+=": "+b;var e=Array.prototype.slice.call(arguments,2)}throw new va(""+d,e\|\|[]);}};var xa=Array.prototype.forEach?funct

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.7	49693	172.217.16.137	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 23:44:27 UTC	621	OUT	GET /static/v1/widgets/3566091532-css_bundle_v2.css HTTP/1.1 Host: www.blogger.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://2gewf232.blogspot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 23:44:27 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech" Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} Content-Length: 35960 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Tue, 11 Mar 2025 09:51:33 GMT Expires: Wed, 11 Mar 2026 09:51:33 GMT Cache-Control: public, max-age=31536000 Last-Modified: Mon, 10 Mar 2025 20:55:49 GMT Content-Type: text/css Vary: Accept-Encoding Age: 309174 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 23:44:27 UTC	702	IN	Data Raw: 68 74 6d 6c 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 30 30 25 3b 5f 68 65 69 67 68 74 3a 31 30 30 25 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 63 6f 6e 74 65 6e 74 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 7d 2e 63 6f 6e 74 65 6e 74 2d 6f 75 74 65 72 2c 2e 72 65 67 69 6f 6e 2d 69 6e 6e 65 72 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 30 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 63 6f 6c 75 6d 6e 73 7b 7a 6f 6f 6d 3a 31 7d 2e 6c 6f 61 64 69 6e 67 20 2e 63 6f 6c 75 6d 6e 73 7b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 63 6f 6c 75 6d 6e 73 2d 69 6e 6e 65 72 7b 5f 68 65 69 67 68 74 3a 31 25 3b 6d 69 6e 2d 68 65 Data Ascii: html{height:100%}body{min-height:100%;_height:100%;position:relative}.content{position:relative;word-wrap:break-word}.content-outer,.region-inner{min-height:0;margin:0 auto}.columns{zoom:1}.loading .columns{overflow:hidden}.columns-inner{_height:1%;min-he
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 6e 65 72 7b 68 65 69 67 68 74 3a 31 30 30 25 7d 2e 66 61 75 78 63 6f 6c 75 6d 6e 2d 6c 65 66 74 2d 6f 75 74 65 72 7b 6c 65 66 74 3a 30 7d 2e 66 61 75 78 63 6f 6c 75 6d 6e 2d 72 69 67 68 74 2d 6f 75 74 65 72 7b 72 69 67 68 74 3a 30 7d 2e 63 61 70 2d 74 6f 70 2c 2e 63 61 70 2d 62 6f 74 74 6f 6d 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 68 65 69 67 68 74 3a 30 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 72 65 70 65 61 74 3a 72 65 70 65 61 74 2d 78 7d 2e 63 61 70 2d 74 6f 70 20 2e 63 61 70 2d 6c 65 66 74 2c 2e 63 61 70 2d 74 6f 70 20 2e 63 61 70 2d 72 69 67 68 74 2c 2e 63 61 70 2d 62 6f 74 74 6f 6d 20 2e 63 61 70 2d 6c 65 66 74 2c 2e 63 61 70 2d 62 6f 74 74 6f 6d 20 2e 63 61 70 2d 72 69 67 68 74 7b 68 65 69 67 68 74 3a 31 30 30 25 3b 62 61 63 6b 67 72 Data Ascii: ner{height:100%}.fauxcolumn-left-outer{left:0}.fauxcolumn-right-outer{right:0}.cap-top,.cap-bottom{position:relative;height:0;background-repeat:repeat-x}.cap-top .cap-left,.cap-top .cap-right,.cap-bottom .cap-left,.cap-bottom .cap-right{height:100%;backgr
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 6e 3a 72 65 6c 61 74 69 76 65 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6d 61 72 67 69 6e 3a 30 20 61 75 74 6f 7d 2e 63 6f 6e 74 65 6e 74 2d 66 61 75 78 63 6f 6c 75 6d 6e 73 20 2e 66 61 75 78 63 6f 6c 75 6d 6e 2d 6c 65 66 74 7b 77 69 64 74 68 3a 31 30 30 25 7d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 20 30 20 31 70 78 7d 2e 63 6f 6e 74 65 6e 74 2d 6f 75 74 65 72 2c 2e 68 65 61 64 65 72 2d 6f 75 74 65 72 2c 2e 74 61 62 73 2d 6f 75 74 65 72 2c 2e 6d 61 69 6e 2d 6f 75 74 65 72 2c 2e 6d 61 69 6e 2d 69 6e 6e 65 72 2c 2e 66 6f 6f 74 65 72 2d 6f 75 74 65 72 2c 2e 70 6f 73 74 2c 2e 63 6f 6d 6d 65 6e 74 73 2c 2e 77 69 64 67 65 74 2c 2e 64 61 74 65 2d 68 65 61 64 65 72 2c 2e 69 6e 6c 69 6e Data Ascii: n:relative;overflow:visible;height:100%;margin:0 auto}.content-fauxcolumns .fauxcolumn-left{width:100%}body{margin:0;padding:0 0 1px}.content-outer,.header-outer,.tabs-outer,.main-outer,.main-inner,.footer-outer,.post,.comments,.widget,.date-header,.inlin
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 67 3a 30 20 32 70 78 7d 61 20 69 6d 67 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 68 31 2c 68 32 2c 68 33 2c 68 34 7b 6d 61 72 67 69 6e 3a 30 3b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 68 31 20 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 68 33 20 61 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 7d 2e 74 61 62 73 20 2e 77 69 64 67 65 74 20 68 32 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 74 61 62 73 20 2e 77 69 64 67 65 74 20 75 6c 2c 2e 74 61 62 73 20 2e 77 69 64 67 65 74 20 75 6c 7b 6d 61 72 67 69 6e 3a 30 3b 70 61 64 64 69 6e 67 3a 30 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 6c 69 73 74 2d 73 74 79 6c Data Ascii: g:0 2px}a img{border:none;position:relative}h1,h2,h3,h4{margin:0;position:relative}h1 a:hover{text-decoration:none}h3 a:hover{text-decoration:none}.tabs .widget h2{display:none}.tabs .widget ul,.tabs .widget ul{margin:0;padding:0;overflow:hidden;list-styl
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 61 72 67 69 6e 2d 6c 65 66 74 3a 30 7d 2e 70 6f 73 74 20 2e 74 72 2d 63 61 70 74 69 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 7d 2e 69 6e 6c 69 6e 65 2d 61 64 7b 6d 61 72 67 69 6e 3a 32 65 6d 20 30 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 7d 23 63 6f 6d 6d 65 6e 74 73 20 2e 63 6f 6d 6d 65 6e 74 2d 61 75 74 68 6f 72 7b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 32 35 70 78 7d 2e 63 6f 6d 6d 65 6e 74 2d 62 6f 64 79 7b 6d 61 72 67 69 6e 3a 2e 35 65 6d 20 32 35 70 78 7d 2e 63 6f 6d 6d 65 6e 74 2d 66 6f 6f 74 65 72 7b 6d 61 72 67 69 6e 3a 2e 35 65 6d 20 32 35 70 78 20 31 2e 35 65 6d 7d 2e 63 6f 6d 6d 65 6e 74 2d 62 6f 64 79 20 70 7b 6d 61 72 67 69 6e 3a 30 7d 23 Data Ascii: argin-left:0}.post .tr-caption-container{position:relative}.inline-ad{margin:2em 0;text-align:center;line-height:0}#comments .comment-author{padding-left:25px}.comment-body{margin:.5em 25px}.comment-footer{margin:.5em 25px 1.5em}.comment-body p{margin:0}#
