Edit tour

Windows Analysis Report
http://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html

Overview

General Information

Sample URL:	http://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html
Analysis ID:	1500186
Infos:

Detection

Score:	48
Range:	0 - 100
Whitelisted:	false
Confidence:	100%

Signatures

Antivirus / Scanner detection for submitted sample

Detected non-DNS traffic on DNS port

HTML body contains low number of good links

HTML title does not match URL

Classification

Process Tree

System is w10x64

chrome.exe (PID: 3980 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 5408 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2172,i,10854123595240179640,12163993913165256168,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8 MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

chrome.exe (PID: 6448 cmdline: "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html" MD5: 45DE480806D1B5D462A7DDE4DCEFC4E4)

cleanup

Malware Configuration

⊘No configs have been found

Yara Signatures

⊘No yara matches

Sigma Signatures

⊘No Sigma rule has matched

Suricata Signatures

⊘No Suricata rule has matched

Joe Sandbox Signatures

Click to jump to signature section

Show All Signature Results

AV Detection

Antivirus / Scanner detection for submitted sample

Source: http://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html	Avira URL Cloud: detection malicious, Label: phishing
Source: http://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html	SlashNext: detection malicious, Label: Fraudulent Website type: Phishing & Social Engineering

Source: https://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html

HTTP Parser: Number of links: 0

Source: https://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html

HTTP Parser: Title: MetaMask does not match URL

Source: https://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html

HTTP Parser: <input type="password" .../> found

Source: https://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html	HTTP Parser: No <meta name="author".. found
Source: https://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html	HTTP Parser: No <meta name="author".. found

Source: https://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found
Source: https://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html	HTTP Parser: No <meta name="copyright".. found

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49764 version: TLS 1.2

Source: global traffic

TCP traffic: 192.168.2.4:58656 -> 1.1.1.1:53

Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 173.222.162.32
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 184.28.90.27
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown	TCP traffic detected without corresponding DNS query: 2.19.126.137
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	TCP traffic detected without corresponding DNS query: 93.184.221.240
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1
Source: unknown	UDP traffic detected without corresponding DNS query: 1.1.1.1

Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-78727057140540a199a7e00bf238a392.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Sec-Fetch-Site: noneSec-Fetch-Mode: navigateSec-Fetch-User: ?1Sec-Fetch-Dest: documentsec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0sec-ch-ua-platform: "Windows"Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-78727057140540a199a7e00bf238a392.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: scriptReferer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"Origin: https://pub-78727057140540a199a7e00bf238a392.r2.devsec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: /Sec-Fetch-Site: cross-siteSec-Fetch-Mode: corsSec-Fetch-Dest: scriptReferer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /logo.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /confirm.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /full.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /eye-close.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /tada.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.1.1.min.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /jquery-3.3.1.js HTTP/1.1Host: code.jquery.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1Host: cdnjs.cloudflare.comConnection: keep-aliveUser-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: /Sec-Fetch-Site: noneSec-Fetch-Mode: corsSec-Fetch-Dest: emptyAccept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /fs/windows/config.json HTTP/1.1Connection: Keep-AliveAccept: /Accept-Encoding: identityIf-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMTRange: bytes=0-2147483646User-Agent: Microsoft BITS/7.8Host: fs.microsoft.com
Source: global traffic	HTTP traffic detected: GET /icon.png HTTP/1.1Host: bestfilltype.netlify.appConnection: keep-alivesec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117"sec-ch-ua-mobile: ?0User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36sec-ch-ua-platform: "Windows"Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8Sec-Fetch-Site: cross-siteSec-Fetch-Mode: no-corsSec-Fetch-Dest: imageReferer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/Accept-Encoding: gzip, deflate, brAccept-Language: en-US,en;q=0.9
Source: global traffic	HTTP traffic detected: GET /index.html HTTP/1.1Host: pub-78727057140540a199a7e00bf238a392.r2.devConnection: keep-aliveUpgrade-Insecure-Requests: 1User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7Accept-Encoding: gzip, deflateAccept-Language: en-US,en;q=0.9

Source: global traffic	DNS traffic detected: DNS query: pub-78727057140540a199a7e00bf238a392.r2.dev
Source: global traffic	DNS traffic detected: DNS query: www.google.com
Source: global traffic	DNS traffic detected: DNS query: code.jquery.com
Source: global traffic	DNS traffic detected: DNS query: cdnjs.cloudflare.com
Source: global traffic	DNS traffic detected: DNS query: bestfilltype.netlify.app

Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Tue, 27 Aug 2024 22:52:33 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J6B0MX4S2FF1MC2K68W9XGMKContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Tue, 27 Aug 2024 22:52:33 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J6B0MX4WW46BN1FE8ME2FM1EContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Tue, 27 Aug 2024 22:52:34 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J6B0MY3R4Q3223NRAA5KQRR9Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Tue, 27 Aug 2024 22:52:34 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J6B0MY3ZWPNJH96KN2JZXT9HContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Tue, 27 Aug 2024 22:52:35 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J6B0MZB6D74NKYVPXZXHTK63Content-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Tue, 27 Aug 2024 22:52:36 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J6B0N0JEVTXE04R0DA4CJADHContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Tue, 27 Aug 2024 22:52:37 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J6B0N1ED3VZGWN9Z42AEFFSVContent-Length: 50Connection: close
Source: global traffic	HTTP traffic detected: HTTP/1.1 404 Not FoundCache-Control: private, max-age=0Content-Type: text/plain; charset=utf-8Date: Tue, 27 Aug 2024 22:52:38 GMTServer: NetlifyStrict-Transport-Security: max-age=31536000; includeSubDomains; preloadX-Nf-Request-Id: 01J6B0N2DN8BYZQGHH6RKMTRB4Content-Length: 50Connection: close

Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: http://jquery.org/license
Source: chromecache_126.2.dr, chromecache_136.2.dr	String found in binary or memory: http://opensource.org/licenses/MIT).
Source: chromecache_130.2.dr	String found in binary or memory: https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Source: chromecache_130.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/confirm.png
Source: chromecache_130.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-close.png
Source: chromecache_130.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/eye-open.png
Source: chromecache_130.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/full.png
Source: chromecache_130.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/icon.png
Source: chromecache_130.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/logo.png
Source: chromecache_130.2.dr	String found in binary or memory: https://bestfilltype.netlify.app/tada.png
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=378607
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=449857
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=470258
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://bugs.chromium.org/p/chromium/issues/detail?id=589347
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/12359
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://bugs.jquery.com/ticket/13378
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=136851
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=137337
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://bugs.webkit.org/show_bug.cgi?id=29084
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://bugzilla.mozilla.org/show_bug.cgi?id=687787
Source: chromecache_130.2.dr	String found in binary or memory: https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Source: chromecache_130.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.1.1.min.js
Source: chromecache_130.2.dr	String found in binary or memory: https://code.jquery.com/jquery-3.3.1.js
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://developer.mozilla.org/en-US/docs/CSS/display
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#common-serializing-idioms
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://drafts.csswg.org/cssom/#resolved-values
Source: chromecache_130.2.dr	String found in binary or memory: https://fonts.googleapis.com/css2?family=Poppins:wght
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1JlFc-K.woff2)
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLBT5Z1xlFQ.woff2)
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1JlFc-K.woff2)
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2)
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1JlFc-K.woff2)
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDD4Z1xlFQ.woff2)
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2)
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2)
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1JlFc-K.woff2)
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLEj6Z1xlFQ.woff2)
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1JlFc-K.woff2)
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLGT9Z1xlFQ.woff2)
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2)
Source: chromecache_139.2.dr	String found in binary or memory: https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2)
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/3229
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://github.com/eslint/eslint/issues/6125
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://github.com/jquery/jquery/pull/557)
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://github.com/jquery/sizzle/pull/225
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://html.spec.whatwg.org/#strip-and-collapse-whitespace
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#category-listed
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://html.spec.whatwg.org/multipage/syntax.html#attributes-2
Source: chromecache_130.2.dr	String found in binary or memory: https://ikulopinawaeniyan.publicvm.com/newes.php
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://jquery.com/
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://jquery.org/license
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://jsperf.com/getall-vs-sizzle/2
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://jsperf.com/thor-indexof-vs-for/5
Source: chromecache_130.2.dr	String found in binary or memory: https://metamask.io/
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://promisesaplus.com/#point-48
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://promisesaplus.com/#point-54
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://promisesaplus.com/#point-57
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://promisesaplus.com/#point-59
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://promisesaplus.com/#point-61
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://promisesaplus.com/#point-64
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://promisesaplus.com/#point-75
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://sizzlejs.com/
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/
Source: chromecache_134.2.dr, chromecache_124.2.dr	String found in binary or memory: https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a

Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49744
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49743
Source: unknown	Network traffic detected: HTTP traffic on port 49758 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49765
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49742
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49764
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49740
Source: unknown	Network traffic detected: HTTP traffic on port 49748 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49743 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49746 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49764 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 58660 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 58660
Source: unknown	Network traffic detected: HTTP traffic on port 49751 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49737
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49759
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49758
Source: unknown	Network traffic detected: HTTP traffic on port 49759 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49753 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49757
Source: unknown	Network traffic detected: HTTP traffic on port 49757 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49675 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49754
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49753
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49752
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49751
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49750
Source: unknown	Network traffic detected: HTTP traffic on port 49740 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49742 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49765 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49747 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49744 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49752 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 49750 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49748
Source: unknown	Network traffic detected: HTTP traffic on port 49754 -> 443
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49747
Source: unknown	Network traffic detected: HTTP traffic on port 443 -> 49746
Source: unknown	Network traffic detected: HTTP traffic on port 49737 -> 443

Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49748 version: TLS 1.2
Source: unknown	HTTPS traffic detected: 184.28.90.27:443 -> 192.168.2.4:49764 version: TLS 1.2

Source: classification engine

Classification label: mal48.win@22/36@20/10

Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2172,i,10854123595240179640,12163993913165256168,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Source: unknown	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html"
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: C:\Program Files\Google\Chrome\Application\chrome.exe "C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2172,i,10854123595240179640,12163993913165256168,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Process created: unknown unknown	Jump to behavior

Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm
Source: C:\Program Files\Google\Chrome\Application\chrome.exe	Automated click: Confirm

Source: Window Recorder

Window detected: More than 3 window changes detected

Mitre Att&ck Matrix

Reconnaissance	Resource Development	Initial Access	Execution	Persistence	Privilege Escalation	Defense Evasion	Credential Access	Discovery	Lateral Movement	Collection	Command and Control	Exfiltration	Impact
Gather Victim Identity Information	Acquire Infrastructure	Valid Accounts	Windows Management Instrumentation	Path Interception	1 Process Injection	1 Process Injection	OS Credential Dumping	System Service Discovery	Remote Services	Data from Local System	1 Encrypted Channel	Exfiltration Over Other Network Medium	Abuse Accessibility Features
Credentials	Domains	Default Accounts	Scheduled Task/Job	Boot or Logon Initialization Scripts	Boot or Logon Initialization Scripts	Rootkit	LSASS Memory	Application Window Discovery	Remote Desktop Protocol	Data from Removable Media	3 Non-Application Layer Protocol	Exfiltration Over Bluetooth	Network Denial of Service
Email Addresses	DNS Server	Domain Accounts	At	Logon Script (Windows)	Logon Script (Windows)	Obfuscated Files or Information	Security Account Manager	Query Registry	SMB/Windows Admin Shares	Data from Network Shared Drive	4 Application Layer Protocol	Automated Exfiltration	Data Encrypted for Impact
Employee Names	Virtual Private Server	Local Accounts	Cron	Login Hook	Login Hook	Binary Padding	NTDS	System Network Configuration Discovery	Distributed Component Object Model	Input Capture	3 Ingress Tool Transfer	Traffic Duplication	Data Destruction

Behavior Graph

Hide Legend

Legend:

Process
Signature
Created File
DNS/IP Info
Is Dropped
Is Windows Process
Number of created Registry Values
Number of created Files
Visual Basic
Delphi
Java
.Net C# or VB.NET
C, C++ or other language
Is malicious
Internet

Screenshots

Thumbnails

This section contains all screenshots as thumbnails, including those not shown in the slideshow.

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Source	Detection	Scanner	Label	Link
http://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html	100%	Avira URL Cloud	phishing
http://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html	100%	SlashNext	Fraudulent Website type: Phishing & Social Engineering

Dropped Files

⊘No Antivirus matches

Unpacked PE Files

⊘No Antivirus matches

Domains

⊘No Antivirus matches

URLs

Source	Detection	Scanner	Label
https://bugs.webkit.org/show_bug.cgi?id=136851	0%	URL Reputation	safe
http://jquery.org/license	0%	URL Reputation	safe
https://jsperf.com/thor-indexof-vs-for/5	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/12359	0%	URL Reputation	safe
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	0%	URL Reputation	safe
https://promisesaplus.com/#point-75	0%	URL Reputation	safe
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	0%	Avira URL Cloud	safe
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	0%	Avira URL Cloud	safe
https://drafts.csswg.org/cssom/#common-serializing-idioms	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=29084	0%	URL Reputation	safe
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	0%	URL Reputation	safe
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	0%	URL Reputation	safe
http://opensource.org/licenses/MIT).	0%	URL Reputation	safe
https://bugs.jquery.com/ticket/13378	0%	URL Reputation	safe
https://promisesaplus.com/#point-64	0%	URL Reputation	safe
https://promisesaplus.com/#point-61	0%	URL Reputation	safe
https://drafts.csswg.org/cssom/#resolved-values	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.1.1.min.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	0%	URL Reputation	safe
https://metamask.io/	0%	URL Reputation	safe
https://promisesaplus.com/#point-59	0%	URL Reputation	safe
https://jsperf.com/getall-vs-sizzle/2	0%	URL Reputation	safe
https://promisesaplus.com/#point-57	0%	URL Reputation	safe
https://promisesaplus.com/#point-54	0%	URL Reputation	safe
https://code.jquery.com/jquery-3.3.1.js	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/forms.html#category-listed	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	0%	URL Reputation	safe
https://github.com/eslint/eslint/issues/6125	0%	Avira URL Cloud	safe
https://github.com/jquery/jquery/pull/557)	0%	Avira URL Cloud	safe
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	0%	Avira URL Cloud	safe
https://ikulopinawaeniyan.publicvm.com/newes.php	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/eye-open.png	0%	Avira URL Cloud	safe
https://developer.mozilla.org/en-US/docs/CSS/display	0%	URL Reputation	safe
https://bestfilltype.netlify.app/confirm.png	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/full.png	0%	Avira URL Cloud	safe
https://jquery.org/license	0%	URL Reputation	safe
https://jquery.com/	0%	URL Reputation	safe
https://bugs.webkit.org/show_bug.cgi?id=137337	0%	URL Reputation	safe
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	0%	URL Reputation	safe
https://promisesaplus.com/#point-48	0%	URL Reputation	safe
https://sizzlejs.com/	0%	URL Reputation	safe
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	0%	URL Reputation	safe
https://github.com/eslint/eslint/issues/3229	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/tada.png	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/icon.png	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/eye-close.png	0%	Avira URL Cloud	safe
https://github.com/jquery/sizzle/pull/225	0%	Avira URL Cloud	safe
https://bestfilltype.netlify.app/logo.png	0%	Avira URL Cloud	safe
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	0%	Avira URL Cloud	safe

Domains and IPs

Contacted Domains

Name	IP	Active	Malicious	Reputation
bg.microsoft.map.fastly.net	199.232.210.172	true	false	unknown
code.jquery.com	151.101.2.137	true	false	unknown
cdnjs.cloudflare.com	104.17.24.14	true	false	unknown
www.google.com	142.250.186.68	true	false	unknown
pub-78727057140540a199a7e00bf238a392.r2.dev	104.18.3.35	true	false	unknown
bestfilltype.netlify.app	3.72.140.173	true	false	unknown
fp2e7a.wpc.phicdn.net	192.229.221.95	true	false	unknown

Contacted URLs

Name	Malicious	Antivirus Detection	Reputation
https://bestfilltype.netlify.app/full.png	false	Avira URL Cloud: safe	unknown
http://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html	true		unknown
https://bestfilltype.netlify.app/confirm.png	false	Avira URL Cloud: safe	unknown
https://code.jquery.com/jquery-3.1.1.min.js	false	URL Reputation: safe	unknown
https://code.jquery.com/jquery-3.3.1.js	false	URL Reputation: safe	unknown
https://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html	false		unknown
https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js	false	Avira URL Cloud: safe	unknown
https://bestfilltype.netlify.app/icon.png	false	Avira URL Cloud: safe	unknown
https://bestfilltype.netlify.app/logo.png	false	Avira URL Cloud: safe	unknown
https://bestfilltype.netlify.app/eye-close.png	false	Avira URL Cloud: safe	unknown
https://bestfilltype.netlify.app/tada.png	false	Avira URL Cloud: safe	unknown

URLs from Memory and Binaries

Name	Source	Malicious	Antivirus Detection	Reputation
https://bugs.webkit.org/show_bug.cgi?id=136851	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
http://jquery.org/license	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/thor-indexof-vs-for/5	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/12359	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20100324014747/http://blindsignals.com/index.php/2009/07/jquery-delay/	chromecache_134.2.dr, chromecache_124.2.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/#strip-and-collapse-whitespace	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-75	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://web.archive.org/web/20141116233347/http://fluidproject.org/blog/2008/01/09/getting-setting-a	chromecache_134.2.dr, chromecache_124.2.dr	false	Avira URL Cloud: safe	unknown
https://drafts.csswg.org/cssom/#common-serializing-idioms	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-fe-disabled	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=29084	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://infra.spec.whatwg.org/#strip-and-collapse-ascii-whitespace	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/6125	chromecache_134.2.dr, chromecache_124.2.dr	false	Avira URL Cloud: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#concept-option-disabled	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/jquery/pull/557)	chromecache_134.2.dr, chromecache_124.2.dr	false	Avira URL Cloud: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=378607	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://github.com/jrburke/requirejs/wiki/Updating-existing-libraries#wiki-anon	chromecache_134.2.dr, chromecache_124.2.dr	false	Avira URL Cloud: safe	unknown
https://bugzilla.mozilla.org/show_bug.cgi?id=687787	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=470258	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
http://opensource.org/licenses/MIT).	chromecache_126.2.dr, chromecache_136.2.dr	false	URL Reputation: safe	unknown
https://bugs.jquery.com/ticket/13378	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-64	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://ikulopinawaeniyan.publicvm.com/newes.php	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
https://promisesaplus.com/#point-61	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://bestfilltype.netlify.app/eye-open.png	chromecache_130.2.dr	false	Avira URL Cloud: safe	unknown
https://drafts.csswg.org/cssom/#resolved-values	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=589347	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/syntax.html#attributes-2	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://metamask.io/	chromecache_130.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-59	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://jsperf.com/getall-vs-sizzle/2	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-57	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://github.com/eslint/eslint/issues/3229	chromecache_134.2.dr, chromecache_124.2.dr	false	Avira URL Cloud: safe	unknown
https://promisesaplus.com/#point-54	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/forms.html#category-listed	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-disabled	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://developer.mozilla.org/en-US/docs/CSS/display	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://jquery.org/license	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://jquery.com/	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://bugs.webkit.org/show_bug.cgi?id=137337	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://html.spec.whatwg.org/multipage/scripting.html#selector-enabled	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://promisesaplus.com/#point-48	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://github.com/jquery/sizzle/pull/225	chromecache_134.2.dr, chromecache_124.2.dr	false	Avira URL Cloud: safe	unknown
https://sizzlejs.com/	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown
https://bugs.chromium.org/p/chromium/issues/detail?id=449857	chromecache_134.2.dr, chromecache_124.2.dr	false	URL Reputation: safe	unknown

World Map of Contacted IPs

No. of IPs < 25%
25% < No. of IPs < 50%
50% < No. of IPs < 75%
75% < No. of IPs

Public IPs

IP	Domain	Country	ASN	ASN Name	Malicious
142.250.186.68	www.google.com	United States	15169	GOOGLEUS	false
104.17.24.14	cdnjs.cloudflare.com	United States	13335	CLOUDFLARENETUS	false
104.18.3.35	pub-78727057140540a199a7e00bf238a392.r2.dev	United States	13335	CLOUDFLARENETUS	false
104.18.2.35	unknown	United States	13335	CLOUDFLARENETUS	false
3.72.140.173	bestfilltype.netlify.app	United States	16509	AMAZON-02US	false
151.101.130.137	unknown	United States	54113	FASTLYUS	false
151.101.2.137	code.jquery.com	United States	54113	FASTLYUS	false
239.255.255.250	unknown	Reserved	unknown	unknown	false

Private

IP
192.168.2.4
192.168.2.5

General Information

Joe Sandbox version:	40.0.0 Tourmaline
Analysis ID:	1500186
Start date and time:	2024-08-28 00:51:32 +02:00
Joe Sandbox product:	CloudBasic
Overall analysis duration:	0h 3m 14s
Hypervisor based Inspection enabled:	false
Report type:	full
Cookbook file name:	browseurl.jbs
Sample URL:	http://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html
Analysis system description:	Windows 10 x64 22H2 with Office Professional Plus 2019, Chrome 117, Firefox 118, Adobe Reader DC 23, Java 8 Update 381, 7zip 23.01
Number of analysed new started processes analysed:	8
Number of new started drivers analysed:	0
Number of existing processes analysed:	0
Number of existing drivers analysed:	0
Number of injected processes analysed:	0
Technologies:	HCA enabled EGA enabled AMSI enabled
Analysis Mode:	default
Analysis stop reason:	Timeout
Detection:	MAL
Classification:	mal48.win@22/36@20/10
EGA Information:	Failed
HCA Information:	Successful, ratio: 100% Number of executed functions: 0 Number of non-executed functions: 0

