Edit tour

Windows Analysis Report
https://u2587569.ct.sendgrid.net/ls/click?upn=u001.tNCzvDY7Bps68NDHX050sfuZjwcZnKCiceJckL-2B-2BdtgW4S9czNQzTHuxGTDYUy2rgldwS-2FXaSK9tb15A2WijtesF9nKvyaekU8V6epmALsKFNzS6qhT8Y0hQxsOJhohPcwmraeJIKZH9TyOwWHJmFuZBAHXDHHKqUVL-2FUGP0fxMK3MBdQxp6bY6Ha8NZBWkjR7mgJ5fMAAuHlcLpVUtqCKWF7-2BW-2FrkTigMom4or-2B8m-

Overview

General Information

Sample URL:	https://u2587569.ct.sendgrid.net/ls/click?upn=u001.tNCzvDY7Bps68NDHX050sfuZjwcZnKCiceJckL-2B-2BdtgW4S9czNQzTHuxGTDYUy2rgldwS-2FXaSK9tb15A2WijtesF9nKvyaekU8V6epmALsKFNzS6qhT8Y0hQxsOJhohPcwmraeJIKZH9TyO
Analysis ID:	1644527
Infos:

Detection

Score:	56
Range:	0 - 100
Confidence:	100%

Signatures

Antivirus detection for URL or domain

AI detected suspicious Javascript

HTML page contains obfuscated javascript

Creates files inside the system directory

Deletes files inside the Windows folder

Detected suspicious crossdomain redirect

Classification

Process Tree

System is w10x64

chrome.exe (PID: 5444 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6196 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2008,i,191190474938600747,13182119129826723574,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2036 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 7248 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u2587569.ct.sendgrid.net/ls/click?upn=u001.tNCzvDY7Bps68NDHX050sfuZjwcZnKCiceJckL-2B-2BdtgW4S9czNQzTHuxGTDYUy2rgldwS-2FXaSK9tb15A2WijtesF9nKvyaekU8V6epmALsKFNzS6qhT8Y0hQxsOJhohPcwmraeJIKZH9TyOwWHJmFuZBAHXDHHKqUVL-2FUGP0fxMK3MBdQxp6bY6Ha8NZBWkjR7mgJ5fMAAuHlcLpVUtqCKWF7-2BW-2FrkTigMom4or-2B8m-2FS4TyrdjqGrNF-2BS24W1HEc4Nny-2FQbpl5Jr7z80HD8ERxHFxRHxDPLk-2B4YAHJEAIhKPImdnrMMiJGr9A4uEtPP39M5paIcI5sxlMhNL6z-2BKgTbMjlWBJaVVTxeufFQoFkl5u4NmsI44p17fSNIf2kHaYMMtnw0u0ApwVb9wZ3tJmp8AGgV65F1zRvnrFTPWISLatDmHGN3CKd73qRTLKmto5ZSsX3-2BwDUXMaUslNCFnOeOBvQkBDvUajrHfQmlQGD0zklpJ9WRzeYfjf4q-2Bc4Qu1Nf91VjDSdu48kXA2Z83MvwnSyKbPC863DiAR29AdxPmi1nIgYKk06DgcAWMuq2ENVqbbCQtUVgtZaYHCTljloaWego9b111Sg-2Be7K5sjWZvL10Fd-2Fe8x58DkwbvBNZsy8kmn2mGi8qVqTeWx9-2Brhlr4k1qrS1CvUmSqedu0NrwPQeaJupno6T-2Bqo-2BzulaLbvdWFreaPwNJ5CTaPVCN9fpvhUAzUS-2FlWTTCA-2FnSuCPTscXiBnW-2B4ungzp4n8Lqpuk6XGZd1rraYdTpcYsjIFBAluxLUtcFe1RkWRujzmOwPcDxwpZgxVj9TsDAzb4JrMPmBN2Sin7qgSZpDFxIb3yOVqUu9FExdB-2Fwpe-2FOokwr4-3D8A5E_-2FOI-2FxWKZBS0RBubCQDq4P71qBkOoJj9TQ-2FBNKjRykiT9mUix5aObCdsaE3X4Sh22h5PBW1VseZKNRSMsHcEXChaxx4fpyalr8S5mdNAGDIFE0BdGE6SFPQC1ze3qi3ZOs99VkecPMd3ju7N-2BWWYyJE6xPy-2FgXhUKDOj-2BkfDKJ8KqABvqtFGuxd5KhNBGU7VDh7BHPjKSbdGclNFQCojq4NR0NeZ6xwwI2wKPGRZHpHU-3D" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

HTTP traffic detected: POST /m/script.php HTTP/1.1Host: td8pnjn8vd.gunorkernt.shopConnection: keep-aliveContent-Length: 220sec-ch-ua-platform: "Windows"X-Requested-With: XMLHttpRequestUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: */*sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: application/x-www-form-urlencoded; charset=UTF-8sec-ch-ua-mobile: ?0Origin: https://td8pnjn8vd.gunorkernt.shopSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htmAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm

Source: chromecache_68.4.dr	String found in binary or memory: https://acctcdn.msauth.net/images/clear1x1.png
Source: chromecache_71.4.dr, chromecache_58.4.dr	String found in binary or memory: https://getbootstrap.com/)
Source: chromecache_71.4.dr, chromecache_58.4.dr	String found in binary or memory: https://github.com/twbs/bootstrap/blob/main/LICENSE)
Source: chromecache_58.4.dr	String found in binary or memory: https://github.com/twbs/bootstrap/graphs/contributors)
Source: chromecache_69.4.dr	String found in binary or memory: https://td8pnjn8vd.gunorkernt.shop/?email=

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49738
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49732
Source: unknown	Network traffic detected: HTTP traffic on port 49732 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49726
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49725
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49723
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49725 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49745 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49680 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49738 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49726 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49723 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49745

Source: unknown	HTTPS traffic detected: 142.250.80.100:443 -> 192.168.2.4:49723 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 167.89.115.54:443 -> 192.168.2.4:49726 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 167.89.115.54:443 -> 192.168.2.4:49725 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 54.88.205.141:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.136.41.133:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 103.136.41.133:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 204.79.197.222:443 -> 192.168.2.4:49732 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.80.1:443 -> 192.168.2.4:49734 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.228.199:443 -> 192.168.2.4:49738 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.228.199:443 -> 192.168.2.4:49737 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 151.101.1.229:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.228.199:443 -> 192.168.2.4:49747 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.228.199:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.228.199:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.228.199:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.228.199:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.228.199:443 -> 192.168.2.4:49755 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 162.0.228.199:443 -> 192.168.2.4:49754 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.26.12.205:443 -> 192.168.2.4:49756 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir5444_499361894

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir5444_499361894

Jump to behavior

Source: classification engine

Classification label: mal56.phis.win@24/30@18/9

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2008,i,191190474938600747,13182119129826723574,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2036 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://u2587569.ct.sendgrid.net/ls/click?upn=u001.tNCzvDY7Bps68NDHX050sfuZjwcZnKCiceJckL-2B-2BdtgW4S9czNQzTHuxGTDYUy2rgldwS-2FXaSK9tb15A2WijtesF9nKvyaekU8V6epmALsKFNzS6qhT8Y0hQxsOJhohPcwmraeJIKZH9TyOwWHJmFuZBAHXDHHKqUVL-2FUGP0fxMK3MBdQxp6bY6Ha8NZBWkjR7mgJ5fMAAuHlcLpVUtqCKWF7-2BW-2FrkTigMom4or-2B8m-2FS4TyrdjqGrNF-2BS24W1HEc4Nny-2FQbpl5Jr7z80HD8ERxHFxRHxDPLk-2B4YAHJEAIhKPImdnrMMiJGr9A4uEtPP39M5paIcI5sxlMhNL6z-2BKgTbMjlWBJaVVTxeufFQoFkl5u4NmsI44p17fSNIf2kHaYMMtnw0u0ApwVb9wZ3tJmp8AGgV65F1zRvnrFTPWISLatDmHGN3CKd73qRTLKmto5ZSsX3-2BwDUXMaUslNCFnOeOBvQkBDvUajrHfQmlQGD0zklpJ9WRzeYfjf4q-2Bc4Qu1Nf91VjDSdu48kXA2Z83MvwnSyKbPC863DiAR29AdxPmi1nIgYKk06DgcAWMuq2ENVqbbCQtUVgtZaYHCTljloaWego9b111Sg-2Be7K5sjWZvL10Fd-2Fe8x58DkwbvBNZsy8kmn2mGi8qVqTeWx9-2Brhlr4k1qrS1CvUmSqedu0NrwPQeaJupno6T-2Bqo-2BzulaLbvdWFreaPwNJ5CTaPVCN9fpvhUAzUS-2FlWTTCA-2FnSuCPTscXiBnW-2B4ungzp4n8Lqpuk6XGZd1rraYdTpcYsjIFBAluxLUtcFe1RkWRujzmOwPcDxwpZgxVj9TsDAzb4JrMPmBN2Sin7qgSZpDFxIb3yOVqUu9FExdB-2Fwpe-2FOokwr4-3D8A5E_-2FOI-2FxWKZBS0RBubCQDq4P71qBkOoJj9TQ-2FBNKjRykiT9mUix5aObCdsaE3X4Sh22h5PBW1VseZKNRSMsHcEXChaxx4fpyalr8S5mdNAGDIFE0BdGE6SFPQC1ze3qi3ZOs99VkecPMd3ju7N-2BWWYyJE6xPy-2FgXhUKDOj-2BkfDKJ8KqABvqtFGuxd5KhNBGU7VDh7BHPjKSbdGclNFQCojq4NR0NeZ6xwwI2wKPGRZHpHU-3D"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2008,i,191190474938600747,13182119129826723574,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2036 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	1 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	1 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://u2587569.ct.sendgrid.net/ls/click?upn=u001.tNCzvDY7Bps68NDHX050sfuZjwcZnKCiceJckL-2B-2BdtgW4S9czNQzTHuxGTDYUy2rgldwS-2FXaSK9tb15A2WijtesF9nKvyaekU8V6epmALsKFNzS6qhT8Y0hQxsOJhohPcwmraeJIKZH9TyOwWHJmFuZBAHXDHHKqUVL-2FUGP0fxMK3MBdQxp6bY6Ha8NZBWkjR7mgJ5fMAAuHlcLpVUtqCKWF7-2BW-2FrkTigMom4or-2B8m-2FS4TyrdjqGrNF-2BS24W1HEc4Nny-2FQbpl5Jr7z80HD8ERxHFxRHxDPLk-2B4YAHJEAIhKPImdnrMMiJGr9A4uEtPP39M5paIcI5sxlMhNL6z-2BKgTbMjlWBJaVVTxeufFQoFkl5u4NmsI44p17fSNIf2kHaYMMtnw0u0ApwVb9wZ3tJmp8AGgV65F1zRvnrFTPWISLatDmHGN3CKd73qRTLKmto5ZSsX3-2BwDUXMaUslNCFnOeOBvQkBDvUajrHfQmlQGD0zklpJ9WRzeYfjf4q-2Bc4Qu1Nf91VjDSdu48kXA2Z83MvwnSyKbPC863DiAR29AdxPmi1nIgYKk06DgcAWMuq2ENVqbbCQtUVgtZaYHCTljloaWego9b111Sg-2Be7K5sjWZvL10Fd-2Fe8x58DkwbvBNZsy8kmn2mGi8qVqTeWx9-2Brhlr4k1qrS1CvUmSqedu0NrwPQeaJupno6T-2Bqo-2BzulaLbvdWFreaPwNJ5CTaPVCN9fpvhUAzUS-2FlWTTCA-2FnSuCPTscXiBnW-2B4ungzp4n8Lqpuk6XGZd1rraYdTpcYsjIFBAluxLUtcFe1RkWRujzmOwPcDxwpZgxVj9TsDAzb4JrMPmBN2Sin7qgSZpDFxIb3yOVqUu9FExdB-2Fwpe-2FOokwr4-3D8A5E_-2FOI-2FxWKZBS0RBubCQDq4P71qBkOoJj9TQ-2FBNKjRykiT9mUix5aObCdsaE3X4Sh22h5PBW1VseZKNRSMsHcEXChaxx4fpyalr8S5mdNAGDIFE0BdGE6SFPQC1ze3qi3ZOs99VkecPMd3ju7N-2BWWYyJE6xPy-2FgXhUKDOj-2BkfDKJ8KqABvqtFGuxd5KhNBGU7VDh7BHPjKSbdGclNFQCojq4NR0NeZ6xwwI2wKPGRZHpHU-3D	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://td8pnjn8vd.gunorkernt.shop/m/jx/441V77G2MHV18PBQ60D4C1YQ5	100%	Avira URL Cloud	malware
https://td8pnjn8vd.gunorkernt.shop/m/bxg/2T5ROP9O6ZJUGPOAF2HOYWL1C	100%	Avira URL Cloud	malware
https://td8pnjn8vd.gunorkernt.shop/m/sm/PE9YVHTL1WS5L3FABUDP58EUZ	100%	Avira URL Cloud	malware
https://machavehospital.com/neonatology/?__s=ipcjgtcyvvsmz6hk4c89&utm_source=drip&utm_medium=email&utm_campaign=We+got+a+makeover.	0%	Avira URL Cloud	safe
https://td8pnjn8vd.gunorkernt.shop/m/script.php	100%	Avira URL Cloud	malware
https://td8pnjn8vd.gunorkernt.shop/m/mxl/mlg.svg?IB673HQYGLLHSLRGMQBS7MJQG	100%	Avira URL Cloud	malware
https://td8pnjn8vd.gunorkernt.shop/m/ecpt/XE9AJT1ZW0VSHVB5EZALISR07	100%	Avira URL Cloud	malware
https://td8pnjn8vd.gunorkernt.shop/m/ic/DX0UK8HRC9PKKWTYRMG90JHH6	100%	Avira URL Cloud	malware
https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htm	100%	Avira URL Cloud	malware
https://machavehospital.com/neonatology?__s=ipcjgtcyvvsmz6hk4c89&utm_source=drip&utm_medium=email&utm_campaign=We+got+a+makeover.	0%	Avira URL Cloud	safe
https://td8pnjn8vd.gunorkernt.shop/m/mxl/sig_op.svg	100%	Avira URL Cloud	malware
https://td8pnjn8vd.gunorkernt.shop/m/cxx/OEXYWW0AEFF8PKKCT0SQ8T2TT	100%	Avira URL Cloud	malware
https://td8pnjn8vd.gunorkernt.shop/m/aty/83KL7RSVDI9M8H9TBAOJOZG8I	100%	Avira URL Cloud	malware
https://onlineverifcaion85uhgsgsf.hometownasphaltpavingvirginiabeach.com/	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
machavehospital.com	103.136.41.133	true	false	unknown
jsdelivr.map.fastly.net	151.101.1.229	true	false	high
u2587569.ct.sendgrid.net	167.89.115.54	true	false	unknown
t.dripemail2.com	54.88.205.141	true	false	high
onlineverifcaion85uhgsgsf.hometownasphaltpavingvirginiabeach.com	104.21.80.1	true	false	unknown
td8pnjn8vd.gunorkernt.shop	162.0.228.199	true	true	unknown
www.google.com	142.250.80.100	true	false	high
api.ipify.org	104.26.12.205	true	false	high
cdn.jsdelivr.net	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htm	false	Avira URL Cloud: malware	unknown
https://td8pnjn8vd.gunorkernt.shop/m/ecpt/XE9AJT1ZW0VSHVB5EZALISR07	false	Avira URL Cloud: malware	unknown
https://td8pnjn8vd.gunorkernt.shop/m/bxg/2T5ROP9O6ZJUGPOAF2HOYWL1C	false	Avira URL Cloud: malware	unknown
https://t.dripemail2.com/c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzQyNDgzMTEwLCJuYmYiOjE3NDI0ODMxMTAsImFjY291bnRfaWQiOiI2NDQwOTQ3IiwiZGVsaXZlcnlfaWQiOiJ4Z3Byd2xsdnEwOGxiamozMXJnYiIsInRva2VuIjoieGdwcndsbHZxMDhsYmpqMzFyZ2IiLCJzZW5kX2F0IjoxNzQyNDgyMDI3LCJlbWFpbF9pZCI6MTA1MDc3NzcsImVtYWlsYWJsZV90eXBlIjoiQnJvYWRjYXN0IiwiZW1haWxhYmxlX2lkIjo0MTkzMDI2LCJ1cmwiOiJodHRwczovL21hY2hhdmVob3NwaXRhbC5jb20vbmVvbmF0b2xvZ3k_X19zPWlwY2pndGN5dnZzbXo2aGs0Yzg5JnV0bV9zb3VyY2U9ZHJpcCZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj1XZStnb3QrYSttYWtlb3Zlci4ifQ.tL9IQCYASpwR6w7BClklA9J0ParkMFoTzf0mseayUIE	false		high
https://td8pnjn8vd.gunorkernt.shop/m/mxl/mlg.svg?IB673HQYGLLHSLRGMQBS7MJQG	false	Avira URL Cloud: malware	unknown
https://td8pnjn8vd.gunorkernt.shop/m/ic/DX0UK8HRC9PKKWTYRMG90JHH6	false	Avira URL Cloud: malware	unknown
https://td8pnjn8vd.gunorkernt.shop/m/script.php	false	Avira URL Cloud: malware	unknown
https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/css/bootstrap.min.css	false		high
https://td8pnjn8vd.gunorkernt.shop/m/jx/441V77G2MHV18PBQ60D4C1YQ5	false	Avira URL Cloud: malware	unknown
https://api.ipify.org/?format=json	false		high
https://machavehospital.com/neonatology?__s=ipcjgtcyvvsmz6hk4c89&utm_source=drip&utm_medium=email&utm_campaign=We+got+a+makeover.	false	Avira URL Cloud: safe	unknown
https://td8pnjn8vd.gunorkernt.shop/m/sm/PE9YVHTL1WS5L3FABUDP58EUZ	false	Avira URL Cloud: malware	unknown
https://machavehospital.com/neonatology/?__s=ipcjgtcyvvsmz6hk4c89&utm_source=drip&utm_medium=email&utm_campaign=We+got+a+makeover.	false	Avira URL Cloud: safe	unknown
https://td8pnjn8vd.gunorkernt.shop/m/aty/83KL7RSVDI9M8H9TBAOJOZG8I	false	Avira URL Cloud: malware	unknown
https://td8pnjn8vd.gunorkernt.shop/m/mxl/sig_op.svg	false	Avira URL Cloud: malware	unknown
https://td8pnjn8vd.gunorkernt.shop/m/cxx/OEXYWW0AEFF8PKKCT0SQ8T2TT	false	Avira URL Cloud: malware	unknown
https://td8pnjn8vd.gunorkernt.shop/?email=	true		unknown
https://onlineverifcaion85uhgsgsf.hometownasphaltpavingvirginiabeach.com/	false	Avira URL Cloud: safe	unknown
https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js	false		high

URLs from Memory and Binaries

Name	Source	Malicious	Reputation
https://github.com/twbs/bootstrap/graphs/contributors)	chromecache_58.4.dr	false	high
https://github.com/twbs/bootstrap/blob/main/LICENSE)	chromecache_71.4.dr, chromecache_58.4.dr	false	high
https://getbootstrap.com/)	chromecache_71.4.dr, chromecache_58.4.dr	false	high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
151.101.1.229	jsdelivr.map.fastly.net	United States	54113	FASTLYUS	false
104.26.12.205	api.ipify.org	United States	13335	CLOUDFLARENETUS	false
142.250.80.100	www.google.com	United States	15169	GOOGLEUS	false
103.136.41.133	machavehospital.com	India	139884	AGPL-AS-APApeironGlobalPvtLtdIN	false
167.89.115.54	u2587569.ct.sendgrid.net	United States	11377	SENDGRIDUS	false
104.21.80.1	onlineverifcaion85uhgsgsf.hometownasphaltpavingvirginiabeach.com	United States	13335	CLOUDFLARENETUS	false
54.88.205.141	t.dripemail2.com	United States	14618	AMAZON-AESUS	false
162.0.228.199	td8pnjn8vd.gunorkernt.shop	Canada	22612	NAMECHEAP-NETUS	true