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 2e 62 6c 6f 67 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 62 6c 6f 67 2d 69 63 6f 6e 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 2d 74 6f 70 3a 32 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 6f 70 3b 74 65 78 74 2d 69 6e 64 65 6e 74 3a 30 3b 77 69 64 74 68 3a 31 36 70 78 7d 2e 62 6c 6f 67 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 69 74 65 6d 2d 63 6f 6e 74 65 6e 74 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 35 25 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 65 6d 7d 2e 62 6c 6f 67 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 6e 65 72 20 2e 69 74 65 6d 2d 74 68 75 6d 62 6e 61 69 6c 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 6d 61 72 67 69 6e 3a 32 70 78 20 35 70 78 20 35 70 78 20 30 7d 2e 62 6c 6f 67 2d 6c 69 73 74 2d 63 6f 6e 74 61 69 Data Ascii: .blog-list-container .blog-icon{float:left;margin-top:2px;vertical-align:top;text-indent:0;width:16px}.blog-list-container .item-content{font-size:95%;line-height:1.3em}.blog-list-container .item-thumbnail{float:left;margin:2px 5px 5px 0}.blog-list-contai
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 66 74 3a 30 3b 6f 70 61 63 69 74 79 3a 31 3b 70 6f 73 69 74 69 6f 6e 3a 73 74 61 74 69 63 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 63 72 6f 73 73 7b 68 65 69 67 68 74 3a 31 31 70 78 3b 6d 61 72 67 69 6e 3a 30 20 35 70 78 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 2d 38 2e 35 25 3b 77 69 64 74 68 3a 31 31 70 78 7d 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 65 6d 61 69 6c 2c 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 6e 61 6d 65 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 23 66 66 66 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 66 66 66 3b 62 6f 72 64 65 72 3a 31 70 78 20 73 6f 6c 69 64 20 23 64 39 64 39 64 39 3b 62 6f 72 64 65 72 2d 74 6f 70 3a 31 70 78 20 73 6f 6c 69 64 20 23 63 30 63 30 63 Data Ascii: ft:0;opacity:1;position:static;text-align:center}.contact-form-cross{height:11px;margin:0 5px;vertical-align:-8.5%;width:11px}.contact-form-email,.contact-form-name{background:#fff;background-color:#fff;border:1px solid #d9d9d9;border-top:1px solid #c0c0c
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 61 72 2c 6c 65 66 74 20 74 6f 70 2c 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 66 72 6f 6d 28 23 66 35 66 35 66 35 29 2c 74 6f 28 23 66 31 66 31 66 31 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 35 66 35 66 35 2c 23 66 31 66 31 66 31 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 6f 7a 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 35 66 35 66 35 2c 23 66 31 66 31 66 31 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6d 73 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 66 35 66 35 66 35 2c 23 66 31 66 31 66 31 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 6f 2d 6c 69 6e 65 61 Data Ascii: ar,left top,left bottom,from(#f5f5f5),to(#f1f1f1));background-image:-webkit-linear-gradient(top,#f5f5f5,#f1f1f1);background-image:-moz-linear-gradient(top,#f5f5f5,#f1f1f1);background-image:-ms-linear-gradient(top,#f5f5f5,#f1f1f1);background-image:-o-linea
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 63 36 63 36 63 36 3b 62 6f 78 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 31 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 31 29 3b 63 6f 6c 6f 72 3a 23 32 32 32 3b 66 69 6c 74 65 72 3a 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 53 74 72 3d 27 23 66 38 66 38 66 38 27 2c 45 6e 64 43 6f 6c 6f 72 53 74 72 3d 27 23 66 31 66 31 66 31 27 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 61 6c 6c 20 30 7d 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2e 66 6f 63 75 73 2c 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2e 72 69 67 68 74 2e 66 6f 63 75 73 2c 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2e 6d 69 64 2e 66 6f Data Ascii: c6c6c6;box-shadow:0 1px 1px rgba(0,0,0,.1);color:#222;filter:progid:DXImageTransform.Microsoft.gradient(startColorStr='#f8f8f8',EndColorStr='#f1f1f1');transition:all 0}.contact-form-button.focus,.contact-form-button.right.focus,.contact-form-button.mid.fo
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 63 72 6f 73 6f 66 74 2e 67 72 61 64 69 65 6e 74 28 73 74 61 72 74 43 6f 6c 6f 72 53 74 72 3d 27 23 37 37 37 37 37 37 27 2c 45 6e 64 43 6f 6c 6f 72 53 74 72 3d 27 23 35 35 35 35 35 35 27 29 7d 2e 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 62 75 74 74 6f 6e 2d 73 75 62 6d 69 74 3a 68 6f 76 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 35 35 35 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 67 72 61 64 69 65 6e 74 28 6c 69 6e 65 61 72 2c 6c 65 66 74 20 74 6f 70 2c 6c 65 66 74 20 62 6f 74 74 6f 6d 2c 66 72 6f 6d 28 23 36 36 36 29 2c 74 6f 28 23 34 34 34 29 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 2d 77 65 62 6b 69 74 2d 6c 69 6e 65 61 72 2d 67 72 61 64 69 65 6e 74 28 74 6f 70 2c 23 36 36 36 2c 23 34 Data Ascii: crosoft.gradient(startColorStr='#777777',EndColorStr='#555555')}.contact-form-button-submit:hover{background-color:#555;background-image:-webkit-gradient(linear,left top,left bottom,from(#666),to(#444));background-image:-webkit-linear-gradient(top,#666,#4