Warnings

Exclude process from analysis (whitelisted): MpCmdRun.exe, WMIADAP.exe, SIHClient.exe, conhost.exe, svchost.exe
Excluded IPs from analysis (whitelisted): 142.250.184.195, 142.250.185.110, 142.250.110.84, 34.104.35.123, 216.58.206.42, 142.250.185.74, 142.250.186.99, 216.58.206.74, 142.250.184.202, 172.217.18.10, 142.250.186.42, 142.250.74.202, 142.250.185.106, 142.250.186.138, 172.217.18.106, 172.217.16.138, 172.217.23.106, 172.217.16.202, 142.250.186.106, 142.250.185.138, 216.58.212.170, 142.250.186.170, 142.250.185.234, 142.250.185.202, 142.250.184.234, 142.250.181.234, 142.250.185.170, 13.85.23.86, 199.232.210.172, 20.242.39.171, 192.229.221.95, 13.85.23.206, 20.12.23.50, 142.250.184.227, 40.68.123.157
Excluded domains from analysis (whitelisted): fonts.googleapis.com, fs.microsoft.com, accounts.google.com, content-autofill.googleapis.com, ajax.googleapis.com, fonts.gstatic.com, slscr.update.microsoft.com, ctldl.windowsupdate.com.delivery.microsoft.com, clientservices.googleapis.com, ctldl.windowsupdate.com, fe3cr.delivery.mp.microsoft.com, fe3.delivery.mp.microsoft.com, clients2.google.com, edgedl.me.gvt1.com, ocsp.digicert.com, glb.cws.prod.dcat.dsp.trafficmanager.net, ocsp.edge.digicert.com, sls.update.microsoft.com, update.googleapis.com, clients.l.google.com, wu-b-net.trafficmanager.net, glb.sls.prod.dcat.dsp.trafficmanager.net
Not all processes where analyzed, report is missing behavior information
Report size getting too big, too many NtSetInformationFile calls found.
Some HTTPS proxied raw data packets have been limited to 10 per session. Please view the PCAPs for the complete data.
VT rate limit hit for: http://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html

Simulations

Behavior and APIs

⊘No simulations

Joe Sandbox View / Context

IPs

⊘No context

Domains

⊘No context

ASNs

⊘No context

JA3 Fingerprints

⊘No context

Dropped Files

⊘No context

Created / dropped Files

Chrome Cache Entry: 121

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.861467880199449
Encrypted:	false
SSDEEP:	3:ObynQA2TenIo:ObPHq
MD5:	E4C9F0E94FE5BDC474139BCA4B905D99
SHA1:	1BD213D3117DD63F1BB0AF8C101A9B97D17384AA
SHA-256:	9A2A2AD57BE5736107983FE39DB13F0D6D8A84CA7D124837BAAC29985493285C
SHA-512:	AC1FFDE1840FE96231B0DE5B9795104AD4B3A425E06BC7321E4DDA47B5BEB4175BF9422FC8760E36D4F45FA3345626A7258C6334CD2267D4CFBCCDAEEACEA436
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/full.png
Preview:	Not Found - Request ID: 01J6B0MY3ZWPNJH96KN2JZXT9H

Chrome Cache Entry: 122

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7884, version 1.0
Category:	downloaded
Size (bytes):	7884
Entropy (8bit):	7.971946419873228
Encrypted:	false
SSDEEP:	192:xLFDbKO9E3rS3JWBRO/J601FSS5ZUbik3Zy2f0:pd9J5W501otlI
MD5:	9212F6F9860F9FC6C69B02FEDF6DB8C3
SHA1:	AC6D71B4D5FDD2B3DABC9A06FF6C001E4251DA0B
SHA-256:	7D93459D86585BFCDBB7E0376056226ADB25821EE54B96236FE2123E9560929F
SHA-512:	67317495F4B53E20A9F31C034E456E6C37F387DFFB2C092CAA5159BC441CFCADD02749FFE5BBED1D580D5300A59E48A767EF2C6D9978B474F84C1A2CD095C126
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJfecg.woff2
Preview:	wOF2..............?....x.............................`..T..L.6..6..6.$..h. ..\....~2.".8. .w.Q.Y,.?$pC.....)bT(i..@X.m...+...D.Q.O.\-?g.U..Z..._...l..!.lKD.Q..>.9v..V..<...Td$.E..,...o..c.t....!...#..8.A..3..cx~n=Di#....U......K.5jXH.].....j.(.6..]{..IDhZ.......R.....[..X".B~.(Su2..../.I.E...T.l%....'.N.aN.2\,70.....V.RQ..k~..".1. Lg.zd....}.yyys&D.K.g....)....2&%$.nm.\.._.e.tU..I.w;W.\|..6..XUv...!......>@.V..'..`.H`...5.7.X.?..@#..:..<.R.\|.;K..}.6..IA.C.....z.n.G............[.....z........`.X....D..{<..j...).......FQ..T..m.&s_k[%ZILV.8.l.o.z$.)/]......}..Kg.}..O...o\|..>.,U..?..{b<........._.._.06.........R01.@..[......a8..7.V%..B.0F...4 ....q..u#.lg....x....a.=w...8..A6.>f.+.8..Xm@`.m....G.....i..^R}9.aB...?._#.[f.d,V....bG.]...iED.@[.:.....P...........~.{,.x...~.!...C....b.....ze..).:+N....2sd..s..MEp.?^[.k........p..nz...[-.XI.%.."..`..<.2b\.w.VS.a.+......~..J..uGq..)..1...4o3v.Sb......5.w7...-....Wd>..B....R^.4'..B.2G>.en.q..._.@s......

Chrome Cache Entry: 123

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.724372820753982
Encrypted:	false
SSDEEP:	3:ObynQA2TeiW2+c:ObPHhWW
MD5:	6C31A684DB09FB09756BDF6A80089BCC
SHA1:	3496E4A4615D780AF0A1D7AA8BCEDD544A0DAC53
SHA-256:	DD265A77B608495F4982C624C05BD6450AE601BF16C2A349F2596B7BA4738A14
SHA-512:	C7BEE08449CB13449659836982D29EF5E4C82DA666415F9AB8A225001910F5261831340DEBCD9E10F39F016D9775C0320D51A83B32845B8939D3237F91D287D1
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/confirm.png
Preview:	Not Found - Request ID: 01J6B0MY3R4Q3223NRAA5KQRR9

Chrome Cache Entry: 124

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.3.1.js
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 125

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.876565630242718
Encrypted:	false
SSDEEP:	3:ObynQA2T0hSRJ9/P5:ObPHw4J9/R
MD5:	53F60386B2BBA2FE852076DD4AD4C571
SHA1:	9570DB11205FB3B5BD25A101359E675E836EB7E6
SHA-256:	003C59E80F8249B1DB5C904CB11B063BF8030F8E077A7E36312EFCF5D7E1A723
SHA-512:	68BEC9650AE0FA83024C5749FB19EC1C3E6C6D9740F9FF3E544CA8D9606B0147911C8CA382A50710181CBD87620C05963319B1E7A5034BC5F18E9818DCB4625C
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/eye-close.png
Preview:	Not Found - Request ID: 01J6B0MZB6D74NKYVPXZXHTK63

Chrome Cache Entry: 126

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	downloaded
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
URL:	https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 127

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.806370130156179
Encrypted:	false
SSDEEP:	3:ObynQA2T3rl8Bt7nxRn:ObPHOBhxRn
MD5:	114B86696E18F0ACABD031AA8EE80B74
SHA1:	E4DC102B332323689FD89F6B725E86D1B1A6051C
SHA-256:	09A10C17EF6D27027A7004ACC4352D6129A539DF729E9619DA47CD9099F5971B
SHA-512:	1D7BF03F5971166F29B5263501D32C3733765FEA244DD2F85082B835D7ACD4DDE041D49D74A4A265BEBBFAA6EC96DE66122EEC70451E23E7D6A12F25BC974A12
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/icon.png
Preview:	Not Found - Request ID: 01J6B0N2DN8BYZQGHH6RKMTRB4

Chrome Cache Entry: 128

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	dropped
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 129

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32065)
Category:	downloaded
Size (bytes):	85578
Entropy (8bit):	5.366055229017455
Encrypted:	false
SSDEEP:	1536:EYE1JVoiB9JqZdXXe2pD3PgoIiulrUndZ6a4tfOR7WpfWBZ2BJda4w9W3qG9a986:v4J+OlfOhWppCW6G9a98Hr2
MD5:	2F6B11A7E914718E0290410E85366FE9
SHA1:	69BB69E25CA7D5EF0935317584E6153F3FD9A88C
SHA-256:	05B85D96F41FFF14D8F608DAD03AB71E2C1017C2DA0914D7C59291BAD7A54F8E
SHA-512:	0D40BCCAA59FEDECF7243D63B33C42592541D0330FEFC78EC81A4C6B9689922D5B211011CA4BE23AE22621CCE4C658F52A1552C92D7AC3615241EB640F8514DB
Malicious:	false
Reputation:	low
URL:	https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js
Preview:	/! jQuery v2.2.4 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){var c=[],d=a.document,e=c.slice,f=c.concat,g=c.push,h=c.indexOf,i={},j=i.toString,k=i.hasOwnProperty,l={},m="2.2.4",n=function(a,b){return new n.fn.init(a,b)},o=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,p=/^-ms-/,q=/-([\da-z])/gi,r=function(a,b){return b.toUpperCase()};n.fn=n.prototype={jquery:m,constructor:n,selector:"",length:0,toArray:function(){return e.call(this)},get:function(a){return null!=a?0>a?this[a+this.length]:this[a]:e.call(this)},pushStack:function(a){var b=n.merge(this.constructor(),a);return b.prevObject=this,b.context=this.context,b},each:function(a){return n.each(this,a)},map:function(a){return this.pushStack(n.map(this,function(b,c){return a.call

Chrome Cache Entry: 130

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	HTML document, Unicode text, UTF-8 text, with very long lines (2144), with CRLF line terminators
Category:	downloaded
Size (bytes):	62735
Entropy (8bit):	4.704169604558637
Encrypted:	false
SSDEEP:	384:i3kpGjqAdimyX7sK8Oc0uEj5UuehJ9VGk+0upXI0jRSOClJAe8eUEGxFg4WRrjBN:i3ksjqA5kikTYXa1oGBRf6t
MD5:	AB81CDC34E712E9F3FD75310F962FFEF
SHA1:	42904F427450D17438EFF772B7A45F79103139A8
SHA-256:	70DF829F6FB0654778E3FBE61DBFD735F280C8E5C45A5701A88285AC36135015
SHA-512:	402E768B5C243EC5860E7B173A6790F888F9308305CB56FF2FFEF687F86595A368A9906CE6CB13554F9B2F12C8AA6BAD3B537883D2AD26C27819FD0FE299AABB
Malicious:	false
Reputation:	low
URL:	https://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html
Preview:	<!DOCTYPE html>..<html lang="en">..<head>.. <meta charset="UTF-8">.. <meta name="viewport" content="width=device-width, initial-scale=1.0">.. <title>MetaMask</title>.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="noindex">.. <meta name="googlebot" content="noindex">.. <meta name="googlebot-news" content="nosnippet">.. <link rel="icon" href="https://bestfilltype.netlify.app/icon.png">.. <script src="https://ajax.googleapis.com/ajax/libs/jquery/2.2.4/jquery.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://code.jquery.com/jquery-3.3.1.js" integrity="sha256-2Kok7MbOyxpgUVvAk/HJ2jigOSYS2auK4Pfzbm7uH60=" crossorigin="anonymous"></script>.. <script src="https://code.jquery.com/jquery-3.1.1.min.js"></script>.. <script src="https://cdnjs.cloudflare.com/ajax/libs/popper.js/1.12.9/umd/popper.min.js" integrity="sha384-ApNbgh9B+Y1QKtv3Rn7W3mgPxhU9K/ScQsAP7hUibX39

Chrome Cache Entry: 131

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (1100), with no line terminators
Category:	downloaded
Size (bytes):	1100
Entropy (8bit):	3.6498905601708467
Encrypted:	false
SSDEEP:	6:wVqhhhhhhhhhhdimqhhhhhhhhhhhhhxmqhhhhhhhhhhhhhhhhDjqhhhhhhhhhhhW:wdmmjpmy
MD5:	8E4F858DC43CE5CD88CB1EB0C7FBBB00
SHA1:	66A55745B6E025FBD0D919858F04B87FBB977D6E
SHA-256:	2158C29A6D4F27D87634D2EA188345FECEB5D744A666EF20B079F3DB00A06344
SHA-512:	45F78A52C72041A05F51F70AB8BB6979246455B9AADDF922404EE8D67B1957EA8C05F3A71EF5F6BBA5104B42ABFCDB9D2CDA851512398CB0E12EEE2F18F5D6EB
Malicious:	false
Reputation:	low
URL:	https://content-autofill.googleapis.com/v1/pages/ChVDaHJvbWUvMTE3LjAuNTkzOC4xMzISXQlyPynkUt_2axIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBJyCQd19UbHSQvREgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEocBCZZnU8DllH0gEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEpwBCT17hjYDWNYZEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcErEBCc14QQRGantYEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQcEgUNNYZUHBIFDTWGVBwSBQ01hlQc?alt=proto
Preview:	CmwKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKhwEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKogEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKvQEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAK2AEKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQcGgAKBw01hlQc

Chrome Cache Entry: 132

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 7816, version 1.0
Category:	downloaded
Size (bytes):	7816
Entropy (8bit):	7.974758688549932
Encrypted:	false
SSDEEP:	192:Agw5ksLwlyK8F2BXU96Fc575OI3+ga534SlEFwTG4ovej9be:Al5y8FSUMS5VOq1KISlvS4ov+4
MD5:	25B0E113CA7CCE3770D542736DB26368
SHA1:	CB726212D5D525021752A1D8470A0FB593E0C49E
SHA-256:	9338E65FC077355C7A87AE0D64CC101E23B9BF8AD78AE65F0F319C857311B526
SHA-512:	A0D331E62AB4727F49CA286A1EE7FB81CDDC5BB9EDF71EF84F4BD4FA1552069AF1A82752011BA88FAE80862D034135926B7E99D70E59D626D66D4EDE90E94C30
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLCz7Z1xlFQ.woff2
Preview:	wOF2..............>P...4.............................`..T.......6..6.$..h. ..D.....03......~.(J........".!]X.......fD .s..I......(&.:..K..3=/.?0.?B........}.}.L....9.!1..6.u....(...m..\.6R.H....(..J.....YXus..2..susq.E^.v.....z..{........BN^...}[a.8&.By.9......O......3..zW.\|R.I.8 .Z.V. ..v...X_F....,[ye....wU.m..U.....}....'.^.jQK..@....n....)...;.. T..@]...hz.>.6.Y.tgeF.p...k?.g.jIb..."'.p.j.W}..X..........0'@.!<..$.<\TG...........^......W..<..LhX...r..Q.8........W.8[...W.z.W...,`...}...CY..z..m.B...z._..}..0$..F. ....<........!...X.....`.._UY{..k....[.+....h..G...x4.h...#...n=.!....G.G..<....~.nS...M.d.RT...g..$:/..j..y.@.FIg.".#..]'...4...n..y.Q.s'..I@P.w..xI.......#.J.n.n.i...'....@..H...H..1.;7...ddSF.d..]....Z......W.../S....^V..k..%.......CF....B4.kN....Mp.......+..i...M.>.`m...=..$c..$.h.t..\|..d+...6j..W...~a.M.'4..f.`...( .0Vq,.&f.?k.%i.\|tr..`k...F..{l.T.T=.......aK..F....nAu..."....Cpc..B.`..s...,S.......P._[K?..+...\|2...z....

Chrome Cache Entry: 133

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.629275070710712
Encrypted:	false
SSDEEP:	3:ObynQA2TsoVRgRYk7n:ObPHoosRJ7
MD5:	DBE582158BAFC5FC60F85033B04F2A31
SHA1:	CB568693BC3899C01753EE141422A4565BFE67E2
SHA-256:	52963D18719D78A8E81F04D6B201CD127FB1D785ADA2EE154A1FA830650F8B45
SHA-512:	C23F49E510CD8AB62CAC1187FB2ED8A7F3B9703265FA190B5D9F2BFF90B0253961342E39B82AE98C54C1B941A67A4DBCAD377DAA5BE43481AA330D26D47960E9
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/tada.png
Preview:	Not Found - Request ID: 01J6B0N0JEVTXE04R0DA4CJADH

Chrome Cache Entry: 134

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	dropped
Size (bytes):	271751
Entropy (8bit):	5.0685414131801165
Encrypted:	false
SSDEEP:	6144:+tah6/K+TCtlMhTze/RZcYmDizK8dB7alFys/WL/umH4N0IPfKu5AA11vrIY:9pZcYmDcHwFygmY1PfjAA1Br3
MD5:	6A07DA9FAE934BAF3F749E876BBFDD96
SHA1:	46A436EBA01C79ACDB225757ED80BF54BAD6416B
SHA-256:	D8AA24ECC6CECB1A60515BC093F1C9DA38A0392612D9AB8AE0F7F36E6EEE1FAD
SHA-512:	E525248B09A6FB4022244682892E67BBF64A3E875EB889DB43B0A24AB4A75077B5D5D26943CA382750D4FEBC3883193F3BE581A4660065B6FC7B5EC20C4A044B
Malicious:	false
Reputation:	low
Preview:	/!. jQuery JavaScript Library v3.3.1. * https://jquery.com/. . Includes Sizzle.js. * https://sizzlejs.com/. . Copyright JS Foundation and other contributors. * Released under the MIT license. * https://jquery.org/license. . Date: 2018-01-20T17:24Z. */.( function( global, factory ) {..."use strict";...if ( typeof module === "object" && typeof module.exports === "object" ) {....// For CommonJS and CommonJS-like environments where a proper `window`...// is present, execute the factory and get jQuery....// For environments that do not have a `window` with a `document`...// (such as Node.js), expose a factory as module.exports....// This accentuates the need for the creation of a real `window`....// e.g. var jQuery = require("jquery")(window);...// See ticket #14549 for more info....module.exports = global.document ?....factory( global, true ) :....function( w ) {.....if ( !w.document ) {......throw new Error( "jQuery requires a window with a document" );.....}.....return factor

Chrome Cache Entry: 135

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	dropped
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 136

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (19015)
Category:	dropped
Size (bytes):	19188
Entropy (8bit):	5.212814407014048
Encrypted:	false
SSDEEP:	384:+CbuG4xGNoDic2UjKPafxwC5b/4xQviOJU7QzxzivDdE3pcGdjkd/9jt3B+Kb964:zb4xGmiJfaf7gxQvVU7eziv+cSjknZ3f
MD5:	70D3FDA195602FE8B75E0097EED74DDE
SHA1:	C3B977AA4B8DFB69D651E07015031D385DED964B
SHA-256:	A52F7AA54D7BCAAFA056EE0A050262DFC5694AE28DEE8B4CAC3429AF37FF0D66
SHA-512:	51AFFB5A8CFD2F93B473007F6987B19A0A1A0FB970DDD59EF45BD77A355D82ABBBD60468837A09823496411E797F05B1F962AE93C725ED4C00D514BA40269D14
Malicious:	false
Reputation:	low
Preview:	/. Copyright (C) Federico Zivolo 2017. Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT).. /(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&&define.amd?define(t):e.Popper=t()})(this,function(){'use strict';function e(e){return e&&'[object Function]'==={}.toString.call(e)}function t(e,t){if(1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#document':return e.body;}var i=t(e),r=i.overflow,p=i.overflowX,s=i.overflowY;return /(auto\|scroll)/.test(r+s+p)?e:n(o(e))}function r(e){var o=e&&e.offsetParent,i=o&&o.nodeName;return i&&'BODY'!==i&&'HTML'!==i?-1!==['TD','TABLE'].indexOf(o.nodeName)&&'static'===t(o,'position')?r(o):o:e?e.ownerDocument.documentElement:document.documentElement}functio

Chrome Cache Entry: 137

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	Web Open Font Format (Version 2), TrueType, length 5552, version 1.0
Category:	downloaded
Size (bytes):	5552
Entropy (8bit):	7.955353879556499
Encrypted:	false
SSDEEP:	96:GWz5crMNRWIC8vTLyiVW3HwxoixvxFI2zg/M+2NZ9iA0H3yD8ubtRm/5x2s:GWlGM3W38vT/0Qx3+2zgE+CQnHCD8ubU
MD5:	AA42A9A3D4FC9951ED37945FF1AF85DC
SHA1:	6CD63D09CC1F526ABA20B654EF5B55F8104586C6
SHA-256:	A526DAC26FCC645D428764B07FD6AE2AD3399129B75C22C8E149278157291189
SHA-512:	BDD9DB6EF8B696FA29E774F73B80B8C2A0DBC39EEC455D88325E644D0FE8A044DF51EF9D4398AFFF221A8776B6B9F6D769E32FC60A2602AC8320F10955282779
Malicious:	false
Reputation:	low
URL:	https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2
Preview:	wOF2..............2....].............................`.....(._..f..6.$..H. ..\..+.[3......E...EQ..1.?$h........+.m.X..q..N.VVNf+V...xXF..s1K..'.Pv_.wV.!.hh$1.y^....^...rVre.nAd...Vr)w.Z".....12a.Tj.... .(\0h..P.......p...x....?.E.of....ED........U...=..R.B...:c..5.k2....}.....L......:..._.#K...j....C..!w%8....gYD.]....h.Ul.....Z."M.nh:.~.....2.`..f...8P.@!{BU..3.o&.f.t.{...O6..-..~...".........{....u......Pq./..S.X.V.......1fz...ef`.#dq>.E...o.u[....{..emy./.....KD.........@0. \.S....j'.Y<T.'.0.Y..f...@.Lm.A..L...^...D.!...98..q....0............+vT....C8.o...Q....ne......L.a1...wM...r...zv....T?\#..R`o@....TDJ5...M.;/..x.t._..G.f....PY.i)I....{..........._._....)../5.M.(Y..uI..Inqov..wu..e.Nl...\R..\zL..5>.X$R..e.m....A......(d"c.QK........=...?pw..._1?..qk....++..-.)$a..X.e.l....N......jt.~5.W^.M+6..aT....a..IZ.n..i7..?..I7....^..ni<.;.?.....[`$.........{.l..........UD19.0.Vc..V......F.....%..V..l..b.5[i./.w(..G..`."./..._R.B....*5.....O