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1644527
Start date and time:	2025-03-20 16:48:13 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://u2587569.ct.sendgrid.net/ls/click?upn=u001.tNCzvDY7Bps68NDHX050sfuZjwcZnKCiceJckL-2B-2BdtgW4S9czNQzTHuxGTDYUy2rgldwS-2FXaSK9tb15A2WijtesF9nKvyaekU8V6epmALsKFNzS6qhT8Y0hQxsOJhohPcwmraeJIKZH9TyOwWHJmFuZBAHXDHHKqUVL-2FUGP0fxMK3MBdQxp6bY6Ha8NZBWkjR7mgJ5fMAAuHlcLpVUtqCKWF7-2BW-2FrkTigMom4or-2B8m-2FS4TyrdjqGrNF-2BS24W1HEc4Nny-2FQbpl5Jr7z80HD8ERxHFxRHxDPLk-2B4YAHJEAIhKPImdnrMMiJGr9A4uEtPP39M5paIcI5sxlMhNL6z-2BKgTbMjlWBJaVVTxeufFQoFkl5u4NmsI44p17fSNIf2kHaYMMtnw0u0ApwVb9wZ3tJmp8AGgV65F1zRvnrFTPWISLatDmHGN3CKd73qRTLKmto5ZSsX3-2BwDUXMaUslNCFnOeOBvQkBDvUajrHfQmlQGD0zklpJ9WRzeYfjf4q-2Bc4Qu1Nf91VjDSdu48kXA2Z83MvwnSyKbPC863DiAR29AdxPmi1nIgYKk06DgcAWMuq2ENVqbbCQtUVgtZaYHCTljloaWego9b111Sg-2Be7K5sjWZvL10Fd-2Fe8x58DkwbvBNZsy8kmn2mGi8qVqTeWx9-2Brhlr4k1qrS1CvUmSqedu0NrwPQeaJupno6T-2Bqo-2BzulaLbvdWFreaPwNJ5CTaPVCN9fpvhUAzUS-2FlWTTCA-2FnSuCPTscXiBnW-2B4ungzp4n8Lqpuk6XGZd1rraYdTpcYsjIFBAluxLUtcFe1RkWRujzmOwPcDxwpZgxVj9TsDAzb4JrMPmBN2Sin7qgSZpDFxIb3yOVqUu9FExdB-2Fwpe-2FOokwr4-3D8A5E_-2FOI-2FxWKZBS0RBubCQDq4P71qBkOoJj9TQ-2FBNKjRykiT9mUix5aObCdsaE3X4Sh22h5PBW1VseZKNRSMsHcEXChaxx4fpyalr8S5mdNAGDIFE0BdGE6SFPQC1ze3qi3ZOs99VkecPMd3ju7N-2BWWYyJE6xPy-2FgXhUKDOj-2BkfDKJ8KqABvqtFGuxd5KhNBGU7VDh7BHPjKSbdGclNFQCojq4NR0NeZ6xwwI2wKPGRZHpHU-3D
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	19
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal56.phis.win@24/30@18/9

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.65.174, 142.250.80.99, 142.250.64.78, 172.253.115.84, 142.251.40.110, 142.250.80.46, 142.251.32.110, 199.232.214.172, 23.203.176.221, 23.210.73.6, 142.251.40.142, 142.250.65.238, 142.250.80.110, 142.251.41.10, 142.251.40.170, 142.250.72.106, 142.251.40.138, 142.250.80.106, 142.250.64.74, 142.250.64.106, 142.250.65.170, 142.250.80.74, 142.251.40.202, 142.250.65.202, 142.250.65.234, 142.250.80.10, 142.250.80.42, 142.251.40.234, 142.250.176.202, 142.250.81.227, 142.251.41.14, 142.251.40.174, 142.251.40.227, 142.250.80.78, 184.31.69.3, 4.175.87.197
Excluded domains from analysis (whitelisted): fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, slscr.update.microsoft.com, ctldl.windowsupdate.com, clientservices.googleapis.com, fe3cr.delivery.mp.microsoft.com, clients2.google.com, ocsp.digicert.com, edgedl.me.gvt1.com, redirector.gvt1.com, update.googleapis.com, clients.l.google.com, c.pki.goog
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://u2587569.ct.sendgrid.net/ls/click?upn=u001.tNCzvDY7Bps68NDHX050sfuZjwcZnKCiceJckL-2B-2BdtgW4S9czNQzTHuxGTDYUy2rgldwS-2FXaSK9tb15A2WijtesF9nKvyaekU8V6epmALsKFNzS6qhT8Y0hQxsOJhohPcwmraeJIKZH9TyOwWHJmFuZBAHXDHHKqUVL-2FUGP0fxMK3MBdQxp6bY6Ha8NZBWkjR7mgJ5fMAAuHlcLpVUtqCKWF7-2BW-2FrkTigMom4or-2B8m-2FS4TyrdjqGrNF-2BS24W1HEc4Nny-2FQbpl5Jr7z80HD8ERxHFxRHxDPLk-2B4YAHJEAIhKPImdnrMMiJGr9A4uEtPP39M5paIcI5sxlMhNL6z-2BKgTbMjlWBJaVVTxeufFQoFkl5u4NmsI44p17fSNIf2kHaYMMtnw0u0ApwVb9wZ3tJmp8AGgV65F1zRvnrFTPWISLatDmHGN3CKd73qRTLKmto5ZSsX3-2BwDUXMaUslNCFnOeOBvQkBDvUajrHfQmlQGD0zklpJ9WRzeYfjf4q-2Bc4Qu1Nf91VjDSdu48kXA2Z83MvwnSyKbPC863DiAR29AdxPmi1nIgYKk06DgcAWMuq2ENVqbbCQtUVgtZaYHCTljloaWego9b111Sg-2Be7K5sjWZvL10Fd-2Fe8x58DkwbvBNZsy8kmn2mGi8qVqTeWx9-2Brhlr4k1qrS1CvUmSqedu0NrwPQeaJupno6T-2Bqo-2BzulaLbvdWFreaPwNJ5CTaPVCN9fpvhUAzUS-2FlWTTCA-2FnSuCPTscXiBnW-2B4ungzp4n8Lqpuk6XGZd1rraYdTpcYsjIFBAluxLUtcFe1RkWRujzmOwPcDxwpZgxVj9TsDAzb4JrMPmBN2Sin7qgSZpDFxIb3yOVqUu9FExdB-2Fwpe-2FOokwr4-3D8A5E_-2FOI-2FxWKZBS0RBu

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	assembler source, ASCII text, with very long lines (1680), with CRLF line terminators
Category:	downloaded
Size (bytes):	108159
Entropy (8bit):	5.196780313715235
Encrypted:	false
SSDEEP:	768:3LUJAxdD1p1MQLnyAUXETVyyf8TSYGiB3hw8aZdZVXpgd7FJEZ4TfDt3DaIGTBML:3L4Ax1+euSY/B3hw8xd7FJEeDaIGTBML
MD5:	E3D75AA9A72BC3FC164CF84DF12CA2D4
SHA1:	16C3E732C1C4F72F28128C115CDE77D85C7DB5B0
SHA-256:	6B95363E75460560EC869EBF93B3B4333988C32A81F6280F61791581F1DD08ED
SHA-512:	636A03D04A20FE86EE16E849E5EE86AB799BCAC30C4989B7E664F8306A1A59CAC5A44BB486408190BC9F9CC15655414643D1EA29F6CA80F84930ECB6F869E031
Malicious:	false
Reputation:	low
URL:	https://td8pnjn8vd.gunorkernt.shop/m/sm/PE9YVHTL1WS5L3FABUDP58EUZ
Preview:	html { font-family: sans-serif; text-size-adjust: 100%; }..body { margin: 0px; }..article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block; }..audio, canvas, progress, video { display: inline-block; vertical-align: baseline; }..audio:not([controls]) { display: none; height: 0px; }..[hidden], template { display: none; }..a { background-color: transparent; }..a:active, a:hover { outline: 0px; }..abbr[title] { border-bottom: 1px dotted; }..b, strong { font-weight: bold; }..dfn { font-style: italic; }..h1 { font-size: 2em; margin: 0.67em 0px; }..mark { background: rgb(255, 255, 0); color: rgb(0, 0, 0); }..small { font-size: 80%; }..sub, sup { font-size: 75%; line-height: 0; position: relative; vertical-align: baseline; }..sup { top: -0.5em; }..sub { bottom: -0.25em; }..img { border: 0px; }..svg:not(:root) { overflow: hidden; }..figure { margin: 1em 40px; }..hr { box-sizing: content-box; height: 0px; }..pre { overflow: auto; }..

Source: https://td8pnjn8vd.gunorkernt.shop/m/jx/441V77G2MHV18PBQ60D4C1YQ5	Avira URL Cloud: Label: malware
Source: https://td8pnjn8vd.gunorkernt.shop/m/bxg/2T5ROP9O6ZJUGPOAF2HOYWL1C	Avira URL Cloud: Label: malware
Source: https://td8pnjn8vd.gunorkernt.shop/m/sm/PE9YVHTL1WS5L3FABUDP58EUZ	Avira URL Cloud: Label: malware
Source: https://td8pnjn8vd.gunorkernt.shop/m/script.php	Avira URL Cloud: Label: malware
Source: https://td8pnjn8vd.gunorkernt.shop/m/mxl/mlg.svg?IB673HQYGLLHSLRGMQBS7MJQG	Avira URL Cloud: Label: malware
Source: https://td8pnjn8vd.gunorkernt.shop/m/ecpt/XE9AJT1ZW0VSHVB5EZALISR07	Avira URL Cloud: Label: malware
Source: https://td8pnjn8vd.gunorkernt.shop/m/ic/DX0UK8HRC9PKKWTYRMG90JHH6	Avira URL Cloud: Label: malware
Source: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htm	Avira URL Cloud: Label: malware
Source: https://td8pnjn8vd.gunorkernt.shop/m/mxl/sig_op.svg	Avira URL Cloud: Label: malware
Source: https://td8pnjn8vd.gunorkernt.shop/m/cxx/OEXYWW0AEFF8PKKCT0SQ8T2TT	Avira URL Cloud: Label: malware
Source: https://td8pnjn8vd.gunorkernt.shop/m/aty/83KL7RSVDI9M8H9TBAOJOZG8I	Avira URL Cloud: Label: malware

Source: 1.2..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://td8pnjn8vd.gunorkernt.shop/?email=... This script exhibits several high-risk behaviors, including dynamic code execution, data exfiltration, and obfuscated code/URLs. It uses the `eval` function to execute remote or dynamic code, sends user data to external servers, and heavily obfuscates its code and URLs. Additionally, the script sets a cookie and redirects the user to an unknown location after a delay, which is highly suspicious behavior. Overall, this script demonstrates a clear intent to perform malicious activities and should be considered a high-risk threat.
Source: 0.0..script.csv	Joe Sandbox AI: Detected suspicious JavaScript with source url: https://onlineverifcaion85uhgsgsf.hometownasphaltp... This script exhibits high-risk behaviors, including dynamic code execution (using the window.location.hash and replacing the hash) and data exfiltration (sending the hash value to an external domain). The use of an obfuscated URL (gunorkernt.shop) further increases the risk. While the intent is not explicitly malicious, the combination of these factors suggests a high likelihood of this script being used for malicious purposes, such as phishing or credential theft.

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: u2587569.ct.sendgrid.net to https://t.dripemail2.com/c/eyjhbgcioijiuzi1nij9.eyjhdwqioijkzxrvdxiilcjpc3mioijtb25vbgl0acisinn1yii6imrldg91cl9saw5riiwiawf0ijoxnzqyndgzmtewlcjuymyioje3ndi0odmxmtasimfjy291bnrfawqioii2ndqwotq3iiwizgvsaxzlcnlfawqioij4z3byd2xsdnewogxiamozmxjnyiisinrva2vuijoiegdwcndsbhzxmdhsympqmzfyz2iilcjzzw5kx2f0ijoxnzqyndgymdi3lcjlbwfpbf9pzci6mta1mdc3nzcsimvtywlsywjszv90exblijoiqnjvywrjyxn0iiwizw1hawxhymxlx2lkijo0mtkzmdi2lcj1cmwioijodhrwczovl21hy2hhdmvob3nwaxrhbc5jb20vbmvvbmf0b2xvz3k_x19zpwlwy2pndgn5dnzzbxo2ags0yzg5jnv0bv9zb3vyy2u9zhjpccz1dg1fbwvkaxvtpwvtywlsjnv0bv9jyw1wywlnbj1xzstnb3qrysttywtlb3zlci4ifq.tl9iqcyaspwr6w7bclkla9j0parkmfotzf0mseayuie
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: machavehospital.com to http://onlineverifcaion85uhgsgsf.hometownasphaltpavingvirginiabeach.com/

Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.195
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.195
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.195
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.222
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.195
Source: unknown	TCP traffic detected without corresponding DNS query: 142.250.65.195
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /ls/click?upn=u001.tNCzvDY7Bps68NDHX050sfuZjwcZnKCiceJckL-2B-2BdtgW4S9czNQzTHuxGTDYUy2rgldwS-2FXaSK9tb15A2WijtesF9nKvyaekU8V6epmALsKFNzS6qhT8Y0hQxsOJhohPcwmraeJIKZH9TyOwWHJmFuZBAHXDHHKqUVL-2FUGP0fxMK3MBdQxp6bY6Ha8NZBWkjR7mgJ5fMAAuHlcLpVUtqCKWF7-2BW-2FrkTigMom4or-2B8m-2FS4TyrdjqGrNF-2BS24W1HEc4Nny-2FQbpl5Jr7z80HD8ERxHFxRHxDPLk-2B4YAHJEAIhKPImdnrMMiJGr9A4uEtPP39M5paIcI5sxlMhNL6z-2BKgTbMjlWBJaVVTxeufFQoFkl5u4NmsI44p17fSNIf2kHaYMMtnw0u0ApwVb9wZ3tJmp8AGgV65F1zRvnrFTPWISLatDmHGN3CKd73qRTLKmto5ZSsX3-2BwDUXMaUslNCFnOeOBvQkBDvUajrHfQmlQGD0zklpJ9WRzeYfjf4q-2Bc4Qu1Nf91VjDSdu48kXA2Z83MvwnSyKbPC863DiAR29AdxPmi1nIgYKk06DgcAWMuq2ENVqbbCQtUVgtZaYHCTljloaWego9b111Sg-2Be7K5sjWZvL10Fd-2Fe8x58DkwbvBNZsy8kmn2mGi8qVqTeWx9-2Brhlr4k1qrS1CvUmSqedu0NrwPQeaJupno6T-2Bqo-2BzulaLbvdWFreaPwNJ5CTaPVCN9fpvhUAzUS-2FlWTTCA-2FnSuCPTscXiBnW-2B4ungzp4n8Lqpuk6XGZd1rraYdTpcYsjIFBAluxLUtcFe1RkWRujzmOwPcDxwpZgxVj9TsDAzb4JrMPmBN2Sin7qgSZpDFxIb3yOVqUu9FExdB-2Fwpe-2FOokwr4-3D8A5E_-2FOI-2FxWKZBS0RBubCQDq4P71qBkOoJj9TQ-2FBNKjRykiT9mUix5aObCdsaE3X4Sh22h5PBW1VseZKNRSMsHcEXChaxx4fpyalr8S5mdNAGDIFE0BdGE6SFPQC1ze3qi3ZOs99VkecPMd3ju7N-2BWWYyJE6xPy-2FgXhUKDOj-2BkfDKJ8KqABvqtFGuxd5KhNBGU7VDh7BHPjKSbdGclNFQCojq4NR0NeZ6xwwI2wKPGRZHpHU-3D HTTP/1.1Host: u2587569.ct.sendgrid.netConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzQyNDgzMTEwLCJuYmYiOjE3NDI0ODMxMTAsImFjY291bnRfaWQiOiI2NDQwOTQ3IiwiZGVsaXZlcnlfaWQiOiJ4Z3Byd2xsdnEwOGxiamozMXJnYiIsInRva2VuIjoieGdwcndsbHZxMDhsYmpqMzFyZ2IiLCJzZW5kX2F0IjoxNzQyNDgyMDI3LCJlbWFpbF9pZCI6MTA1MDc3NzcsImVtYWlsYWJsZV90eXBlIjoiQnJvYWRjYXN0IiwiZW1haWxhYmxlX2lkIjo0MTkzMDI2LCJ1cmwiOiJodHRwczovL21hY2hhdmVob3NwaXRhbC5jb20vbmVvbmF0b2xvZ3k_X19zPWlwY2pndGN5dnZzbXo2aGs0Yzg5JnV0bV9zb3VyY2U9ZHJpcCZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj1XZStnb3QrYSttYWtlb3Zlci4ifQ.tL9IQCYASpwR6w7BClklA9J0ParkMFoTzf0mseayUIE HTTP/1.1Host: t.dripemail2.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /neonatology?__s=ipcjgtcyvvsmz6hk4c89&utm_source=drip&utm_medium=email&utm_campaign=We+got+a+makeover. HTTP/1.1Host: machavehospital.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /neonatology/?__s=ipcjgtcyvvsmz6hk4c89&utm_source=drip&utm_medium=email&utm_campaign=We+got+a+makeover. HTTP/1.1Host: machavehospital.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: onlineverifcaion85uhgsgsf.hometownasphaltpavingvirginiabeach.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?email= HTTP/1.1Host: td8pnjn8vd.gunorkernt.shopConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://onlineverifcaion85uhgsgsf.hometownasphaltpavingvirginiabeach.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.3.2/dist/css/bootstrap.min.css HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://td8pnjn8vd.gunorkernt.shopsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: styleReferer: https://td8pnjn8vd.gunorkernt.shop/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js HTTP/1.1Host: cdn.jsdelivr.netConnection: keep-aliveOrigin: https://td8pnjn8vd.gunorkernt.shopsec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://td8pnjn8vd.gunorkernt.shop/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?email= HTTP/1.1Host: td8pnjn8vd.gunorkernt.shopConnection: keep-aliveCache-Control: max-age=0sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentReferer: https://td8pnjn8vd.gunorkernt.shop/?email=Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1
Source: global traffic	HTTP traffic detected: GET /m/3d268d1ef2c2d2b47e0a97194edf7116.htm HTTP/1.1Host: td8pnjn8vd.gunorkernt.shopConnection: keep-aliveCache-Control: max-age=0Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: same-originSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Referer: https://td8pnjn8vd.gunorkernt.shop/?email=Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
Source: global traffic	HTTP traffic detected: GET /m/cxx/OEXYWW0AEFF8PKKCT0SQ8T2TT HTTP/1.1Host: td8pnjn8vd.gunorkernt.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htmAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
Source: global traffic	HTTP traffic detected: GET /m/sm/PE9YVHTL1WS5L3FABUDP58EUZ HTTP/1.1Host: td8pnjn8vd.gunorkernt.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htmAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
Source: global traffic	HTTP traffic detected: GET /m/jx/441V77G2MHV18PBQ60D4C1YQ5 HTTP/1.1Host: td8pnjn8vd.gunorkernt.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htmAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
Source: global traffic	HTTP traffic detected: GET /m/mxl/mlg.svg?IB673HQYGLLHSLRGMQBS7MJQG HTTP/1.1Host: td8pnjn8vd.gunorkernt.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htmAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
Source: global traffic	HTTP traffic detected: GET /m/mxl/sig_op.svg HTTP/1.1Host: td8pnjn8vd.gunorkernt.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htmAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
Source: global traffic	HTTP traffic detected: GET /m/aty/83KL7RSVDI9M8H9TBAOJOZG8I HTTP/1.1Host: td8pnjn8vd.gunorkernt.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htmAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
Source: global traffic	HTTP traffic detected: GET /m/ecpt/XE9AJT1ZW0VSHVB5EZALISR07 HTTP/1.1Host: td8pnjn8vd.gunorkernt.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htmAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
Source: global traffic	HTTP traffic detected: GET /m/mxl/mlg.svg?IB673HQYGLLHSLRGMQBS7MJQG HTTP/1.1Host: td8pnjn8vd.gunorkernt.shopConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
Source: global traffic	HTTP traffic detected: GET /m/mxl/sig_op.svg HTTP/1.1Host: td8pnjn8vd.gunorkernt.shopConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
Source: global traffic	HTTP traffic detected: GET /m/bxg/2T5ROP9O6ZJUGPOAF2HOYWL1C HTTP/1.1Host: td8pnjn8vd.gunorkernt.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htmAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api.ipify.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/javascript, /; q=0.01sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://td8pnjn8vd.gunorkernt.shopSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://td8pnjn8vd.gunorkernt.shop/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /m/ic/DX0UK8HRC9PKKWTYRMG90JHH6 HTTP/1.1Host: td8pnjn8vd.gunorkernt.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htmAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
Source: global traffic	HTTP traffic detected: GET /r/gsr1.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog
Source: global traffic	HTTP traffic detected: GET /r/r4.crl HTTP/1.1Cache-Control: max-age = 3000Connection: Keep-AliveAccept: /If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMTUser-Agent: Microsoft-CryptoAPI/10.0Host: c.pki.goog

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: u2587569.ct.sendgrid.net
Source: global traffic	DNS traffic detected: DNS query: t.dripemail2.com
Source: global traffic	DNS traffic detected: DNS query: machavehospital.com
Source: global traffic	DNS traffic detected: DNS query: onlineverifcaion85uhgsgsf.hometownasphaltpavingvirginiabeach.com
Source: global traffic	DNS traffic detected: DNS query: td8pnjn8vd.gunorkernt.shop
Source: global traffic	DNS traffic detected: DNS query: cdn.jsdelivr.net
Source: global traffic	DNS traffic detected: DNS query: api.ipify.org