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.7	49691	172.217.16.137	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 23:44:27 UTC	600	OUT	GET /static/v1/widgets/1354223504-widgets.js HTTP/1.1 Host: www.blogger.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://2gewf232.blogspot.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 23:44:27 UTC	695	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="blogger-tech" Report-To: {"group":"blogger-tech","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/blogger-tech"}]} Content-Length: 145245 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Thu, 13 Mar 2025 22:12:39 GMT Expires: Fri, 13 Mar 2026 22:12:39 GMT Cache-Control: public, max-age=31536000 Last-Modified: Thu, 13 Mar 2025 20:50:32 GMT Content-Type: text/javascript Vary: Accept-Encoding Age: 91908 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-14 23:44:27 UTC	695	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 47 6f 6f 67 6c 65 20 4c 4c 43 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 2f 2a 0a 0a 20 43 6f 70 79 72 69 67 68 74 20 54 68 65 20 43 6c 6f 73 75 72 65 20 4c 69 62 72 61 72 79 20 41 75 74 68 6f 72 73 2e 0a 20 53 50 44 58 2d 4c 69 63 65 6e 73 65 2d 49 64 65 6e 74 69 66 69 65 72 3a 20 41 70 61 63 68 65 2d 32 2e 30 0a 2a 2f 0a 76 61 72 20 61 61 3d 22 26 61 63 74 69 6f 6e 3d 22 2c 62 61 3d 22 2e 77 69 6b 69 70 65 64 69 61 2e 6f 72 67 22 2c 63 61 3d 22 53 43 52 49 50 54 22 2c 64 61 3d 22 53 50 41 4e 22 2c 65 61 3d 22 53 57 5f 52 45 41 44 45 52 5f 4c 49 53 54 5f 22 2c 66 61 3d 22 53 57 5f 52 45 41 44 45 Data Ascii: (function(){/* Copyright Google LLC SPDX-License-Identifier: Apache-2.0// Copyright The Closure Library Authors. SPDX-License-Identifier: Apache-2.0*/var aa="&action=",ba=".wikipedia.org",ca="SCRIPT",da="SPAN",ea="SW_READER_LIST_",fa="SW_READE
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 2c 42 61 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 22 2c 43 61 3d 22 63 6f 6e 74 61 63 74 2d 66 6f 72 6d 2d 73 75 63 63 65 73 73 2d 6d 65 73 73 61 67 65 2d 77 69 74 68 2d 62 6f 72 64 65 72 22 2c 44 61 3d 22 64 61 74 61 2d 68 65 69 67 68 74 22 2c 45 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 46 75 6c 6c 22 2c 46 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 4c 61 79 6f 75 74 22 2c 47 61 3d 22 64 69 73 70 6c 61 79 4d 6f 64 65 4e 6f 6e 65 22 2c 6d 3d 22 64 69 76 22 2c 48 61 3d 22 64 72 6f 70 64 6f 77 6e 2d 74 6f 67 67 6c 65 22 2c 49 61 3d 22 65 72 72 6f 72 22 2c 4a 61 3d 22 65 78 70 61 6e 64 65 64 22 2c 6e 3d 22 66 75 6e 63 74 69 6f 6e 22 2c 4b 61 3d 22 68 69 64 64 65 6e 22 2c 4c 61 3d 22 68 74 74 70 73 3a 22 2c 4d Data Ascii: ,Ba="contact-form-success-message",Ca="contact-form-success-message-with-border",Da="data-height",Ea="displayModeFull",Fa="displayModeLayout",Ga="displayModeNone",m="div",Ha="dropdown-toggle",Ia="error",Ja="expanded",n="function",Ka="hidden",La="https:",M
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 76 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 41 3d 66 3b 67 62 28 74 68 69 73 2c 22 64 65 73 63 72 69 70 74 69 6f 6e 22 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 Data Ascii: nfigurable:!0,writable:!0,value:b})}}v("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.A=f;gb(this,"description",{configurable:!0,writable:!
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 62 2c 63 29 3b 64 26 26 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 63 2c 64 29 7d 65 6c 73 65 20 61 5b 63 5d 3d 62 5b 63 5d 3b 61 2e 4c 3d 62 2e 70 72 6f 74 6f 74 79 70 65 7d 66 75 6e 63 74 69 6f 6e 20 78 28 61 29 7b 76 61 72 20 62 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 21 3d 22 75 6e 64 65 66 69 6e 65 64 22 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 3d 3d 71 29 72 65 74 75 72 6e 7b 6e 65 78 74 3a 66 62 28 61 29 7d 3b 74 68 72 6f 77 20 45 72 72 6f 72 28 53 74 72 69 6e 67 28 61 29 2b 22 20 69 73 20 6e 6f 74 20 61 6e 20 69 74 65 72 61 62 Data Ascii: b,c);d&&Object.defineProperty(a,c,d)}else a[c]=b[c];a.L=b.prototype}function x(a){var b=typeof Symbol!="undefined"&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if(typeof a.length==q)return{next:fb(a)};throw Error(String(a)+" is not an iterab
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 69 73 2e 54 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 47 29 7d 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 54 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 69 66 28 67 3d 3d 3d 74 68 69 73 29 74 68 69 73 2e 47 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 41 20 50 72 6f 6d 69 73 65 20 63 61 6e 6e 6f 74 20 72 65 73 6f 6c 76 65 20 74 6f 20 69 74 73 65 6c 66 22 29 29 3b 65 6c 73 65 20 69 66 28 67 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 69 73 2e 61 61 28 67 29 3b 65 6c 73 65 7b 61 3a 73 77 69 74 63 68 28 74 79 70 65 6f 66 20 67 29 7b 63 61 73 65 20 50 61 3a 76 61 72 20 68 3d 67 21 3d 6e 75 6c 6c 3b 62 72 65 61 6b 20 61 3b 63 61 73 65 20 6e 3a 68 3d 21 30 3b 62 72 65 61 6b 20 61 3b 64 65 66 61 75 6c 74 3a 68 3d 21 31 7d 68 3f 74 68 69 73 2e 4e 28 67 29 Data Ascii: is.T),reject:g(this.G)}};b.prototype.T=function(g){if(g===this)this.G(new TypeError("A Promise cannot resolve to itself"));else if(g instanceof b)this.aa(g);else{a:switch(typeof g){case Pa:var h=g!=null;break a;case n:h=!0;break a;default:h=!1}h?this.N(g)
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f 6e 20 6b 28 44 2c 43 29 7b 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 44 3d 3d 6e 3f 66 75 6e 63 74 69 6f 6e 28 52 29 7b 74 72 79 7b 6c 28 44 28 52 29 29 7d 63 61 74 63 68 28 4e 64 29 7b 72 28 4e 64 29 7d 7d 3a 43 7d 76 61 72 20 6c 2c 72 2c 41 3d 6e 65 77 20 62 28 66 75 6e 63 74 69 6f 6e 28 44 2c 43 29 7b 6c 3d 44 3b 72 3d 43 7d 29 3b 74 68 69 73 2e 4e 61 28 6b 28 67 2c 6c 29 2c 6b 28 68 2c 72 29 29 3b 72 65 74 75 72 6e 20 41 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 63 61 74 63 68 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 74 68 65 6e 28 76 6f 69 64 20 30 2c 67 29 7d 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 4e 61 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 66 75 6e 63 74 69 6f Data Ascii: ion(g,h){function k(D,C){return typeof D==n?function(R){try{l(D(R))}catch(Nd){r(Nd)}}:C}var l,r,A=new b(function(D,C){l=D;r=C});this.Na(k(g,l),k(h,r));return A};b.prototype.catch=function(g){return this.then(void 0,g)};b.prototype.Na=function(g,h){functio
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 75 62 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 67 62 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 28 4f 62 6a 65 63 74 5b 6b 5d 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 69 66 28 72 20 69 6e 73 74 61 6e 63 65 6f 66 20 63 29 72 65 74 75 72 6e 20 72 3b 4f 62 6a 65 63 74 2e 69 73 45 78 74 65 6e 73 69 62 6c 65 28 72 29 26 26 65 28 72 29 3b 72 65 74 75 72 6e 20 6c 28 72 29 7d 29 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 21 4f 62 6a 65 63 74 2e 73 65 61 6c 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 6b 3d 4f 62 6a 65 63 74 2e 73 65 61 6c 28 7b 7d 29 2c 6c 3d 4f 62 Data Ascii: nction e(k){if(!ub(k,g)){var l=new c;gb(k,g,{value:l})}}function f(k){var l=Object[k];l&&(Object[k]=function(r){if(r instanceof c)return r;Object.isExtensible(r)&&e(r);return l(r)})}if(function(){if(!a\|\|!Object.seal)return!1;try{var k=Object.seal({}),l=Ob
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 2c 6c 69 73 74 3a 72 2c 69 6e 64 65 78 3a 2d 31 2c 0a 55 3a 76 6f 69 64 20 30 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 5d 3d 7b 7d 3b 74 68 69 73 5b 31 5d 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 3b 69 66 28 68 29 7b 68 3d 78 28 68 29 3b 66 6f 72 28 76 61 72 20 6b 3b 21 28 6b 3d 68 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6b 3d 6b 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6b 5b 30 5d 2c 6b 5b 31 5d 29 7d 7d 69 66 28 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 61 7c 7c 74 79 70 65 6f 66 20 61 21 3d 6e 7c 7c 21 61 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 7c 7c 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 61 6c 21 3d 6e 29 72 65 74 75 72 6e 21 31 3b 74 72 79 7b 76 61 72 20 68 3d 4f 62 6a 65 63 74 2e Data Ascii: ,list:r,index:-1,U:void 0}}function e(h){this[0]={};this[1]=b();this.size=0;if(h){h=x(h);for(var k;!(k=h.next()).done;)k=k.value,this.set(k[0],k[1])}}if(function(){if(!a\|\|typeof a!=n\|\|!a.prototype.entries\|\|typeof Object.seal!=n)return!1;try{var h=Object.
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 20 68 2e 76 61 6c 75 65 7d 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 2e 66 6f 72 45 61 63 68 3d 66 75 6e 63 74 69 6f 6e 28 68 2c 6b 29 7b 66 6f 72 28 76 61 72 20 6c 3d 74 68 69 73 2e 65 6e 74 72 69 65 73 28 29 2c 72 3b 21 28 72 3d 6c 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 72 3d 72 2e 76 61 6c 75 65 2c 68 2e 63 61 6c 6c 28 6b 2c 72 5b 31 5d 2c 72 5b 30 5d 2c 0a 74 68 69 73 29 7d 3b 65 2e 70 72 6f 74 6f 74 79 70 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3b 76 61 72 20 67 3d 30 3b 72 65 74 75 72 6e 20 65 7d 29 3b 0a 76 28 22 53 65 74 22 2c 66 75 6e 63 74 69 6f 6e 28 61 Data Ascii: ion(){return c(this,function(h){return h.value})};e.prototype.forEach=function(h,k){for(var l=this.entries(),r;!(r=l.next()).done;)r=r.value,h.call(k,r[1],r[0],this)};e.prototype[Symbol.iterator]=e.prototype.entries;var g=0;return e});v("Set",function(a
2025-03-14 23:44:27 UTC	1390	IN	Data Raw: 61 2c 62 29 7b 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 53 74 72 69 6e 67 26 26 28 61 2b 3d 22 22 29 3b 76 61 72 20 63 3d 30 2c 64 3d 21 31 2c 65 3d 7b 6e 65 78 74 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 21 64 26 26 63 3c 61 2e 6c 65 6e 67 74 68 29 7b 76 61 72 20 66 3d 63 2b 2b 3b 72 65 74 75 72 6e 7b 76 61 6c 75 65 3a 62 28 66 2c 61 5b 66 5d 29 2c 64 6f 6e 65 3a 21 31 7d 7d 64 3d 21 30 3b 72 65 74 75 72 6e 7b 64 6f 6e 65 3a 21 30 2c 76 61 6c 75 65 3a 76 6f 69 64 20 30 7d 7d 7d 3b 65 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 7d 3b 72 65 74 75 72 6e 20 65 7d 76 28 22 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 Data Ascii: a,b){a instanceof String&&(a+="");var c=0,d=!1,e={next:function(){if(!d&&c<a.length){var f=c++;return{value:b(f,a[f]),done:!1}}d=!0;return{done:!0,value:void 0}}};e[Symbol.iterator]=function(){return e};return e}v("Array.prototype.entries",function(a){ret