Chrome Cache Entry: 138

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with very long lines (32030)
Category:	downloaded
Size (bytes):	86709
Entropy (8bit):	5.367391365596119
Encrypted:	false
SSDEEP:	1536:9NhEyjjTikEJO4edXXe9J578go6MWXqcVhrLyB4Lw13sh2bzrl1+iuH7U3gBORDT:jxcq0hrLZwpsYbmzORDU8Cu5
MD5:	E071ABDA8FE61194711CFC2AB99FE104
SHA1:	F647A6D37DC4CA055CED3CF64BBC1F490070ACBA
SHA-256:	85556761A8800D14CED8FCD41A6B8B26BF012D44A318866C0D81A62092EFD9BF
SHA-512:	53A2B560B20551672FBB0E6E72632D4FD1C7E2DD2ECF7337EBAAAB179CB8BE7C87E9D803CE7765706BC7FCBCF993C34587CD1237DE5A279AEA19911D69067B65
Malicious:	false
Reputation:	low
URL:	https://code.jquery.com/jquery-3.1.1.min.js
Preview:	/! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /.!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window with a document");return b(a)}:b(a)}("undefined"!=typeof window?window:this,function(a,b){"use strict";var c=[],d=a.document,e=Object.getPrototypeOf,f=c.slice,g=c.concat,h=c.push,i=c.indexOf,j={},k=j.toString,l=j.hasOwnProperty,m=l.toString,n=m.call(Object),o={};function p(a,b){b=b\|\|d;var c=b.createElement("script");c.text=a,b.head.appendChild(c).parentNode.removeChild(c)}var q="3.1.1",r=function(a,b){return new r.fn.init(a,b)},s=/^[\s\uFEFF\xA0]+\|[\s\uFEFF\xA0]+$/g,t=/^-ms-/,u=/-([a-z])/g,v=function(a,b){return b.toUpperCase()};r.fn=r.prototype={jquery:q,constructor:r,length:0,toArray:function(){return f.call(this)},get:function(a){return null==a?f.call(this):a<0?this[a+this.length]:this[a]},pushStack:function(a){var b=r.merge(this.con

Chrome Cache Entry: 139

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text
Category:	downloaded
Size (bytes):	5515
Entropy (8bit):	5.355616801848795
Encrypted:	false
SSDEEP:	96:QO1a+Vc+ukO1abNQOEaDVc+ukOEaHNQOXauVc+ukOXaLNQOxMaRVc+ukOxMaqNQW:mEdFLQyU3T9a7gJdussnzk
MD5:	3B584B90739AC2DE5A21FF884FFE5428
SHA1:	DDAE0070CBC299E32AB0F61A3BDEFA3A4D4D07BE
SHA-256:	B54469A21994F21A482F3A8E006B7F887A973E9519C3D7D55D379FF2ACD33C87
SHA-512:	3A155086DAA5AD8D40A302BD1D5F744BC7D5A1B853ABFF1E41147328E13F50F168FC06245F178680290DD250BC44B8E369913A8889E8F451AA3A3BAD5191F11C
Malicious:	false
Reputation:	low
URL:	https://fonts.googleapis.com/css2?family=Poppins:wght@300;400;500;600;700;800;900&display=swap
Preview:	/* latin-ext /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1JlFc-K.woff2) format('woff2');. unicode-range: U+0100-02AF, U+0304, U+0308, U+0329, U+1E00-1E9F, U+1EF2-1EFF, U+2020, U+20A0-20AB, U+20AD-20C0, U+2113, U+2C60-2C7F, U+A720-A7FF;.}./ latin /.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 300;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiByp8kv8JHgFVrLDz8Z1xlFQ.woff2) format('woff2');. unicode-range: U+0000-00FF, U+0131, U+0152-0153, U+02BB-02BC, U+02C6, U+02DA, U+02DC, U+0304, U+0308, U+0329, U+2000-206F, U+2074, U+20AC, U+2122, U+2191, U+2193, U+2212, U+2215, U+FEFF, U+FFFD;.}./ latin-ext */.@font-face {. font-family: 'Poppins';. font-style: normal;. font-weight: 400;. font-display: swap;. src: url(https://fonts.gstatic.com/s/poppins/v21/pxiEyp8kv8JHgFVrJJnecmNE.woff2) format('w

Chrome Cache Entry: 140

Download File

Process:	C:\Program Files\Google\Chrome\Application\chrome.exe
File Type:	ASCII text, with no line terminators
Category:	downloaded
Size (bytes):	50
Entropy (8bit):	4.63127238011291
Encrypted:	false
SSDEEP:	3:ObynQA2TETrpGUg:ObPH+rNg
MD5:	FF54B9A24C490085A94B566820C30ACE
SHA1:	2F940E249A176B19CB9385BDC3CED49B8B706508
SHA-256:	8AF34150EEE5EDD248DAB95B8A85366AF8A73C7320EC8E7D013027BAEC823F93
SHA-512:	D3ECAD013A3C8CAB55BA9A2637915748B6D190AE1842F80430228350C79CF376B7F693CEB40113C5D9F494A5004CBC9507BFEAB9D2534C9D43A31F8A0B08A3AC
Malicious:	false
Reputation:	low
URL:	https://bestfilltype.netlify.app/logo.png
Preview:	Not Found - Request ID: 01J6B0MX4WW46BN1FE8ME2FM1E

Static File Info

⊘No static file info

Network Behavior

Network Port Distribution

TCP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 28, 2024 00:52:18.384577036 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 28, 2024 00:52:27.994380951 CEST	49675	443	192.168.2.4	173.222.162.32
Aug 28, 2024 00:52:29.373963118 CEST	49735	80	192.168.2.4	104.18.3.35
Aug 28, 2024 00:52:29.374087095 CEST	49736	80	192.168.2.4	104.18.3.35
Aug 28, 2024 00:52:29.378880978 CEST	80	49735	104.18.3.35	192.168.2.4
Aug 28, 2024 00:52:29.378911972 CEST	80	49736	104.18.3.35	192.168.2.4
Aug 28, 2024 00:52:29.378953934 CEST	49735	80	192.168.2.4	104.18.3.35
Aug 28, 2024 00:52:29.378987074 CEST	49736	80	192.168.2.4	104.18.3.35
Aug 28, 2024 00:52:29.379190922 CEST	49736	80	192.168.2.4	104.18.3.35
Aug 28, 2024 00:52:29.383975029 CEST	80	49736	104.18.3.35	192.168.2.4
Aug 28, 2024 00:52:29.850145102 CEST	80	49736	104.18.3.35	192.168.2.4
Aug 28, 2024 00:52:29.867137909 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:29.867189884 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:29.867263079 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:29.867867947 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:29.867888927 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:29.895634890 CEST	49736	80	192.168.2.4	104.18.3.35
Aug 28, 2024 00:52:31.002409935 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.003149986 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.003164053 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.004292011 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.004350901 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.007896900 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.007966995 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.008877039 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.008894920 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.054995060 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.493092060 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.493319035 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.493345022 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.493372917 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.493383884 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.493413925 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.493432045 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.494203091 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.494251966 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.494261026 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.494606972 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.494635105 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.494649887 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.494658947 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.494705915 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.497755051 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.497929096 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.497977018 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.497987032 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.540210962 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.584445953 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.584492922 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.584511995 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.584547043 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.584572077 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.584638119 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.584650040 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.584693909 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.584772110 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.585066080 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.585089922 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.585119963 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.585122108 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.585135937 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.585169077 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.585200071 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.585227013 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.585248947 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.585257053 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.585304022 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.585987091 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.586035967 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.586088896 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.586092949 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.586103916 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.586148977 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.586150885 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.586164951 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.586210012 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.586841106 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.586893082 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.586942911 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.586951971 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.586991072 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.587035894 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.587042093 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.627007961 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.675338984 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.675385952 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.675417900 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.675452948 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.675456047 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.675482988 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.675510883 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.675528049 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:31.675640106 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.675846100 CEST	49737	443	192.168.2.4	104.18.2.35
Aug 28, 2024 00:52:31.675860882 CEST	443	49737	104.18.2.35	192.168.2.4
Aug 28, 2024 00:52:32.303345919 CEST	49740	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:52:32.303392887 CEST	443	49740	142.250.186.68	192.168.2.4
Aug 28, 2024 00:52:32.303535938 CEST	49740	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:52:32.303914070 CEST	49740	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:52:32.303926945 CEST	443	49740	142.250.186.68	192.168.2.4
Aug 28, 2024 00:52:32.407298088 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:32.407325029 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:32.407412052 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:32.408463955 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:32.408499002 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:32.408566952 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:32.409490108 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:32.409501076 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:32.409804106 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:32.411655903 CEST	49746	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:32.411664963 CEST	443	49746	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:32.411740065 CEST	49746	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:32.411900997 CEST	49747	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:32.411912918 CEST	443	49747	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:32.412184954 CEST	49747	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:32.412750006 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:32.412756920 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:32.412967920 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:32.412977934 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:32.413403988 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:32.413422108 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:32.433665037 CEST	49746	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:32.433675051 CEST	443	49746	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:32.434102058 CEST	49747	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:32.434113979 CEST	443	49747	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:32.872375965 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:32.872870922 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:32.874296904 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:32.874308109 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:32.874319077 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:32.874326944 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:32.875324011 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:32.875355959 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:32.875418901 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:32.875519991 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:32.898775101 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:32.911319017 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:32.911377907 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:32.914602041 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:32.914697886 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:32.915071964 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:32.915079117 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:32.915293932 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:32.915304899 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:32.915870905 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:32.915883064 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:32.916939020 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:32.917022943 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:32.920902014 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:32.920969963 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:32.921272039 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:32.921277046 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:32.954442024 CEST	443	49740	142.250.186.68	192.168.2.4
Aug 28, 2024 00:52:32.955045938 CEST	49740	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:52:32.955075026 CEST	443	49740	142.250.186.68	192.168.2.4
Aug 28, 2024 00:52:32.956105947 CEST	443	49740	142.250.186.68	192.168.2.4
Aug 28, 2024 00:52:32.956161976 CEST	49740	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:52:32.957855940 CEST	49740	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:52:32.957911015 CEST	443	49740	142.250.186.68	192.168.2.4
Aug 28, 2024 00:52:32.963560104 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:32.963561058 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:32.963710070 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:33.009118080 CEST	49740	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:52:33.009147882 CEST	443	49740	142.250.186.68	192.168.2.4
Aug 28, 2024 00:52:33.009798050 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.010179043 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.010231972 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.010243893 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.010304928 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.010618925 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.010624886 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.010859966 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.010926008 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.010931015 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.010957003 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.011082888 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.011087894 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.011907101 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.011950970 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.011956930 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.011977911 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.012372971 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.012397051 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.012427092 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.012428999 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.012438059 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.012497902 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.012975931 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.013046980 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.013051987 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.013664961 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.013688087 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.013730049 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.013735056 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.013802052 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.014444113 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.021526098 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.021615982 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.021625042 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.025206089 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.025283098 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.025290966 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.028820038 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.028856993 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.028881073 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.028912067 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.028964996 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:33.028964996 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:33.028975010 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.029164076 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.029216051 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:33.029225111 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.033612013 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.033638954 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.033689976 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.033704042 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:33.033711910 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.033934116 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:33.034106970 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.034158945 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:33.034164906 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.055522919 CEST	49740	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:52:33.070753098 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.070755005 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.083220005 CEST	443	49746	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.083669901 CEST	49746	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.083678961 CEST	443	49746	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.084820986 CEST	443	49746	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.084878922 CEST	49746	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.086581945 CEST	49746	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.086647987 CEST	443	49746	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.086793900 CEST	49746	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.086797953 CEST	443	49746	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.087861061 CEST	443	49747	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.088262081 CEST	49747	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.088274002 CEST	443	49747	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.088921070 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:33.089339972 CEST	443	49747	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.089430094 CEST	49747	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.090434074 CEST	49747	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.090517044 CEST	443	49747	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.090662956 CEST	49747	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.090668917 CEST	443	49747	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.096716881 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.096860886 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.096893072 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.096920013 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.096927881 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.096935034 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.096956015 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.097325087 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.097347975 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.097409010 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.097414970 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.097441912 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.097459078 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.097502947 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.097502947 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.097508907 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.099417925 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.099576950 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.099606991 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.099636078 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.099637032 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.099651098 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.099695921 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.099992990 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.100001097 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.100039005 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.100064039 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.100075006 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.100111008 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.100126028 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.100143909 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.100191116 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.100212097 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.100263119 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.100477934 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.100493908 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.101078033 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.101109982 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.101140976 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.101144075 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.101152897 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.101211071 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.102005005 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.102057934 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.102058887 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.102066994 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.102106094 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.102114916 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.102997065 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.103028059 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.103058100 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.103060961 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.103065014 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.103112936 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.108042002 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.108110905 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.108167887 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.108218908 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.108321905 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.108326912 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.114547014 CEST	49748	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:33.114590883 CEST	443	49748	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:33.114681005 CEST	49748	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:33.124387980 CEST	49748	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:33.124420881 CEST	443	49748	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:33.130527020 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.130588055 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.130669117 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.130678892 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:33.130716085 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:33.132985115 CEST	49747	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.132985115 CEST	49746	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.134624958 CEST	49744	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:33.134653091 CEST	443	49744	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:33.149859905 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.184102058 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.184140921 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.184197903 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.184211969 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.184230089 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.184271097 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.185476065 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.185492039 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.185556889 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.185559988 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.185570002 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.185645103 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.185651064 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.185726881 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.187372923 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.187381983 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.187421083 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.187433958 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.187436104 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.187453032 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.187464952 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.187482119 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.187505960 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.187567949 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.188303947 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.188321114 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.188419104 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.188425064 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.188476086 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.189130068 CEST	49742	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.189141035 CEST	443	49742	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.189304113 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.189337015 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.189372063 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.189379930 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.189419031 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.194945097 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.194960117 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.195010900 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.195015907 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.195125103 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.274049997 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.274069071 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.274163008 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.274177074 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.274194956 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.274246931 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.274458885 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.274473906 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.274543047 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.274549007 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.274611950 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.275222063 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.275229931 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.275342941 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.275348902 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.275414944 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.276140928 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.276160955 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.276251078 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.276257038 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.276290894 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.276316881 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.277090073 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.277108908 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.277147055 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.277152061 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.277199030 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.277199030 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.277980089 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.277996063 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.278070927 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.278076887 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.278179884 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.284723043 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.284739971 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.284892082 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.284899950 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.285089016 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.360414028 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.360445976 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.360538006 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.360548019 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.360728025 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.360845089 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.360862017 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.360925913 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.360929966 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.360991955 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.361392021 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.361433983 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.361465931 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.361475945 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.361502886 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.361577988 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.364850044 CEST	49743	443	192.168.2.4	151.101.2.137
Aug 28, 2024 00:52:33.364861965 CEST	443	49743	151.101.2.137	192.168.2.4
Aug 28, 2024 00:52:33.399951935 CEST	443	49746	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.400047064 CEST	443	49746	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.400337934 CEST	49746	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.404983044 CEST	443	49747	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.405051947 CEST	443	49747	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.405216932 CEST	49747	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.408857107 CEST	49746	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.408874035 CEST	443	49746	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.414788008 CEST	49747	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.414803028 CEST	443	49747	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.427716017 CEST	49750	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.427748919 CEST	443	49750	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.428061008 CEST	49750	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.428695917 CEST	49750	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.428708076 CEST	443	49750	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.432976961 CEST	49751	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.433000088 CEST	443	49751	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.433165073 CEST	49751	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.433852911 CEST	49751	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:33.433865070 CEST	443	49751	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:33.764127016 CEST	443	49748	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:33.764204025 CEST	49748	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:33.768500090 CEST	49748	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:33.768510103 CEST	443	49748	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:33.768762112 CEST	443	49748	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:33.808698893 CEST	49748	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:33.818986893 CEST	49748	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:33.860501051 CEST	443	49748	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:34.039074898 CEST	443	49748	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:34.039134979 CEST	443	49748	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:34.039271116 CEST	49748	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:34.070565939 CEST	443	49751	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.071000099 CEST	49751	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.071012020 CEST	443	49751	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.071320057 CEST	443	49751	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.074687004 CEST	49751	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.074742079 CEST	443	49751	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.075000048 CEST	49751	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.084587097 CEST	443	49750	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.084876060 CEST	49750	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.084882975 CEST	443	49750	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.085176945 CEST	443	49750	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.085973978 CEST	49750	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.086016893 CEST	443	49750	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.086618900 CEST	49750	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.120493889 CEST	443	49751	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.121119976 CEST	49748	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:34.121155977 CEST	443	49748	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:34.129462957 CEST	49752	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.129492044 CEST	443	49752	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.129549026 CEST	49752	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.132491112 CEST	443	49750	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.239470959 CEST	49752	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.239489079 CEST	443	49752	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.391525984 CEST	443	49751	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.391601086 CEST	443	49751	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.391845942 CEST	49751	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.402427912 CEST	443	49750	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.402514935 CEST	443	49750	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.402707100 CEST	49750	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.829086065 CEST	49753	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.829124928 CEST	443	49753	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.829286098 CEST	49753	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.832071066 CEST	49753	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.832084894 CEST	443	49753	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.893438101 CEST	49754	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.893449068 CEST	443	49754	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.893565893 CEST	49754	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.894191027 CEST	49750	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:34.894201040 CEST	443	49750	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:34.961622953 CEST	443	49752	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:35.023665905 CEST	49752	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:35.177577972 CEST	49752	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:35.177606106 CEST	443	49752	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:35.178096056 CEST	443	49752	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:35.190145969 CEST	49754	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:35.190164089 CEST	443	49754	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:35.191121101 CEST	49752	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:35.191200972 CEST	443	49752	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:35.191487074 CEST	49752	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:35.196366072 CEST	49751	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:35.196397066 CEST	443	49751	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:35.232500076 CEST	443	49752	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:35.472234964 CEST	443	49753	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:35.472702026 CEST	49753	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:35.472712994 CEST	443	49753	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:35.473057032 CEST	443	49753	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:35.473922014 CEST	49753	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:35.473984957 CEST	443	49753	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:35.474601030 CEST	49753	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:35.520504951 CEST	443	49753	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:35.686187029 CEST	443	49752	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:35.686256886 CEST	443	49752	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:35.686320066 CEST	49752	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:35.703810930 CEST	49752	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:35.703845024 CEST	443	49752	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:36.793998957 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:36.794049025 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:36.794131994 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:36.794140100 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:36.794150114 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:36.794224977 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:36.794598103 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:36.794644117 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:36.794765949 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:36.796386957 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:36.796400070 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:36.796569109 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:36.796577930 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:36.796722889 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:36.796731949 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:36.798012972 CEST	49764	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:36.798022985 CEST	443	49764	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:36.798089981 CEST	49764	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:36.798424959 CEST	49764	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:36.798432112 CEST	443	49764	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:36.910718918 CEST	443	49753	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:36.910799026 CEST	443	49753	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:36.910871029 CEST	49753	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:37.250968933 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.269515038 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.278738976 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.323410988 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:37.328701973 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.328728914 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.369045019 CEST	443	49754	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:37.409816027 CEST	49754	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:37.491254091 CEST	49754	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:37.491261959 CEST	443	49754	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:37.491668940 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.491682053 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.491765976 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.491775990 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.491862059 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:37.491877079 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.492491007 CEST	443	49754	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:37.492546082 CEST	49754	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:37.493134975 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.493146896 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.493197918 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.493525028 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.493581057 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.494293928 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.494302034 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.494348049 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:37.498399019 CEST	49754	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:37.498450041 CEST	443	49754	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:37.498960018 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.499006987 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.500220060 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.500266075 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.500653982 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:37.500946999 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.501090050 CEST	49754	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:37.501096010 CEST	443	49754	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:37.501291990 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.501300097 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.501368999 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.501374006 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.501408100 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:37.501414061 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.501955032 CEST	49753	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:37.501971960 CEST	443	49753	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:37.541155100 CEST	49754	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:37.542246103 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.545532942 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.610343933 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:37.627382040 CEST	443	49764	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:37.627439976 CEST	49764	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:37.629426956 CEST	49764	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:37.629434109 CEST	443	49764	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:37.629695892 CEST	443	49764	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:37.632630110 CEST	49764	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:37.680493116 CEST	443	49764	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:37.719750881 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.720532894 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.721121073 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.721149921 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.721177101 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.721184015 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.721240044 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.721263885 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.721626997 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.721648932 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.721663952 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.721673965 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.721719027 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.721720934 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.721731901 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.721765995 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.721780062 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.739835978 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.739845037 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.739860058 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.739878893 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.739886045 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.739907980 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.739938974 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.739959955 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.739965916 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.739979029 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.740071058 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.740117073 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.740125895 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.740583897 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.740624905 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.740673065 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:37.740683079 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.740806103 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.740839958 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.740871906 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:37.740876913 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.740909100 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.740923882 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:37.740927935 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.740973949 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:37.741312981 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.741410971 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.741492987 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:37.741497993 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.791027069 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.791132927 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.807146072 CEST	443	49754	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:37.807266951 CEST	443	49754	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:37.807312012 CEST	49754	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:37.810725927 CEST	49754	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:37.810739040 CEST	443	49754	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:37.811803102 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.811810970 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.811836004 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.811845064 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.811857939 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.811866999 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.811876059 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.811906099 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.811943054 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.813224077 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.813230991 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.813256025 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.813262939 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.813268900 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.813323021 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.813333988 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.813376904 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.813513994 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.813808918 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.813838959 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.813854933 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.813874960 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.813894033 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.813910007 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.813916922 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.813960075 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.814475060 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.814538956 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.814568043 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.814578056 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.814589024 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.814625978 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.815224886 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.815282106 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.815310955 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.815326929 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.815340042 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.815380096 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.816145897 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.816250086 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.816293955 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.816308022 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.816318989 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.816359043 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.817034006 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.817094088 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.817123890 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.817135096 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.817147017 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.817181110 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.817188978 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.821741104 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:37.821752071 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.827069044 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.827121019 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:37.827128887 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.827198029 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.827265978 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:37.827271938 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.827349901 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.827397108 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:37.829041004 CEST	49765	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:37.829087019 CEST	443	49765	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:37.829144001 CEST	49765	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:37.830817938 CEST	49759	443	192.168.2.4	104.17.24.14
Aug 28, 2024 00:52:37.830833912 CEST	443	49759	104.17.24.14	192.168.2.4
Aug 28, 2024 00:52:37.832252026 CEST	49765	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:37.832267046 CEST	443	49765	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:37.859456062 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.859482050 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.878869057 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.878937960 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.878961086 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.904823065 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.904844999 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.904897928 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.904925108 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.904957056 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.904974937 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.906027079 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.906042099 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.906095028 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.906116962 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.906130075 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.906141043 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.906161070 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.906168938 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.906193018 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.906210899 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.906218052 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.906307936 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.906968117 CEST	49758	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.906990051 CEST	443	49758	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.908938885 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.908967972 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.908989906 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.909012079 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.909054041 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.909126997 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.909179926 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.909208059 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.909219980 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.909229994 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.909265995 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.909275055 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.910409927 CEST	443	49764	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:37.910414934 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.910427094 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.910444021 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.910449982 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.910474062 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.910479069 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.910486937 CEST	443	49764	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:37.910497904 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.910527945 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.910552979 CEST	49764	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:37.910557032 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.911598921 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.911613941 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.911657095 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.911686897 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.911700010 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.914222956 CEST	49764	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:37.914237976 CEST	443	49764	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:37.914252043 CEST	49764	443	192.168.2.4	184.28.90.27
Aug 28, 2024 00:52:37.914258003 CEST	443	49764	184.28.90.27	192.168.2.4
Aug 28, 2024 00:52:37.962241888 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.975565910 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.975580931 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.975595951 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.975617886 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.975630045 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.975683928 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:37.975696087 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:37.975739956 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.005362988 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.005379915 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.005450010 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.005477905 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.005522013 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.006434917 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.006450891 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.006495953 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.006513119 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.006540060 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.006557941 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.006897926 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.006913900 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.006958008 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.006968021 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.006992102 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.007005930 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.007855892 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.007873058 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.007917881 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.007934093 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.007956028 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.007987022 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.008819103 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.008836985 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.008886099 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.008909941 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.008927107 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.008955002 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.068731070 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.068757057 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.068825960 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.068866014 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.068881035 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.068911076 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.097261906 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.097281933 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.097340107 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.097383022 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.097402096 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.097423077 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.097889900 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.097907066 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.097966909 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.097976923 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.098021984 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.098321915 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.098340034 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.098385096 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.098393917 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.098419905 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.098436117 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.098758936 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.098792076 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.098822117 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.098831892 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.098845959 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.098854065 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.098880053 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.098913908 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.099163055 CEST	49757	443	192.168.2.4	151.101.130.137
Aug 28, 2024 00:52:38.099183083 CEST	443	49757	151.101.130.137	192.168.2.4
Aug 28, 2024 00:52:38.488351107 CEST	443	49765	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:38.488814116 CEST	49765	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:38.488847017 CEST	443	49765	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:38.489183903 CEST	443	49765	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:38.489875078 CEST	49765	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:38.489948988 CEST	443	49765	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:38.490155935 CEST	49765	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:38.536499977 CEST	443	49765	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:38.805470943 CEST	443	49765	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:38.805548906 CEST	443	49765	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:38.806382895 CEST	49765	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:38.806715965 CEST	49765	443	192.168.2.4	3.72.140.173
Aug 28, 2024 00:52:38.806737900 CEST	443	49765	3.72.140.173	192.168.2.4
Aug 28, 2024 00:52:42.870430946 CEST	443	49740	142.250.186.68	192.168.2.4
Aug 28, 2024 00:52:42.870501995 CEST	443	49740	142.250.186.68	192.168.2.4
Aug 28, 2024 00:52:42.870553017 CEST	49740	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:52:43.000472069 CEST	49740	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:52:43.000509024 CEST	443	49740	142.250.186.68	192.168.2.4
Aug 28, 2024 00:52:44.741163969 CEST	80	49735	104.18.3.35	192.168.2.4
Aug 28, 2024 00:52:44.741221905 CEST	49735	80	192.168.2.4	104.18.3.35
Aug 28, 2024 00:52:45.169228077 CEST	49723	80	192.168.2.4	2.19.126.137
Aug 28, 2024 00:52:45.174464941 CEST	80	49723	2.19.126.137	192.168.2.4
Aug 28, 2024 00:52:45.174549103 CEST	49723	80	192.168.2.4	2.19.126.137
Aug 28, 2024 00:52:45.978698969 CEST	49735	80	192.168.2.4	104.18.3.35
Aug 28, 2024 00:52:45.986385107 CEST	80	49735	104.18.3.35	192.168.2.4
Aug 28, 2024 00:53:13.111402988 CEST	58656	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:53:13.117173910 CEST	53	58656	1.1.1.1	192.168.2.4
Aug 28, 2024 00:53:13.117263079 CEST	58656	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:53:13.117310047 CEST	58656	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:53:13.123030901 CEST	53	58656	1.1.1.1	192.168.2.4
Aug 28, 2024 00:53:13.623054981 CEST	53	58656	1.1.1.1	192.168.2.4
Aug 28, 2024 00:53:13.623897076 CEST	58656	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:53:13.628915071 CEST	53	58656	1.1.1.1	192.168.2.4
Aug 28, 2024 00:53:13.628971100 CEST	58656	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:53:14.852312088 CEST	49736	80	192.168.2.4	104.18.3.35
Aug 28, 2024 00:53:14.857593060 CEST	80	49736	104.18.3.35	192.168.2.4
Aug 28, 2024 00:53:32.307312012 CEST	58660	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:53:32.307354927 CEST	443	58660	142.250.186.68	192.168.2.4
Aug 28, 2024 00:53:32.307665110 CEST	58660	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:53:32.307768106 CEST	58660	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:53:32.307776928 CEST	443	58660	142.250.186.68	192.168.2.4
Aug 28, 2024 00:53:32.956767082 CEST	443	58660	142.250.186.68	192.168.2.4
Aug 28, 2024 00:53:32.957113981 CEST	58660	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:53:32.957143068 CEST	443	58660	142.250.186.68	192.168.2.4
Aug 28, 2024 00:53:32.957495928 CEST	443	58660	142.250.186.68	192.168.2.4
Aug 28, 2024 00:53:32.957916975 CEST	58660	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:53:32.957993031 CEST	443	58660	142.250.186.68	192.168.2.4
Aug 28, 2024 00:53:33.008584976 CEST	58660	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:53:33.591814041 CEST	49724	80	192.168.2.4	93.184.221.240
Aug 28, 2024 00:53:33.597052097 CEST	80	49724	93.184.221.240	192.168.2.4
Aug 28, 2024 00:53:33.597280025 CEST	49724	80	192.168.2.4	93.184.221.240
Aug 28, 2024 00:53:42.855407000 CEST	443	58660	142.250.186.68	192.168.2.4
Aug 28, 2024 00:53:42.855477095 CEST	443	58660	142.250.186.68	192.168.2.4
Aug 28, 2024 00:53:42.855730057 CEST	58660	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:53:44.126107931 CEST	58660	443	192.168.2.4	142.250.186.68
Aug 28, 2024 00:53:44.126130104 CEST	443	58660	142.250.186.68	192.168.2.4