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 20, 2025 16:49:26.406984091 CET	53	50090	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:26.454436064 CET	53	65135	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:27.226309061 CET	53	53004	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:27.745675087 CET	60392	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:27.745795012 CET	64917	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:27.848911047 CET	53	64917	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:27.848978043 CET	53	60392	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:31.725075006 CET	62493	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:31.725191116 CET	58956	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:31.832433939 CET	53	62493	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:31.835714102 CET	53	58956	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:32.268965006 CET	51065	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:32.269109011 CET	53316	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:32.378798962 CET	53	51065	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:32.379097939 CET	53	53316	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:32.972742081 CET	64555	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:32.972925901 CET	49687	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:33.237452984 CET	53	49687	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:33.237519979 CET	53	64555	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:34.387465954 CET	52445	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:34.387737989 CET	52773	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:34.509362936 CET	53	52773	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:34.512875080 CET	53	52445	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:35.523180962 CET	63638	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:35.523487091 CET	57827	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:35.835428953 CET	53	57827	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:35.835822105 CET	53	63638	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:37.048255920 CET	55004	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:37.048393965 CET	51194	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:37.159163952 CET	53	55004	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:37.159223080 CET	53	51194	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:44.297738075 CET	53	61418	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:46.284953117 CET	61379	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:46.285116911 CET	52357	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:46.594609976 CET	53	52357	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:46.596421003 CET	53	61379	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:49.568634987 CET	59742	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:49.568830013 CET	56129	53	192.168.2.4	1.1.1.1
Mar 20, 2025 16:49:49.676057100 CET	53	59742	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:49.678445101 CET	53	56129	1.1.1.1	192.168.2.4
Mar 20, 2025 16:49:51.226403952 CET	53	65130	1.1.1.1	192.168.2.4
Mar 20, 2025 16:50:03.231265068 CET	53	57402	1.1.1.1	192.168.2.4
Mar 20, 2025 16:50:20.224338055 CET	138	138	192.168.2.4	192.168.2.255
Mar 20, 2025 16:50:25.957118988 CET	53	58404	1.1.1.1	192.168.2.4
Mar 20, 2025 16:50:25.987716913 CET	53	65309	1.1.1.1	192.168.2.4
Mar 20, 2025 16:50:28.373236895 CET	53	53874	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
Mar 20, 2025 16:49:34.503674984 CET	202	OUT	GET /r/gsr1.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Tue, 07 Jan 2025 07:28:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 20, 2025 16:49:34.606657982 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 20 Mar 2025 15:29:48 GMT Expires: Thu, 20 Mar 2025 16:19:48 GMT Age: 1186 Last-Modified: Tue, 07 Jan 2025 07:28:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding
Mar 20, 2025 16:49:34.617528915 CET	200	OUT	GET /r/r4.crl HTTP/1.1 Cache-Control: max-age = 3000 Connection: Keep-Alive Accept: / If-Modified-Since: Thu, 25 Jul 2024 14:48:00 GMT User-Agent: Microsoft-CryptoAPI/10.0 Host: c.pki.goog
Mar 20, 2025 16:49:34.718137026 CET	223	IN	HTTP/1.1 304 Not Modified Date: Thu, 20 Mar 2025 15:20:24 GMT Expires: Thu, 20 Mar 2025 16:10:24 GMT Age: 1750 Last-Modified: Thu, 25 Jul 2024 14:48:00 GMT Cache-Control: public, max-age=3000 Vary: Accept-Encoding

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:32 UTC	1873	OUT	GET /ls/click?upn=u001.tNCzvDY7Bps68NDHX050sfuZjwcZnKCiceJckL-2B-2BdtgW4S9czNQzTHuxGTDYUy2rgldwS-2FXaSK9tb15A2WijtesF9nKvyaekU8V6epmALsKFNzS6qhT8Y0hQxsOJhohPcwmraeJIKZH9TyOwWHJmFuZBAHXDHHKqUVL-2FUGP0fxMK3MBdQxp6bY6Ha8NZBWkjR7mgJ5fMAAuHlcLpVUtqCKWF7-2BW-2FrkTigMom4or-2B8m-2FS4TyrdjqGrNF-2BS24W1HEc4Nny-2FQbpl5Jr7z80HD8ERxHFxRHxDPLk-2B4YAHJEAIhKPImdnrMMiJGr9A4uEtPP39M5paIcI5sxlMhNL6z-2BKgTbMjlWBJaVVTxeufFQoFkl5u4NmsI44p17fSNIf2kHaYMMtnw0u0ApwVb9wZ3tJmp8AGgV65F1zRvnrFTPWISLatDmHGN3CKd73qRTLKmto5ZSsX3-2BwDUXMaUslNCFnOeOBvQkBDvUajrHfQmlQGD0zklpJ9WRzeYfjf4q-2Bc4Qu1Nf91VjDSdu48kXA2Z83MvwnSyKbPC863DiAR29AdxPmi1nIgYKk06DgcAWMuq2ENVqbbCQtUVgtZaYHCTljloaWego9b111Sg-2Be7K5sjWZvL10Fd-2Fe8x58DkwbvBNZsy8kmn2mGi8qVqTeWx9-2Brhlr4k1qrS1CvUmSqedu0NrwPQeaJupno6T-2Bqo-2BzulaLbvdWFreaPwNJ5CTaPVCN9fpvhUAzUS-2FlWTTCA-2FnSuCPTscXiBnW-2B4ungzp4n8Lqpuk6XGZd1rraYdTpcYsjIFBAluxLUtcFe1RkWRujzmOwPcDxwpZgxVj9TsDAzb4JrMPmBN2Sin7qgSZpDFxIb3yOVqUu9FExdB-2Fwpe-2FOokwr4-3D8A5E_-2FOI-2FxWKZBS0RBubCQDq4P71qBkOoJj9TQ-2FBNKjRykiT9mUix5aObCdsaE3X4Sh22 [TRUNCATED] Host: u2587569.ct.sendgrid.net Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:49:32 UTC	837	IN	HTTP/1.1 302 Found Server: nginx Date: Thu, 20 Mar 2025 15:49:32 GMT Content-Type: text/html; charset=utf-8 Content-Length: 661 Connection: close Location: https://t.dripemail2.com/c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzQyNDgzMTEwLCJuYmYiOjE3NDI0ODMxMTAsImFjY291bnRfaWQiOiI2NDQwOTQ3IiwiZGVsaXZlcnlfaWQiOiJ4Z3Byd2xsdnEwOGxiamozMXJnYiIsInRva2VuIjoieGdwcndsbHZxMDhsYmpqMzFyZ2IiLCJzZW5kX2F0IjoxNzQyNDgyMDI3LCJlbWFpbF9pZCI6MTA1MDc3NzcsImVtYWlsYWJsZV90eXBlIjoiQnJvYWRjYXN0IiwiZW1haWxhYmxlX2lkIjo0MTkzMDI2LCJ1cmwiOiJodHRwczovL21hY2hhdmVob3NwaXRhbC5jb20vbmVvbmF0b2xvZ3k_X19zPWlwY2pndGN5dnZzbXo2aGs0Yzg5JnV0bV9zb3VyY2U9ZHJpcCZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj1XZStnb3QrYSttYWtlb3Zlci4ifQ.tL9IQCYASpwR6w7BClklA9J0ParkMFoTzf0mseayUIE X-Robots-Tag: noindex, nofollow
2025-03-20 15:49:32 UTC	661	IN	Data Raw: 3c 61 20 68 72 65 66 3d 22 68 74 74 70 73 3a 2f 2f 74 2e 64 72 69 70 65 6d 61 69 6c 32 2e 63 6f 6d 2f 63 2f 65 79 4a 68 62 47 63 69 4f 69 4a 49 55 7a 49 31 4e 69 4a 39 2e 65 79 4a 68 64 57 51 69 4f 69 4a 6b 5a 58 52 76 64 58 49 69 4c 43 4a 70 63 33 4d 69 4f 69 4a 74 62 32 35 76 62 47 6c 30 61 43 49 73 49 6e 4e 31 59 69 49 36 49 6d 52 6c 64 47 39 31 63 6c 39 73 61 57 35 72 49 69 77 69 61 57 46 30 49 6a 6f 78 4e 7a 51 79 4e 44 67 7a 4d 54 45 77 4c 43 4a 75 59 6d 59 69 4f 6a 45 33 4e 44 49 30 4f 44 4d 78 4d 54 41 73 49 6d 46 6a 59 32 39 31 62 6e 52 66 61 57 51 69 4f 69 49 32 4e 44 51 77 4f 54 51 33 49 69 77 69 5a 47 56 73 61 58 5a 6c 63 6e 6c 66 61 57 51 69 4f 69 4a 34 5a 33 42 79 64 32 78 73 64 6e 45 77 4f 47 78 69 61 6d 6f 7a 4d 58 4a 6e 59 69 49 73 49 6e Data Ascii: <a href="https://t.dripemail2.com/c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzQyNDgzMTEwLCJuYmYiOjE3NDI0ODMxMTAsImFjY291bnRfaWQiOiI2NDQwOTQ3IiwiZGVsaXZlcnlfaWQiOiJ4Z3Byd2xsdnEwOGxiamozMXJnYiIsIn

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:32 UTC	1279	OUT	GET /c/eyJhbGciOiJIUzI1NiJ9.eyJhdWQiOiJkZXRvdXIiLCJpc3MiOiJtb25vbGl0aCIsInN1YiI6ImRldG91cl9saW5rIiwiaWF0IjoxNzQyNDgzMTEwLCJuYmYiOjE3NDI0ODMxMTAsImFjY291bnRfaWQiOiI2NDQwOTQ3IiwiZGVsaXZlcnlfaWQiOiJ4Z3Byd2xsdnEwOGxiamozMXJnYiIsInRva2VuIjoieGdwcndsbHZxMDhsYmpqMzFyZ2IiLCJzZW5kX2F0IjoxNzQyNDgyMDI3LCJlbWFpbF9pZCI6MTA1MDc3NzcsImVtYWlsYWJsZV90eXBlIjoiQnJvYWRjYXN0IiwiZW1haWxhYmxlX2lkIjo0MTkzMDI2LCJ1cmwiOiJodHRwczovL21hY2hhdmVob3NwaXRhbC5jb20vbmVvbmF0b2xvZ3k_X19zPWlwY2pndGN5dnZzbXo2aGs0Yzg5JnV0bV9zb3VyY2U9ZHJpcCZ1dG1fbWVkaXVtPWVtYWlsJnV0bV9jYW1wYWlnbj1XZStnb3QrYSttYWtlb3Zlci4ifQ.tL9IQCYASpwR6w7BClklA9J0ParkMFoTzf0mseayUIE HTTP/1.1 Host: t.dripemail2.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:49:32 UTC	251	IN	HTTP/1.1 307 Temporary Redirect Date: Thu, 20 Mar 2025 15:49:32 GMT Content-Length: 0 Connection: close Location: https://machavehospital.com/neonatology?__s=ipcjgtcyvvsmz6hk4c89&utm_source=drip&utm_medium=email&utm_campaign=We+got+a+makeover.

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (65299)
Category:	downloaded
Size (bytes):	80663
Entropy (8bit):	5.204798779868606
Encrypted:	false
SSDEEP:	1536:Qmw0iELO+TBR2t472RirWyKsVfK5GEfy3YJtCRv/45wZbqbXZTbYWU178:VwXza3YCl45wZODZTbYR8
MD5:	6BAF57F25796C332144ED58A2A0CD9EE
SHA1:	F7FD0F3DC84B2CF93BF81E832505A673F354E0A3
SHA-256:	82F64F62BB03C1BC1824B0F9C9E05F70DBA33E146818E63CDF5C306C8CF3DEDD
SHA-512:	5FF6240D9CA34DFE30C9CD95CB5E981823C7C0063CAD9258F8F3A0A24663401DA684844524272410673A6325FD78DB0F7E7D0FCD3844B8DB3EB9AA2613908EE8
Malicious:	false
Reputation:	low
URL:	https://cdn.jsdelivr.net/npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js
Preview:	/!. Bootstrap v5.3.2 (https://getbootstrap.com/). * Copyright 2011-2023 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors). * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE). */.!function(t,e){"object"==typeof exports&&"undefined"!=typeof module?module.exports=e():"function"==typeof define&&define.amd?define(e):(t="undefined"!=typeof globalThis?globalThis:t\|\|self).bootstrap=e()}(this,(function(){"use strict";const t=new Map,e={set(e,i,n){t.has(e)\|\|t.set(e,new Map);const s=t.get(e);s.has(i)\|\|0===s.size?s.set(i,n):console.error(`Bootstrap doesn't allow more than one instance per element. Bound instance: ${Array.from(s.keys())[0]}.`)},get:(e,i)=>t.has(e)&&t.get(e).get(i)\|\|null,remove(e,i){if(!t.has(e))return;const n=t.get(e);n.delete(i),0===n.size&&t.delete(e)}},i="transitionend",n=t=>(t&&window.CSS&&window.CSS.escape&&(t=t.replace(/#([^\s"#']+)/g,((t,e)=>`#${CSS.escape(e)}`))),t),s=t=>{t.dispatchEvent(new Event(i))},o=t=>!(!t\|\|"o

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	MS Windows icon resource - 6 icons, -128x-128, 16 colors, 72x72, 16 colors
Category:	downloaded
Size (bytes):	17174
Entropy (8bit):	2.9129715116732746
Encrypted:	false
SSDEEP:	24:QSNTmTFxg4lyyyyyyyyyyyyyio7eeeeeeeeekzgsLsLsLsLsLsQZp:nfgyyyyyyyyyyyyynzQQQQQO
MD5:	12E3DAC858061D088023B2BD48E2FA96
SHA1:	E08CE1A144ECEAE0C3C2EA7A9D6FBC5658F24CE5
SHA-256:	90CDAF487716184E4034000935C605D1633926D348116D198F355A98B8C6CD21
SHA-512:	C5030C55A855E7A9E20E22F4C70BF1E0F3C558A9B7D501CFAB6992AC2656AE5E41B050CCAC541EFA55F9603E0D349B247EB4912EE169D44044271789C719CD01
Malicious:	false
Reputation:	low
URL:	https://td8pnjn8vd.gunorkernt.shop/m/ic/DX0UK8HRC9PKKWTYRMG90JHH6
Preview:	..............h(..f...HH...........(..00......h....6.. ...........=...............@..........(....A..(....................(....................................."P.........................................."""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333"""""""""""""""""""""""""""""" ...333333333333333333333333333333""""""""""""""""""""""""""

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	SVG Scalable Vector Graphics image
Category:	dropped
Size (bytes):	1592
Entropy (8bit):	4.205005284721148
Encrypted:	false
SSDEEP:	48:ztSAS1OtmCtc7aIVmt4yyR9S2lKUyDWwh:RoOtmCtc7aCmVQHSRh
MD5:	4E48046CE74F4B89D45037C90576BFAC
SHA1:	4A41B3B51ED787F7B33294202DA72220C7CD2C32
SHA-256:	8E6DB1634F1812D42516778FC890010AA57F3E39914FB4803DF2C38ABBF56D93
SHA-512:	B2BBA2A68EDAA1A08CFA31ED058AFB5E6A3150AABB9A78DB9F5CCC2364186D44A015986A57707B57E2CC855FA7DA57861AD19FC4E7006C2C239C98063FE903CF
Malicious:	false
Reputation:	low
Preview:	<svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,1,19,30a10.9,10.9,0,0,1-5.547-1.5,11.106,11.106,0,0,1-2.219-1.719A11.373,11.373,0,0,1,9.5,24.547a10.4,10.4,0,0,1-1.109-2.625A11.616,11.616,0,0,1,8,19a10.9,10.9,0,0,1,1.5-5.547,11.106,11.106,0,0,1,1.719-2.219A11.373,11.373,0,0,1,13.453,9.5a10.4,10.4,0,0,1,2.625-1.109A11.616,11.616,0,0,1,19,8a10.9,10.9,0,0,1,5.547,1.5,11.106,11.106,0,0,1,2.219,1.719A11.373,11.373,0,0,1,28.5,13.453a10.4,10.4,0,0,1,1.109,2.625A11.616,11.616,0,0,1,30,19a10.015,10.015,0,0,1-.125,1.578,10.879,10.879,0,0,1-.359,1.531Zm-2,.844L27.219,22.641a14.716,14.716,0,0,0,.562-1.782A7.751,7.751,0,0,0,28,19a8.786,8.786,0,0,0-.7-3.5,8.9,8.9,0,0,0-1.938-2.859A9.269,9.269,0,0,0,22.5,10.719,8.9,8.9,0,0,0,19,10a8.786,8.786,0,0,0-3.5.7,8.9,8.9,0,0,0-2.859,1.938A9.269,9.269,0,0,0,

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:33 UTC	770	OUT	GET /neonatology?__s=ipcjgtcyvvsmz6hk4c89&utm_source=drip&utm_medium=email&utm_campaign=We+got+a+makeover. HTTP/1.1 Host: machavehospital.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:49:33 UTC	456	IN	HTTP/1.1 301 Moved Permanently Connection: close content-type: text/html content-length: 795 date: Thu, 20 Mar 2025 15:49:33 GMT location: https://machavehospital.com/neonatology/?__s=ipcjgtcyvvsmz6hk4c89&utm_source=drip&utm_medium=email&utm_campaign=We+got+a+makeover. alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"
2025-03-20 15:49:33 UTC	795	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 73 74 79 6c 65 3d 22 68 65 69 67 68 74 3a 31 30 30 25 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2c 20 73 68 72 69 6e 6b 2d 74 6f 2d 66 69 74 3d 6e 6f 22 20 2f 3e 0a 3c 74 69 74 6c 65 3e 20 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 0d 0a 3c 2f 74 69 74 6c 65 3e 3c 73 74 79 6c 65 3e 40 6d 65 64 69 61 20 28 70 72 65 66 65 72 73 2d 63 6f 6c 6f 72 2d 73 63 68 65 6d 65 3a 64 61 72 6b 29 7b 62 6f 64 79 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 23 30 30 30 21 69 6d 70 6f 72 74 61 6e Data Ascii: <!DOCTYPE html><html style="height:100%"><head><meta name="viewport" content="width=device-width, initial-scale=1, shrink-to-fit=no" /><title> 301 Moved Permanently</title><style>@media (prefers-color-scheme:dark){body{background-color:#000!importan

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:33 UTC	771	OUT	GET /neonatology/?__s=ipcjgtcyvvsmz6hk4c89&utm_source=drip&utm_medium=email&utm_campaign=We+got+a+makeover. HTTP/1.1 Host: machavehospital.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:49:34 UTC	462	IN	HTTP/1.1 302 Found Connection: close location: http://onlineverifcaion85uhgsgsf.hometownasphaltpavingvirginiabeach.com/ content-type: text/html; charset=UTF-8 content-length: 0 date: Thu, 20 Mar 2025 15:49:34 GMT cache-control: no-cache, no-store, must-revalidate, max-age=0 alt-svc: h3=":443"; ma=2592000, h3-29=":443"; ma=2592000, h3-Q050=":443"; ma=2592000, h3-Q046=":443"; ma=2592000, h3-Q043=":443"; ma=2592000, quic=":443"; ma=2592000; v="43,46"