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.7	49703	104.21.29.163	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 23:44:31 UTC	553	OUT	GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1 Host: img3.proshkolu.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 23:44:32 UTC	472	IN	HTTP/1.1 301 Moved Permanently Date: Fri, 14 Mar 2025 23:44:32 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Server: cloudflare Location: http://data3.proshkolu.ru/content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif X-Content-Type-Options: nosniff X-Frame-Options: SAMEORIGIN X-Xss-Protection: 1; mode=block Cache-Control: max-age=14400 Cf-Cache-Status: HIT CF-RAY: 9207a3b78d774270-EWR alt-svc: h3=":443"; ma=86400
2025-03-14 23:44:32 UTC	180	IN	Data Raw: 61 39 0d 0a 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6e 67 69 6e 78 2f 31 2e 32 35 2e 35 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 0d 0a 30 0d 0a 0d 0a Data Ascii: a9<html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>nginx/1.25.5</center></body></html>0

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.7	49709	104.21.29.163	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 23:44:32 UTC	554	OUT	GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1 Host: data3.proshkolu.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 23:44:32 UTC	1041	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 23:44:32 GMT Content-Type: image/gif Content-Length: 18837 Connection: close Cache-Control: max-age=2592000 etag: "5db4b9f0-4995" expires: Fri, 11 Apr 2025 02:51:05 GMT last-modified: Sat, 26 Oct 2019 21:26:08 GMT x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 243771 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=WRBG0ZL0G95k2kle2eDeeRqNE3B55GD74heV5cZfNMdnBv0lJhavUGQdJKPvPLhNZy9eSo%2FGMP4o9sgs0%2B%2BlBxUvZamlQuFKCp6QbbLpg6x3BU2ApOuBONG%2F8qwDD0vKZ6d6XXY%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9207a3bd2c4a42bb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1593&min_rtt=1588&rtt_var=606&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1126&delivery_rate=1791411&cwnd=184&unsent_bytes=0&cid=a7c65afe0c1170e6&ts=159&x=0"
2025-03-14 23:44:32 UTC	328	IN	Data Raw: 47 49 46 38 39 61 8a 01 76 00 f7 ff 00 e4 ce db a5 98 5c 73 00 6f c2 1c bb c9 9c b7 77 05 48 c7 49 c7 51 00 36 94 00 90 f6 ee f3 f8 f1 f5 b8 0f b3 d6 96 c7 c0 8b aa 9b 47 7a 9e 5d e4 e4 b8 da ae 6b 92 c2 33 bf 86 00 65 65 03 94 c9 85 b6 f6 8a eb b8 7d a1 a4 58 85 5f 00 43 ee e5 a2 e3 ad d8 ae 8b d7 d8 8c c7 a6 03 11 a0 6f 9c bd 4e a3 c9 6b b4 e3 9c df e9 bc e2 dc be cf c5 7d b1 98 04 74 bf 31 a3 d8 b5 cd ed de e7 80 16 55 a5 4b 87 e5 a6 e3 74 53 62 8f 59 84 a2 3d 83 71 00 56 af 8e a9 69 00 4e 89 26 61 9b 39 79 d2 ad c2 6d 4e 96 cf af f4 f8 d7 f7 b6 7a 9d b8 5a 9f de 91 d8 c5 63 ae fd f9 cb c1 b0 b0 c2 58 a9 ba 43 9f e6 15 79 a8 00 87 c1 73 ab be 67 a7 92 37 6d b6 69 9e a0 02 7d e0 a5 d4 d6 7d c4 43 94 93 d4 94 f3 82 02 58 db 85 da a2 93 8d a5 2e 86 8e 66 Data Ascii: GIF89av\sowHIQ6Gz]k3ee}X_CoNk}t1UKtSbY=qViN&a9ymNzZcXCysg7mi}}CX.f
2025-03-14 23:44:32 UTC	1369	IN	Data Raw: 8a 3b 8a 9d 17 78 f7 ca f7 f5 ad b5 8b 14 64 dc 9c cf ae 43 93 cd 6a e7 6c 02 45 7f 11 54 76 2d 59 86 1e 5e ce 5c cd a8 d9 eb b6 1b 9a d3 84 c2 ea c7 e2 82 00 7e ee e1 e9 76 01 5c cf 6f bb f8 87 b0 66 31 7d 78 03 51 cd bf f2 ec af e7 87 66 a7 8f 00 6d f3 79 a7 72 4b dd 7d 00 5f d2 9e c3 b4 49 69 95 73 83 91 27 68 e0 b9 f9 92 1e 6b dd b1 d1 f2 9e 8e e3 c9 fa d4 6c d1 f2 2a dc 70 02 4c f5 b6 ee ce 76 ba 85 3f 69 e8 76 81 c9 7b 8f 50 0b c7 ed bf ea cd 96 bc aa 38 8d d0 4a 8e f8 ab f3 fe fe f3 8c 53 a8 cc 8f 78 cd a6 bd 93 45 41 f8 c0 f6 f4 53 dc 57 0c 18 41 02 6c e3 a2 f1 39 56 62 b4 30 42 7e 0b 51 d5 a9 7f a2 76 b2 e2 d6 fc a8 00 a3 9c 10 8c f0 d3 eb 9c 60 90 f7 57 ae d8 47 b8 a0 7d 8c be b0 6b 78 a3 7f 79 02 10 a5 c8 a3 f9 e4 f9 ca 03 44 a1 78 cf 78 37 9e Data Ascii: ;xdCjlETv-Y^\~v\of1}xQfmyrK}_Iis'hkl*pLv?iv{P8JSxEASWAl9Vb0B~Qv`WG}kxyDxx7
2025-03-14 23:44:32 UTC	1369	IN	Data Raw: 68 42 ca 08 22 44 22 c1 2b 08 4c 20 f0 41 a9 0d 0f 01 04 1b 18 43 06 22 1d 54 50 42 1f 43 e8 d0 45 17 2a 44 df 50 0d 0e ac 6c 8c f1 67 c7 02 4e 12 95 50 43 0e 27 2f 78 02 18 8e 50 b9 e0 ed 6c 04 10 d0 05 0b d0 a6 b6 1e 54 22 04 3c 78 5f fc 40 67 90 88 61 01 03 18 c8 41 3f e4 c1 c1 58 24 af 04 46 c0 c2 0a de c0 89 46 b0 a3 3f 0e 49 80 1c 44 a0 09 4d 8c 40 10 2c 38 5c 89 ac 21 02 26 50 30 21 0d 58 81 23 f0 a0 86 43 14 60 6a 04 51 81 31 ff 62 81 8d 36 14 60 4b ff c0 00 36 2a a0 06 40 d0 2e 21 d3 13 41 1d 5e c1 31 83 a4 0c 0b c6 c1 46 eb 08 b4 81 4f a0 2d 6b 78 08 46 25 78 70 0b 2a 6c 48 25 39 e0 c4 14 b5 00 83 ef 65 84 04 56 2b cf f8 8c 07 00 44 c0 ac 04 39 c0 46 04 8c c0 0a 7a 90 a3 0b ab 88 c0 b9 26 42 80 17 88 40 10 0a 10 c4 27 0c c0 3d 3d fc 10 21 70 5c Data Ascii: hB"D"+L AC"TPBCEDPlgNPC'/xPlT"<x_@gaA?X$FF?IDM@,8\!&P0!X#C`jQ1b6`K6@.!A^1FO-kxF%xp*lH%9eV+D9Fz&B@'==!p\
2025-03-14 23:44:32 UTC	1369	IN	Data Raw: 38 04 a4 18 92 00 40 1c 49 0f 87 00 d5 0c 36 b1 87 42 36 2a cc 0d 69 40 17 de 70 88 0c f4 bb 20 01 c2 42 3c 0e f0 85 93 a9 c0 1d d6 88 bd 40 13 52 84 30 e4 ee b7 08 c9 81 ff 11 14 a0 08 74 58 2b 64 73 98 c4 cf d7 bf d8 0c b4 9f e4 27 69 c0 13 f0 2c 80 78 c0 9c 22 17 78 41 35 42 60 02 3e ec 4a 64 32 00 0b 46 e6 02 ee 47 70 07 d0 06 07 d0 02 67 30 09 a1 a6 7e 69 16 11 11 00 04 70 60 00 6d 60 0d 92 c0 3d 62 e7 2f b0 f6 0f f9 d7 01 3c 60 0e 13 10 2a 80 e0 7f 45 e7 7e 26 e8 7e 02 78 06 d8 30 4f 5f e0 7e 0f 88 50 0e 50 01 e4 30 01 19 90 06 8b d5 6d a1 62 0a 84 02 79 68 c2 04 c0 95 7f 4d 90 0c d6 80 09 87 56 0b 21 e8 73 eb 97 84 32 70 06 88 c6 6d 2f 28 10 a6 35 4f 04 17 07 ab 30 31 a4 25 6b 3f 00 82 30 f0 84 0a 11 1e ab c7 28 74 00 08 84 20 0f 8b e6 73 c8 c7 10 Data Ascii: 8@I6B6i@p B<@R0tX+ds'i,x"xA5B`>Jd2FGpg0~ip`m`=b/<`E~&~x0O_~PP0mbyhMV!s2pm/(5O01%k?0(t s