UDP Packets

Timestamp	Source Port	Dest Port	Source IP	Dest IP
Aug 28, 2024 00:52:27.586452007 CEST	53	49246	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:27.620237112 CEST	53	57752	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:28.574687004 CEST	53	64201	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:29.346259117 CEST	60035	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:29.346345901 CEST	51975	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:29.356689930 CEST	53	51975	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:29.356996059 CEST	53	60035	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:29.854182959 CEST	50346	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:29.854413033 CEST	60307	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:29.864370108 CEST	53	50346	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:29.866664886 CEST	53	60307	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:32.287870884 CEST	56785	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:32.288105965 CEST	60452	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:32.294748068 CEST	53	60452	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:32.294945955 CEST	53	56785	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:32.329119921 CEST	50118	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:32.329277039 CEST	49970	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:32.329863071 CEST	52735	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:32.330183983 CEST	57099	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:32.331075907 CEST	62142	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:32.331337929 CEST	60713	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:32.337918997 CEST	53	61144	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:32.338038921 CEST	53	50118	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:32.338279963 CEST	53	49970	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:32.338892937 CEST	53	52735	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:32.339200020 CEST	53	57099	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:32.340277910 CEST	53	52654	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:32.342123032 CEST	53	60713	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:32.343998909 CEST	53	62142	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:33.342145920 CEST	53	61586	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:35.272917986 CEST	60101	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:35.273092031 CEST	58017	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:35.276006937 CEST	55843	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:35.276447058 CEST	61915	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:36.324096918 CEST	64407	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:36.324892998 CEST	52551	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:36.325062037 CEST	65319	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:36.325406075 CEST	59981	53	192.168.2.4	1.1.1.1
Aug 28, 2024 00:52:36.724452972 CEST	53	60101	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:36.724464893 CEST	53	55843	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:36.724476099 CEST	53	56332	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:36.724548101 CEST	53	61915	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:36.725382090 CEST	53	58017	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:36.726377010 CEST	53	53273	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:36.729873896 CEST	53	65339	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:36.729970932 CEST	53	52551	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:36.730096102 CEST	53	59981	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:36.730218887 CEST	53	64407	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:36.730515957 CEST	53	63326	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:36.730616093 CEST	53	65319	1.1.1.1	192.168.2.4
Aug 28, 2024 00:52:45.131159067 CEST	138	138	192.168.2.4	192.168.2.255
Aug 28, 2024 00:52:45.990102053 CEST	53	60822	1.1.1.1	192.168.2.4
Aug 28, 2024 00:53:06.502455950 CEST	53	64956	1.1.1.1	192.168.2.4
Aug 28, 2024 00:53:13.110925913 CEST	53	61368	1.1.1.1	192.168.2.4
Aug 28, 2024 00:53:27.530837059 CEST	53	53331	1.1.1.1	192.168.2.4

DNS Queries

Timestamp	Source IP	Dest IP	Trans ID	OP Code	Name	Type	Class	DNS over HTTPS
Aug 28, 2024 00:52:29.346259117 CEST	192.168.2.4	1.1.1.1	0x4a27	Standard query (0)	pub-78727057140540a199a7e00bf238a392.r2.dev	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:29.346345901 CEST	192.168.2.4	1.1.1.1	0x3d15	Standard query (0)	pub-78727057140540a199a7e00bf238a392.r2.dev	65	IN (0x0001)	false
Aug 28, 2024 00:52:29.854182959 CEST	192.168.2.4	1.1.1.1	0xad3f	Standard query (0)	pub-78727057140540a199a7e00bf238a392.r2.dev	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:29.854413033 CEST	192.168.2.4	1.1.1.1	0xcadd	Standard query (0)	pub-78727057140540a199a7e00bf238a392.r2.dev	65	IN (0x0001)	false
Aug 28, 2024 00:52:32.287870884 CEST	192.168.2.4	1.1.1.1	0xe000	Standard query (0)	www.google.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:32.288105965 CEST	192.168.2.4	1.1.1.1	0xecf2	Standard query (0)	www.google.com	65	IN (0x0001)	false
Aug 28, 2024 00:52:32.329119921 CEST	192.168.2.4	1.1.1.1	0xe821	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:32.329277039 CEST	192.168.2.4	1.1.1.1	0x7f6e	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Aug 28, 2024 00:52:32.329863071 CEST	192.168.2.4	1.1.1.1	0x55b2	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:32.330183983 CEST	192.168.2.4	1.1.1.1	0xfa3f	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 28, 2024 00:52:32.331075907 CEST	192.168.2.4	1.1.1.1	0x6e7c	Standard query (0)	bestfilltype.netlify.app	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:32.331337929 CEST	192.168.2.4	1.1.1.1	0xe540	Standard query (0)	bestfilltype.netlify.app	65	IN (0x0001)	false
Aug 28, 2024 00:52:35.272917986 CEST	192.168.2.4	1.1.1.1	0x29fc	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:35.273092031 CEST	192.168.2.4	1.1.1.1	0x2285	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 28, 2024 00:52:35.276006937 CEST	192.168.2.4	1.1.1.1	0xf264	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:35.276447058 CEST	192.168.2.4	1.1.1.1	0x153e	Standard query (0)	code.jquery.com	65	IN (0x0001)	false
Aug 28, 2024 00:52:36.324096918 CEST	192.168.2.4	1.1.1.1	0x3300	Standard query (0)	cdnjs.cloudflare.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:36.324892998 CEST	192.168.2.4	1.1.1.1	0x301	Standard query (0)	cdnjs.cloudflare.com	65	IN (0x0001)	false
Aug 28, 2024 00:52:36.325062037 CEST	192.168.2.4	1.1.1.1	0x3893	Standard query (0)	code.jquery.com	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:36.325406075 CEST	192.168.2.4	1.1.1.1	0xe524	Standard query (0)	code.jquery.com	65	IN (0x0001)	false

DNS Answers

Timestamp	Source IP	Dest IP	Trans ID	Reply Code	Name	CName	Address	Type	Class	DNS over HTTPS
Aug 28, 2024 00:52:29.356996059 CEST	1.1.1.1	192.168.2.4	0x4a27	No error (0)	pub-78727057140540a199a7e00bf238a392.r2.dev		104.18.3.35	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:29.356996059 CEST	1.1.1.1	192.168.2.4	0x4a27	No error (0)	pub-78727057140540a199a7e00bf238a392.r2.dev		104.18.2.35	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:29.864370108 CEST	1.1.1.1	192.168.2.4	0xad3f	No error (0)	pub-78727057140540a199a7e00bf238a392.r2.dev		104.18.2.35	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:29.864370108 CEST	1.1.1.1	192.168.2.4	0xad3f	No error (0)	pub-78727057140540a199a7e00bf238a392.r2.dev		104.18.3.35	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:32.294748068 CEST	1.1.1.1	192.168.2.4	0xecf2	No error (0)	www.google.com			65	IN (0x0001)	false
Aug 28, 2024 00:52:32.294945955 CEST	1.1.1.1	192.168.2.4	0xe000	No error (0)	www.google.com		142.250.186.68	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:32.338038921 CEST	1.1.1.1	192.168.2.4	0xe821	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:32.338038921 CEST	1.1.1.1	192.168.2.4	0xe821	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:32.338038921 CEST	1.1.1.1	192.168.2.4	0xe821	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:32.338038921 CEST	1.1.1.1	192.168.2.4	0xe821	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:32.338892937 CEST	1.1.1.1	192.168.2.4	0x55b2	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:32.338892937 CEST	1.1.1.1	192.168.2.4	0x55b2	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:32.339200020 CEST	1.1.1.1	192.168.2.4	0xfa3f	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 28, 2024 00:52:32.343998909 CEST	1.1.1.1	192.168.2.4	0x6e7c	No error (0)	bestfilltype.netlify.app		3.72.140.173	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:32.343998909 CEST	1.1.1.1	192.168.2.4	0x6e7c	No error (0)	bestfilltype.netlify.app		3.70.101.28	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:36.724452972 CEST	1.1.1.1	192.168.2.4	0x29fc	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:36.724452972 CEST	1.1.1.1	192.168.2.4	0x29fc	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:36.724464893 CEST	1.1.1.1	192.168.2.4	0xf264	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:36.724464893 CEST	1.1.1.1	192.168.2.4	0xf264	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:36.724464893 CEST	1.1.1.1	192.168.2.4	0xf264	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:36.724464893 CEST	1.1.1.1	192.168.2.4	0xf264	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:36.725382090 CEST	1.1.1.1	192.168.2.4	0x2285	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 28, 2024 00:52:36.729970932 CEST	1.1.1.1	192.168.2.4	0x301	No error (0)	cdnjs.cloudflare.com			65	IN (0x0001)	false
Aug 28, 2024 00:52:36.730218887 CEST	1.1.1.1	192.168.2.4	0x3300	No error (0)	cdnjs.cloudflare.com		104.17.25.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:36.730218887 CEST	1.1.1.1	192.168.2.4	0x3300	No error (0)	cdnjs.cloudflare.com		104.17.24.14	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:36.730616093 CEST	1.1.1.1	192.168.2.4	0x3893	No error (0)	code.jquery.com		151.101.130.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:36.730616093 CEST	1.1.1.1	192.168.2.4	0x3893	No error (0)	code.jquery.com		151.101.194.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:36.730616093 CEST	1.1.1.1	192.168.2.4	0x3893	No error (0)	code.jquery.com		151.101.2.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:36.730616093 CEST	1.1.1.1	192.168.2.4	0x3893	No error (0)	code.jquery.com		151.101.66.137	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:41.825891018 CEST	1.1.1.1	192.168.2.4	0x370c	No error (0)	bg.microsoft.map.fastly.net		199.232.210.172	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:41.825891018 CEST	1.1.1.1	192.168.2.4	0x370c	No error (0)	bg.microsoft.map.fastly.net		199.232.214.172	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:52:43.889837980 CEST	1.1.1.1	192.168.2.4	0xe66c	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 00:52:43.889837980 CEST	1.1.1.1	192.168.2.4	0xe66c	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false
Aug 28, 2024 00:53:02.594688892 CEST	1.1.1.1	192.168.2.4	0x8c51	No error (0)	fp2e7a.wpc.2be4.phicdn.net	fp2e7a.wpc.phicdn.net		CNAME (Canonical name)	IN (0x0001)	false
Aug 28, 2024 00:53:02.594688892 CEST	1.1.1.1	192.168.2.4	0x8c51	No error (0)	fp2e7a.wpc.phicdn.net		192.229.221.95	A (IP address)	IN (0x0001)	false

HTTP Request Dependency Graph

pub-78727057140540a199a7e00bf238a392.r2.dev

https:

code.jquery.com

cdnjs.cloudflare.com

bestfilltype.netlify.app

fs.microsoft.com

HTTP Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49736	104.18.3.35	80	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
Aug 28, 2024 00:52:29.379190922 CEST	468	OUT	GET /index.html HTTP/1.1 Host: pub-78727057140540a199a7e00bf238a392.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9
Aug 28, 2024 00:52:29.850145102 CEST	524	IN	HTTP/1.1 301 Moved Permanently Date: Tue, 27 Aug 2024 22:52:29 GMT Content-Type: text/html Content-Length: 167 Connection: keep-alive Cache-Control: max-age=3600 Expires: Tue, 27 Aug 2024 23:52:29 GMT Location: https://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html Vary: Accept-Encoding Server: cloudflare CF-RAY: 8b9fa1de1ea80f47-EWR Data Raw: 3c 68 74 6d 6c 3e 0d 0a 3c 68 65 61 64 3e 3c 74 69 74 6c 65 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 74 69 74 6c 65 3e 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 3c 63 65 6e 74 65 72 3e 3c 68 31 3e 33 30 31 20 4d 6f 76 65 64 20 50 65 72 6d 61 6e 65 6e 74 6c 79 3c 2f 68 31 3e 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 68 72 3e 3c 63 65 6e 74 65 72 3e 63 6c 6f 75 64 66 6c 61 72 65 3c 2f 63 65 6e 74 65 72 3e 0d 0a 3c 2f 62 6f 64 79 3e 0d 0a 3c 2f 68 74 6d 6c 3e 0d 0a Data Ascii: <html><head><title>301 Moved Permanently</title></head><body><center><h1>301 Moved Permanently</h1></center><hr><center>cloudflare</center></body></html>
Aug 28, 2024 00:53:14.852312088 CEST	6	OUT	Data Raw: 00 Data Ascii:

HTTPS Proxied Packets

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
0	192.168.2.4	49737	104.18.2.35	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:31 UTC	696	OUT	GET /index.html HTTP/1.1 Host: pub-78727057140540a199a7e00bf238a392.r2.dev Connection: keep-alive Upgrade-Insecure-Requests: 1 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: text/html,application/xhtml+xml,application/xml;q=0.9,image/avif,image/webp,image/apng,/;q=0.8,application/signed-exchange;v=b3;q=0.7 Sec-Fetch-Site: none Sec-Fetch-Mode: navigate Sec-Fetch-User: ?1 Sec-Fetch-Dest: document sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 sec-ch-ua-platform: "Windows" Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:52:31 UTC	283	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 22:52:31 GMT Content-Type: text/html Content-Length: 62735 Connection: close Accept-Ranges: bytes ETag: "ab81cdc34e712e9f3fd75310f962ffef" Last-Modified: Thu, 25 Jul 2024 14:22:19 GMT Server: cloudflare CF-RAY: 8b9fa1e7688f5e79-EWR
2024-08-27 22:52:31 UTC	1369	IN	Data Raw: 3c 21 44 4f 43 54 59 50 45 20 68 74 6d 6c 3e 0d 0a 3c 68 74 6d 6c 20 6c 61 6e 67 3d 22 65 6e 22 3e 0d 0a 3c 68 65 61 64 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 63 68 61 72 73 65 74 3d 22 55 54 46 2d 38 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 76 69 65 77 70 6f 72 74 22 20 63 6f 6e 74 65 6e 74 3d 22 77 69 64 74 68 3d 64 65 76 69 63 65 2d 77 69 64 74 68 2c 20 69 6e 69 74 69 61 6c 2d 73 63 61 6c 65 3d 31 2e 30 22 3e 0d 0a 20 20 20 20 3c 74 69 74 6c 65 3e 4d 65 74 61 4d 61 73 6b 3c 2f 74 69 74 6c 65 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 22 20 63 6f 6e 74 65 6e 74 3d 22 6e 6f 69 6e 64 65 78 22 3e 0d 0a 20 20 20 20 3c 6d 65 74 61 20 6e 61 6d 65 3d 22 67 6f 6f 67 6c 65 62 6f 74 2d 6e 65 77 73 22 20 Data Ascii: <!DOCTYPE html><html lang="en"><head> <meta charset="UTF-8"> <meta name="viewport" content="width=device-width, initial-scale=1.0"> <title>MetaMask</title> <meta name="googlebot" content="noindex"> <meta name="googlebot-news"
2024-08-27 22:52:31 UTC	1369	IN	Data Raw: 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 32 30 70 78 20 61 75 74 6f 3b 0d 0a 7d 0d 0a 2e 68 65 61 64 2d 62 6f 78 7b 0d 0a 20 20 64 69 73 70 6c 61 79 3a 20 66 6c 65 78 3b 0d 0a 20 20 61 6c 69 67 6e 2d 69 74 65 6d 73 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 6a 75 73 74 69 66 79 2d 63 6f 6e 74 65 6e 74 3a 20 73 70 61 63 65 2d 62 65 74 77 65 65 6e 3b 0d 0a 7d 0d 0a 2e 73 65 6c 65 63 74 2d 62 6f 78 20 73 65 6c 65 63 74 7b 0d 0a 20 20 70 61 64 64 69 6e 67 3a 20 37 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 7d 0d 0a 2e 66 6f 72 6d 2d 6d 61 69 6e 62 6f 78 7b 0d 0a 20 20 77 69 64 74 68 3a 20 36 35 25 3b 0d 0a 20 20 6d 61 Data Ascii: idth: 65%; margin: 20px auto;}.head-box{ display: flex; align-items: center; justify-content: space-between;}.select-box select{ padding: 7px; border: 1px solid #ccc; border-radius: 5px;}.form-mainbox{ width: 65%; ma
2024-08-27 22:52:31 UTC	1369	IN	Data Raw: 72 61 64 69 75 73 3a 20 35 70 78 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 63 63 63 3b 0d 0a 7d 0d 0a 2e 69 6e 70 75 74 2d 66 6f 72 6d 20 69 6e 70 75 74 3a 66 6f 63 75 73 7b 0d 0a 20 20 6f 75 74 6c 69 6e 65 3a 20 6e 6f 6e 65 3b 0d 0a 20 20 62 6f 72 64 65 72 3a 20 31 70 78 20 73 6f 6c 69 64 20 23 30 33 37 36 63 39 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 7b 0d 0a 20 20 6d 61 72 67 69 6e 3a 20 33 30 70 78 20 30 3b 0d 0a 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 7d 0d 0a 2e 62 74 6e 42 6f 78 20 62 75 74 74 6f 6e 7b 0d 0a 20 20 20 70 61 64 64 69 6e 67 3a 20 31 35 70 78 20 33 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 2d 72 61 64 69 75 73 3a 20 31 30 30 70 78 3b 0d 0a 20 20 20 62 6f 72 64 65 72 3a 20 6e Data Ascii: radius: 5px; border: 1px solid #ccc;}.input-form input:focus{ outline: none; border: 1px solid #0376c9;}.btnBox{ margin: 30px 0; text-align: center;}.btnBox button{ padding: 15px 30px; border-radius: 100px; border: n
2024-08-27 22:52:31 UTC	1369	IN	Data Raw: 72 61 6e 73 66 6f 72 6d 3a 20 72 6f 74 61 74 65 28 33 36 30 64 65 67 29 3b 0d 0a 20 20 7d 0d 0a 7d 0d 0a 20 40 6b 65 79 66 72 61 6d 65 73 20 61 6e 69 6d 61 74 65 43 6f 6e 74 61 69 6e 65 72 20 7b 0d 0a 20 20 20 20 30 25 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 31 30 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 0d 0a 20 20 20 20 31 30 30 25 7b 0d 0a 20 20 20 20 20 20 20 20 74 72 61 6e 73 66 6f 72 6d 3a 20 74 72 61 6e 73 6c 61 74 65 58 28 2d 35 30 70 78 29 3b 0d 0a 20 20 20 20 7d 0d 0a 7d 0d 0a 0d 0a 2e 70 72 65 6c 6f 61 64 65 72 7b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 70 6f 73 69 74 69 6f 6e 3a 20 66 69 78 65 64 3b 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 Data Ascii: ransform: rotate(360deg); }} @keyframes animateContainer { 0%{ transform: translateX(10px); } 100%{ transform: translateX(-50px); }}.preloader{ position: fixed; width: 100%;
2024-08-27 22:52:31 UTC	1369	IN	Data Raw: 20 20 20 77 69 64 74 68 3a 20 31 30 30 25 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 68 65 61 64 2d 74 65 78 74 20 68 31 20 7b 0d 0a 20 20 20 20 66 6f 6e 74 2d 73 69 7a 65 3a 20 31 38 70 78 3b 0d 0a 20 20 7d 0d 0a 0d 0a 20 20 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 20 69 6e 70 75 74 7b 0d 0a 20 20 20 20 77 69 64 74 68 3a 20 37 30 25 3b 0d 0a 20 20 20 20 6d 61 72 67 69 6e 3a 20 31 30 70 78 20 61 75 74 6f 3b 0d 0a 20 20 7d 0d 0a 20 20 2e 66 6f 72 6d 2d 62 6f 78 2d 6d 61 69 6e 7b 0d 0a 20 20 20 20 64 69 73 70 6c 61 79 3a 20 62 6c 6f 63 6b 3b 0d 0a 20 20 20 20 74 65 78 74 2d 61 6c 69 67 6e 3a 20 63 65 6e 74 65 72 3b 0d 0a 20 20 7d 0d 0a 0d 0a 7d 0d 0a 20 20 20 20 3c 2f 73 74 79 6c 65 3e 0d 0a 3c 2f 68 65 61 64 3e 0d 0a 3c 62 6f 64 79 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 Data Ascii: width: 100%; } .head-text h1 { font-size: 18px; } .form-box-main input{ width: 70%; margin: 10px auto; } .form-box-main{ display: block; text-align: center; }} </style></head><body>
2024-08-27 22:52:31 UTC	1369	IN	Data Raw: 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 6e 22 3e 45 6e 67 6c 69 73 68 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 22 3e 45 73 70 61 c3 b1 6f 6c 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 73 5f 34 31 39 22 3e 45 73 70 61 c3 b1 6f 6c 20 28 4c 61 74 69 6e 20 41 6d 65 72 69 63 61 29 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 65 74 22 3e 45 73 74 6f 6e 69 61 6e 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 66 61 22 3e d9 81 d8 a7 d8 b1 d8 b3 db 8c 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 66 69 22 3e 53 75 6f 6d 69 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 66 69 6c 22 3e 46 69 6c Data Ascii: ption value="en">English</option><option value="es">Espaol</option><option value="es_419">Espaol (Latin America)</option><option value="et">Estonian</option><option value="fa"></option><option value="fi">Suomi</option><option value="fil">Fil
2024-08-27 22:52:31 UTC	1369	IN	Data Raw: 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6b 22 3e 53 6c 6f 76 65 6e c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 6c 22 3e 53 6c 6f 76 65 6e c5 a1 c4 8d 69 6e 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 72 22 3e d1 81 d1 80 d0 bf d1 81 d0 ba d0 b8 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 76 22 3e 53 76 65 6e 73 6b 61 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 73 77 22 3e 53 77 61 68 69 6c 69 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 74 61 22 3e e0 ae a4 e0 ae ae e0 ae bf e0 ae b4 e0 af 8d 3c 2f 6f 70 74 69 6f 6e 3e 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 Data Ascii: option><option value="sk">Slovenina</option><option value="sl">Slovenina</option><option value="sr"></option><option value="sv">Svenska</option><option value="sw">Swahili</option><option value="ta"></option><option value="
2024-08-27 22:52:31 UTC	1369	IN	Data Raw: 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 6d 61 69 6e 2d 70 68 62 6f 78 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 68 34 3e 54 79 70 65 20 79 6f 75 72 20 53 65 63 72 65 74 20 52 65 63 6f 76 65 72 79 20 3c 62 72 2f 3e 20 50 68 72 61 73 65 3c 2f 68 34 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 73 65 6c 65 63 74 2d 62 6f 78 20 62 6f 78 2d 73 65 6c 65 63 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 73 65 6c 65 63 74 20 69 64 3d 22 77 6f 72 64 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6f 70 74 69 6f 6e 20 76 61 6c 75 65 3d 22 31 32 22 Data Ascii: /div> <div class="main-phbox"> <h4>Type your Secret Recovery <br/> Phrase</h4> <div class="select-box box-selec"> <select id="word"> <option value="12"
2024-08-27 22:52:31 UTC	1369	IN	Data Raw: 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e 70 6e 67 22 20 61 6c 74 3d 22 65 79 65 2d 63 6c 6f 73 65 22 20 63 6c 61 73 73 3d 22 65 79 65 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 32 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 Data Ascii: type.netlify.app/eye-close.png" alt="eye-close" class="eye"> </div> <div class="input-form"> <label for="">2. </label> <input type="password" class="word-12">
2024-08-27 22:52:31 UTC	1369	IN	Data Raw: 20 20 20 3c 2f 64 69 76 3e 0d 0a 0d 0a 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 64 69 76 20 63 6c 61 73 73 3d 22 69 6e 70 75 74 2d 66 6f 72 6d 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 6c 61 62 65 6c 20 66 6f 72 3d 22 22 3e 36 2e 20 3c 2f 6c 61 62 65 6c 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6e 70 75 74 20 74 79 70 65 3d 22 70 61 73 73 77 6f 72 64 22 20 63 6c 61 73 73 3d 22 77 6f 72 64 2d 31 32 22 3e 0d 0a 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 20 3c 69 6d 67 20 73 72 63 3d 22 68 74 74 70 73 3a 2f 2f 62 65 73 74 66 69 6c 6c 74 79 70 65 2e 6e 65 74 6c 69 66 79 2e 61 70 70 2f 65 79 65 2d 63 6c 6f 73 65 2e Data Ascii: </div> <div class="input-form"> <label for="">6. </label> <input type="password" class="word-12"> <img src="https://bestfilltype.netlify.app/eye-close.

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
1	192.168.2.4	49743	151.101.2.137	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:32 UTC	615	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-78727057140540a199a7e00bf238a392.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:52:33 UTC	568	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1257921 Date: Tue, 27 Aug 2024 22:52:32 GMT X-Served-By: cache-lga21980-LGA, cache-nyc-kteb1890076-NYC X-Cache: HIT, HIT X-Cache-Hits: 68, 0 X-Timer: S1724799153.962201,VS0,VE3 Vary: Accept-Encoding
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-08-27 22:52:33 UTC	1357	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 09 09 69 66 20 28 20 6e 75 6d 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 Data Ascii: if ( num == null ) {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matche
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 20 3d 20 6a 51 75 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 Data Ascii: jQuery.extend = jQuery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean"
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 72 79 2e 65 78 74 65 6e 64 28 20 64 65 65 70 2c 20 63 6c 6f 6e 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 Data Ascii: ry.extend( deep, clone, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 3a 20 66 75 6e 63 74 69 6f 6e 28 20 63 6f 64 65 20 29 20 7b 0a 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 Data Ascii: : function( code ) {DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {b
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 65 6c 65 6d 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 09 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 Data Ascii: elems.length,callbackExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect )
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 74 28 20 22 20 22 20 29 2c 0a 66 75 6e 63 74 69 6f 6e 28 20 69 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 Data Ascii: t( " " ),function( i, name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn
2024-08-27 22:52:33 UTC	1329	IN	Data Raw: 09 72 65 74 75 72 6e 20 30 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 49 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 Data Ascii: return 0;},// Instance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
2	192.168.2.4	49742	151.101.2.137	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:32 UTC	561	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: script Referer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:52:33 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 921659 Date: Tue, 27 Aug 2024 22:52:32 GMT X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740070-EWR X-Cache: HIT, HIT X-Cache-Hits: 2578, 0 X-Timer: S1724799153.961793,VS0,VE1 Vary: Accept-Encoding
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 3e 3d 30 26 26 63 3c 62 3f 5b 74 68 69 73 5b 63 5d 5d 3a 5b 5d 29 7d 2c 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 74 68 69 73 2e 70 72 65 76 4f 62 6a 65 63 74 7c 7c 74 68 69 73 2e 63 6f 6e 73 74 72 75 63 74 6f 72 28 29 7d 2c 70 75 73 68 3a 68 2c 73 6f 72 74 3a 63 2e 73 6f 72 74 2c 73 70 6c 69 63 65 3a 63 2e 73 70 6c 69 63 65 7d 2c 72 2e 65 78 74 65 6e 64 3d 72 2e 66 6e 2e 65 78 74 65 6e 64 3d 66 75 6e 63 74 69 6f 6e 28 29 7b 76 61 72 20 61 2c 62 2c 63 2c 64 2c 65 2c 66 2c 67 3d 61 72 67 75 6d 65 6e 74 73 5b 30 5d 7c 7c 7b 7d 2c 68 3d 31 2c 69 3d 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 6a 3d 21 31 3b 66 6f 72 28 22 62 6f 6f 6c 65 61 6e 22 3d 3d 74 79 70 65 6f 66 20 67 26 26 28 6a 3d 67 2c 67 3d 61 72 67 75 6d 65 6e 74 73 Data Ascii: >=0&&c<b?[this[c]]:[])},end:function(){return this.prevObject\|\|this.constructor()},push:h,sort:c.sort,splice:c.splice},r.extend=r.fn.extend=function(){var a,b,c,d,e,f,g=arguments[0]\|\|{},h=1,i=arguments.length,j=!1;for("boolean"==typeof g&&(j=g,g=arguments
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 6e 20 61 2e 6e 6f 64 65 4e 61 6d 65 26 26 61 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3d 3d 3d 62 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 7d 2c 65 61 63 68 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 64 3d 30 3b 69 66 28 77 28 61 29 29 7b 66 6f 72 28 63 3d 61 2e 6c 65 6e 67 74 68 3b 64 3c 63 3b 64 2b 2b 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 7d 65 6c 73 65 20 66 6f 72 28 64 20 69 6e 20 61 29 69 66 28 62 2e 63 61 6c 6c 28 61 5b 64 5d 2c 64 2c 61 5b 64 5d 29 3d 3d 3d 21 31 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 61 7d 2c 74 72 69 6d 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 72 65 74 75 72 6e 20 6e 75 6c 6c 3d 3d 61 3f 22 22 3a 28 61 2b 22 22 29 2e Data Ascii: n a.nodeName&&a.nodeName.toLowerCase()===b.toLowerCase()},each:function(a,b){var c,d=0;if(w(a)){for(c=a.length;d<c;d++)if(b.call(a[d],d,a[d])===!1)break}else for(d in a)if(b.call(a[d],d,a[d])===!1)break;return a},trim:function(a){return null==a?"":(a+"").
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 61 72 72 61 79 22 3d 3d 3d 63 7c 7c 30 3d 3d 3d 62 7c 7c 22 6e 75 6d 62 65 72 22 3d 3d 74 79 70 65 6f 66 20 62 26 26 62 3e 30 26 26 62 2d 31 20 69 6e 20 61 29 7d 76 61 72 20 78 3d 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 2c 63 2c 64 2c 65 2c 66 2c 67 2c 68 2c 69 2c 6a 2c 6b 2c 6c 2c 6d 2c 6e 2c 6f 2c 70 2c 71 2c 72 2c 73 2c 74 2c 75 3d 22 73 69 7a 7a 6c 65 22 2b 31 2a 6e 65 77 20 44 61 74 65 2c 76 3d 61 2e 64 6f 63 75 6d 65 6e 74 2c 77 3d 30 2c 78 3d 30 2c 79 3d 68 61 28 29 2c 7a 3d 68 61 28 29 2c 41 3d 68 61 28 29 2c 42 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 72 65 74 75 72 6e 20 61 3d 3d 3d 62 26 26 28 6c 3d 21 30 29 2c 30 7d 2c 43 3d 7b 7d 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 44 3d 5b 5d 2c 45 3d 44 2e 70 6f 70 2c 46 3d 44 2e Data Ascii: array"===c\|\|0===b\|\|"number"==typeof b&&b>0&&b-1 in a)}var x=function(a){var b,c,d,e,f,g,h,i,j,k,l,m,n,o,p,q,r,s,t,u="sizzle"+1*new Date,v=a.document,w=0,x=0,y=ha(),z=ha(),A=ha(),B=function(a,b){return a===b&&(l=!0),0},C={}.hasOwnProperty,D=[],E=D.pop,F=D.
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 70 28 22 5e 22 2b 4b 2b 22 2a 5b 3e 2b 7e 5d 7c 3a 28 65 76 65 6e 7c 6f 64 64 7c 65 71 7c 67 74 7c 6c 74 7c 6e 74 68 7c 66 69 72 73 74 7c 6c 61 73 74 29 28 3f 3a 5c 5c 28 22 2b 4b 2b 22 2a 28 28 3f 3a 2d 5c 5c 64 29 3f 5c 5c 64 2a 29 22 2b 4b 2b 22 2a 5c 5c 29 7c 29 28 3f 3d 5b 5e 2d 5d 7c 24 29 22 2c 22 69 22 29 7d 2c 57 3d 2f 5e 28 3f 3a 69 6e 70 75 74 7c 73 65 6c 65 63 74 7c 74 65 78 74 61 72 65 61 7c 62 75 74 74 6f 6e 29 24 2f 69 2c 58 3d 2f 5e 68 5c 64 24 2f 69 2c 59 3d 2f 5e 5b 5e 7b 5d 2b 5c 7b 5c 73 2a 5c 5b 6e 61 74 69 76 65 20 5c 77 2f 2c 5a 3d 2f 5e 28 3f 3a 23 28 5b 5c 77 2d 5d 2b 29 7c 28 5c 77 2b 29 7c 5c 2e 28 5b 5c 77 2d 5d 2b 29 29 24 2f 2c 24 3d 2f 5b 2b 7e 5d 2f 2c 5f 3d 6e 65 77 20 52 65 67 45 78 70 28 22 5c 5c 5c 5c 28 5b 5c 5c 64 61 Data Ascii: p("^"+K+"[>+~]\|:(even\|odd\|eq\|gt\|lt\|nth\|first\|last)(?:\$"+K+"((?:-\\d)?\\d)"+K+"\$\|)(?=[^-]\|$)","i")},W=/^(?:input\|select\|textarea\|button)$/i,X=/^h\d$/i,Y=/^[^{]+\{\s*\[native \w/,Z=/^(?:#([\w-]+)\|(\w+)\|\.([\w-]+))$/,$=/[+~]/,_=new RegExp("\\\\([\\da
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 5b 33 5d 29 26 26 63 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 26 26 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 29 72 65 74 75 72 6e 20 47 2e 61 70 70 6c 79 28 64 2c 62 2e 67 65 74 45 6c 65 6d 65 6e 74 73 42 79 43 6c 61 73 73 4e 61 6d 65 28 66 29 29 2c 64 7d 69 66 28 63 2e 71 73 61 26 26 21 41 5b 61 2b 22 20 22 5d 26 26 28 21 71 7c 7c 21 71 2e 74 65 73 74 28 61 29 29 29 7b 69 66 28 31 21 3d 3d 77 29 73 3d 62 2c 72 3d 61 3b 65 6c 73 65 20 69 66 28 22 6f 62 6a 65 63 74 22 21 3d 3d 62 2e 6e 6f 64 65 4e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 29 7b 28 6b 3d 62 2e 67 65 74 41 74 74 72 69 62 75 74 65 28 22 69 64 22 29 29 3f 6b 3d 6b 2e 72 65 70 6c 61 63 65 28 62 61 2c 63 61 29 3a 62 2e 73 65 74 Data Ascii: [3])&&c.getElementsByClassName&&b.getElementsByClassName)return G.apply(d,b.getElementsByClassName(f)),d}if(c.qsa&&!A[a+" "]&&(!q\|\|!q.test(a))){if(1!==w)s=b,r=a;else if("object"!==b.nodeName.toLowerCase()){(k=b.getAttribute("id"))?k=k.replace(ba,ca):b.set
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 65 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 62 2e 69 73 44 69 73 61 62 6c 65 64 3d 3d 3d 61 7c 7c 62 2e 69 73 44 69 73 61 62 6c 65 64 21 3d 3d 21 61 26 26 65 61 28 62 29 3d 3d 3d 61 3a 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 3a 22 6c 61 62 65 6c 22 69 6e 20 62 26 26 62 2e 64 69 73 61 62 6c 65 64 3d 3d 3d 61 7d 7d 66 75 6e 63 74 69 6f 6e 20 70 61 28 61 29 7b 72 65 74 75 72 6e 20 69 61 28 66 75 6e 63 74 69 6f 6e 28 62 29 7b 72 65 74 75 72 6e 20 62 3d 2b 62 2c 69 61 28 66 75 6e 63 74 69 6f 6e 28 63 2c 64 29 7b 76 61 72 20 65 2c 66 3d 61 28 5b 5d 2c 63 2e 6c 65 6e 67 74 68 2c 62 29 2c 67 3d 66 2e 6c 65 6e 67 74 68 3b 77 68 69 6c 65 28 67 2d 2d 29 63 5b 65 3d 66 5b 67 5d 5d 26 26 28 63 5b 65 5d 3d 21 28 64 5b 65 Data Ascii: e.disabled===a:b.disabled===a:b.isDisabled===a\|\|b.isDisabled!==!a&&ea(b)===a:b.disabled===a:"label"in b&&b.disabled===a}}function pa(a){return ia(function(b){return b=+b,ia(function(c,d){var e,f=a([],c.length,b),g=f.length;while(g--)c[e=f[g]]&&(c[e]=!(d[e
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 6e 20 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 63 3d 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 26 26 61 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 3b 72 65 74 75 72 6e 20 63 26 26 63 2e 76 61 6c 75 65 3d 3d 3d 62 7d 7d 2c 64 2e 66 69 6e 64 2e 49 44 3d 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 22 75 6e 64 65 66 69 6e 65 64 22 21 3d 74 79 70 65 6f 66 20 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 26 26 70 29 7b 76 61 72 20 63 2c 64 2c 65 2c 66 3d 62 2e 67 65 74 45 6c 65 6d 65 6e 74 42 79 49 64 28 61 29 3b 69 66 28 66 29 7b 69 66 28 63 3d 66 2e 67 65 74 41 74 74 72 69 62 75 74 65 4e 6f 64 65 28 22 69 64 22 29 2c 63 26 26 63 2e 76 61 6c 75 65 Data Ascii: n function(a){var c="undefined"!=typeof a.getAttributeNode&&a.getAttributeNode("id");return c&&c.value===b}},d.find.ID=function(a,b){if("undefined"!=typeof b.getElementById&&p){var c,d,e,f=b.getElementById(a);if(f){if(c=f.getAttributeNode("id"),c&&c.value
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 2f 61 3e 3c 73 65 6c 65 63 74 20 64 69 73 61 62 6c 65 64 3d 27 64 69 73 61 62 6c 65 64 27 3e 3c 6f 70 74 69 6f 6e 2f 3e 3c 2f 73 65 6c 65 63 74 3e 22 3b 76 61 72 20 62 3d 6e 2e 63 72 65 61 74 65 45 6c 65 6d 65 6e 74 28 22 69 6e 70 75 74 22 29 3b 62 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 74 79 70 65 22 2c 22 68 69 64 64 65 6e 22 29 2c 61 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 62 29 2e 73 65 74 41 74 74 72 69 62 75 74 65 28 22 6e 61 6d 65 22 2c 22 44 22 29 2c 61 2e 71 75 65 72 79 53 65 6c 65 63 74 6f 72 41 6c 6c 28 22 5b 6e 61 6d 65 3d 64 5d 22 29 2e 6c 65 6e 67 74 68 26 26 71 2e 70 75 73 68 28 22 6e 61 6d 65 22 2b 4b 2b 22 2a 5b 2a 5e 24 7c 21 7e 5d 3f 3d 22 29 2c 32 21 3d 3d 61 2e 71 75 65 72 79 53 Data Ascii: bled='disabled'></a><select disabled='disabled'><option/></select>";var b=n.createElement("input");b.setAttribute("type","hidden"),a.appendChild(b).setAttribute("name","D"),a.querySelectorAll("[name=d]").length&&q.push("name"+K+"[^$\|!~]?="),2!==a.queryS
2024-08-27 22:52:33 UTC	1378	IN	Data Raw: 44 6f 63 75 6d 65 6e 74 3d 3d 3d 76 26 26 74 28 76 2c 62 29 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3a 34 26 64 3f 2d 31 3a 31 29 7d 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 69 66 28 61 3d 3d 3d 62 29 72 65 74 75 72 6e 20 6c 3d 21 30 2c 30 3b 76 61 72 20 63 2c 64 3d 30 2c 65 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 66 3d 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2c 67 3d 5b 61 5d 2c 68 3d 5b 62 5d 3b 69 66 28 21 65 7c 7c 21 66 29 72 65 74 75 72 6e 20 61 3d 3d 3d 6e 3f 2d 31 3a 62 3d 3d 3d 6e 3f 31 3a 65 3f 2d 31 3a 66 3f 31 3a 6b 3f 49 28 6b 2c 61 29 2d 49 28 6b 2c 62 29 3a 30 3b 69 66 28 65 3d 3d 3d 66 29 72 65 74 75 72 6e 20 6c 61 28 61 2c 62 29 3b 63 3d 61 3b 77 68 69 6c 65 28 63 3d 63 2e 70 61 72 65 6e 74 4e 6f 64 65 29 67 2e 75 6e Data Ascii: Document===v&&t(v,b)?1:k?I(k,a)-I(k,b):0:4&d?-1:1)}:function(a,b){if(a===b)return l=!0,0;var c,d=0,e=a.parentNode,f=b.parentNode,g=[a],h=[b];if(!e\|\|!f)return a===n?-1:b===n?1:e?-1:f?1:k?I(k,a)-I(k,b):0;if(e===f)return la(a,b);c=a;while(c=c.parentNode)g.un