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:34 UTC	714	OUT	GET / HTTP/1.1 Host: onlineverifcaion85uhgsgsf.hometownasphaltpavingvirginiabeach.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:49:35 UTC	272	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:49:35 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Server: cloudflare Vary: Accept-Encoding Cf-Cache-Status: DYNAMIC CF-RAY: 92365c3d583d728c-EWR alt-svc: h3=":443"; ma=86400
2025-03-20 15:49:35 UTC	330	IN	Data Raw: 31 34 33 0d 0a 3c 73 63 72 69 70 74 3e 20 0d 0a 20 20 20 20 20 76 61 72 20 67 6d 6f 64 65 20 3d 27 61 27 3b 0d 0a 20 20 20 20 20 20 76 61 72 20 67 67 20 3d 27 27 3b 0d 0a 20 20 20 20 20 69 66 28 67 6d 6f 64 65 3d 3d 27 61 27 29 7b 0d 0a 20 20 20 20 20 20 20 20 20 76 61 72 20 68 61 73 68 20 3d 20 77 69 6e 64 6f 77 2e 6c 6f 63 61 74 69 6f 6e 2e 68 61 73 68 3b 0d 0a 20 20 20 20 63 6c 65 61 6e 68 61 73 68 20 3d 20 68 61 73 68 2e 72 65 70 6c 61 63 65 28 22 23 22 2c 20 22 22 29 3b 20 20 20 0d 0a 7d 65 6c 73 65 7b 0d 0a 20 20 20 0d 0a 20 20 20 20 20 63 6c 65 61 6e 68 61 73 68 3d 67 67 3b 0d 0a 7d 0d 0a 20 20 20 0d 0a 0d 0a 20 20 20 20 76 61 72 20 6c 69 6e 6b 78 3d 22 68 74 74 70 73 3a 2f 2f 74 64 38 70 6e 6a 6e 38 76 64 2e 67 75 6e 6f 72 6b 65 72 6e 74 2e 73 68 Data Ascii: 143<script> var gmode ='a'; var gg =''; if(gmode=='a'){ var hash = window.location.hash; cleanhash = hash.replace("#", ""); }else{ cleanhash=gg;} var linkx="https://td8pnjn8vd.gunorkernt.sh
2025-03-20 15:49:35 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:36 UTC	753	OUT	GET /?email= HTTP/1.1 Host: td8pnjn8vd.gunorkernt.shop Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://onlineverifcaion85uhgsgsf.hometownasphaltpavingvirginiabeach.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:49:37 UTC	421	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:49:36 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.2.2 X-Powered-By: PHP/7.4.33 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; path=/ Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-20 15:49:37 UTC	7771	IN	Data Raw: 31 66 63 36 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 20 32 46 44 38 30 42 53 54 55 49 55 57 52 4d 4a 59 51 33 34 48 3e 3c 68 65 61 64 3e 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 68 6f 72 74 63 75 74 20 69 63 6f 6e 22 20 68 72 65 66 3d 22 64 61 74 61 3a 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 3b 2c 20 42 50 51 4b 53 31 34 4f 45 58 33 5a 54 38 46 4c 45 46 50 50 22 20 74 79 70 65 3d 22 69 6d 61 67 65 2f 78 2d 69 63 6f 6e 22 3e 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 2f 3e 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 Data Ascii: 1fc6<!DOCTYPE html><html lang="en" 2FD80BSTUIUWRMJYQ34H><head> <meta charset="UTF-8"> <link rel="shortcut icon" href="data:image/x-icon;, BPQKS14OEX3ZT8FLEFPP" type="image/x-icon"> <meta http-equiv="X-UA-Compatible" content="IE=edge"/> <meta name="viewp
2025-03-20 15:49:37 UTC	369	IN	Data Raw: 2c 30 2c 2e 31 29 3b 7d 0d 0a 2e 67 6f 6f 67 2d 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 7b 70 6f 73 69 74 69 6f 6e 3a 72 65 6c 61 74 69 76 65 3b 64 69 73 70 6c 61 79 3a 2d 6d 6f 7a 2d 69 6e 6c 69 6e 65 2d 62 6f 78 3b 64 69 73 70 6c 61 79 3a 69 6e 6c 69 6e 65 2d 62 6c 6f 63 6b 3b 7d 0d 0a 2e 78 6d 63 61 70 74 63 68 61 2d 63 68 65 63 6b 62 6f 78 7b 62 6f 72 64 65 72 3a 6e 6f 6e 65 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 70 78 3b 68 65 69 67 68 74 3a 32 38 70 78 3b 6d 61 72 67 69 6e 3a 34 70 78 3b 77 69 64 74 68 3a 32 38 70 78 3b 6f 76 65 72 66 6c 6f 77 3a 76 69 73 69 62 6c 65 3b 6f 75 74 6c 69 6e 65 3a 30 3b 76 65 72 74 69 63 61 6c 2d 61 6c 69 67 6e 3a 74 65 78 74 2d 62 6f 74 74 6f 6d 3b 7d 0d 0a 2e 78 6d 63 61 70 74 63 68 61 2d 63 68 65 63 6b 62 6f 78 2d 62 6f 72 Data Ascii: ,0,.1);}.goog-inline-block{position:relative;display:-moz-inline-box;display:inline-block;}.xmcaptcha-checkbox{border:none;font-size:1px;height:28px;margin:4px;width:28px;overflow:visible;outline:0;vertical-align:text-bottom;}.xmcaptcha-checkbox-bor
2025-03-20 15:49:37 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:37 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 31 63 31 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 70 78 3b 68 65 69 67 68 74 3a 32 34 70 78 3b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 3b 77 69 64 74 68 3a 32 34 70 78 3b 7a 2d 69 6e 64 65 78 3a 31 3b 7d 0d 0a 2e 78 6d 63 61 70 74 63 68 61 2d 63 68 65 63 6b 62 6f 78 2d 62 6f 72 64 65 72 41 6e 69 6d 61 74 69 6f 6e 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 69 6d 61 67 65 3a 75 72 6c 28 64 61 74 61 3a 69 6d 61 67 65 2f 70 6e 67 3b 62 61 73 65 36 34 2c 69 56 42 4f 52 77 30 4b 47 67 6f 41 41 41 41 4e 53 55 68 45 55 67 41 41 41 46 51 41 41 41 4e 49 43 41 59 41 41 41 42 5a 6c 38 69 38 41 41 41 41 42 6d 4a 4c 52 30 51 41 2f 77 44 2f 41 50 2b 67 76 61 65 54 41 41 41 41 43 58 42 49 57 58 4d 41 41 41 42 49 41 41 41 41 53 41 42 47 79 57 73 2b 41 41 Data Ascii: 1f401c1;font-size:1px;height:24px;position:absolute;width:24px;z-index:1;}.xmcaptcha-checkbox-borderAnimation{background-image:url(data:image/png;base64,iVBORw0KGgoAAAANSUhEUgAAAFQAAANICAYAAABZl8i8AAAABmJLR0QA/wD/AP+gvaeTAAAACXBIWXMAAABIAAAASABGyWs+AA
2025-03-20 15:49:37 UTC	7822	IN	Data Raw: 2b 54 65 78 2f 54 59 57 2f 2f 6e 70 33 51 4f 48 4c 41 50 31 31 50 74 35 36 6e 6b 6d 46 62 39 65 75 54 69 31 62 6c 6a 74 4d 2b 49 41 76 41 2f 54 4d 66 46 30 63 6d 55 34 41 54 6a 2b 39 54 75 33 62 46 78 34 6d 38 73 4b 48 67 54 6b 39 6e 35 66 76 65 76 42 66 43 75 76 55 4a 5a 66 55 71 66 33 37 67 38 4e 45 48 75 51 31 4d 46 64 6e 66 66 41 68 44 78 61 59 76 36 36 31 6c 59 43 63 65 57 61 64 2b 76 68 6a 2f 7a 43 52 46 6e 6b 4d 54 50 6a 34 75 6d 79 42 47 4b 6a 6e 38 41 75 74 36 6c 54 48 6a 6e 58 71 6a 6a 76 71 31 4f 72 56 36 55 48 69 47 74 49 67 72 59 47 4a 76 4f 63 45 33 56 63 36 30 6a 66 70 54 75 4c 2f 4c 69 58 32 69 6b 34 39 31 59 7a 63 34 38 59 5a 34 52 6a 6e 57 6d 2f 55 49 63 39 4a 73 6f 32 63 48 75 77 77 72 54 39 70 37 55 69 78 68 65 78 70 42 36 63 5a 4a 67 Data Ascii: +Tex/TYW//np3QOHLAP11Pt56nkmFb9euTi1bljtM+IAvA/TMfF0cmU4ATj+9Tu3bFx4m8sKHgTk9n5fvevBfCuvUJZfUqf37g8NEHuQ1MFdnffAhDxaYv661lYCceWad+vhj/zCRFnkMTPj4umyBGKjn8Aut6lTHjnXqjjvq1OrV6UHiGtIgrYGJvOcE3Vc60jfpTuL/LiX2ik491Yzc48YZ4RjnWm/UIc9Jso2cHuwwrT9p7UixhexpB6cZJg
2025-03-20 15:49:37 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:37 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 49 31 71 2f 69 66 68 35 71 50 49 67 37 7a 77 59 55 48 74 6e 4b 5a 6d 45 73 7a 46 69 78 65 72 62 64 75 32 68 5a 71 50 49 67 2f 79 77 6f 63 46 74 58 4f 61 6d 6d 6c 67 6e 6e 43 43 55 69 2b 39 70 46 52 54 69 48 65 6d 49 67 2f 79 77 6b 63 43 61 75 64 55 51 4f 2f 32 59 47 37 5a 6e 66 76 4c 57 65 48 44 67 6e 70 33 43 71 42 33 65 7a 41 50 48 4d 6a 39 48 79 6a 77 59 55 47 39 4f 77 58 51 75 2b 4d 77 31 36 37 4e 66 57 49 50 48 77 6d 6f 64 36 63 61 67 4b 6a 50 52 4f 31 79 5a 66 42 6c 39 61 6d 46 53 51 4d 51 39 5a 6d 6f 58 61 34 4d 76 71 77 2b 74 54 42 70 41 44 4a 39 4a 6d 71 58 4b 34 4f 76 52 4a 39 61 61 41 4d 64 45 73 55 43 53 64 4c 43 79 42 41 4c 36 4a 41 6f 46 6b 69 53 46 6b 61 47 57 45 43 48 78 50 76 4d 4a 6f 65 76 52 6f 61 76 52 4a 38 36 78 41 Data Ascii: 1f40I1q/ifh5qPIg7zwYUHtnKZmEszFixerbdu2hZqPIg/ywocFtXOammlgnnCCUi+9pFRTiHemIg/ywkcCaudUQO/2YG7ZnfvLWeHDgnp3CqB3ezAPHMj9HyjwYUG9OwXQu+Mw167NfWIPHwmod6cagKjPRO1yZfBl9amFSQMQ9ZmoXa4Mvqw+tTBpADJ9JmqXK4OvRJ9aaAMdEsUCSdLCyBAL6JAoFkiSFkaGWECHxPvMJoevRoavRJ86xA
2025-03-20 15:49:37 UTC	7822	IN	Data Raw: 2d 61 6e 63 68 6f 72 2d 63 6f 6e 74 65 6e 74 7b 68 65 69 67 68 74 3a 37 34 70 78 3b 77 69 64 74 68 3a 32 30 36 70 78 3b 7d 0d 0a 2e 72 63 2d 61 6e 63 68 6f 72 2d 63 68 65 63 6b 62 6f 78 7b 6d 61 72 67 69 6e 3a 30 20 31 32 70 78 20 32 70 78 20 31 32 70 78 3b 7d 0d 0a 2e 72 63 2d 61 6e 63 68 6f 72 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c 7b 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 52 6f 62 6f 74 6f 2c 68 65 6c 76 65 74 69 63 61 2c 61 72 69 61 6c 2c 73 61 6e 73 2d 73 65 72 69 66 3b 66 6f 6e 74 2d 73 69 7a 65 3a 31 34 70 78 3b 66 6f 6e 74 2d 77 65 69 67 68 74 3a 34 30 30 3b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 31 37 70 78 3b 7d 0d 0a 2e 72 63 2d 61 6e 63 68 6f 72 2d 6e 6f 72 6d 61 6c 20 2e 72 63 2d 61 6e 63 68 6f 72 2d 63 68 65 63 6b 62 6f 78 2d 6c 61 62 65 6c Data Ascii: -anchor-content{height:74px;width:206px;}.rc-anchor-checkbox{margin:0 12px 2px 12px;}.rc-anchor-checkbox-label{font-family:Roboto,helvetica,arial,sans-serif;font-size:14px;font-weight:400;line-height:17px;}.rc-anchor-normal .rc-anchor-checkbox-label
2025-03-20 15:49:37 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:37 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 20 69 64 3d 6c 6f 67 6f 3e 20 3c 64 69 76 20 69 64 3d 66 6c 61 70 43 6f 6e 74 61 69 6e 65 72 3e 20 3c 64 69 76 20 69 64 3d 6f 70 65 6e 65 64 46 6c 61 70 3e 20 3c 64 69 76 20 69 64 3d 66 6d 61 73 6b 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 66 6c 61 70 54 72 69 61 6e 67 6c 65 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 69 64 3d 63 61 6c 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 74 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 72 3e 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 31 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 32 20 54 43 50 44 44 4f 51 45 56 57 55 32 35 4a 4c 51 46 57 59 51 22 3e 3c 2f 64 69 76 3e 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 20 73 33 22 3e 3c 2f 64 69 76 3e Data Ascii: 1f40 id=logo> <div id=flapContainer> <div id=openedFlap> <div id=fmask> <div class=flapTriangle></div></div></div><div id=cal> <div class=t></div><div class=r> <div class="s s1"></div><div class="s s2 TCPDDOQEVWU25JLQFWYQ"></div><div class="s s3"></div>

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:37 UTC	634	OUT	GET /npm/bootstrap@5.3.2/dist/css/bootstrap.min.css HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://td8pnjn8vd.gunorkernt.shop sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: style Referer: https://td8pnjn8vd.gunorkernt.shop/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:49:37 UTC	756	IN	HTTP/1.1 200 OK Connection: close Content-Length: 232948 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: text/css; charset=utf-8 X-JSD-Version: 5.3.2 X-JSD-Version-Type: version ETag: W/"38df4-HxOZgbm0enZu+gphu3ito1HxbEs" Accept-Ranges: bytes Date: Thu, 20 Mar 2025 15:49:37 GMT Age: 1788941 X-Served-By: cache-fra-eddf8230169-FRA, cache-lga21924-LGA X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-20 15:49:37 UTC	16384	IN	Data Raw: 40 63 68 61 72 73 65 74 20 22 55 54 46 2d 38 22 3b 2f 2a 21 0a 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 20 76 35 2e 33 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 0a 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 2a 2f 3a 72 6f 6f 74 2c 5b 64 61 74 61 2d 62 73 2d 74 68 65 6d 65 3d 6c 69 67 68 74 5d 7b 2d 2d 62 73 2d 62 6c 75 65 3a 23 30 64 36 65 66 64 3b 2d 2d 62 73 2d 69 6e 64 69 67 6f 3a 23 36 36 Data Ascii: @charset "UTF-8";/! Bootstrap v5.3.2 (https://getbootstrap.com/) * Copyright 2011-2023 The Bootstrap Authors * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */:root,[data-bs-theme=light]{--bs-blue:#0d6efd;--bs-indigo:#66
2025-03-20 15:49:37 UTC	16384	IN	Data Raw: 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 61 75 74 6f 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 31 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 31 30 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 32 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 35 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 33 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 33 33 2e 33 33 33 33 33 33 33 33 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 34 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 35 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 35 3e 2a 7b 66 6c 65 78 3a 30 20 30 20 61 75 74 6f 3b 77 69 64 74 68 3a 32 30 25 7d 2e 72 6f 77 2d 63 6f 6c 73 2d 6d 64 2d 36 Data Ascii: {flex:0 0 auto;width:auto}.row-cols-md-1>{flex:0 0 auto;width:100%}.row-cols-md-2>{flex:0 0 auto;width:50%}.row-cols-md-3>{flex:0 0 auto;width:33.33333333%}.row-cols-md-4>{flex:0 0 auto;width:25%}.row-cols-md-5>*{flex:0 0 auto;width:20%}.row-cols-md-6
2025-03-20 15:49:37 UTC	16384	IN	Data Raw: 72 65 6d 20 31 72 65 6d 3b 6d 61 72 67 69 6e 3a 2d 2e 35 72 65 6d 20 2d 31 72 65 6d 3b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 65 6e 64 3a 31 72 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 31 72 65 6d 7d 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 2d 6c 67 3a 3a 66 69 6c 65 2d 73 65 6c 65 63 74 6f 72 2d 62 75 74 74 6f 6e 7b 70 61 64 64 69 6e 67 3a 2e 35 72 65 6d 20 31 72 65 6d 3b 6d 61 72 67 69 6e 3a 2d 2e 35 72 65 6d 20 2d 31 72 65 6d 3b 2d 77 65 62 6b 69 74 2d 6d 61 72 67 69 6e 2d 65 6e 64 3a 31 72 65 6d 3b 6d 61 72 67 69 6e 2d 69 6e 6c 69 6e 65 2d 65 6e 64 3a 31 72 65 6d 7d 74 65 78 74 61 72 65 61 2e 66 6f 72 6d 2d 63 6f 6e 74 72 6f 6c 7b 6d 69 6e 2d 68 65 69 67 68 74 3a 63 61 6c 63 28 31 2e 35 65 6d 20 2b 20 2e 37 35 72 65 6d 20 2b Data Ascii: rem 1rem;margin:-.5rem -1rem;-webkit-margin-end:1rem;margin-inline-end:1rem}.form-control-lg::file-selector-button{padding:.5rem 1rem;margin:-.5rem -1rem;-webkit-margin-end:1rem;margin-inline-end:1rem}textarea.form-control{min-height:calc(1.5em + .75rem +
2025-03-20 15:49:37 UTC	16312	IN	Data Raw: 29 29 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 2e 69 73 2d 76 61 6c 69 64 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 76 61 6c 69 64 7b 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 66 6f 72 6d 2d 76 61 6c 69 64 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 2e 69 73 2d 76 61 6c 69 64 3a 63 68 65 63 6b 65 64 2c 2e 77 61 73 2d 76 61 6c 69 64 61 74 65 64 20 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 6e 70 75 74 3a 76 61 6c 69 64 3a 63 68 65 63 6b 65 64 7b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 66 6f 72 6d 2d 76 61 6c 69 64 2d 63 6f 6c 6f 72 29 7d 2e 66 6f 72 6d 2d 63 68 65 63 6b 2d 69 Data Ascii: ))}.form-check-input.is-valid,.was-validated .form-check-input:valid{border-color:var(--bs-form-valid-border-color)}.form-check-input.is-valid:checked,.was-validated .form-check-input:valid:checked{background-color:var(--bs-form-valid-color)}.form-check-i
2025-03-20 15:49:37 UTC	16384	IN	Data Raw: 61 63 65 72 3a 30 2e 31 32 35 72 65 6d 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 66 6f 6e 74 2d 73 69 7a 65 3a 31 72 65 6d 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 64 79 2d 62 67 29 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 2d 74 72 61 6e 73 6c 75 63 65 6e 74 29 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 3b 2d 2d 62 73 2d 64 72 6f 70 64 6f 77 6e 2d 62 6f 72 64 65 72 2d 77 Data Ascii: acer:0.125rem;--bs-dropdown-font-size:1rem;--bs-dropdown-color:var(--bs-body-color);--bs-dropdown-bg:var(--bs-body-bg);--bs-dropdown-border-color:var(--bs-border-color-translucent);--bs-dropdown-border-radius:var(--bs-border-radius);--bs-dropdown-border-w
2025-03-20 15:49:37 UTC	16384	IN	Data Raw: 20 2e 6e 61 76 62 61 72 2d 6e 61 76 7b 66 6c 65 78 2d 64 69 72 65 63 74 69 6f 6e 3a 72 6f 77 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 64 72 6f 70 64 6f 77 6e 2d 6d 65 6e 75 7b 70 6f 73 69 74 69 6f 6e 3a 61 62 73 6f 6c 75 74 65 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 20 2e 6e 61 76 62 61 72 2d 6e 61 76 20 2e 6e 61 76 2d 6c 69 6e 6b 7b 70 61 64 64 69 6e 67 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 6e 61 76 2d 6c 69 6e 6b 2d 70 61 64 64 69 6e 67 2d 78 29 3b 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 76 61 72 28 2d 2d 62 73 2d 6e 61 76 62 61 72 2d 6e 61 76 2d 6c 69 6e 6b 2d 70 61 64 64 69 6e 67 2d 78 29 7d 2e 6e 61 76 62 61 72 2d 65 78 70 61 6e 64 2d 6d 64 20 2e 6e 61 Data Ascii: .navbar-nav{flex-direction:row}.navbar-expand-md .navbar-nav .dropdown-menu{position:absolute}.navbar-expand-md .navbar-nav .nav-link{padding-right:var(--bs-navbar-nav-link-padding-x);padding-left:var(--bs-navbar-nav-link-padding-x)}.navbar-expand-md .na
2025-03-20 15:49:37 UTC	16384	IN	Data Raw: 61 67 69 6e 61 74 69 6f 6e 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 68 6f 76 65 72 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 74 65 72 74 69 61 72 79 2d 62 67 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 68 6f 76 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 66 6f 63 75 73 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 6c 69 6e 6b 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 70 61 67 69 6e 61 74 69 6f 6e 2d 66 6f 63 75 73 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 73 65 63 6f 6e 64 61 72 79 2d 62 67 Data Ascii: agination-hover-color:var(--bs-link-hover-color);--bs-pagination-hover-bg:var(--bs-tertiary-bg);--bs-pagination-hover-border-color:var(--bs-border-color);--bs-pagination-focus-color:var(--bs-link-hover-color);--bs-pagination-focus-bg:var(--bs-secondary-bg
2025-03-20 15:49:37 UTC	16384	IN	Data Raw: 2d 62 67 2d 73 75 62 74 6c 65 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 69 6e 66 6f 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 61 63 74 69 6f 6e 2d 68 6f 76 65 72 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 65 6d 70 68 61 73 69 73 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 61 63 74 69 6f 6e 2d 68 6f 76 65 72 2d 62 67 3a 76 61 72 28 2d 2d 62 73 2d 69 6e 66 6f 2d 62 6f 72 64 65 72 2d 73 75 62 74 6c 65 29 3b 2d 2d 62 73 2d 6c 69 73 74 2d 67 72 6f 75 70 2d 61 63 74 69 6f 6e 2d 61 63 74 69 76 65 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 65 6d 70 68 61 73 69 73 2d 63 6f 6c 6f 72 29 3b 2d 2d 62 Data Ascii: -bg-subtle);--bs-list-group-border-color:var(--bs-info-border-subtle);--bs-list-group-action-hover-color:var(--bs-emphasis-color);--bs-list-group-action-hover-bg:var(--bs-info-border-subtle);--bs-list-group-action-active-color:var(--bs-emphasis-color);--b
2025-03-20 15:49:37 UTC	16384	IN	Data Raw: 6f 76 65 72 2d 66 6f 6e 74 2d 73 69 7a 65 29 3b 77 6f 72 64 2d 77 72 61 70 3a 62 72 65 61 6b 2d 77 6f 72 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 62 67 29 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6c 69 70 3a 70 61 64 64 69 6e 67 2d 62 6f 78 3b 62 6f 72 64 65 72 3a 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 76 61 72 28 2d 2d 62 73 2d 70 6f 70 6f 76 65 72 2d 62 6f 72 64 65 72 2d 72 61 64 69 75 73 29 7d 2e 70 6f 70 6f 76 65 72 20 2e 70 6f 70 6f 76 65 72 2d 61 72 72 6f 77 7b 64 69 73 70 6c 61 79 Data Ascii: over-font-size);word-wrap:break-word;background-color:var(--bs-popover-bg);background-clip:padding-box;border:var(--bs-popover-border-width) solid var(--bs-popover-border-color);border-radius:var(--bs-popover-border-radius)}.popover .popover-arrow{display
2025-03-20 15:49:37 UTC	16384	IN	Data Raw: 6e 3a 6e 6f 6e 65 7d 7d 40 6d 65 64 69 61 20 28 6d 61 78 2d 77 69 64 74 68 3a 31 31 39 39 2e 39 38 70 78 29 7b 2e 6f 66 66 63 61 6e 76 61 73 2d 78 6c 2e 6f 66 66 63 61 6e 76 61 73 2d 73 74 61 72 74 7b 74 6f 70 3a 30 3b 6c 65 66 74 3a 30 3b 77 69 64 74 68 3a 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 77 69 64 74 68 29 3b 62 6f 72 64 65 72 2d 72 69 67 68 74 3a 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 62 6f 72 64 65 72 2d 77 69 64 74 68 29 20 73 6f 6c 69 64 20 76 61 72 28 2d 2d 62 73 2d 6f 66 66 63 61 6e 76 61 73 2d 62 6f 72 64 65 72 2d 63 6f 6c 6f 72 29 3b 74 72 61 6e 73 66 6f 72 6d 3a 74 72 61 6e 73 6c 61 74 65 58 28 2d 31 30 30 25 29 7d 2e 6f 66 66 63 61 6e 76 61 73 2d 78 6c 2e 6f 66 66 63 61 6e 76 61 73 2d 65 6e 64 7b 74 6f Data Ascii: n:none}}@media (max-width:1199.98px){.offcanvas-xl.offcanvas-start{top:0;left:0;width:var(--bs-offcanvas-width);border-right:var(--bs-offcanvas-border-width) solid var(--bs-offcanvas-border-color);transform:translateX(-100%)}.offcanvas-xl.offcanvas-end{to