2025-03-14 23:44:32 UTC	1369	IN	Data Raw: 49 71 70 08 a4 f8 48 0b 11 01 e4 b0 06 6e d0 06 3a b2 27 66 e0 0e 65 20 04 d5 28 89 29 c0 0e e1 e0 48 4a fb 10 24 60 9e 09 f8 43 24 a0 02 3d 14 07 7e 43 11 29 d0 06 b4 60 5d 63 eb 10 24 00 08 2d 69 02 50 3b 10 35 30 03 21 d4 05 f7 d0 08 6f 40 04 15 50 01 78 a0 08 63 d4 03 9f 35 01 80 20 b1 d4 b2 0a 4d 70 02 3e 04 2b 04 d0 06 36 06 06 e6 00 08 d2 00 0d 20 8b 32 5f 23 0a 94 a0 03 46 f3 97 0e 40 0f 1c 74 3f 24 90 02 c6 40 04 8a 9b b4 02 51 04 c7 c0 8e 65 c9 7d 48 e0 09 6a 90 a3 7c b6 02 98 d4 05 05 40 05 5d e0 02 6e 40 5c 48 60 47 25 a0 03 da 26 aa 2a 01 00 6d 70 9b dd 85 11 ca c7 09 31 60 bc 13 a1 02 c7 06 0b 92 e8 4e 2f 30 45 92 b7 57 4f 60 08 c9 e0 65 30 80 ac 4f ff a8 7c 60 20 b3 17 a1 02 e5 60 64 01 95 03 8d 40 08 cd 70 90 12 d1 00 bd 00 06 13 00 bd 12 Data Ascii: IqpHn:'fe ()HJ$`C$=~C)`]c$-iP;50!o@Pxc5 Mp>+6 2_#F@t?$@Qe}Hj\|@]n@\H`G%&*mp1`N/0EWO`e0O\|` `d@p
2025-03-14 23:44:32 UTC	1369	IN	Data Raw: 10 0c 0c e0 09 1b 90 07 10 e0 06 16 00 02 e7 e0 b4 f2 59 ad 35 40 07 9c 30 09 5a 69 2c 9a f2 05 ea 1e a2 7f 8c 41 9e fa 0a d4 cb e7 03 41 79 c9 40 08 77 1d 20 56 b0 08 71 e0 dd 33 a1 c5 18 90 96 dd 9c 11 05 00 07 46 00 00 58 c0 4d ed b2 10 c7 32 03 0e 90 36 e6 60 28 47 2e b5 85 90 d3 05 30 b0 ab 90 0c 3c 40 0a 40 30 01 3f c7 85 05 f0 04 3c 50 01 2d 20 02 ab d0 f0 0a f1 f0 0e 80 08 37 70 bf 4b fe 0f 0d ff 99 0c ee 40 d9 fd ba 10 e1 e1 00 3b b0 b5 ff a8 7a 9e c0 03 78 00 02 fb 90 a4 d5 6a 73 11 e3 00 00 50 01 84 70 70 23 ee 00 d8 f0 f2 71 40 c4 7d 39 03 77 a0 31 11 89 01 11 c0 02 e3 b3 01 3b 90 04 65 00 04 94 00 02 d9 de 01 bf 4b 60 3c 60 05 d1 b6 84 07 c0 9c 56 f3 02 6e 66 d9 f1 1a 07 b5 90 01 c8 50 04 12 f3 1b 45 70 02 c2 b2 bc 96 2e 07 a2 60 00 55 9d 10 Data Ascii: Y5@0Zi,AAy@w Vq3FXM26`(G.0<@@0?<P- 7pK@;zxjsPpp#q@}9w1;eK`<`VnfPEp.`U
2025-03-14 23:44:32 UTC	1369	IN	Data Raw: 10 a0 08 a5 a9 2b 02 3a f8 c8 92 04 54 27 39 6c 80 2d 20 f8 89 0c 60 01 08 12 8c a4 06 05 70 cf 21 26 60 82 17 e8 c0 08 3c ab 40 35 3c d8 ff 80 12 3c a0 1b bb 60 0c de 6a 02 00 76 20 00 01 33 78 05 29 a8 56 b5 ab 89 80 05 1b 60 01 38 42 20 04 3e b8 67 12 d4 aa 01 20 0e 71 88 01 bc c2 04 40 d0 41 08 34 80 87 0e 7a b0 1a c1 20 c2 13 00 21 83 12 4e 6b 24 92 33 c2 05 1a 80 88 3c 44 20 02 d8 c0 03 38 44 10 08 11 e8 02 1c 4d 88 84 11 5e 31 8c ae 3c 2e 65 23 b9 40 23 84 00 83 f6 4d 22 0e cd a8 4d 6d 26 31 01 5b 1c 81 10 4f cc c0 19 4c 54 a7 85 c4 23 03 5f 40 5f 44 22 e0 00 6c 1c 2b 1e ff 72 00 10 aa d1 84 35 20 00 03 0d 70 0e 16 36 20 bc 11 50 02 09 78 00 c3 11 0e 21 9e 02 1c f0 20 18 28 43 13 10 81 84 0a f4 41 03 c1 b0 5e 2b 2b 30 a6 21 0c c1 01 8d 50 c1 59 f6 Data Ascii: +:T'9l- `p!&`<@5<<`jv 3x)V`8B >g q@A4z !Nk$3<D 8DM^1<.e#@#M"Mm&1[OLT#_@_D"l+r5 p6 Px! (CA^++0!PY
2025-03-14 23:44:32 UTC	1369	IN	Data Raw: f2 d9 11 18 e7 e3 32 05 0d 80 4a 6d 34 c3 cd 9c 24 7f 12 51 61 df 24 45 d1 a1 22 f8 c0 05 6d 68 ed 15 84 71 80 49 20 1e de c0 d7 89 03 d2 83 f8 53 e1 10 15 80 81 68 b1 b9 03 78 87 74 29 02 8c 03 8e e0 1b a5 a3 13 06 cd 1b 09 c8 d0 02 3d e8 86 ae 00 19 0a 70 0f 58 80 85 e5 62 87 e2 5a ae 9d c3 00 26 18 1d 52 e9 23 17 90 96 2f 98 16 c5 13 3e 80 21 80 27 ea a5 06 64 c1 80 69 80 36 f8 9f e7 ab 89 14 50 11 ce 39 85 33 d8 a1 6b 93 41 20 94 c1 06 98 83 a6 fb 3e 15 b0 a2 89 cb 89 06 a0 80 43 b0 35 77 e3 32 2f c0 b2 d2 c1 b7 83 20 80 c9 7b 2d cb 9a a7 d6 fa ac 91 b0 93 ae 68 07 21 11 00 59 80 01 ba 02 04 9d 9b 81 5a 4b c2 83 20 81 02 90 96 ff 02 b8 28 68 28 80 23 54 c3 20 44 b6 19 c8 8c 3a c4 25 05 20 3f ba c3 89 14 48 15 a9 28 82 06 88 b4 3c 2c c4 5f 5a 97 a8 70 Data Ascii: 2Jm4$Qa$E"mhqI Shxt)=pXbZ&R#/>!'di6P93kA >C5w2/ {-h!YZK (h(#T D:% ?H(<,_Zp
2025-03-14 23:44:32 UTC	1369	IN	Data Raw: 49 18 09 19 a0 e8 3f fb 98 a0 af 45 8a 34 62 cd 17 02 cd 5a f6 3f 67 f4 22 50 d8 02 e5 9e 51 63 02 bd 62 8e 39 02 1d 32 48 a7 19 19 be 51 23 06 17 54 4b 47 88 51 f4 44 1f 7d 72 df 4a 75 11 46 47 81 da 47 10 42 08 13 30 58 bf 15 ec 3f 24 d9 7d 1c c3 f9 c2 17 b0 71 88 4b b4 c1 10 5e 9b c4 d2 4a b2 0e 6e fc 23 40 18 49 81 44 fe f1 04 34 10 e2 1f 80 70 c1 70 60 10 ba 7f 74 41 0d 9a fb 87 1c 26 32 42 6a 3c e2 1f fa 98 c0 34 bc 75 9a 0e 5e e4 18 ff 40 c2 0e 92 50 b9 13 14 43 08 84 e8 c9 21 f8 70 08 27 5c f0 1f 9c 00 83 1a ff 20 64 9a 89 74 81 13 02 99 84 0b 32 30 8a 03 68 61 20 71 b0 5b 49 3a 11 8a 7f 1c c2 7e 93 99 00 37 60 30 09 8e 90 63 02 e5 ab 88 03 10 98 90 17 e8 e3 1f cc f0 49 1b 86 34 09 4b fc 63 42 04 d9 82 78 32 20 03 83 b5 40 20 e0 fb 07 15 22 21 89 Data Ascii: I?E4bZ?g"PQcb92HQ#TKGQD}rJuFGGB0X?$}qK^Jn#@ID4pp`tA&2Bj<4u^@PC!p'\ dt20ha q[I:~7`0cI4KcBx2 @ "!
2025-03-14 23:44:32 UTC	1369	IN	Data Raw: 3c 7c aa 54 96 b0 d0 b3 46 5a 02 06 8a 9c 65 63 62 d0 ee 44 74 30 04 a5 60 81 05 f1 88 5c 20 a8 f1 8f 3c 10 84 08 17 b4 2d cd 2d 02 f9 89 ec 0d 81 1c 8c 41 71 74 98 c3 1d c2 d7 e9 5d d9 44 2c 64 4c 92 00 17 7d 20 4b 1a be 55 c6 40 08 db fe a3 02 3f f0 7c ff 48 22 37 90 4e 28 b4 24 9d 1b a2 49 ce 30 0a 8b 6a a1 7c 05 fe 0f 7f 64 19 78 8b 98 92 22 63 10 08 0d 46 4e 11 07 64 8a 0a c5 40 1f 67 e0 42 e5 f0 04 49 62 02 87 80 06 ca 44 10 65 80 54 3e 71 04 93 a0 06 f4 d1 0d c8 91 01 5e d0 05 2e 90 51 73 d0 02 de 86 11 8f 84 4e 3e e1 3a 28 e2 13 0a 87 7d d5 33 11 ae 63 05 7d 36 11 e2 f7 11 74 90 05 e0 25 07 3c 00 6b 25 c1 0e ba f2 13 32 b0 59 23 51 7f 16 b1 09 82 50 09 c3 83 6b 05 a3 11 80 60 36 61 75 1d e0 e5 01 66 03 08 26 30 21 2c 04 06 08 c0 83 05 f1 60 1a 01 Data Ascii: <\|TFZecbDt0`\ <--Aqt]D,dL} KU@?\|H"7N($I0j\|dx"cFNd@gBIbDeT>q^.QsN>:(}3c}6t%<k%2Y#QPk`6auf&0!,`