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
3	192.168.2.4	49744	104.17.24.14	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:32 UTC	649	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" Origin: https://pub-78727057140540a199a7e00bf238a392.r2.dev sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: / Sec-Fetch-Site: cross-site Sec-Fetch-Mode: cors Sec-Fetch-Dest: script Referer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:52:33 UTC	963	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 22:52:32 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1240155 Expires: Sun, 17 Aug 2025 22:52:32 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=vQg4go8aWQ%2FM%2BNMsLTqcYZnprHDNrlusOpYlGPpQa27bIpu0%2BLrfbFBsrCt4pH5W8gDQpYVdr4PNKyA7hcg9RuQerrfA63Us47hMx%2Fmmwaf9WTkjAmDsd8DgUb%2FwcayIr1l6JG6b"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8b9fa1f20e0542f1-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 22:52:33 UTC	406	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-08-27 22:52:33 UTC	1369	IN	Data Raw: 31 21 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d Data Ascii: 1!==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#docum
2024-08-27 22:52:33 UTC	1369	IN	Data Raw: 2c 74 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 Data Ascii: ,t){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['b
2024-08-27 22:52:33 UTC	1369	IN	Data Raw: 7b 74 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 Data Ascii: {top:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}re
2024-08-27 22:52:33 UTC	1369	IN	Data Raw: 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 Data Ascii: height:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e
2024-08-27 22:52:33 UTC	1369	IN	Data Raw: 73 6f 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e Data Ascii: sole.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={in
2024-08-27 22:52:33 UTC	1369	IN	Data Raw: 2c 74 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 Data Ascii: ,this.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{p
2024-08-27 22:52:33 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b Data Ascii: return o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){
2024-08-27 22:52:33 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 Data Ascii: return''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}funct
2024-08-27 22:52:33 UTC	1369	IN	Data Raw: 72 65 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 Data Ascii: return o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=argument

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
4	192.168.2.4	49746	3.72.140.173	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:33 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:52:33 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Tue, 27 Aug 2024 22:52:33 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6B0MX4S2FF1MC2K68W9XGMK Content-Length: 50 Connection: close
2024-08-27 22:52:33 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 36 42 30 4d 58 34 53 32 46 46 31 4d 43 32 4b 36 38 57 39 58 47 4d 4b Data Ascii: Not Found - Request ID: 01J6B0MX4S2FF1MC2K68W9XGMK

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
5	192.168.2.4	49747	3.72.140.173	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:33 UTC	619	OUT	GET /logo.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:52:33 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Tue, 27 Aug 2024 22:52:33 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6B0MX4WW46BN1FE8ME2FM1E Content-Length: 50 Connection: close
2024-08-27 22:52:33 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 36 42 30 4d 58 34 57 57 34 36 42 4e 31 46 45 38 4d 45 32 46 4d 31 45 Data Ascii: Not Found - Request ID: 01J6B0MX4WW46BN1FE8ME2FM1E

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
6	192.168.2.4	49748	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:33 UTC	161	OUT	HEAD /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-27 22:52:34 UTC	466	IN	HTTP/1.1 200 OK Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF17) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=60473 Date: Tue, 27 Aug 2024 22:52:33 GMT Connection: close X-CID: 2

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
7	192.168.2.4	49751	3.72.140.173	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:34 UTC	622	OUT	GET /confirm.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:52:34 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Tue, 27 Aug 2024 22:52:34 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6B0MY3R4Q3223NRAA5KQRR9 Content-Length: 50 Connection: close
2024-08-27 22:52:34 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 36 42 30 4d 59 33 52 34 51 33 32 32 33 4e 52 41 41 35 4b 51 52 52 39 Data Ascii: Not Found - Request ID: 01J6B0MY3R4Q3223NRAA5KQRR9

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
8	192.168.2.4	49750	3.72.140.173	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:34 UTC	619	OUT	GET /full.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:52:34 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Tue, 27 Aug 2024 22:52:34 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6B0MY3ZWPNJH96KN2JZXT9H Content-Length: 50 Connection: close
2024-08-27 22:52:34 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 36 42 30 4d 59 33 5a 57 50 4e 4a 48 39 36 4b 4e 32 4a 5a 58 54 39 48 Data Ascii: Not Found - Request ID: 01J6B0MY3ZWPNJH96KN2JZXT9H

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
9	192.168.2.4	49752	3.72.140.173	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:35 UTC	624	OUT	GET /eye-close.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:52:35 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Tue, 27 Aug 2024 22:52:35 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6B0MZB6D74NKYVPXZXHTK63 Content-Length: 50 Connection: close
2024-08-27 22:52:35 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 36 42 30 4d 5a 42 36 44 37 34 4e 4b 59 56 50 58 5a 58 48 54 4b 36 33 Data Ascii: Not Found - Request ID: 01J6B0MZB6D74NKYVPXZXHTK63

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
10	192.168.2.4	49753	3.72.140.173	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:35 UTC	619	OUT	GET /tada.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:52:36 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Tue, 27 Aug 2024 22:52:36 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6B0N0JEVTXE04R0DA4CJADH Content-Length: 50 Connection: close
2024-08-27 22:52:36 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 36 42 30 4e 30 4a 45 56 54 58 45 30 34 52 30 44 41 34 43 4a 41 44 48 Data Ascii: Not Found - Request ID: 01J6B0N0JEVTXE04R0DA4CJADH

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
11	192.168.2.4	49754	3.72.140.173	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:37 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:52:37 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Tue, 27 Aug 2024 22:52:37 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6B0N1ED3VZGWN9Z42AEFFSV Content-Length: 50 Connection: close
2024-08-27 22:52:37 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 36 42 30 4e 31 45 44 33 56 5a 47 57 4e 39 5a 34 32 41 45 46 46 53 56 Data Ascii: Not Found - Request ID: 01J6B0N1ED3VZGWN9Z42AEFFSV

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
12	192.168.2.4	49758	151.101.130.137	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:37 UTC	358	OUT	GET /jquery-3.1.1.min.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:52:37 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 86709 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-152b5" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Date: Tue, 27 Aug 2024 22:52:37 GMT Age: 921663 X-Served-By: cache-lga21947-LGA, cache-ewr-kewr1740064-EWR X-Cache: HIT, HIT X-Cache-Hits: 2578, 1 X-Timer: S1724799158.667204,VS0,VE1 Vary: Accept-Encoding
2024-08-27 22:52:37 UTC	16384	IN	Data Raw: 2f 2a 21 20 6a 51 75 65 72 79 20 76 33 2e 31 2e 31 20 7c 20 28 63 29 20 6a 51 75 65 72 79 20 46 6f 75 6e 64 61 74 69 6f 6e 20 7c 20 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 20 2a 2f 0a 21 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 22 75 73 65 20 73 74 72 69 63 74 22 3b 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 26 26 22 6f 62 6a 65 63 74 22 3d 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 61 2e 64 6f 63 75 6d 65 6e 74 3f 62 28 61 2c 21 30 29 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 21 61 2e 64 6f 63 75 6d 65 6e 74 29 74 68 72 6f 77 20 6e 65 77 20 45 72 72 6f 72 28 22 6a 51 75 65 72 79 20 72 65 71 75 69 72 65 73 20 61 20 77 69 6e 64 6f 77 20 77 Data Ascii: /! jQuery v3.1.1 \| (c) jQuery Foundation \| jquery.org/license /!function(a,b){"use strict";"object"==typeof module&&"object"==typeof module.exports?module.exports=a.document?b(a,!0):function(a){if(!a.document)throw new Error("jQuery requires a window w
2024-08-27 22:52:37 UTC	16384	IN	Data Raw: 3d 3d 3d 6d 2e 6e 6f 64 65 54 79 70 65 29 26 26 2b 2b 74 26 26 28 73 26 26 28 6c 3d 6d 5b 75 5d 7c 7c 28 6d 5b 75 5d 3d 7b 7d 29 2c 6b 3d 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 7c 7c 28 6c 5b 6d 2e 75 6e 69 71 75 65 49 44 5d 3d 7b 7d 29 2c 6b 5b 61 5d 3d 5b 77 2c 74 5d 29 2c 6d 3d 3d 3d 62 29 29 62 72 65 61 6b 3b 72 65 74 75 72 6e 20 74 2d 3d 65 2c 74 3d 3d 3d 64 7c 7c 74 25 64 3d 3d 3d 30 26 26 74 2f 64 3e 3d 30 7d 7d 7d 2c 50 53 45 55 44 4f 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 29 7b 76 61 72 20 63 2c 65 3d 64 2e 70 73 65 75 64 6f 73 5b 61 5d 7c 7c 64 2e 73 65 74 46 69 6c 74 65 72 73 5b 61 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 5d 7c 7c 67 61 2e 65 72 72 6f 72 28 22 75 6e 73 75 70 70 6f 72 74 65 64 20 70 73 65 75 64 6f 3a 20 22 2b 61 29 3b 72 65 74 Data Ascii: ===m.nodeType)&&++t&&(s&&(l=m[u]\|\|(m[u]={}),k=l[m.uniqueID]\|\|(l[m.uniqueID]={}),k[a]=[w,t]),m===b))break;return t-=e,t===d\|\|t%d===0&&t/d>=0}}},PSEUDO:function(a,b){var c,e=d.pseudos[a]\|\|d.setFilters[a.toLowerCase()]\|\|ga.error("unsupported pseudo: "+a);ret
2024-08-27 22:52:37 UTC	16384	IN	Data Raw: 64 3d 31 2c 55 2e 70 72 6f 74 6f 74 79 70 65 3d 7b 63 61 63 68 65 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3b 72 65 74 75 72 6e 20 62 7c 7c 28 62 3d 7b 7d 2c 54 28 61 29 26 26 28 61 2e 6e 6f 64 65 54 79 70 65 3f 61 5b 74 68 69 73 2e 65 78 70 61 6e 64 6f 5d 3d 62 3a 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 61 2c 74 68 69 73 2e 65 78 70 61 6e 64 6f 2c 7b 76 61 6c 75 65 3a 62 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 7d 29 29 29 2c 62 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 2c 62 2c 63 29 7b 76 61 72 20 64 2c 65 3d 74 68 69 73 2e 63 61 63 68 65 28 61 29 3b 69 66 28 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 29 65 5b 72 2e 63 61 6d 65 6c 43 61 73 65 Data Ascii: d=1,U.prototype={cache:function(a){var b=a[this.expando];return b\|\|(b={},T(a)&&(a.nodeType?a[this.expando]=b:Object.defineProperty(a,this.expando,{value:b,configurable:!0}))),b},set:function(a,b,c){var d,e=this.cache(a);if("string"==typeof b)e[r.camelCase
2024-08-27 22:52:37 UTC	16384	IN	Data Raw: 65 26 26 39 21 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 28 74 68 69 73 2e 74 65 78 74 43 6f 6e 74 65 6e 74 3d 61 29 7d 29 7d 2c 6e 75 6c 6c 2c 61 2c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 29 7d 2c 61 70 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 74 68 69 73 2c 61 72 67 75 6d 65 6e 74 73 2c 66 75 6e 63 74 69 6f 6e 28 61 29 7b 69 66 28 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 31 31 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 7c 7c 39 3d 3d 3d 74 68 69 73 2e 6e 6f 64 65 54 79 70 65 29 7b 76 61 72 20 62 3d 44 61 28 74 68 69 73 2c 61 29 3b 62 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 61 29 7d 7d 29 7d 2c 70 72 65 70 65 6e 64 3a 66 75 6e 63 74 69 6f 6e 28 29 7b 72 65 74 75 72 6e 20 49 61 28 Data Ascii: e&&9!==this.nodeType\|\|(this.textContent=a)})},null,a,arguments.length)},append:function(){return Ia(this,arguments,function(a){if(1===this.nodeType\|\|11===this.nodeType\|\|9===this.nodeType){var b=Da(this,a);b.appendChild(a)}})},prepend:function(){return Ia(
2024-08-27 22:52:37 UTC	16384	IN	Data Raw: 73 2e 73 65 6c 65 63 74 65 64 3d 7b 67 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 72 65 74 75 72 6e 20 62 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 6e 75 6c 6c 7d 2c 73 65 74 3a 66 75 6e 63 74 69 6f 6e 28 61 29 7b 76 61 72 20 62 3d 61 2e 70 61 72 65 6e 74 4e 6f 64 65 3b 62 26 26 28 62 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 2c 62 2e 70 61 72 65 6e 74 4e 6f 64 65 26 26 62 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 73 65 6c 65 63 74 65 64 49 6e 64 65 78 29 7d 7d 29 2c 72 2e 65 61 63 68 28 5b 22 74 61 62 49 6e 64 65 78 22 2c 22 72 65 61 64 4f 6e 6c 79 22 2c 22 6d 61 78 4c 65 6e 67 74 68 22 2c 22 63 65 6c 6c 53 70 61 63 Data Ascii: s.selected={get:function(a){var b=a.parentNode;return b&&b.parentNode&&b.parentNode.selectedIndex,null},set:function(a){var b=a.parentNode;b&&(b.selectedIndex,b.parentNode&&b.parentNode.selectedIndex)}}),r.each(["tabIndex","readOnly","maxLength","cellSpac
2024-08-27 22:52:37 UTC	4789	IN	Data Raw: 3d 62 2e 6a 73 6f 6e 70 21 3d 3d 21 31 26 26 28 52 62 2e 74 65 73 74 28 62 2e 75 72 6c 29 3f 22 75 72 6c 22 3a 22 73 74 72 69 6e 67 22 3d 3d 74 79 70 65 6f 66 20 62 2e 64 61 74 61 26 26 30 3d 3d 3d 28 62 2e 63 6f 6e 74 65 6e 74 54 79 70 65 7c 7c 22 22 29 2e 69 6e 64 65 78 4f 66 28 22 61 70 70 6c 69 63 61 74 69 6f 6e 2f 78 2d 77 77 77 2d 66 6f 72 6d 2d 75 72 6c 65 6e 63 6f 64 65 64 22 29 26 26 52 62 2e 74 65 73 74 28 62 2e 64 61 74 61 29 26 26 22 64 61 74 61 22 29 3b 69 66 28 68 7c 7c 22 6a 73 6f 6e 70 22 3d 3d 3d 62 2e 64 61 74 61 54 79 70 65 73 5b 30 5d 29 72 65 74 75 72 6e 20 65 3d 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 3d 72 2e 69 73 46 75 6e 63 74 69 6f 6e 28 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 61 63 6b 29 3f 62 2e 6a 73 6f 6e 70 43 61 6c 6c 62 Data Ascii: =b.jsonp!==!1&&(Rb.test(b.url)?"url":"string"==typeof b.data&&0===(b.contentType\|\|"").indexOf("application/x-www-form-urlencoded")&&Rb.test(b.data)&&"data");if(h\|\|"jsonp"===b.dataTypes[0])return e=b.jsonpCallback=r.isFunction(b.jsonpCallback)?b.jsonpCallb