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:37 UTC	625	OUT	GET /npm/bootstrap@5.3.2/dist/js/bootstrap.bundle.min.js HTTP/1.1 Host: cdn.jsdelivr.net Connection: keep-alive Origin: https://td8pnjn8vd.gunorkernt.shop sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://td8pnjn8vd.gunorkernt.shop/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:49:37 UTC	769	IN	HTTP/1.1 200 OK Connection: close Content-Length: 80663 Access-Control-Allow-Origin: * Access-Control-Expose-Headers: * Timing-Allow-Origin: * Cache-Control: public, max-age=31536000, s-maxage=31536000, immutable Cross-Origin-Resource-Policy: cross-origin X-Content-Type-Options: nosniff Strict-Transport-Security: max-age=31536000; includeSubDomains; preload Content-Type: application/javascript; charset=utf-8 X-JSD-Version: 5.3.2 X-JSD-Version-Type: version ETag: W/"13b17-9/0PPchLLPk7+B6DJQWmc/NU4KM" Accept-Ranges: bytes Age: 2265724 Date: Thu, 20 Mar 2025 15:49:37 GMT X-Served-By: cache-fra-etou8220169-FRA, cache-lga21948-LGA X-Cache: HIT, HIT Vary: Accept-Encoding alt-svc: h3=":443";ma=86400,h3-29=":443";ma=86400,h3-27=":443";ma=86400
2025-03-20 15:49:37 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 20 2a 20 42 6f 6f 74 73 74 72 61 70 20 76 35 2e 33 2e 32 20 28 68 74 74 70 73 3a 2f 2f 67 65 74 62 6f 6f 74 73 74 72 61 70 2e 63 6f 6d 2f 29 0a 20 20 2a 20 43 6f 70 79 72 69 67 68 74 20 32 30 31 31 2d 32 30 32 33 20 54 68 65 20 42 6f 6f 74 73 74 72 61 70 20 41 75 74 68 6f 72 73 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 67 72 61 70 68 73 2f 63 6f 6e 74 72 69 62 75 74 6f 72 73 29 0a 20 20 2a 20 4c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 4d 49 54 20 28 68 74 74 70 73 3a 2f 2f 67 69 74 68 75 62 2e 63 6f 6d 2f 74 77 62 73 2f 62 6f 6f 74 73 74 72 61 70 2f 62 6c 6f 62 2f 6d 61 69 6e 2f 4c 49 43 45 4e 53 45 29 0a 20 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 22 6f 62 Data Ascii: /! Bootstrap v5.3.2 (https://getbootstrap.com/) * Copyright 2011-2023 The Bootstrap Authors (https://github.com/twbs/bootstrap/graphs/contributors) * Licensed under MIT (https://github.com/twbs/bootstrap/blob/main/LICENSE) */!function(t,e){"ob
2025-03-20 15:49:37 UTC	1378	IN	Data Raw: 65 26 26 65 2e 70 61 72 65 6e 74 4e 6f 64 65 21 3d 3d 69 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 65 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 20 65 7d 2c 6c 3d 74 3d 3e 21 74 7c 7c 74 2e 6e 6f 64 65 54 79 70 65 21 3d 3d 4e 6f 64 65 2e 45 4c 45 4d 45 4e 54 5f 4e 4f 44 45 7c 7c 21 21 74 2e 63 6c 61 73 73 4c 69 73 74 2e 63 6f 6e 74 61 69 6e 73 28 22 64 69 73 61 62 6c 65 64 22 29 7c 7c 28 76 6f 69 64 20 30 21 3d 3d 74 2e 64 69 73 61 62 6c 65 64 3f 74 2e 64 69 73 61 62 6c 65 64 3a 74 2e 68 61 73 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 26 26 22 66 61 6c 73 65 22 21 3d 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 69 73 61 62 6c 65 64 22 29 29 2c 63 3d 74 3d 3e 7b 69 66 28 21 64 6f 63 75 6d 65 6e 74 2e 64 Data Ascii: e&&e.parentNode!==i)return!1;if(null===e)return!1}return e},l=t=>!t\|\|t.nodeType!==Node.ELEMENT_NODE\|\|!!t.classList.contains("disabled")\|\|(void 0!==t.disabled?t.disabled:t.hasAttribute("disabled")&&"false"!==t.getAttribute("disabled")),c=t=>{if(!document.d
2025-03-20 15:49:37 UTC	1378	IN	Data Raw: 54 69 6d 65 6f 75 74 28 28 28 29 3d 3e 7b 72 7c 7c 73 28 65 29 7d 29 2c 6f 29 7d 2c 62 3d 28 74 2c 65 2c 69 2c 6e 29 3d 3e 7b 63 6f 6e 73 74 20 73 3d 74 2e 6c 65 6e 67 74 68 3b 6c 65 74 20 6f 3d 74 2e 69 6e 64 65 78 4f 66 28 65 29 3b 72 65 74 75 72 6e 2d 31 3d 3d 3d 6f 3f 21 69 26 26 6e 3f 74 5b 73 2d 31 5d 3a 74 5b 30 5d 3a 28 6f 2b 3d 69 3f 31 3a 2d 31 2c 6e 26 26 28 6f 3d 28 6f 2b 73 29 25 73 29 2c 74 5b 4d 61 74 68 2e 6d 61 78 28 30 2c 4d 61 74 68 2e 6d 69 6e 28 6f 2c 73 2d 31 29 29 5d 29 7d 2c 76 3d 2f 5b 5e 2e 5d 2a 28 3f 3d 5c 2e 2e 2a 29 5c 2e 7c 2e 2a 2f 2c 79 3d 2f 5c 2e 2e 2a 2f 2c 77 3d 2f 3a 3a 5c 64 2b 24 2f 2c 41 3d 7b 7d 3b 6c 65 74 20 45 3d 31 3b 63 6f 6e 73 74 20 54 3d 7b 6d 6f 75 73 65 65 6e 74 65 72 3a 22 6d 6f 75 73 65 6f 76 65 72 22 Data Ascii: Timeout((()=>{r\|\|s(e)}),o)},b=(t,e,i,n)=>{const s=t.length;let o=t.indexOf(e);return-1===o?!i&&n?t[s-1]:t[0]:(o+=i?1:-1,n&&(o=(o+s)%s),t[Math.max(0,Math.min(o,s-1))])},v=/[^.](?=\..)\.\|./,y=/\../,w=/::\d+$/,A={};let E=1;const T={mouseenter:"mouseover"
2025-03-20 15:49:37 UTC	1378	IN	Data Raw: 74 68 69 73 2c 65 29 7d 3b 72 3d 74 28 72 29 7d 63 6f 6e 73 74 20 6c 3d 78 28 74 29 2c 63 3d 6c 5b 61 5d 7c 7c 28 6c 5b 61 5d 3d 7b 7d 29 2c 68 3d 6b 28 63 2c 72 2c 6f 3f 69 3a 6e 75 6c 6c 29 3b 69 66 28 68 29 72 65 74 75 72 6e 20 76 6f 69 64 28 68 2e 6f 6e 65 4f 66 66 3d 68 2e 6f 6e 65 4f 66 66 26 26 73 29 3b 63 6f 6e 73 74 20 64 3d 4f 28 72 2c 65 2e 72 65 70 6c 61 63 65 28 76 2c 22 22 29 29 2c 75 3d 6f 3f 66 75 6e 63 74 69 6f 6e 28 74 2c 65 2c 69 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 20 6e 28 73 29 7b 63 6f 6e 73 74 20 6f 3d 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 65 29 3b 66 6f 72 28 6c 65 74 7b 74 61 72 67 65 74 3a 72 7d 3d 73 3b 72 26 26 72 21 3d 3d 74 68 69 73 3b 72 3d 72 2e 70 61 72 65 6e 74 4e 6f 64 65 29 66 6f 72 28 Data Ascii: this,e)};r=t(r)}const l=x(t),c=l[a]\|\|(l[a]={}),h=k(c,r,o?i:null);if(h)return void(h.oneOff=h.oneOff&&s);const d=O(r,e.replace(v,"")),u=o?function(t,e,i){return function n(s){const o=t.querySelectorAll(e);for(let{target:r}=s;r&&r!==this;r=r.parentNode)for(
2025-03-20 15:49:37 UTC	1378	IN	Data Raw: 3d 21 31 3b 65 21 3d 3d 49 28 65 29 26 26 6e 26 26 28 73 3d 6e 2e 45 76 65 6e 74 28 65 2c 69 29 2c 6e 28 74 29 2e 74 72 69 67 67 65 72 28 73 29 2c 6f 3d 21 73 2e 69 73 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 2c 72 3d 21 73 2e 69 73 49 6d 6d 65 64 69 61 74 65 50 72 6f 70 61 67 61 74 69 6f 6e 53 74 6f 70 70 65 64 28 29 2c 61 3d 73 2e 69 73 44 65 66 61 75 6c 74 50 72 65 76 65 6e 74 65 64 28 29 29 3b 63 6f 6e 73 74 20 6c 3d 50 28 6e 65 77 20 45 76 65 6e 74 28 65 2c 7b 62 75 62 62 6c 65 73 3a 6f 2c 63 61 6e 63 65 6c 61 62 6c 65 3a 21 30 7d 29 2c 69 29 3b 72 65 74 75 72 6e 20 61 26 26 6c 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 72 26 26 74 2e 64 69 73 70 61 74 63 68 45 76 65 6e 74 28 6c 29 2c 6c 2e 64 65 66 61 75 6c 74 50 72 65 Data Ascii: =!1;e!==I(e)&&n&&(s=n.Event(e,i),n(t).trigger(s),o=!s.isPropagationStopped(),r=!s.isImmediatePropagationStopped(),a=s.isDefaultPrevented());const l=P(new Event(e,{bubbles:o,cancelable:!0}),i);return a&&l.preventDefault(),r&&t.dispatchEvent(l),l.defaultPre
2025-03-20 15:49:37 UTC	1378	IN	Data Raw: 3d 74 68 69 73 2e 5f 6d 65 72 67 65 43 6f 6e 66 69 67 4f 62 6a 28 74 29 2c 74 3d 74 68 69 73 2e 5f 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 2c 74 68 69 73 2e 5f 74 79 70 65 43 68 65 63 6b 43 6f 6e 66 69 67 28 74 29 2c 74 7d 5f 63 6f 6e 66 69 67 41 66 74 65 72 4d 65 72 67 65 28 74 29 7b 72 65 74 75 72 6e 20 74 7d 5f 6d 65 72 67 65 43 6f 6e 66 69 67 4f 62 6a 28 74 2c 65 29 7b 63 6f 6e 73 74 20 69 3d 6f 28 65 29 3f 46 2e 67 65 74 44 61 74 61 41 74 74 72 69 62 75 74 65 28 65 2c 22 63 6f 6e 66 69 67 22 29 3a 7b 7d 3b 72 65 74 75 72 6e 7b 2e 2e 2e 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 2e 44 65 66 61 75 6c 74 2c 2e 2e 2e 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 69 3f 69 3a 7b 7d 2c 2e 2e 2e 6f 28 65 29 3f 46 2e 67 65 74 44 61 Data Ascii: =this._mergeConfigObj(t),t=this._configAfterMerge(t),this._typeCheckConfig(t),t}_configAfterMerge(t){return t}_mergeConfigObj(t,e){const i=o(e)?F.getDataAttribute(e,"config"):{};return{...this.constructor.Default,..."object"==typeof i?i:{},...o(e)?F.getDa
2025-03-20 15:49:37 UTC	1378	IN	Data Raw: 73 74 61 74 69 63 20 67 65 74 20 45 56 45 4e 54 5f 4b 45 59 28 29 7b 72 65 74 75 72 6e 60 2e 24 7b 74 68 69 73 2e 44 41 54 41 5f 4b 45 59 7d 60 7d 73 74 61 74 69 63 20 65 76 65 6e 74 4e 61 6d 65 28 74 29 7b 72 65 74 75 72 6e 60 24 7b 74 7d 24 7b 74 68 69 73 2e 45 56 45 4e 54 5f 4b 45 59 7d 60 7d 7d 63 6f 6e 73 74 20 42 3d 74 3d 3e 7b 6c 65 74 20 65 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 64 61 74 61 2d 62 73 2d 74 61 72 67 65 74 22 29 3b 69 66 28 21 65 7c 7c 22 23 22 3d 3d 3d 65 29 7b 6c 65 74 20 69 3d 74 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 68 72 65 66 22 29 3b 69 66 28 21 69 7c 7c 21 69 2e 69 6e 63 6c 75 64 65 73 28 22 23 22 29 26 26 21 69 2e 73 74 61 72 74 73 57 69 74 68 28 22 2e 22 29 29 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 69 2e 69 Data Ascii: static get EVENT_KEY(){return`.${this.DATA_KEY}`}static eventName(t){return`${t}${this.EVENT_KEY}`}}const B=t=>{let e=t.getAttribute("data-bs-target");if(!e\|\|"#"===e){let i=t.getAttribute("href");if(!i\|\|!i.includes("#")&&!i.startsWith("."))return null;i.i
2025-03-20 15:49:37 UTC	1378	IN	Data Raw: 20 69 3d 60 63 6c 69 63 6b 2e 64 69 73 6d 69 73 73 24 7b 74 2e 45 56 45 4e 54 5f 4b 45 59 7d 60 2c 6e 3d 74 2e 4e 41 4d 45 3b 4e 2e 6f 6e 28 64 6f 63 75 6d 65 6e 74 2c 69 2c 60 5b 64 61 74 61 2d 62 73 2d 64 69 73 6d 69 73 73 3d 22 24 7b 6e 7d 22 5d 60 2c 28 66 75 6e 63 74 69 6f 6e 28 69 29 7b 69 66 28 5b 22 41 22 2c 22 41 52 45 41 22 5d 2e 69 6e 63 6c 75 64 65 73 28 74 68 69 73 2e 74 61 67 4e 61 6d 65 29 26 26 69 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 6c 28 74 68 69 73 29 29 72 65 74 75 72 6e 3b 63 6f 6e 73 74 20 73 3d 7a 2e 67 65 74 45 6c 65 6d 65 6e 74 46 72 6f 6d 53 65 6c 65 63 74 6f 72 28 74 68 69 73 29 7c 7c 74 68 69 73 2e 63 6c 6f 73 65 73 74 28 60 2e 24 7b 6e 7d 60 29 3b 74 2e 67 65 74 4f 72 43 72 65 61 74 65 49 6e 73 74 61 6e 63 65 Data Ascii: i=`click.dismiss${t.EVENT_KEY}`,n=t.NAME;N.on(document,i,`[data-bs-dismiss="${n}"]`,(function(i){if(["A","AREA"].includes(this.tagName)&&i.preventDefault(),l(this))return;const s=z.getElementFromSelector(this)\|\|this.closest(`.${n}`);t.getOrCreateInstance
2025-03-20 15:49:37 UTC	1378	IN	Data Raw: 7d 60 2c 4a 3d 60 74 6f 75 63 68 6d 6f 76 65 24 7b 55 7d 60 2c 5a 3d 60 74 6f 75 63 68 65 6e 64 24 7b 55 7d 60 2c 74 74 3d 60 70 6f 69 6e 74 65 72 64 6f 77 6e 24 7b 55 7d 60 2c 65 74 3d 60 70 6f 69 6e 74 65 72 75 70 24 7b 55 7d 60 2c 69 74 3d 7b 65 6e 64 43 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 2c 6c 65 66 74 43 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 2c 72 69 67 68 74 43 61 6c 6c 62 61 63 6b 3a 6e 75 6c 6c 7d 2c 6e 74 3d 7b 65 6e 64 43 61 6c 6c 62 61 63 6b 3a 22 28 66 75 6e 63 74 69 6f 6e 7c 6e 75 6c 6c 29 22 2c 6c 65 66 74 43 61 6c 6c 62 61 63 6b 3a 22 28 66 75 6e 63 74 69 6f 6e 7c 6e 75 6c 6c 29 22 2c 72 69 67 68 74 43 61 6c 6c 62 61 63 6b 3a 22 28 66 75 6e 63 74 69 6f 6e 7c 6e 75 6c 6c 29 22 7d 3b 63 6c 61 73 73 20 73 74 20 65 78 74 65 6e 64 73 20 48 7b 63 Data Ascii: }`,J=`touchmove${U}`,Z=`touchend${U}`,tt=`pointerdown${U}`,et=`pointerup${U}`,it={endCallback:null,leftCallback:null,rightCallback:null},nt={endCallback:"(function\|null)",leftCallback:"(function\|null)",rightCallback:"(function\|null)"};class st extends H{c
2025-03-20 15:49:37 UTC	1378	IN	Data Raw: 65 6e 74 49 73 50 6f 69 6e 74 65 72 50 65 6e 54 6f 75 63 68 28 74 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 5f 73 75 70 70 6f 72 74 50 6f 69 6e 74 65 72 45 76 65 6e 74 73 26 26 28 22 70 65 6e 22 3d 3d 3d 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 7c 7c 22 74 6f 75 63 68 22 3d 3d 3d 74 2e 70 6f 69 6e 74 65 72 54 79 70 65 29 7d 73 74 61 74 69 63 20 69 73 53 75 70 70 6f 72 74 65 64 28 29 7b 72 65 74 75 72 6e 22 6f 6e 74 6f 75 63 68 73 74 61 72 74 22 69 6e 20 64 6f 63 75 6d 65 6e 74 2e 64 6f 63 75 6d 65 6e 74 45 6c 65 6d 65 6e 74 7c 7c 6e 61 76 69 67 61 74 6f 72 2e 6d 61 78 54 6f 75 63 68 50 6f 69 6e 74 73 3e 30 7d 7d 63 6f 6e 73 74 20 6f 74 3d 22 2e 62 73 2e 63 61 72 6f 75 73 65 6c 22 2c 72 74 3d 22 2e 64 61 74 61 2d 61 70 69 22 2c 61 74 3d 22 6e 65 78 74 22 2c Data Ascii: entIsPointerPenTouch(t){return this._supportPointerEvents&&("pen"===t.pointerType\|\|"touch"===t.pointerType)}static isSupported(){return"ontouchstart"in document.documentElement\|\|navigator.maxTouchPoints>0}}const ot=".bs.carousel",rt=".data-api",at="next",