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.7	49713	172.67.149.117	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 23:44:33 UTC	446	OUT	GET /content/media/pic/std/1000000/410000/409460-adf6b3788c2ae19b.gif HTTP/1.1 Host: data3.proshkolu.ru Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 23:44:33 UTC	1051	IN	HTTP/1.1 200 OK Date: Fri, 14 Mar 2025 23:44:33 GMT Content-Type: image/gif Content-Length: 18837 Connection: close Cache-Control: max-age=2592000 etag: "5db4b9f0-4995" expires: Fri, 11 Apr 2025 02:51:05 GMT last-modified: Sat, 26 Oct 2019 21:26:08 GMT x-content-type-options: nosniff x-frame-options: SAMEORIGIN x-xss-protection: 1; mode=block CF-Cache-Status: HIT Age: 243772 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=56WRs%2Fjx7gCib3KYYOytEMQcSQWhvbl%2Bu%2FOw6sjyFN5R%2BhKo4DWdPFkPYNw%2FkpqRb6kgvAoY7%2FRm4wtk1GnAp5l8fRF%2FNWfXpnJrqIlIBjSYsB0IX%2F8zRHMR%2FDyFFYIv8ZEsRII%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9207a3c2893a4362-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1623&min_rtt=1616&rtt_var=611&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1018&delivery_rate=1806930&cwnd=236&unsent_bytes=0&cid=8debf5034232cbe0&ts=145&x=0"
2025-03-14 23:44:33 UTC	318	IN	Data Raw: 47 49 46 38 39 61 8a 01 76 00 f7 ff 00 e4 ce db a5 98 5c 73 00 6f c2 1c bb c9 9c b7 77 05 48 c7 49 c7 51 00 36 94 00 90 f6 ee f3 f8 f1 f5 b8 0f b3 d6 96 c7 c0 8b aa 9b 47 7a 9e 5d e4 e4 b8 da ae 6b 92 c2 33 bf 86 00 65 65 03 94 c9 85 b6 f6 8a eb b8 7d a1 a4 58 85 5f 00 43 ee e5 a2 e3 ad d8 ae 8b d7 d8 8c c7 a6 03 11 a0 6f 9c bd 4e a3 c9 6b b4 e3 9c df e9 bc e2 dc be cf c5 7d b1 98 04 74 bf 31 a3 d8 b5 cd ed de e7 80 16 55 a5 4b 87 e5 a6 e3 74 53 62 8f 59 84 a2 3d 83 71 00 56 af 8e a9 69 00 4e 89 26 61 9b 39 79 d2 ad c2 6d 4e 96 cf af f4 f8 d7 f7 b6 7a 9d b8 5a 9f de 91 d8 c5 63 ae fd f9 cb c1 b0 b0 c2 58 a9 ba 43 9f e6 15 79 a8 00 87 c1 73 ab be 67 a7 92 37 6d b6 69 9e a0 02 7d e0 a5 d4 d6 7d c4 43 94 93 d4 94 f3 82 02 58 db 85 da a2 93 8d a5 2e 86 8e 66 Data Ascii: GIF89av\sowHIQ6Gz]k3ee}X_CoNk}t1UKtSbY=qViN&a9ymNzZcXCysg7mi}}CX.f
2025-03-14 23:44:33 UTC	1369	IN	Data Raw: b4 f7 6b eb 64 00 45 a8 15 87 8a 3b 8a 9d 17 78 f7 ca f7 f5 ad b5 8b 14 64 dc 9c cf ae 43 93 cd 6a e7 6c 02 45 7f 11 54 76 2d 59 86 1e 5e ce 5c cd a8 d9 eb b6 1b 9a d3 84 c2 ea c7 e2 82 00 7e ee e1 e9 76 01 5c cf 6f bb f8 87 b0 66 31 7d 78 03 51 cd bf f2 ec af e7 87 66 a7 8f 00 6d f3 79 a7 72 4b dd 7d 00 5f d2 9e c3 b4 49 69 95 73 83 91 27 68 e0 b9 f9 92 1e 6b dd b1 d1 f2 9e 8e e3 c9 fa d4 6c d1 f2 2a dc 70 02 4c f5 b6 ee ce 76 ba 85 3f 69 e8 76 81 c9 7b 8f 50 0b c7 ed bf ea cd 96 bc aa 38 8d d0 4a 8e f8 ab f3 fe fe f3 8c 53 a8 cc 8f 78 cd a6 bd 93 45 41 f8 c0 f6 f4 53 dc 57 0c 18 41 02 6c e3 a2 f1 39 56 62 b4 30 42 7e 0b 51 d5 a9 7f a2 76 b2 e2 d6 fc a8 00 a3 9c 10 8c f0 d3 eb 9c 60 90 f7 57 ae d8 47 b8 a0 7d 8c be b0 6b 78 a3 7f 79 02 10 a5 c8 a3 f9 e4 Data Ascii: kdE;xdCjlETv-Y^\~v\of1}xQfmyrK}_Iis'hkl*pLv?iv{P8JSxEASWAl9Vb0B~Qv`WG}kxy
2025-03-14 23:44:33 UTC	1369	IN	Data Raw: e8 5d c4 22 0d 63 94 02 1d 82 68 42 ca 08 22 44 22 c1 2b 08 4c 20 f0 41 a9 0d 0f 01 04 1b 18 43 06 22 1d 54 50 42 1f 43 e8 d0 45 17 2a 44 df 50 0d 0e ac 6c 8c f1 67 c7 02 4e 12 95 50 43 0e 27 2f 78 02 18 8e 50 b9 e0 ed 6c 04 10 d0 05 0b d0 a6 b6 1e 54 22 04 3c 78 5f fc 40 67 90 88 61 01 03 18 c8 41 3f e4 c1 c1 58 24 af 04 46 c0 c2 0a de c0 89 46 b0 a3 3f 0e 49 80 1c 44 a0 09 4d 8c 40 10 2c 38 5c 89 ac 21 02 26 50 30 21 0d 58 81 23 f0 a0 86 43 14 60 6a 04 51 81 31 ff 62 81 8d 36 14 60 4b ff c0 00 36 2a a0 06 40 d0 2e 21 d3 13 41 1d 5e c1 31 83 a4 0c 0b c6 c1 46 eb 08 b4 81 4f a0 2d 6b 78 08 46 25 78 70 0b 2a 6c 48 25 39 e0 c4 14 b5 00 83 ef 65 84 04 56 2b cf f8 8c 07 00 44 c0 ac 04 39 c0 46 04 8c c0 0a 7a 90 a3 0b ab 88 c0 b9 26 42 80 17 88 40 10 0a 10 c4 Data Ascii: ]"chB"D"+L AC"TPBCEDPlgNPC'/xPlT"<x_@gaA?X$FF?IDM@,8\!&P0!X#C`jQ1b6`K6@.!A^1FO-kxF%xp*lH%9eV+D9Fz&B@
2025-03-14 23:44:33 UTC	1369	IN	Data Raw: 80 03 1a 00 5c 81 44 00 c1 bc 38 04 a4 18 92 00 40 1c 49 0f 87 00 d5 0c 36 b1 87 42 36 2a cc 0d 69 40 17 de 70 88 0c f4 bb 20 01 c2 42 3c 0e f0 85 93 a9 c0 1d d6 88 bd 40 13 52 84 30 e4 ee b7 08 c9 81 ff 11 14 a0 08 74 58 2b 64 73 98 c4 cf d7 bf d8 0c b4 9f e4 27 69 c0 13 f0 2c 80 78 c0 9c 22 17 78 41 35 42 60 02 3e ec 4a 64 32 00 0b 46 e6 02 ee 47 70 07 d0 06 07 d0 02 67 30 09 a1 a6 7e 69 16 11 11 00 04 70 60 00 6d 60 0d 92 c0 3d 62 e7 2f b0 f6 0f f9 d7 01 3c 60 0e 13 10 2a 80 e0 7f 45 e7 7e 26 e8 7e 02 78 06 d8 30 4f 5f e0 7e 0f 88 50 0e 50 01 e4 30 01 19 90 06 8b d5 6d a1 62 0a 84 02 79 68 c2 04 c0 95 7f 4d 90 0c d6 80 09 87 56 0b 21 e8 73 eb 97 84 32 70 06 88 c6 6d 2f 28 10 a6 35 4f 04 17 07 ab 30 31 a4 25 6b 3f 00 82 30 f0 84 0a 11 1e ab c7 28 74 00 Data Ascii: \D8@I6B6i@p B<@R0tX+ds'i,x"xA5B`>Jd2FGpg0~ip`m`=b/<`E~&~x0O_~PP0mbyhMV!s2pm/(5O01%k?0(t