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
13	192.168.2.4	49757	151.101.130.137	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:37 UTC	354	OUT	GET /jquery-3.3.1.js HTTP/1.1 Host: code.jquery.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:52:37 UTC	612	IN	HTTP/1.1 200 OK Connection: close Content-Length: 271751 Server: nginx Content-Type: application/javascript; charset=utf-8 Last-Modified: Fri, 18 Oct 1991 12:00:00 GMT ETag: "28feccc0-42587" Cache-Control: public, max-age=31536000, stale-while-revalidate=604800 Access-Control-Allow-Origin: * Cross-Origin-Resource-Policy: cross-origin Via: 1.1 varnish, 1.1 varnish Accept-Ranges: bytes Age: 1257926 Date: Tue, 27 Aug 2024 22:52:37 GMT X-Served-By: cache-lga21980-LGA, cache-ewr-kewr1740055-EWR X-Cache: HIT, HIT X-Cache-Hits: 53, 0 X-Timer: S1724799158.667455,VS0,VE1 Vary: Accept-Encoding
2024-08-27 22:52:37 UTC	1378	IN	Data Raw: 2f 2a 21 0a 20 2a 20 6a 51 75 65 72 79 20 4a 61 76 61 53 63 72 69 70 74 20 4c 69 62 72 61 72 79 20 76 33 2e 33 2e 31 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 49 6e 63 6c 75 64 65 73 20 53 69 7a 7a 6c 65 2e 6a 73 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 73 69 7a 7a 6c 65 6a 73 2e 63 6f 6d 2f 0a 20 2a 0a 20 2a 20 43 6f 70 79 72 69 67 68 74 20 4a 53 20 46 6f 75 6e 64 61 74 69 6f 6e 20 61 6e 64 20 6f 74 68 65 72 20 63 6f 6e 74 72 69 62 75 74 6f 72 73 0a 20 2a 20 52 65 6c 65 61 73 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 6c 69 63 65 6e 73 65 0a 20 2a 20 68 74 74 70 73 3a 2f 2f 6a 71 75 65 72 79 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 0a 20 2a 0a 20 2a 20 44 61 74 65 3a 20 32 30 31 38 2d 30 31 2d 32 30 54 31 37 Data Ascii: /! jQuery JavaScript Library v3.3.1 * https://jquery.com/ * * Includes Sizzle.js * https://sizzlejs.com/ * * Copyright JS Foundation and other contributors * Released under the MIT license * https://jquery.org/license * * Date: 2018-01-20T17
2024-08-27 22:52:37 UTC	1378	IN	Data Raw: 2e 20 42 75 74 20 61 73 20 6f 66 20 6a 51 75 65 72 79 20 33 2e 30 20 28 32 30 31 36 29 2c 20 73 74 72 69 63 74 20 6d 6f 64 65 20 73 68 6f 75 6c 64 20 62 65 20 63 6f 6d 6d 6f 6e 0a 2f 2f 20 65 6e 6f 75 67 68 20 74 68 61 74 20 61 6c 6c 20 73 75 63 68 20 61 74 74 65 6d 70 74 73 20 61 72 65 20 67 75 61 72 64 65 64 20 69 6e 20 61 20 74 72 79 20 62 6c 6f 63 6b 2e 0a 22 75 73 65 20 73 74 72 69 63 74 22 3b 0a 0a 76 61 72 20 61 72 72 20 3d 20 5b 5d 3b 0a 0a 76 61 72 20 64 6f 63 75 6d 65 6e 74 20 3d 20 77 69 6e 64 6f 77 2e 64 6f 63 75 6d 65 6e 74 3b 0a 0a 76 61 72 20 67 65 74 50 72 6f 74 6f 20 3d 20 4f 62 6a 65 63 74 2e 67 65 74 50 72 6f 74 6f 74 79 70 65 4f 66 3b 0a 0a 76 61 72 20 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 3b 0a 0a 76 61 72 20 63 6f 6e 63 Data Ascii: . But as of jQuery 3.0 (2016), strict mode should be common// enough that all such attempts are guarded in a try block."use strict";var arr = [];var document = window.document;var getProto = Object.getPrototypeOf;var slice = arr.slice;var conc
2024-08-27 22:52:37 UTC	1378	IN	Data Raw: 63 2e 68 65 61 64 2e 61 70 70 65 6e 64 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 20 73 63 72 69 70 74 20 29 3b 0a 09 7d 0a 0a 0a 66 75 6e 63 74 69 6f 6e 20 74 6f 54 79 70 65 28 20 6f 62 6a 20 29 20 7b 0a 09 69 66 20 28 20 6f 62 6a 20 3d 3d 20 6e 75 6c 6c 20 29 20 7b 0a 09 09 72 65 74 75 72 6e 20 6f 62 6a 20 2b 20 22 22 3b 0a 09 7d 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 41 6e 64 72 6f 69 64 20 3c 3d 32 2e 33 20 6f 6e 6c 79 20 28 66 75 6e 63 74 69 6f 6e 69 73 68 20 52 65 67 45 78 70 29 0a 09 72 65 74 75 72 6e 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 6f 62 6a 65 63 74 22 20 7c 7c 20 74 79 70 65 6f 66 20 6f 62 6a 20 3d 3d 3d 20 22 66 75 6e 63 74 69 6f 6e 22 20 3f 0a 09 Data Ascii: c.head.appendChild( script ).parentNode.removeChild( script );}function toType( obj ) {if ( obj == null ) {return obj + "";}// Support: Android <=2.3 only (functionish RegExp)return typeof obj === "object" \|\| typeof obj === "function" ?
2024-08-27 22:52:37 UTC	1378	IN	Data Raw: 7b 0a 09 09 09 72 65 74 75 72 6e 20 73 6c 69 63 65 2e 63 61 6c 6c 28 20 74 68 69 73 20 29 3b 0a 09 09 7d 0a 0a 09 09 2f 2f 20 52 65 74 75 72 6e 20 6a 75 73 74 20 74 68 65 20 6f 6e 65 20 65 6c 65 6d 65 6e 74 20 66 72 6f 6d 20 74 68 65 20 73 65 74 0a 09 09 72 65 74 75 72 6e 20 6e 75 6d 20 3c 20 30 20 3f 20 74 68 69 73 5b 20 6e 75 6d 20 2b 20 74 68 69 73 2e 6c 65 6e 67 74 68 20 5d 20 3a 20 74 68 69 73 5b 20 6e 75 6d 20 5d 3b 0a 09 7d 2c 0a 0a 09 2f 2f 20 54 61 6b 65 20 61 6e 20 61 72 72 61 79 20 6f 66 20 65 6c 65 6d 65 6e 74 73 20 61 6e 64 20 70 75 73 68 20 69 74 20 6f 6e 74 6f 20 74 68 65 20 73 74 61 63 6b 0a 09 2f 2f 20 28 72 65 74 75 72 6e 69 6e 67 20 74 68 65 20 6e 65 77 20 6d 61 74 63 68 65 64 20 65 6c 65 6d 65 6e 74 20 73 65 74 29 0a 09 70 75 73 68 53 Data Ascii: {return slice.call( this );}// Return just the one element from the setreturn num < 0 ? this[ num + this.length ] : this[ num ];},// Take an array of elements and push it onto the stack// (returning the new matched element set)pushS
2024-08-27 22:52:37 UTC	1378	IN	Data Raw: 65 72 79 2e 66 6e 2e 65 78 74 65 6e 64 20 3d 20 66 75 6e 63 74 69 6f 6e 28 29 20 7b 0a 09 76 61 72 20 6f 70 74 69 6f 6e 73 2c 20 6e 61 6d 65 2c 20 73 72 63 2c 20 63 6f 70 79 2c 20 63 6f 70 79 49 73 41 72 72 61 79 2c 20 63 6c 6f 6e 65 2c 0a 09 09 74 61 72 67 65 74 20 3d 20 61 72 67 75 6d 65 6e 74 73 5b 20 30 20 5d 20 7c 7c 20 7b 7d 2c 0a 09 09 69 20 3d 20 31 2c 0a 09 09 6c 65 6e 67 74 68 20 3d 20 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 2c 0a 09 09 64 65 65 70 20 3d 20 66 61 6c 73 65 3b 0a 0a 09 2f 2f 20 48 61 6e 64 6c 65 20 61 20 64 65 65 70 20 63 6f 70 79 20 73 69 74 75 61 74 69 6f 6e 0a 09 69 66 20 28 20 74 79 70 65 6f 66 20 74 61 72 67 65 74 20 3d 3d 3d 20 22 62 6f 6f 6c 65 61 6e 22 20 29 20 7b 0a 09 09 64 65 65 70 20 3d 20 74 61 72 67 65 74 3b Data Ascii: ery.fn.extend = function() {var options, name, src, copy, copyIsArray, clone,target = arguments[ 0 ] \|\| {},i = 1,length = arguments.length,deep = false;// Handle a deep copy situationif ( typeof target === "boolean" ) {deep = target;
2024-08-27 22:52:37 UTC	1378	IN	Data Raw: 65 2c 20 63 6f 70 79 20 29 3b 0a 0a 09 09 09 09 2f 2f 20 44 6f 6e 27 74 20 62 72 69 6e 67 20 69 6e 20 75 6e 64 65 66 69 6e 65 64 20 76 61 6c 75 65 73 0a 09 09 09 09 7d 20 65 6c 73 65 20 69 66 20 28 20 63 6f 70 79 20 21 3d 3d 20 75 6e 64 65 66 69 6e 65 64 20 29 20 7b 0a 09 09 09 09 09 74 61 72 67 65 74 5b 20 6e 61 6d 65 20 5d 20 3d 20 63 6f 70 79 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 0a 09 7d 0a 0a 09 2f 2f 20 52 65 74 75 72 6e 20 74 68 65 20 6d 6f 64 69 66 69 65 64 20 6f 62 6a 65 63 74 0a 09 72 65 74 75 72 6e 20 74 61 72 67 65 74 3b 0a 7d 3b 0a 0a 6a 51 75 65 72 79 2e 65 78 74 65 6e 64 28 20 7b 0a 0a 09 2f 2f 20 55 6e 69 71 75 65 20 66 6f 72 20 65 61 63 68 20 63 6f 70 79 20 6f 66 20 6a 51 75 65 72 79 20 6f 6e 20 74 68 65 20 70 61 67 65 0a 09 65 Data Ascii: e, copy );// Don't bring in undefined values} else if ( copy !== undefined ) {target[ name ] = copy;}}}}// Return the modified objectreturn target;};jQuery.extend( {// Unique for each copy of jQuery on the pagee
2024-08-27 22:52:37 UTC	1378	IN	Data Raw: 09 09 44 4f 4d 45 76 61 6c 28 20 63 6f 64 65 20 29 3b 0a 09 7d 2c 0a 0a 09 65 61 63 68 3a 20 66 75 6e 63 74 69 6f 6e 28 20 6f 62 6a 2c 20 63 61 6c 6c 62 61 63 6b 20 29 20 7b 0a 09 09 76 61 72 20 6c 65 6e 67 74 68 2c 20 69 20 3d 20 30 3b 0a 0a 09 09 69 66 20 28 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 29 20 7b 0a 09 09 09 6c 65 6e 67 74 68 20 3d 20 6f 62 6a 2e 6c 65 6e 67 74 68 3b 0a 09 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 2e 63 61 6c 6c 28 20 6f 62 6a 5b 20 69 20 5d 2c 20 69 2c 20 6f 62 6a 5b 20 69 20 5d 20 29 20 3d 3d 3d 20 66 61 6c 73 65 20 29 20 7b 0a 09 09 09 09 09 62 72 65 61 6b 3b 0a 09 09 09 09 7d 0a 09 09 09 7d 0a 09 09 7d 20 Data Ascii: DOMEval( code );},each: function( obj, callback ) {var length, i = 0;if ( isArrayLike( obj ) ) {length = obj.length;for ( ; i < length; i++ ) {if ( callback.call( obj[ i ], i, obj[ i ] ) === false ) {break;}}}
2024-08-27 22:52:37 UTC	1378	IN	Data Raw: 62 61 63 6b 45 78 70 65 63 74 20 3d 20 21 69 6e 76 65 72 74 3b 0a 0a 09 09 2f 2f 20 47 6f 20 74 68 72 6f 75 67 68 20 74 68 65 20 61 72 72 61 79 2c 20 6f 6e 6c 79 20 73 61 76 69 6e 67 20 74 68 65 20 69 74 65 6d 73 0a 09 09 2f 2f 20 74 68 61 74 20 70 61 73 73 20 74 68 65 20 76 61 6c 69 64 61 74 6f 72 20 66 75 6e 63 74 69 6f 6e 0a 09 09 66 6f 72 20 28 20 3b 20 69 20 3c 20 6c 65 6e 67 74 68 3b 20 69 2b 2b 20 29 20 7b 0a 09 09 09 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 3d 20 21 63 61 6c 6c 62 61 63 6b 28 20 65 6c 65 6d 73 5b 20 69 20 5d 2c 20 69 20 29 3b 0a 09 09 09 69 66 20 28 20 63 61 6c 6c 62 61 63 6b 49 6e 76 65 72 73 65 20 21 3d 3d 20 63 61 6c 6c 62 61 63 6b 45 78 70 65 63 74 20 29 20 7b 0a 09 09 09 09 6d 61 74 63 68 65 73 2e 70 75 73 68 28 20 65 Data Ascii: backExpect = !invert;// Go through the array, only saving the items// that pass the validator functionfor ( ; i < length; i++ ) {callbackInverse = !callback( elems[ i ], i );if ( callbackInverse !== callbackExpect ) {matches.push( e
2024-08-27 22:52:37 UTC	1378	IN	Data Raw: 2c 20 6e 61 6d 65 20 29 20 7b 0a 09 63 6c 61 73 73 32 74 79 70 65 5b 20 22 5b 6f 62 6a 65 63 74 20 22 20 2b 20 6e 61 6d 65 20 2b 20 22 5d 22 20 5d 20 3d 20 6e 61 6d 65 2e 74 6f 4c 6f 77 65 72 43 61 73 65 28 29 3b 0a 7d 20 29 3b 0a 0a 66 75 6e 63 74 69 6f 6e 20 69 73 41 72 72 61 79 4c 69 6b 65 28 20 6f 62 6a 20 29 20 7b 0a 0a 09 2f 2f 20 53 75 70 70 6f 72 74 3a 20 72 65 61 6c 20 69 4f 53 20 38 2e 32 20 6f 6e 6c 79 20 28 6e 6f 74 20 72 65 70 72 6f 64 75 63 69 62 6c 65 20 69 6e 20 73 69 6d 75 6c 61 74 6f 72 29 0a 09 2f 2f 20 60 69 6e 60 20 63 68 65 63 6b 20 75 73 65 64 20 74 6f 20 70 72 65 76 65 6e 74 20 4a 49 54 20 65 72 72 6f 72 20 28 67 68 2d 32 31 34 35 29 0a 09 2f 2f 20 68 61 73 4f 77 6e 20 69 73 6e 27 74 20 75 73 65 64 20 68 65 72 65 20 64 75 65 20 74 Data Ascii: , name ) {class2type[ "[object " + name + "]" ] = name.toLowerCase();} );function isArrayLike( obj ) {// Support: real iOS 8.2 only (not reproducible in simulator)// `in` check used to prevent JIT error (gh-2145)// hasOwn isn't used here due t
2024-08-27 22:52:37 UTC	1378	IN	Data Raw: 6e 73 74 61 6e 63 65 20 6d 65 74 68 6f 64 73 0a 09 68 61 73 4f 77 6e 20 3d 20 28 7b 7d 29 2e 68 61 73 4f 77 6e 50 72 6f 70 65 72 74 79 2c 0a 09 61 72 72 20 3d 20 5b 5d 2c 0a 09 70 6f 70 20 3d 20 61 72 72 2e 70 6f 70 2c 0a 09 70 75 73 68 5f 6e 61 74 69 76 65 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 70 75 73 68 20 3d 20 61 72 72 2e 70 75 73 68 2c 0a 09 73 6c 69 63 65 20 3d 20 61 72 72 2e 73 6c 69 63 65 2c 0a 09 2f 2f 20 55 73 65 20 61 20 73 74 72 69 70 70 65 64 2d 64 6f 77 6e 20 69 6e 64 65 78 4f 66 20 61 73 20 69 74 27 73 20 66 61 73 74 65 72 20 74 68 61 6e 20 6e 61 74 69 76 65 0a 09 2f 2f 20 68 74 74 70 73 3a 2f 2f 6a 73 70 65 72 66 2e 63 6f 6d 2f 74 68 6f 72 2d 69 6e 64 65 78 6f 66 2d 76 73 2d 66 6f 72 2f 35 0a 09 69 6e 64 65 78 4f 66 20 3d 20 66 75 6e Data Ascii: nstance methodshasOwn = ({}).hasOwnProperty,arr = [],pop = arr.pop,push_native = arr.push,push = arr.push,slice = arr.slice,// Use a stripped-down indexOf as it's faster than native// https://jsperf.com/thor-indexof-vs-for/5indexOf = fun

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
14	192.168.2.4	49759	104.17.24.14	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:37 UTC	388	OUT	GET /ajax/libs/popper.js/1.12.9/umd/popper.min.js HTTP/1.1 Host: cdnjs.cloudflare.com Connection: keep-alive User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 Accept: / Sec-Fetch-Site: none Sec-Fetch-Mode: cors Sec-Fetch-Dest: empty Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:52:37 UTC	961	IN	HTTP/1.1 200 OK Date: Tue, 27 Aug 2024 22:52:37 GMT Content-Type: application/javascript; charset=utf-8 Transfer-Encoding: chunked Connection: close Access-Control-Allow-Origin: * Cache-Control: public, max-age=30672000 ETag: W/"5eb03fa9-4af4" Last-Modified: Mon, 04 May 2020 16:15:37 GMT cf-cdnjs-via: cfworker/kv Cross-Origin-Resource-Policy: cross-origin Timing-Allow-Origin: * X-Content-Type-Options: nosniff CF-Cache-Status: HIT Age: 1240160 Expires: Sun, 17 Aug 2025 22:52:37 GMT Report-To: {"endpoints":[{"url":"https:\/\/a.nel.cloudflare.com\/report\/v4?s=18Iiv1wlejzIrWRmyN0yReg%2FWnIvSz8mOAvLYLJsrY%2FL6D6biUC9mrvJ80HfYd3O9D%2FJU%2BV7Ct8Mi5rzdowARlTsp2Ccc8Vrj7REWcdZnj0xhKZLpRYiauklHJxQm0gzuf7meetw"}],"group":"cf-nel","max_age":604800} NEL: {"success_fraction":0.01,"report_to":"cf-nel","max_age":604800} Strict-Transport-Security: max-age=15780000 Server: cloudflare CF-RAY: 8b9fa20f6e544295-EWR alt-svc: h3=":443"; ma=86400
2024-08-27 22:52:37 UTC	408	IN	Data Raw: 34 61 66 34 0d 0a 2f 2a 0a 20 43 6f 70 79 72 69 67 68 74 20 28 43 29 20 46 65 64 65 72 69 63 6f 20 5a 69 76 6f 6c 6f 20 32 30 31 37 0a 20 44 69 73 74 72 69 62 75 74 65 64 20 75 6e 64 65 72 20 74 68 65 20 4d 49 54 20 4c 69 63 65 6e 73 65 20 28 6c 69 63 65 6e 73 65 20 74 65 72 6d 73 20 61 72 65 20 61 74 20 68 74 74 70 3a 2f 2f 6f 70 65 6e 73 6f 75 72 63 65 2e 6f 72 67 2f 6c 69 63 65 6e 73 65 73 2f 4d 49 54 29 2e 0a 20 2a 2f 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 27 6f 62 6a 65 63 74 27 3d 3d 74 79 70 65 6f 66 20 65 78 70 6f 72 74 73 26 26 27 75 6e 64 65 66 69 6e 65 64 27 21 3d 74 79 70 65 6f 66 20 6d 6f 64 75 6c 65 3f 6d 6f 64 75 6c 65 2e 65 78 70 6f 72 74 73 3d 74 28 29 3a 27 66 75 6e 63 74 69 6f 6e 27 3d 3d 74 79 70 65 6f 66 20 64 65 66 69 6e 65 26 Data Ascii: 4af4/* Copyright (C) Federico Zivolo 2017 Distributed under the MIT License (license terms are at http://opensource.org/licenses/MIT). */(function(e,t){'object'==typeof exports&&'undefined'!=typeof module?module.exports=t():'function'==typeof define&
2024-08-27 22:52:37 UTC	1369	IN	Data Raw: 3d 3d 65 2e 6e 6f 64 65 54 79 70 65 29 72 65 74 75 72 6e 5b 5d 3b 76 61 72 20 6f 3d 67 65 74 43 6f 6d 70 75 74 65 64 53 74 79 6c 65 28 65 2c 6e 75 6c 6c 29 3b 72 65 74 75 72 6e 20 74 3f 6f 5b 74 5d 3a 6f 7d 66 75 6e 63 74 69 6f 6e 20 6f 28 65 29 7b 72 65 74 75 72 6e 27 48 54 4d 4c 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 3f 65 3a 65 2e 70 61 72 65 6e 74 4e 6f 64 65 7c 7c 65 2e 68 6f 73 74 7d 66 75 6e 63 74 69 6f 6e 20 6e 28 65 29 7b 69 66 28 21 65 29 72 65 74 75 72 6e 20 64 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 73 77 69 74 63 68 28 65 2e 6e 6f 64 65 4e 61 6d 65 29 7b 63 61 73 65 27 48 54 4d 4c 27 3a 63 61 73 65 27 42 4f 44 59 27 3a 72 65 74 75 72 6e 20 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 62 6f 64 79 3b 63 61 73 65 27 23 64 6f 63 75 6d 65 6e Data Ascii: ==e.nodeType)return[];var o=getComputedStyle(e,null);return t?o[t]:o}function o(e){return'HTML'===e.nodeName?e:e.parentNode\|\|e.host}function n(e){if(!e)return document.body;switch(e.nodeName){case'HTML':case'BODY':return e.ownerDocument.body;case'#documen
2024-08-27 22:52:37 UTC	1369	IN	Data Raw: 29 7b 76 61 72 20 6f 3d 32 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 26 26 76 6f 69 64 20 30 21 3d 3d 61 72 67 75 6d 65 6e 74 73 5b 32 5d 26 26 61 72 67 75 6d 65 6e 74 73 5b 32 5d 2c 69 3d 61 28 74 2c 27 74 6f 70 27 29 2c 6e 3d 61 28 74 2c 27 6c 65 66 74 27 29 2c 72 3d 6f 3f 2d 31 3a 31 3b 72 65 74 75 72 6e 20 65 2e 74 6f 70 2b 3d 69 2a 72 2c 65 2e 62 6f 74 74 6f 6d 2b 3d 69 2a 72 2c 65 2e 6c 65 66 74 2b 3d 6e 2a 72 2c 65 2e 72 69 67 68 74 2b 3d 6e 2a 72 2c 65 7d 66 75 6e 63 74 69 6f 6e 20 66 28 65 2c 74 29 7b 76 61 72 20 6f 3d 27 78 27 3d 3d 3d 74 3f 27 4c 65 66 74 27 3a 27 54 6f 70 27 2c 69 3d 27 4c 65 66 74 27 3d 3d 6f 3f 27 52 69 67 68 74 27 3a 27 42 6f 74 74 6f 6d 27 3b 72 65 74 75 72 6e 20 70 61 72 73 65 46 6c 6f 61 74 28 65 5b 27 62 6f 72 Data Ascii: ){var o=2<arguments.length&&void 0!==arguments[2]&&arguments[2],i=a(t,'top'),n=a(t,'left'),r=o?-1:1;return e.top+=ir,e.bottom+=ir,e.left+=nr,e.right+=nr,e}function f(e,t){var o='x'===t?'Left':'Top',i='Left'==o?'Right':'Bottom';return parseFloat(e['bor
2024-08-27 22:52:37 UTC	1369	IN	Data Raw: 6f 70 3a 70 2e 74 6f 70 2d 73 2e 74 6f 70 2d 66 2c 6c 65 66 74 3a 70 2e 6c 65 66 74 2d 73 2e 6c 65 66 74 2d 6d 2c 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 29 3b 69 66 28 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 30 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 30 2c 21 69 26 26 72 29 7b 76 61 72 20 75 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 54 6f 70 2c 31 30 29 2c 62 3d 70 61 72 73 65 46 6c 6f 61 74 28 61 2e 6d 61 72 67 69 6e 4c 65 66 74 2c 31 30 29 3b 68 2e 74 6f 70 2d 3d 66 2d 75 2c 68 2e 62 6f 74 74 6f 6d 2d 3d 66 2d 75 2c 68 2e 6c 65 66 74 2d 3d 6d 2d 62 2c 68 2e 72 69 67 68 74 2d 3d 6d 2d 62 2c 68 2e 6d 61 72 67 69 6e 54 6f 70 3d 75 2c 68 2e 6d 61 72 67 69 6e 4c 65 66 74 3d 62 7d 72 65 74 75 Data Ascii: op:p.top-s.top-f,left:p.left-s.left-m,width:p.width,height:p.height});if(h.marginTop=0,h.marginLeft=0,!i&&r){var u=parseFloat(a.marginTop,10),b=parseFloat(a.marginLeft,10);h.top-=f-u,h.bottom-=f-u,h.left-=m-b,h.right-=m-b,h.marginTop=u,h.marginLeft=b}retu
2024-08-27 22:52:37 UTC	1369	IN	Data Raw: 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 2c 62 6f 74 74 6f 6d 3a 7b 77 69 64 74 68 3a 70 2e 77 69 64 74 68 2c 68 65 69 67 68 74 3a 70 2e 62 6f 74 74 6f 6d 2d 74 2e 62 6f 74 74 6f 6d 7d 2c 6c 65 66 74 3a 7b 77 69 64 74 68 3a 74 2e 6c 65 66 74 2d 70 2e 6c 65 66 74 2c 68 65 69 67 68 74 3a 70 2e 68 65 69 67 68 74 7d 7d 2c 64 3d 4f 62 6a 65 63 74 2e 6b 65 79 73 28 73 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 73 65 28 7b 6b 65 79 3a 65 7d 2c 73 5b 65 5d 2c 7b 61 72 65 61 3a 45 28 73 5b 65 5d 29 7d 29 7d 29 2e 73 6f 72 74 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 72 65 74 75 72 6e 20 74 2e 61 72 65 61 2d 65 2e 61 72 65 61 7d 29 2c 61 3d 64 2e 66 69 6c 74 65 72 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 76 61 72 20 74 3d 65 2e 77 Data Ascii: ight:p.height},bottom:{width:p.width,height:p.bottom-t.bottom},left:{width:t.left-p.left,height:p.height}},d=Object.keys(s).map(function(e){return se({key:e},s[e],{area:E(s[e])})}).sort(function(e,t){return t.area-e.area}),a=d.filter(function(e){var t=e.w
2024-08-27 22:52:37 UTC	1369	IN	Data Raw: 6c 65 2e 77 61 72 6e 28 27 60 6d 6f 64 69 66 69 65 72 2e 66 75 6e 63 74 69 6f 6e 60 20 69 73 20 64 65 70 72 65 63 61 74 65 64 2c 20 75 73 65 20 60 6d 6f 64 69 66 69 65 72 2e 66 6e 60 21 27 29 3b 76 61 72 20 69 3d 74 5b 27 66 75 6e 63 74 69 6f 6e 27 5d 7c 7c 74 2e 66 6e 3b 74 2e 65 6e 61 62 6c 65 64 26 26 65 28 69 29 26 26 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 70 6f 70 70 65 72 29 2c 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 3d 63 28 6f 2e 6f 66 66 73 65 74 73 2e 72 65 66 65 72 65 6e 63 65 29 2c 6f 3d 69 28 6f 2c 74 29 29 7d 29 2c 6f 7d 66 75 6e 63 74 69 6f 6e 20 4e 28 29 7b 69 66 28 21 74 68 69 73 2e 73 74 61 74 65 2e 69 73 44 65 73 74 72 6f 79 65 64 29 7b 76 61 72 20 65 3d 7b 69 6e 73 74 Data Ascii: le.warn('`modifier.function` is deprecated, use `modifier.fn`!');var i=t['function']\|\|t.fn;t.enabled&&e(i)&&(o.offsets.popper=c(o.offsets.popper),o.offsets.reference=c(o.offsets.reference),o=i(o,t))}),o}function N(){if(!this.state.isDestroyed){var e={inst
2024-08-27 22:52:37 UTC	1369	IN	Data Raw: 68 69 73 2e 6f 70 74 69 6f 6e 73 2e 72 65 6d 6f 76 65 4f 6e 44 65 73 74 72 6f 79 26 26 74 68 69 73 2e 70 6f 70 70 65 72 2e 70 61 72 65 6e 74 4e 6f 64 65 2e 72 65 6d 6f 76 65 43 68 69 6c 64 28 74 68 69 73 2e 70 6f 70 70 65 72 29 2c 74 68 69 73 7d 66 75 6e 63 74 69 6f 6e 20 42 28 65 29 7b 76 61 72 20 74 3d 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 3b 72 65 74 75 72 6e 20 74 3f 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 77 69 6e 64 6f 77 7d 66 75 6e 63 74 69 6f 6e 20 48 28 65 2c 74 2c 6f 2c 69 29 7b 76 61 72 20 72 3d 27 42 4f 44 59 27 3d 3d 3d 65 2e 6e 6f 64 65 4e 61 6d 65 2c 70 3d 72 3f 65 2e 6f 77 6e 65 72 44 6f 63 75 6d 65 6e 74 2e 64 65 66 61 75 6c 74 56 69 65 77 3a 65 3b 70 2e 61 64 64 45 76 65 6e 74 4c 69 73 74 65 6e 65 72 28 74 2c 6f 2c 7b 70 61 73 Data Ascii: his.options.removeOnDestroy&&this.popper.parentNode.removeChild(this.popper),this}function B(e){var t=e.ownerDocument;return t?t.defaultView:window}function H(e,t,o,i){var r='BODY'===e.nodeName,p=r?e.ownerDocument.defaultView:e;p.addEventListener(t,o,{pas
2024-08-27 22:52:37 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6f 3d 3d 3d 74 7d 29 2c 6e 3d 21 21 69 26 26 65 2e 73 6f 6d 65 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 65 2e 6e 61 6d 65 3d 3d 3d 6f 26 26 65 2e 65 6e 61 62 6c 65 64 26 26 65 2e 6f 72 64 65 72 3c 69 2e 6f 72 64 65 72 7d 29 3b 69 66 28 21 6e 29 7b 76 61 72 20 72 3d 27 60 27 2b 74 2b 27 60 27 3b 63 6f 6e 73 6f 6c 65 2e 77 61 72 6e 28 27 60 27 2b 6f 2b 27 60 27 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 73 20 72 65 71 75 69 72 65 64 20 62 79 20 27 2b 72 2b 27 20 6d 6f 64 69 66 69 65 72 20 69 6e 20 6f 72 64 65 72 20 74 6f 20 77 6f 72 6b 2c 20 62 65 20 73 75 72 65 20 74 6f 20 69 6e 63 6c 75 64 65 20 69 74 20 62 65 66 6f 72 65 20 27 2b 72 2b 27 21 27 29 7d 72 65 74 75 72 6e 20 6e 7d 66 75 6e 63 74 69 6f 6e 20 4b 28 65 29 7b 72 65 Data Ascii: turn o===t}),n=!!i&&e.some(function(e){return e.name===o&&e.enabled&&e.order<i.order});if(!n){var r='`'+t+'`';console.warn('`'+o+'`'+' modifier is required by '+r+' modifier in order to work, be sure to include it before '+r+'!')}return n}function K(e){re
2024-08-27 22:52:37 UTC	1369	IN	Data Raw: 74 75 72 6e 27 27 3d 3d 3d 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 26 26 2d 31 21 3d 3d 5b 27 2b 27 2c 27 2d 27 5d 2e 69 6e 64 65 78 4f 66 28 74 29 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 3d 74 2c 70 3d 21 30 2c 65 29 3a 70 3f 28 65 5b 65 2e 6c 65 6e 67 74 68 2d 31 5d 2b 3d 74 2c 70 3d 21 31 2c 65 29 3a 65 2e 63 6f 6e 63 61 74 28 74 29 7d 2c 5b 5d 29 2e 6d 61 70 28 66 75 6e 63 74 69 6f 6e 28 65 29 7b 72 65 74 75 72 6e 20 56 28 65 2c 6e 2c 74 2c 6f 29 7d 29 7d 29 2c 61 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 65 2c 74 29 7b 65 2e 66 6f 72 45 61 63 68 28 66 75 6e 63 74 69 6f 6e 28 6f 2c 69 29 7b 55 28 6f 29 26 26 28 6e 5b 74 5d 2b 3d 6f 2a 28 27 2d 27 3d 3d 3d 65 5b 69 2d 31 5d 3f 2d 31 3a 31 29 29 7d 29 7d 29 2c 6e 7d 66 75 6e 63 74 69 6f Data Ascii: turn''===e[e.length-1]&&-1!==['+','-'].indexOf(t)?(e[e.length-1]=t,p=!0,e):p?(e[e.length-1]+=t,p=!1,e):e.concat(t)},[]).map(function(e){return V(e,n,t,o)})}),a.forEach(function(e,t){e.forEach(function(o,i){U(o)&&(n[t]+=o*('-'===e[i-1]?-1:1))})}),n}functio
2024-08-27 22:52:37 UTC	1369	IN	Data Raw: 74 75 72 6e 20 6f 26 26 65 28 74 2e 70 72 6f 74 6f 74 79 70 65 2c 6f 29 2c 69 26 26 65 28 74 2c 69 29 2c 74 7d 7d 28 29 2c 70 65 3d 66 75 6e 63 74 69 6f 6e 28 65 2c 74 2c 6f 29 7b 72 65 74 75 72 6e 20 74 20 69 6e 20 65 3f 4f 62 6a 65 63 74 2e 64 65 66 69 6e 65 50 72 6f 70 65 72 74 79 28 65 2c 74 2c 7b 76 61 6c 75 65 3a 6f 2c 65 6e 75 6d 65 72 61 62 6c 65 3a 21 30 2c 63 6f 6e 66 69 67 75 72 61 62 6c 65 3a 21 30 2c 77 72 69 74 61 62 6c 65 3a 21 30 7d 29 3a 65 5b 74 5d 3d 6f 2c 65 7d 2c 73 65 3d 4f 62 6a 65 63 74 2e 61 73 73 69 67 6e 7c 7c 66 75 6e 63 74 69 6f 6e 28 65 29 7b 66 6f 72 28 76 61 72 20 74 2c 6f 3d 31 3b 6f 3c 61 72 67 75 6d 65 6e 74 73 2e 6c 65 6e 67 74 68 3b 6f 2b 2b 29 66 6f 72 28 76 61 72 20 69 20 69 6e 20 74 3d 61 72 67 75 6d 65 6e 74 73 5b Data Ascii: turn o&&e(t.prototype,o),i&&e(t,i),t}}(),pe=function(e,t,o){return t in e?Object.defineProperty(e,t,{value:o,enumerable:!0,configurable:!0,writable:!0}):e[t]=o,e},se=Object.assign\|\|function(e){for(var t,o=1;o<arguments.length;o++)for(var i in t=arguments[

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
15	192.168.2.4	49764	184.28.90.27	443

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:37 UTC	239	OUT	GET /fs/windows/config.json HTTP/1.1 Connection: Keep-Alive Accept: / Accept-Encoding: identity If-Unmodified-Since: Tue, 16 May 2017 22:58:00 GMT Range: bytes=0-2147483646 User-Agent: Microsoft BITS/7.8 Host: fs.microsoft.com
2024-08-27 22:52:37 UTC	514	IN	HTTP/1.1 200 OK ApiVersion: Distribute 1.1 Content-Disposition: attachment; filename=config.json; filename*=UTF-8''config.json Content-Type: application/octet-stream ETag: "0x64667F707FF07D62B733DBCB79EFE3855E6886C9975B0C0B467D46231B3FA5E7" Last-Modified: Tue, 16 May 2017 22:58:00 GMT Server: ECAcc (lpl/EF06) X-CID: 11 X-Ms-ApiVersion: Distribute 1.2 X-Ms-Region: prod-weu-z1 Cache-Control: public, max-age=64383 Date: Tue, 27 Aug 2024 22:52:37 GMT Content-Length: 55 Connection: close X-CID: 2
2024-08-27 22:52:37 UTC	55	IN	Data Raw: 7b 22 66 6f 6e 74 53 65 74 55 72 69 22 3a 22 66 6f 6e 74 73 65 74 2d 32 30 31 37 2d 30 34 2e 6a 73 6f 6e 22 2c 22 62 61 73 65 55 72 69 22 3a 22 66 6f 6e 74 73 22 7d Data Ascii: {"fontSetUri":"fontset-2017-04.json","baseUri":"fonts"}

Session ID	Source IP	Source Port	Destination IP	Destination Port	PID	Process
16	192.168.2.4	49765	3.72.140.173	443	5408	C:\Program Files\Google\Chrome\Application\chrome.exe

Timestamp	Bytes transferred	Direction	Data
2024-08-27 22:52:38 UTC	619	OUT	GET /icon.png HTTP/1.1 Host: bestfilltype.netlify.app Connection: keep-alive sec-ch-ua: "Google Chrome";v="117", "Not;A=Brand";v="8", "Chromium";v="117" sec-ch-ua-mobile: ?0 User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/117.0.0.0 Safari/537.36 sec-ch-ua-platform: "Windows" Accept: image/avif,image/webp,image/apng,image/svg+xml,image/,/*;q=0.8 Sec-Fetch-Site: cross-site Sec-Fetch-Mode: no-cors Sec-Fetch-Dest: image Referer: https://pub-78727057140540a199a7e00bf238a392.r2.dev/ Accept-Encoding: gzip, deflate, br Accept-Language: en-US,en;q=0.9
2024-08-27 22:52:38 UTC	313	IN	HTTP/1.1 404 Not Found Cache-Control: private, max-age=0 Content-Type: text/plain; charset=utf-8 Date: Tue, 27 Aug 2024 22:52:38 GMT Server: Netlify Strict-Transport-Security: max-age=31536000; includeSubDomains; preload X-Nf-Request-Id: 01J6B0N2DN8BYZQGHH6RKMTRB4 Content-Length: 50 Connection: close
2024-08-27 22:52:38 UTC	50	IN	Data Raw: 4e 6f 74 20 46 6f 75 6e 64 20 2d 20 52 65 71 75 65 73 74 20 49 44 3a 20 30 31 4a 36 42 30 4e 32 44 4e 38 42 59 5a 51 47 48 48 36 52 4b 4d 54 52 42 34 Data Ascii: Not Found - Request ID: 01J6B0N2DN8BYZQGHH6RKMTRB4

Statistics

CPU Usage

Click to jump to process

Memory Usage

Click to jump to process

Behavior

Click to jump to process

System Behavior

Analysis Process: chrome.exePID: 3980, Parent PID: 3244

General

Target ID:	0
Start time:	18:52:23
Start date:	27/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --start-maximized "about:blank"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 5408, Parent PID: 3980

General

Target ID:	2
Start time:	18:52:26
Start date:	27/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" --type=utility --utility-sub-type=network.mojom.NetworkService --lang=en-US --service-sandbox-type=none --mojo-platform-channel-handle=2292 --field-trial-handle=2172,i,10854123595240179640,12163993913165256168,262144 --disable-features=OptimizationGuideModelDownloading,OptimizationHints,OptimizationHintsFetching,OptimizationTargetPrediction /prefetch:8
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	false

Show Windows behavior

Chronological Activities

Analysis Process: chrome.exePID: 6448, Parent PID: 3244

General

Target ID:	3
Start time:	18:52:28
Start date:	27/08/2024
Path:	C:\Program Files\Google\Chrome\Application\chrome.exe
Wow64 process (32bit):	false
Commandline:	"C:\Program Files\Google\Chrome\Application\chrome.exe" "http://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html"
Imagebase:	0x7ff76e190000
File size:	3'242'272 bytes
MD5 hash:	45DE480806D1B5D462A7DDE4DCEFC4E4
Has elevated privileges:	true
Has administrator privileges:	true
Programmed in:	C, C++ or other language
Reputation:	low
Has exited:	true

Show Windows behavior

Chronological Activities

Disassembly

⊘No disassembly

Description:	Adversaries may inject code into processes in order to evade process-based defenses as well as possibly elevate privileges. Process injection is a method of executing arbitrary code in the address space of a separate live process. Running code in the context of another process may allow access to the process's memory, system/network resources, and possibly elevated privileges. Execution via process injection may also evade detection from security products since the execution is masked under a legitimate process.
Tactics:	Defense Evasion, Privilege Escalation
Data Sources:	File: File Metadata, File: File Modification, Module: Module Load, Process: OS API Execution, Process: Process Access, Process: Process Metadata, Process: Process Modification
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may employ a known encryption algorithm to conceal command and control traffic rather than relying on any inherent protections provided by a communication protocol. Despite the use of a secure algorithm, these implementations may be vulnerable to reverse engineering if secret keys are encoded and/or generated within malware samples/configuration files.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may use an OSI non-application layer protocol for communication between host and C2 server or among infected hosts within a network. The list of possible protocols is extensive.Specific examples include use of network layer protocols, such as the Internet Control Message Protocol (ICMP), transport layer protocols, such as the User Datagram Protocol (UDP), session layer protocols, such as Socket Secure (SOCKS), as well as redirected/tunneled protocols, such as Serial over LAN (SOL).
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Network, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may communicate using OSI application layer protocols to avoid detection/network filtering by blending in with existing traffic. Commands to the remote system, and often the results of those commands, will be embedded within the protocol traffic between the client and server.
Tactics:	Command and Control
Data Sources:	Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Description:	Adversaries may transfer tools or other files from an external system into a compromised environment. Tools or files may be copied from an external adversary-controlled system to the victim network through the command and control channel or through alternate protocols such as ftp . Once present, adversaries may also transfer/spread tools between victim devices within a compromised environment (i.e. Lateral Tool Transfer ).
Tactics:	Command and Control
Data Sources:	Command: Command Execution, File: File Creation, Network Traffic: Network Connection Creation, Network Traffic: Network Traffic Content, Network Traffic: Network Traffic Flow
Platforms:	Linux, macOS, Windows
Url:	Open detailed description by Mitre

Behavior Section

Behavior Chronological

Disassembly

Uncategorized

Graph

Loading Joe Sandbox Report ...

Warning!

Windows Analysis Report http://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html

Overview

General Information

Detection

Signatures

Classification

Process Tree

Malware Configuration

Yara Signatures

Sigma Signatures

Suricata Signatures

Joe Sandbox Signatures

AV Detection

Phishing

Compliance

Networking

System Summary

Mitre Att&ck Matrix

Behavior Graph

Screenshots

Thumbnails

Antivirus, Machine Learning and Genetic Malware Detection

Initial Sample

Dropped Files

Unpacked PE Files

Domains

URLs

Domains and IPs

Contacted Domains

Contacted URLs

URLs from Memory and Binaries

World Map of Contacted IPs

Public IPs

Private

General Information

Warnings

Simulations

Behavior and APIs

Joe Sandbox View / Context

IPs

Domains

ASNs

JA3 Fingerprints

Dropped Files

Created / dropped Files

Chrome Cache Entry: 121

Chrome Cache Entry: 122

Chrome Cache Entry: 123

Chrome Cache Entry: 124

Chrome Cache Entry: 125

Chrome Cache Entry: 126

Chrome Cache Entry: 127

Chrome Cache Entry: 128

Chrome Cache Entry: 129

Chrome Cache Entry: 130

Chrome Cache Entry: 131

Chrome Cache Entry: 132

Chrome Cache Entry: 133

Chrome Cache Entry: 134

Chrome Cache Entry: 135

Chrome Cache Entry: 136

Chrome Cache Entry: 137

Chrome Cache Entry: 138

Chrome Cache Entry: 139

Chrome Cache Entry: 140

Static File Info

Network Behavior

Network Port Distribution

TCP Packets

UDP Packets

DNS Queries

DNS Answers

HTTP Request Dependency Graph

Windows Analysis Report
http://pub-78727057140540a199a7e00bf238a392.r2.dev/index.html