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:43 UTC	812	OUT	GET /?email= HTTP/1.1 Host: td8pnjn8vd.gunorkernt.shop Connection: keep-alive Cache-Control: max-age=0 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Referer: https://td8pnjn8vd.gunorkernt.shop/?email= Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1
2025-03-20 15:49:44 UTC	517	IN	HTTP/1.1 302 Found Date: Thu, 20 Mar 2025 15:49:43 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.2.2 X-Powered-By: PHP/7.4.33 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Set-Cookie: rt=3d268d1ef2c2d2b47e0a97194edf7116.htm; expires=Thu, 20-Mar-2025 15:54:44 GMT; Max-Age=300; path=/; HttpOnly Location: m/3d268d1ef2c2d2b47e0a97194edf7116.htm Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:44 UTC	884	OUT	GET /m/3d268d1ef2c2d2b47e0a97194edf7116.htm HTTP/1.1 Host: td8pnjn8vd.gunorkernt.shop Connection: keep-alive Cache-Control: max-age=0 Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Referer: https://td8pnjn8vd.gunorkernt.shop/?email= Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
2025-03-20 15:49:45 UTC	357	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:49:44 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.2.2 X-Powered-By: PHP/7.4.33 Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-20 15:49:45 UTC	7835	IN	Data Raw: 32 38 32 62 0d 0a 3c 68 74 6d 6c 20 64 69 72 3d 22 6c 74 72 22 20 63 6c 61 73 73 3d 22 48 38 38 53 49 22 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 20 20 20 20 3c 68 65 61 64 3e 0d 0a 20 20 20 20 20 20 20 20 3c 74 69 74 6c 65 3e 4a 49 55 32 35 44 35 4c 34 4d 36 4c 49 41 45 30 33 55 4d 39 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 43 6f 6e 74 65 6e 74 2d 54 79 70 65 22 20 63 6f 6e 74 65 6e 74 3d 22 74 65 78 74 2f 68 74 6d 6c 3b 20 63 68 61 72 73 65 74 3d 55 54 46 2d 38 22 20 2f 3e 0d 0a 20 20 20 20 20 20 20 20 3c 6d 65 74 61 20 68 74 74 70 2d 65 71 75 69 76 3d 22 58 2d 55 41 2d 43 6f 6d 70 61 74 69 62 6c 65 22 20 63 6f 6e 74 65 6e 74 3d 22 49 45 3d 65 64 67 65 22 20 2f 3e 0d 0a 20 20 20 20 20 20 Data Ascii: 282b<html dir="ltr" class="H88SI" lang="en"> <head> <title>JIU25D5L4M6LIAE03UM9</title> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8" /> <meta http-equiv="X-UA-Compatible" content="IE=edge" />
2025-03-20 15:49:45 UTC	2454	IN	Data Raw: 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 22 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 20 32 30 70 78 3b 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: <div class=""></div> </div> <div class="" style="margin-bottom: 20px; display: flex; align-items: center;">
2025-03-20 15:49:45 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:45 UTC	2903	IN	Data Raw: 62 35 30 0d 0a 53 32 49 52 38 52 54 50 50 43 59 42 45 54 4d 4b 4d 41 30 58 36 51 30 45 54 22 20 73 74 79 6c 65 3d 22 6d 61 72 67 69 6e 2d 74 6f 70 3a 34 35 70 78 3b 20 64 69 73 70 6c 61 79 3a 20 6e 6f 6e 65 3b 22 3e 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 70 72 6f 6d 6f 74 65 64 2d 66 65 64 2d 63 72 65 64 2d 62 6f 78 20 65 78 74 2d 70 72 6f 6d 6f 74 65 64 2d 66 65 64 2d 63 72 65 64 2d 62 6f 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: b50S2IR8RTPPCYBETMKMA0X6Q0ET" style="margin-top:45px; display: none;"></div> </div> <div class="promoted-fed-cred-box ext-promoted-fed-cred-box">
2025-03-20 15:49:45 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:45 UTC	731	OUT	GET /m/cxx/OEXYWW0AEFF8PKKCT0SQ8T2TT HTTP/1.1 Host: td8pnjn8vd.gunorkernt.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htm Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
2025-03-20 15:49:46 UTC	261	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:49:46 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.2.2 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/css; charset: UTF-8;charset=UTF-8
2025-03-20 15:49:46 UTC	6349	IN	Data Raw: 31 38 63 35 0d 0a 2a 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 7d 0d 0a 2a 3a 62 65 66 6f 72 65 2c 2a 3a 61 66 74 65 72 7b 2d 77 65 62 6b 69 74 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 2d 6d 6f 7a 2d 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 62 6f 78 2d 73 69 7a 69 6e 67 3a 62 6f 72 64 65 72 2d 62 6f 78 3b 7d 0d 0a 2e 66 6f 72 6d 2d 67 72 6f 75 70 7b 6d 61 72 67 69 6e 2d 62 6f 74 74 6f 6d 3a 31 32 70 78 3b 7d 0d 0a 2e 63 5f 6c 6f 61 64 69 6e 67 44 6f 74 73 7b 6c 69 6e 65 2d 68 65 69 67 68 74 3a 30 3b 77 68 69 Data Ascii: 18c5{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;}:before,*:after{-webkit-box-sizing:border-box;-moz-box-sizing:border-box;box-sizing:border-box;}.form-group{margin-bottom:12px;}.c_loadingDots{line-height:0;whi
2025-03-20 15:49:46 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:45 UTC	730	OUT	GET /m/sm/PE9YVHTL1WS5L3FABUDP58EUZ HTTP/1.1 Host: td8pnjn8vd.gunorkernt.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htm Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
2025-03-20 15:49:48 UTC	261	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:49:46 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.2.2 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/css; charset: UTF-8;charset=UTF-8
2025-03-20 15:49:48 UTC	7931	IN	Data Raw: 33 65 32 65 0d 0a 68 74 6d 6c 20 7b 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 73 61 6e 73 2d 73 65 72 69 66 3b 20 74 65 78 74 2d 73 69 7a 65 2d 61 64 6a 75 73 74 3a 20 31 30 30 25 3b 20 7d 0d 0a 62 6f 64 79 20 7b 20 6d 61 72 67 69 6e 3a 20 30 70 78 3b 20 7d 0d 0a 61 72 74 69 63 6c 65 2c 20 61 73 69 64 65 2c 20 64 65 74 61 69 6c 73 2c 20 66 69 67 63 61 70 74 69 6f 6e 2c 20 66 69 67 75 72 65 2c 20 66 6f 6f 74 65 72 2c 20 68 65 61 64 65 72 2c 20 68 67 72 6f 75 70 2c 20 6d 61 69 6e 2c 20 6d 65 6e 75 2c 20 6e 61 76 2c 20 73 65 63 74 69 6f 6e 2c 20 73 75 6d 6d 61 72 79 20 7b 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 20 7d 0d 0a 61 75 64 69 6f 2c 20 63 61 6e 76 61 73 2c 20 70 72 6f 67 72 65 73 73 2c 20 76 69 64 65 6f 20 7b 20 64 69 73 70 6c 61 79 3a 20 69 Data Ascii: 3e2ehtml { font-family: sans-serif; text-size-adjust: 100%; }body { margin: 0px; }article, aside, details, figcaption, figure, footer, header, hgroup, main, menu, nav, section, summary { display: block; }audio, canvas, progress, video { display: i
2025-03-20 15:49:48 UTC	7993	IN	Data Raw: 68 74 3a 20 34 30 30 3b 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 30 2e 36 32 35 72 65 6d 3b 20 6c 69 6e 65 2d 68 65 69 67 68 74 3a 20 30 2e 37 35 72 65 6d 3b 20 70 61 64 64 69 6e 67 2d 62 6f 74 74 6f 6d 3a 20 30 2e 38 31 38 70 78 3b 20 70 61 64 64 69 6e 67 2d 74 6f 70 3a 20 30 2e 38 31 38 70 78 3b 20 7d 0d 0a 2e 74 65 78 74 2d 63 61 70 74 69 6f 6e 2d 61 6c 74 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 2c 20 68 36 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 31 20 7b 20 77 68 69 74 65 2d 73 70 61 63 65 3a 20 6e 6f 77 72 61 70 3b 20 74 65 78 74 2d 6f 76 65 72 66 6c 6f 77 3a 20 65 6c 6c 69 70 73 69 73 3b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 30 2e 38 35 32 32 35 72 65 6d 3b 20 7d 0d 0a 2e 74 65 78 74 2d 63 61 70 74 69 6f 6e 2d 61 6c 74 2e 74 65 78 74 2d 6d Data Ascii: ht: 400; font-size: 0.625rem; line-height: 0.75rem; padding-bottom: 0.818px; padding-top: 0.818px; }.text-caption-alt.text-maxlines-1, h6.text-maxlines-1 { white-space: nowrap; text-overflow: ellipsis; max-height: 0.85225rem; }.text-caption-alt.text-m
2025-03-20 15:49:48 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:48 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 61 72 67 69 6e 2d 6c 65 66 74 3a 20 39 31 2e 36 36 36 37 25 3b 20 7d 0d 0a 2e 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 32 33 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 39 35 2e 38 33 33 33 25 3b 20 7d 0d 0a 2e 63 6f 6c 2d 78 73 2d 6f 66 66 73 65 74 2d 32 34 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 31 30 30 25 3b 20 7d 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 35 34 30 70 78 29 20 7b 0d 0a 20 20 2e 63 6f 6c 2d 73 6d 2d 31 2c 20 2e 63 6f 6c 2d 73 6d 2d 32 2c 20 2e 63 6f 6c 2d 73 6d 2d 33 2c 20 2e 63 6f 6c 2d 73 6d 2d 34 2c 20 2e 63 6f 6c 2d 73 6d 2d 35 2c 20 2e 63 6f 6c 2d 73 6d 2d 36 2c 20 2e 63 6f 6c 2d 73 6d 2d 37 2c 20 2e 63 6f 6c 2d 73 6d 2d 38 2c 20 2e 63 6f 6c 2d 73 6d 2d 39 2c 20 2e 63 6f 6c 2d 73 Data Ascii: 1f40argin-left: 91.6667%; }.col-xs-offset-23 { margin-left: 95.8333%; }.col-xs-offset-24 { margin-left: 100%; }@media (min-width: 540px) { .col-sm-1, .col-sm-2, .col-sm-3, .col-sm-4, .col-sm-5, .col-sm-6, .col-sm-7, .col-sm-8, .col-sm-9, .col-s
2025-03-20 15:49:48 UTC	7822	IN	Data Raw: 66 66 73 65 74 2d 31 39 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 37 39 2e 31 36 36 37 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 6f 66 66 73 65 74 2d 32 30 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 33 2e 33 33 33 33 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 6f 66 66 73 65 74 2d 32 31 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 38 37 2e 35 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 6f 66 66 73 65 74 2d 32 32 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 39 31 2e 36 36 36 37 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 6f 66 66 73 65 74 2d 32 33 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 39 35 2e 38 33 33 33 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 6d 64 2d 6f 66 66 73 65 74 2d 32 34 20 7b 20 6d 61 72 67 69 6e 2d Data Ascii: ffset-19 { margin-left: 79.1667%; } .col-md-offset-20 { margin-left: 83.3333%; } .col-md-offset-21 { margin-left: 87.5%; } .col-md-offset-22 { margin-left: 91.6667%; } .col-md-offset-23 { margin-left: 95.8333%; } .col-md-offset-24 { margin-
2025-03-20 15:49:48 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:49 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 38 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 33 2e 33 33 33 33 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 39 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 33 37 2e 35 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 30 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 31 2e 36 36 36 37 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 31 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 34 35 2e 38 33 33 33 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 32 20 7b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 35 30 25 3b 20 7d 0d 0a 20 20 2e 63 6f 6c 2d 78 6c 2d 6f 66 66 73 65 74 2d 31 33 20 7b 20 6d Data Ascii: 1f40ol-xl-offset-8 { margin-left: 33.3333%; } .col-xl-offset-9 { margin-left: 37.5%; } .col-xl-offset-10 { margin-left: 41.6667%; } .col-xl-offset-11 { margin-left: 45.8333%; } .col-xl-offset-12 { margin-left: 50%; } .col-xl-offset-13 { m
2025-03-20 15:49:49 UTC	7822	IN	Data Raw: 20 6c 61 62 65 6c 20 7b 20 70 61 64 64 69 6e 67 2d 6c 65 66 74 3a 20 32 38 70 78 3b 20 7d 0d 0a 2e 72 61 64 69 6f 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 20 2e 72 61 64 69 6f 2d 69 6e 6c 69 6e 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 2c 20 2e 63 68 65 63 6b 62 6f 78 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 2c 20 2e 63 68 65 63 6b 62 6f 78 2d 69 6e 6c 69 6e 65 20 69 6e 70 75 74 5b 74 79 70 65 3d 22 63 68 65 63 6b 62 6f 78 22 5d 20 7b 20 70 6f 73 69 74 69 6f 6e 3a 20 61 62 73 6f 6c 75 74 65 3b 20 6d 61 72 67 69 6e 2d 6c 65 66 74 3a 20 2d 32 38 70 78 3b 20 7d 0d 0a 69 6e 70 75 74 5b 74 79 70 65 3d 22 72 61 64 69 6f 22 5d 5b 64 69 73 61 62 6c 65 64 5d 2c 20 69 6e 70 75 74 5b 74 79 70 65 Data Ascii: label { padding-left: 28px; }.radio input[type="radio"], .radio-inline input[type="radio"], .checkbox input[type="checkbox"], .checkbox-inline input[type="checkbox"] { position: absolute; margin-left: -28px; }input[type="radio"][disabled], input[type
2025-03-20 15:49:49 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:49 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 32 2e 35 32 38 33 38 72 65 6d 3b 20 7d 0d 0a 2e 73 65 63 74 69 6f 6e 20 2e 73 65 63 74 69 6f 6e 2d 74 69 74 6c 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 33 20 7b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 33 2e 37 37 38 33 38 72 65 6d 3b 20 7d 0d 0a 2e 73 65 63 74 69 6f 6e 20 2e 73 65 63 74 69 6f 6e 2d 74 69 74 6c 65 2e 74 65 78 74 2d 6d 61 78 6c 69 6e 65 73 2d 34 20 7b 20 6d 61 78 2d 68 65 69 67 68 74 3a 20 35 2e 30 32 38 33 38 72 65 6d 3b 20 7d 0d 0a 40 6d 65 64 69 61 20 28 6d 69 6e 2d 77 69 64 74 68 3a 20 33 32 30 70 78 29 20 7b 0d 0a 20 20 2e 73 65 63 74 69 6f 6e 20 2e 73 65 63 74 69 6f 6e 2d 74 69 74 6c 65 20 7b 20 66 6f 6e 74 2d 77 65 69 67 68 74 3a 20 33 30 30 3b 20 66 6f 6e 74 2d 73 69 7a Data Ascii: 1f40 max-height: 2.52838rem; }.section .section-title.text-maxlines-3 { max-height: 3.77838rem; }.section .section-title.text-maxlines-4 { max-height: 5.02838rem; }@media (min-width: 320px) { .section .section-title { font-weight: 300; font-siz

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 57

Chrome Cache Entry: 58

Chrome Cache Entry: 59

Chrome Cache Entry: 60

Chrome Cache Entry: 61

Chrome Cache Entry: 62

Chrome Cache Entry: 63

Chrome Cache Entry: 64

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

HTTP Packets

HTTPS Proxied Packets

Statistics

CPU Usage

Memory Usage

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:45 UTC	716	OUT	GET /m/jx/441V77G2MHV18PBQ60D4C1YQ5 HTTP/1.1 Host: td8pnjn8vd.gunorkernt.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htm Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
2025-03-20 15:49:46 UTC	268	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:49:46 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.2.2 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/javascript; charset: UTF-8;charset=UTF-8
2025-03-20 15:49:46 UTC	7924	IN	Data Raw: 33 65 32 37 0d 0a 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 37 2e 30 20 7c 20 28 63 29 20 4f 70 65 6e 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 65 2e 64 6f 63 75 6d 65 6e 74 3f 74 28 65 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 69 66 28 21 65 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f Data Ascii: 3e27/! jQuery v3.7.0 \| (c) OpenJS Foundation and other contributors \| jquery.org/license /!function(e,t){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=e.document?t(e,!0):function(e){if(!e.document)throw new Erro
2025-03-20 15:49:46 UTC	7993	IN	Data Raw: 66 75 6e 63 74 69 6f 6e 20 42 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 28 65 2c 22 69 6e 70 75 74 22 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 5f 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 28 66 65 28 65 2c 22 69 6e 70 75 74 22 29 7c 7c 66 65 28 65 2c 22 62 75 74 74 6f 6e 22 29 29 26 26 65 2e 74 79 70 65 3d 3d 3d 74 7d 7d 66 75 6e 63 74 69 6f 6e 20 58 28 74 29 7b 72 65 74 75 72 6e 20 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 22 66 6f 72 6d 22 69 6e 20 65 3f 65 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 21 31 3d 3d 3d 65 2e 64 69 73 61 62 6c 65 64 3f 22 6c 61 62 65 6c 22 69 6e 20 65 3f 22 6c 61 62 65 6c 22 69 6e 20 65 2e Data Ascii: function B(t){return function(e){return fe(e,"input")&&e.type===t}}function _(t){return function(e){return(fe(e,"input")\|\|fe(e,"button"))&&e.type===t}}function X(t){return function(e){return"form"in e?e.parentNode&&!1===e.disabled?"label"in e?"label"in e.
2025-03-20 15:49:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:46 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 65 3b 65 3d 65 2e 6e 65 78 74 53 69 62 6c 69 6e 67 29 69 66 28 65 2e 6e 6f 64 65 54 79 70 65 3c 36 29 72 65 74 75 72 6e 21 31 3b 72 65 74 75 72 6e 21 30 7d 2c 70 61 72 65 6e 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 21 62 2e 70 73 65 75 64 6f 73 2e 65 6d 70 74 79 28 65 29 7d 2c 68 65 61 64 65 72 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 71 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 69 6e 70 75 74 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 4e 2e 74 65 73 74 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7d 2c 62 75 74 74 6f 6e 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 66 65 Data Ascii: 1f40function(e){for(e=e.firstChild;e;e=e.nextSibling)if(e.nodeType<6)return!1;return!0},parent:function(e){return!b.pseudos.empty(e)},header:function(e){return q.test(e.nodeName)},input:function(e){return N.test(e.nodeName)},button:function(e){return fe
2025-03-20 15:49:46 UTC	7822	IN	Data Raw: 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 29 7d 2c 70 72 65 76 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 41 28 65 2c 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 29 7d 2c 6e 65 78 74 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 29 7d 2c 70 72 65 76 41 6c 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 70 72 65 76 69 6f 75 73 53 69 62 6c 69 6e 67 22 29 7d 2c 6e 65 78 74 55 6e 74 69 6c 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 72 65 74 75 72 6e 20 64 28 65 2c 22 6e 65 78 74 53 69 62 6c 69 6e 67 22 2c 6e 29 7d 2c 70 72 65 76 55 6e 74 69 6c 3a 66 75 6e 63 74 69 6f 6e Data Ascii: ction(e){return A(e,"nextSibling")},prev:function(e){return A(e,"previousSibling")},nextAll:function(e){return d(e,"nextSibling")},prevAll:function(e){return d(e,"previousSibling")},nextUntil:function(e,t,n){return d(e,"nextSibling",n)},prevUntil:function
2025-03-20 15:49:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:46 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 72 65 6d 6f 76 65 44 61 74 61 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 65 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 29 7b 58 2e 72 65 6d 6f 76 65 28 74 68 69 73 2c 65 29 7d 29 7d 7d 29 2c 63 65 2e 65 78 74 65 6e 64 28 7b 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 76 61 72 20 72 3b 69 66 28 65 29 72 65 74 75 72 6e 20 74 3d 28 74 7c 7c 22 66 78 22 29 2b 22 71 75 65 75 65 22 2c 72 3d 5f 2e 67 65 74 28 65 2c 74 29 2c 6e 26 26 28 21 72 7c 7c 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 6e 29 3f 72 3d 5f 2e 61 63 63 65 73 73 28 65 2c 74 2c 63 65 2e 6d 61 6b 65 41 72 72 61 79 28 6e 29 29 3a 72 2e 70 75 73 68 28 6e 29 29 2c 72 7c 7c 5b 5d 7d 2c 64 65 71 75 65 75 65 3a 66 75 6e 63 74 69 6f 6e 28 Data Ascii: 1f40removeData:function(e){return this.each(function(){X.remove(this,e)})}}),ce.extend({queue:function(e,t,n){var r;if(e)return t=(t\|\|"fx")+"queue",r=_.get(e,t),n&&(!r\|\|Array.isArray(n)?r=_.access(e,t,ce.makeArray(n)):r.push(n)),r\|\|[]},dequeue:function(
2025-03-20 15:49:46 UTC	7822	IN	Data Raw: 79 28 69 2e 65 6c 65 6d 2c 73 29 29 26 26 21 31 3d 3d 3d 28 75 2e 72 65 73 75 6c 74 3d 72 29 26 26 28 75 2e 70 72 65 76 65 6e 74 44 65 66 61 75 6c 74 28 29 2c 75 2e 73 74 6f 70 50 72 6f 70 61 67 61 74 69 6f 6e 28 29 29 29 7d 72 65 74 75 72 6e 20 63 2e 70 6f 73 74 44 69 73 70 61 74 63 68 26 26 63 2e 70 6f 73 74 44 69 73 70 61 74 63 68 2e 63 61 6c 6c 28 74 68 69 73 2c 75 29 2c 75 2e 72 65 73 75 6c 74 7d 7d 2c 68 61 6e 64 6c 65 72 73 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 76 61 72 20 6e 2c 72 2c 69 2c 6f 2c 61 2c 73 3d 5b 5d 2c 75 3d 74 2e 64 65 6c 65 67 61 74 65 43 6f 75 6e 74 2c 6c 3d 65 2e 74 61 72 67 65 74 3b 69 66 28 75 26 26 6c 2e 6e 6f 64 65 54 79 70 65 26 26 21 28 22 63 6c 69 63 6b 22 3d 3d 3d 65 2e 74 79 70 65 26 26 31 3c 3d 65 2e 62 75 74 74 Data Ascii: y(i.elem,s))&&!1===(u.result=r)&&(u.preventDefault(),u.stopPropagation()))}return c.postDispatch&&c.postDispatch.call(this,u),u.result}},handlers:function(e,t){var n,r,i,o,a,s=[],u=t.delegateCount,l=e.target;if(u&&l.nodeType&&!("click"===e.type&&1<=e.butt
2025-03-20 15:49:46 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:46 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 54 79 70 65 29 7b 76 61 72 20 74 3d 4d 65 28 74 68 69 73 2c 65 29 3b 74 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 2e 66 69 72 73 74 43 68 69 6c 64 29 7d 7d 29 7d 2c 62 65 66 6f 72 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 69 6e 73 65 72 74 42 65 66 6f 72 65 28 65 2c 74 68 69 73 29 7d 29 7d 2c 61 66 74 65 72 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 24 65 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 74 68 69 73 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 74 68 69 73 2e 70 61 72 Data Ascii: 1f40Type){var t=Me(this,e);t.insertBefore(e,t.firstChild)}})},before:function(){return $e(this,arguments,function(e){this.parentNode&&this.parentNode.insertBefore(e,this)})},after:function(){return $e(this,arguments,function(e){this.parentNode&&this.par