2025-03-14 23:44:33 UTC	1369	IN	Data Raw: 01 69 60 80 0d 05 70 43 16 0a 49 71 70 08 a4 f8 48 0b 11 01 e4 b0 06 6e d0 06 3a b2 27 66 e0 0e 65 20 04 d5 28 89 29 c0 0e e1 e0 48 4a fb 10 24 60 9e 09 f8 43 24 a0 02 3d 14 07 7e 43 11 29 d0 06 b4 60 5d 63 eb 10 24 00 08 2d 69 02 50 3b 10 35 30 03 21 d4 05 f7 d0 08 6f 40 04 15 50 01 78 a0 08 63 d4 03 9f 35 01 80 20 b1 d4 b2 0a 4d 70 02 3e 04 2b 04 d0 06 36 06 06 e6 00 08 d2 00 0d 20 8b 32 5f 23 0a 94 a0 03 46 f3 97 0e 40 0f 1c 74 3f 24 90 02 c6 40 04 8a 9b b4 02 51 04 c7 c0 8e 65 c9 7d 48 e0 09 6a 90 a3 7c b6 02 98 d4 05 05 40 05 5d e0 02 6e 40 5c 48 60 47 25 a0 03 da 26 aa 2a 01 00 6d 70 9b dd 85 11 ca c7 09 31 60 bc 13 a1 02 c7 06 0b 92 e8 4e 2f 30 45 92 b7 57 4f 60 08 c9 e0 65 30 80 ac 4f ff a8 7c 60 20 b3 17 a1 02 e5 60 64 01 95 03 8d 40 08 cd 70 90 Data Ascii: i`pCIqpHn:'fe ()HJ$`C$=~C)`]c$-iP;50!o@Pxc5 Mp>+6 2_#F@t?$@Qe}Hj\|@]n@\H`G%&*mp1`N/0EWO`e0O\|` `d@p
2025-03-14 23:44:33 UTC	1369	IN	Data Raw: 10 c0 56 e4 d3 01 9d 6e 06 3c 10 0c 0c e0 09 1b 90 07 10 e0 06 16 00 02 e7 e0 b4 f2 59 ad 35 40 07 9c 30 09 5a 69 2c 9a f2 05 ea 1e a2 7f 8c 41 9e fa 0a d4 cb e7 03 41 79 c9 40 08 77 1d 20 56 b0 08 71 e0 dd 33 a1 c5 18 90 96 dd 9c 11 05 00 07 46 00 00 58 c0 4d ed b2 10 c7 32 03 0e 90 36 e6 60 28 47 2e b5 85 90 d3 05 30 b0 ab 90 0c 3c 40 0a 40 30 01 3f c7 85 05 f0 04 3c 50 01 2d 20 02 ab d0 f0 0a f1 f0 0e 80 08 37 70 bf 4b fe 0f 0d ff 99 0c ee 40 d9 fd ba 10 e1 e1 00 3b b0 b5 ff a8 7a 9e c0 03 78 00 02 fb 90 a4 d5 6a 73 11 e3 00 00 50 01 84 70 70 23 ee 00 d8 f0 f2 71 40 c4 7d 39 03 77 a0 31 11 89 01 11 c0 02 e3 b3 01 3b 90 04 65 00 04 94 00 02 d9 de 01 bf 4b 60 3c 60 05 d1 b6 84 07 c0 9c 56 f3 02 6e 66 d9 f1 1a 07 b5 90 01 c8 50 04 12 f3 1b 45 70 02 c2 b2 Data Ascii: Vn<Y5@0Zi,AAy@w Vq3FXM26`(G.0<@@0?<P- 7pK@;zxjsPpp#q@}9w1;eK`<`VnfPEp
2025-03-14 23:44:33 UTC	1369	IN	Data Raw: ce e3 02 7a ba 39 c2 1a 01 fe 10 a0 08 a5 a9 2b 02 3a f8 c8 92 04 54 27 39 6c 80 2d 20 f8 89 0c 60 01 08 12 8c a4 06 05 70 cf 21 26 60 82 17 e8 c0 08 3c ab 40 35 3c d8 ff 80 12 3c a0 1b bb 60 0c de 6a 02 00 76 20 00 01 33 78 05 29 a8 56 b5 ab 89 80 05 1b 60 01 38 42 20 04 3e b8 67 12 d4 aa 01 20 0e 71 88 01 bc c2 04 40 d0 41 08 34 80 87 0e 7a b0 1a c1 20 c2 13 00 21 83 12 4e 6b 24 92 33 c2 05 1a 80 88 3c 44 20 02 d8 c0 03 38 44 10 08 11 e8 02 1c 4d 88 84 11 5e 31 8c ae 3c 2e 65 23 b9 40 23 84 00 83 f6 4d 22 0e cd a8 4d 6d 26 31 01 5b 1c 81 10 4f cc c0 19 4c 54 a7 85 c4 23 03 5f 40 5f 44 22 e0 00 6c 1c 2b 1e ff 72 00 10 aa d1 84 35 20 00 03 0d 70 0e 16 36 20 bc 11 50 02 09 78 00 c3 11 0e 21 9e 02 1c f0 20 18 28 43 13 10 81 84 0a f4 41 03 c1 b0 5e 2b 2b 30 Data Ascii: z9+:T'9l- `p!&`<@5<<`jv 3x)V`8B >g q@A4z !Nk$3<D 8DM^1<.e#@#M"Mm&1[OLT#_@_D"l+r5 p6 Px! (CA^++0
2025-03-14 23:44:33 UTC	1369	IN	Data Raw: 26 f0 16 25 64 00 9d 08 1b 4a f2 d9 11 18 e7 e3 32 05 0d 80 4a 6d 34 c3 cd 9c 24 7f 12 51 61 df 24 45 d1 a1 22 f8 c0 05 6d 68 ed 15 84 71 80 49 20 1e de c0 d7 89 03 d2 83 f8 53 e1 10 15 80 81 68 b1 b9 03 78 87 74 29 02 8c 03 8e e0 1b a5 a3 13 06 cd 1b 09 c8 d0 02 3d e8 86 ae 00 19 0a 70 0f 58 80 85 e5 62 87 e2 5a ae 9d c3 00 26 18 1d 52 e9 23 17 90 96 2f 98 16 c5 13 3e 80 21 80 27 ea a5 06 64 c1 80 69 80 36 f8 9f e7 ab 89 14 50 11 ce 39 85 33 d8 a1 6b 93 41 20 94 c1 06 98 83 a6 fb 3e 15 b0 a2 89 cb 89 06 a0 80 43 b0 35 77 e3 32 2f c0 b2 d2 c1 b7 83 20 80 c9 7b 2d cb 9a a7 d6 fa ac 91 b0 93 ae 68 07 21 11 00 59 80 01 ba 02 04 9d 9b 81 5a 4b c2 83 20 81 02 90 96 ff 02 b8 28 68 28 80 23 54 c3 20 44 b6 19 c8 8c 3a c4 25 05 20 3f ba c3 89 14 48 15 a9 28 82 06 Data Ascii: &%dJ2Jm4$Qa$E"mhqI Shxt)=pXbZ&R#/>!'di6P93kA >C5w2/ {-h!YZK (h(#T D:% ?H(
2025-03-14 23:44:33 UTC	1369	IN	Data Raw: 41 42 9b 27 a4 09 04 7a fe 03 49 18 09 19 a0 e8 3f fb 98 a0 af 45 8a 34 62 cd 17 02 cd 5a f6 3f 67 f4 22 50 d8 02 e5 9e 51 63 02 bd 62 8e 39 02 1d 32 48 a7 19 19 be 51 23 06 17 54 4b 47 88 51 f4 44 1f 7d 72 df 4a 75 11 46 47 81 da 47 10 42 08 13 30 58 bf 15 ec 3f 24 d9 7d 1c c3 f9 c2 17 b0 71 88 4b b4 c1 10 5e 9b c4 d2 4a b2 0e 6e fc 23 40 18 49 81 44 fe f1 04 34 10 e2 1f 80 70 c1 70 60 10 ba 7f 74 41 0d 9a fb 87 1c 26 32 42 6a 3c e2 1f fa 98 c0 34 bc 75 9a 0e 5e e4 18 ff 40 c2 0e 92 50 b9 13 14 43 08 84 e8 c9 21 f8 70 08 27 5c f0 1f 9c 00 83 1a ff 20 64 9a 89 74 81 13 02 99 84 0b 32 30 8a 03 68 61 20 71 b0 5b 49 3a 11 8a 7f 1c c2 7e 93 99 00 37 60 30 09 8e 90 63 02 e5 ab 88 03 10 98 90 17 e8 e3 1f cc f0 49 1b 86 34 09 4b fc 63 42 04 d9 82 78 32 20 03 83 Data Ascii: AB'zI?E4bZ?g"PQcb92HQ#TKGQD}rJuFGGB0X?$}qK^Jn#@ID4pp`tA&2Bj<4u^@PC!p'\ dt20ha q[I:~7`0cI4KcBx2
2025-03-14 23:44:33 UTC	1369	IN	Data Raw: 31 53 f0 35 80 c0 ee 44 28 d6 3c 7c aa 54 96 b0 d0 b3 46 5a 02 06 8a 9c 65 63 62 d0 ee 44 74 30 04 a5 60 81 05 f1 88 5c 20 a8 f1 8f 3c 10 84 08 17 b4 2d cd 2d 02 f9 89 ec 0d 81 1c 8c 41 71 74 98 c3 1d c2 d7 e9 5d d9 44 2c 64 4c 92 00 17 7d 20 4b 1a be 55 c6 40 08 db fe a3 02 3f f0 7c ff 48 22 37 90 4e 28 b4 24 9d 1b a2 49 ce 30 0a 8b 6a a1 7c 05 fe 0f 7f 64 19 78 8b 98 92 22 63 10 08 0d 46 4e 11 07 64 8a 0a c5 40 1f 67 e0 42 e5 f0 04 49 62 02 87 80 06 ca 44 10 65 80 54 3e 71 04 93 a0 06 f4 d1 0d c8 91 01 5e d0 05 2e 90 51 73 d0 02 de 86 11 8f 84 4e 3e e1 3a 28 e2 13 0a 87 7d d5 33 11 ae 63 05 7d 36 11 e2 f7 11 74 90 05 e0 25 07 3c 00 6b 25 c1 0e ba f2 13 32 b0 59 23 51 7f 16 b1 09 82 50 09 c3 83 6b 05 a3 11 80 60 36 61 75 1d e0 e5 01 66 03 08 26 30 21 2c Data Ascii: 1S5D(<\|TFZecbDt0`\ <--Aqt]D,dL} KU@?\|H"7N($I0j\|dx"cFNd@gBIbDeT>q^.QsN>:(}3c}6t%<k%2Y#QPk`6auf&0!,