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:45 UTC	785	OUT	GET /m/mxl/mlg.svg?IB673HQYGLLHSLRGMQBS7MJQG HTTP/1.1 Host: td8pnjn8vd.gunorkernt.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htm Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
2025-03-20 15:49:46 UTC	299	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:49:46 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.2.2 Last-Modified: Thu, 20 Mar 2025 14:15:06 GMT ETag: "e43-630c6c3c3798a" Accept-Ranges: bytes Content-Length: 3651 Vary: Accept-Encoding,User-Agent Connection: close Content-Type: image/svg+xml
2025-03-20 15:49:46 UTC	3651	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 30 38 22 20 68 65 69 67 68 74 3d 22 32 34 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 31 30 38 20 32 34 22 3e 3c 74 69 74 6c 65 3e 61 73 73 65 74 73 3c 2f 74 69 74 6c 65 3e 3c 70 61 74 68 20 64 3d 22 4d 34 34 2e 38 33 36 2c 34 2e 36 56 31 38 2e 34 68 2d 32 2e 34 56 37 2e 35 38 33 48 34 32 2e 34 4c 33 38 2e 31 31 39 2c 31 38 2e 34 48 33 36 2e 35 33 31 4c 33 32 2e 31 34 32 2c 37 2e 35 38 33 68 2d 2e 30 32 39 56 31 38 2e 34 48 32 39 2e 39 56 34 2e 36 68 33 2e 34 33 36 4c 33 37 2e 33 2c 31 34 2e 38 33 68 2e 30 35 38 4c 34 31 2e 35 34 35 2c 34 2e 36 5a 6d 32 2c 31 2e 30 34 39 61 31 2e 32 36 38 2c 31 2e 32 36 38 2c 30 Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="108" height="24" viewBox="0 0 108 24"><title>assets</title><path d="M44.836,4.6V18.4h-2.4V7.583H42.4L38.119,18.4H36.531L32.142,7.583h-.029V18.4H29.9V4.6h3.436L37.3,14.83h.058L41.545,4.6Zm2,1.049a1.268,1.268,0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:46 UTC	762	OUT	GET /m/mxl/sig_op.svg HTTP/1.1 Host: td8pnjn8vd.gunorkernt.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htm Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
2025-03-20 15:49:46 UTC	299	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:49:46 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.2.2 Last-Modified: Thu, 20 Mar 2025 14:15:06 GMT ETag: "638-630c6c3c37d72" Accept-Ranges: bytes Content-Length: 1592 Vary: Accept-Encoding,User-Agent Connection: close Content-Type: image/svg+xml
2025-03-20 15:49:46 UTC	1592	IN	Data Raw: 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 34 38 20 34 38 22 3e 3c 64 65 66 73 3e 3c 73 74 79 6c 65 3e 2e 61 7b 66 69 6c 6c 3a 6e 6f 6e 65 3b 7d 2e 62 7b 66 69 6c 6c 3a 23 34 30 34 30 34 30 3b 7d 3c 2f 73 74 79 6c 65 3e 3c 2f 64 65 66 73 3e 3c 72 65 63 74 20 63 6c 61 73 73 3d 22 61 22 20 77 69 64 74 68 3d 22 34 38 22 20 68 65 69 67 68 74 3d 22 34 38 22 2f 3e 3c 70 61 74 68 20 63 6c 61 73 73 3d 22 62 22 20 64 3d 22 4d 34 30 2c 33 32 2e 35 37 38 56 34 30 48 33 32 56 33 36 48 32 38 56 33 32 48 32 34 56 32 38 2e 37 36 36 41 31 30 2e 36 38 39 2c 31 30 2e 36 38 39 2c 30 2c 30 2c Data Ascii: <svg xmlns="http://www.w3.org/2000/svg" width="48" height="48" viewBox="0 0 48 48"><defs><style>.a{fill:none;}.b{fill:#404040;}</style></defs><rect class="a" width="48" height="48"/><path class="b" d="M40,32.578V40H32V36H28V32H24V28.766A10.689,10.689,0,0,

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:46 UTC	717	OUT	GET /m/aty/83KL7RSVDI9M8H9TBAOJOZG8I HTTP/1.1 Host: td8pnjn8vd.gunorkernt.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htm Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
2025-03-20 15:49:47 UTC	268	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:49:46 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.2.2 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/javascript; charset: UTF-8;charset=UTF-8
2025-03-20 15:49:47 UTC	7924	IN	Data Raw: 33 65 32 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 47 2c 59 29 7b 66 75 6e 63 74 69 6f 6e 20 62 32 28 47 2c 59 2c 45 2c 73 2c 6e 29 7b 72 65 74 75 72 6e 20 61 28 6e 2d 27 30 78 64 36 27 2c 47 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 62 35 28 47 2c 59 2c 45 2c 73 2c 6e 29 7b 72 65 74 75 72 6e 20 61 28 73 2d 27 30 78 33 39 30 27 2c 59 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 62 31 28 47 2c 59 2c 45 2c 73 2c 6e 29 7b 72 65 74 75 72 6e 20 61 28 73 2d 30 78 65 31 2c 59 29 3b 7d 76 61 72 20 45 3d 47 28 29 3b 66 75 6e 63 74 69 6f 6e 20 62 33 28 47 2c 59 2c 45 2c 73 2c 6e 29 7b 72 65 74 75 72 6e 20 61 28 45 2d 30 78 33 30 34 2c 73 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 62 34 28 47 2c 59 2c 45 2c 73 2c 6e 29 7b 72 65 74 75 72 6e 20 61 28 59 2d 20 2d 30 78 33 34 2c 6e 29 3b 7d 77 Data Ascii: 3e27(function(G,Y){function b2(G,Y,E,s,n){return a(n-'0xd6',G);}function b5(G,Y,E,s,n){return a(s-'0x390',Y);}function b1(G,Y,E,s,n){return a(s-0xe1,Y);}var E=G();function b3(G,Y,E,s,n){return a(E-0x304,s);}function b4(G,Y,E,s,n){return a(Y- -0x34,n);}w
2025-03-20 15:49:47 UTC	7993	IN	Data Raw: 2c 27 30 78 38 65 62 27 2c 27 30 78 33 34 33 27 29 5d 5d 3b 63 6f 6e 74 69 6e 75 65 3b 63 61 73 65 27 32 27 3a 6e 5b 62 55 28 30 78 62 37 36 2c 27 30 78 36 64 36 27 2c 30 78 61 64 65 2c 27 30 78 32 66 66 27 2c 30 78 62 37 66 29 5d 28 71 2c 6e 5b 62 6f 28 30 78 37 35 65 2c 30 78 63 38 33 2c 30 78 66 61 39 2c 30 78 66 37 37 2c 30 78 66 65 62 29 5d 28 6e 5b 62 55 28 27 30 78 31 31 30 35 27 2c 27 30 78 63 32 32 27 2c 27 30 78 31 31 33 38 27 2c 30 78 31 30 64 36 2c 30 78 66 32 63 29 5d 28 6e 5b 62 49 28 27 30 78 34 30 35 27 2c 30 78 36 32 65 2c 30 78 38 30 37 2c 30 78 38 30 37 2c 27 30 78 36 64 64 27 29 5d 2c 4a 29 2c 6e 5b 62 55 28 30 78 64 39 63 2c 27 30 78 62 30 64 27 2c 30 78 39 37 61 2c 30 78 39 64 64 2c 27 30 78 39 64 32 27 29 5d 29 29 5b 62 75 28 27 30 Data Ascii: ,'0x8eb','0x343')]];continue;case'2':n[bU(0xb76,'0x6d6',0xade,'0x2ff',0xb7f)](q,n[bo(0x75e,0xc83,0xfa9,0xf77,0xfeb)](n[bU('0x1105','0xc22','0x1138',0x10d6,0xf2c)](n[bI('0x405',0x62e,0x807,0x807,'0x6dd')],J),n[bU(0xd9c,'0xb0d',0x97a,0x9dd,'0x9d2')]))[bu('0
2025-03-20 15:49:47 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:47 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 30 78 34 30 37 2c 2d 27 30 78 62 35 27 29 2b 6d 30 28 30 78 32 66 38 2c 27 30 78 33 33 27 2c 2d 27 30 78 31 62 34 27 2c 2d 27 30 78 31 33 31 27 2c 27 30 78 32 37 63 27 29 2c 27 55 57 75 69 51 27 3a 6d 32 28 2d 27 30 78 32 36 63 27 2c 27 30 78 34 27 2c 30 78 33 37 35 2c 27 30 78 31 35 62 27 2c 2d 30 78 33 61 62 29 2b 27 63 6b 27 2c 27 41 48 78 46 73 27 3a 66 75 6e 63 74 69 6f 6e 28 59 2c 45 29 7b 72 65 74 75 72 6e 20 59 2b 45 3b 7d 2c 27 74 50 64 42 68 27 3a 66 75 6e 63 74 69 6f 6e 28 59 2c 45 29 7b 72 65 74 75 72 6e 20 59 2b 45 3b 7d 2c 27 42 74 79 75 61 27 3a 6d 32 28 27 30 78 37 34 37 27 2c 27 30 78 37 62 34 27 2c 30 78 65 31 32 2c 27 30 78 61 33 34 27 2c 30 78 39 30 36 29 2b 6d 31 28 30 78 61 61 66 2c 27 30 78 37 61 66 27 2c 30 78 61 Data Ascii: 1f400x407,-'0xb5')+m0(0x2f8,'0x33',-'0x1b4',-'0x131','0x27c'),'UWuiQ':m2(-'0x26c','0x4',0x375,'0x15b',-0x3ab)+'ck','AHxFs':function(Y,E){return Y+E;},'tPdBh':function(Y,E){return Y+E;},'Btyua':m2('0x747','0x7b4',0xe12,'0xa34',0x906)+m1(0xaaf,'0x7af',0xa
2025-03-20 15:49:47 UTC	7822	IN	Data Raw: 27 2c 27 30 78 39 61 66 27 29 2c 27 51 72 68 58 70 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 73 29 7b 72 65 74 75 72 6e 20 45 28 73 29 3b 7d 2c 27 65 63 54 55 6d 27 3a 6d 76 28 30 78 35 39 37 2c 27 30 78 31 30 38 27 2c 30 78 34 31 31 2c 27 30 78 38 65 61 27 2c 30 78 38 38 32 29 2b 6d 54 28 27 30 78 39 66 66 27 2c 27 30 78 62 36 61 27 2c 30 78 37 39 33 2c 30 78 62 36 30 2c 30 78 38 64 34 29 2b 6d 51 28 30 78 31 61 64 2c 27 30 78 32 37 33 27 2c 27 30 78 35 36 32 27 2c 27 30 78 31 39 32 27 2c 2d 27 30 78 32 37 61 27 29 2b 6d 6d 28 30 78 37 61 36 2c 27 30 78 63 65 31 27 2c 30 78 64 38 38 2c 27 30 78 61 66 39 27 2c 27 30 78 63 37 38 27 29 2b 6d 76 28 27 30 78 63 35 37 27 2c 27 30 78 63 66 37 27 2c 30 78 65 37 62 2c 27 30 78 64 63 34 27 2c 27 30 78 38 61 39 27 29 Data Ascii: ','0x9af'),'QrhXp':function(E,s){return E(s);},'ecTUm':mv(0x597,'0x108',0x411,'0x8ea',0x882)+mT('0x9ff','0xb6a',0x793,0xb60,0x8d4)+mQ(0x1ad,'0x273','0x562','0x192',-'0x27a')+mm(0x7a6,'0xce1',0xd88,'0xaf9','0xc78')+mv('0xc57','0xcf7',0xe7b,'0xdc4','0x8a9')
2025-03-20 15:49:47 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:47 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 27 2c 2d 27 30 78 34 32 30 27 29 5d 28 29 2c 66 5b 6d 68 28 27 30 78 64 63 27 2c 30 78 32 62 33 2c 27 30 78 35 32 34 27 2c 30 78 33 30 31 2c 30 78 31 30 37 29 5d 28 6f 2c 66 5b 6d 68 28 27 30 78 37 31 63 27 2c 30 78 34 30 66 2c 27 30 78 38 37 33 27 2c 30 78 32 31 30 2c 27 30 78 33 62 37 27 29 5d 29 5b 6d 46 28 27 30 78 32 32 32 27 2c 27 30 78 36 33 39 27 2c 27 30 78 33 36 65 27 2c 27 30 78 37 35 35 27 2c 30 78 36 62 32 29 5d 28 4e 5b 66 5b 6d 6c 28 30 78 35 31 35 2c 30 78 31 35 33 2c 2d 27 30 78 61 32 27 2c 30 78 36 66 33 2c 30 78 33 62 32 29 5d 5d 29 2c 28 66 5b 6d 4d 28 2d 30 78 31 36 33 2c 2d 30 78 31 38 39 2c 2d 30 78 62 66 2c 2d 30 78 32 39 37 2c 30 78 33 34 66 29 5d 28 6b 2c 66 5b 6d 57 28 27 30 78 61 33 35 27 2c 27 30 78 36 66 32 Data Ascii: 1f40',-'0x420')](),f[mh('0xdc',0x2b3,'0x524',0x301,0x107)](o,f[mh('0x71c',0x40f,'0x873',0x210,'0x3b7')])[mF('0x222','0x639','0x36e','0x755',0x6b2)](N[f[ml(0x515,0x153,-'0xa2',0x6f3,0x3b2)]]),(f[mM(-0x163,-0x189,-0xbf,-0x297,0x34f)](k,f[mW('0xa35','0x6f2
2025-03-20 15:49:47 UTC	7822	IN	Data Raw: 27 29 2b 6d 6a 28 27 30 78 33 65 33 27 2c 30 78 35 36 65 2c 27 30 78 32 64 66 27 2c 2d 30 78 31 62 66 2c 30 78 33 30 37 29 2b 6d 5a 28 27 30 78 32 30 34 27 2c 2d 30 78 35 66 2c 30 78 35 35 36 2c 2d 27 30 78 32 64 32 27 2c 30 78 31 32 30 29 2b 6d 71 28 30 78 39 35 61 2c 27 30 78 64 32 30 27 2c 27 30 78 38 61 33 27 2c 27 30 78 39 62 63 27 2c 27 30 78 39 31 65 27 29 2b 6d 6a 28 27 30 78 31 65 63 27 2c 27 30 78 38 62 63 27 2c 27 30 78 33 62 64 27 2c 30 78 31 65 62 2c 30 78 38 38 66 29 2b 6d 70 28 27 30 78 36 35 35 27 2c 30 78 35 39 65 2c 27 30 78 33 30 65 27 2c 27 30 78 34 37 38 27 2c 27 30 78 61 65 27 29 2b 6d 5a 28 27 30 78 35 30 31 27 2c 27 30 78 34 39 63 27 2c 30 78 35 2c 2d 30 78 32 36 2c 27 30 78 33 37 30 27 29 2b 6d 5a 28 30 78 32 30 66 2c 30 78 34 38 Data Ascii: ')+mj('0x3e3',0x56e,'0x2df',-0x1bf,0x307)+mZ('0x204',-0x5f,0x556,-'0x2d2',0x120)+mq(0x95a,'0xd20','0x8a3','0x9bc','0x91e')+mj('0x1ec','0x8bc','0x3bd',0x1eb,0x88f)+mp('0x655',0x59e,'0x30e','0x478','0xae')+mZ('0x501','0x49c',0x5,-0x26,'0x370')+mZ(0x20f,0x48
2025-03-20 15:49:47 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:47 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 34 62 36 27 29 5d 29 29 7b 76 61 72 20 6e 3b 74 72 79 7b 47 5b 6d 44 28 27 30 78 39 38 32 27 2c 27 30 78 38 66 63 27 2c 30 78 35 36 39 2c 27 30 78 34 36 37 27 2c 27 30 78 39 30 66 27 29 5d 28 47 5b 6d 4b 28 27 30 78 63 63 27 2c 2d 30 78 33 33 39 2c 27 30 78 31 37 34 27 2c 2d 30 78 31 66 66 2c 27 30 78 32 37 63 27 29 5d 2c 47 5b 6d 44 28 30 78 32 36 34 2c 27 30 78 31 39 27 2c 30 78 33 61 62 2c 27 30 78 36 61 61 27 2c 30 78 35 39 39 29 5d 29 3f 73 5b 6d 4c 28 27 30 78 38 39 64 27 2c 30 78 39 31 62 2c 30 78 65 61 63 2c 27 30 78 63 65 34 27 2c 30 78 63 32 34 29 5d 28 59 2c 73 5b 6d 44 28 30 78 39 62 33 2c 27 30 78 38 32 38 27 2c 30 78 35 39 64 2c 27 30 78 35 32 62 27 2c 27 30 78 62 62 31 27 29 5d 29 5b 6d 64 28 30 78 32 61 66 2c 30 78 35 39 Data Ascii: 1f404b6')])){var n;try{G[mD('0x982','0x8fc',0x569,'0x467','0x90f')](G[mK('0xcc',-0x339,'0x174',-0x1ff,'0x27c')],G[mD(0x264,'0x19',0x3ab,'0x6aa',0x599)])?s[mL('0x89d',0x91b,0xeac,'0xce4',0xc24)](Y,s[mD(0x9b3,'0x828',0x59d,'0x52b','0xbb1')])[md(0x2af,0x59

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:46 UTC	718	OUT	GET /m/ecpt/XE9AJT1ZW0VSHVB5EZALISR07 HTTP/1.1 Host: td8pnjn8vd.gunorkernt.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htm Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
2025-03-20 15:49:47 UTC	268	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:49:46 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.2.2 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/javascript; charset: UTF-8;charset=UTF-8
2025-03-20 15:49:47 UTC	7924	IN	Data Raw: 33 65 32 37 0d 0a 28 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 62 31 39 38 39 2c 5f 30 78 34 64 64 38 64 64 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 39 38 63 37 36 30 28 5f 30 78 35 62 63 30 36 36 2c 5f 30 78 32 62 66 65 38 62 2c 5f 30 78 33 61 65 35 61 34 2c 5f 30 78 62 62 32 64 63 63 2c 5f 30 78 31 31 35 35 65 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 35 62 63 30 36 36 2d 20 2d 30 78 32 64 66 2c 5f 30 78 62 62 32 64 63 63 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 65 65 30 37 31 28 5f 30 78 32 63 63 64 62 62 2c 5f 30 78 35 38 38 63 64 35 2c 5f 30 78 32 31 66 36 31 34 2c 5f 30 78 33 65 38 65 32 66 2c 5f 30 78 34 64 32 31 39 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 34 64 32 31 39 61 2d 20 2d 30 78 32 32 33 2c Data Ascii: 3e27(function(_0x5b1989,_0x4dd8dd){function _0x98c760(_0x5bc066,_0x2bfe8b,_0x3ae5a4,_0xbb2dcc,_0x1155ea){return _0x4e53(_0x5bc066- -0x2df,_0xbb2dcc);}function _0x1ee071(_0x2ccdbb,_0x588cd5,_0x21f614,_0x3e8e2f,_0x4d219a){return _0x4e53(_0x4d219a- -0x223,
2025-03-20 15:49:47 UTC	7993	IN	Data Raw: 2c 5f 30 78 35 61 32 36 37 31 2c 5f 30 78 34 62 66 33 66 37 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 35 61 32 36 37 31 2d 20 2d 30 78 32 64 39 2c 5f 30 78 32 64 62 32 64 31 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 31 39 37 35 34 63 28 5f 30 78 33 33 39 30 32 62 2c 5f 30 78 34 33 39 31 30 36 2c 5f 30 78 33 31 39 36 36 64 2c 5f 30 78 33 39 36 65 37 62 2c 5f 30 78 39 64 64 64 36 65 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 33 31 39 36 36 64 2d 20 2d 30 78 32 36 62 2c 5f 30 78 39 64 64 64 36 65 29 3b 7d 76 61 72 20 5f 30 78 32 66 38 63 34 30 3d 7b 7d 3b 5f 30 78 32 66 38 63 34 30 5b 5f 30 78 33 34 30 32 34 64 28 30 78 34 38 39 2c 30 78 35 61 32 2c 30 78 34 30 38 2c 30 78 35 66 62 2c 30 78 35 64 33 29 5d 3d 5f 30 78 33 Data Ascii: ,_0x5a2671,_0x4bf3f7){return _0x4e53(_0x5a2671- -0x2d9,_0x2db2d1);}function _0x19754c(_0x33902b,_0x439106,_0x31966d,_0x396e7b,_0x9ddd6e){return _0x4e53(_0x31966d- -0x26b,_0x9ddd6e);}var _0x2f8c40={};_0x2f8c40[_0x34024d(0x489,0x5a2,0x408,0x5fb,0x5d3)]=_0x3
2025-03-20 15:49:47 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:47 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 20 2d 30 78 31 31 36 2c 5f 30 78 61 34 32 32 63 64 2d 30 78 31 33 39 2c 5f 30 78 34 65 34 65 30 36 2d 30 78 31 35 39 2c 5f 30 78 61 34 32 32 63 64 2c 5f 30 78 35 62 38 62 65 61 2d 30 78 38 37 29 3b 7d 66 75 6e 63 74 69 6f 6e 20 5f 30 78 32 34 34 34 63 30 28 5f 30 78 31 64 31 33 65 39 2c 5f 30 78 34 39 61 65 33 35 2c 5f 30 78 35 39 62 64 35 37 2c 5f 30 78 35 33 37 36 66 65 2c 5f 30 78 62 61 63 35 65 35 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 38 30 36 39 64 28 5f 30 78 31 64 31 33 65 39 2d 30 78 31 39 2c 5f 30 78 34 39 61 65 33 35 2d 30 78 39 65 2c 5f 30 78 62 61 63 35 65 35 2d 20 2d 30 78 36 36 61 2c 5f 30 78 34 39 61 65 33 35 2c 5f 30 78 62 61 63 35 65 35 2d 30 78 64 30 29 3b 7d 76 61 72 20 5f 30 78 38 34 64 65 36 65 3d 7b 27 76 55 73 7a Data Ascii: 1f40 -0x116,_0xa422cd-0x139,_0x4e4e06-0x159,_0xa422cd,_0x5b8bea-0x87);}function _0x2444c0(_0x1d13e9,_0x49ae35,_0x59bd57,_0x5376fe,_0xbac5e5){return _0x58069d(_0x1d13e9-0x19,_0x49ae35-0x9e,_0xbac5e5- -0x66a,_0x49ae35,_0xbac5e5-0xd0);}var _0x84de6e={'vUsz
2025-03-20 15:49:47 UTC	7822	IN	Data Raw: 31 38 37 2c 5f 30 78 31 33 32 30 36 35 29 3b 7d 72 65 74 75 72 6e 20 5f 30 78 65 63 66 35 38 39 5b 5f 30 78 34 39 30 61 62 30 28 2d 30 78 31 30 34 2c 30 78 31 30 36 2c 2d 30 78 35 38 2c 2d 30 78 31 63 32 2c 2d 30 78 35 37 29 5d 28 5f 30 78 32 61 37 62 32 62 2c 5f 30 78 32 33 64 32 35 33 29 3b 7d 2c 27 54 6f 48 65 78 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 31 30 61 62 63 37 2c 5f 30 78 35 31 30 39 66 61 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 65 61 39 39 65 38 28 5f 30 78 32 35 33 35 32 34 2c 5f 30 78 34 63 38 35 37 34 2c 5f 30 78 32 34 62 30 61 66 2c 5f 30 78 32 39 38 31 34 37 2c 5f 30 78 32 37 34 36 35 35 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 32 34 62 30 61 66 2d 30 78 33 31 39 2c 5f 30 78 34 63 38 35 37 34 29 3b 7d 72 65 74 75 Data Ascii: 187,_0x132065);}return _0xecf589[_0x490ab0(-0x104,0x106,-0x58,-0x1c2,-0x57)](_0x2a7b2b,_0x23d253);},'ToHex':function(_0x10abc7,_0x5109fa){function _0xea99e8(_0x253524,_0x4c8574,_0x24b0af,_0x298147,_0x274655){return _0x4e53(_0x24b0af-0x319,_0x4c8574);}retu
2025-03-20 15:49:47 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:47 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 34 65 38 37 66 2c 5f 30 78 31 32 66 61 61 38 2c 5f 30 78 32 64 30 37 31 66 29 7b 72 65 74 75 72 6e 20 5f 30 78 34 65 35 33 28 5f 30 78 34 34 30 31 30 61 2d 20 2d 30 78 38 32 2c 5f 30 78 33 34 65 38 37 66 29 3b 7d 72 65 74 75 72 6e 20 5f 30 78 31 33 31 38 33 32 5b 5f 30 78 31 37 31 62 65 34 28 30 78 31 39 38 2c 30 78 31 30 35 2c 30 78 65 2c 30 78 33 36 34 2c 2d 30 78 32 65 29 5d 28 5f 30 78 34 31 63 39 39 64 2c 5f 30 78 34 36 35 36 62 35 2c 5f 30 78 35 34 65 66 64 30 2c 5f 30 78 32 61 30 37 66 37 29 3b 7d 2c 27 66 46 51 54 47 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 33 66 62 38 64 63 2c 5f 30 78 34 63 34 32 36 34 29 7b 66 75 6e 63 74 69 6f 6e 20 5f 30 78 35 62 66 62 39 66 28 5f 30 78 35 38 65 34 33 64 2c 5f 30 78 31 30 37 66 39 32 2c 5f Data Ascii: 1f404e87f,_0x12faa8,_0x2d071f){return _0x4e53(_0x44010a- -0x82,_0x34e87f);}return _0x131832[_0x171be4(0x198,0x105,0xe,0x364,-0x2e)](_0x41c99d,_0x4656b5,_0x54efd0,_0x2a07f7);},'fFQTG':function(_0x3fb8dc,_0x4c4264){function _0x5bfb9f(_0x58e43d,_0x107f92,_
2025-03-20 15:49:47 UTC	7822	IN	Data Raw: 44 43 4f 64 27 2c 27 54 56 75 47 75 27 2c 27 76 55 73 7a 42 27 2c 27 55 64 49 51 4f 27 2c 27 4f 46 5a 4e 77 27 2c 27 74 57 79 45 6a 27 2c 27 6a 6d 46 6c 78 27 2c 27 68 72 71 53 7a 27 2c 27 71 49 52 44 4a 27 2c 27 6f 6d 74 58 6d 27 2c 27 4f 72 72 43 72 27 2c 27 72 56 71 72 61 27 2c 27 42 4e 4d 6c 64 27 2c 27 69 61 71 66 66 27 2c 27 62 7a 65 75 65 27 2c 27 53 77 79 6b 53 27 2c 27 6b 59 72 54 68 27 2c 27 6b 4f 6e 49 65 27 2c 27 7a 6e 53 58 5a 27 2c 27 42 6b 6f 4e 69 27 2c 27 68 55 6a 4c 63 27 2c 27 65 68 6a 6d 4a 27 2c 27 50 78 79 6e 4b 27 2c 27 41 54 6b 77 74 27 2c 27 62 70 72 47 45 27 2c 27 72 75 63 74 6f 27 2c 27 77 47 59 6f 48 27 2c 27 4e 72 75 54 4a 27 2c 27 70 46 4b 51 54 27 2c 27 77 51 47 4f 7a 27 2c 27 71 53 55 55 43 27 2c 27 4e 79 6c 59 53 27 2c 27 Data Ascii: DCOd','TVuGu','vUszB','UdIQO','OFZNw','tWyEj','jmFlx','hrqSz','qIRDJ','omtXm','OrrCr','rVqra','BNMld','iaqff','bzeue','SwykS','kYrTh','kOnIe','znSXZ','BkoNi','hUjLc','ehjmJ','PxynK','ATkwt','bprGE','ructo','wGYoH','NruTJ','pFKQT','wQGOz','qSUUC','NylYS','
2025-03-20 15:49:47 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:47 UTC	8192	IN	Data Raw: 31 66 34 30 0d 0a 30 78 32 31 63 38 31 63 29 3b 7d 2c 27 68 67 50 41 59 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 35 35 38 38 33 2c 5f 30 78 35 62 34 66 31 66 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 35 35 38 38 33 28 5f 30 78 35 62 34 66 31 66 29 3b 7d 2c 27 6e 41 4d 69 54 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 32 33 34 33 37 37 2c 5f 30 78 35 65 38 64 32 30 2c 5f 30 78 32 64 39 38 66 33 2c 5f 30 78 31 61 62 33 63 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 32 33 34 33 37 37 28 5f 30 78 35 65 38 64 32 30 2c 5f 30 78 32 64 39 38 66 33 2c 5f 30 78 31 61 62 33 63 61 29 3b 7d 2c 27 4e 6a 74 75 6c 27 3a 66 75 6e 63 74 69 6f 6e 28 5f 30 78 35 65 63 33 34 66 2c 5f 30 78 32 35 35 66 65 61 29 7b 72 65 74 75 72 6e 20 5f 30 78 35 65 63 33 34 66 2a 5f 30 78 32 35 35 Data Ascii: 1f400x21c81c);},'hgPAY':function(_0x255883,_0x5b4f1f){return _0x255883(_0x5b4f1f);},'nAMiT':function(_0x234377,_0x5e8d20,_0x2d98f3,_0x1ab3ca){return _0x234377(_0x5e8d20,_0x2d98f3,_0x1ab3ca);},'Njtul':function(_0x5ec34f,_0x255fea){return _0x5ec34f*_0x255

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:50 UTC	777	OUT	GET /m/bxg/2T5ROP9O6ZJUGPOAF2HOYWL1C HTTP/1.1 Host: td8pnjn8vd.gunorkernt.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htm Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
2025-03-20 15:49:50 UTC	247	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:49:50 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.2.2 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-20 15:49:50 UTC	1871	IN	Data Raw: 37 34 38 0d 0a 3c 73 76 67 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 20 77 69 64 74 68 3d 22 31 39 32 30 22 20 68 65 69 67 68 74 3d 22 31 30 38 30 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 3e 3c 67 20 6f 70 61 63 69 74 79 3d 22 2e 32 22 20 63 6c 69 70 2d 70 61 74 68 3d 22 75 72 6c 28 23 45 29 22 3e 3c 70 61 74 68 20 64 3d 22 4d 31 34 36 36 2e 34 20 31 37 39 35 2e 32 63 39 35 30 2e 33 37 20 30 20 31 37 32 30 2e 38 2d 36 32 37 2e 35 32 20 31 37 32 30 2e 38 2d 31 34 30 31 2e 36 53 32 34 31 36 2e 37 37 2d 31 30 30 38 20 31 34 36 36 2e 34 2d 31 30 30 38 2d 32 35 34 2e 34 2d 33 38 30 2e 34 38 32 2d 32 35 34 2e 34 20 33 39 33 2e 36 73 37 37 30 2e 34 32 38 20 31 34 30 31 2e 36 20 31 37 32 30 2e 38 20 31 Data Ascii: 748<svg xmlns="http://www.w3.org/2000/svg" width="1920" height="1080" fill="none"><g opacity=".2" clip-path="url(#E)"><path d="M1466.4 1795.2c950.37 0 1720.8-627.52 1720.8-1401.6S2416.77-1008 1466.4-1008-254.4-380.482-254.4 393.6s770.428 1401.6 1720.8 1
2025-03-20 15:49:50 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:50 UTC	625	OUT	GET /?format=json HTTP/1.1 Host: api.ipify.org Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: application/json, text/javascript, /; q=0.01 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Origin: https://td8pnjn8vd.gunorkernt.shop Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://td8pnjn8vd.gunorkernt.shop/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-20 15:49:50 UTC	467	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:49:50 GMT Content-Type: application/json Content-Length: 20 Connection: close Access-Control-Allow-Origin: * Vary: Origin cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 92365c9dafa00fab-EWR server-timing: cfL4;desc="?proto=TCP&rtt=105566&min_rtt=103979&rtt_var=23600&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2815&recv_bytes=1197&delivery_rate=35829&cwnd=230&unsent_bytes=0&cid=c647712436cd4e93&ts=396&x=0"
2025-03-20 15:49:50 UTC	20	IN	Data Raw: 7b 22 69 70 22 3a 22 31 36 31 2e 37 37 2e 31 33 2e 32 22 7d Data Ascii: {"ip":"161.77.13.2"}

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:50 UTC	858	OUT	POST /m/script.php HTTP/1.1 Host: td8pnjn8vd.gunorkernt.shop Connection: keep-alive Content-Length: 220 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://td8pnjn8vd.gunorkernt.shop Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htm Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
2025-03-20 15:49:50 UTC	220	OUT	Data Raw: 61 63 74 69 6f 6e 3d 73 69 67 6e 75 70 26 61 74 79 70 65 3d 45 6d 61 69 6c 50 61 67 65 26 65 6d 61 69 6c 3d 26 70 68 6f 6e 65 3d 26 70 67 74 79 70 65 3d 26 70 61 67 65 6d 73 67 3d 25 37 42 25 32 32 4c 6f 67 69 6e 50 61 67 65 25 32 32 25 33 41 25 37 42 25 32 32 74 65 78 74 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 63 6f 6c 6f 72 25 32 32 25 33 41 25 32 32 62 6c 61 63 6b 25 32 32 25 37 44 25 32 43 25 32 32 50 61 73 73 50 61 67 65 25 32 32 25 33 41 25 37 42 25 32 32 74 65 78 74 25 32 32 25 33 41 6e 75 6c 6c 25 32 43 25 32 32 63 6f 6c 6f 72 25 32 32 25 33 41 25 32 32 62 6c 61 63 6b 25 32 32 25 37 44 25 37 44 26 6d 6f 64 65 3d 47 6f 74 6f 54 79 70 65 Data Ascii: action=signup&atype=EmailPage&email=&phone=&pgtype=&pagemsg=%7B%22LoginPage%22%3A%7B%22text%22%3Anull%2C%22color%22%3A%22black%22%7D%2C%22PassPage%22%3A%7B%22text%22%3Anull%2C%22color%22%3A%22black%22%7D%7D&mode=GotoType
2025-03-20 15:49:51 UTC	438	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:49:50 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.2.2 X-Powered-By: PHP/7.4.33 Access-Control-Allow-Headers: Authorization, Content-Type Access-Control-Allow-Origin: * Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: application/php; charset=utf-8
2025-03-20 15:49:51 UTC	5140	IN	Data Raw: 31 34 30 63 0d 0a 7b 22 73 74 61 74 75 73 22 3a 22 73 75 63 63 65 73 73 22 2c 22 6d 73 67 22 3a 22 3c 64 69 76 20 72 6f 6c 65 3d 5c 22 6d 61 69 6e 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 44 37 30 43 31 52 52 33 51 37 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 5c 22 70 61 67 69 6e 61 74 69 6f 6e 2d 76 69 65 77 20 61 6e 69 6d 61 74 65 20 73 6c 69 64 65 2d 69 6e 2d 6e 65 78 74 5c 22 3e 5c 72 5c 6e 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: 140c{"status":"success","msg":"<div role=\"main\">\r\n <div class=\"D70C1RR3Q7\">\r\n <div class=\"pagination-view animate slide-in-next\">\r\n
2025-03-20 15:49:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:49:51 UTC	776	OUT	GET /m/ic/DX0UK8HRC9PKKWTYRMG90JHH6 HTTP/1.1 Host: td8pnjn8vd.gunorkernt.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htm Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
2025-03-20 15:49:51 UTC	247	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:49:51 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.2.2 X-Powered-By: PHP/7.4.33 Vary: Accept-Encoding,User-Agent Connection: close Transfer-Encoding: chunked Content-Type: text/html; charset=UTF-8
2025-03-20 15:49:51 UTC	7945	IN	Data Raw: 33 65 33 63 0d 0a 00 00 01 00 06 00 80 80 10 00 00 00 00 00 68 28 00 00 66 00 00 00 48 48 10 00 00 00 00 00 e8 0d 00 00 ce 28 00 00 30 30 10 00 00 00 00 00 68 06 00 00 b6 36 00 00 20 20 10 00 00 00 00 00 e8 02 00 00 1e 3d 00 00 18 18 10 00 00 00 00 00 e8 01 00 00 06 40 00 00 10 10 10 00 00 00 00 00 28 01 00 00 ee 41 00 00 28 00 00 00 80 00 00 00 00 01 00 00 01 00 04 00 00 00 00 00 00 28 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 ff ff ff 00 ef a4 00 00 00 b9 ff 00 00 ba 7f 00 22 50 f2 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 22 20 00 00 03 33 33 33 33 33 33 33 33 33 Data Ascii: 3e3ch(fHH(00h6 =@(A(("P"""""""""""""""""""""""""""""" 333333333
2025-03-20 15:49:51 UTC	7993	IN	Data Raw: 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 55 50 00 00 04 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 44 Data Ascii: DDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDDDDDDDDDDDDDDUUUUUUUUUUUUUUUUUUUUUUUUUUUUUUPDDDDDDDDDDDDDDDDDD
2025-03-20 15:49:51 UTC	2	IN	Data Raw: 0d 0a Data Ascii:
2025-03-20 15:49:51 UTC	1249	IN	Data Raw: 34 64 61 0d 0a 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 22 22 22 22 22 22 22 c0 03 33 33 33 33 33 33 33 99 99 99 99 99 99 99 70 03 33 33 33 33 33 33 33 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 aa aa aa aa aa aa aa 50 04 ee ee ee ee ee ee ee 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 66 66 66 66 66 66 66 b0 0d 88 88 88 88 88 88 88 Data Ascii: 4da"3333333"""""""3333333"""""""3333333p3333333Pfffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff
2025-03-20 15:49:51 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-20 15:50:12 UTC	858	OUT	POST /m/script.php HTTP/1.1 Host: td8pnjn8vd.gunorkernt.shop Connection: keep-alive Content-Length: 541 sec-ch-ua-platform: "Windows" X-Requested-With: XMLHttpRequest User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: application/x-www-form-urlencoded; charset=UTF-8 sec-ch-ua-mobile: ?0 Origin: https://td8pnjn8vd.gunorkernt.shop Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://td8pnjn8vd.gunorkernt.shop/m/3d268d1ef2c2d2b47e0a97194edf7116.htm Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 Cookie: PHPSESSID=de0c8e7c82bb468287ab94ee77aa01dd; preload=1; rt=3d268d1ef2c2d2b47e0a97194edf7116.htm
2025-03-20 15:50:12 UTC	541	OUT	Data Raw: 61 63 74 69 6f 6e 3d 73 69 67 6e 75 70 26 76 61 6c 78 3d 25 37 42 25 32 32 75 73 65 72 6e 61 6d 65 25 32 32 25 33 41 25 32 32 6d 61 6d 70 75 62 25 34 30 7a 7a 74 7a 79 6d 2e 6f 72 67 25 32 32 25 32 43 25 32 32 69 73 4f 74 68 65 72 49 64 70 53 75 70 70 6f 72 74 65 64 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 63 68 65 63 6b 50 68 6f 6e 65 73 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 69 73 52 65 6d 6f 74 65 4e 47 43 53 75 70 70 6f 72 74 65 64 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 69 73 43 6f 6f 6b 69 65 42 61 6e 6e 65 72 53 68 6f 77 6e 25 32 32 25 33 41 66 61 6c 73 65 25 32 43 25 32 32 69 73 46 69 64 6f 53 75 70 70 6f 72 74 65 64 25 32 32 25 33 41 74 72 75 65 25 32 43 25 32 32 6f 72 69 67 69 6e 61 6c 52 65 71 75 65 73 74 25 32 32 25 Data Ascii: action=signup&valx=%7B%22username%22%3A%22mampub%40zztzym.org%22%2C%22isOtherIdpSupported%22%3Atrue%2C%22checkPhones%22%3Afalse%2C%22isRemoteNGCSupported%22%3Atrue%2C%22isCookieBannerShown%22%3Afalse%2C%22isFidoSupported%22%3Atrue%2C%22originalRequest%22%
2025-03-20 15:50:16 UTC	438	IN	HTTP/1.1 200 OK Date: Thu, 20 Mar 2025 15:50:12 GMT Server: Apache/2.4.62 (Unix) OpenSSL/3.2.2 X-Powered-By: PHP/7.4.33 Access-Control-Allow-Headers: Authorization, Content-Type Access-Control-Allow-Origin: * Expires: Thu, 19 Nov 1981 08:52:00 GMT Cache-Control: no-store, no-cache, must-revalidate Pragma: no-cache Vary: User-Agent Connection: close Transfer-Encoding: chunked Content-Type: application/php; charset=utf-8
2025-03-20 15:50:16 UTC	708	IN	Data Raw: 32 62 64 0d 0a 7b 22 55 73 65 72 6e 61 6d 65 22 3a 22 6d 61 6d 70 75 62 40 7a 7a 74 7a 79 6d 2e 6f 72 67 22 2c 22 44 69 73 70 6c 61 79 22 3a 22 6d 61 6d 70 75 62 40 7a 7a 74 7a 79 6d 2e 6f 72 67 22 2c 22 49 66 45 78 69 73 74 73 52 65 73 75 6c 74 22 3a 31 2c 22 49 73 55 6e 6d 61 6e 61 67 65 64 22 3a 66 61 6c 73 65 2c 22 54 68 72 6f 74 74 6c 65 53 74 61 74 75 73 22 3a 31 2c 22 43 72 65 64 65 6e 74 69 61 6c 73 22 3a 7b 22 50 72 65 66 43 72 65 64 65 6e 74 69 61 6c 22 3a 31 2c 22 48 61 73 50 61 73 73 77 6f 72 64 22 3a 74 72 75 65 2c 22 52 65 6d 6f 74 65 4e 67 63 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 46 69 64 6f 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 51 72 43 6f 64 65 50 69 6e 50 61 72 61 6d 73 22 3a 6e 75 6c 6c 2c 22 53 61 73 50 61 72 61 6d 73 22 3a 6e Data Ascii: 2bd{"Username":"mampub@zztzym.org","Display":"mampub@zztzym.org","IfExistsResult":1,"IsUnmanaged":false,"ThrottleStatus":1,"Credentials":{"PrefCredential":1,"HasPassword":true,"RemoteNgcParams":null,"FidoParams":null,"QrCodePinParams":null,"SasParams":n
2025-03-20 15:50:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0