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.7	49711	87.240.129.133	443	4584	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2025-03-14 23:44:33 UTC	641	OUT	GET /images/mobile/faviconnew.ico?5 HTTP/1.1 Host: m.vk.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: http://u967289v.beget.tech/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-14 23:44:34 UTC	315	IN	HTTP/1.1 404 Not Found Server: kittenx Date: Fri, 14 Mar 2025 23:44:34 GMT Content-Type: text/html Content-Length: 550 Connection: close X-Frontend: front656800 Access-Control-Expose-Headers: X-Frontend X-Trace-Id: tachO_llAX41ObFfoWk9kTslh3NrSw Server-Timing: tid;desc="tachO_llAX41ObFfoWk9kTslh3NrSw"
2025-03-14 23:44:34 UTC	550	IN	Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 34 30 34 20 4e 6f 74 20 46 6f 75 6e 64 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 6b 69 74 74 65 6e 78 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d 65 20 66 72 69 65 6e 64 6c 79 20 65 72 72 6f 72 20 70 61 67 65 20 2d 2d 3e 0d 0a 3c 21 2d 2d 20 61 20 70 61 64 64 69 6e 67 20 74 6f 20 64 69 73 61 62 6c 65 20 4d 53 49 45 20 61 6e 64 20 43 68 72 6f 6d Data Ascii: <html><head><title>404 Not Found</title></head><body><center><h1>404 Not Found</h1></center><hr><center>kittenx</center></body></html>... a padding to disable MSIE and Chrome friendly error page -->... a padding to disable MSIE and Chrom

Statistics

CPU Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Memory Usage

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

Behavior

• chrome.exe
• chrome.exe
• chrome.exe

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3356, Parent PID: 3740

General

Target ID:	0
Start time:	19:44:16
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff778810000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Registry Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

COM Activities

WMI Operations

Show Windows behavior

Process Activities

Process Created

Process Terminated

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Windows UI Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Token Activities

Token Adjusted

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 4584, Parent PID: 3356

General

Target ID:	1
Start time:	19:44:16
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1996,i,11612777921652111643,6421684416541279251,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2092 /prefetch:3
Imagebase:	0x7ff778810000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

File Activities

File Opened

Show Windows behavior

Thread Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Memory Activities

Memory Usage Statistics

Show Windows behavior

Timing Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6432, Parent PID: 3740

General

Target ID:	5
Start time:	19:44:23
Start date:	14/03/2025
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://2gewf232.blogspot.com.au/"
Imagebase:	0x7ff778810000
File size:	3'388'000 bytes
MD5 hash:	E81F54E6C1129887AEA47E7D092680BF
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

File Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Process Activities

There is hidden Windows Behavior. Click on Show Windows Behavior to show it.

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly